User Guide SURFboard® SBG6700-AC Wireless Cable Modem Gateway Firmware: SBG6X82-8.6.0.
© 2014 ARRIS Enterprises, Inc. All rights reserved. No part of this publication may be reproduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without written permission from ARRIS Enterprises, Inc. (“ARRIS”). ARRIS reserves the right to revise this publication and to make changes in content from time to time without obligation on the part of ARRIS to provide notification of such revision or change.
Safety and Regulatory Information i Safety and Regulatory Information IMPORTANT SAFETY INSTRUCTIONS Read This Before You Begin — When using your equipment, basic safety precautions should always be followed to reduce the risk of fire, electric shock, and injury to persons, including the following: • Read all of the instructions listed here and/or in the user manual before you operate this device. Give particular attention to all safety precautions. Retain the instructions for future reference.
Safety and Regulatory Information • Upon completion of any service or repairs to this device, ask the service technician to perform safety checks to determine that the device is in safe operating condition. • Do not open the device. Do not perform any servicing other than that contained in the installation and troubleshooting instructions. Refer all servicing to qualified service personnel. • This device should not be used in an environment that exceeds 104º F (40º C).
Safety and Regulatory Information High power radars are allocated as primary users (meaning they have priority) of 5250-5350 MHz and 5650-5850 MHz frequency bands. These radars could cause interference and/or damage to License Exempt–Local Area Network (LE-LAN) devices. IC RADIATION EXPOSURE STATEMENT IMPORTANT NOTE: This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment.
Safety and Regulatory Information SECURITY WARNING: This device allows you to create a wireless network. Wireless network connections may be accessible by unauthorized users. For more information on how to protect your network, see the Change the Default User Name and Password for instructions or visit the ARRIS Support website: www.arrisi.com/consumer. CARING FOR THE ENVIRONMENT BY RECYCLING When you see this symbol on a ARRIS product, do not dispose of the product with residential or commercial waste.
Contents Contents Safety and Regulatory Information ..................................................................................................................... i Getting Started .................................................................................................................................................... 1 In The Box .................................................................................................................................................................
Contents Set Up Firewall Protection .......................................................................................................................................................................... 33 Set Up Parental Controls ............................................................................................................................................................................. 34 Set Up Port Triggers ...............................................................................
Contents Tables Table 1: SBG6700-AC Package Contents ................................................................................................................................................. 1 Table 2: SBG6700-AC Front Panel LED Icons.......................................................................................................................................... 3 Table 3: SBG6700-AC Rear Panel Ports & Connectors ..............................................................................
Contents Figure 13 – Windows Taskbar Icons ........................................................................................................................................................ 14 Figure 14 – Sample Available Wireless Networks Screen ............................................................................................................... 15 Figure 15 –Network Connection Window ...........................................................................................................
Contents Figure 53 – Advanced Create Port Triggers Screen .......................................................................................................................... 62 Figure 54 – Advanced Port Triggers Screen ......................................................................................................................................... 62 Figure 55 – Commonly Used Port Forwarding Port Numbers List .....................................................................................
Getting Started Getting Started 1 The ARRIS Motorola SURFboard® SBG6700-AC Wireless Cable Modem Gateway is an all in one wireless DOCSIS 3.0® cable modem and two-port Ethernet router device. It provides secure ultra high-speed wired and wireless broadband connections for your computer and other wireless network devices on your home or small business network. The SBG6700-AC also includes a Wi-Fi® Pairing button option for quick and easy connections for your wireless devices.
Getting Started Item Description SBG6700-AC Quick Start Guide Provides basic information for installing the gateway and setting up a secure wireless connection on your home network.
Product Overview Product Overview 2 Front Panel Figure 1 – SBG6700-AC Front View Table 2: SBG6700-AC Front Panel LED Icons LED Icon Blinking On (Solid) Not applicable – no LED on button. Not applicable – no LED on button. Note: The Wireless LED will blink Amber to indicate the WPS Pairing process is in progress. Not applicable – icon does not blink. Green: Power is properly connected. Scanning for a downstream (receive) channel connection. Green: Non-bonded downstream channel is connected.
Product Overview LED Icon Blinking On (Solid) Scanning for an upstream (send) channel connection. Green: Non-bonded upstream channel is connected. Blue*: High-speed Internet connection with bonded upstream channels. Scanning for an Internet connection. Green: Startup process completed. Green: Wi-Fi enabled with encrypted wireless data activity. Green: Any of the following applies: Amber: WPS Pairing process is underway between the SBG6700-AC and a WPS-enabled wireless device. • 2.
Product Overview Rear Panel Figure 2 – SBG6700-AC Rear View Table 3: SBG6700-AC Rear Panel Ports & Connectors Port Name 1 Description Two one-gigabit Ethernet ports for RJ-45 cable connections: • Green - LED is ON - Indicates a device connection is detected • Green - LED is Blinking - Indicates data traffic is in progress • Amber - LED is ON – Indicates 10/100 Base-T connection(s) • Amber - LED is OFF – Indicates GigE connection(s) 2 Reset button Recessed button can be used to reboot the gateway or re
Product Overview Port Name Description 3 Coaxial cable connector 4 100 - 240VAC Power connector WARNING! To avoid any damage to your SBG6700-AC Gateway, only use the power adapter and cord provided in the box. Gateway Label Figure 3 – Sample SBG6700-AC Gateway Label The gateway label is located on the bottom of the SBG6700-AC. It contains specific gateway ID information that you may need when contacting your service provider or ARRIS Technical Support.
Installing the Gateway Installing the Gateway 3 This product is for indoor use only. Do not route the Ethernet cable(s) outside of the building. Exposure of the cables to lightning could create a safety hazard and damage the product. Connect the SBG6700-AC to Your Computer Before installing the SBG6700-AC: • Check with your service provider to ensure broadband cable service is available in your area.
Installing the Gateway 1. Check that a coaxial cable is already connected to a cable wall outlet or RF splitter (optional). 2. Connect the other end of the coaxial cable to the Cable connector on the SBG6700-AC. Use your hand to tighten the connectors to avoid damaging them. 3. Connect the Ethernet cable to an available Ethernet port on the SBG6700-AC. 4. Connect the other end of the Ethernet cable to the Ethernet port on your computer.
Setting Up a Wireless Network Connection Setting Up a Wireless Network Connection 4 It is highly recommended that you first verify that your computer can connect to the Internet using an Ethernet connection before configuring your wireless network. You must already have access to an Internet service in your home before setting up a wireless network connection. Also, make sure your computer and the SBG6700-AC are connected through an Ethernet connection.
Setting Up a Wireless Network Connection Figure 5 – SBG6700-AC Quick Start Wizard Opening Screen Note: The ARRIS logo shown here and on other screenshots throughout this user guide represents the company logo for the manufacturer of the SURFboard SBG6700-AC Wireless Cable Modem Gateway. Figure 6 – SBG6700-AC Quick Start Wizard Welcome Screen SURFboard® SBG6700-AC Wireless Cable Modem Gateway • User Guide 365-095-25781 x.
Setting Up a Wireless Network Connection 6. Click Next to open the Wi-Fi Network Name & Passphrase screen. Figure 7 – SBG6700-AC Quick Start Wizard-Step 2 of 6 Screen 7. Do one of the following to set up your wireless network name in the Network Name (SSID) field: ο Keep the default network name or SSID (listed on the SBG6700-AC Gateway label). ο Enter a name of your choice for your wireless network. Your new network name must contain from one to 32 alphanumeric characters.
Setting Up a Wireless Network Connection Figure 8 – SBG6700-AC Quick Start Wizard-Step 3 of 6 Screen 10. Click Next to open the Security Configuration screen. Figure 9 – SBG6700-AC Quick Start Wizard-Step 4 of 6 Screen The wizard configures WPA2-PSK as the default wireless security code. See Set Up Your Wireless Primary Network to change the wireless security code for your wireless home network. 11. Click Next to open the Review Settings screen and confirm your wireless network settings (see Figure 10).
Setting Up a Wireless Network Connection Figure 10 – SBG6700-AC Quick Start Wizard-Step 5 of 6 Screen 12. Click Apply to accept the wireless network settings and open the Saving Settings screen or click Previous to go back and change your wireless network name and/or password. Figure 11 – SBG6700-AC Quick Start Wizard-Saving Settings Screen Wait for your wireless network settings to be saved. When it is complete, the Settings Applied screen will open.
Setting Up a Wireless Network Connection Figure 12 – SBG6700-AC Quick Start Wizard-Step 6 of 6 Screen 13. Click Exit on the Settings Applied screen. Note: You can click Print for a printout of your wireless network settings for later use for logging onto your wireless network or changing your wireless network settings.
Setting Up a Wireless Network Connection Figure 14 – Sample Available Wireless Networks Screen 2. Locate and left-click on the SBG6700-AC wireless network name or SSID (for example, SBG6700AC#####) for your SBG6700-AC from the list of available wireless networks. The default SSID is located on the gateway label on the bottom of your SBG6700-AC. Note: You have the option to customize your wireless network name or SSID after completing your initial wireless network connection.
Setting Up a Wireless Network Connection Figure 15 –Network Connection Window 5. Select Hide characters and then click OK to encrypt your network Security key or network password. Figure 16 –Network Connection-Create Network Password Window SURFboard® SBG6700-AC Wireless Cable Modem Gateway • User Guide 365-095-25781 x.
Setting Up a Wireless Network Connection Connect Using the Windows Control Panel 1. From the Windows taskbar, click Start button and then click Control Panel. 2. Click Network and Sharing Center to open the Network and Sharing Center window. Figure 17 – Control Panel-Network and Sharing Center Window 3. Click Manage wireless networks under Control Panel Home to open the Manage Wireless Networks window. 4. Click Add to open the Manually Connect to a Wireless Network window.
Setting Up a Wireless Network Connection Figure 18 – Manually Connect to a Wireless Network Window 5. Click Manually create a network profile to open another Manually Connect to a Wireless Network window. Figure 19 – Manually Connect to a Wireless Network Window SURFboard® SBG6700-AC Wireless Cable Modem Gateway • User Guide 365-095-25781 x.
Setting Up a Wireless Network Connection 6. Enter your configured wireless network name or SSID (SBG6700AC-#####) for your SBG6700-AC in the Network name field. The SSID name is located on the gateway label on the bottom of your SBG6700-AC. Note: You have the option to customize your wireless network name or SSID after completing your initial wireless network connection. However, you must use the default SSID listed on the gateway label for the initial gateway installation.
Setting Up a Wireless Network Connection Test Your Wireless Network Connection Perform the following connectivity test to check that the SBG6700-AC and other wireless devices are connected to your wireless home network: 1. If the wireless devices connected to the wireless network, disconnect the Ethernet cable from your computer and the SBG6700-AC. 2. Open a web browser on your computer. 3. Type a valid URL (www.arrisi.com) in the address bar, and then click or press Enter.
Managing Your Gateway and Connected Networks Managing Your Gateway and Connected Networks 5 Use the SBG6700-AC Web Manager to view and monitor the configuration settings and operational status of your gateway. You can also configure your network connections and wireless security settings. See Protecting & Monitoring Your Wireless Network for more information.
Managing Your Gateway and Connected Networks Figure 20 – SBG6700-AC Main Screen Gateway Web Manager Menu Options Main Menu Buttons The SBG6700-AC main menu buttons are displayed along the top of the SBG6700-AC Web Manager screen. To display the drop-down submenu options, click the menu button. Figure 21 – SBG6700-AC Web Manager Main Menu Buttons SURFboard® SBG6700-AC Wireless Cable Modem Gateway • User Guide 365-095-25781 x.
Managing Your Gateway and Connected Networks Main Menu Links The SBG6700-AC main menu and related submenu option links are also displayed along the bottom of the SBG6700-AC Web Manager screen. To open a submenu option, click the link.
Managing Your Gateway and Connected Networks Get Help You can choose any of the following three options to obtain help information for any SBG6700-AC Web Manager function. General help information is available for any SBG6700-AC menu option when you click the Help button on that page. • • • Overview Help Help Links Field Level Help Overview Help General help information is available when you click Help, Overview on the SBG6700-AC Main Menu.
Managing Your Gateway and Connected Networks Help Links Provides a concise list of your gateway configuration settings with applicable links for easy access when you click Help, About on the SBG6700-AC Main Menu. The link opens the related configuration screen. Figure 24 – Help Links Screen Field Level Help More specific help information is available throughout the web manager for field level help when you click Help located to the right of the applicable field (see sample screenshot below).
Managing Your Gateway and Connected Networks View the Gateway Product Information The Status Product Information screen displays general product information, including the software (or firmware) version and the current network connection status of the gateway. To open the Status Product Information page: 1. Click Status on the SBG6700-AC Main Menu. 2. Click Product Information from the Status submenu options. 3. Click the Refresh button (F5) in your web browser to reload the information on the screen.
Managing Your Gateway and Connected Networks Figure 26 – SBG6700-AC Status Connection Screen Back Up Your Gateway Configuration You can save a backup copy of the current gateway configuration settings to your local computer. You can use the backup file to restore your custom gateway settings in the event that you made changes that you no longer want. We highly recommend that you perform the gateway configuration backup using the SBG6700-AC default login username and password.
Managing Your Gateway and Connected Networks To create a back up copy of your gateway settings: 1. Click Basic on the SBG6700-AC Main Menu. 2. Click Backup and Restore from the Basic submenu options. Figure 27 – SBG6700-AC Backup and Restore Screen 3. Click Backup and then click OK at the “Select ‘Save’ when prompted“ message. 4. Click Save to create a backup file of your SBG6700-AC configuration. A download is complete message will display. Note: GatewaySettings.
Managing Your Gateway and Connected Networks WARNING! This process also deletes any custom gateway configurations you may have already created. We recommend that you create a backup copy of your gateway configuration before resetting the gateway. See Back Up Your Gateway Configuration for more information. From the SBG6700-AC Web Manager, do the following to open the Status Security screen: 1. Click Status on the SBG6700-AC Main Menu. 2. Click Security from the Status submenu options.
Managing Your Gateway and Connected Networks Exit the SBG6700-AC Web Manager To log out and close the SBG6700-AC Web Manager: • Click Logout located in the upper right corner of the screen above the SBG6700-AC Main Menu. SURFboard® SBG6700-AC Wireless Cable Modem Gateway • User Guide 365-095-25781 x.
Protecting & Monitoring Your Wireless Network Protecting & Monitoring Your Wireless Network 6 After you have successfully connected the SBG6700-AC gateway and your wireless devices, you should configure the gateway to protect your wireless network from unwanted and unauthorized access by any wireless devices within range of your wireless network.
Protecting & Monitoring Your Wireless Network 5. Click the Status menu button and then click Security to display the Status Security screen. 6. Confirm that Change Username is displayed in the drop-down selection box. 7. Complete each field entry, but note the following: ο All fields (for example, Current Username & Current Password) are case-sensitive. Note: For first time logons, the current username is admin and the current password is password. ο Make sure No is selected under Restore Factory Defaults.
Protecting & Monitoring Your Wireless Network 10. Complete each field entry, but note the following: ο All fields are case-sensitive. ο Username is your new user name, if you changed it. ο Make sure No is selected for Restore Factory Defaults. ο Find a secure place to write down and keep your new user name and password. 11. Click Apply to update your password. Set Up Firewall Protection You can set up firewall filters and firewall alert notifications on your wireless home network.
Protecting & Monitoring Your Wireless Network Note: Selecting Off will disable firewall protection on your home network. Your computer(s) and other Ethernet-enabled devices on your network will be at risk for possible attacks from viruses and hackers. 3. Select each Web filter that you want to set for the firewall and then click Apply. Set Up Parental Controls You can set up the following Parental Controls on your home network: • Allow or block access to specific Internet sites.
Protecting & Monitoring Your Wireless Network Figure 33 – Firewall Parental Control Screen 5. Enter a name for the user profile that you want to create in the Description field. 6. Enter the 12-digit (hexadecimal) MAC address of the device for which you are creating Parental Controls in the MAC Address field. 7. Enter the web address of the Internet site that you want to block or access. 8. Enter the Starting port number of the in the Start Port field. 9.
Protecting & Monitoring Your Wireless Network Set Up Port Triggers You can use Port Triggers to configure dynamic triggers to specific devices on the LAN. This allows special applications that require specific port numbers with bi-directional traffic to function properly. Applications such as video conferencing, voice, gaming, and some messaging program features may require these special settings.
Protecting & Monitoring Your Wireless Network 11. Click Apply to create your port triggers. 12. Repeat steps 3 thru 11 for each additional port trigger that you want to create. Set Up Port Forwarding You can use Port Forwarding to set up a computer or other network device on your home network (LAN) to be accessible to computers or other remote network devices on the Internet.
Protecting & Monitoring Your Wireless Network ο Enter a specific remote IP address of your choice in the External IP Address field and then enter the specific port numbers in the Start and End Port fields (select a specific port from the Commonly Forwarded Ports drop-down list or see Figure 37 for the list). This allows incoming data traffic on the specified ports from only one remote IP address.
Protecting & Monitoring Your Wireless Network Set Up the DMZ Host WARNING! The gaming DMZ host is not protected by the SBG6700-AC gateway firewall. It is exposed to the Internet and thus vulnerable to attacks or hacking from any computer on the Internet. Consider carefully before configuring a device to be in the DMZ. You can configure one computer on your home network to be the DMZ Host.
Protecting & Monitoring Your Wireless Network Figure 39 – Firewall Remote Log Screen 2. Select all desired event types that you want to monitor. This will activate the SysLog monitoring feature. 3. Enter the last digits from 10 to 254 of the SysLog server’s IP address. Note: Normally, the IP address of this SysLog server is hard-coded so that the address always agrees with the entry on this page. 4. Click Apply. SURFboard® SBG6700-AC Wireless Cable Modem Gateway • User Guide 365-095-25781 x.
Creating Wi-Fi Networks 7 Creating Wi-Fi Networks The SBG6700-AC supports a secure method for setting up multiple access points on your wireless home network. This enables you to designate a guest network for visitors, friends, or other family members without giving them access to your files or other devices on your primary network. You have the option to create a PIN or pushbutton method for logging onto your wireless network. Set Up Your Wireless Primary Network 1.
Creating Wi-Fi Networks Figure 40 – 2.4 GHz & 5 GHz Wireless Primary Network Screens 4. Click the 2.4 GHz or 5 GHz tab to select the frequency range for your wireless network. 5. Select Enabled or Disabled in the Wireless Network field to turn ON or OFF wireless networking on your wireless network. 6. Keep the default network name (also listed on the gateway label) or enter a name of your choice for your wireless primary network in the Network Name (SSID) field.
Creating Wi-Fi Networks 9. Choose the wireless network encryption type in the Encryption field: ο AES – Advanced Encryption Standard: Provides the strongest encryption (recommended) ο AES+TKIP – Advanced Encryption Standard and Temporal Key Integrity Protocol Allows both AES and TKIP-capable clients to connect to your wireless network 10. Enter any combination of characters and words for your network password in the Passphrase field. 11.
Creating Wi-Fi Networks Set Up a Wireless Guest Network Note: This feature may be disabled on your SBG6700-AC. Some service providers or cable operators do not allow for secondary (or guest) wireless networks on their gateway devices. 1. Open a web browser and log onto the SBG6700-AC to open the SBG6700-AC Web Manager. See Start the Gateway Web Manager for more information. 2. Click Wireless on the SBG6700-AC Main Menu bar. 3. Click Guest Network on the Wireless submenu options.
Creating Wi-Fi Networks Figure 42 – 2.4 GHz & 5 GHz Wireless Guest Network Screens 4. Click the 2.4 GHz or 5 GHz tab to select the frequency range for your wireless network. 5. Select the guest network from the Selected Guest Network drop-down list. 6. Select Enabled or Disabled in the Guest Network field to turn ON or OFF the selected wireless guest network. 7. Keep the default guest network name or enter a new name of your choice for your guest network in the Guest Network Name (SSID) field. 8.
Creating Wi-Fi Networks 15. Select Enabled or Disabled in the DHCPv6 Server field to allow the DHCP server to send leases to the guest network clients from the guest network lease pool you specified earlier. Note: If the DHCP server is disabled, you must assign static IP addresses to the guest network STAs. 16.
Creating Wi-Fi Networks 3. Click Primary Network Settings from the Wireless submenu options to open the Wi-Fi Network screen. Figure 43 – Change Your 2.4 GHz & 5 GHz Network Name (SSID) and Password Screens 4. Click the 2.4 GHz or 5 GHz tab to select the frequency range for your wireless network. 5. Make sure Enabled is selected in the Wireless Network field to turn ON wireless networking on your home network. 6.
Creating Wi-Fi Networks Change the Wireless Channel Network interference may occur at any time when using a wireless network connection. This may be caused by other wireless access points that are using the same wireless channel as your SBG6700-AC and are also operating within close proximity in your home. When experiencing wireless network interference, changing the wireless channel on the SBG6700-AC can improve network connectivity (or signal strength) and avoid network interference.
Creating Wi-Fi Networks Note: For 2.4 GHz Wi-Fi networks, it is recommended to use Channel 6 or 11, if it is not listed as the Current Channel. In the Wi-Fi spectrum, there are multiple channels that overlap and thus degrade wireless network performance. Channels 1, 6, and 11 are used for better network performance and stability because they do not overlap. 6. Click Apply. SURFboard® SBG6700-AC Wireless Cable Modem Gateway • User Guide 365-095-25781 x.
Troubleshooting Tips Troubleshooting Tips A If the solutions listed in this section do not solve your problem, contact your service provider for assistance. Your service provider may ask for the status of the LEDs as described in Front Panel LED Icons and Error Conditions. You may have to reset the SBG6700-AC gateway configuration to its original factory settings if the gateway is not functioning properly.
Troubleshooting Tips Gateway Problem Possible Solution Wireless devices cannot send or receive data • If the problem still persists after checking the coaxial cable and Ethernet connections and your IP address, check the Wireless Security Mode setting on the Wireless Primary Network screen. • If you enabled WPA and configured a passphrase on the gateway, be sure each affected wireless client has the identical passphrase. If this does not solve the problem, check if the wireless client supports WPA.
Gateway Configuration Screen Definitions Gateway Configuration Screen Definitions B This section provides detailed field definitions for the following ARRIS SBG6700-AC network configuration screens: • • • Basic Advanced Firewall Basic Screens Setup You can use the SBG6700-AC Basic Setup screen to configure basic SBG6700-AC IP-related configuration data, including your local network configuration, and WAN connection type.
Gateway Configuration Screen Definitions Table 7: Basic Setup Screen-Field Descriptions Field Description Gateway Mode Sets the device mode: Routed: Allows the internal network devices to use IP addresses from the WAN subnet. Bridged: Disables the network address and port translation settings on the gateway. Primary Network Only Mode Sets the device mode for the primary network only: Routed: Allows the internal network devices to use IP addresses from the WAN subnet.
Gateway Configuration Screen Definitions Figure 46 – Basic DHCP Screen Table 8: Basic DHCP Screen-Field Descriptions Field Description LAN Network Configuration LAN IP Address The IP address of the SBG6700-AC on your home network (LAN). Enable DHCP Server Checkmark Enabled to enable the SBG6700-AC DHCP Server. Uncheck Enabled to disable the SBG6700-AC DHCP Server. Starting Local Address Enter the starting IP address to be assigned by the SBG6700-AC DHCP server to clients in dotted-decimal format.
Gateway Configuration Screen Definitions DDNS You can use the Basic DDNS (Dynamic Domain Name System) screen to set up the DDNS service to assign a static Internet domain name to a dynamic IP address. This allows various servers on the Internet to access your computer for processing your requests when you are visiting various Internet sites. Figure 47 – Basic DDNS Screen Table 9: Basic DDNS Screen-Field Descriptions Field Description DDNS Service Select Disabled or select wwwDynDNS.
Gateway Configuration Screen Definitions Backup and Restore You can use the Basic Backup and Restore screen to save a backup copy of the current SBG6700-AC gateway configuration settings locally on your computer or restore previously saved gateway configurations. Figure 48 – Basic Backup & Restore Screen Table 10: Basic Backup & Restore -Field Descriptions Field Description Browse Allows you to search for a file on your computer to retrieve or save the gateway configuration.
Gateway Configuration Screen Definitions Advanced Screens Options You can use the Advanced Options to set the operating modes for adjusting how the SBG6700-AC routes IP traffic on your home network. Figure 49 – Advanced Options Screen SURFboard® SBG6700-AC Wireless Cable Modem Gateway • User Guide 365-095-25781 x.
Gateway Configuration Screen Definitions Table 11: Advanced Options-Field Descriptions Field Description WAN Blocking Prevents the SBG6700-AC Web Manager or the computers behind it from being visible to other computers on the SBG6700-AC WAN. IPsec Pass-through Enables the IPsec Pass-through protocol to be used through the SBG6700-AC Web Manager so that a VPN device (or software) may communicate properly with the WAN.
Gateway Configuration Screen Definitions IP Filtering IP filtering allows you to define which local computers will be denied access to the SBG6700-AC WAN. You can configure IP address filters to block Internet traffic to specific network devices on your home network by entering the starting and ending IP address ranges. Note: You only have to enter the LSB (Least-significant byte) of the IP address; the upper bytes of the IP address are set automatically from the SBG6700-AC Web Manager’s IP address.
Gateway Configuration Screen Definitions MAC Filtering MAC filtering allows you to define up to twenty Media Access Control (MAC) address filters to prevent computers from sending outgoing TCP/UDP traffic to the WAN via their MAC addresses. This is useful because the MAC address of a specific NIC card never changes, unlike its IP address, which can be assigned via the DHCP server or hard-coded to various addresses over time.
Gateway Configuration Screen Definitions Port Filtering Port filtering allows you to define port filters to prevent all devices from sending outgoing TCP/UDP traffic to the WAN on specific IP port numbers. By specifying a starting and ending port range, you can determine what TCP/UDP traffic is allowed out to the WAN on a per-port basis. Note: The specified port ranges are blocked for ALL computers, and this setting is not IP address or MAC address specific.
Gateway Configuration Screen Definitions Port Triggers You can use Port Triggers to configure dynamic triggers to specific devices on the LAN. This allows special applications that require specific port numbers with bi-directional traffic to function properly. Applications such as video conferencing, voice, gaming, and some messaging program features may require these special settings.
Gateway Configuration Screen Definitions Port Forwarding Port forwarding allows you to run a publicly accessible server on your home network by specifying the mapping of TCP/UDP ports to a local computer. This enables incoming requests on specific port numbers to reach web servers, FTP servers, mail servers, etc. so that they can be accessible from the Internet.
Gateway Configuration Screen Definitions Figure 56 – Advanced Port Forwarding Screen Table 16: Advanced Port Forwarding-Field Descriptions Field Description External IP Address & Start/End Port Single port: Remote IP address and a specific port number (enter the same port number in the Start and End Port fields). Range of ports: Remote IP address and a specific range of port numbers (enter the first and last port numbers of the desired port range in the Start and End Port fields).
Gateway Configuration Screen Definitions DMZ Host You can configure one computer on your home network as the DMZ Host. That computer will operate outside of the SBG6700-AC firewall. This feature allows you to set up a separate subnetwork for remote access from the Internet to your computer, gaming devices, or other IP-enabled device so that your home network is not exposed to hackers or other external attacks from the Internet.
Gateway Configuration Screen Definitions Firewall Screens You can configure firewall filters and alert notifications for your home network. The SBG6700-AC firewall protects the SBG6700-AC LAN from unwanted attacks and other intrusions on the Internet. Firewall protection also provides the following benefits: • Advanced, integrated stateful-inspection firewall supporting intrusion detection, session tracking, and denial-of-service attack prevention.
Gateway Configuration Screen Definitions Figure 58 – Firewall Protection Level Screen Table 18: Firewall Protection Level -Field Descriptions Field Description Firewall Protection Level • Select Low, Medium, or High to set the level of firewall protection that you want for your gateway. • Select Off to disable firewall protection.
Gateway Configuration Screen Definitions Parental Control You can use the Parental Control screen to set up user access restrictions on a specific device connected to your SBG6700-AC network. You can set up the following Parental Controls: • • • • Allow or block access to specific Internet sites. Allow or block access to specific MAC addresses. Allow or block Internet access based on specific day and time settings.
Gateway Configuration Screen Definitions Figure 60 – Firewall Parental Control Screen Table 20: Firewall Parental Control -Field Descriptions Field Description Description Enter a name to create a new user profile. MAC Address Enter the 12-digit (hexadecimal) hardware address of the device that you are setting up for parental controls. The MAC addressed is assigned by the hardware manufacturer and should be located on the device label.
Gateway Configuration Screen Definitions Field Description End Port Enter the ending port number of the range of ports for which you want to block incoming or outgoing access. Default port is 0. Protocol Select TCP, UDP, or Both for the Internet protocol. Days Select the days of the week that the selected user can access the Internet. Time Set the start and end time of day that the selected user can access the Internet. Allow/Block Set to allow or block Internet access for the time defined above.
Gateway Configuration Screen Definitions Field Description SMTP Username Your user name for your email account. Check with your email service provider. SMTP Password Your user password for your email account. Check with your email service provider. Email Alerts Enable or disable emailing firewall alerts. Remote Log You can send firewall attack reports out to a standard SysLog server, so that many instances can be logged over a long period of time.
Gateway Configuration Screen Definitions Table 22: Firewall Remote Log -Field Descriptions Field Description Permitted Connections Select if you want email notification of who is connecting to your network. Blocked Connections Select if you want email notification of who is blocked from connecting to your network. Known Internet Attacks Select if you want email notification of known Internet attacks against your network.
Warranty Information C Warranty Information SURFboard & Touchstone SBG6700-AC Wireless Cable Modem Gateways ARRIS Enterprises, Inc.
Warranty Information not warrant that the functions of the Product will meet your requirements or that the operation of the Product will be uninterrupted or error-free. ARRIS IS NOT RESPONSIBLE FOR PROBLEMS OR DAMAGE CAUSED BY THE INTERACTION OF THE PRODUCT WITH ANY OTHER SOFTWARE OR HARDWARE. ALL WARRANTIES ARE VOID IF THE PRODUCT IS OPENED, ALTERED, AND/OR DAMAGED.
ARRIS Enterprises, Inc. 3871 Lakefield Drive, Suwanee, GA 30024 www.arrisi.com 365-095-25781 x.
