Cable Modem/Router with Wireless-N U S E R M A N U A L
NOTICE This document contains proprietary information protected by copyright, and this Manual and all the accompanying hardware, software, and documentation are copyrighted. No part of this document may be photocopied or reproduced by mechanical, electronic, or other means in any form.
CONTENTS GETTING STARTED 5 Package Contents............................................................................................................................................5 System Requirements .....................................................................................................................................5 INSTALLING THE CABLE MODEM/ROUTER WITH WIRELESS-N 7 Before Installing Your Cable Modem/Router .........................................................................
ADVANCED MENU OPTIONS 54 Options .........................................................................................................................................................54 IP Filtering ....................................................................................................................................................57 MAC Filtering................................................................................................................................................
1 Getting Started This User Manual provides instructions for connecting and configuring your Cable Modem/Router and for setting up wireless and wired connections to the cable modem. This manual also includes details about security, firewalls, VPNs (Virtual Private Networks) and administrative tasks.
If you have already installed your cable modem and want to learn how to connect both wired and wireless computers and other devices to your Cable Modem/Router go to: Chapter 3: Connecting Other Devices to your Cable Modem/Router. Your Cable Modem/Router comes from the factory with a default SSID (Wireless Network Name), wireless security enabled and a random Pre-Shared Key (Wireless Password). These default settings for your modem/router are listed on the bottom label of your cable modem/router.
2 Installing the Cable Modem/Router with Wireless-N This chapter provides basic instructions for connecting the hardware and configuring the Cable Modem/Router with Wireless-N using the Zoom Configuration Manager. This chapter is almost identical to the printed Quick Start. Before Installing Your Cable Modem/Router Your cable service provider needs to know your modem's CM-MAC ADDRESS (also called MAC address), which is printed on a label on the bottom of your modem.
software. If you receive a kit like this, we recommend that you read the kit’s instructions and use them to install your Zoom Cable Modem/Router. This modem is a DOCSIS 3.0 cable modem/router certified by CableLabs, and connects like a normal cable modem. You will need to plug in the Cable Modem/Router’s power cube, connect to cable modem service using a coaxial cable, and then connect to a computer using either the included Ethernet cable or the wireless feature.
If you are like most users you will not need to make changes to the Cable Modem/Router’s advanced settings. If your setup requires you to make changes go to Chapter 6: Advanced Settings. How to connect to a computer if you don’t have or choose not to use a cable modem starter kit 1 Be sure your computer is on and the Cable Modem/Router is unplugged.
To learn how to connect additional wired and wireless computers and other devices to your Cable Modem/Router go to: Chapter 3: Connecting Other Devices to your Cable Modem/Router. Your Cable Modem/Router comes from the factory with a default SSID (Wireless Network Name), wireless security enabled and a random Pre-Shared Key (Security Key/Password). These default settings for your modem/router are listed on the bottom label of your cable modem/router. Most users can simply use the default settings.
Hardware Connection Port LAN 1-4 (Gigabit Ethernet 1-4) RESET RF / Cable POWER ON/OFF SWITCH Description Four 10/100/1000 auto-sensing Ethernet ports for computers and other devices that have an Ethernet port. Press and hold this recessed button at least 8 seconds in the unlikely event that you want to restore the default factory settings. This button is recessed to prevent accidental resets of your Cable Modem/Router. Connect your coaxial cable line to this port.
Front Panel LEDs Your Zoom cable modem has several lights on its front panel to help you monitor the Cable Modem/Router’s status.
3 Connecting Other Devices to the Cable Modem/Router This chapter explains how to connect devices (computers, phones, tablets, game stations, etc.) to the Cable Modem/Router. These devices can be connected either wirelessly or to one of the Ethernet ports on your Cable Modem/Router. If you are connecting a computer or other device to an Ethernet LAN port of the Cable Modem/Router, please go to Connecting Additional Computers and/or Other Devices to the Cable Modem/Router’s Ethernet/LAN ports.
Establishing your Wireless Network If all the computers or devices on your network support WPS, you can use WPS to easily set up your network. Windows 8 and 7 support WPS. Non Windows devices typically have a button called WPS on them if they support WPS. (Note: Apple iPads, iPhones, and Macintosh computers do not support WPS as of March 2013.) Please see Using WPS to set up your Wireless network if you want to use WPS for wireless connections to your cable modem/router.
Connecting a Windows 8 Computer with Built-in Wireless Capabilities 1 Click the Wireless Network Configuration utility icon system tray. in your computer’s 2 Typically you then click Zoomxxxx where xxxx is 4 random alpha-numeric characters. Zoomxxxx is the SSID printed on the bottom label of your Cable Modem/Router. In the unlikely event that you changed the SSID from the default, select your new SSID. 3 Click Connect.
Connecting a Windows 7 Computer with Built-in Wireless Capabilities 1 Click the Wireless Network Configuration utility icon system tray. in your computer’s 2 Typically you then click Zoomxxxx where xxxx is 4 random alpha-numeric characters. Zoomxxxx is the SSID printed on the bottom label of your Cable Modem/Router. In the unlikely event that you changed the SSID from the default, select your new SSID. 3 Click Connect.
3 Click Connect. If you want to connect to this network automatically in the future, check the Connect Automatically checkbox. 4 When prompted to enter your Network Security Key, enter your Pre-Shared Key (Security Key/Password) and hit Connect. Your Security Key/Password can be found on the bottom label of your Cable Modem/Router. 5 In the Successfully connected to [desired network] dialog box, you have three options.
Connecting a Windows XP Computer with Built-in Wireless Capabilities 1 On your Windows desktop, click the Wireless Network Icon in the System Tray. 2 Typically you then click Zoomxxxx where xxxx is 4 random alpha-numeric characters. Zoomxxxx is the SSID printed on the bottom label of your Cable Modem/Router. In the unlikely event that you changed the SSID from the default, select your new SSID. 3 Click Connect.
Connecting a Macintosh OS X Computer with Built-in Wireless Capabilities 1 Click the Wi-Fi icon in the menu bar. If the Wi-Fi icon does not appear on your menu bar, please refer to your built-in Macintosh documentation for how to enable wireless. Note: On versions prior to OS 10.7 the Wi-Fi icon is called AirPort. 2 Typically you then click Zoomxxxx where xxxx is 4 random alpha-numeric characters. Zoomxxxx is the SSID printed on the bottom label of your Cable Modem/Router.
Connecting a Wireless-enabled Device (including the iPhone or other cellular phones, iPad or other tablets, the iPod Touch, etc.) to the Cable Modem/Router 1 Select the wireless-enabled computer or device that you want to add to the network. The device should have software that will let it perform a site search to scan for available wireless networks in your area. You may have to click on something like Settings and then Wi-Fi.
Connecting a Computer with a Wireless adapter to the Cable Modem/Router 1 Go to the computer that is set up with a wireless adapter that you want to add to the network. For many wireless adapters, you will use their configuration manager software and click a Scan button or select a Site Scan, Scan Networks, or other similarly named tab to do a site search. When the list of available wireless networks appear, you typically select Zoomxxxx where xxxx is 4 random alpha-numeric characters.
Using WPS as an alternative way to set up your Wireless Network If all the Wi-Fi compatible wireless devices on your network support WPS, you can choose to quickly setup your wireless network by pushing a button on your cable modem/router and on each wireless device connecting to your cable modem/router. Windows 8 and Windows 7 users should follow the instructions below: Other computers or devices such as tablets should go to If you are using a non Windows computer or other device that supports WPS.
Repeat steps 1-5 above for each Windows computer you want to connect to the Cable Modem/Router. If you want to connect a non Windows computer or another device such as a tablet, follow the instructions below. If you are using a non Windows computer or other device that supports WPS Please refer to the instructions for your device for more information on using WPS. The directions below should work for most users. 1 Press the WPS LED pushbutton on the front panel of the router for at least 7 seconds.
3 4 5 6 connecting a hub or a switch, this is typically called an Uplink or Expansion port.) If you are connecting a computer or game station, go to step 5 of this section. If you are connecting a network device such as a switching hub, use the instructions that came with that device. Then reboot any computer that is part of your network. For example, if you connected a switching hub, reboot any computer that will be connected to that switching hub.
4 Changing the Default Wireless Settings Your Cable Modem/Router comes from the factory with a default SSID (Wireless Network Name), WPA-PSK/WPA2-PSK wireless security and a random Wireless Security Key (Wireless Password). These default settings for your router are listed on the bottom label of your unit. Most users can go ahead and use the default settings.
You can check to see if all other clients that you plan to put on the network support WPA or WPA2. You can do this by checking the manual that came with each device or by checking the configuration software for the installed device. Look under Security or Encryption or Setup or Advanced Features. Most devices will support one of these modes.
If you know that all your devices support the more secure WPA2 you can enable WPA2 only (or WPA2-PSK if you want to use a Pre-Shared Key) instead of WPA and WPA2. 7 In the WPA Pre-Shared Key text box (only if you selected an option requiring a Pre-Shared Key), enter a passphrase of your choice (a minimum of 8 characters). Write down this passphrase and put it where you can find it – on the bottom of the Cable Modem/Router case, for instance. 8 Click Apply.
Otherwise, type something into the text box and click on Generate WEP Keys and WEP Keys will automatically be generated for you. Caution! Do not click Apply until you have entered WEP Keys. 8 Click Apply. 9 Now you need to set up each of your wireless devices with the SSID and passphrase. See Chapter 3, Connecting other Devices to the Cable Modem/Router for help on connecting your wireless computers and devices.
5 Online Gaming Read this chapter if you are going to use your Cable Modem/Router for online gaming. Some online games require you to make changes to your firewall. This chapter explains the different ways you can modify the firewall to allow your online gaming system access. Gaming If you are using your router for gaming, you may need to make changes to the router’s firewall setting for the game to work.
DMZ Host The DMZ (De-militarized Zone) Host page allows you to configure a network device (e.g. a PC or gaming system) to be visible directly to the Internet. This may be used if a game doesn’t work with port triggers or if you are using a gaming system, where security is less of a concern. To set up a DMZ for your gaming system, you should first assign your gaming system a static IP address. Normally the Cable Modem/Router handles assigning IP addresses to the different devices on your network using DHCP.
7 Then click the DMZ Host submenu. The DMZ Host page appears: 8 Enter the last byte of the LAN IP address of the static IP address you assigned to your gaming system. For example if you assigned 192.168.0.5 enter 5. 9 Click Apply. Your gaming system should now work with all your online games. Port Triggers Port Triggering works by sensing when your game sends data out through a specific port.
In this case the same ports are used for both incoming and outgoing traffic, so we would use the same ports as both the triggering port and the target port as shown below. To setup port triggering for World of Warcraft: 1 Launch a Web browser. 2 In the browser address bar, type http://192.168.0.1 and press the Enter key. 3 In the Login screen, enter: default username: admin default password: admin Both the username and password are case sensitive.
8 Select TCP in the Protocol drop down menu since these ports use TCP. 9 Enter a name for this rule, for example WOW1. Click Enable then click Apply. Your new rule will appear in the table. 10 Repeat steps 7-9 for the next rule. In this case only one port is used, 3724. Enter 3724 in the Trigger Start/End Port and Target Start/End Port fields. 11 Repeat steps 7-9 for the remaining ports that need to be opened.
6 Advanced Settings Advanced Setup is primarily for technically advanced users. For most people, the options that are set by default when the Cable Modem/Router is installed are sufficient. However, those who want or need to change the default settings can do so using the advanced setup pages in the Zoom Configuration Manager.
Accessing the Zoom Configuration Manager From your Web browser, you will log in to the interface to define system parameters, change password settings, view status windows to monitor network conditions, and control the Cable Modem/Router and its ports. To access the Zoom Configuration Manager, use the following procedure: 1 Launch a Web browser. Note: Your computer does not have to be online to configure your Cable Modem/Router. 2 In the browser address bar, type http://192.168.0.
Both the username and password are case sensitive. The default username and password are printed on the bottom label of your unit. After you log in to the Zoom Configuration Manager interface, you can change the default password on the Status - Security page. 4 Click the Login button to access the Cable Modem/Router. The Status page appears, showing connection status information about your Cable Modem/Router.
Figure 3. Example of Status Submenu The right-most item on the menu bar is the logout option. Click it to log out from the Configuration Manager interface. Configuration Manager Interface Menus Table 1 describes the menus in the Configuration Manager interface. You can skip to specific sections of this User Manual based on your intended use of the Cable Modem/Router with Wireless-N.
Table 1.
7 Status Menu Options The Status Menu lets you: View the status and connection information of the Cable Modem/Router Change the administrator password Use diagnostic tools for troubleshooting Software The Software page is a read-only screen that shows the Cable Modem/Router’s current system software version. This page appears when you first log in to the Configuration Manager interface. You can also display it by clicking Status in the menu bar and then click the Software submenu.
Figure 4. Software Menu Table 2. Software Menu Option Option Description Information Shows the information on the current system software. Status Shows the system up time, network accessibility, and IP address of the Cable Modem/Router. Connection The Connection page is a read-only screen that shows the status of steps in your Cable Modem/Router registration process. It also shows your Cable Modem/Router’s upstream and downstream channel status.
Figure 5. Example of Connection Page Security The Security page allows you to configure access privileges and restore the Cable Modem/Router to its factory defaults and allows you to disable routing and use the Cable Modem/Router as a pure bridge modem. To access the Security page, click Status in the menu bar and then click the Security submenu. Figure 6 shows an example of the menu and Table 3 describes the items you can select.
Figure 6. Example of Security Page To restore the Cable Modem/Router to factory defaults: 1 In the Security submenu, select the Yes button next to Restore Factory Defaults. 2 Click Apply. 3 Click OK to reboot the Cable Modem/Router. The reboot is complete when the POWER LED stops blinking. 4 If the Login screen doesn’t reappear, click the Refresh link to log back in to the Configuration Manager. Table 3. Security Menu Option Option Description Enter the new User Name for the administrator.
Diagnostics Note: Some software versions may not support this feature. The Diagnostics page allows you to troubleshoot connectivity problems. Two utilities are provided for troubleshooting network connectivity: Ping and Traceroute. Ping allows you to check connectivity between the Cable Modem/Router and devices on the LAN while Traceroute allows you to map the network path from the Cable Modem/Router to a public host.
Table 4 describes the items you can select. Figure 7.
Figure 8. Example of Diagnostics - Traceroute Page To run either utility: 1 Select the utility from the Utility drop-down list. 2 Make any changes to the default parameters. 3 Select Start Test to begin. The window will automatically be refreshed as the results are displayed in the Results table.
Table 4. Diagnostics Menu Option Option Description Utility Select the utility for troubleshooting. Parameters Enter the required parameters to perform diagnostics. Start Test Click this button to begin diagnostic after making any changes to the default parameters. Abort Test Click this button to abort Ping diagnostics. Clear Results Click this button to clear the results table.
8 Basic Menu Options The Basic Menu lets you: Configure the basic settings of your Cable Modem/Router Configure DHCP server for the LAN Configure DDNS service Backup and restore of configuration settings Setup The Setup page allows you to configure the basic features of the Cable Modem/Router related to your ISP’s connection. To access the Setup page, click Basic in the menu bar and then click the Setup submenu.
Figure 9. Example of Setup Page Table 5. Setup Menu Option Option Description LAN IP Address Set the base LAN IP for your private network. By default this is 192.168.0.1 There is normally no need to change this. WAN Connection Type Select how your Cable Modem/Router obtains an IP address. The options are via DHCP or manual configuration of a static IP address. Unless you have arranged for a static IP address from your service provider, you should leave this setting at its default, DHCP.
DHCP The DHCP page allows you to configure your Cable Modem/Router’s DHCP server. To access the DHCP page: 1 Click Basic in the menu bar. 2 Then click the DHCP submenu. Figure 10 shows an example of the menu and Table 6 describes the items you can select. Figure 10. Example of DHCP Page In the unusual event that you have a separate DHCP server on your LAN, you can disable the Cable Modem/Router’s DHCP server by selecting the No radio button.
Table 6. DHCP Menu Options Option Description DHCP Server Select Yes to use internal DHCP server of the Cable Modem/Router, or select No to disable it. Starting Local Address Configure the starting IP address for IP leases available to devices on the LAN. Number of CPEs Configure the number of PCs supported on the LAN. Lease Time Configure the time a lease will last before it must be renewed. Default is 86400 seconds, or 1 day. DDNS The DDNS page allows you to make use of a DDNS server.
Figure 11. Example of DDNS Page To activate the DDNS client: 1 Go to the DynDNS website and create an account for the Dynamic DNS service. 2 You will create a username and password, and be asked to choose a host name for your server, and the dynamic DNS domain to which your host will be assigned. 3 You will also be asked for your host’s current IP address. This is the WAN IP address that has been assigned to your Cable Modem/Router during provisioning. (See WAN IP Address on the Basic / Setup web page.
Table 7. DDNS Menu Option Option Description DDNS Service Select the type of service that you are registered for from your DDNS service provider. User Name Enter your DDNS account username subscribed to the service provider. Password Enter the password of the account. Host Name Enter the host name of your service host. IP Address Shows the current WAN side public IP address. Status Shows the status of DDNS service. Backup Note: Some software versions may not support this feature.
Figure 12.
9 Advanced Menu Options The Advanced Menu lets you: Enable advanced features of the Cable Modem/Router Configure LAN IP address, MAC address, and port number filtering Configure WAN to LAN port forwarding and triggers Configure DMZ hosting Configure RIP parameters Options The Options page allows you to configure the Cable Modem/Router to operate in different modes that adjust how the device routes IP traffic. To access the Options page: 1 Click Advanced in the menu bar.
Figure 13.
To enable a feature: 1 Click the appropriate check box (a check mark will appear). 2 When you are done with your selections, click on the Apply button. Table 8. Options Menu Option Option Description WAN Blocking Prevents the Cable Modem/Router or the PCs from responding to pings to the Cable Modem/Router’s WAN IP address or to the devices behind it. This makes it more difficult for hackers to attack your PCs and other devices on your network.
IP Filtering The IP Filtering page allows you to configure IP address filters in order to block specific network devices on your LAN from accessing the Internet. By entering starting and ending IP address ranges, you can configure which local PCs are denied access to the WAN. We recommend assigning a static IP address to your computer when using IP Filtering. By default, the Cable Modem/Router uses DHCP to assign IP addresses. DHCP does not guarantee that your computer will be assigned the same IP address.
To activate the IP address filter: 1 Enter the last byte (the numbers after the last period) of the IP address in Start Address and End Address. 2 Check the Enable box to the right of the entry to store settings. 3 Click the Apply button to activate the filter rules. Table 9. IP Filtering Menu Option Option Description Start/End Address Enter the last byte of the IP address. The upper bytes of the IP address are set automatically from the Cable Modem/Router IP address.
Figure 15. Example of MAC Filtering Page Table 10. MAC Filtering Menu Option Option Description MAC Address PCs and other devices can be added to the MAC filter table by entering their MAC addresses into the Add MAC Address box, and clicking the Add MAC Address button. Internet traffic to and from each listed Address will be blocked. The Mac Addresses of the computers attached to your network can be found in the DHCP Clients table.
Port Filtering The Port Filtering page allows you to configure port filters in order to block Internet traffic to specific ports on all devices on your LAN. Similarly, you can prevent PCs from sending outgoing TCP/UDP traffic to the Internet from specific IP port numbers. This can be configured using the Port Filtering page. To access the Port Filtering page: 1 Click Advanced in the menu bar. 2 Then click the Port Filtering submenu.
For example, if you would like to block all PCs on the private LAN from accessing HTTP sites (or “web surfing”): 1 Set the Start Port to 80, the End Port to 80. 2 Set the protocol to TCP. 3 Check the Enable box to the right of the entry to store settings. 4 Click Apply button to activate the filter rules. Table 11.
Figure 17. Example of Forwarding Page To activate the port forwarding: 1 Enter the port range of the Internet traffic that you want to forward, and the IP address of the server to which you want to forward that traffic. 2 Select the protocol(s) to be forwarded. 3 Check the Enable box to the right of the entry to store settings. 4 Click the Apply button to activate the forwarding rules. Table 12.
Port Triggers The Port Triggers page allows you to configure dynamic triggers to specific devices on the LAN. This allows for special applications that require specific port numbers with bi-directional traffic to function properly. Applications such as video conferencing, voice, gaming, and some messaging program features may require these special settings. Port Triggers are similar to Port Forwarding except that they are not static ports held open all the time.
2 Select the forwarding protocol(s). 3 Enter a name for your port triggering rule. 4 Check the Enable box to the right of the entry to store settings. 5 Click the Apply button to activate the forwarding rules. Table 13. Port Triggers Menu Option Option Description Trigger Range Enter the trigger range (starting and ending ports) of the application for which you want to enable port triggering. The application will send data from these ports.
Figure 19. Example of DMZ Host Page To configure DMZ settings: 1 Enter the last byte of the LAN IP address of the PC or other device on your network that you want to configure as a DMZ host. 2 Click Apply. Note: If a specific PC is set as a DMZ Host, remember to set this back to “0” when finished with the needed application, since this PC will be effectively exposed to the public Internet.
their CMTS settings. To access the RIP Setup page: 1 Click Advanced in the menu bar. 2 Then click the RIP Setup submenu. Figure 20 shows an example of the menu and Table 14 describes the items you can select. Figure 20. Example of RIP Setup Page Note: RIP messages will only be sent when the Cable Modem/Router is configured for Static IP Addressing (see the Basic – Setup page). It is unlikely that your cable Internet service supports this mode.
To specify a RIP unicast destination IP address, enter the IP address and subnet mask. Table 14. RIP Setup Menu Option Option RIP Authentication RIP Authentication Key RIP Authentication Key ID RIP Reporting Interval RIP Destination IP Address RIP Destination IP Subnet Mask Description Check this box to enable RIP authentication for routing protocols Enter the set of keys for your interface. Enter the ID to identify the key used to create the authentication data.
10 Firewall Menu Options The Firewall Menu lets you: Configure the level of protection your firewall provides View the firewall logs Basic The Basic page allows you to configure the level of protection your firewall offers and also what type of attacks it should detect.. To access the Basic page: 1 Click Firewall in the menu bar. 2 Then click the Basic submenu. Figure 21 shows an example of the menu and Table 15 describes the items you can select. Figure 21.
Table 15. Basic Menu Option Option Description IPv4 Firewall Protection By increasing the level from low to medium or high you can restrict traffic to only certain predefined ports. Port Scan Detection Detects and blocks port scan activity originating on both the LAN and WAN. Block Fragmented IP packets Prevents all fragmented IP packets from passing through the firewall. IP Flood Detection Detects and blocks packet floods originating on both the LAN and WAN.
Figure 22. Example of Event Log Page Table 16. Local Log Menu Option Option Description Permitted Connections Enabling this feature causes the Cable Modem/Router to report all permitted connection attempts. Blocked Connections Enabling this feature causes the Cable Modem/Router to report all blocked connection attempts. Known Internet Attacks Enabling this feature causes the Cable Modem/Router to report any known Internet attacks.
SMTP Username Enter the username of the email account you will send from. SMTP Password Enter the password of the email account you will send from. E-mail Alerts Check to enable sending alert email, when an attack is detected. Below is a complete list of the capable SysLog server attack/notification types and their format.
Table 17. SysLog Server Event Format Parameter Description MMM The three-letter abbreviation for the month (e.g., JUN, JUL AUG, etc.) DD The two-digit day of the month (e.g., 01, 02, 03, etc.) HH:MM:SS The time displayed as two-digit values for the hour, minute, and second, respectively. YYYY The four-digit year. HostIP The IP address of Cable Modem/Router sending the SysLog event. This is the LAN IP Address on the Basic - Setup page.
The table below lists all events that can be sent to the SysLog server. Table 18. SysLog Server Event and Meaning Event Text Meaning ALLOW: Inbound access request An inbound request was made, and accepted, from a public network client to use a service hosted on the firewall or a client behind the firewall. ALLOW: Outbound access request An outbound request was made, and accepted, from a public client to use a service hosted on a public network server.
management enabled [port#] specified port # on the public interface) has been enabled via the user interface. Remote config management disabled Remote configuration management has been disabled via the user interface. Time Of Day established The system established the current system time via the DOCSIS cable modem registration process. The system time is used by the firewall to timestamp events. Public Network Interface up (IP address x.x.x.
11 Parental Control Menu Options The Parental Control Menu lets you: Configure the rules for Internet access based on user or time period Configure the rules to block certain Internet contents and certain web sites View the event logs related to parental control To set up Parental Control, you first set up Policies in the Basic Setup Menu. Next, you assign a user name and password for each user on your network. Finally you apply the Policies to individual users in the User Setup Menu.
Figure 23.
Table 19. Basic Setup Menu Option Option Description Enable Parental Control Check the box to enable Parental Control. Content Policy Configuration Enter a name for a content policy, and click Add New Policy. Keyword List Enter a keyword in the field at the bottom of the keyword list, and click Add Keyword. The keyword is associated with the respective entries in the Blocked and Allowed Domain Lists. See the User Setup page for more details.
User Setup The User Setup page is the master page to which each individual “user” is linked to a specified time access rule, content filtering rule, and login password. To access the User Setup page: 1 Click Parental Control in the menu bar. 2 Then click the User Setup submenu. Figure 24 shows an example of the menu and Table 20 describes the items you can select. Note: Always remember to click on the appropriate Apply, Add or Remote button to store and activate the settings. Figure 24.
Table 20. User Setup Menu Option Option Description User Configuration Enter a user name (e.g. Mom, Dad, Bro, Sis) and click Add User. Users Settings Select a user from the drop-down list. Click the checkbox to enable parental control for this user. Password Enter the password for this user. Re-Enter Password Re-enter (confirm) the password for this user. Trusted User Select Enable to grant this user access to all Internet content regardless of any policy or time settings.
ToD Filter (Time of Day Filter) The ToD page allows you to configure the Internet access policies according the time of day settings. This page is tied to the Parental Control - User Setup page. You can define up to 30 time access policies. You can define policies that block all public Internet traffic for entire days or for specific time periods within each day. You can combine these policies in any way you want. To access the ToD Filter page: 1 Click Parental Control in the menu bar.
Table 21. ToD Filter Menu Option Option Time Access Policy Configuration Time Access Policy List Days to Block Time to Block Ports to Block Port Start Port End Description Enter a name for the time access policy and click Add New Policy. Select a policy from the drop-down list. Click the Enable checkbox to enable this rule. Click the checkboxes of the days that this rule applies to.
If the online lookup service detects that the URL falls in a category that is blocked. To access the Event Log page: 1 Click Parental Control in the menu bar. 2 Then click the Event Log submenu. Figure 26 shows an example of the menu. Figure 26.
12 Wireless Menu Options The Wireless Menu lets you: Configure Cable Modem/Router to serve as a wireless access point (AP) Configure essential and advanced settings of wireless network Configure guest network for temporary visitors Configure WMM QoS Note: Your Cable Modem/Router has been preconfigured to support wireless connections without any further configuration. Please see Chapter 3: Connecting Other Devices to your Cable Modem/Router for details. Most users will not need to read this chapter.
Figure 27. Example of Radio Page Table 22. Radio Menu Option Option Description Wireless Interface This is the MAC address of the wireless interface. Select Enable to enable the wireless function. Wireless Your device is configured for operation in the U.S. only. Country Set the strength of the wireless signal that the Cable Output Power Modem/Router transmits. Your device supports 2.4 GHz only. 802.11 Band In Auto mode, your Cable Modem/Router will automatically 802.
Table 23. Country Extension Channel List Control Channel Sideband for Control Channel US Channel 1-7 Lower US Channel 5-11 Upper Extension Channel Channel Number + 4 Channel Number - 4 Example 1: If your control channel is set to 1, the extension channel will be transmitted on channel 5. The total bandwidth of the signals on channel 1 and 5 equals 40 MHz. Example 2: If your control channel is set to 11, the extension channel will be transmitted on channel 7.
Figure 28. Example of Primary Network Page Table 24. Primary Network Menu Option Option Description Select Enable to enable primary wireless network. Primary Network Set the Network Name (also known as SSID) of the Network Name (SSID) wireless network. This is a 1-32 ASCII character string. Select Enable to suppress broadcast of the SSID. Closed Network Prevents wireless clients on your network from Client Isolate communicating with other wireless clients.
WPA2-PSK WPA/WPA2 Encryption WPA Pre-Shared Key RADIUS Server RADIUS Port (Relevant only when the RADIUS server is enabled) RADIUS Key (Relevant only when the RADIUS server is enabled) Group Key Rotation Interval (Relevant only when the RADIUS server is enabled) WPA/WPA2 Re-auth Interval WEP Encryption Shared Key Authentication 802.1x Authentication (only available when WEP is enabled) Network Key 1-4 Current Network Key PassPhase Offers state-of-the-art security.
Generate WEP Keys Automatic Security Configuration Device Name WPS Setup AP PIN WPS Add Client Push-Button PIN Click to generate 4 WEP keys automatically. Disable or enable WPS. WPS does not work with WEP. Enter a name to identify this Cable Modem/Router in WPS network. PIN (Personal Identification Number) is the WDS ID number of your PC or game machine.
Figure 29.
Table 25. Guest Network Menu Option Option Description Select Enable to enable guest network. Guest Network Guest Network Name Enter a name for the guest network. (SSID) Select Enable to supress broadcast of the SSID. Closed Network Prevents wireless clients on your network from Client Isolate communicating with other wireless clients. Wi-Fi Protected Access (WPA) offers stronger encryption than WEP. Enable WPA alone if you have a RADIUS WPA server (unlikely for most home users) – otherwise WPA-PSK.
WEP Encryption Shared Key Authentication 802.1x Authentication (only available when WEP is enabled) Network Key 1-4 Current Network Key PassPhase Generate WEP Keys Guest LAN Settings IP Address Subnet Mask Lease Pool Start Lease Pool End Lease Time UPnP Enable Firewall Enable DHCPv6 Server to all clients. The re-keying process is the WPA equivalent of automatically changing the WEP key for an AP and all stations in a WLAN on a periodic basis. WEP Encryption can be set to WEP 128-bit, 64-bit, or Disable.
Advanced The Advanced page allows you to configure advanced wireless settings. Most users will have no need to change these settings. To access the Advanced page: 1 2 Click Wireless in the menu bar. Then click the Advanced submenu. Figure 30 shows an example of the menu and Table 26 describes the items you can select. Figure 30.
Table 26. Advanced Menu Option Option Description Auto by default. 54gTM Mode When Xpress is turned on, aggregate throughput can XPressTM Technology improve significantly. The 802.11g standards provide a protection method so 802.11g and 802.11b devices can co-exist in the same network without “speaking” at the same time. Do not disable 802.11n protection if there is a possibility that 802.11b or 802.11g devices will use your wireless network. In Auto 802.
Fragmentation Threshold RTS Threshold This value specifies the maximum size for a packet before data is fragmented into multiple packets. If you experience a high packet error rate, you may slightly increase the fragmentation threshold. Setting the fragmentation threshold too low may result in poor network performance. Only minor reduction of the default value is recommended. In most cases, it should remain at its default value of 2346.
Table 27. Access Control Menu Option Option Description Wireless Select the wireless interface to configure the access control list. Interface Select whether wireless clients with the specified MAC address are MAC Restrict allowed or denied wireless access. To allow all clients, select Mode Disabled. Shows the list of wireless client MAC addresses to allow or deny MAC based on the Restrict Mode setting. Valid MAC address formats are Addresses XX:XX:XX:XX:XX:XX and XX-XX-XX-XX-XX-XX.
Figure 32.
Table 28. WMM Menu Option Option Description Select On to include the WME Information Element in beacon WMM Support frame. No-Acknowledgement Select On to not transmit acknowledgments for data. Select On to allow the AP (Cable Modem/Router) queuing packets for stations/clients in power-save mode. Queued Power Save Support packets are transmitted when the station/client notifies AP that it has left power-save mode.
select. Figure 33. Example of Bridging Page Table 29. Bridging Menu Option Option Description Wireless Select to enable or disable wireless bridging. Bridging Table of remote bridge MAC addresses authorized to establish a wireless bridge. Up to 4 remote bridges may be connected. Remote Bridges Typically, you will also have to enter your AP’s MAC address on the remote bridge. The Cable Modem/Router’s wireless MAC address can be found on the Wireless Interfaces page.
13 VPN (Virtual Private Network) Menu Options The VPN Menu lets you: Configure a VPN tunnel View VPN event logs Basic Setting This page allows you to enable VPN protocols and manage VPN tunnels. A virtual private network (VPN) is a computer network in which some of the links between nodes are carried by open connections or virtual circuits within some larger network (e.g., the Internet) as opposed to by physical wires, as in a traditional private network.
Figure 34. Example of Basic Page Table 30. Basic Menu Option Option Description L2TP Server Select Enable to enable L2TP (Layer 2 Tunneling Protocol) server. PPTP Server Select Enable to enable PPTP (Point-to-Point Tunneling Protocol) server. Configure Select Configure to set up L2TP or PPTP. IPSec Endpoint Select Enable to enable IPSec endpoint. IPSec The IPSec page allows you to configure IPSec tunnel and endpoint settings. A VPN tunnel is usually established in two phases.
The ESP and AH protocols are necessary to create a Security Association (SA), the foundation of an IPSec VPN. An SA is built from the authentication provided by the AH and ESP protocols. The primary function of key management is to establish and maintain the SA between systems. Once the SA is established, the transport of data may commence.
Figure 35.
Table 31. IPSec Menu Option Option Description Tunnel This is a pull-down list of VPN Names defined below. Select the specific VPN tunnel to configure. Name Enter a VPN name and click Add New Tunnel. Local Endpoint Settings Configure the local network located at your Cable Modem/Router’s AN side. Address Group Type Define the local address type.
IPSec Settings Configure the IPSec protocol related parameters. Pre-Shared Key Enter a key (Pre-Shared key) for authentication. Select the Diffie-Hellman key group (DHx) you want to use for encryption keys. Phase 1DH Group DH1: uses a 768-bit random number DH2: uses a 1024-bit random number DH5: uses a 1536-bit random number. Select the key size and encryption algorithm to use for data communications.
VPN tunnel renegotiates, all users accessing remote resources are temporarily disconnected. Select the key size and encryption algorithm to use for data communications. Null: No data encryption in IPSec SA. Not recommended. DES: a 56-bit key with the DES encryption algorithm Phase 2 Encryption 3DES: a 168-bit key with the DES encryption algorithm.
Phase 2 DH Group Select DHx after enabling PFS. Replay Detection Select Enable to enable replay detection. As VPN setup is processing intensive, the system is vulnerable to Denial of Service (DOS) attacks. The IPSec receiver can detect and reject old or duplicate packets to protect against replay attacks. NetBIOS Broadcast Forwarding Select Enable to send NetBIOS (Network Basic Input/Output System) packets through the VPN connection.
Figure 36.
Table 32. L2TP/PPTP Menu Option Option PPP Address Range (Start/End) Description Configure the dedicated IP address pool for L2TP/PPTP. The LAN IP subnet at one end of the VPN tunnel must be different from the LAN IP subnet at the other end of the VPN tunnel. For example, if one side’s LAN subnet is 192.168.0.x, then the other side should be 192.168.1.x (where the subnet mask in this example is 255.255.255.0).
Figure 37. Example of Event Log Page Table 33. Event Log Menu Option Option Description Time Shows the local time mapping to a certain log event. Description Shows detailed information of a VPN event log.
Appendix A: Troubleshooting Tips Problem I cannot access my Internet service or send or receive email. Solution The following front panel lights on the Cable Modem/Router – ONLINE, US (upstream), DS (downstream), and POWER – must be solidly lit before your modem will let you connect to the Internet. If they are not: Check all modem connections (power, Ethernet, and cable modem line). Unplug your Cable Modem/Router and then plug it back in. Restart your computer.
Solution You may need to register your modem’s MAC address with your cable provider. When your provider asks for your MAC address tell them the CM MAC address on your Cable Modem/Router’s bottom label. Restart your computer or other devices connected to the Cable Modem/Router. This ensures that they receive a correct IP address from the router. Problem My computer/devices are not connecting wirelessly to the Cable Modem/Router.
5 You may need to switch the Sideband for Control Channel setting from lower to upper to access the higher channels. Be sure to click Apply after you change the channel. All devices connecting wirelessly will automatically switch to the new channel. If changing the wireless channel did not help you should reduce the amount of bandwidth your wireless connection is using from 40 Mhz to 20 Mhz.
Appendix B: If You Need Help We encourage you to register your product and to notice the many support options available from Zoom. Please go to www.zoomtel.com/techsupport. From here you can register your router and/or contact our technical support experts and/or use our intelligent database SmartFactstm and/or get warranty information.
Appendix C: Compliance FCC Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against radio interference in a commercial environment. This equipment can generate, use and radiate radio frequency energy and, if not installed and used in accordance with the instructions in this manual, may cause harmful interference to radio communications.
IMPORTANT NOTE: FCC Radiation Exposure Statement This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.
