FiOS Quantum™ Gateway USER GUIDE Model FiOS-G1100 ©2014 Verizon Wireless
CONTENTS 01/ 03/ INTRODUCTION 1.0 Package Contents WIRELESS SETTINGS 7 1.1 System 7 Features 7 Requirements 1.2 1.3 Getting to Know Your Gateway 10 2.0 Setting Up 18 2.1 Computer 24 2.2 Main Screen 3.1 Wireless Status 36 3.2 Basic Security 39 3.3 Advanced 42 3.4 Wireless MAC 49 3.5 802.11 Mode 51 3.
TABLE OF CONTENTS 2 05/ 06/ USING NETWORK CONNECTIONS 5.0 Accessing Network Connections 5.1 Network (Home/Office) Connection 5.2 Broadband CONFIGURING SECURITY SETTINGS 66 67 6.0 Firewall 89 6.2 Access Control 93 6.3 Port Forwarding 96 6.4 Port Triggering 98 6.5 Remote 100 6.6 Static NAT 102 Security Log 104 Administration 74 5.3 Wireless Access Point Connection 78 6.7 5.
CONTENTS 08/ 09/ CONFIGURING ADVANCED SETTINGS MONITORING YOUR GATEWAY 8.0 Using Advanced Settings 121 8.1 Utilities 122 8.2 DNS Settings 131 8.3 Network 134 8.4 Routing 141 8.5 Date and Time 166 8.6 Configuration 170 Settings Settings 9.0 Gateway Status 179 9.1 Advanced Status 180 9.2 System Logging 181 9.3 Full Status/System 182 9.4 Traffic 183 9.
TABLE OF CONTENTS 4 11/ SPECIFICATIONS 11.0 General Specifications 200 LED Indicators 201 11.2 Environmental 201 11.1 Parameters 12/ NOTICES 12.0 Regulatory Compliance Notices 205 verizon.com/fios | ©2014 Verizon. All Rights Reserved.
01/ INTRODUCTION 1.0 Package Contents 1.1 System Requirements 1.2 Features 1.
01 / INTRODUCTION 6 The Verizon FiOS Quantum™ Gateway lets you transmit and distribute digital entertainment and information to multiple devices in your home/office. Your Gateway supports networking using coaxial cables, Ethernet, or Wi-Fi, making it one of the most versatile and powerful gateways available. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
PACKAGE CONTENTS, SYSTEM REQUIREMENTS AND FEATURES 1.0/ PACKAGE CONTENT Your package contains: • The FiOS Quantum Gateway • Power adapter • LAN Ethernet cable (yellow) • WAN Ethernet cable (white) • Quick Start Guide 1.1/ SYSTEM REQUIREMENTS System and software requirements are: • computer or other network device supporting Wi-Fi or wired A Ethernet • web browser, such as Chrome™, Firefox®, Internet Explorer 8® or A higher, or Safari® 5.1 or higher 1.
01 / INTRODUCTION 8 –– Ethernet supports speeds up to 1000 Mbps –– M oCA 2.0 and 1.1 enabled to support speeds up to 700 Mbps over coaxial cable • I ntegrated wireless networking with 802.11b/g/n/ac access point featuring: –– Enabled 802.11b capable speeds (based on device) –– Enabled 802.11g capable speeds (based on device) –– Enabled 802.11n capable speeds (based on device) –– Enabled 802.
FEATURES AND GETTING TO KNOW YOUR GATEWAY –– Port forwarding –– Port triggering –– Access control –– A dvanced wireless protection featuring WPA2/WPA Mixed Mode, WEP 64/128 bit encryption, and MAC address filtering • Options, including: –– DHCP server –– WAN interface auto-detection –– Dynamic DNS –– DNS server –– LAN IP and WAN IP address selection –– MAC address cloning –– IPv6 support –– Q oS support (end to end layer 2/3) featuring: Differentiated Services (Diffserv), 802.
01 / INTRODUCTION 10 –– IGMP –– Daylight savings time support 1.3/ GETTING TO KNOW YOUR GATEWAY 1.3a/ FRONT PANEL The front panel has two lighted indicators and a WPS (Wi-Fi Protected Setup) button. The Power/Internet light will be on and solid when your Gateway is turned on, connected to the Internet, and functioning normally. The Wireless light will be on when your Gateway Wi-Fi is turned on.
GETTING TO KNOW YOUR GATEWAY If there is an error during the WPS pairing process, the wireless light flashes red rapidly for two minutes after the error occurs. The WPS button can also be used to reboot the router. To perform a soft reboot, press and hold the WPS button for at least 10 seconds. 1.
01 / INTRODUCTION 12 USB (2 ports) Reset Button Ethernet LAN (4 ports) HAN expansion port Ethernet WAN Coax WAN and LAN Power verizon.com/fios | ©2014 Verizon. All Rights Reserved.
GETTING TO KNOW THE GATEWAY • SB - provides up to 500 mA at 5 VDC for attached devices. U For example, you could charge a cell phone. In the future, with a firmware upgrade, the USB host functionality may be available for other devices, such as external storage and cameras. Firmware updates are performed automatically by Verizon. • eset Button - allows you to reset your Gateway to the factory R default settings. To reset the Gateway, press and hold the Reset button for at least three seconds.
01 / INTRODUCTION 14 1.3d/ MOUNTING THE GATEWAY TO A WALL For optimum performance, the FiOS Quantum Gateway is designed to stand in a vertical upright position. Verizon does not recommend wall mounting the FiOS Quantum Gateway. However, if you wish to mount your Gateway, you can purchase a wall mount bracket from the Verizon FiOS Accessories Store at verizon.com/fiosaccessories. If you are replacing an existing Verizon wall mounted router, you do not need to remove the mounting screws from the wall.
GETTING TO KNOW THE GATEWAY 4. ark the mounting holes, M then remove the wall mount bracket from the wall. 5. rill holes for the screw D anchors. 6. I nsert the screw anchors in the holes in the wall, then insert the screws into the screw anchors and tighten the screws. Leave screws extended about 0.2 inches from the wall. 7. erify the screws are positioned correctly by placing the wall V bracket on the screws. Remove the wall bracket from the wall. 8.
02/ CONNECTING YOUR GATEWAY 2.0 Setting Up Your Gateway 2.1 Computer Network Configuration 2.2 Main Screen verizon.com/fios | ©2014 Verizon. All Rights Reserved.
SETTING UP YOUR GATEWAY Connecting your Gateway and accessing its web-based Graphical User Interface (GUI) are both simple procedures. Accessing the GUI may vary slightly, depending on your device’s operating system and web browser.
02 / CONNECTING YOUR GATEWAY 18 2.0/ SETTING UP YOUR GATEWAY There are three basic steps to setting up your Gateway: Step 1: Connect your Gateway to the Internet Step 2: Connect your network device to your Gateway Step 3: Configure your Gateway Before you begin, if you are replacing an existing Gateway, disconnect it. Remove all old Gateway components, including the power supply. They will not work with your new Gateway. 2.0a/ STEP 1 - CONNECT YOUR GATEWAY 1.
SETTING UP YOUR GATEWAY • If connecting the WAN using coaxial cable, locate a coaxial cable and connect one end to the coax port on the back of your Gateway. Connect the other end of the coaxial cable to a coax wall jack. Tighten the coaxial cables by hand until snug. The cables should not require a wrench. 4. lug the power cord into the power port on the back of P your Gateway and then into a power outlet. The Gateway automatically turns on as soon as power is plugged in.
02 / CONNECTING YOUR GATEWAY 20 If connecting a wireless device: • ccess the Wi-Fi setting on your wireless device, then select your A new Gateway using the wireless network name (ESSID) shown on the sticker located on the side of your Gateway. • Enter the wireless password (WPA2 key) also shown on the sticker.
SETTING UP YOUR GATEWAY The first time you access your Gateway, an Easy Setup Wizard displays to help step you through the setup process. 3. lick the Get Started button. The Gateway Login screen C displays.
02 / CONNECTING YOUR GATEWAY 22 4. In the Admin Password field, enter the password that is printed next to the Administrator Password on the label on the side of your Gateway. Default login credentials Please note: password letters are all lower-case Wireless network name (ESSID) Wireless password (WPA2) Administration URL Administrator password XXXXXXXXXXX XXXXXXXXXXXXXXXX myfiosgateway.com XXXXXXXXXX To reboot, press and hold the WPS button for 10 seconds. www.verizon.
SETTING UP YOUR GATEWAY AND COMPUTER NETWORK CONFIGURATION For your protection, your Gateway is pre-set at the factory to use WPA2/WPA mixed mode (Wi-Fi Protected Access) encryption for your wireless network. This is the best setting for most users and provides maximum security. 6. Click Next to continue and save the Admin and Wi-Fi changes to your Gateway.
02 / CONNECTING YOUR GATEWAY 24 8. Click Next to continue. Your Gateway verifies the final settings and displays that it is successfully connected to the Internet and is ready for use. Upon the successful completion of setup, the Main screen of the Gateway displays. Your Gateway is now configured. You can change any of the Gateway settings after this initial log in. If your Gateway is subsequently reset to the factory default settings, the settings printed on the label will again be in effect.
COMPUTER NETWORK CONFIGURATION 2. In the View your active networks – Connect or disconnect section, click Local Area Connection in the Connections field. The Local Area Connection Status window displays. 3. lick Properties. The Local Area Connection Properties C window displays. 4. elect Internet Protocol Version 4 (TCP/IPv4), then click S Properties. The Internet Protocol Version 4 (TCP/IPv4) Properties window displays. 5. Click the Obtain an IP address automatically radio button. 6.
02 / CONNECTING YOUR GATEWAY 26 4. erify that Ethernet, located in the list on the left, is V highlighted and displays Connected. 5. Click Assist Me. 6. ollow the instructions in the Network Diagnostics F Assistant. 2.1b/ CONNECTING OTHER COMPUTERS & NETWORK DEVICES You can connect your Gateway to other computers or set top boxes using an Ethernet cable, wireless connection (Wi-Fi), or coaxial cable. ETHERNET 1.
COMPUTER NETWORK CONFIGURATION In most cases, this only requires the pressing of two buttons – one on your Gateway and one on the wireless client. This could be either a built-in button or one on a compatible wireless adapter/card, or a virtual button in software. Once completed, this allows wireless clients to join your wireless network. To initialize the WPS process, you can either press and release the WPS button located on the front of your Gateway or use the GUI and press the on-screen button.
02 / CONNECTING YOUR GATEWAY 28 2. Enable the protected setup by moving the selector to On. 3. Use one of the following methods: • If your wireless client device has a WPS button, press the WPS button on your Gateway, then click the WPS button on your wireless device (client) to start the WPS registration process. • If your client device has a WPS PIN, locate the PIN printed on the client’s label or in the client documentation. Enter the PIN number in the Client WPS PIN field.
COMPUTER NETWORK CONFIGURATION AND MAIN SCREEN If WPS fails to establish a connection to a wireless client device within two minutes, the Wireless light on your Gateway flashes red for two minutes to indicate the WPS pairing process was unsuccessful. After flashing red, the light returns to solid white to indicate that Wi-Fi is on. CONNECTING A WI-FI DEVICE USING A PASSWORD 1. erify each device that you are connecting wirelessly (using V Wi-Fi) has a built-in wireless or external wireless adapter. 2.
02 / CONNECTING YOUR GATEWAY 30 3. onnect one end of the coaxial cable to the coaxial wall jack C and the other end to the Coax port on your network device. 4. Power up the network device. 2.2/ MAIN SCREEN When you log into your Gateway, the page displays showing the Main navigation menu at the top of the page and your Gateway’s Status, including Quick Links, My Network, and Verizon Zone display in the body of the page. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
MAIN SCREEN 2.2a/ MENU The Main menu links across the top of the page to the following configuration options and chapters: • Wireless Settings - Chapter 3 • My Network - Chapter 5 • Firewall - Chapter 6 • Parental Controls - Chapter 7 • Advanced - Chapter 8 • System Monitoring - Chapter 9 2.2b/ STATUS This section displays the status of your Gateway’s local network (LAN) and Internet connection (WAN).
02 / CONNECTING YOUR GATEWAY 32 QUICK LINKS Quick Links contains frequently accessed documentation, such as User Guide and Verizon Help, and settings, such as Change Wireless Settings, Change Admin Password, and Port Forwarding as well as Logout. MY NETWORK My Network displays the connection type, IP address, and status of all devices that have accessed or are currently connected to the network.
03/ WIRELESS SETTINGS 3.0 Overview 3.1 Wireless Status 3.2 Basic Security Settings 3.3 Advanced Security Settings 3.4 Wireless MAC Authentication 3.5 802.11 Mode 3.
03 / WIRELESS SETTINGS 34 Wireless networking enables you to free yourself from wires and plugs, making your devices more accessible and easier to use. You can create a wireless network, including accessing and configuring wireless security options. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
OVERVIEW 3.0/ OVERVIEW Your Gateway provides you with wireless connectivity using the 802.11b, g, n, or ac standards. These are the most common wireless standards. 802.11b has a maximum data rate of 11 Mbps, 802.11g has a maximum data rate of 54 Mbps, 802.11n has a maximum data rate of 450 Mbps, and 802.11ac has a maximum data rate of 1300 Mbps. 802.11b and g standards operate in the 2.4 GHz range. 802.11n operates in both the 2.4 GHz and 5 GHz ranges. 802.11ac operates in the 5 GHz range. Note: 802.
03 / WIRELESS SETTINGS 36 Your Gateway integrates multiple layers of security. These include Wired Equivalent Privacy (WEP), Wi-Fi Protected Access (WPA/WPA2), and firewall. 3.1/ WIRELESS STATUS Use the Wireless Status feature to view the status of your Gateway’s wireless network. To view the status: 1. ccess the Main page. You can quickly view your Gateway’s A wireless status in the My Network column. This includes all devices that have recently accessed or are currently connected to the network.
WIRELESS STATUS 2. Select the Wireless Settings icon. The Wireless Status page displays additional wireless details.
03 / WIRELESS SETTINGS 38 3. n the Wireless Status page for either 2.4 GHz or 5 GHz, the O following information displays: • Radio Enabled - displays whether the wireless radio is active. When the radio is not enabled, no wireless devices will be able to connect to the home network. • SSID - displays the SSID (Service Set Identifier) shared among all devices on a wireless network. The SSID is the network name. All devices must use the same SSID.
WIRELESS STATUS AND BASIC SECURITY SETTINGS • Packets Received/Sent - displays the number of packets received and sent since the wireless capability was activated. 3.2/ BASIC SECURITY SETTINGS You can configure the basic security settings for your Gateway’s wireless network. Note: Your Gateway’s recommended wireless security encryption is set to WPA2. This is the factory default. This section explains how to activate WEP (Wired Equivalent Privacy) wireless security.
03 / WIRELESS SETTINGS 40 2. To activate the wireless radio, click the On radio button. 3. I f desired, enter a new name for the wireless network in the SSID field or leave the default name that displays automatically. 4. elect the channel you want the wireless radio to use to S communicate or accept the default channel, then select the Keep my channel selection during power cycle check box to save your channel selection when your Gateway is rebooted. verizon.com/fios | ©2014 Verizon.
BASIC SECURITY SETTINGS 5. o turn on WEP (Wired Equivalent Privacy) security, click the T WEP radio button. 6. Select a WEP security level as 64/40 bit or 128/104 bit. 7. nter the key code. If using a HEX key, each character E must be a letter from A to F or a number from 0 to 9. If the key is ASCII, each character can be either any ASCII or alphanumeric character. If using 64/40 bit, enter 10 HEX or 5 ASCII/alphanumeric characters. If 128/104, enter 26 HEX or 13 ASCII/ alphanumeric characters.
03 / WIRELESS SETTINGS 42 Gateway must be configured to use these settings to join your Gateway’s wireless network. 9. Click Apply to save changes. 3.
ADVANCED SECURITY SETTINGS 3.3a/ LEVEL 1: SECURING YOUR NETWORK In the Level 1 section, select the type of wireless security. Depending on your selection, one of the following pages displays. WEP If WEP was selected, the WEP Settings page displays. Warning: WEP provides a low level of security and is not recommended. Additionally, the WEP security setting will drop your Gateway’s wireless performance to a maximum data rate of 54 Mbps, and will disable Wi-Fi Protected Setup (WPS).
03 / WIRELESS SETTINGS 44 To set the WEP security: 1. In the Network Authentication field, select the authentication level as Open System Authentication, Shared Key Authentication or Both. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
ADVANCED SECURITY SETTINGS 2. In the WEP Keys section, activate the encryption key by entering the key name in the Encryption Key column. If HEX, the key must be hexadecimal digits. If ASCII, any characters can be used. 3. pecify the length of key 1 by selecting 64/40 bit or S 128/104 bit in the Key Length field and HEX or ASCII in the Entry Method field. 4. Click Apply to save changes. WPA/WPA2 Mixed Mode If WPA/WPA2 Mixed Mode (Wi-Fi Protected Access) was selected, the WPA Key page displays.
03 / WIRELESS SETTINGS 46 3. Click Apply to save the changes. WPA2 If WPA2 (Wi-Fi Protected Access II) was selected, the WPA2 page displays. To set the WPA2 security: 1. Enter the Pre-Shared Key. 2. o activate the group key update interval, select the Group T Key Update Interval check box and set the interval time in seconds. 3. Click Apply to save the changes. 3.
ADVANCED SECURITY SETTINGS To enable or disable SSID broadcast: 1. In the Advanced Settings page, locate the Level 2 section. 2. Click the 2.4 GHz SSID Broadcast or 5 GHz SSID Broadcast link for the wireless network you wish to modify. The following example uses the 2.4 GHz network. The display configuration looks basically the same for the 5 GHz network. 3. o enable SSID broadcasting, click the Enable radio button. T SSID broadcast is enabled by default.
03 / WIRELESS SETTINGS 48 4. o disable SSID broadcasting, click the Disable radio button. T The public SSID broadcast will be hidden from all wireless devices. You will need to manually configure additional wireless devices to join the wireless network. 5. Click Apply to save the changes. 3.
WIRELESS MAC AUTHENTICATION 4. o access other advanced wireless options, click the Other T Advanced Wireless Options link. The Other Advanced Wireless Options page displays. For additional details, refer to the Other Advanced Wireless Options section. 3.4/ WIRELESS MAC AUTHENTICATION You can allow or deny access to your wireless network by specifying devices with specific MAC addresses. To set wireless MAC authentication: 1.
03 / WIRELESS SETTINGS 50 verizon.com/fios | ©2014 Verizon. All Rights Reserved.
802.11 MODE 2. o enable access control, select the Enable Access List check T box. 3. Select either: • Accept all devices listed below – allows only the listed devices to access the wireless network. Warning: This will block wireless network access for all devices not in the list. Only devices in the list will be able to connect to the wireless network. • Deny all devices listed below – denies access to the listed devices.
03 / WIRELESS SETTINGS 52 To select the 802.11 Mode: 1. n the Advanced Settings page, locate the Level 3 section O and click the 802.11 Mode link. The 802.11 Mode page displays. 2. Select the 2.4 GHz Wireless Mode as follows: • ompatibility – This is the default mode setting, C providing a good balance of performance and compatibility with existing wireless devices. 802.11b, g, and n devices can connect. • Legacy – For older wireless devices. Only 802.11b and g devices can connect. 802.
OTHER ADVANCED WIRELESS OPTIONS 3. 4. Select the 5 GHz Wireless Mode as follows: • N and AC Mode – This is the default setting. Both 802.11n and 802.11ac are available on the 5 GHz frequencies. • N Only Mode – The 5 GHz frequencies are available to 802.11n devices. 802.11ac is not enabled. • AC Only Mode – This provides maximum performance. 802.11ac devices will have exclusive use of the 5 GHz frequencies and 802.11n devices will not be able to connect at 5 GHz. Click Apply to save the changes. 3.
03 / WIRELESS SETTINGS 54 3. View the following options: Caution: These settings should only be configured by experienced network technicians. Changing the settings could adversely affect the operation of your Gateway and your local network. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
OTHER ADVANCED WIRELESS OPTIONS • Transmission Rate – displays status as Auto • Channel Width – Controls the bandwidth of the wireless signal • Transmit Power – adjusts the power of the wireless signal • CTS (Clear to Send) Protection Mode – allows mixed 802.11b/g/n/ac networks to operate at maximum efficiency • CTS Protection Type – displays cts, which is only for mixed 802.11b/g/n/ac networks or rts_cts, which is for 802.
03 / WIRELESS SETTINGS 56 • MSDU Aggregation – enables or disables MSDU aggregation • MPDU Aggregation – enables or disables MPDU aggregation 5. To access the WMM settings, click the WMM Settings link. 6. Click Apply to save changes. 3.6a/ WMM SETTINGS You can prioritize the types of data transmitted over the wireless network using the advanced WMM settings.
OTHER ADVANCED WIRELESS OPTIONS 3. o enable Wireless QoS (WMM), select the Enabled check T box. 4. o enable WMM Power Save, enable Wireless QoS (WMM) T first, then enable WMM Power Save by selecting the Enabled check box. 5. Click Apply to save changes.
03 / WIRELESS SETTINGS 58 verizon.com/fios | ©2014 Verizon. All Rights Reserved.
04/ CONFIGURING MY NETWORK SETTINGS 4.0 Accessing My Network Settings 4.
04 / CONFIGURING MY NETWORK SETTINGS 60 You can configure the basic network settings for your Gateway’s network. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
ACCESSING MY NETWORK SETTINGS AND USING MY NETWORK SETTINGS Caution: The settings described in this chapter should only be configured by experienced network technicians. Changes could adversely affect the operation of your Gateway and your local network. 4.0/ ACCESSING MY NETWORK SETTINGS My Network allows you to view and manage your network connections and devices. You can block websites and Internet services, set port forwarding, view device details, and rename devices.
04 / CONFIGURING MY NETWORK SETTINGS 62 4.1/ USING MY NETWORK SETTINGS You can access and configure common network parameters: • ebsite Blocking - To block specific websites, click Website W Blocking. The Parental Controls page displays. For additional information about blocking websites, refer to Chapter 7 Setting Parental Controls.
USING MY NETWORK SETTINGS Port Forwarding Services, and Windows Shared Folder as well as the Ping Test option. You can also click the device’s icon in the Main page to display the Device Information page. • ename this Device - To change the name of a specific device, click R Rename this Device. The Rename Device page displays. If desired, enter the new device name and/or select a different icon. Click Apply to save changes. The My Network page will open with the new name and icon displayed.
05/ USING NETWORK CONNECTIONS 5.0 Accessing Network Connections 5.1 Network (Home/Office) Connection 5.2 Ethernet/Coax Connection 5.3 Wireless Access Point Connection 5.4 Broadband Ethernet/Coax Connection verizon.com/fios | ©2014 Verizon. All Rights Reserved.
ACCESSING NETWORK CONNECTIONS Your Gateway supports various local area network (LAN) and wide area network (WAN), or Internet connections using Ethernet or coaxial cables. You can configure aspects of the network and Internet connections as well as create new connections.
05 / USING NETWORK CONNECTIONS 66 Caution: The settings described in this chapter should only be configured by experienced network technicians. Changes could adversely affect the operation of your Gateway and your local network. 5.0/ ACCESSING NETWORK CONNECTIONS You can access your network connections and view the connections by connection type. To access the network connections: 1. Select My Network, then select Network Connections. 2. To display all connection entries, click the Advanced button.
NETWORK (HOME/OFFICE) CONNECTION 3. o view and edit the details of a specific network connection, T click the hyperlinked name or the action icon. The following sections detail the types of network connections that you can view. 5.1/ NETWORK (HOME/OFFICE) CONNECTION You can view the properties of your local network. This connection is used to combine several network interfaces under one virtual network. For example, you can create a home/office network connection for Ethernet and other network devices.
05 / USING NETWORK CONNECTIONS 68 To view the connection: 1. n the Network Connections page, click the Network O (Home/Office) connection link. The Network (Home/Office) Properties page displays. 2. o rename a network connection, enter the new network T name in the Name field. 3. Click Apply to save the changes. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
NETWORK (HOME/OFFICE) CONNECTION CONFIGURING THE HOME/OFFICE NETWORK To configure the network connection: 1. I n the Network (Home/Office) Properties page, click Settings. The configuration page displays. 2. Configure the following sections, as needed. GENERAL In the General section, verify the following information: • Status - displays the connection status of the network. • Network – displays the type of network connection.
05 / USING NETWORK CONNECTIONS 70 • Connection Type - displays the type of connection.
NETWORK (HOME/OFFICE) CONNECTION Verify the following information: • Status – displays the connection status of a specific network connection. • Action – contains an icon that, when clicked, generates the next lower-level configuration page for the specific network connection or network device. IP ADDRESS DISTRIBUTION The IP Address Distribution section of the Properties settings is used to configure your Gateway’s Dynamic Host Configuration Protocol (DHCP) server parameters.
05 / USING NETWORK CONNECTIONS 72 Once enabled and configured, the DHCP server automatically assigns IP addresses to any network devices which are set to obtain their IP address dynamically. If DHCP Server is enabled on your Gateway, configure the network devices as DHCP Clients. There are 2 basic options in this section: Disabled and DHCP Server. To set up the Gateway’s network bridge to function as a DHCP server: 1. In the IP Address Distribution section, select the DHCP server.
NETWORK (HOME/OFFICE) CONNECTION • End IP Address – Enter the last IP address in the IP range that the Gateway will automatically stop the IP address allocation at. The maximum end IP address range that can be entered is 192.168.1.254. 2. I f Windows Internet Naming Service (WINS) is being used, enter the WINS server address. 3. In the Lease Time in Minutes field, enter the amount of time a network device is allowed to connect to the Gateway with its currently issued dynamic IP address. 4.
05 / USING NETWORK CONNECTIONS 74 COMPLETE NETWORK CONNECTION CONFIGURATION UPDATES To save your changes click Apply. 5.2/ BROADBAND CONNECTION You can view the properties of your broadband connection (your connection to the Internet). This connection may be via either Ethernet or Coaxial cable. To view the connection settings: 1. I n the Network Connections page, click the Broadband Connection (Ethernet/Coax) link. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
ETHERNET/COAX CONNECTION 2. o rename the network connection, enter the new name in T the Name field. 3. Click Apply to save changes. 5.2a/ CONFIGURING THE ETHERNET/COAX CONNECTION To configure the connection: 1. I n the Broadband Connection (Ethernet/Coax) Properties page, click Settings. The configuration page displays.
05 / USING NETWORK CONNECTIONS 76 2. Configure the following settings, as needed. GENERAL Verify the following information: • Status - displays the connection status of the network. • Network – displays the type of network connection. • Connection Type - displays the type of connection. • Physical Address - displays the physical address of the network card used for the network.
ETHERNET/COAX CONNECTION –– A utomatic by DHCP - sets the MTU according to the DHCP connection –– Manual - allows you to manually set the MTU to be set. COAX LINK To set the Channel: 1. Select the coax link channel as 1 to 3. 2. Select the On or Off radio button in the Auto Detection field. 3. o set privacy, select the Enabled check box. This causes T all devices connected to the coaxial cable to use the same password. This is recommended. 4.
05 / USING NETWORK CONNECTIONS 78 To save your changes: 1. Click Apply. 5.3/ WIRELESS ACCESS POINT CONNECTION A Wireless Access Point network connection allows wireless devices to connect to the local area network (LAN) using the 2.4 GHz or 5 GHz Wi-Fi network. Note: Once disabled, all wireless devices connected to that wireless network will be disconnected from the LAN network and Internet. To view the connection: 1. In the Network Connections page, click Advanced. verizon.
WIRELESS ACCESS POINT CONNECTION 2. lick 5 GHz Wireless Access Point 1 or 2.4 GHz Wireless C Access Point 2. 3. To disable the connection, click Disable. 4. To rename the connection, enter a name in the Name field. 5. Click Apply to save the changes. 6. Reboot your Gateway. 5.
05 / USING NETWORK CONNECTIONS 80 1. I n the Wireless Access Point Properties page, click Settings. The configuration page displays. 2. Verify the following information: • Status - displays the connection status of the network. • Network – displays the type of network connection. • Connection Type - displays the type of connection. • Physical Address - displays the physical address of the network card used for the network.
WIRELESS ACCESS POINT CONNECTION AND BROADBAND ETHERNET/COAX CONNECTION –– A utomatic - set the MTU (Maximum Transmission Unit) at 1500 –– A utomatic by DHCP - sets the MTU according to the DHCP connection –– Manual - allows you to manually set the MTU 3. Click Apply to save changes. 5.4/ BROADBAND ETHERNET/COAX CONNECTION A Broadband Ethernet connection connects computers to your Gateway using Ethernet cables. The connections are either direct or use network hubs and switches.
05 / USING NETWORK CONNECTIONS 82 2. o rename the network connection, enter the new name in T the Name field. 3. Click Apply to save changes. 5.4a/ CONFIGURING THE ETHERNET/COAX CONNECTION To configure the connection: 1. I n the Broadband Connection (Ethernet/Coax) Properties page, click Settings. The configuration page displays. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
BROADBAND ETHERNET/COAX CONNECTION 2. Configure the following settings, as needed.
05 / USING NETWORK CONNECTIONS 84 –– A utomatic by DHCP - sets the MTU according to the DHCP connection –– Manual - allows you to manually set the MTU COAX LINK 1. To set the Channel, select the coax link channel as 1 to 3. 2. Select the On or Off radio button in the Auto Detection field. 3. o set privacy, select the Enabled check box. This causes T all devices connected to the coaxial cable to use the same password. This is recommended. 4.
BROADBAND ETHERNET/COAX CONNECTION INTERNET PROTOCOL 1. 2. In the Internet Protocol section, specify one of the following: • No IP Address – the connection has no IP address. This is useful if the connection operates under a bridge. • Obtain an IP Address Automatically – the network connection is required by Verizon to obtain an IP address automatically. The server assigning the IP address also assigns a subnet mask address, which can be overridden by entering another subnet mask address.
05 / USING NETWORK CONNECTIONS 86 ROUTING MODE COMPLETE ALL ETHERNET/COAX CONNECTION CONFIGURATION UPDATES To save your changes: 1. Click Apply. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
06/ CONFIGURING SECURITY SETTINGS 6.0 Firewall 6.1 Access Control 6.2 Port Forwarding 6.3 Port Triggering 6.4 Remote Administration 6.5 Static NAT 6.
06 / CONFIGURING SECURITY SETTINGS 88 Your Gateway’s security suite includes comprehensive and robust security services, such as stateful packet inspection, firewall security, user authentication protocols, and password protection mechanisms. These and other features help protect your computers from security threats on the Internet. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
FIREWALL This chapter covers the following security features: • Firewall - select the security level for the firewall. • ccess Control - restrict access from the local network to the A Internet. • Port Forwarding - enable access from the Internet to specified services provided by computers on the local network. • Port Triggering - define port triggering entries to dynamically open the firewall for some protocols or ports.
06 / CONFIGURING SECURITY SETTINGS 90 The firewall regulates the flow of data between the local network and the Internet. Both incoming and outgoing data are inspected, then either accepted and allowed to pass through your Gateway or rejected and barred from passing through your Gateway, according to a flexible and configurable set of rules. These rules are designed to prevent unwanted intrusions from the outside, while allowing local network users access to Internet services.
FIREWALL It is the origin of the request, not subsequent responses to this request, which determines whether a session can be established. 6.0a/ SETTING FIREWALL CONFIGURATION You can select a maximum, typical, or minimum security level to block, limit, or permit all traffic. The following table shows request access for each security level.
06 / CONFIGURING SECURITY SETTINGS 92 6.0b/ SPECIFYING GENERAL SETTINGS FOR IPV4 OR IPV6 To set your firewall configuration: 1. rom the Firewall General settings page click on desired IPv6 F option to configure IPv6 security: verizon.com/fios | ©2014 Verizon. All Rights Reserved.
ACCESS CONTROL 2. elect a security level by clicking one of the radio buttons. S Using the Minimum Security setting may expose the local network to significant security risks, and should only be used for short periods of time to allow temporary network access. 3. Click Apply to save changes. 6.1/ ACCESS CONTROL You can block individual computers on your local network from accessing specific services on the Internet.
06 / CONFIGURING SECURITY SETTINGS 94 2. o block a service, click Add. The Add Access Control Rule T page displays. 3. To apply the rule to: • All networked devices - select Any. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
ACCESS CONTROL AND PORT FORWARDING • 4. Specific devices only - select User Defined, then click Add and create a network object. In the Protocol field, select the Internet protocol to be allowed or blocked. If the service is not included in the list, select User Defined. The Edit Service page displays. Define the service, then click OK. The service is automatically added to the Add Access Control Rule section. 5.
06 / CONFIGURING SECURITY SETTINGS 96 6.2/ PORT FORWARDING You can activate port forwarding to expose the network to the Internet in a limited and controlled manner. For example, enabling applications, such as gaming and voice, to work from the local network as well as allowing Internet access to servers within the local network. To create port forwarding rules: 1. rom the Firewall page, select Port Forwarding. The Port F Forwarding page opens with the current rules displayed. 2.
PORT FORWARDING AND PORT TRIGGERING 3. elect the application in the Application to Forward drop S down. 4. Click Add. The rule displays in the Applied Rules section. 5. Click Apply to save changes. 6.2a/ ADVANCED PORT FORWARDING RULES You can configure advanced port forwarding rules. To configure the rules: 1. In the Port Forwarding page, select Advanced.
06 / CONFIGURING SECURITY SETTINGS 98 2. I f needed, to select a port to forward communication to, select an option in the Forward to Port list box. 3. I f a single port or range of ports is selected, a text box displays. Enter the port numbers. 4. o schedule the rule, select either Always or User Defined in T the Schedule list box. 5. Click Add. The rule displays in the Applied Rules section. 6. Click Apply to save changes. 6.
PORT TRIGGERING AND REMOTE ADMINISTRATION To resolve the conflict, a port triggering entry must be defined, which allows inbound traffic on UDP port 3333 only after a network host generated traffic to UDP port 2222. This results in your Gateway accepting the inbound traffic from the gaming server and sending it back to the network host which originated the outgoing traffic to UDP port 2222. To configure port triggering: 1. Select Port Triggering. 2. o add a service as an active protocol, click Add.
06 / CONFIGURING SECURITY SETTINGS 100 3. nter the service name then configure its inbound and E outbound trigger ports. Click Apply to save User Defined changes. The Port Triggering page displays. 4. Click Apply again to save all changes. 6.4/ REMOTE ADMINISTRATION Caution: Enabling Remote Administration places your Gateway network at risk from outside attacks. You can access and control your Gateway not only from within the local network, but also from the Internet using Remote Administration.
REMOTE ADMINISTRATION AND STATIC NAT You can allow incoming access to the following: • eb Management - used to obtain access to your Gateway’s GUI W and gain access to all settings and parameters through a web browser. • Diagnostic Tools - used for troubleshooting and remote system management by a user or Verizon. Web Management remote administration access may be used to modify or disable firewall settings.
06 / CONFIGURING SECURITY SETTINGS 102 2. To enable access, select the check box. 3. Click Apply to save changes. 4. To remove access, clear the check box. 5. Click Apply again to save changes. 6.5/ STATIC NAT Static NAT allows devices located behind a firewall that is configured with private IP addresses to appear to have public IP addresses to the Internet. This allows an internal host, such as a web server, to have an unregistered (private) IP address and still be accessible over the Internet.
STATIC NAT AND SECURITY LOG To configure static NAT: 1. Select Static NAT. 2. o create a static NAT, click Add. The Add NAT/NAPT Rule T page displays.
06 / CONFIGURING SECURITY SETTINGS 104 3. elect a source address in the Specify Address field or enter S an IP address in the text box. 4. Enter the public IP address. 5. I f using port forwarding, select the Enable Port Forwarding for Static NAT check box. 6. Click Apply to save changes. 7. Repeat these steps to add additional static IP addresses. 6.6/ SECURITY LOG You can view events that your firewall has blocked by accessing the security log.
SECURITY LOG You can modify the type of events that display in the security log. This does not modify the event itself. It simply changes the information that displays in the log. 6.6a/ EVENT TYPES The security log records the following event types: • ccess control – a packet has been accepted/blocked due to an A access control rule. • dvance filter rule – a packet has been accepted/blocked due to an A advanced filter rule. • ARP – an ARP packet has been accepted.
06 / CONFIGURING SECURITY SETTINGS 106 • cho/Chargen/Quote/Snork protection – a packet has been blocked E due to Echo/Chargen/Quote/Snork protection. • irewall internal – from the firewall internal mechanism, event type F is recorded and an accompanying explanation will be added. • Firewall rules were changed – the rule set has been modified. • irewall status changed – the firewall status changed from up to F down or vice versa, as specified in the event type description.
SECURITY LOG • ragmented packet, packet too big – a packet has been blocked F because, after defragmentation, the packet was too big. • TP port request to 3rd party is forbidden – possible bounce attack F – a packet has been blocked. • I CMP flood protection – a broadcast ICMP (Internet Control Message Protocol) flood. • ICMP protection – a broadcast ICMP message has been blocked. • I CMP redirect protection – an ICMP redirected message has been blocked.
06 / CONFIGURING SECURITY SETTINGS 108 • NAT Error: No free NAT IP – no free NAT IP, so NAT has failed. • NAT out failed – NAT failed for this packet. • Outbound Auth1X – an outbound Auth1X packet has been accepted. • acket invalid in connection – an invalid connection packet has been P blocked. • arental controls – a package has been block because of parental P controls. • assive attack on ftp-server: Client attempted to open Server ports P – a packet has been blocked.
SECURITY LOG • Wildcard connection opened - debug message regarding connection. • WinNuke protection – a WinNuke attack has been blocked. To view the security log: 1. Select Security Log. 2. o modify the types of events that display in the log, click T Settings.
06 / CONFIGURING SECURITY SETTINGS 110 3. In the Accepted Events section, select the type of activities that generates a log message: • Accepted Incoming Connections – generates a log message for each successful attempt to establish an inbound connection to the local network. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
SECURITY LOG • Accepted Outgoing Connections - generates a log message for each successful attempt to establish an outbound connection to the public network. 4. In the Blocked Events section, select the type of blocked events you want logged. 5. o log a message for each remote administration connection T attempt, click the Remote Administration Attempts check box. 6. o log the connection for handling by the firewall and T application level Gateways, click the Connection States check box. 7.
06 / CONFIGURING SECURITY SETTINGS 112 verizon.com/fios | ©2014 Verizon. All Rights Reserved.
07/ SETTING PARENTAL CONTROLS 7.0 Activating Parental Controls 7.
07 / SETTING PARENTAL CONTROLS 114 The abundance of harmful information on the Internet poses a serious challenge for employers and parents alike as they ask “How can I regulate what my employee or child does on the Internet?” With that question in mind, your Gateway’s Parental Controls were designed to allow control of Internet access on all locally networked devices. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
ACTIVATING PARENTAL CONTROLS 7.0/ ACTIVATING PARENTAL CONTROLS You can create a basic access policy for any computer or device on your Gateway network. Parental controls limit Internet access to specific websites based on a schedule that you create. Access can be limited on specific websites or keywords embedded in a website. For example, you can block access to the ‘www.anysite.com’ as well as block any website that has the word ‘any’ in its site name. To limit computer access: 1.
07 / SETTING PARENTAL CONTROLS 116 3. o remove a device from the Selected Devices list box, select T the device, then click Remove. The device displays in the Networked Computer/Device list box. 4. I n Step 2, click one of the following options in the Limit Access By section: • Block the following Websites and Embedded Keywords within a Website – blocks the specified websites and websites with names contained the specified keyword.
ACTIVATING PARENTAL CONTROLS AND RULE SUMMARY 7. reate a schedule by selecting the days of the week when the C rule will be active or inactive. 8. et the time when the rule will be active or inactive, then S specify the start time and end time. 9. Create a rule name and description. 10. Click Apply to save changes. 7.1/ RULE SUMMARY You can view the rules created for your Gateway. • o view the rule summary, select Rule Summary.
07 / SETTING PARENTAL CONTROLS 118 You can view, edit, or delete the rule, refer to Scheduler Rules for additional setting details. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
08/ CONFIGURING ADVANCED SETTINGS 8.0 Using Advanced Settings 8.1 Utilities 8.2 DNS Settings 8.3 Network Settings 8.4 Routing 8.5 Date and Time 8.
08 / CONFIGURING ADVANCED SETTINGS 120 Advanced settings cover a wide range of sophisticated configurations for your Gateway’s firmware and network. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
USING ADVANCED SETTINGS AND UTILITIES Caution: Many of the settings described in this section should only be configured by experienced network technicians. Changes could adversely affect the operation of your Gateway and local network. 8.0/ USING ADVANCED SETTINGS You can access the following settings: Utilities Date & Time DNS Settings Routing Network Settings Configuration Settings To access the advanced settings: 1. elect Advanced. A warning page displays, asking if you want S to proceed. 2.
08 / CONFIGURING ADVANCED SETTINGS 122 3. Select a topic by clicking the topic name. 8.
UTILITIES • Local Administration – allows you to grant local SSH access • Remove Administration – detailed in Chapter 6 Configuring Your Network Settings 8.1a/ DIAGNOSTICS You can use diagnostics to test network connectivity. To diagnose network connectivity: 1. Select Diagnostics in the Advanced page. 2. o ping an IP address, enter the IP address or domain name in T the Destination field and click Go. The diagnostics will display the number of pings, status, packets sent, and round trip time.
08 / CONFIGURING ADVANCED SETTINGS 124 3. Click Close to exit the session. 8.1b/ RESTORE DEFAULTS You can restore your configuration settings to your Gateway factory default settings. Restoring the default settings erases the current configuration, including user defined settings and network connections. All connected DHCP client must request new IP addresses. Your Gateway must restart. Prior to restoring the factory defaults, you may want to save your current configuration to a file.
UTILITIES 2. o save your current configuration file, click Save T Configuration File. 3. To restore the factory default settings, click OK. The factory default settings are applied and your Gateway restarts. Once complete, the Login page for the First Time Easy Setup Wizard displays. 8.1c/ REBOOT GATEWAY You can reboot your Gateway using the Reboot Router feature as well as pressing and holding the WPS button on the front of the Gateway for at least 10 seconds. To reboot your Gateway: 1.
08 / CONFIGURING ADVANCED SETTINGS 126 8.1d/ MAC CLONING A MAC address is a hexadecimal code that identifies a device on a network. All networkable devices have a unique MAC address. When replacing a network device on your Gateway, you can simplify the installation process by copying the MAC address of the existing device to your Gateway. To copy the MAC address of the existing device: 1. Select MAC Cloning in the Advanced page. 2.
UTILITIES 8.1e/ ARP TABLE You can view the IP and MAC addresses of each DHCP connection. To view the IP and MAC addresses: 1. Select ARP Table. 2. Review the IP and MAC address for each device. 3. When complete, click Close. 8.1f/ USERS You can view the users that can currently access your wireless network.
08 / CONFIGURING ADVANCED SETTINGS 128 To view users: 1. Select Users in the Advanced page. 2. In the Login Configuration section, enter the maximum number of unsuccessful login attempts. 3. o edit usernames and passwords, click the Edit icon in the T Action column. The User Settings page displays. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
UTILITIES 4. To edit the username and set a new password, as needed. 5. To add a new user, specify the following parameters: • Full Name - name of the user. • User Name – name the user enters to remotely access the home or office network. This field is case-sensitive. 6. o set a new Password, select the Set a new password check T box. The New Password fields display. 7. erify the level of access for the user in the Permissions V field. 8. lick Apply to save changes.
08 / CONFIGURING ADVANCED SETTINGS 130 8.1g/ LOCAL ADMINISTRATION You can grant local access on a specific port. To grant access: 1. Select Local Administration in the Advanced page. 2. o grant access, select the check box for the specific SSH T access. 3. Click Apply to save changes. Local access is granted. 4. o remove access, clear the checkbox, then click Apply. No T local access is granted. 8.
DNS SETTINGS AND NETWORK SETTINGS 8.2/ DNS SETTINGS You can view and manage the DNS server host name and IP address as well as add a new computer. The DNS server does not require configuration. 8.2a/ DYNAMIC DNS Typically, when connecting to the Internet, your router is assigned an unused public IP address from a pool, and this address changes periodically.
08 / CONFIGURING ADVANCED SETTINGS 132 2. To set up a new entry, click the Add button. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
NETWORK SETTINGS 3. Configure the following parameters: • Host Name – enter the full domain name for your Dynamic DNS domain. • Provider – select the Dynamic DNS account provider from the menu. • User Name – enter your user name for your Dynamic DNS account. • Password – enter the password for your Dynamic DNS account. • SSL Mode – select if your Dynamic DNS service supports SSL. Click Apply to save your changes. To edit the host name or IP address: 1.
08 / CONFIGURING ADVANCED SETTINGS 134 2. o view and add computers stored in the DNS table, click Add T DNS Entry. The Add DNS Entry page displays. 3. In the Host Name field, enter the name of the computer, then enter the IP address and click Apply to save changes. The DNS Server page displays. 4. o edit the host name or IP address, click the Edit icon in the T Action column. The DNS Entry page displays. Edit the host name and/or IP address, then click Apply to save changes. 5.
NETWORK SETTINGS • UPnP – checks the validity of all UPnP services and rules • Port Forwarding Rules – displays port forwarding rules 8.3a/ NETWORK OBJECTS Network objects define a group, such as a group of computers, on your Gateway network by MAC address, IP address, and /or host name. The defined group becomes a network object. You can apply settings, such as configuring system rules, to all devices defined in the network object.
08 / CONFIGURING ADVANCED SETTINGS 136 2. o define a network object, click Add. The Edit Network T Objects page displays. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
NETWORK SETTINGS AND ROUTING 3. In the Description field, enter a name for the network object. 4. Click Add. The Edit Item page displays. 5. elect the type of network object as IP address, IP subnet, S IP range, MAC address, host name, DHCP option, or protocol, and click Apply to save changes. 6. Repeat the above steps to create additional network objects. 7. When complete, click Apply to save changes. 8.
08 / CONFIGURING ADVANCED SETTINGS 138 UPnP services are not deleted when disconnecting a computer without proper shutdown of the UPnP applications, such as messenger. Services may often not be deleted and eventually this leads to the exhaustion of rules and services, and no new services can be define. The cleanup feature locates the invalid services and removes them, preventing services exhaustion. To access this setting: 1. Select Universal Plug and Play in the Advanced page. 2.
ROUTING 8.3c/ PORT FORWARDING RULES You can view, modify, and delete port forwarding rules. To access the rules: 1. Select Port Forwarding Rules in the Advanced page. 2. o edit a protocol rule, click the Edit icon in the Action T column. The Edit Service page displays.
08 / CONFIGURING ADVANCED SETTINGS 140 3. Modify the Service Name and Service Description, as needed. 4. o modify the current protocol, click the Edit icon in the T Action column. 5. To add server ports, click Add Server Ports. 6. Click Apply to save changes. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
ROUTING 8.4/ ROUTING You can configure the following settings: • IPv6 – enables IPv6 support. • Routing – manages the routing and IP address distribution rules. • I P Address Distribution - adds computers configured as DHCP clients to the network 8.4a/ IPv6 Use the IPv6 feature settings to enable, disable, or configure an IPv6 Internet connection and IPv6 LAN settings. 1. o configure your network to use the IPv6 Internet T connection type.
08 / CONFIGURING ADVANCED SETTINGS 142 2. Select Enable under the Enable IPv6 Support option. (Once IPv6 is enabled the default setting will be IPv6 WAN as DHCPv6 and IPv6 LAN as Stateless). 3. elect the appropriate IPv6 connection method from the S drop-down list, as shown below to specify the method to be used to obtain your WAN IPv6 Address. 4. Click Apply to have changes take effect. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
ROUTING NOTE: The Internet IPv6 service is required for this feature to work over the Internet. 5. o disable the IPv6 service click T on the “Disable” option as shown below and click Apply to have changes take effect. Once configured using valid IPv6 WAN and LAN configurations you should not see any errors when you click on the “Apply” button and the Main page will reflect the router’s new IPv6 address as shown below.
08 / CONFIGURING ADVANCED SETTINGS 144 verizon.com/fios | ©2014 Verizon. All Rights Reserved.
ROUTING STATIC - WAN IPv6 ADDRESS CONNECTION The IPv6 WAN Static configurations are IPv6 settings that you enter manually. These specific IPv6 addresses and settings are not expected to change frequently. 1. o configure IPv6 WAN Static mode, select the Static option T on the IPv6 Configuration Control Page as shown below: 2.
08 / CONFIGURING ADVANCED SETTINGS 146 3. • IPv6 WAN Address • Prefix Length (A numeric value between 16 and 128) • Default Gateway • Primary DNS Server • Secondary DNS Server fter entering all appropriate IPv6 settings click Apply to A have changes take effect. STATIC - WAN IPv6 ADDRESS CONNECTION 1. o configure IPv6 LAN Stateful mode with Static T WAN, select the Stateful (DHCPv6) option on the IPv6 Configuration Control Page as shown below: 2.
ROUTING • IPv6 LAN Configuration (select Stateful from the dropdown list) as shown in drop-down list and page below: • LAN Prefix • LAN IPv6 Link Local Address (automatically populated) • LAN IPv6 Address Range (start and end) • Router Advertisement Lifetime (minutes between 0-150) • IPv6 Address Lifetime (minutes between 3-150) • Interfaces - check one or more of the box(s) to apply IPv6 LAN settings to the selected interfaces: –– Ethernet/Coax IPv6 Enabled –– Wireless Access Point 1 IPv6 Enab
08 / CONFIGURING ADVANCED SETTINGS 148 2.
ROUTING 3. fter entering all appropriate IPv6 settings click Apply to A have changes take effect. DHCPv6 - WAN IPv6 ADDRESS CONNECTION The IPv6 WAN DHCPv6 configurations are IPv6 settings that you enter that will allow your IPv6 connection to be updated by the ISP as needed. 1. o configure IPv6 WAN Stateful (DHCPv6) mode, select the T Stateful (DHCPv6) option on the IPv6 Configuration Control Page as shown below: 2.
08 / CONFIGURING ADVANCED SETTINGS 150 3. heck to either ‘Obtain IPv6 DNS Server address C automatically’, or to ‘Use the following IPv6 DNS Server addresses’ 4. fter entering all appropriate IPv6 settings click Apply to A have changes take effect. DHCPv6 WAN WITH LAN IPv6 STATEFUL (DHCPv6) SETTINGS: 1. o configure IPv6 WAN Stateful (DHCPv6) mode, select the T Stateful (DHCPv6) option on the IPv6 Configuration Control Page as shown below: 2.
ROUTING • LAN Prefix • LAN IPv6 Link Local Address (automatically populated) • LAN IPv6 Address Range (start and end) • Router Advertisement Lifetime (minutes between 0-150) • IPv6 Address Lifetime (minutes between 3-150) • Interfaces - check one or more of the box(s) to apply IPv6 LAN settings to the selected interfaces: –– Ethernet/Coax IPv6 Enabled –– Wireless Access Point 1 IPv6 Enabled –– Wireless Access Point 2 IPv6 Enabled 3.
08 / CONFIGURING ADVANCED SETTINGS 152 2.
ROUTING LAN IPv6 CONFIGURATION WITHOUT AN IPv6 WAN CONNECTION: 1. o configure IPv6 to use either the IPv6 LAN Stateful T or Stateless mode without using an IPv6 Internet WAN connection, select the None option on the IPv6 Configuration Control Page as shown below: 2. fter entering all appropriate IPv6 settings click Apply to A have changes take effect. LAN IPv6 STATEFUL (DHCPv6) WITH NO WAN SETTINGS: 1.
08 / CONFIGURING ADVANCED SETTINGS 154 2. Specify the Stateful (DHCPv6) settings to be used to assign LAN IPv6 addresses by entering the following details: • IPv6 LAN Configuration (select Stateful from the dropdown list) as shown in drop-down list and page below: • LAN IPv6 Link Local Address (automatically populated) • LAN IPv6 Address Range (start and end) verizon.com/fios | ©2014 Verizon. All Rights Reserved.
ROUTING • Router Advertisement Lifetime (minutes between 0-150) • Interfaces - check one or more of the box(s) to apply IPv6 LAN settings to the selected interfaces: –– Ethernet/Coax IPv6 Enabled –– Wireless Access Point 1 IPv6 Enabled –– Wireless Access Point 2 IPv6 Enable 3. fter entering all appropriate IPv6 settings click Apply to A have changes take effect. LAN IPv6 STATELESS WITH NO WAN SETTINGS: 1.
08 / CONFIGURING ADVANCED SETTINGS 156 • LAN IPv6 Link Local Address (automatically populated) • Router Advertisement Lifetime (minutes between 0-150) • Interfaces - check one or more of the box(s) to apply IPv6 LAN settings to the selected interfaces: –– Ethernet/Coax IPv6 Enabled –– Wireless Access Point 1 IPv6 Enabled –– Wireless Access Point 2 IPv6 Enable 3. fter entering all appropriate IPv6 settings click Apply to A have changes take effect. 8.
ROUTING 2. To add a new Gateway, click Add New Route.
08 / CONFIGURING ADVANCED SETTINGS 158 3. 4. Specify the following parameters: • Name – select the network type. • Destination - enter the destination IP of the destination host, subnet address, network address, or default route. The destination for a default route is 0.0.0.0. • Netmask – enter the network mask. This is used in conjunction with the destination to determine when a route is used. • Gateway – enter the IP address of your Gateway.
ROUTING as taken. At this point, the host is configured with an IP address for the duration of the lease. The host can renew an expiring lease or let it expire. If it renews a lease, the host receives current information about network services, as it did during the original lease, allowing it to update its network configurations to reflect any changes that occurred since the first connection to the network.
08 / CONFIGURING ADVANCED SETTINGS 160 To view a summary of the services provided by the DHCP server: 1. Select IP Address Distribution in the Advanced page. DHCP SERVER SETTINGS You can edit the DHCP server settings for a device. To edit the settings: 1. n the IP Address Distribution page, click the Edit icon in O the Action column. The DHCP Settings page opens with the device information displayed. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
ROUTING 2. o enable the DHCP server, select DHCP Server in the IP T Address Distribution field. Once enabled, the DHCP server provides automatic IP assignments (IP leases) based on the preset IP range defined below. 3. To configure the DHCP server complete the following fields: • Start IP Address – enter the first IP address that your Gateway will automatically begin assigning IP addresses from. Since your Gateway’s default IP address is 192.168.1.1, the default start IP address should be 192.162.1.
08 / CONFIGURING ADVANCED SETTINGS 162 4. Click Apply to save changes. DHCP CONNECTIONS You can view a list of the connections currently assigned and recognized by the DHCP server. In addition, you can add a new connection with a fixed IP address. NOTE: The fixed IP address of a device is assigned to the MAC address of the network card installed on the network computer.
DATE AND TIME 2. o define a new Static Connection with a fixed IP address, T click Add Static Connection. 3. Enter the host name. 4. Enter the fixed IP address to be assigned. 5. nter the MAC address of the network interface of the E computer used with this DHCP static connection. 6. Click Apply to save changes. 8.5/ DATE AND TIME You can configure the following settings: • ate and Time Settings – sets the time zone and enables automatic D time updates.
08 / CONFIGURING ADVANCED SETTINGS 164 8.5a/ DATE AND TIME SETTINGS You can set the time zone and enable automatic time updates. To configure the settings: 1. Select Date and Time in the Advanced page. 2. elect the local time zone. Your Gateway automatically S detects daylight saving times for selected time zone. 3. In the Automatic Time Update section, select the Enabled check to perform an automatic time update. 4. efine the time server addresses by clicking Add.
DATE AND TIME 5. nter the IP address or domain name of the time server, then E click Apply to save changes. 8.5b/ SCHEDULER RULES Scheduler rules are used for limiting the activation of firewall rules to specific time periods. The time periods are either for days of the week or for hours of each day based on activity or inactivity. To define a rule: 1. Verify that the date and time of your Gateway is correct. 2. Select Scheduler Rules in the Advanced page.
08 / CONFIGURING ADVANCED SETTINGS 166 3. Click Add. The Set Rule Schedule page displays. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
CONFIGURATION SETTINGS 4. Enter the name of the rule. 5. In the Rule Settings section, specify if the rule is active at the scheduled time or inactive at the scheduled time. 6. lick the Add Rule Schedule. The Edit Rule Schedule page C displays. 7. Select the active or inactive days of the week. 8. o define a new active or inactive hourly range, click New T Hours Range Entry.
08 / CONFIGURING ADVANCED SETTINGS 168 9. nter the start and end time, then click Apply to save E changes. 10. Click Apply again to save the rule schedule. 8.6/ CONFIGURATION SETTINGS You can configure the following configuration settings: • onfiguration File – used for file backups and restoring C configuration files • ystem Settings – configures various system and management S parameters • Port Configuration – sets up Ethernet ports 8.
CONFIGURATION SETTINGS 2. o save the current configuration to a file, click Save T Configuration File. The configuration file is saved to you web browser’s download folder. 3. o load a previously saved configuration file, click Load T Configuration File. Browse to the location of the file, then click Apply to begin the configuration uploading process. Your Gateway will automatically restart with that configuration. 8.6b/ SYSTEM SETTINGS You can configure various system and management parameters.
08 / CONFIGURING ADVANCED SETTINGS 170 2. 3. In the Router Status section, configure the following: • Wireless Broadband Route’s Hostname – enter the host name or URL address of your Gateway. Both names are the same. • Local Domain – view the local domain of the network. In the Wireless Broadband Router section, configure the following by selecting the check box: verizon.com/fios | ©2014 Verizon. All Rights Reserved.
CONFIGURATION SETTINGS • Automatic Refresh of System Monitoring Web Pages – activates the automatic refresh of system monitoring web pages. • Prompt for Password when Accessing via LAN – causes your Gateway to ask for a password when trying to connect to the network. • Warn User Before Configuration Changes – activates user warnings before network configuration changes take effect.
08 / CONFIGURING ADVANCED SETTINGS 172 Log Buffer Size. 7. • Allowed Capacity before Email Notification – specify the capacity before an email notification is sent. • System Log Buffer Size – specify the size of the system log buffer. • Remote System Notify Level – specify the type of information, such as none, error, warning, and information, received for remote system logging.
CONFIGURATION SETTINGS • Allowed Capacity before Email Notification – specify the capacity before an email notification is sent. • System Log Buffer Size – specify the size of the system log buffer. • Remote System Notify Level – specify the type of information, such as none, error, warning, and information, received for remote system logging. 8. In the Auto WAN Detection section, specify the DHCP timeout. 9. Click Apply to save changes. 8.
08 / CONFIGURING ADVANCED SETTINGS 174 2. o emulate the speed and duplex configuration of the port T with which it’s communicating, select Auto or select the port speed and duplicity. 3. Click Apply to save changes. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
09/ MONITORING YOUR GATEWAY 9.0 Gateway Status 9.1 Advanced Status 9.2 System Logging 9.3 Full Status/System wide Monitoring of Connections 9.4 Traffic Monitoring 9.
09 / MONITORING YOUR GATEWAY 176 System Monitoring displays system information, including basic settings, system log, key network device parameters, and network traffic statistics. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
GATEWAY STATUS AND ADVANCED STATUS 9.0/ GATEWAY STATUS You can view the basic settings of your Gateway. To view the basic settings: 1. Select System Monitoring in the Main menu. The Router Status page displays. 2. To refresh the page, click Refresh.
09 / MONITORING YOUR GATEWAY 178 3. o continuously refresh the page, click Automatic Refresh T On. 9.1/ ADVANCED STATUS You can view the details and status of: • System Logging • Full Status/System wide Monitoring of Connections • Traffic Monitoring • Broadband Monitoring To view the advanced status: 1. Select Advanced Status. A warning page displays. 2. Click Yes. The Advanced Status page displays. 3. o view the details of the listed monitoring options, click the T link. verizon.
SYSTEM LOGGING AND FULL STATUS/ SYSTEM WIDE MONITORING OF CONNECTIONS 9.2/ SYSTEM LOGGING System logging provides a view of the most recent activity of your Gateway. In addition, you can view additional logs, such as the security, advanced, firewall, WAN, DHCP, and LAN DHCP. To view the system log: 1. In the Advanced Status page, click the System Logging link. 2. o view a specific type of log event such as Security Log, T WAN DHCP Log, etc., click the appropriate link in the menu in the left column.
09 / MONITORING YOUR GATEWAY 180 9.3/ FULL STATUS/SYSTEM WIDE MONITORING OF CONNECTIONS You can view a summary of the monitored data collected for your Gateway. To view your Gateway’s full system status: 1. I n the Advanced Status page, click Full Status/System wide Monitoring of Connections. 2. o modify the connection properties, click the individual T connection links. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
TRAFFIC MONITORING AND BANDWIDTH MONITORING 3. To refresh the page, click Refresh. 4. o continuously refresh the page, click Automatic Refresh T On. 9.4/ T RAFFIC MONITORING Your Gateway continually monitors traffic in the local area network and between the local network and the Internet. You can view up to the second statistical information about data received from and transmitted to the Internet as well as data received from and transmitted to computers in the local network.
09 / MONITORING YOUR GATEWAY 182 2. To refresh the page, click Refresh. 3. o continuously refresh the page, click Automatic Refresh T On. 9.5/ B ANDWIDTH MONITORING You can view and monitor the recorded bandwidth usage measured in Kbps. To view the bandwidth: 1. In the Advanced Status page, select Bandwidth Monitoring. 2. To refresh the page, click Refresh. 3. o continuously refresh the page, click Automatic Refresh T On. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
10/ TROUBLE SHOOTING 10.0 Troubleshooting Tips 10.
10 / TROUBLESHOOTING 184 This chapter lists solutions for issues that may be encountered while using your Gateway as well as frequently asked questions. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
TROUBLESHOOTING TIPS NOTE: The advanced settings should only be configured by experienced network technicians to avoid adversely affecting the operation of your Gateway and your local network. 10.0/ TROUBLESHOOTING TIPS 10.0a/ IF YOU ARE UNABLE TO CONNECT TO THE INTERNET: • he first thing to check is whether your Gateway is powered on T and it is connected to the Internet.
10 / TROUBLESHOOTING 186 • ry turning your network device’s Wi-Fi off and on and try to T connect. • I f you have made any changes in your network settings and turning your network device’s Wi-Fi off and on does not help, try to restart your network device. • s a final tip you may need to turn your gateways’ Wi-Fi settings A from on to off, and back to on again and apply the changes. 10.
TROUBLESHOOTING TIPS • sing the tip of a ballpoint pen or pencil, press and hold the Reset U button on the back of your Gateway for three seconds. • ccess the GUI and navigate to the Advanced Settings page. Select A the Restore Defaults option. After saving your configuration, if desired, click the Restore Defaults button. For additional details, refer to the Restore Defaults section of this guide. 10.
10 / TROUBLESHOOTING 188 10.0d/ T IMEOUT ERROR OCCURS WHEN ENTERING THE URL OR IP ADDRESS Verify the following: • All computers are working properly. • IP settings are correct. • Gateway is on and connected properly. • Gateway settings are the same as the computer. 10.
TROUBLESHOOTING TIPS AND FREQUENTLY ASKED QUESTIONS Wireless Light • Solid white – Wi-Fi is on Additional Functions when pressing WPS button: • low flash white – When the WPS button is pressed, the Wireless S Light slowly flashes white, while waiting for a WPS device to connect. This can require up to two minutes. • ast flash white – When a device begins connecting to the Gateway F using WPS, the Wireless Light fast flashes white for two seconds as establishing connection.
10 / TROUBLESHOOTING 190 • ast flash green – Indicates network activity. The traffic can be in F either direction. LAN Ethernet – Upper LED • Unlit – Indicates no 1 Gbps link • Solid green – Indicates 1 Gbps link • ast flash green – Indicates LAN activity. The traffic can be in F either direction. LAN Ethernet – Lower LED • Unlit – Indicates no 10/100 Mbps link • Solid green – Indicates 10/100 Mbps link • ast flash green – Indicates LAN activity.
FREQUENTLY ASKED QUESTIONS 10.1/ FREQUENTLY ASKED QUESTIONS 10.1a/ I ’VE RUN OUT OF ETHERNET PORTS ON MY GATEWAY. HOW DO I ADD MORE COMPUTERS OR DEVICES? Plugging in an Ethernet hub or switch expands the number of ports on your Gateway. • un a straight-through Ethernet cable from the Uplink R port of the new hub to the Gateway. Use a crossover cable if there is no Uplink port/switch on your hub, use a crossover cable.
10 / TROUBLESHOOTING 192 10.1d/ I S THE WIRELESS SECURITY ON BY DEFAULT WHEN THE WIRELESS OPTION IS ACTIVATED? Yes, with the unique WPA2 (Wi-Fi Protected Access II) key that is printed on the sticker on the side of your Gateway. 10.1e/ WHICH CONNECTION SPEEDS DOES MY GATEWAY SUPPORT? The Ethernet WAN Internet connection supports 10/100/1000 Mbps. The LAN Ethernet connections support 10/100/1000 Mbps. The 802.11ac wireless connection supports up to 1300 Mbps and the 802.
FREQUENTLY ASKED QUESTIONS 10.1h/ C AN MY WIRELESS SIGNAL PASS THROUGH FLOORS, WALLS, AND GLASS? The physical environment surrounding your Gateway can have a varying effect on signal strength and quality. The denser the object, such as a concrete wall compared to a plaster wall, the greater the interference. Concrete or metal-reinforced structures experience a higher degree of signal loss than those made of wood, plaster, or glass. 10.
10 / TROUBLESHOOTING 194 First, check the connection and verify all cables are connected correctly. Then verify the Gateway is still connected and check the Ethernet connection to the Gateway from the computer. 10.1k/ I USED DHCP TO CONFIGURE MY NETWORK. DO I NEED TO RESTART MY COMPUTER TO REFRESH MY IP ADDRESS? No. In Windows 7, unplug the Ethernet cable or wireless card, then plug it back in. 10.1l/ I CANNOT ACCESS MY GATEWAY GUI.
FREQUENTLY ASKED QUESTIONS 10.1n/ H OW MANY COMPUTERS CAN BE CONNECTED THROUGH MY GATEWAY? Your Gateway is capable of 254 connections, but we recommend having no more than 45 connections. As the number of connections increase, the available speed for each computer decreases.
11/ SPECIFICATIONS 11.0 General Specifications 11.1 LED Indicators 11.2 Environmental Parameters verizon.com/fios | ©2014 Verizon. All Rights Reserved.
GENERAL SPECIFICATIONS The specifications for your FiOS Quantum Gateway are as follows. This includes standards, cabling types, and environmental parameters.
11 / SPECIFICATIONS 198 NOTE: The specifications listed in this chapter are subject to change without notice. 11.0/ GENERAL SPECIFICATIONS Model Number: Model: FiOS-G1100 Standards: IEEE 802.3x, 802.3u IEEE 802.11b/g/n/ac IP: IP versions 4 and 6 MoCA: MoCA WAN: 1350 – 1675 MHz and 975 - 1025 MHz MoCA LAN: 1125 – 1225 MHz Speed: Wired WAN Ethernet: 10/100/1000 Mbps auto-sensing Wired LAN Ethernet: 10/100/1000 Mbps auto-sensing verizon.com/fios | ©2014 Verizon.
LED INDICATORS AND ENVIRONMENTAL PARAMETERS Wireless LAN: 802.11b – up to 11 Mbps 802.11g – up to 54 Mbps 802.11n – up to 450 Mbps 802.11ac – up to 1300 Mbps Cabling Type: Ethernet 10BaseT: UTP/STP Category 3 or 5 Ethernet 100BaseT: UTP/STP Category 5 Ethernet 1000BaseT: UTP/STP Category 5e Firewall: ICSA certified 11.1/ LED INDICATORS Front Panel: Power/Internet, Wi-Fi Rear Panel: WAN Coax, LAN Coax, WAN Ethernet, and LAN Ethernet [4] 11.
11 / SPECIFICATIONS 200 Complete System (including packaging) Size: 10.16” / 258 mm width x 3.78” / 96 mm height x 10.35” / 263 mm depth Weight: 2.63 lbs / 1.19 kg Power: External, 12V DC, 3.0A Certifications: FCC Part 15, UL 60950-1 Operating Temperature: 10° C to 40° C (50° F to 104° F) Storage Temperature: -20° C to 85° C (-4° F to 185° F) Operating Humidity: 8% to 95% (non-condensing) Storage Humidity: 5% to 100% (non-condensing) verizon.com/fios | ©2014 Verizon.
12/ NOTICES 12.
12 / NOTICES 202 This chapter lists various compliance and modification notices, as well as the NEBS requirements and GPL. verizon.com/fios | ©2014 Verizon. All Rights Reserved.
REGULATORY COMPLIANCE NOTICES 12.0/ REGULATORY COMPLIANCE NOTICES 12.0a/ CLASS B EQUIPMENT This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
12 / NOTICES 204 Declaration of conformity for products marked with the FCC logo – United States only. This device complies with Part 15 of the FCC Rules.
REGULATORY COMPLIANCE NOTICES 12.0c/ NEBS REQUIREMENTS The coaxial cable screen shield must be connected to the Earth at the building entrance per ANSI/NFPA 70, the National Electrical Code (NEC), in particular Section 820.93, “Grounding of Outer Conductive Shield of a Coaxial Cable,” or in accordance with local regulation. Warning! The WAN Coax Port is intended for connection to Verizon FiOS only. It must not be connected to any exterior or interior coaxial wires not designated for Verizon FiOS.
12 / NOTICES 206 Caution: The Broadband Home Router must be installed inside the home. The Router is not designed for exterior installation. 12.0d/ GENERAL PUBLIC LICENSE This product contains certain software that is covered by open source licensing requirements. Copies of the licenses and a downloadable copy of the source code for the open source software that is used in this product are available on the following website: http://verizon.
01/ CHOICE. COUNTLESS REASONS. THAT’S POWERFUL. Version: 1.0.