Administrator Manual Wireless EMTA Gateway FastFind Links SMCD3GNV4 / SMCD3GNV4E Getting to Know Your Gateway Installing Your Gateway Administrator Manual Preparing to Configure Your Gateway Configuring the Gateway
SMC Networks 20 Mason Irvine, CA 92618 U.S.A. Copyright © 2012 SMC Networks All Rights Reserved Information furnished by SMC Networks, Inc. (SMC) is believed to be accurate and reliable. However, no responsibility is assumed by SMC for its use, nor for any infringements of patents or other rights of third parties which may result from its use. No license is granted by implication or otherwise under any patent or patent rights of SMC.
Safety This equipment is designed with the utmost care for the safety of those who install and use it. However, special attention must be paid to the dangers of electric shock and static electricity when working with electrical equipment to ensure the safe use of the equipment. Safety Instructions Read these instructions carefully. Keep this document for future reference. Follow all warnings and instructions marked on the product.
Warning y Do not use this product near water. y Do not place this product on an unstable cart, stand, or table. If the product falls, it could be seriously damaged. y Slots and openings on the product are provided for ventilation to ensure reliable operation of the product and to protect it from overheating. These openings must not be blocked or covered.
Contents Safety ....................................................................................................................... iii Safety Instructions ........................................................................................................ iii Warning ......................................................................................................................... iv Using Electrical Power .......................................................................................
3 Preparing to Configure Your Gateway .............................................................. 11 Configuring Microsoft Windows 2000 ............................................................. 12 Configuring Microsoft Windows XP ................................................................ 13 Configuring Microsoft Windows Vista ............................................................. 14 Configuring an Apple® Macintosh® Computer ..............................................
Home Network Wizard Page .......................................................................... 52 Connected Devices Page ..................................................................................... 55 Computers Page ............................................................................................. 56 Adding Computers ............................................................................................ 57 Parental Control Page...................................................
Logs Page ....................................................................................................... 96 Generating Logs ............................................................................................... 97 Printing or Downloading the Log ...................................................................... 97 Network Diagnostic Tools Page ..................................................................... 98 Testing Connectivity to a Destination Address .........................
Preface Congratulations on your purchase of the SMCD3GNV4 or SMCD3GNV4E Wireless EMTA Gateway. The SMCD3GNV4 and SMCD3GNV4E are multimedia Gateways that deliver video, voice, and data for applications such as Home Security and Automation, DECT voice, and IPTV distribution. The SMCD3GNV4 and SMCD3GNV4E Gateways are versatile and robust all-in-one solutions that make it ideal for homes and businesses to connect their local-area network (LAN) to the Internet.
Key Features This section summarizes the key features of the SMCD3GNV4 and SMCD3GNV4E Gateways. y DOCSIS 3.0 Cable Modem. The Gateway includes an 8x4 DOCSIS 3.0 cable modem capable of maximum downstream speeds of 320 Mbps and maximum upstream speeds of 120 Mbps. y Packet Cable 1.5/2.0 Embedded media terminal adapter (eMTA). The Gateway supports both Packet Cable 1.5 NCS eMTA and PacketCable 2.0 SIP Edva.
Document Organization This document consists of four chapters and three appendixes. Chapter 1 - describes the contents in your Gateway package, system requirements, and an overview of the Gateway’s front and rear panels. Chapter 2 - describes how to install your Gateway. Chapter 3 - describes how to prepare the Gateway for configuration. Chapter 4 - describes how to select the Gateway’s user configuration settings using the Gateway’s graphical-user interface (GUI).
Document Conventions In this document, the term “Gateway” is used to refer collectively to the SMCD3GNV4 and SMCD3GNV4E Wireless EMTA Gateways. If information applies to only one model, that model is identified. This document uses the following additional conventions to draw your attention to certain information. Symbol Meaning Description Note Notes emphasize or supplement important points of the main text.
1 Getting to Know Your Gateway Before you install your SMCD3GNV4 or SMCD3GNV4E Wireless EMTA Gateway, check the package contents and become familiar with the Gateway’s front and back panels.
Unpacking Package Contents Unpack the items and confirm that no items are missing or damaged. Your package should include: y One SMCD3GNV4 or SMCD3GNV4E Wireless EMTA Gateway y One external power supply 12V 2.0A y One Category 5E Ethernet cable If any items are missing or damaged, please contact your place of purchase. Keep the carton, including the original packing material, in case you need to store the product or return it.
Becoming Familiar with the Gateway Hardware The following sections describe the Gateway hardware. Top Panel The top panel of your Gateway contains a set of light-emitting diode (LED) indicators. These LEDs show the status of your Gateway and simplify troubleshooting. Additional LEDs on the rear panel of the Gateway show link status (see page 5). Figure 1 shows the top panel of the Gateway. Table 1 describes the top panel LEDs. Figure 1.
Table 1.
Rear Panel The rear panel of the Gateway contains a reset button and ports for attaching the supplied power cord and making other connections. Figure 2 shows the rear panel components and Table 3 describes them. n o p q s r t u Figure 2. Rear View of the Gateway Table 3. Gateway Rear Panel Components Item n o p q r s t u Symbol Meaning Description Phone Connect the a telephone set to the Gateway Alarm Connect the Gateway to the phone line outlet.
Resetting or Rebooting the Gateway You can use the Reset button on the Gateway rear panel to power cycle the Gateway or reset the Gateway to its original factory default settings. Note: You can also reset or reboot the Gateway using the Restore/Reboot page (see page 100). Rebooting the Gateway To reboot the Gateway and keep any customized overrides you made to the default settings: 1. Leave power cord connected to the Gateway. 2.
2 Installing Your Gateway This chapter describes how to install the Gateway.
Finding a Suitable Location You can install the Gateway in any location with access to the cable network. All of the cables connect to the rear panel of the Gateway for better organization and utility. The LED indicators on the front panel are easily visible to provide you with information about network activity and status.
Connecting to the LAN Using an Ethernet LAN cable, you can connect the Gateway to a desktop computer, notebook, hub, or switch. The Gateway supports auto-MDI/MDIX, so you can use either a standard straight-through or crossover Ethernet cable. 4. Connect either end of an Ethernet cable to one of the four LAN ports on the rear panel of the Gateway (see Figure 3). Figure 3. Connecting to a LAN Port on the Gateway Rear Panel 5.
Connecting the WAN To connect your Gateway to a Wide Area Network (WAN) interface: 6. Connect a coaxial cable from a cable port in your home or office to the port labeled Cable/MoCA on the rear panel of the Gateway (see Figure 2 on page 5). Use only manufactured coaxial patch cables with F-type connectors at both ends for all connections. 7. Hand-tighten the connectors to secure the connection. 8.
3 Preparing to Configure Your Gateway Before you can access the Gateway’s GUI, configure the TCP/IP settings in your computer’s operating system that will be used to configure the Gateway.
Configuring Microsoft Windows 2000 Use the following procedure to configure your computer if your computer has Microsoft Windows 2000 installed. 1. On the Windows taskbar, click Start, point to Settings, and then click Control Panel. 2. In the Control Panel window, double-click the Network and Dial-up Connections icon. If the Ethernet adapter in your computer is installed correctly, the Local Area Connection icon appears. 3.
Configuring Microsoft Windows XP Use the following procedure to configure a computer running Microsoft Windows XP with the default interface. If you use the Classic interface, where the icons and menus resemble previous Windows versions, perform the procedure under “Configuring Microsoft Windows 2000”. 1. On the Windows taskbar, click Start, click Control Panel, and then click Network and Internet Connections. 2. Click the Network Connections icon. 3.
Configuring Microsoft Windows Vista Use the following procedure to configure a computer running Microsoft Windows Vista with the default interface. If you use the Classic interface, where the icons and menus resemble previous Windows versions, perform the procedure under “Configuring Microsoft Windows 2000”. 1. On the Windows taskbar, click Start, click Control Panel, and then select Network and Internet Icon. 2. Click View Networks Status and tasks and then click Management Networks Connections. 3.
6. In the Internet Protocol Version 4 Properties dialog box, click Obtain an IP address automatically to configure your computer for DHCP (see Figure 8). Figure 8. Internet Protocol Properties Window 7. Click the OK button to save your changes and close the dialog box. 8. Click the OK button again to save your changes (see Figure 9). Figure 9.
Configuring an Apple® Macintosh® Computer The following procedure describes how to configure TCP/IP on an Apple Macintosh running Mac OS 10.2. If your Apple Macintosh is running Mac OS 7.x or later, the steps you perform and the screens you see may differ slightly from the following. However, you should still be able to use this procedure as a guide to configuring your Apple Macintosh for TCP/IP. 1. Pull down the Apple Menu, click System Preferences, and select Network. 2.
Disabling Proxy Settings Before using the Gateway GUI, disable proxy settings in your Web browser. Otherwise, you will not be able to view the Gateway’s Web-based configuration pages. Disabling Proxy Settings in Internet Explorer The following procedure describes how to disable proxy settings in Internet Explorer 5 and later. 1. Start Internet Explorer. 2. On your browser’s Tool menu, click Options. The Internet Options dialog box appears. 3. In the Internet Options dialog box, click the Connections tab.
Disabling Proxy Settings in Safari The following procedure describes how to disable proxy settings in Safari. 1. Start Safari. 2. Click the Safari menu and select Preferences. 3. Click the Advanced tab. 4. In the Advanced tab, click the Change Settings button. 5. Choose your location from the Location list (this is generally Automatic). 6. Select your connection method. If using a wired connection, select Built-in Ethernet. For wireless, select Airport. 7. Click the Proxies tab. 8.
4 Configuring the Gateway To configure the Gateway’s user settings, prepare your computer as described in Chapter 3. Then use the information in this chapter to configure the Gateway’s user settings.
Logging in to the Gateway’s Web Management Interface To access the Gateway’s configuration settings, launch a Web browser (Microsoft Internet Explorer or Netscape Navigator, versions 5.0 or later) on the computer you configured in Chapter 3 and log in to the Gateway’s admin interface. To access the Gateway’s admin configuration settings, use the following procedure. 1. Launch a Web browser. Note: Your computer does not have to be online to configure your Gateway. 2.
3. In the Login screen, enter the default user username and the default user password provided by SMC. Both the username and password are case sensitive. 4. Click the LOGIN button to access the Gateway. The Web management interface starts and Step 1 of the Home Network Wizard appears (see page 52). Tip: After you log in to the Web management interface, we recommend you change the default password on the Troubleshooting > Change Password page (see page 95).
Quick Information Menu Bar Main Area Figure 13. Main Areas on the Web Management Interface All menus have submenus associated with them. If you click a menu, the submenus appear below it. For example, if you click the Gateway menu, the submenus At a Glance, Email Notification, Connection, Firewall, Software, Hardware, and Wizard appear below the Gateway menu (see Figure 14). Figure 14.
Web Management Interface Menus Table 4 describes the pages in the Web management interface. Table 4. Web Management Interface Menus and Submenus Menus and Submenus Description See Page Gateway > At a Glance Reports information about your network, connected devices, software versions, and recent network updates.
Table 4. Web Management Interface Menus and Submenus Menus and Submenus Description See Page Parental Control > Managed Sites Configures blocked sites, blocked keywords, and trusted computers. 59 Parental Control > Managed Services Configures blocked services and trusted computers. 64 Parental Control > Managed Devices Configures managed and blocked devices. 67 Parental Control > Reports Generates, prints, and downloads reports based on user-defined criteria.
Gateway Page The Gateway page lets you: y View at-a-glance information about the Gateway – see page 26. y Configure the Gateway to send email notifications – see page 27. y View connection status – see page 29. y Configure the local IP settings for your home network – see page 31. y Configure static IP address information for the Gateway and enable the Gateway to use static IP addressing – see page 33. y Configure WiFi settings – see page 35.
At a Glance Page Path: Gateway > At a Glance The At a Glance page shows information about your network and connected devices. The At a Glance page is organized into four areas: y Home Network shows the connection status of Ethernet, wireless and firewall security level. y Connected Devices shows the device that is currently connected to the Gateway. A View Connected Devices button opens the Computers page for viewing devices that the Gateway automatically detects using DHCP (see page 56).
Email Notifications Page Path: Gateway > Email Notification The Email Notification page lets you configure the Gateway to send email notifications automatically when one or ore of the following events occurs: y Firewall breach y Parental control breach y Alerts or warnings y A request is made to send logs to a destination Note: This configuration assumes that the Simple Mail Transfer Protocol (SMTP) mail server the Gateway will use is configured and operating properly. Figure 16.
Table 5. Email Notification Page Options Option Description Recipient Email Enter the email address of the recipient to whom the Gateway will send email notifications. Notification Types The gateway can be configured to send email for four types of notifications: • Firewall Breach = an attempt was made top breach the firewall. • Parental Control Breach = an attempt was made to breach a parental control. • Alerts or Warnings = an alert or warning occurred that requires attention.
Status Page Path: Gateway > Connection > Status The Status page is a read-only page that displays information about the Gateway’s connection status. The Status page is organized into three areas: y Local IP Network shows the local IP network status, connection speed, IPv4 address and subnet mask, DHCP server status, number of clients connected, and DHCP lease time. Click the EDIT button to view and edit local IP configuration settings (see “Local IP Configuration Page” on page 31).
Figure 17.
Local IP Configuration Page Path: Gateway > Connection > Local IP Network The Local IP Configuration page lets you configure your local network. The Local IP Configuration page is organized into two areas: y IPV4 shows the Gateway’s IPv4 settings and allows you to change them to suit your requirements. Buttons are provided for saving any settings you change or for restoring default settings. Changes you make are not applied until you click SAVE SETTINGS.
Table 6. Local IP Configuration Page Options Option Description Gateway Address Enter the Gateway’s IP address using the format 00.00.00.00. Subnet Mask Enter the subnet mask using the format 00.00.00.00. You can select an appropriate subnet mask based on the number of devices that will connect to your network. DHCP Beginning Address Enter the starting IP address in the range of IP addresses that the DHCP server will allocate. Because the Gateway’s default IP address is 192.168.0.
Public LAN Page Path: Gateway > Connection > Public Lan The Public Lan page lets you configure static IP address information for the Gateway and enable the Gateway to use static IP addressing. Figure 19.
Table 7. Public Lan Configuration Options Option Description Enable/Disable Public Lan Enables or disables the static IP address settings specified on this page. • Enable = the Gateway uses the static IP address settings defined on this page. If you click Enable, complete the remaining fields on the page. • Disable = the Gateway does not use the static IP address settings defined on this page. IP Address When Enable/Disable Public LAN is enabled, enter the Gateway’s IP address using the format 00.00.
WiFi Page Path: Gateway > Connection > WiFi The WiFi page shows advanced information about the Gateway’s Wi-Fi connections. The Wi-Fi information on this page is organized into three areas y Private WiFi Status provides a button for enabling or disabling the Gateway’s Wi-Fi status. y Radio Mode is a read-only field that shows the frequency of the Gateway’s wireless radio.
Editing Private WiFi Network Settings The row below Private WiFi Network on the WiFi page shows the name (SSID), protocol, and security mode of the Gateway’s Wi-Fi network connection. Using the EDIT button on the right side of the row, you can change these settings. To edit the Gateway’s private WiFi network settings: 1. Under Private WiFi Network on the WiFI page, click the EDIT button. A page similar to the one in Figure 21 appears. 2. Complete the options in the page (see Table 8). 3.
Table 8. Edit Private WiFi Network Configuration Page Options Option Description Network Name (SSID) Enter a name for the wireless network. The Wi-Fi name will make it more obvious for other devices to know which network they are connecting to. Mode A read-only field that shows the current mode for this network (for example, 802.11 b/g/n).
Configuring Private WiFi Network Configuration Settings The row below Private WiFi Network on the WiFi page shows the name (SSID), protocol, and security mode of the Gateway’s Wi-Fi network connection. Using the MSO EDIT link on the right side of the row, you can change the Gateway’s private WiFI network configuration settings.. To edit the Gateway’s private WiFi network configuration settings: 1. Under Private WiFi Network on the WiFI page, click the MSO EDIT button.
Table 9. Edit Private WiFi Network Configuration 2.4/5 GHz Page Options Option Description Band Status Lets you enable or disable the Gateway’s 2.4/5 GHz band operation. Radio Mode Selection Click the Gateway wireless radio to be used. Choices are: • 2.4G = 2.4 GHz radio is used. • 5G = 5 GHz radio is used. Network Name (SSID) Enter a name for the private Wi-Fi network. The network name will make it more obvious for other devices to know which network they are connecting to. Mode 2.
Option Description Channel If Channel Selection is set to Manual, specify the appropriate channel from the list provided to correspond with your network settings. Choices are 1, 6, and 11. The default setting is 6, which refers to radio frequency ranges within the 2.4 GHz range. You can change this setting if necessary; however, all devices in your wireless network must use the same channel to work properly. Guard Interval Select a guard interval.
Configuring WPS Settings Using the WiFi page (described on page 33) or the Computers page (described on page 56), you can enable or disable the Gateway’s WPS operation and configure the connection options for WPS push button or pin number operation. Note: You must enable WPS before a wireless device can connect to the Gateway using WPS. To configure WPS settings: 1. From the WiFi or Computers page, click the ADD WIFI PROTECTED SETUP (WPS) CLIENT button. The WPS page appears (see Figure 22). 2.
Table 10. WPS Page Options Option Description WPS Lets you enable or disable WPS. If you click Enabled, complete the remaining fields on the page. Security A read-only field that shows the Gateway’s security settings. Encryption A read-only field that shows the Gateway’s encryption settings. AP PIN A read-only field that shows the Access Point’s personal identification number. Connection Options Select the method used to make the WPS connection between wireless devices and the Gateway.
WAN Page Path: Connection > WAN or click the VIEW button in the WAN IP Network area of the Status page The WAN Network page is a read-only page that shows information about the Wide Area Network, cable modem, and downstream and upstream bonding values. This information is useful when contacting Customer Center or troubleshooting technical problems. Figure 24.
Table 11. WAN Page Options Option Description WAN Internet A read-only field that shows the Internet connection status. System Uptime A read-only field that shows the system uptime counting from its bootup. WAN IP Address A read-only field that shows t he WAN IP address obtained from the service provider. DHCP Client A read-only field that shows the DHCP Client function is enable or disable. DHCP Expiry Time A read-only field that shows the expired time currently left of DHCP client.
Firewall Settings Page Path: Gateway > Firewall The Gateway includes a built-in firewall whose security level can be selected using the Firewall Settings page. Security levels range from minimum (low security) to maximum (high security). A Custom Security option lets you customize security settings to suit your requirements. Figure 25. Firewall Settings Page Table 12. Firewall Settings Page Options Option Description Maximum Security (High) Maximum security is the highest level of firewall security.
Figure 26.
Gateway Software Version Page Path: Gateway > Software The Gateway Software Version page is a read-only page that shows information about the system software version information about the Gateway. The system software information shown includes: y eMTA and DOCSIS software version y Packet cable Figure 27.
System Hardware Info Page Path: Gateway > Hardware > System Hardware The System Hardware Info page is a read-only page that shows the following information about the Gateway hardware: y Model, hardware identifier, and serial number y Processor speed y Dynamic Random Access Memory (DRAM), flash, auxiliary DRAM, and auxiliary flash Figure 28.
LAN Ethernet Hardware Info Page Path: Gateway > Hardware > LAN The LAN Ethernet Hardware Info page is a read-only page that shows the link status and MAC address of the Gateway’s four Gigabit Ethernet LAN ports. If a device is connected to a Gigabit Ethernet port, the Link Status is Active; otherwise, the Link Status is Inactive. Figure 29.
Wireless Hardware Info Page Path: Gateway > Hardware > Wireless The Wireless Hardware Info page is a read-only page that shows the connection status and MAC address of the wireless network. The Gateway supports concurrent 2.4 GHz and 5 GHz Wi-Fi wireless connections. If a wireless client is connected to the Gateway, the WiFi link status is Active; otherwise, it is Inactive. Figure 30.
USB Hardware Info Page Path: Gateway > Hardware > USB The USB Hardware Info page is a read-only page that shows the status and information about USB devices connected to the Gateway. Figure 31.
Home Network Wizard Page Path: Gateway > Wizard The Home Network Wizard is a 2-page wizard for configuring your home network. If you are a new or novice user, we recommend you use wizard to configure the Gateway’s basic settings. The wizard appears automatically when you log in to the Web management interface. Figure 32 shows the first page of the wizard and Table 13 describes the options.
Figure 32. Example of Home Network Wizard – Page 1 Table 13. Home Network Wizard – Page 1 Options Option Description Gateway Name Enter a name you want to assign to the Gateway. Assign a name so that this device will not be confused with other devices on your wireless network. We recommend you use a name that is meaningful to you so you can identify the Gateway easily. The Gateway name is case sensitive and can contain from 8 to 20 alphanumeric characters, but no spaces or special characters.
Figure 33. Example of Home Network Wizard - Page 2 Table 14. Home Network Wizard – Page 2 Options Option Description Enter WiFi Network Name Enter a name for your wireless network (typically, the SSID). The Wi-Fi name will make it more obvious for other devices to know which network they are connecting to. Encryption Method To prevent other computers in the area from using your Internet connection, secure your wireless network by selecting an encryption method from this drop-down list.
Connected Devices Page The Connected Devices page lets you: y View and edit computers connected to the Gateway’s LAN – see page 56.
Computers Page Path: Connected Devices > Computers The Gateway automatically discovers computers attached to it. The Computers page contains two areas: y Online Computers shows information about computers that are currently online. The ADD COMPUTER WITH RESERVED IP button lets you add computers (see page 57). After you add a computer, an Edit button next to the computer lets you change the computer’s settings. y Offline Computers shows information about computers that are currently offline.
Adding Computers Using the ADD COMPUTER WITH RESERVED IP button, you can add computers with reserved IIP addresses. 1. On the Computers page, click the ADD COMPUTER WITH RESERVED IP button. The Add Computer page appears (see Figure 35). 2. Complete the options in the Add Computer page (see Table 15). 3. Click SAVE. The computer appears under Online Computers on the Computers page. An Edit button next to the computer you added lets you change the settings. Figure 35. Add Computer Page Table 15.
Parental Control Page Regulating Web browsing can prevent children and workers from accessing dangerous content on the Internet, or having to make judgment calls over suitable relationships in chat-rooms. The fact is, Web sites, chat-room users, and downloaded programs may not have the best interests of you, your family, or your workers at heart.
Managed Sites Page Path: Parental Control > Managed Sites The Managed Sites page lets you configure: y Blocked sites – see page 60. y Blocked keywords – see page 62. y Trusted computers that can access the blocked sites and keywords – see page 63.d After configuring filters on this page, use the Enable Filter buttons to enable or disable the filters: y Click Enabled to enable the parental control filters configured on this page.
Configuring Blocked Sites Using the Managed Sites page, you can block access to certain Web sites from local computers. To define blocked sites: 1. In the Blocked Sites area on the Managed Sites page, click the +ADD button. The Add Blocked Sites page appears (see Figure 37). 2. Complete the fields in the Add Blocked Site page (see Table 16). 3. Click SAVE. The blocked site appears in the Blocked Sites table in the Managed Sites page. 4.
Table 16. Add Blocked Sites Page Options Option Description URL Enter the URL you want blocked. Always Block? Select whether you want the Gateway to always block this URL. Choices are • No = the Gateway does not always block this URL. Use Set Block Time and Set Blocked Days to instruct the Gateway when to block this URL. • Yes = the Gateway always blocks this URL until you remove the block.
Configuring Blocked Keywords Using the Managed Sites page, you can block access to certain key words from local computers. To define blocked keywords: 1. In the Blocked Keywords area on the Managed Sites page, click the +ADD button. The Add Blocked Keywords page appears (see Figure 38). 2. Complete the fields in the Add Blocked Keywords page (see Table 17). 3. Click SAVE. The blocked keyword appears in the Blocked Keywords table in the Managed Sites page. 4.
Table 17. Add Blocked Keywords Page Options Option Description Keyword Enter the keyword you want blocked. Always Block? Select whether you want the Gateway to always block this keyword. Choices are • No = the Gateway does not always block this keyword. Use Set Block Time and Set Blocked Days to instruct the Gateway when to block this keyword. • Yes = the Gateway always blocks this keyword until you remove the block.
Managed Services Page Path: Parental Control > Managed Services The Managed Services page lets you configure: y Blocked applications and services – see page 65. y Trusted computers that can access the blocked applications and services – see page 66. After configuring services on this page, use the Enable Services buttons to enable or disable the services: y Click Enabled to enable the parental control services configured on this page.
Configuring Blocked Services Using the Managed Services page, you can block access to certain services and applications from local computers. To define blocked services: 1. In the Blocked Services area on the Managed Services page, click the +ADD button. The Add Blocked Service page appears (see Figure 40). 2. Complete the fields in the Add Blocked Service page (see Table 18). 3. Click SAVE. The blocked service appears in the Blocked Services table in the Managed Services page. 4.
Table 18. Add Blocked Service Page Options Option Description User Defined Service Enter the service you want blocked. Protocol The type of protocol associated with the service to be blocked. Choices are: • TCP • UDP • TCP/UDP Start Port Starting port number on which the block will be applied. If necessary, contact the application vendor for this information. End Port Ending port number on which the block will be applied. If necessary, contact the application vendor for this information.
Managed Devices Page Path: Parental Control > Managed Devices The Managed Devices page lets you: y Enable managed devices – see page 68. y Allow all or block all access types – see page 68. After configuring managed devices on this page, use the Enable Managed Devices buttons to enable or disable the managed devices: y Click Enabled to enable the devices configured on this page. y Click Disabled to disable the managed devices configured on this page. Figure 41.
Enabling or Disabling Access Types To enable or disable access types, in the Managed Devices area on the Managed Devices page: y Click Allow All next to Access Type to unblock all access types. OR y Click Block All next to Access Type to block all access types. Adding Allowed or Blocked Devices If Access Type under Managed Devices on the Managed Devices page is set to Block All, use the + ADD ALLOWED DEVICE button in the Allowed Devices area to free devices from being blocked.
Figure 42. Add Allowed Device Page Figure 43.
Table 19. Add Allowed Device Page Options Option Description Set Allowed Device Computer Name/MAC Address Select a device you want to allow. Always Allow? Select whether you want the Gateway to always allow this device. Choices are • No = the Gateway does not always allow this device. Use Set Allow Time and Set Allowed Days to instruct the Gateway when to allow this device. • Yes = the Gateway always allows this device until you remove the allow.
Reports Page Path: Parental Control > Reports The Reports page displays the information form all logs. It also lets you generate parental control reports that you can print and download as text files. Figure 44.
Generating Reports The Report Filters area on the Reports page lets you generate reports based on: y The type of report you want to generate y The timeframe that the report is to cover To generate a report: 1. In the Report Filters area on the Report page, use the Report Type drop-down list to select the report you want to generate. Choices are: y All y Managed Sites y Managed Services y Managed Devices 2. Use the Time Frame drop-down list to select the timeframe that the report is to cover.
Advanced Page The Advanced page lets you: y Enable or disable port forwarding and port triggering – see pages 74 and 77, respectively. y Configure the Gateway for remote management – see page 80. y Configure the RIP that the Gateway exchanges with the headend – see page 82. y Configure a computer for unrestricted two-way Internet access by defining it as a virtual DMZ host see page 80. y Configure QoS – see page 85.
Port Forwarding Page Path: Advanced > Port Forwarding The Port Forwarding page lets you configure the Gateway to provide port-forwarding services that allow Internet users access predefined services such as HTTP (80), FTP (20/21), and AIM/ICQ (5190) as well as custom-defined (other) services. You perform port forwarding by redirecting the WAN IP address and the service port to a local IP address and service port. Figure 45.
Adding a Port Forwarding To add a port forwarding service: 1. In the Port Forwarding page, next to Enable Port Forwarding, click Enabled. 2. Click the ADD SERVICES button below the Port Forwarding table. The Add Service page appears (see Figure 46). 3. Complete the fields in Add Service page (see Table 21). 4. Click ADD. The port forwarding service appears in the Port Forwarding table in the Port Forwarding page. 5.
Table 21. Add Service Page Options Option Common Services Description Select the service for which the port forwarding rule is being defined. Choices are: • AIM • FTP • IRC • HTTP • Other – if you select this option, enter the name of the service in the Other Service field. Service Type Select the protocol associated with the service. Choices are: • TCP/UDP • TCP • UDP Starting Port Enter a starting port on which the service is provided.
Port Triggering Page Path: Advanced > Port Triggering The Port Triggering page lets you manage external access to specific ports on your home network using automatic triggering. When port triggering is enabled, the Gateway monitors outbound traffic. If the Gateway detects traffic on the specified outbound port, it remembers the IP address of the computer that sent the data, triggers the incoming port, and then forwards the incoming traffic to the triggering computer.
Adding a Port Triggering To define a port trigger: 1. In the Port Triggering page, next to Enable Port Triggering, click Enabled. 2. Click the ADD SERVICES button below the Port Triggering table. The Add Port Trigger page appears (see Figure 48). 3. Complete the fields in Add Port Trigger page (see Table 22). 4. Click ADD. The port trigger appears in the Port Triggering table in the Port Triggering page. 5.
Table 22. Add Port Trigger Page Options Option Description Service Name Name for identifying the trigger. The name is for reference purposes only. Service User Select a service user from the user list. Choices are: • All Users • Single User Service Type Select the type of protocol you want to use with the trigger. Choices are: • TCP/UDP • TCP • UDP For example, to track the H.323 protocol, the protocol type should be TCP.
Remote Management Page Path: Advanced > Remote Management Using the Remote Management page, you can configure the Gateway to be managed using a variety of remote-management methods. You can also specify IP addresses of trusted computers that are permitted to manage the Gateway remotely. After configuring your settings, click the SAVE button to apply them. Figure 49.
Table 23. Remote Management Page Options Option Description Remote Management HTTP To allow the Gateway to be managed remotely using HTTP, click Enabled and enter the port number on which the Gateway can be accessed. Default port is 8080. Remote Management HTTPS To allow the Gateway to be managed remotely using HTTPS, click Enabled and enter the port number on which the Gateway can be accessed. Default port is 443.
Routing Path: Advanced > Routing Using the Routing page, you can configure the RIP protocol the Gateway uses to exchange routing information with the headend. After configuring your settings, click the SAVE button to apply them. Figure 50.
Table 24. Routing Page Options Option Description Interface Name Select the Gateway interface on which routing is to be performed. RIP Send Version Select the format and the broadcasting method of the RIP packets that the Gateway sends. Choices are: • RIP1 • RIP2 • RIP1/2 Your selection should match the version supported by other routers on your network. RIP Receive Version Select the format and the broadcasting method of the RIP packets that the Gateway receives.
DMZ Page Path: Advanced > DMZ If you have a local client computer that cannot run an Internet application properly behind the firewall, you can configure the computer for unrestricted two-way Internet access by defining it as a Virtual DMZ host. A DMZ allows a single computer on your LAN to expose its ports to the Internet. When doing this, the exposed computer is no longer “behind” the firewall.
QoS Page Path: Advanced > QoS The QoS page lets you configure the Gateway to deliver better resource reservation control. Wireless networks offer an equal opportunity for all devices to transmit data from any type of application. Although this is acceptable for most applications, multimedia audio and video applications are particularly sensitive to the delay and throughput variations that result from this “equal opportunity” wireless access method.
Table 26. QoS Page Options Option Description QoS for WiFi Multimedia (WMM) Enables or disables QoS for WMM. Choices are: • Enabled = QoS is enabled for WMM. • Disabled = QoS is disabled for WMM. QoS for LAN Enables or disables QoS for WMM. Choices are: • Enabled = QoS is enabled for WMM. • Disabled = QoS is disabled for WMM.
Device Discovery Page Path: Advanced > Device Discovery Universal Plug and Play (UPnP) is an architecture that allows for dynamic connectivity between devices on a network. The goal of UPnP is to support zero-configuration, "invisible" networking of devices including intelligent appliances, PCs, printers and other smart devices using standard protocols. Using UPnP, devices can add themselves to a network dynamically, without requiring user intervention or configuration.
Table 27. Device Discovery Page Options Option Enable UPnP Description Determines whether the Gateway’s UPnP capabilities are enabled or disabled. Choices are: • Enabled = enables the Gateway’s UPnP capabilities. • Disabled = disables the Gateway’s UPnP capabilities. Advertisement Period Specify how often, in seconds, the Gateway broadcasts its UPnP information. This value can range from 1 to 2147483648 seconds.
VPN Global Page Path: Advanced > VPN > Global A Virtual Private Network (VPN) is a technology designed to increase the security of information transferred over the Internet. A VPN creates a private encrypted tunnel from the user's computer, through the local wireless network, through the Internet, all the way to the corporate servers and database. The Gateway supports the Internet Protocol Security (IPSec) to secure IP traffic.
Table 28. Global Settings Page Options Option Description Enable PPTP Lets you enable or disable PPTP tunneling. Enable IPSEC Lets you enable or disable L2TP tunneling. Pre-shared Key Enter a “pass code.” This pass code must be the same at both the local and the remote side. Both ends of the tunnel must use the same key; otherwise, the VPN tunnel cannot be established.
IPSEC Tunnel Table Page Path: Advanced > VPN > IPSEC Tunnel The IPSEC Tunnel page lets you configure tunnels on the Gateway. Figure 55.
Adding IPSec Tunnels To add IPSec tunnels from the IPSEC Tunnel page: 1. Click :the ADD SERVICES button. The Add Service page appears (see Figure 46). 2. Complete the fields in the Add Service page (see ). 3. Click ADD. 4. To edit an IPSec tunnel, click the EDIT button next to the tunnel you want to modify, edit the settings (see Table 22), and click ADD 5. To delete an IPSec tunnel, click the X next to the tunnel. When a precautionary message appears, click OK to delete the tunnel or CANCEL to retain it.
Table 29. Add Service Page Options Option IP Sec Tunnel Name Description Enter a unique name for the IPSec tunnel you are creating. #Local Setting Local WAN Address Enter the WAN IP address of the local host. Local Host IP Enter the IP address of the local host. Local Host Netmask Enter the netmask of the local host. #Remote Gateway Remote WAN Address Enter the WAN IP address of the remote gateway other end of the VPN tunnel.
Option Description IPSec Encryption Select the authentication algorithm used to encrypt packet data. Choices are • 3des = more secure method than DES, but with lower throughput. • aes = more secure than 3DES. The higher the bit rate, the stronger the encryption but the trade-off is lower throughput. • null = no authentication used.. Both ends of the tunnel must use the same setting; otherwise, the VPN tunnel cannot be established.
Troubleshooting Page The Troubleshooting page lets you: y Download and print system logs – see page 96. y Use diagnostic tools to troubleshoot problems – see page 98. y Restore or reboot the Gateway – see page 100. y Change the password used to log in to the Web management interface – see page 101.
Logs Page Path: Troubleshooting > Logs The Logs page lets you view logs related to Gateway’s performance and system operation. After you display a log, you can print the log or download it as a text file. Figure 57.
Generating Logs The Log Filters area on the Logs page lets you generate logs based on: y The type of log you want to generate y The timeframe that the log is to cover To generate a log: 1. In the Log Filters area on the Logs page, use the Log Type drop-down list to select the log you want to generate. Choices are: y System Logs y Event Logs y Firewall Logs 2. Use the Time Frame drop-down list to select the timeframe that the log is to cover.
Network Diagnostic Tools Page Path: Troubleshooting > Diagnostic Tools There may be times when you encounter a problem trying to reach a certain destination. If you examine the Gateway’s configuration and operation and everything looks fine, the problem might be with a router up the line from the Gateway or with the line itself. To help you identify such issues, use the Network Diagnostic Tools page to test connectivity to a destination or IP address. Figure 58.
Testing Connectivity to a Destination Address To test the Gateway’s connectivity to a destination address: 1. In the Network Diagnostic Tools page, under Test Connectivity Results, enter a destination address in the Destination Address field. Note: This procedure assumes that the destination address you enter is valid and operational. 2. Click the TEST CONNECTIVITY button. The Connectivity counter shows whether the path is active or inactive.
Restore/Reboot Page Path: Troubleshooting > Restore/Reboot The Restore / Reboot page provides buttons for performing the following activities: y RESET = restarts the Gateway, but keeps overrides made to the factory default settings. y RESET WI-FI Router = resets the Wi-Fi router without affecting the Gateway. y RESTORE WIFI SETTINGS = removes overrides made to the Gateway’s wireless settings only and returns the wireless settings to their default values. All other settings remain unchanged.
Change Password Page Path : Troubleshooting > Change Password or click Change Password at the top-right of the Web management interface The Change Password page lets you change the password used to log in to the Gateway’s Web interface. For security, we recommend you change the default log in password the first time you log in to the Web management interface to protect the Gateway from being tampered with. Figure 60. Change Password Page Table 30.
MSO Screens The last menu in the right pane is MSO Screen. This menu contains configuration pages that administrators will find helpful when managing the Gateway. Most of the pages are read-only, although some let you configure Gateway settings. The MSO screens are: y Basic HW Info – shows basic hardware information about the cable modem. See page 103. y Event Log – shows the entries in the Gateway’s event log. See page 104. y CM State – shows the Gateway’s cable modem state and associated information.
CM Hardware Page Path: MSO Screen > Basic HW Info The CM Hardware page is a read-only page that shows basic hardware information about the cable modem. . Figure 61.
Event Log Page Path: MSO Screens > Event Log The Event Log page is a read-only page that shows the entries in the Gateway’s event log. Figure 62.
CM State Page Path: MSO Screen > CM State The CM State page is a read-only page that shows information about the state of the cable modem. Figure 63.
RF Parameters Page Path: MSO Screen > Basic Wan Status The RF Parameters page is a read-only page that is organized into three sections: y RF Downstream shows information abut the radio-frequency downstream connection. y RF Upstream shows information abut the radio-frequency upstream connection. y RF Status shows the Gateway’s radio-frequency status. Figure 64.
Status Page Path: MSO Screen > Product Detail The Status page is a read-only page that shows the status of the Gateway’s cable modem and WAN isolation. Figure 65.
DHC Page Path: MSO Screen > DHCP The DHCP page is a read-only page that is organized into four sections: y Software Version/Provisioning Mode shows the Gateway firmware version and software filename. y CM DHCP Parameters shows the DHCP settings for the cable modem. y DHCP – CM Status shows the DHCP status for the cable modem. y MTA DHCP Parameters shows the DHCP settings for the Message Transfer Agent (MTA). Figure 66.
MTA Page Path: MSO Screen > MTA The MTA page is organized into three sections: y Error Codewords unerrored, correctable, and uncorrectable number of codewords. y Enterprise MIBs shows the Enterprise Management Information Bases used by the Gateway. y GR909 Test consists of a suite of standards-based electrical tests that can be used to identify several common issues with VoIP connections, such as an off-hook phone or voltage on a VoIP line. Using the GR909 Test area, you can perform a GR909 test.
Figure 67.
Telnet/SSH Page Path: MSO Screen > Telnet/SSH The Telnet/SSH page shows information about the Gateway’s Telnet and SSH status. Enabled and Disabled buttons are provided for enabling or disabling the Gateway’s SSH functionality. Figure 68.
System Config Page Path: MSO Screen > System Config The System Config page provides Enabled and Disabled buttons for enabling or disabling the Gateway’s wireless functionality. Figure 69.
Appendix A - Wall-Mounting the Gateway The Gateway can be mounted on a wall. Wall mounting requires hanging the Gateway along its width or length using the three slots on the bottom of the unit and the Gateway mounting template (on the next page) for the screws. WARNING: The Gateway should be wall mounted to concrete or plaster-wall-board. Before drilling holes, check the structure for potential damage to water, gas, or electric lines. To mount your Gateway on the wall: 1.
2. Measure the gap between holes with a ruler. Dimensionally confirm the template by measuring each value for accuracy before drilling holes. 3. Use a center punch to mark the center of the holes. 4. Locate the marks on the wall for the mounting holes. 5. Drill holes to a depth and diameter appropriate for the size and type of hardware you have selected. 6. If necessary, install an anchor in each hole. Use M3.5 x 40 mm screws with a flat underside and maximum screw head diameter of 6.5 mm (0.
Appendix B - Compliances FCC Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against radio interference in a commercial environment. This equipment can generate, use and radiate radio frequency energy and, if not installed and used in accordance with the instructions in this manual, may cause harmful interference to radio communications.
IMPORTANT NOTE: FCC Radiation Exposure Statement This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.
Index Conventions, xii 2 D 2.
I WPS, 41 Enabling Installation blocked applications and services, 65 blocked devices, 67 connecting the WAN, 10 connecting to the LAN, 9 blocked keywords, 62 finding a suitable location, 8 blocked sites, 60 powering on the Gateway, 10 Ethernet port information, 49 IPSec tunnels, 91 Event Log page, 104 K F Key features, x Factory defaults, restoring, 6, 100 Keyword blocking, 62 Finding a suitable location, 8 L G LAN Gateway connecting to, 9 computers connected to, 56 LAN Ethernet port info
Wi-Fi network, 29, 33, 35 Port information, 49 Port triggering, 77 Status page, 107 Powering on the Gateway, 10 Suitable location, 8 Preparing to use the graphical user interface System Config page, 112 System hardware information, 48 disabling proxy settings, 17 Proxy settings, disabling, 17 System logs, 96 Push-button connection option, 41 System requirements, 2 Push-buttons on Gateway, 4 System software version, 47 Q QoS, 85 T Telnet/SSH page, 111 Testing connection to R destination addre
WAN IP network status, 29 Local IP Network, 31 WAN status, 43 Logs, 96 Web management interface, 22 Managed Devices, 67 Advanced page, 73 Managed Services, 64 Connected Devices page, 55 MTA, 109 Gateway page, 25 Network Diagnostic Tools, 98 IPSEC Tunnel page, 91 Port Triggering, 77 loggin in, 20 QoS, 85 menus and submenus, 23 Remote Management, 80 Parental Control page, 58 Reports, 71 screens, 21 RF Parameters, 106 Troubleshooting page, 95 Routing, 82 Web management interface pages
20 Mason Irvine, CA. 92618 U.S.A. http://na.smc.