Wireless Cable Gateway CG3000D-1CXNAS: User Manual
Wireless Cable Gateway CG3000D-1CXNAS: User Manual
Wireless Cable Gateway CG3000D-1CXNAS: User Manual
User Manual
350 East Plumeria Drive San Jose, CA 95134 USA May 2010 202-10666-01 v1.0
2010 by NETGEAR, Inc. All rights reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of NETGEAR, Inc. P/N: Part Number TBD v1.0
Technical Support
When you register your product at http://www.netgear.com/register, we can provide you with faster expert technical support and timely notices of product and software upgrades.
NETGEAR, Inc.
350 East Plumeria Drive San Jose, CA 95134 USA E-mail: support@netgear.com Website: http://www.netgear.com Phone: 1-888-NETGEAR, for US & Canada only. For other countries, see your Support information card.
Trademarks
NETGEAR, the NETGEAR logo, ProSafe, Smart Wizard, and Auto Uplink are trademarks or registered trademarks of NETGEAR, Inc. Microsoft, Windows, Windows NT, and Vista are registered trademarks of Microsoft Corporation. Other brand and product names are registered trademarks or trademarks of their respective holders.
Statement of Conditions
To improve internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this document without notice. NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit layout(s) described herein.
Revision History Publication Part Number 202-10666-01 Version v1.0 Publish Date May 2010
2 |
Table of Contents
Table of Contents | 3
Remote Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34 Configuring Universal Plug and Play (UPnP) . . . . . . . . . . . . . . . . . . . . . . .36
Chapter 5 Troubleshooting
Basic Functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .38 Using LEDs to Troubleshoot. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .39 Connecting to the Gateways Main Menu . . . . . . . . . . . . . . . . . . . . . . . . . .39 Troubleshooting the ISP Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40 Troubleshooting a TCP/IP Network Using a Ping Utility . . . . . . . . . . . . . . .40 Testing the LAN Path to Your Gateway . . . . . . . . . . . . . . . . . . . . . . . . .41 Testing the Path from Your PC to a Remote Device . . . . . . . . . . . . . . .41 Wireless Performance and Gateway Location . . . . . . . . . . . . . . . . . . . . . .42
Appendix A
4 | Table of Contents
1.
For help installing the gateway, see the Wireless Cable Gateway CG3000D-1CXNAS Quick Install Guide. This chapter describes how to configure your gateways Internet connection and includes these sections: Gateway Front Panel on page 6. Gateway Rear Panel on page 7. Logging Into Your Gateway on page 7. Viewing the Basic Settings on page 9.
For information about product features and compatible NETGEAR products, see the NETGEAR website at http://www.netgear.com.
Note: For optimal performance, place the gateway vertically in the stand. Do not mount this unit to a wall; it is not suitable for wall mounting.
You can use the LEDs to verify status and connections. The following table lists and describes each LED and button on the front panel of the gateway.
LED Description
Power
Green: Power is supplied to the cable modem. Blinking: Power on self-test. Off: No power. Green: One or more downstream channels is locked. Blinking: The unit is scanning for a downstream channel. Off: No downstream channel is locked. Green: One or more upstream channels is locked. Blinking: The unit is scanning for an upstream channel. Off: No upstream channel is locked. Solid green: The cable modem is online. Blinking: The cable modem is synchronizing with the cable providers CMTS. Off: The cable modem is offline.
Green indicates 1,000 Mbps. Amber indicates 100/10 Mbps.
Downstream
Upstream
Internet
Solid: An Ethernet device is connected and powered on. LAN (Ethernet) Blinking: Data is being transmitted or received on the Ethernet port. Off: No Ethernet device is detected on the Ethernet port.
Button Description Turn the wireless radio in the gateway on and off. The wireless radio is on by default. The LED located below this button indicates if the wireless radio is on or off. Wireless On/Off Pushing this button opens a 2-minute window for the gateway to connect with other WPS-enabled devices. For more information, about using the WPS method to implement security, see the Using Push 'N' Connect (WPS) Wireless Setup on page 13
WPS
USB port
The rear panel includes the following connections, viewed from left to right: Four Gigabit-Ethernet LAN ports: Use these ports to connect local computers. USB port: The USB port is a USB host and can be used for connecting a USB hard drive, flash drive, or printer. Coaxial cable connector: Attach coaxial cable to the cable service providers connection. Power: Power adapter input. Power On/Off button.
Note: You can return the gateway to its factory settings. On the bottom of the gateway, press and hold the Restore Factory Settings button for over 7 seconds. The gateway resets, and returns to its factory settings. See Factory Default Settings in Appendix A.
Note: To connect to the gateway you must use a computer configured for DHCP (most computers are). For help with configuring DHCP, see the instructions that came with your computer or see the link to the online document in Preparing a Computer for Network Access in Appendix B.
When you have logged in, if you do not click Logout, the gateway waits for 5 minutes after no activity before it automatically logs you out. To log in to the gateway: 1. On the computer that is connected to the gateway with an Ethernet cable, type http://192.168.0.1 in the address field of your Internet browser. A login window opens.
2. Log in with the user name admin and its default password of password. When you connect to the gateway the Gateway Status screen displays.
To view the gateways settings for the Internet connection, see the following section, Viewing the Basic Settings on page 9.
2. You can fill in the Domain Name and Device Name fields. By default, the Dynamic IP radio button is selected. This allows the gateway to download network configuration from your ISP. Select Static IP only if your ISP has assigned you a permanent, fixed (static) IP address.
3. If you select Static IP, more fields appear on the screen. Fill in these fields so the gateway can connect to the Internet: Static IP Address. The fixed IP address that your ISP has assigned to you. Static IP Mask. The network number portion of an IP address. Unless you are implementing subnetting, use 255.255.0.0 as the subnet mask. Primary DNS. A DNS server is a host on the Internet that translates Internet names (such as www.netgear.com) to numeric IP addresses. Typically your ISP transfers the IP address of one or two DNS servers to your Gateway during login. If the ISP does not transfer an address, you must obtain it from the ISP and enter it manually here. If you enter an address here, you should reboot your PCs after configuring the Gateway. Secondary DNS. If applicable, enter the address of your ISPs secondary DNS server.
4. If you made changes, click Apply so that the changes take effect.
2.
Wireless Configuration
Note: Before changing wireless settings, connect the gateway and set up its Internet connection as described in the Wireless Cable Gateway CG3000D-1CXNAS Quick Install Guide.
This chapter includes: Setting Up Your Wireless Network. Manually Configuring Wireless Settings on page 11. Using Push 'N' Connect (WPS) Wireless Setup on page 13. Wi-Fi Multimedia on page 16. Advanced Wireless Settings on page 17.
For more information about wireless technology, also see the link to the online document Wireless Communications in Appendix B.
10
2. Log in to the gateway as described in Logging Into Your Gateway on page 7. 3. In the main menu, under Setup, select Wireless Settings to display this screen. 4. Specify the Wireless Network settings. Name (SSID): The name of the wireless network. Region: The location where the gateway will operate. Channel: The available channels depend on the region. Some countries have laws specifying which channels should be used. 802.11 Mode: This is set to Up to 145 Mbps by default. You can specify the mode to support faster equipment or legacy equipment.
5. For help with Security Options, see the following sections 6. If you made changes, click Apply so that they take effect.
11
To set up WPA or WPA2 wireless security: 1. In the Security Options section of the Wireless Settings screen, leave the default setting or select one of the WPA settings: WPA-PSK. This setting provides the TKIP encryption type and a pre-shared key passphrase. WPA2-PSK. This setting provides the AES encryption type and a pre-shared key passphrase.
2. Depending on the WPA settings that you select, enter the required information. For WPA-PSK or WPA2-PSK, enter the pre-shared key, which is a passphrase between 8 and 63 characters. The default WPA passphrase is the 13-character serial number of your gateway. 3. Click Apply to save your settings. Note: If you plan to use WPS, and you want to keep your wireless settings the same, go to the Advance Wireless Settings screen and make sure that the Keep Existing Settings checkbox is selected. See Advanced Wireless Settings on page 17.
4. Configure your wireless computers with the same WPA2 or WPA settings as your gateway so that you will be able to connect.
WEP Security
Note: By default, the gateway is set up to work with WPA and WPA2 wireless security, both of which are newer than WEP. Typically, the only reason you might need to set up WEP would be to allow access to older wireless computers or devices that cannot support WPA.
To set up WEP wireless security: 1. In the Wireless Settings screen, select the WEP radio button in the Security Options section. 2. Select the Authentication from the drop-down list.The default is Automatic. 3. Depending on the encryption strength that you want, select one of these WEP Encryption options: 64-bit encryption 128-bit encryption 4. Enter a Passphrase (recommended) or WEP Keys: To use a passphrase and generate keys, enter a passphrase and click Generate. To enter the keys, fill in the Key 1 through Key 4 fields. Write down the keys and keep them in a secure location. For 64-bit WEP, enter 10 hexadecimal digits (any combination of 09 or AF). For 128-bit WEP, enter 26 hexadecimal digits. Select which key will be the default, which will be used to encrypt data transmissions. The other keys can only be used to decrypt received data.
5. Click Apply to save your settings. 6. Configure your wireless computers with the same WEP settings as your gateway so that you will be able to connect. If you entered the keys, you will need to type them exactly as you did when you set up the gateway.
13
Note: All WPS-capable products should be compatible with the gateway. For more detailed information about the WPS standard, see http://www.wi-fi.org).
There are two Push 'N' Connect methods, Push Button and PIN (personal identification number). Push Button. This is the preferred method. See the following section, Using the WPS Button. PIN. See Using a PIN on page 15.
Note: The first time you use WPS it will assign a random network name (SSID) and a random passphrase to your wireless network. If you want to keep the network name and passphrase you specified in the Wireless Settings screen, you must select the Keep Wireless Settings checkbox in the Advanced Wireless Settings screen. See Advanced Wireless Settings on page 17.
To use the WPS button: 1. First, make sure you know how WPS works on your computer or wireless device. If it works with WPS, it has a WPS utility and might also have a WPS button that you can press. 2. Log in to the gateway as described in Logging Into Your Gateway on page 7. 3. In the main menu, select WPS Settings, and then click Next. The Add WPS Client screen displays:
Any computer or wireless device that will wirelessly connect to the gateway is a client. After it is added as a client, it will be able to automatically connect to the gateway.
The WPS LED on the front of the gateway begins to blink. The gateway tries to communicate with the wireless computer or device for 2 minutes. If the Security Option in the Wireless Settings screen was set to Disabled, it is automatically changed to WPA-PSK [TKIP] + WPA2-PSK [AES] including a random wireless security password.
5. Go to the wireless computer, and run its WPS configuration utility. Follow the utilitys instructions to click a WPS button. When the computer connects to the wireless network, the gateway sends its SSID and WPA-PSK or WPA2-PSK configuration to that computer. 6. On the computer that just joined the wireless network, make sure you can connect to the Internet. You should see the gateways Internet LED blink, showing that its Internet connection is in use.
Using a PIN
1. First, make sure you know how WPS works on your computer or wireless device. If it works with WPS, it has a WPS utility. Use this utility to determine the PIN for your wireless computer or device. 2. Log in to the gateway as described in Logging Into Your Gateway on page 7. 3. In the main menu, select WPS Settings. The Add WPS Client screen displays.
Any computer or wireless device that will wirelessly connect to the gateway is a client. After it is added as a client, it will be able to automatically connect to the gateway. 4. Select the PIN radio button. 5. Type the PIN that you located in Step 1 in the Enter Clients PIN field, and then click Next. The WPS LED on the front of the gateway begins to blink.
15
The gateway tries to communicate with the wireless computer or device for 4 minutes. If the Security Option in the Wireless Settings screen was set to Disabled, it is automatically changed to WPA-PSK (including a PSK security password).
When the computer connects to the wireless network, the gateway sends its SSID and WPA-PSK or WPA2-PSK configuration to that computer. 6. On the computer that just joined the wireless network, make sure you can connect to the Internet. You should see the gateways Internet LED blink, showing that its Internet connection is in use.
Wi-Fi Multimedia
You can use the Multimedia page to set up wireless multimedia Quality of Service (QoS). To set up Wi-Fi Multimedia: 1. Log in to the gateway as described in Logging Into Your Gateway on page 7. 2. In the main menu, under Setup, select Wi-Fi Multimedia.
3. In the WMM Support field, select On to enable WMM. 4. In the No-Acknowledgement field, select Off or On to specify whether acknowledgement (ACK) messages are used. Usually, this field is set to Off. This might improve the efficiency of packet transmission. If wireless communication quality is poor at your location (this could happen if there is a lot of interference), set this field to On so that you are notified when a package is lost. 5. To conserve battery power in smaller devices that are connected to the gateway, set the Power Save Support field to On. 6. Click Apply to save your settings.
The following table describes the fields in the Advanced Wireless Settings screen.
Advanced Wireless Settings Wireless Access Point (Enhanced Feature) Description
Enable Wireless Access Point By default this checkbox is selected so that the gateway works as a wireless access point. You can turn off the wireless radio to disable access through this device. This can be helpful for configuration, network tuning, or troubleshooting activities.
Advanced Configuration
Fragmentation Threshold The default settings for these fields usually work fine. Change them only if you have a specific reason for CTS/RTS Threshold doing so. Preamble Mode
Disable Routers PIN Selecting this checkbox disables the PIN that WPS clients use to connect to the gateway with the PIN method. Normally this checkbox is cleared, which is the default setting. If a WPS client is added the gateway automatically selects this checkbox. When the Keep Existing Settings checkbox is selected, the SSID and wireless security settings remain the same when additional WPS clients are added. Access control is disabled by default so that any computer that is configured with the correct SSID can connect. For information about access control, see the following section.
WPS Settings
17
Note: The first time you use WPS it will assign a random network name (SSID) and a random passphrase to your wireless network. If you want to keep the network name and passphrase you specified in the Wireless Settings screen, you must select the Keep Wireless Settings checkbox.
The WPS LED on the front of the gateway begins to blink. The gateway tries to communicate with the wireless computer or device for 2 minutes. If the Security Option in the Wireless Settings screen was set to Disabled, it is automatically changed to WPA-PSK [TKIP] + WPA2-PSK [AES] including a random wireless security password.
2. Go to the wireless computer, and run its WPS configuration utility. Follow the utilitys instructions to click a WPS button. When the computer connects to the wireless network, the gateway sends its SSID and WPA-PSK or WPA2-PSK configuration to that computer. On the computer that just joined the wireless network, make sure you can connect to the Internet. You should see the gateways Internet LED blink, showing that its Internet connection is in use.
3. Click the Setup Access List button to display the Wireless Card Access List screen.
Note: If you are configuring the gateway from a wireless computer, make sure to add your computers MAC address to the Access List. Otherwise you will lose your wireless connection when you click Apply. You must then access the gateway from a wired computer, or from a wireless computer that is on the access control list, to make any further changes.
4. In the Network Profiles section, select the radio button for a wireless network. 5. By default the Allow Any radio button is selected. You can either allow computers to connect to the network based on their MAC addresses, or deny connections based on MAC address. Select either the Allow List or Deny List radio button. 6. Add devices to the Access List using either of these methods: If the computer is in the Connected Wireless Devices table, click its radio button to capture its MAC address. Then click Add. Enter the MAC address of the device in the Add Access Filter fields. The MAC address can usually be found on the bottom of the wireless device. Then click Add.
19
3.
This chapter describes how to perform network management tasks with your gateway. When you log in to the gateway (see Logging Into Your Gateway on page 7), these tasks are grouped under Maintenance. This chapter includes: Viewing the Gateway Status. Viewing the Connection Status on page 22. Changing Passwords on page 22. Backing Up and Restoring Your Settings on page 23. Viewing the Event Log on page 24. Running the Diagnostic Ping Utility on page 25.
20
Cable Modem Serial number The serial number of the gateway hardware. CM Certificate System Up Time Network Access Cable Modem IP Address If the cable modem certificate is Installed, it is possible for the service provider to upgrade your Data Over Cable service securely. Time since the last boot up. Shows whether traffic can be forwarded from the LAN to the network. The current Internet IP address. If assigned dynamically and not connected to the Internet, this will be blank.
21
Use the Connection screen to track the gateways initialization procedure, and to get details about the downstream and upstream cable channel. The time is displayed after the gateway is initialized. The gateway automatically goes through the following steps in the provisioning process: Scan and lock the downstream frequency, and then link back in upstream direction. Obtain an IP address for the gateway itself. Then the gateway assigns an IP address for the connected PC. Connect to the Internet.
Changing Passwords
For security reasons, the gateway has its own user names and passwords. NETGEAR recommends that you change the default passwords to more secure passwords. The ideal passwords should contain no dictionary words from any language, and should be a mixture of both upper and lower case letters, numbers, and symbols. Your passwords can be up to 30 characters.
To change the password: 1. In the main menu, under Maintenance, select Set Password.
2. To change the password, enter the new password twice. 3. Click Apply to save your changes. Note: After changing the password, you will be required to log in again to continue the configuration. If you have backed up the gateway settings previously, you should do a new backup so that the saved settings file includes the new password.
2. You can save the current configuration settings or restore saved settings: To save the current configuration settings, click Back Up.
23
To restore the saved configuration settings from a backup file, click Browse, locate and select the previously saved backup file. Then click Restore.
A message notifies you when the gateway has been restored to previous settings. Then, the gateway restarts, which takes about one minute.
Note: When restoring configuration settings, do not interrupt the process by going online, turning off the gateway, or shutting down the computer.
2. To clear the log, click Clear Log; to refresh the log, click Refresh.
3. To start a ping test, enter the IP address in the Diagnostics screen, and click the Ping button. The Ping Results are displayed:
4. To return to the Diagnostics screen and stop the test, click Back and then click Abort Test.
25
4.
Advanced Settings
This chapter describes how to customize your network through the advanced settings on your gateway. When you log in to the gateway (see Logging Into Your Gateway on page 7), these tasks are grouped under Advanced. This chapter includes: MAC Filtering on page 27. IP Filtering on page 28. Port Blocking on page 29. Port Forwarding on page 30. Port Triggering on page 31. DMZ Host on page 32. LAN IP Setup on page 33. Remote Management on page 34. Configuring Universal Plug and Play (UPnP) on page 36.
Note: For information about advanced wireless settings, see Advanced Wireless Settings on page 17.
26
MAC Filtering
By default, the gateway allows any connected PC to access the Internet through. The MAC Filtering screen lets you block specific computers, based on their MAC address, from access to the Internet on selected days and times. To use MAC filtering to block Internet access for a specific computer: 1. In the main menu, under Advanced, select MAC Filtering. The Trusted Devices table shows computers that have access to the Internet through the gateway. Click Refresh to update the Trusted Devices table. 2. In the Add MAC Filter table, you can use either of these methods to specify computers to block: If the computer is in the Trusted Devices table, click its radio button. The MAC address will be added into the Add MAC Filter table. Fill in the Device Name and MAC address fields.
3. Click Add. The MAC Filter List Enable checkbox is automatically selected for that computer. 4. Select the days and times to block the computer: Day(s) to Block. Select the days to block the computer selected in the MAC Filter List. The default is Everyday. Time of Day to Block. You can specify the time of day to block the computer. The default is All Day. Be sure that you clear the All Day checkbox if you want to enter specific times. The selected period applies to each day that you selected.
5. Click Apply to save your settings. 6. Repeat these steps for all computers that you want to block. To stop blocking a computer: To stop blocking a computer, select it from the MAC Filter List field, and then clear its Enable check box. This leaves the computer in the list but ensures that it is not blocked. To remove a computer from the list, select it from the MAC Filter List field, and then click Delete.
27
IP Filtering
By default, any computer will be allowed access to the internet through your gateway. You can use IP filtering to block specific computers based on their IP addresses from access to the Internet on selected days and times. To set up IP filtering: 1. In the main menu, under Advanced, select IP Filtering. The Trusted Devices table shows computer that are allowed access to the Internet through your gateway. You can click Refresh to update the Trusted Devices.
2. Add device to the IP Filter List as needed: If the computer is in the Trusted Devices table, click its radio button to capture its IP address; or enter the IP address of the computer you want to block. If no device name appears, you can type a name for the computer you are adding.
3. When you have finished entering the IP address click Add. To delete a device from the IP Filtering List, select it, and then click Delete. 4. Select the Day(s) to Block. 5. In the Time of Day to Block, choose a Start time and an End time. This time range will apply to each day you selected in Day(s) to Block for the specific computer. All day is the default value for specific computers. 6. When you have finished configuration, click Apply to activate the settings.
Port Blocking
You can use port blocking to block outbound traffic on specific ports. Outbound traffic rules control access to outside resources from local users.The default rule is to allow all access from the LAN side to the outside. You can use port blocking to add predefined or custom rules to specify exceptions to the default rule.
Note: Any outbound traffic that is not blocked by rules that you have created is allowed by the default rule.
To configure port blocking and services to block specific outbound traffic: 1. In the main menu, under Advanced, select Port Blocking. 2. In the Services field, select a service from the drop-down list. (For example, FTP, which uses TCP ports 20 and 21.) 3. To add a custom rule that is not in the list of services, specify these settings in the Add Custom Rules table: Name. Enter a name for the service. Start Port. Enter the start port for the service. End Port.Enter the end port for the service. Protocol. Select the protocol for the ports: TCP. Select TCP only. UDP. Select UDP only. Both. Select both TCP and UDP.
Local IP Address. Complete the local IP address for the computer that is using the service.
4. Perform one of the following actions: Click Add to save your settings. The Active Filters table now displays the list of ports that are currently forwarded. To delete a service, select the radio button in the Active Filters table for the service that you want to delete, and then click Delete. To reset the selection in the Services drop-down list and to clear all the fields in the Add Custom Rules table, click Reset.
29
Port Forwarding
A firewall has default rules for inbound traffic (WAN to LAN) and for outbound traffic. Port forwarding affects the inbound rules. These rules restrict access from outsiders. By default, the gateway blocks access from outside except responses to requests from the LAN side. You can use port forwarding to add rules to specify exceptions to the default rule. Because the gateway uses Network Address Translation (NAT), your network presents only one IP address to the Internet, and outside users cannot directly address any of your local computers. However, by defining an inbound rule you can make a local server (for example, a web server or game server) or computer visible and available to the Internet. The rule tells the Gateway to direct inbound traffic for a particular service to one local server or computer based on the destination port number. This is also known as port forwarding. Some residential broadband ISPs do not allow you to run server processes (such as a Web or ftp server) from your location. Your ISP might check for servers and suspend your account if it finds active services at your location. See your ISPs Acceptable Use policy. To configure port forwarding and services for specific inbound traffic: 1. In the main menu, under Advanced, select Port Forwarding. 2. In the Service field, select a service from the drop-down list. (For example, FTP, which uses TCP ports 20 and 21.) 3. To add a custom rule that is not in the list of services, specify these settings in the Add Custom Rules table: Name. Enter a name for the service. Start Port. Enter the start port for the service. End Port.Enter the end port for the service. Protocol. Select the protocol for the ports: TCP. Select TCP only. UDP. Select UDP only. Both. Select both TCP and UDP.
Local IP Address. Complete the local IP address for the computer that is using the service.
4. Perform one of these actions: Click Add. The Active Forwarding Rules table displays the list of forwarded ports. To delete a service, select the radio button in the Active Forwarding Rules table for the service that you want to delete, and then click Delete. To reset the selection in the Services field and to clear all the fields in the Add Custom Rules table, click Reset.
Port Triggering
Port triggering is an advanced feature that you can use to allow gaming and other Internet applications that would otherwise be blocked by the firewall. You must know the port numbers that are used by the application. Port triggering operates as follows: 1. A computer makes an outgoing connection using a port number defined in the Port Triggering table. 2. The gateway records this connection, opens the incoming port or ports associated with this entry in the Port Triggering List, and associates them with the PC. 3. The remote system receives the PCs request, and responds using a different port number. 4. The gateway matches the response to the previous request, and forwards the response to the PC. (Without port triggering, this response would be treated as a new connection request rather than a response. As such, it would be handled in accordance with the port forwarding rules.) Note: Only one computer at a time can use port triggering. After a computer finishes using a port triggering application, there is a short time-out period before the application can be used by another PC.
To configure port triggering: 1. In the main menu, under Advanced, select Port Triggering.
31
2. For each port trigger, enter the settings in the Port Trigger List: Trigger Range. To specify the range of outgoing ports that will be monitored to trigger the incoming port forwarding rule, enter the Start Port and End Port. Target Range. To specify the range of incoming ports that will be opened when triggered, enter the Start Port and End Port. Protocol. Select the protocol for the ports:
3. Select the Enable checkbox for the port trigger. 4. Perform one of the following actions: Click Apply to save your settings and activate the port triggers. To remove a port trigger, select its radio button and click Delete. To return all trigger and target ranges to zero, click Reset.
DMZ Host
You can use the DMZ Host screen to set up a default DMZ computer. Specifying a default DMZ computer allows you to set up a PC that is available to anyone on the Internet for services that you have not defined. There are security issues with doing this, so only set up the DMZ host if you are willing to risk open access. If you do not define a DMZ host the gateway discards any undefined service requests. To set up a DMZ host: 1. In the main menu, under Advanced, select DMZ Host.
2. If desired, select the Respond to Ping on WAN Port checkbox. 3. Type the last digit(s) of the IP address in the DMZ Address field. 4. Click Apply.
LAN IP Setup
The LAN IP screen allows you to configure LAN services such as the IP address of the gateway and DHCP. The TCP/IP and DHCP default values work fine in most cases.
Note: If you disable the DHCP server, you will need to assign to your computer a static IP address to reconnect to the gateway and enable the DHCP server again.
To configure LAN IP settings: 1. In the main menu, under Advanced, select LAN IP. 2. Specify these settings: LAN IP Address: The factory default setting is 192.168.0.1. Subnet Mask: The network number portion of an IP address. Unless you are implementing subnetting, use 255.255.255.0 as the subnet mask. DHCP Server: The Yes radio button is selected by default so the gateway acts as a DHCP server, providing the TCP/IP configuration for all the computers connected to it. If you will assign IP addresses manually, or you have another DHCP server on your network, select the No radio button. Starting IP Address and Ending IP Address: These fields specify the range in the IP address pool. Max Users: The maximum number of users on the network. DHCP Lease: See the following section, Reserving an IP Address for DHCP Use.
33
Remote Management
With remote management, you can allow a user or users on the Internet to configure, upgrade, and check the status of the gateway.
Note: Use very secure passwords if you enable remote management. Passwords should contain no dictionary words from any language, and should be a mixture of letters (both upper and lower case), numbers, and symbols. Your password can be up to 16 characters.
To manage this gateway through the Internet, you need its public IP Address, as seen from the Internet. This public IP address is allocated by your ISP. But if your ISP account uses a dynamic IP address, the address can change each time you connect to your ISP. There are two solutions to this problem: Have your ISP allocate you a fixed IP address. Use the DDNS (Dynamic DNS) feature so you can connect using a domain name, rather than an IP address.
To configure the gateway for remote management: 1. In the main menu, under Advanced, select Remote Management. 2. Select one of the Allow Remote Management checkboxes. 3. Fill in the Remote User Name and Remote Password fields. 4. Specify the port numbers to access the gateway remotely in your browser when you connect. To specify the port numbers: a. From a remote location, start a browser. b. In the Address or Location field, enter the Internet IP address of this gateway (NOT the LAN IP address), followed by a colon and the port number, as follows: http://ip_address:pn || https://ip_address:pn where: ip_address is the Internet IP address of this gateway. pn is the port number assigned on this screen. c. You will be prompted for the password for this gateway. 5. If you want the ability to reset to factory default settings remotely, and then log in again remotely, select the Allow Remote managemetn after Factory Default Reset checkbox. 6. Click Apply to save your changes.
Remote Management Settings Description
Allow Remote Management If selected, remote management is enabled, and connection from the (HTTP/HTTPS) CM interface Internet to this gateway with HTTP and HTTPS is possible. The correct port number must be used when connecting Allow Remote Management If selected, remote management is enabled, and connection from the (HTTP/HTTPS) CM interface Internet to this gateway with HTTP and HTTPS is possible. Remote User Name and Remote Password Port Number fields Enter the User Name and Password that will be used from the remote PC to manage the gateway. Use a very secure password. Web browser access normally uses the standard HTTP service port 80. NETGEAR recommends that you use a different port number for remote management, as using port 80 will prevent the use of a Web Server on your LAN, and can be more readily discovered by hackers. Use the default (8080) or choose a port number between 1 and 65535.
35
Remote Management Settings (Continued) Revert to factory default settings IP Address to connect this device
Allow Management via Telnet You can select LAN interface (local managemetn), CM Interface (remote Allow Management via SSH management), or WAN Interface (remote management) in order to connect to the gateway from the Internet. The correct port number must be used when connecting
To configure UPnP: 1. In the main menu, under Advanced, select UPnP. 2. Select the Turn UPnP On check box. The default setting is disabled, which prevents the gateway from allowing any device to automatically control of its the resources, such as port forwarding. 3. Fill in the Advertisement Period and Advertisement Time to Live fields. The UPnP Portmap Table displays the IP address of each UPnP device that is currently accessing the gateway and which internal and external ports of the
gateway were opened by that device. The UPnP Portmap Table also displays the protocol for the port that was opened and if that port is still active for each IP address. 4. Perform one of the following actions: Click Apply to save your settings. Click Cancel to disregard any unsaved changes. Click Refresh to update the UPnP Portmap Table and to show the active ports that are currently opened by UPnP devices.
37
5.
Troubleshooting
This chapter gives information about troubleshooting your NETGEAR Wireless Cable Gateway. For the common problems listed, go to the section indicated. Have I connected the gateway correctly? Go to Basic Functions on page 38. I cannot access the gateway configuration with my browser. Go to Connecting to the Gateways Main Menu on page 39. I have configured the gateway but I cannot access the Internet. Go to Troubleshooting the ISP Connection on page 40. I cannot remember the gateways configuration password or I want to clear the configuration and start over again. Go to Factory Default Settings in Appendix A. Tip: NETGEAR provides helpful articles, documentation, and the latest software updates at http://www.netgear.com/support.
Basic Functions
After you have turned on power to the gateway, you should do the following: 1. Check to see that the Power LED is on. 2. Check that the numbered Ethernet LEDs come on momentarily. 3. After a few seconds, check that the local port link LEDs are lit for any local ports that are connected. If any of these conditions does not occur, refer to the appropriate following section.
Chapter : Troubleshooting
38
All LEDS are off when the gateway Make sure that the power cord is properly connected to your gateway is plugged in. and that the power supply adapter is properly connected to a functioning power outlet. Check that you are using the 12VDC power adapter supplied by NETGEAR for this product. If the error persists, you have a hardware problem and should contact technical support. All LEDs Stay On
Make sure that the Ethernet cable connections are secure at the Make sure that power is turned on to the connected hub or PC. Be sure you are using the correct cable.
Internet LED is off and the gateway is connected to the cable television cable.
Make sure that the coaxial cable connections are secure at the
gateway and at the wall jack.
Make sure that your cable internet service has been provisioned by
your cable service provider. Your provider should verify that the signal quality is good enough for cable modem service. Remove any excessive splitters you may have on your cable line. It may be necessary to run a home run back to the point where the cable enters your home.
Note: If your PCs IP address is shown as 169.254.x.x: Recent versions of Windows and MacOS will generate and assign an IP address if the computer cannot reach a DHCP server. These
Chapter : Troubleshooting
39
auto-generated addresses are in the range of 169.254.x.x. If your IP address is in this range, check the connection from the PC to the gateway and reboot your PC.
If your gateways IP address has been changed and you dont know the current IP address, clear the gateways configuration to factory defaults. This will set the gateways IP address to 192.168.0.1. This procedure is explained in Factory Default Settings in Appendix A. Make sure your browser has Java, JavaScript, or ActiveX enabled. If you are using Internet Explorer, click Refresh to make sure that the Java applet is loaded. Try quitting the browser and launching it again. Make sure you are using the correct login information. The gateway user name admin is lower-case (Caps Lock should be off). The default password of password.
If the gateway does not save changes you have made, check the following: When entering configuration settings, be sure to click the Apply button before moving to another screen, or your changes are lost. Click the Refresh or Reload button in the Web browser. The changes may have occurred, but the Web browser may be caching the old configuration.
40 | Chapter : Troubleshooting
Chapter : Troubleshooting
41
Check that your PC has the IP address of your gateway listed as the default gateway. If the IP configuration of your PC is assigned by DHCP, this information will not be visible in your PCs Network Control Panel. Verify that the IP address of the gateway is listed as the default gateway. See the link to the online document Internet Networking and TCP/IP Addressing in Appendix B. Check to see that the network address of your PC (the portion of the IP address specified by the netmask) is different from the network address of the remote device. Check that your Cable Link LED is on. If your ISP assigned a host name to your PC, enter that host name as the Account Name in the Basic Settings screen.
The time it takes to establish a wireless connection can vary depending on both your security settings and the gateway location. WEP connections can take slightly longer to establish. Also, WEP encryption can consume more battery power on a notebook computer.
42 | Chapter : Troubleshooting
A.
Inbound communication from the Disabled (except traffic on port 80, the http port) Internet Outbound communication to the Internet Source MAC filtering Enabled (all) Disabled
43
Factory Default Settings (Continued) Internet connection Wireless WAN MAC address WAN MTU size Wireless communication SSID name Security Use default hardware address 1500 Enabled The last 3 octets of the Wi-Fi MAC address WPA/WPA2
The default WPA/WPA2 passphrase is the 13-character serial number of the gateway.
Broadcast SSID Transmission speed Country/region RF channel Operating mode Data rate Output power Access point Authentication type Wireless card access list
Enabled Auto1 United States (varies by region) Auto n, g, and b Best Full Enabled Open System All wireless stations allowed
1 Maximum Wireless signal rate derived from IEEE Standard 802.11 specifications. Actual throughput will vary. Network conditions and environmental factors, including volume of network traffic, building materials and construction, and network overhead, may lower actual data throughput rate.
Technical Specifications
The following table describes the technical specifications for the gateway.
Technical Specifications Network protocol and standards compatibility Power adapter Data and Routing Protocols: TCP/IP, DHCP server and client, DNS relay, NAT (many-to-one), TFTP client, VPN pass through (IPSec, PPTP)
North America (input): 120V, 60 Hz, input All regions (output): 12 V DC @ 1.5A output 15W maximum Dimensions: 8.5 by 5.75 by 1.3 in (216 by 146 by 33 mm) Weight: 0.95 lb (0.42 kg) Operating temperature: 32 140 F (0 to 40 C) Operating humidity: 90% maximum relative humidity, noncondensing Electromagnetic emissions: Meets requirements of: FCC Part 15 Class B.
Local: 10BASE-T, 100/1000BASE-Tx, RJ-45 USB 2.0/1.1 function 802.11n/g/b Internet: DOCSIS 3.0. Downward compatible with DOCSIS 2.0, 1.1 and 1.0
Physical specifications
Environmental
Interface
45
B.
Related Documents
This appendix provides links to reference documents you can use to gain a more complete understanding of the technologies used in your NETGEAR product.
Document Windows XP and Vista Wireless Configuration Utilities Internet Networking and TCP/IP Addressing Wireless Communications Link http://documentation.netgear.com/reference/enu/winzerocfg/index.htm http://documentation.netgear.com/reference/enu/tcpip/index.htm http://documentation.netgear.com/reference/enu/wireless/index.htm
Preparing a Computer for Network http://documentation.netgear.com/reference/enu/wsdhcp/index.htm Access Virtual Private Networking (VPN) Glossary http://documentation.netgear.com/reference/enu/vpn/index.htm http://documentation.netgear.com/reference/enu/glossary/index.htm
46
C.
Notification of Compliance
FCC Caution Any changes or modifications not expressly approved by the party responsible for compliance could void the users
authority to operate this equipment.
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This
device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. For product available in the USA market, only channel 1~11 can be operated. Selection of other channels is not possible. This device and its antenna(s) must not be co-located or operation in conjunction with any other antenna or transmitter.
47
Marking by the above symbol indicates compliance with the Essential Requirements of the R&TTE Directive of the European Union (1999/5/EC). This equipment meets the following conformance standards: EN300 328, EN301 489-17, EN60950 For complete DoC please visit the NETGEAR EU Declarations of Conformity website at: http://kb.netgear.com/app/answers/detail/a_id/11621/
Eesti [Estonian]
English
Espaol [Spanish]
[Greek]
Franais [French]
Italiano [Italian]
Malti [Maltese]
Svenska [Swedish]
49
This device may not cause harmful interference, and This device must accept any interference received, including interference that may cause undesired operation.
Reorient or relocate the receiving antenna. Increase the separation between the equipment and the receiver. Connect the equipment into an electrical outlet on a circuit different from that which the radio receiver is connected. Consult the dealer or an experienced radio/TV technician for help.
TBD
Tested to Comply with FCC Standards
FOR HOME OR OFFICE USE PY306100037
Modifications made to the product, unless expressly approved by NETGEAR, Inc., could void the user's right to operate the equipment.
Index
Numerics
192.168.0.1, default IP address 1-8 placement and range guidelines 2-10 remote management 4-34 gateway front panel 1-6 gateway rear panel 1-7
B
backing up the configuration file 3-23 Basic Settings 1-9 blocking PCs based on MAC address 4-27 blocking ports 4-29
I
IP address 1-8 IP addresses, auto-generated 5-40
L
LAN IP address 4-33 IP settings 4-33 LEDs troubleshooting 5-39 logging in 1-7 logging out 1-8 logs 3-24
C
cable channel 3-22 configuration backup 3-23 erasing 3-23
D
default gateway field (Basic Settings) 1-9 DHCP 4-34 reserved IP address 4-34 server 4-33 DMZ Host 4-32 DNS primary and secondary server 1-9
M
MAC filtering 4-27 Modem Status 3-21
P E
Erase configuration 3-23 Event log 3-24 passphrase 2-13 ping utility 5-40 port blocking 4-29 port forwarding 4-30, 4-31 primary DNS server 1-9
F
firewall rules inbound 4-30 port forwarding 4-30 front panel 1-6
R
remote management 4-34
G
gateway backup 3-23 main menu 5-39
S
secondary DNS server 1-9 static IP address 1-9
T
Index | 51
TCP/IP network, troubleshooting 5-40 technical specifications A-45 troubleshooting 5-38 ISP connection 5-40 LEDs 5-39 ping utility 5-40 TCP/IP network 5-40
U
Universal Plug and Play (UPnP) 4-36
W
WEP 2-13 keys 2-13 passphrase 2-13 Wi-Fi Protected Setup (WPS) Push N Connect 2-17 wireless access point 2-17 card access list 2-17 manually configuring settings 2-11 wireless network planning 2-10 wireless security 2-16 Wireless Security Options 2-10 WPA 2-12 WPA2 2-12 WPA2-PSK 2-12 WPA-PSK 2-12 WPS 2-14 WPS button 1-6
52 | Index