Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                

Calix 844G UserGuide

Download as pdf or txt
Download as pdf or txt
You are on page 1of 113

Calix 844G/854G GigaCenter

User's Guide

August, 2015

#220-00771, Rev 11
Contents

About This Guide...................................................................... 6


Intended Audience .................................................................................................... 6

Related Documentation............................................................................................. 6

Site Conventions ....................................................................................................... 7

Chapter 1: 844G/854G GigaCenter Overview ......................... 9


About the Home Gateway ....................................................................................... 11

GigaCenter Management Architecture .................................................................. 13

Home Gateway IPv6 Support .................................................................................. 14


Dual Stack IPv4/IPv6 ...................................................................................... 15
DS-Lite ............................................................................................................ 16
6rd................................................................................................................... 17
About GigaCenter Voice Services .......................................................................... 18

Chapter 2: Wireless Networking ........................................... 19


About the 5 GHz Wi-Fi Radio .................................................................................. 19

Wireless Network Performance .............................................................................. 20

About Multiple Input, Multiple Output (MIMO)....................................................... 22

About the 2.4 GHz and 5 GHz Spectrums .............................................................. 23

About Air Time Fairness ......................................................................................... 25

Carrier Class Wi-Fi Quality of Service (Qos) ......................................................... 25

Getting Additional Information ............................................................................... 25

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
4

Chapter 3: Turning up a GigaCenter .................................... 27


GigaCenter Activation and Configuration Options ............................................... 27

Connecting to the GigaCenter Home Gateway ..................................................... 28

GigaCenter Inventory .............................................................................................. 28

About GigaCenter Resets ....................................................................................... 30

Chapter 4: Embedded Web Interface .................................... 31

Embedded Web Interface Field Definitions ......................... 32


Status Menu ............................................................................................................. 34

Status Menu Overview ............................................................................................ 34


Connections .................................................................................................... 35
Devices ........................................................................................................... 37
Internet............................................................................................................ 39
Ethernet .......................................................................................................... 42
Wireless .......................................................................................................... 43
NAT (Network Address Translation) ............................................................... 45
Routing ........................................................................................................... 46
Security ........................................................................................................... 47
Quick Start Menu ..................................................................................................... 48

Quick Start Menu Overview .................................................................................... 48


Connect to Internet ......................................................................................... 49
Configure Wireless Network ........................................................................... 50
Set Time Zone ................................................................................................ 51
Wireless Menu ......................................................................................................... 52

Wireless Menu Overview......................................................................................... 52


Radio Setup .................................................................................................... 54
SSID Setup ..................................................................................................... 55
Wireless Security ............................................................................................ 56
MAC Authentication ........................................................................................ 57
WMM (Wi-Fi Multimedia) ................................................................................ 58
Advanced Radio Set-up .................................................................................. 59
WPS (Wi-Fi Protected Setup) ......................................................................... 60
Utilities Menu .................................................................................................. 61

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
5

Utilities Menu Overview .......................................................................................... 61


Configuration Save ......................................................................................... 62
Restore Defaults ............................................................................................. 64
Reboot ............................................................................................................ 65
Web Activity Log ............................................................................................. 66
Ping Test......................................................................................................... 67
Traceroute ...................................................................................................... 69
System Log ..................................................................................................... 71
Firewall Log .................................................................................................... 72
Advanced Menu ....................................................................................................... 74
Scheduling and Blocking Overview ................................................................. 75
IP Address Overview ...................................................................................... 82
Static Routing ................................................................................................. 89
Quality of Service Overview ............................................................................ 90
Security Overview ........................................................................................... 92
Remote Management Overview ................................................................... 105

Appendix ............................................................................... 106


Wi-Fi Protected Set-up LED Behavior .................................................................. 106

GigaCenter LED Behavior ..................................................................................... 107

LED States and Status .......................................................................................... 109

Acronyms ............................................................................................................... 110

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
6

About This Guide


This Calix 844G/854G GigaCenter User Manual defines the gateway's Embedded Web
Interface (EWI) and provides instructions for managing a GigaCenter via the EWI. This
guide explains how to set up and maintain Ethernet network settings, 800G GigaCenter
devices, and any subtended subscriber devices attached to GigaCenter. In addition,
information on the set-up and maintenance of the dual 2.4 GHz/5 GHz Wi-Fi radios is also
provided.

Note: This guide is intended to educate users in setup and configuration of the 800G
GigaCenter gateway for use in the home network. This guide does not address the
provisioning of network access services on the GigaCenters themselves. For information on
services provisioning, refer to the appropriate platform documentation.

Intended Audience
This guide is intended for use by consumers. Cursory knowledge of Internet Protocol (IP)
and GPON based systems as well as a general understanding of IP addressing, routing
principles, and internet security are also highly desired. This document assumes that the
subscriber's laptop or PC is equipped with a supported web browser (Internet Explorer or
Firefox) and that the user is familiar with its use. Familiarity with datacom, telecom, and
standards-based Ethernet technologies and conventions is also recommended.

Note: For the purposes of this guide, it is assumed your service provider has already
activated your GigaCenter on the GPON network and is being managed remotely.

Related Documentation
You can access all Calix product documentation from the Calix Resource Center online at
support.calix.com.

The related Calix GigaCenter documentation includes:


 Calix 844/854G GigaCenter Installation Guide
 Calix Residential Service Gateway Wi-Fi Best Practices Guide

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
7

Site Conventions
The following elements and controls are used consistently throughout the 800G GigaCenter
EWI:

Website Display Elements

Example Icon Element Description


Name

Action Button May include Edit, Add, Remove

Radio Button Typically offers a choice between two options

Check Box Typically used to enable or disable a feature

Drop-down Provides a pre-existing list from which to choose


List

Alpha-text Box Alpha-numeric input box typically used for naming a


function, port, service, or device.
Note: Values exceeding field length maximums are
truncated at the max field length.
Numeric-text Numeric input box typically used for naming a function, port,
Box service, or device
Note: Invalid entries return a "value out of range" error
message.

System Defaults
Fields that carry a pre-defined default values are marked with an "‡" symbol in the last
column of each table.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
8

Username and Passwords


Within the GUI, there are several screens that require the entry of a user name and password.
The following table details the allowable syntax for each username/password combination.

Username and Password Handling

Username Field Password Field

Page Location Min. Max. Validity Min. Max. Validity


Char. Char. Char. Char.

Advanced > IP 1 64 Allowed: A-Z, a-z, 0-9 1 32 Not allowed: ^<>()"%&'+;


Addressing > Dynamic
DNS
Advanced > IP 0 256 Not allowed: 0 32 No restrictions
Addressing > WAN ~`!#$%^&*()-
Settings _+={}[]|\:;"?/
Advanced > Remote 1 15 Allowed: A-Z, a-z, 0-9, 1 15 Allowed: A-Z, a-z, 0-9, !*()-_.
Management > !*()-_.
Remote GUI
Advanced > Remote 1 15 Allowed: A-Z, a-z, 0-9, 1 15 Allowed: A-Z, a-z, 0-9, !*()-_.
Management > !*()-_.
Remote Telnet
Advanced > Security > 1 64 Allowed: A-Z, a-z, 0-9, 0 32 Allowed: A-Z, a-z, 0-9, !*()-_.
Administrator !*()-_.
Credentials
Quick Start > Connect 0 256 Not allowed: 0 32 No restrictions
to Internet ~`!#$%^&*()-
_+={}[]|\:;"?/
Support > TR-069 1 any Not allowed: spaces 1 32 Not allowed: spaces

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
Chapter 1

844G/854G GigaCenter Overview


The Calix 844G and 854G GigaCenter are in a family of Premises delivery platforms
optimized to extend the network demarcation to inside the subscribers home. They are the
first Calix products to support carrier class Wi-Fi using 802.11ac technology allowing all
services to be delivered over wireless. Carrier class Wi-Fi as defined incorporates 4x4
Multiple-Input-Multiple-Output (MIMO) at 5GHz, support of the entire 5GHz band
including Dynamic Frequency Selection (DFS) channels, implicit and explicit beamforming,
use of 80MHz combined channels at 5GHz, as well as software management tools and
quality of service capabilities.

Calix GigaCenters are currently available in the following models:


 844G-1 GigaCenter, 2 POTS, 4 Gig-Ethernet, Dual Wi-Fi, 1 USB, UPS Power Interface
 844G-2 GigaCenter, 2 POTS, 4 GE, Dual Wi-Fi, 1 USB, Power Adapter Interface
 854G-1 GigaCenter, 2 POTS, 4 Gig-Ethernet, Dual Wi-Fi, 1 USB, 1 RF, UPS Power
Interface
 854G-2 GigaCenter, 2 POTS, 4 Gig-Ethernet, Dual Wi-Fi, 1 USB, 1 RF, Power Adapter
Interface
The 844G and 854G GigaCenters also includes a Home Gateway functionality first
introduced in Calix’ 836GE Residential Service Gateway (RSG). The 836GE supports the
802.11n standard at either 2.4GHz or 5GHz. GigaCenters support concurrent dual-band
networking, allowing continued usage of the 2.4GHz band for data and legacy consumer
devices while supporting IPTV and high-speed data at 5GHz. The GigaCenters are designed
to meet service providers’ and end-users’ requirements for broadband access throughout the
residence driven by the growth of smart mobile devices and media rich content. These Wi-Fi
devices range from low bandwidth IP cameras, security sensors, smart phones, tablets,
printers, and support for bandwidth intensive Quality Of Service (QoS) sensitive Wi-Fi
capable Set Top Boxes (STBs) and TVs. To meet these user requirements, some of
GigaCenter highlights include:

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
10

 Supports the latest 802.11ac standard for the 5GHz radio. Some basic 802.11ac
enhancements include:
 Dynamic beamforming for high performance and longer reaches.
 80Mhz channels for greater speeds,
 QoS support allowing prioritization of Video SSID over lower priority best effort
HSI data SSIDs.
 Dual band concurrent radios allows the use of legacy 2.4 GHz clients while accessing
seven times the spectrum of 2.4 GHz using the 5 GHz band.
 GigaCenters support the E7-2 and E7-20 Ethernet Service Access Platforms (ESAP)
GPON. The 844G and 854G are GPON only devices.
 In conjunction with the Calix Compass software, a rich set of tools is supported for
provisioning, maintaining, and troubleshooting the Wi-Fi home network. Compass’s
ability to store vast amounts of performance management data allows service providers
the ability to troubleshoot issues that are time of day based along with the ability to
generate trend analysis to predict congestion issues
 GigaCenters are designed to help service providers generate new revenue streams such as
smart home applications through the continued release of software features. To support
these features GigaCenters supports a high performance CPU and larger memory than
other products on the market

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
11

About the Home Gateway


The 844G and 854G utilize a common residential gateway service model as the 836GE RSG
and 700GE support of Home Gateway. The embedded web interface (EWI) and relevant
gateway features such as NAT, DHCP, DNS and firewall handle network traffic at speeds up
to 1 Gbps.

Home Gateway Functionality


 Layer 2 and 3 switching and routing
 DHCP server options
 DHCP (IPoE) and PPPoE network connections
 Network Access Translation (NAT), public to private IP addressing
 Configurable IP address schemes, subnets, static-IP addresses
 DNS server
 Bridge port assignment and data traffic mappings
 Port forwarding
 Firewall and security
 Application and website filtering
 Selectable forwarding and blocking policies
 DMZ hosting
 Parental controls, time of day usage
 Denial of service
 MAC filtering
 Time/Zone support
 Universal Plug-and-Play (UPnP)

Wireless Functionality
 2.4GHz and 5GHz, simultaneous dual-band
 5GHz 802.11ac certified, 802.11a/g/n compatible
 2.4GHz 802.11n certified, 802.11b/g compatible
 WPA/WPA2
 WPS push-button
 WEP 64/128 bit encryption
 Airtime Fairness on 2.4 GHz and 5 GHz radios
 Eight SSID per band with factory default SSIDs
 Two SSID assigned to Primary/Guest and six operator defined SSIDs

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
12

 5 GHz radio support of 64 clients (assigned to Primary/Guest with maximum 102 clients
per radio
 64 Clients supported per band with 38 reserved for operator defined SSIDs
 MAC filtering

Four Gigabit Ethernet (GE) interfaces


 Symmetrical 1 Gbps bandwidth for IPTV and data services
 Multi-rate 10/100/1000 BaseT Ethernet, auto-negotiating

USB port
 USB 2.0 - Type A configured as a host controller device

System Features
 Supports multiple data service profiles
 Traffic management and Quality of Service (QoS):
 802.1Q VLANs
 802.1p service prioritization
 Q-in-Q tagging
 Multiple VLANs
 Rate limiting
 DiffServ
 Pre-defined QoS on service type
 IPTV, IGMPv2, IGMPv3
 IGMP Snooping and Proxy
 IGMP Fast Leaves
 OAM&P support via Calix Management System (CMS)
 Gateway Management:
 TR-069
 TR-98
 TR-104
 Local Home Gateway GUI, access provisionable
 Remote WAN side GUI access
 Default username/password
 Set-up persistence, factory reboot option

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
13

GigaCenter Management Architecture


GigaCenters combine GPON access technology with gateway functionality and divides these
tasks into two separate partitions:
 The GPON partition that provides the WAN access as well as voice services and
GigaCenter management.
 The Home Gateway partition that offers LAN and wireless network support as well as
Home Gateway services such as LAN routing, and TR-069 client management.
An overview of the system architecture is shown below for reference.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
14

Home Gateway IPv6 Support


With E-Series platform Release 2.4, the Calix GigaCenter Home Gateway has been enhanced
to include direct support of IPv6 connectivity. IPv6 is the next Internet Protocol version to
meet the expanding requirements for IP addressing. It is currently being used to supplement
IPv4 but is expected to eventually replace IPv4.

IPv4 addresses are 32 bits, written in dot-decimal notation. IPv6 addresses are 128 bits long,
written in colons-hexadecimal notation with eight groups of four digits. Direct connectivity
of IPv6 negates the need for Network Address Translation (NAT) with each device having a
unique IP address, and includes special addressing features and a significantly larger subnet
space.

To help in the transition and implementation of IPv6 from IPv4 there are a number of
different strategies to help operators depending on the network infrastructure and
environment:
 Single or Dual-stack IPv4/IPv6
 DS-Lite
 6rd
All GigaCenters supporting Home Gateway Layer 3 services support Single or Dual-stack
IPv4/IPv6. GigaCenters also support DS-Lite for IPv6 carriage (tunneling of IPv4) or 6rd
for IPv4 carriage (tunneling of IPv6).

The Home Gateway support of IPv6 only supports IPv6 for High Speed Internet (HSI) data
services. The release does not support IPv6 for IPTV multicast video, voice services and TR-
069 management.

Note: Only one variant of IPv6 support can be applied to a gateway, and only one service
WAN interface can support the IPv6 variant which will be constrained to HSI only.

Note: The IPv6 interface can support IPoE Dynamicv6, IPoE Staticv6 and PPPoEv6.

To implement IPv6 support on a GigaCenter requires moving to the External configuration


mode with RG configuration file download, either via OMCI download or Consumer
CONNECT Plus.

Note: Support and provisioning of IPv6 is not supported using Native mode.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
15

IPv6 Notation Syntax


Keep the following information in mind when deciphering IPv6 IP addresses:
 Leading zeros in any 16-bit field are suppressed. For example, 2001:0db8::0001 is
rendered as 2001:db8::1, though any all-zero field that is explicitly presented is rendered
as 0.
 "::" is not used to shorten just a single 0 field. For example, 2001:db8:0:0:0:0:2:1 is
shortened to 2001:db8::2:1, but 2001:db8:0000:1:1:1:1:1 is rendered as
2001:db8:0:1:1:1:1:1.
 Representations are shortened as much as possible. The longest sequence of consecutive
all-zero fields is replaced by double-colon. If there are multiple longest runs of all-zero
fields, then it is the leftmost that is compressed. E.g., 2001:db8:0:0:1:0:0:1 is rendered as
2001:db8::1:0:0:1 rather than as 2001:db8:0:0:1::1.
 Hexadecimal digits are expressed as lower-case letters. For example, 2001:db8::1 is
preferred over 2001:DB8::1.

Dual Stack IPv4/IPv6


Single stack IPv6 assumes a WAN interface will only connect using an IPv6 address. Dual
Stack IPv4/IPv6 implements both connection types on an interface at the same time,
subscriber devices can connect to either the IPv4 or IPv6 address protocol. The process is
driven by DNS where a dual stack device will query the name of the destination, and if the
response is a IPv6 address the device will send IPv6 packets. It allows the gateway to support
simultaneous support of IPv4 and IPv6 content.

The dual stack IPv4/IPv6 implementation is shown in the below figure:

Dual stack IPv4/IPv6 is the most desirable variant of IPv6 support since it facilitates direct
connections of both IPv4 and IPv6 devices and avoids complexities of tunneling, security,
and timing delays that are introduced when translating between protocols required when
using Carrier Grade NAT.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
16

When supporting IPv6, the Home Gateway EWI has separate display of IPv6 statistics and
packet performance. It does include support of firewall for IPv6 in same way it supports
firewall for IPv4 with a general option of off/low/medium/high and ability to change traffic
in/traffic out settings for protocols and ports. The firewall settings for IPv6 are managed
separately from IPv4.
For additional information on configuring IPv6 services, refer to IPv6 Parameters and Options
later on in this guide.

DS-Lite
With the depletion of IPv4 public addresses some operators have had to discontinue support
of IPv4 in their networks and solely deploy IPv6 network infrastructure. Because not all
subscriber devices support IPv6 it requires tunneling and translation of IPv4 addresses to the
gateway.
The GigaCenter supporting Home Gateway continues to distribute private IPv4 addresses on
the LAN and wireless interfaces. DS-Lite encapsulates IPv4 packet inside a IPv6 packet with
network termination to an Address Family Translation Router (AFTR) supporting Carrier
Grade NAT with global IPv6 connection. At the AFTR the IPv6 packet is decapsulated,
restored to IPv4, and routed to the public IPv4 Internet.
The DS-Lite implementation is shown in the below figure:

To facilitate the tunneling of IPv4 packets the AFTR uniquely marks each traffic flow using
the Gateway IPv6 address, the private IPv4 address and port number. The gateway obtains
the URL of the AFTR via DHCPv6 (RFC 6334) or it can be provisioned manually with the
AFTR URL via EWI, TR-069 or RG configuration file.
On its WAN side, Network Area and Port Translation (NAPT) is disabled and the IPv4
tunnel becomes the default IPv4 route. Via DHCPv4, the gateway can either advertise itself
as the DNSv4 server or advertise DNSv4 servers provisioned via EWI or TR-069 or RG
configuration file. In the former case the gateway proxies "A" record queries from IPv4 to a
WAN-side DHCPv6 server.
The GigaCenter supporting Home Gateway only supports a single instance of DS-Lite on a
routed WAN interface. The WAN interface is assumed to be supporting HSI services.
Support of DS-Lite for HSI is independent of IPTV services and is not supported for TR-
069 management.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
17

6rd
For service providers with networks that do not have IPv6 infrastructure the GigaCenter
supporting Home Gateway will support dual stack 6rd. The variant of 6rd allows IPv6
service to be deployed over a pure IPv4 access network. The core network is not aware of
IPv6, it does not require IPv6 infrastructure such as core routers, DHCP or DNS servers

The 6rd mechanism encapsulates IPv6 inside IPv4 between the Border Router (BR) and
Customer Edge (CE). It follows all of the same IPv4 routing functions. On the GigaCenter
supporting Home Gateway the LAN interfaces appear as Dual-Stack IPv4/IPv6 to the LAN
interfaces and subscriber.

The dual stack 6rd implementation is shown in the below figure:

At the subscriber location the gateway operates in a ‘hub-and-spoke’ mode with IPv6
tunneled traffic flows between the BR and gateway. The gateway can be provisioned to
support 6rd by obtaining network data via DHCPv4 Option 212 or via EWI, TR69 or RG
configuration file. The specific 6rd provisioning data consists of:
 IPv4 Mask Length
 6rd Prefix
 6rd Prefix Length
 BR IPv4 address
Provisioning of 6rd includes configuring the necessary parameters via EWI, TR-069 and
DHCPv4, creation of the prefix, using the created prefix as a "delegated prefix" for purpose
of including one of its /64s in RA messages, and modifying the IP header for traffic that
goes between the WAN and LAN devices. Once configured for dual stack 6rd, the gateway
advertises DNSv6 servers provisioned via EWI, TR-069 or RG configuration file.

As noted previously, the GigaCenter and supporting Home Gateway only support a single
instance of 6rd on a routed WAN interface. The WAN interface is assumed to be supporting
HSI services. Dual stack 6rd is not supported for IPTV multicast over routed interface and
TR-069.

For additional information on configuring 6rd services, refer to 6rd Parameters and Options later
on in this guide.
Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
18

About GigaCenter Voice Services


From a home subscriber’s perspective, the configuration of voice services delivered from the
GigaCenter must be performed by your local service provider. Many customizable features
are available and your service provider will configure your phone system based on the
network environment and subscriber wishes.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
Chapter 2

Wireless Networking

About the 5 GHz Wi-Fi Radio


The new 5 GHz radio incorporated into GigaCenter products includes the following features
and attributes:
 For the 844G-1 and 854G-1 models, both 2.4 GHz and 5 GHz Wi-Fi radios operate at
the maximum conductive emissions allowed by the FCC. GigaCenters have significantly
higher power than the 836GE RSG at 2.4 GHz and with 5 GHz, the radio is both higher
power and has beamforming gain from the 4x4 antennas.
 The 5 GHz radio was designed for critical IPTV services and supports channel hoping
during operation, thereby avoiding service disruption due to interference.
 The 5 GHz radio is FCC certified to use the Dynamic Frequency Selection (DFS)
channels which comprise 60% of the 5 GHz channel spectrum. These are largely unused
frequencies as commercial routers sold over retail counters generally are not certified to
operate with these channels.
Note: Not all Wi-Fi capable clients and devices support the DFS channels. Service
providers must enable DFS support to ensure DFS interoperability issues do not occur.
 The 5 GHz radio has a Wi-Fi QoS feature that can be assigned to multiple SSIDs. In this
release, IPTV services are assigned to a pre-defined video SSID called "5
GHz_IPTV_SSID" with usage and QOS set. This allows this pre-defined IPTV SSID to
be prioritized over best effort data services assigned to other 5 GHz SSIDs.
 The 5 GHz radio supports up to 8 STB clients using 4x4 Quantenna radios. In other
words the use case is defined as supporting 8 simultaneous HD video channels to 8 STBs
located throughout a home with additional bandwidth reserved for HSI data applications
using the 5 GHz band. This level of capability qualifies the 5 GHz radio as a Carrier
Class Wi-Fi network.
Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
20

Wireless Network Performance


Residential wireless networks have become quite common for several reasons:
 They are easy to install
 Wi-Fi networks support mobile devices
 Wireless appliances are now plug-and-play
 Elimination of CAT5 cabling throughout the home
Wireless network performance and reliability are characteristically different than a direct
LAN connection to a GigaCenter. A number of factors and variables can affect Wi-Fi
coverage and data throughput. The expected performance of a wireless LAN network
requires insight into the variables that impact performance.

The operative data rate for Wireless LANs is based on the IEEE 802.11 standards.
Proponents of the 5 GHz spectrum claim data rates up to 1733 Mbps when associated with
an 802.11ac access point using 80 MHz channels and 4x4 MIMO (supported by
GigaCenters). These reflect the standard physical layer rate (PHY rate) of a link. Proponents
of the 2.4 GHz spectrum using 2x2 MIMO claim rates up to 300Mbps using 40 MHz
channels. These claims do not reflect the actual data throughput expected when
communicating over a wireless interface. Some of the main differences between PHY rate
and actual payload data throughput are:
1. Higher overhead and packet headers required for wireless connections
2. Data re-transmission necessary because of temporary changes in a wireless links
3. Varying number of clients being supported over a common radio channel
Whereas overhead and re-transmission are inherent features that reduce the data throughput
of all wireless networks, there are wireless propagation factors that significantly affect Wi-Fi
coverage and throughput. These range from the design and placement of the Access Point
(AP) and its antennas, orientation of the antennas, and constant changes in the level of radio
signal interference. Variables that affect wireless network performance generally fall into the
following categories:
 Design and performance characteristics of the wireless Access Point
 Operating mode of 802.11 design standard: a/b/g/n/ac
 Support of spatial multiplexing
 Single Input, Single Output (SISO) vs Multiple Input, Multiple Output (MIMO)
 2.4 GHz vs. 5 GHz frequency band selection
 20 MHz, 40 MHz and 80 MHz bandwidth selection
 Transmit power
 Receive sensitivity

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
21

 Antenna pattern, gain, polarization and orthogonally


 Number and types of wireless clients being supported
 Support of a high number of wireless clients
 Multiple wireless devices in the home including tablets, computers, smart phones,
video media players, audio players, gaming consoles and appliances
 Requirements to mix clients supporting new and legacy wireless technologies
 802.11g clients on a 802.11n network can severely affect total network
performance for all devices
 Software versions and backward compatibility
 Installed environment
 Over the air distance, building materials, physical obstructions
 Placement of the AP relative to the client
 Orientation of the client if device only supports single polarity
 Level of radio frequency interference
The following chart provides a snapshot of the Wi-Fi 802.11 protocols and some of their
characteristics including PHY data rates per link:

802.11 Released Frequency Bandwidth Link Data Rates per MIMO


Protocol Band (MHz) Stream (Mbps) Streams

a 9/1999 5 GHz 20 6, 9, 12, 18, 24, 36, 48, 54 1


b 9/1999 2.4 GHz 20 1, 2, 5.5, 11 1
g 6/2003 2.4 GHz 20 6, 9, 12, 18, 24, 36, 48, 54 1
2.4 GHz 20 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 2
n 10/2009 72.2
5 GHz 20/40 15, 30, 45, 60, 90, 120, 135, 150 2
ac 12/2013 5 GHz 20/40/80 32, 65, 98, 130, 195, 260, 293, 325, 4
390, 433

The standard transmission rates vary for each of the Wi-Fi protocols. Within each protocol
there are a number of "standard" transmission rates beginning with a rate that is
approximately 1/10th of the maximum link bit rate per stream. The support of MIMO
technology represents Multiple Input, Multiple Output. The column titled "Allowable MIMO
Streams" indicates if multiple data streams can be used to provide MIMO spatial
multiplexing. With 2x2 MIMO on a 5 GHz 802.11n system that would equate to a speed of
300MHz (2*150).

As noted there are a number of factors that influence the expected GigaCenter coverage and
throughput data rate as wireless signals propagate over an open air interface. Moving a
connected Wi-Fi client away from the AP causes a progressive degradation of the data stream
until it can no longer receive or transfer data due to low or poor signal quality.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
22

With ONT Release 11.1, the concept of Air-Time Fairness was introduced for both the 2.4
GHz and 5 GHz radios. With this technology, devices capable of transmitting at peak
wireless modes or data rates are never limited by other older wireless devices connected to
the same radio. In other words, air-time is allocated evenly to all clients on the network,
regardless of the wireless technology being used.

About Multiple Input, Multiple Output (MIMO)


Systems with multiple antennas at the transmitter and receiver are referred to as MIMO
systems. Some of the technologies employed with MIMO are beam forming which focuses
the Wi-Fi power to each client which improves signal strength. Spatial Multiplexing allows
the transmitter to send independent streams. A 2 x 2 system can double the effective
bandwidth, a 3 x 3 system offers triple the performance and the 4 x 4 design of GigaCenter
allows for a 4x increase. GigaCenter supports a 2 x 2 antenna design for the 2.4 GHz radio
and a 4 x 4 design for its 5 GHz radio.

Note: Support for the new Wave 2 802.11ac standard is not supported in this release. Calix
plans to support this standard in a future release and will allow the GigaCenter to send
separate and simultaneous streams to multiple mobile clients at a time.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
23

About the 2.4 GHz and 5 GHz Spectrums


GigaCenters support dual simultaneous 2.4 GHz and 5 GHz transmission frequency radios.
The characteristics of each determine which is best to use for a specific wireless deployment.
The lower frequency 2.4GHz band has better wireless propagation characteristics and is
generally used to cover a larger area. One downside of the 2.4 GHz band is that it is more
susceptible to radio interference from other 2.4 GHz access points (neighbor or municipality
based wireless networks) as well as household appliances such as microwave ovens. The 5
GHz band is less susceptible to interference but many early 802.11 clients such as printers
and consumer appliances currently only support the 2.4 GHz frequency band.

The 2.4 GHz spectrum supports 11 overlapping 20 MHz channels with center frequencies
separated by 5 MHz. In reality, this creates only 3 non-overlapping 20 MHz channels.
Conversely, the 5 GHz spectrum supports 23 non-overlapping 20 MHz channels that, when
combined, support (11) 40 MHz and (5) 80 MHz non overlapping channels. One of the
main benefits of 802.11ac (which only supports the 5 GHz spectrum) is to get subscribers off
the slower and crowded 2.4 GHz spectrum and onto the quicker, less utilized 5 GHz
spectrum.

In addition, some of the 5 GHz radio channels have special requirements placed on their
usage. These channels can be used by radar systems and there are FCC standards for the Wi-
Fi equipment to sense if radar is present and if so, to hop to a different channel. This ability
to sense radar and jump to a different channel is called Dynamic Frequency Selection (DFS)
and requires equipment vendors to certify their equipment as being DFS compliant. Some
vendors have chosen to not support DFS which reduces the amount of capacity in 5 GHz
systems.

Note: GigaCenters are fully compliant with DFS certification.

The DFS channels comprise 60% of the 5 GHz channels. These may be considered the
"beach front property" for in home Wi-Fi networks. Many commercial routers sold by
retailers are not certified so this frequency band is mostly empty. If there is no radar in the
vicinity of the home, the DFS channels will generally have minimal traffic. This allows
operators who deploy GigaCenter products to leverage DFS channels to ensure high
performance Wi-Fi for their end users and/or for the delivery of IPTV Video to their Wi-Fi
capable set top boxes.

Not all current generations of Video Access Point (VAP) or Wi-Fi enabled Set top boxes
support DFS. Also, not all data clients support DFS and therefore they cannot take
advantage of the GigaCenters DFS capabilities. To support the needs of the service provider,
GigaCenters allows the service provider to enable or disable the usage of the DFS specific
channels. Below is a picture of how the 2.4 GHz and 5 GHz radio spectrum is broken down.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
24

2.4 GHz and 5 GHz Wi-Fi Radio Spectrum

Operational Notes
To increase data throughput, the 802.11n standard allows for bonding wireless channels to
increase usable spectrum. With the 2.4 GHz model, band bonding channels to 40 MHz
bandwidths is not practical because of channel overlap and interference. The 5 GHz band
allows you to configure 20 MHz or 40 MHz of channel bandwidth enabling support of
greater throughput by utilizing a larger portion of spectrum.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
25

About Air Time Fairness


With the proliferation of newer and faster Wi-Fi clients, networks with older, outdated Wi-Fi
devices may experience an over-all degradation in speed. In every day terms, a network may
provide more time for these older clients to connect and pass their traffic. Air Time Fairness
levels the playing field by allocating equal time to each device on the network, regardless of
their data transfer speeds. This fairness quotient may encourage subscribers to update older
Wi-Fi clients since they will tend to receive insufficient air time when compared to newer,
faster models.

Note: Air Time Fairness is enabled on both the 2.4 GHz and the 5 GHz radio by default.

Carrier Class Wi-Fi Quality of Service (Qos)


To remain competitive, service providers have expanded their service offerings and offer
complete triple play services (Voice, Data, and Video) packages. To ensure a high quality
user experience for their video offering, a hardware connection was required to each set top
and/or DVR. To make the installation easier and to give end users even more flexibility to
the placement of additional video screens, GigaCenters support delivery of IPTV with the 5
GHz radio.

GigaCenters are designed to support both IPTV and HSI applications over 802.11ac at 5
GHz, as well as HSI over 2.4 GHz with the pre-ac standards. GigaCenter supports QoS
prioritization by SSID provisioning. The initial release dedicates an SSID in the 5 GHz band
specific for video IPTV applications with higher quality of service. This ensures that the
service providers IPTV content will always be prioritized higher than the consumers HSI
Data or the Guest SSID.

Getting Additional Information


To more thoroughly understand the capabilities of Wi-Fi in your particular environment,
refer to the Calix Application Note: Calix Residential Gateway Wi-Fi Best Practices Guide.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
26

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
Chapter 3

Turning up a GigaCenter

GigaCenter Activation and Configuration Options


The GigaCenter can be activated and managed using a variety of web-based or network-
based tools.

Note: It is assumed your service provider has already activated your GigaCenter on the
GPON network and is able to manage all functions of the device remotely.

GIGACENTER TOOLS

Home Gateway Configuration and Management

Software Tool Functionality How Access Intended User

Subscriber EWI
 Local Access
Manage Home Gateway Web Browser via IP 192.168.0.2 Subscriber
 Administrator
account

For most GigaCenter deployments that involve data-only use cases, or access modes that
require a single VLAN service, the default RG profile that is created when the GigaCenter
becomes operational is adequate.

For more advanced access models that require multiple VLANs associated with the routed
WAN interface, set-up of PPPoE or Static IPoE connections, or enabling IPTV and other
services on separate VLANs, an RG configuration must be applied to set up the gateway
partition. In these use cases, RG configuration may include setting up multiple routed WAN
interfaces, static routes and other network defined attributes.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
28

Connecting to the GigaCenter Home Gateway


To connect to the GigaCenter's Embedded Web Interface for the first time

1. Attach an Ethernet cable to any of the Ethernet ports on the back of the GigaCenter to
an Ethernet port on your PC.
2. From your browser, enter the IP address 192.168.1.1.
3. At the login prompt, enter the credentials found on the adhesive back label shipped
inside the carton of the GigaCenter. credentials as follows:
a. Login: admin
b. password: Enter character string on label

4. You now have access to Internet and Wi-Fi services on your GigaCenter.

GigaCenter Inventory
Inserted inside the shipping carton of each GigaCenter, the inventory label provides
necessary product information for use in your inventory management system:
 Serial Number of the GigaCenter
 FSAN/SSID used for identifying the RSG on the Wi-Fi network.
 MAC Address of the unit needed by the Management VLAN.
 Default Wi-Fi security type and encryption scheme used by the Home Gateway
 A Default Wi-Fi WPA key such that other devices can "associate" with the Wi-Fi circuit
on the GigaCenter.
 IP Address of the Unit (LAN side).
 User Name/Password credentials needed to login to the Web Interface on the LAN side
of the unit

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
29

 QR Code providing links to support documentation for all Calix products. This same QR
code is also printed on the product label affixed to the GigaCenter.

The QR code printed on the inventory label above and the product label below provides
useful information about the GigaCenter as follows:

QR Code Output Definitions

Scan Description
Segment

sn Serial Number of the 844E Electronics


pn4 A Manufacturing level part number for tracking sub-assemblies
pn1 The orderable complete assembly part number of the unit
mac The Optical Network Units assigned MAC address
fs The FSAN serial number of the GigaCenter (Assigned SSID out of the box)
ec Internal manufacturing code

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
30

About GigaCenter Resets


The 844E GigaCenter offers several different facilities for resetting and/or restoring factory
default settings.

844G/854G Factory Reset Behavior

Location Screen Expected Notes


of Reset Name or Behavior
Physical
Location

Utilities Menu Restore Default  GigaCenter Since control is available to home subscriber, restoring defaults
Reboots. are limited to controls that the subscriber can modify.
 Residential
Gateway values
are reset to factory
default.*
Rear of Labeled RESET  GigaCenter IMPORTANT: The RESET button must be pressed and held until
GigaCenter Reboots. the GigaCenter LEDs flash (about 5 seconds). Pressing the
 Residential RESET button momentarily (less than 5 seconds executes a
simple reboot of the GigaCenter (Home Gateway values
Gateway values
are reset to factory persisted).
default.* Note: Pressing Utilities > Restore Defaults above and clicking the
manual reset on the back of the GigaCenter yields identical
results.
* - Examples include security credentials, SSID Names, Wi-Fi radio behaviors, and the like.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
Chapter 4

Embedded Web Interface


The Embedded Web Interface (EWI) is available for viewing and managing GigaCenters
through your personal computers browser. The EWI allows you to login into any Home
Gateway connected GigaCenter using its IP Address and the appropriate login credentials.
Once connected, management of the device can be executed from your desktop.

In the following pages, a high level overview of the EWI is presented. Links are also
provided that will allow you to drill more deeply into each item with specific field definitions
for all displayed options.

The Home Gateway partition of the GigaCenter is managed through the GigaCenter
Embedded Web Interface (EWI) and includes the following deployment options presented
as menu items in the top navigation bar:

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
32

Embedded Web Interface Field


Definitions
The Home Gateway partition of the GigaCenter is managed through the GigaCenter
Embedded Web Interface (EWI) and includes the following deployment options presented
as menu items in the top navigation bar:

GigaCenter Embedded Web Interface

Status Menu

Sub-Menu Description
Item

Connections (on The Connections page provides network status/details for the GigaCenter network. The
page 35) table below reflects the current state of the WAN, Local Internet, and the IP Gateway
connections.
Devices (on page The devices table displays a list of devices currently connected to the Local Area
Error! Bookmark Network. Devices can be edited from the Edit Device table.
not defined.)
Internet (on page Current Internet status of the Internet Service Provider is viewable. Basic connection
Error! Bookmark status, ISP statistics, and IPv4/IPv6 Addressing parameters are available.
not defined.)
Ethernet (on page The table reflects the Ethernet port connection status including connection speeds and
Error! Bookmark current packet statistics.
not defined.)
Wireless (on page The table displays a summary of the settings for each wireless network (by device).
Error! Bookmark
not defined.)
NAT (on page This dynamic table reflects the current state of the Network Address Translation (NAT).
Error! Bookmark As IP addresses are resolved against the NAT table, contents of this screen are updated
not defined.) in real time.
Routing (on page The table displays the current routing assignments for Internet traffic on the network.
Error! Bookmark
not defined.)
Security (on page The table displays all modified security settings from the factory default values.
Error! Bookmark
not defined.)

Quick Start Menu

Sub-Menu Description
Item

Connect to Internet Gateway device connection settings are provisioned here.


(on page 48)
Configure Wireless Configure Wireless Network is used to enable or disable connections between this
Network (on page gateway device and other wireless devices. Use this screen to configured your SSID and
50) password for the wireless network.
Set Time Zone (on Set Time Zone is used to display this gateway device's time settings.
page 51)

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
33

Wireless Menu
Sub-Menu Description
Item
2.4G Network (on Provides settings for enabling the radio, SSID set-up, wireless security, MAC Authentication, and
page 53) WMM.
5G Network (on Provides settings for enabling the radio, SSID set-up, wireless security, and MAC Authentication.
page 53)
Advanced Radio Various countries will allow or block certain Wi-Fi channels and as such, you can specify what
Set-up (on page country the radio is being deployed in. In addition, these countries may have varying Wi-Fi signal
Error! Bookmark power levels which are also selectable by country.
not defined.)
WPS (on page WPS provides a secure way to establish a wireless network by sharing the wireless key between
Error! Bookmark the device and wireless client.
not defined.)
Utilities Menu
Sub-Menu Description
Item
Configuration Save Configuration Backup is used to save the gateway device configuration information to a file on
(on page 62) your PC. Configuration Restore reloads the file from your PC to restore your gateway device back
to the same settings as when the backup file was last saved.
Restore Defaults Select the restore button to restore the gateway device to the default settings
(on page Error!
Bookmark not
defined.)
Reboot (on page Select the Reboot button to reboot the gateway device.
Error! Bookmark
not defined.)
Web Activity Log Web Activity Log displays a list of the most recently accessed websites. This table displays URL's
(on page Error! accessed by the CPE on the LAN side of the RSG.
Bookmark not
defined.)
Ping Test (on page Test your internet connectivity to a specific host using the ping test below. Results of completed
Error! Bookmark ping tests are displayed with detailed statistics.
not defined.)
Traceroute (on Traceroute is used to determine the route taken by packets across a network. Each test reports
page Error! the round trip times for 3 ICMP packets. Each response shows the maximum number of hops
Bookmark not displayed in the first column. The test repeats until the host is reached or the maximum hop count
defined.) of 30 is reached. The times for each ICMP packet are displayed in the table. An asterisk (*) in a
field means that no-response was received for the ICMP packet request.
System Log (on The system log provides an accounting of significant gateway device events.
page Error!
Bookmark not
defined.)
Firewall Log (on The Firewall Log page provides a table of the most recently dropped packets by the firewall.
page Error!
Bookmark not
defined.)
Advanced Menu
Sub-Menu Description
Item
Scheduling and Scheduling and Blocking allows for the configuration of network access, service blocking, and
Blocking (on page website blocking.
74)

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
34

IP Addressing (on IP Addressing settings allow for the configuration of WAN, DHCP, and DNS settings across the
page 82) network.
Static Routing (on Routing settings allow for the configuration of dynamic (RIP) or static routing across the network.
page Error!
Bookmark not
defined.)
Quality of Service Quality of Service settings allow for the configuration of QoS prioritization rules across the
(on page 90) network.
Security (on page The Calix GigaCenter incorporates various features that ensure overall network security.
92)
Remote Remote Management settings allow for the configuration of a secure connection to the GigaCenter
Management (on network from a remote location.
page 104)

Status Menu
The Status Menu provides information on the status of GigaCenter network settings.

Status Menu Overview


The Status menu provides real time information on all network elements.
 Connections - Provides information on network connectivity status as well as IP
Gateway state and status.
 Devices - Provides a list of active or inactive devices residing on the network. Also
provides the option of editing specific device names and changing the icon representing
the device.
 Internet - Provides information on the ISP connection, protocols used, traffic statistics,
and IP Addressing information for devices and DNS service locations.
Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
35

 Ethernet - Displays the GigaCenters Ethernet ports and provides connection status with
packet statistics.
 Wireless - Provides state and status of any of four possible Wi-Fi networks (selectable)
provisioned on the GigaCenter.
 NAT - Provides a dynamic display of the Network Address Translation table including
Source/Destination IP info, protocol used, and source/destination port.
 Routing - Provides a table of IPv4 routing assignments including Destination IP,
Network Mask, and Gateway IP address information.
 Security - Provides a table of security features that have customized "rules" applied that
deviate from the default behavior

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
36

Connections
The Connections page provides network status/details for the GigaCenter network. The
table below reflects the current state of the WAN, Local Internet, and the IPv4/IPv6
Gateway connections.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
37

Status - Connection - Connection Field Definitions

Label Definition Field Editable? Allowable Values/Defaults


Type

Wide Area Network Connection status of the GigaCenter to the N Connected‡, Not Connected
Info Only
(WAN) WAN
IPv4 Internet Access Displays the current connection state of N Unconfigured, Connecting, Connected,
Info Only
the GigaCenter Disconnecting, Disconnected, Blank‡
IPv6 Internet Access Displays the current connection state of N Unconfigured, Connecting, Connected,
Info Only
the GigaCenter Disconnecting, Disconnected, Blank‡
To edit the above settings, go to Advanced > IP Addressing > WAN Settings

Status - Connection - Gateway Field Definitions

Version of operating system software


Software Version Info Only N Firmware Release Number
currently loaded on the GigaCenter
Model Number Calix GigaCenter Model Number Info Only N Model Number
FSAN Serial Number. Begins with
Serial Number Unique FSAN Serial Number Info Only N CXNK followed by 8 alphanumeric
digits
WAN's Medial Access Code (MAC)
WAN MAC Address Info Only N MAC Address (xx:xx:xx:xx:xx:xx)
Address
Current rate the GigaCenter is receiving
Downstream Rate Info Only N Numeric Value in bits/second
data from the WAN
Current rate the GigaCenter is sending
Upstream Rate Info Only N Numeric Value in bits/second
data to the WAN
URL of the PPPoE User Name. Value
PPP User Name Point-to-Point Protocol User Name Info Only N set at Quick Start > Connect to Internet
> PPPoE Set-up.
DHCP, PPPoE, or Static. Value
ISP Protocol Protocol used to connect with the ISP Info Only N established at Quick Start > Connect
to Internet.
dot delimited, xx.xx.xx.xx. value
Device IP Address IP address assigned to the GigaCenter Info Only N established at Quick Start > Connect
to Internet.
The Domain Name Server (DNS)
Addresses #1 and #2 are the IPv4 IP
addresses of the primary and secondary
dot delimited, xx.xx.xx.xx. Can be
IPv4 DNS Address # servers that provide the URL to IP address
automatic or static value. Value
1 and IPv4 DNS translation for a specific site on the Info Only N
established at Quick Start > Connect
Address # 2 Internet. When a URL is entered into the
to Internet.
address bar of a browser, the designated
DNS translates the domain to an IP
address to find the site on the Internet.
dot delimited, xx.xx.xx.xx. Value
IPv6 IP Address IP address assigned to the GigaCenter Info Only N established at Quick Start > Connect
to Internet.
The Domain Name Server (DNS)
Addresses #1 and #2 are the IPv6 IP
addresses of the primary and secondary
colons-hexadecimal notation. Can be
IPv6 DNS Address # servers that provide the URL to IP address
automatic or static value. Value
1 and IPv6 DNS translation for a specific site on the Info Only N
established at Quick Start > Connect
Address # 2 Internet. When a URL is entered into the
to Internet.
address bar of a browser, the designated
DNS translates the domain to an IP
address to find the site on the Internet.
To edit the above settings, go to Advanced > IP Addressing > WAN Settings
‡ = Default Value

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
38

Devices
The table below displays a list of devices currently connected to the Local Area Network.
Devices can be edited from the Edit Device table.

Status - Devices Field Definitions

Label Definition Field Editable? Allowable Values/Defaults


Type

Show inactive Selecting this box displays or hides the list Check Box Yes N/A - For Inactive devices, text is
devices of inactive devices connected to the displayed as "grayed out" if check box
GigaCenter is selected.
Icon Graphical depiction of the device Info Only To edit an Available icons include: Camera, Cell
connected to the GigaCenter icon, see Phone, Computer, Gaming Console,
section iPhone, IPTV STB, Phone, Printer, PS-
below. 3, Router, Satellite Receiver, Server,
Video Camera, Wii, X-Box 360.
Device Name assigned to device connected to the Info Only To edit a Alphanumeric String - 16 characters
GigaCenter device name, maximum
see section
below.
IP Address IP address of the device connected to the Info Only No Auto-populate. When device connects
GigaCenter and is recognized, IP address is
displayed in this field.
MAC Address MAC address of the device connected to Info Only No Auto-populate. When device connects
the GigaCenter and is recognized, MAC address is
displayed in this field.
Connection Type Type of connection between GigaCenter Info Only No Auto-populate. Wi-Fi or Ethernet.
and this device

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
39

Status - Edit Device Field Definitions

Select the LAN Choose the LAN device connected to the Drop-down No, list
device GigaCenter from the pull down menu List reflects The device’s IP Address is the default
connected device name.
device’s
name (name
can be
changed in
"Enter the
new device
name" field
below)
Enter the new device Change the selected LAN device's name Alpha-text Yes Alpha-numeric string
name Box Note: Spaces are not allowed in this
string.
Select a device icon Choose the graphical element to be Drop-down Yes Available icons include: Camera, Cell
displayed that represents this device List Phone, Computer, Gaming Console,
iPhone, IPTV STB, Phone, Printer, PS-
3, Router, Satellite Receiver, Server,
Video Camera, Wii, X-Box 360.
NOTE: Static Devices are not displayed in this table.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
40

Internet
Current Internet status of the Internet Service Provider is viewable. Basic connection status,
ISP statistics, and IPv4/IPv6 Addressing parameters are available.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
41

Status - Internet - Internet Status Field Definitions

Label Definition Field Editable? Allowable Values/Defaults


Type

Unconfigured, Connecting, Connected,


IPv4 Connection Status of the IPv4 Internet Connection Info Only No
Disconnecting, Disconnected, Blank‡
Unconfigured, Connecting, Connected,
IPv6 Connection Status of the IPv6 Internet Connection Info Only No
Disconnecting, Disconnected, Blank‡

Status - Internet - Internet Settings Field Definitions

WAN Protocol WAN protocol type Info Only No IP Routed


Elapsed time since last loss of Days/Hours/Minutes/Seconds format
Device Uptime Info Only No
connection of the GigaCenter Example: 6D 17H 26M 15S
The Maximum Transmission Unit size
reflects the largest number of bytes able Maximum number of bytes in a packet
MTU Size to be carried in a protocol’s data Info Only No including header info.
transmission packet including header Default: 1500 bytes
information
The Maximum Segment Size reflects Maximum number of bytes in a packet
the largest number of bytes able to be not including header info.
MSS Size Info Only No
carried in a protocol’s data transmission
packet not including header information Default: 1460 bytes

Transmission Control Protocol


connection manages a data stream Numeric
TCP Connection Info Only No
across the Internet ensuring reliable Default: 22
delivery
RWIN (TCP Receive Window) size is
the amount of data that a computer can Numeric
RWIN Size Info Only No
accept without acknowledging the Default: 122880 bytes
sender

Status - Internet - IPv4 Addressing Field Definitions

Device IPv4 Address IPv4 address for the GigaCenter Info Only No Dot delimited, xx.xx.xx.xx
Device IPv4 Subnet Internet Protocol v4 Subnet Mask is Info Only No Dot delimited, xx.xx.xx.xx
Mask used to split and confine traffic to one Default: 255.255.255.0
network. A subnet mask keeps all local
network traffic local and only routes
Internet traffic to the Internet preserving
network resources
DNS Address #1 The Domain Name Server (DNS) Info Only No Dot delimited, xx.xx.xx.xx
Addresses #1 and #2 are the IP
addresses of the primary and secondary
servers that provide the URL to IP
address translation for a specific site on
the Internet. When a URL is entered into
the address bar of a browser, the
DNS Address #2 Info Only No Dot delimited, xx.xx.xx.xx
designated DNS translates the domain
to an IP address to find the site on the
Internet
Remote Gateway Remote Gateway IP Address for the Info Only No Dot delimited, xx.xx.xx.xx
Address device
IPv4 Packets Sent Number of IPv4 packets sent by the Info Only No Numeric
GigaCenter
IPv4 Packets Received Number of IPv4 packets received by the Info Only No Numeric
GigaCenter
Link Uptime Elapsed time since last loss of Info Only No Days/Hours/Minutes/Seconds format
connection to the gateway of the Example: 6D 17H 26M 15S
GigaCenter
Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
42

Status - Internet - IPv6 Addressing Field Definitions

Device IPv6 Address IPv6 address for the GigaCenter Info Only No colon-hexadecimal notation
DNS Address # 1 The Domain Name Server (DNS)
Addresses #1 and #2 are the IP
addresses of the primary and secondary Info Only No colon-hexadecimal notation
servers that provide the URL to IP
address translation for a specific site on
the Internet. When a URL is entered into
DNS Address # 2 the address bar of a browser, the
designated DNS translates the domain
to an IP address to find the site on the Info Only No colon-hexadecimal notation
Internet
IPv6 Gateway Address IPv6 Gateway Address for this device Info Only No Numeric
Number of IPv6 packets sent by the
IPv6 Packets Sent Info Only No Numeric
GigaCenter
Number of IPv6 packets received by the
IPv6 Packets Received Info Only No Numeric
GigaCenter

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
43

Ethernet
The table below reflects the Ethernet port connection status including connection speeds
and current packet statistics.

Status - Ethernet Field Definitions

Label Definition Field Editable? Allowable Values/Defaults


Type

Port Ethernet ports 1 through 4 as labeled on Info Only No 1 through 4


the GigaCenter
Connection Speed 10/100/1000 BaseT Ethernet connection Info Only No Auto-sensing and Auto-negotiating
speed speed values: 10M, 100M, 1000M,
Disconnected‡
IPv4 & IPv6 Packets Packets sent to each device connected to Info Only No Number of packets sent - Numeric
Sent an GigaCenter Ethernet Port
IPv4 & IPv6 Packets Packets received from each device Info Only No Number of packets received - Numeric
Received connected to an GigaCenter Ethernet
Port

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
44

Wireless
The table below displays a summary of the settings for each wireless network (by device).

Status - Wireless Network Status Field Definitions

Label Definition Field Editable Allowable Values/Defaults


Type ?

Network Name (SSID) Pull down list of wireless network names Drop-down Yes List of Network Names created in the
(SSID) List system. Up to 4 networks are allowed.
Network State State of the selected wireless network Info Only No Enabled‡/Disabled
Network Name Wireless broadcast of wireless network Info Only No Enabled‡/Disabled
Broadcast name
Wireless Radio Wireless Radio State Info Only No On‡/Off
Wireless Mode List of wireless modes supported Info Only No 802.11b, 802.11g, and 802.11n
Frequency Wireless radio broadcast frequency Info Only No x.x GHz
Default: 2.4 GHz
Operating Channel Number of active wireless radio Info Only No Number of active channels
broadcast channels
Channel Mode Defines whether the current channel Info Only No Auto‡ or Manual
displayed was dynamically assigned
(Auto Select) or manually selected
(Manual)

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
45

Status - Wireless Network Status Field Definitions

Wireless Security State of wireless network security Info Only No Enabled‡/Disabled


See Wireless > WPS (on page 59)
Wireless Security Type of wireless network security being Info Only No WPA - WPA2-Personal, WPA-Personal,
Type used WPA2-Personal, WEP
See Wireless > Security (on page 59)
MAC Authentication State of the MAC authentication filter Info Only No Enabled/Disabled‡
Filter
Wi-Fi Protected Setup State of the WPS feature Info Only No Enabled/Disabled‡
(WPS)
Wi-Fi Protected Setup How is Wi-Fi Protected Setup mode Info Only No Push Button Control (PBC)‡
Type launched (method employed)?
Wi-Fi Multimedia State of the WMM Power Save mode Info Only No Enabled‡/Disabled
(WMM) Power Save See Wireless > Security > WMM (on
page 57)
IPv4 & IPv6 Wireless Number of wireless packets sent from Info Only No Numeric - Number of packets sent
Packets Sent the GigaCenter
IPv4 & IPv6 Wireless Number of wireless packets received Info Only No Numeric - Number of packets received
Packets Received from the GigaCenter

Connected Devices

Label Definition Field Editable Allowable Values/Defaults


Type ?

Icon Graphic depiction of the connected Info Only No N/A


device
Device Device Type Info Only No N/A
IP Address IP Address of the connected device Info Only No IPv4 dot delimited or IPv6 colon-
hexadecimal delimited IP Address
Mac Address MAC Address of the connected device Info Only No NA
Type Network protocol being used Info Only No b, g, n, ac

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
46

NAT (Network Address Translation)


This dynamic table reflects the current state of the Network Address Translation (NAT). As
IP addresses are resolved against the NAT table, contents of this screen are updated in real
time.

Status - NAT - Network Address Translation (NAT) Field Definitions

Label Definition Field Editable? Allowable Values/Defaults


Type

Protocol Type of protocol used to manage Internet Info Only No Alphanumeric protocol name. TCP,
data streams on this device UDP
Timeout Number of seconds remaining for this Info Only No 1-120 seconds
table entry. Note: Entry of 431999 indicates an
entry that has just expired.
Source IP Data stream source device IP address Info Only No Dot delimited, xx.xx.xx.xx
Source Port Data stream source device port number Info Only No Numeric (1-65535)
Destination IP IP Address of the GigaCenter Info Only No Dot delimited, xx.xx.xx.xx
Destination Port Destination Port for the GigaCenter Info Only No Numeric port Number, 5 digit
maximum

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
47

Routing
The table below displays the current routing assignments for Internet traffic on the network.

Status - Routing - IPv4 Routing Field Definitions

Label Definition Field Editable? Allowable


Type Values/Defaults

Valid Valid IPv4 routing assignments Info Only No YES/NO


Destination Data streams WAN Destination IP Info Only No Dot delimited, xx.xx.xx.xx
Address
Netmask GigaCenter Lan IP network mask Info Only No Dot delimited, xx.xx.xx.xx
Gateway GigaCenter Gateway IP Address Info Only No Dot delimited, xx.xx.xx.xx

Note: GigaCenters do not currently support IPv6 routing.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
48

Security
The table below displays all modified security settings from the factory default values.

Status - Security - Security Field Definitions

Label Definition Field Editable? Allowable Values/Defaults


Type

Security Feature WAN and Lan security feature Info Only No Applications, DMZ Hosting, Firewall
descriptions Settings, NAT, UpNp
LAN IP The IP address of the LAN interface Info Only No Dot delimited, xx.xx.xx.xx. If no LAN is
configured, undefined is displayed.
Applied Rule Description of applied rule when Info Only No Displays currently assigned rule for
deviating from default security settings security features shown above

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
49

Quick Start Menu


Residential Service Gateway turn-up settings and parameters are contained in this menu
category.

Quick Start Menu Overview


The Quick Start menu provides initial internet and wireless network connection options as
well as set-up for the network clock.
 Connect to Internet - Provides provisioning options for connecting to the Internet
including connection type, configuration of DHCP or Static IP addressing versus Point
to Point over Ethernet connections, and identification of the Domain Name Server
service.
 Configure Wireless Network - Provides facilities for configuring any 1 of 4 possible
Wi-Fi networks provided by the GigaCenter. Wi-Fi can be enabled or disabled, given a
network name and password for access. This Wi-Fi network is initialized via Wireless
Protected Set-up (WPS/WPA, and the like). Both 2.4 GHz and 5.0 GHz radios can be
enabled simultaneously.
 Set Time Zone - To ensure network elements remain in synchronization, the time zone
must be set. A facility for adjusting to Daylight Savings time is also provided.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
50

Connect to Internet
Gateway device connection settings are provisioned here.

Note: Since the DHCP server handles IP address functionality, no additional information is
needed.

Quick Start - Connect to Internet Field Definitions

Label Definition Field Type Editable? Allowable


Values/Defaults

Domain Name Type of DNS Radio Button Yes Auto, Static.


Service (DNS) Regardless of the connection type,
defining the DNS type and
Primary/Secondary DNS server
addresses are needed.
Primary DNS IP address of the Primary Numeric text box Yes dot delimited IP address
Domain Name Service x.x.x.x
Secondary DNS IP address of the Numeric text box Yes dot delimited IP address
Secondary Domain Name x.x.x.x
Service

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
51

Configure Wireless Network


Configure Wireless Network is used to enable or disable connections between this gateway
device and other wireless devices. Use this screen to configure your SSID and password for
the wireless network.

Quick Start - Configure Wireless Network Field Definitions

Label Definition Field Editable Allowable Values/Defaults


Type ?

Wireless Enables or disables the Radio Button Yes On‡ or Off


wireless network from the
GigaCenter to all other
wireless devices
Network Name Wireless network name. This Alpha-text Yes Alphanumeric - 32 characters maximum
is typically the GigaCenter Box
FSAN Serial Number.
WPA/WPA2 Wireless network security key Alpha-text No Alphanumeric - 63 characters
Password Box maximum*
Default: Field is auto-populated with
password configured at factory. This
password also appears on the
GigaCenter label.
Note: To change to a Custom Security
Key, navigate to Wireless > SSID Setup
> Security > Security Key/Passphrase
and then enter a Custom Security Key.
* Only the first 27 characters of the
string are displayed in this window. To
avoid confusion, keep security keys
shorter than 27 characters.
Apply Button for applying changes Action Button No Apply changes to above settings
to Wireless Network Settings

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
52

Wireless Protected Setup

Connect Wireless Protected Setup (WPS) is an Action Button No Ready the


easy and secure way to establish a GigaCenter for
wireless network connection between the connection to
GigaCenter and another wireless device other wireless
by sharing the wireless password between devices (Ready
the devices. Press the Connect button in state).
the menu and then press the WPS button
on the other wireless device.
Conversely, pressing the WPS button on
the GigaCenter achieves the same result.

Set Time Zone


Set Time Zone is used to display this gateway device's time settings.

The displayed timezone setting for the GigaCenter is controlled by the NTP server setting
that is pre-provisioned in the GigaCenter configuration file.

Quick Start - Set Time Zone Field Definitions

Label Definition Field Editable? Allowable


Type Values/Defaults

Current Time Zone Displays time zone based on location of Drop-down View Only Default: Pacific Time (US and
GigaCenter List Canada)
Important: Time displayed is in UTC Time.
Note: In a GPON environment, Timing is
derived from the OLT's timing source and
will over-ride any settings made here.
Automatically adjust Determine whether the NTP Server time Check box View Only Default: Unchecked (No adjustment
clock for Daylight makes adjustment for Daylight Saving for daylight savings time)
Saving Time Time.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
53

Wireless Menu
Under the Wireless menu, Wi-Fi, security, WPS, and MAC authentication parameters are
provisioned.

Note: For purposes of this guide, definitions for both 2.4 GHz and 5.0 GHz wireless radios
are combined and shown as one screen. Differences between the two protocols are noted.

Wireless Menu Overview


The Wireless menu provides set-up for the wireless radio, SSID, security, authentication, and
Wi-Fi Multimedia prioritization. Set-up is available for the 2.4 GHz and 5.0 GHz frequency
bands independently.
 Radio Setup - Includes option for enabling or disabling the Wi-Fi "radio". Options are
available for setting frequency, channel, channel bandwidth, power level, and 802.11
wireless mode.
 SSID Setup - Allows for enabling additional SSID's for the wireless network. Configure
the SSID for unique subnets or defined start URL's. The device supports one default
SSID (printed on the GigaCenters label that is shipped with the product), and three
optional SSID settings. The default SSID is broadcast when the gateway is powered on
for the first time.
 Security - Wireless Security allows for configuration of a unique Wireless Equivalent
Privacy (WEP) key or Wi-Fi Protected Access (WPA and WAP2) security key/pass
phrase. Wireless security can also be disabled.
Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
54

 MAC Authentication - Wireless MAC Authentication limits wireless network access to


devices based on their MAC addresses. For a gateway to access a network with wireless
MAC authentication, the MAC address of the gateway must be known by the wireless
router.
 WMM - Wireless Multimedia (WMM) provides Quality of Service (QoS) on the wireless
network by prioritizing traffic depending on the traffic type. Applies to the 2.4 GHz
frequency only
 Advanced Radio Set-up - Wireless services based on country specific requirements can
be selected.
 WPS - Wi-Fi Protected Setup (WPS) provides secure connections to wireless networks.
When enabled on the router and end device, network security settings are shared. Once
set-up is complete, only authenticated devices are available on the network.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
55

Radio Setup
Radio Setup provides the ability to customize the wireless radio settings. Both 2.4 GHz and
5.0 GHz radios can be configured separately.

2.4 and 5.0 GHz Wireless - Radio Setup Field Definitions

Label Definition Field Editable? Allowable Values/Defaults


Type

Enable or Disable the internal wireless Radio ON‡ or OFF


Wireless Radio Yes
radio of the RSG Button
802.11b*
802.11n*
802.11g*
Used to select the wireless protocol Drop-down 802.11ac (applies to 5 GHz radio only)
Wireless Mode Yes
standard List
* - Applies to 2.4 GHz radio only‡. Can
be configured to support a single
protocol and any combination of the
three.

Used to set the wireless network


bandwidth in the 5 GHz frequency
range. Drop-down
Wireless Bandwidth Yes 20 ‡ or 40 MHz
List
Note: For the 2.4 GHz frequency, only
20 MHz service is available.

Used to select the wireless network


Drop-down
Wireless Channel channel. In Auto mode, system selects Yes Channels 1 through 13 or Auto ‡
List
best available channel.
Used to select the power level of the
wireless radio. Calix recommends Drop-down Percentage from 100% ‡ to 10% in 10%
Wireless Power Level Yes
keeping the power level set to 100% List increments
under most circumstances.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
56

2.4 and 5.0 GHz Wireless - Radio Setup Field Definitions

Checked (allow forwarding) ‡ When


checked, multicast traffic received at the
Wireless Multicast Used to distribute multicast IP signals to gateway is forwarded to all associated
Check Box Yes
Forwarding multiple wireless devices. wireless clients
Not Checked (block forwarding)
On the 5 GHz band only, dynamic
selection of frequencies in the 5.25-5.35
DFS Enable and 5.47-5.725 GHz ranges is Check Box Yes Enable‡ or Disable
supported. Enable or disable Dynamic
Frequency Selection (DFS) here.
Action
Apply Button used to apply all settings above No Apply and save changes
Button

SSID Setup
Service Set Identifier (SSID) is used to identify this gateway device for connection to other
wireless devices. The SSID may be broadcast to publish its value to aid in connecting this
device to other wireless devices or it may be hidden to prevent unauthorized access. The
factory-defined SSID values may be redefined to a user-specified name.

Wireless - Service Set Identifier (SSID) Field Definitions

Label Definition Field Editable? Allowable Values/Defaults


Type

SSID (Network Name) The name of the GigaCenter (needed for Drop-down Yes Alphanumeric
identifying the GigaCenter when List Default: SSID on GigaCenter product
connecting to other wireless devices) label
Broadcast SSID Allows or restricts the wireless broadcast Radio Yes Enabled ‡ or Disabled
of the SSID (GigaCenter network name) Button
so networked and non-networked
wireless devices are aware of the
wireless network
Rename SSID Rename the selected SSID (Network Alpha-text Yes Alphanumeric - 32 characters
Name) Box Default: Initially populated with SSID
Network Name

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
57

Wireless Security
Secure your wireless traffic from security threats since wireless traffic transmits unprotected.

Wireless - Security Field Definitions

Label Definition Field Editable? Allowable


Type Values/Defaults

SSID (Network A list of the SSID names for the Drop-down Yes Listed names
Name) GigaCenter wireless network List Default: SSID from GigaCenter
product label
Security Type A list of security types and options. WPA- Drop-down Yes Listed security types: WPA-WPA2-
WPA2-Personal and WEP types require List Personal ‡, WEP, Security Off
different types of "Encryption" and
"Authentication"
Encryption Type A list of encryption types and options Drop-down Yes AES ‡, TKIP, or Both
List
Security key/passphrase used for WPA- Radio Yes Alphanumerical string, 63 characters
WPA2 secured network type (from above) Button max.
Default: Security Key/Passphrase
listed on GigaCenter product label
Security
Key/Passphrase
Security key/passphrase used for WEP Radio Yes Numeric hexadecimal or decimal
secured network type (from above) Button for string (12 characters maximum for
each SSID 128 bit security, 10 characters
with Alpha- maximum for 64 bit security)
text Box for Default: 123456789012
changing
security key
Apply Button used to apply above settings Action Yes Apply and save changes
Button

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
58

MAC Authentication
Limit access to your GigaCenter by using the MAC address of specific wireless devices. A
device list is also provided.

Wireless - MAC Authentication Field Definitions

Label Definition Field Editable Allowable Values/Defaults


Type ?

SSID (Network A list of up to four SSIDs (Network Names) Drop-down Yes Up to 4 network names are displayed
Name) List Default: SSID name from GigaCenter
product label
MAC Authentication MAC Authentication limits network access Radio Yes Enable or Disable
State by using the MAC address of specific Button Default: Enabled
wireless device as a key for network
access
Apply Applies changes to MAC Authentication Action Yes Click to Apply
Button

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
59

WMM (Wi-Fi Multimedia)


WMM is a Quality of Service feature that prioritizes traffic on your wireless network.

Note: Applies to 2.4 GHz radio only.

Wireless - WWM Field Definitions

Label Definition Field Editable? Allowable


Type Values/Defaults

WMM state Enables or disables Wi-Fi Multimedia Radio Yes Enabled ‡ or Disabled
functionality button
Power Save Enables or disables Power Save Radio Yes Enabled ‡ or Disabled
functionality button
Apply Button used to apply above settings Action No Apply and save above changes
Button

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
60

Advanced Radio Set-up


Various countries will allow or block certain Wi-Fi channels and as such, you can specify
what country the radio is being deployed in. In addition, these countries may have varying
Wi-Fi signal power levels which are also selectable by country.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
61

WPS (Wi-Fi Protected Setup)


WPS provides a secure way to establish a wireless network by sharing the wireless key
between the device and wireless client.

Wireless - WPS Field Definitions

Label Definition Field Editable? Allowable


Type Values/Defaults

Connect Connect button activates WPS for two Radio No N/A


minutes. During that time the GigaCenter Button
shares the wireless network key with
other WPS activated devices. WPS mode
can also be triggered after depressing the
WPS button on the GigaCenter unit itself.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
62

Utilities Menu
The Utilities menu provides controls for executing routine network tasks as well as providing
links to various system troubleshooting routines.

Utilities Menu Overview


The Utilities menu provides set-up for the wireless radio, SSID, security, authentication, and
Wi-Fi Multimedia prioritization.
 Configuration Save - Downloads the Home Gateway configuration on your PC. The
file can be used to program the gateway at a later date, restoring all custom settings.
 Restore Defaults - Restores four different default factory settings for the device:
 PPP Username and Password
 Wireless Settings
 Firewall Settings
 Home Gateway to the Factory Default State
 Reboot - Rebooting the modem restarts all modem systems refreshing all connections
and memory usage.
 Web Activity Log - Displays a list of websites visited from the gateway. The list
provides the IP address of the LAN device that visited the website.
 Ping Test - Executes a ping test for Ethernet packets formatted for IPv4/IPv6 using the
entered URL and packet size.
 Traceroute - Displays the Traceroute (route taken for Ethernet packets across the
network) for IPv4/IPv6 formatted traffic.
 System Log - Records the Home Gateway setup and statistics into a text log file. This
can be executed manually or automatically based on a set time interval. The gateway also
captures the log file prior to a device reboot.
 Firewall Log - Records a history of the most recently dropped packets by the firewall.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
63

Configuration Save
Configuration Backup is used to save the gateway device configuration information to a file
on your PC. Configuration Restore reloads the file from your PC to restore your gateway
device back to the same settings as when the backup file was last saved.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
64

Utilities - Configuration Backup/Restore Field Definitions

Label Definition Field Editable Allowable


Type ? Values/Defaults

Action Choice of Backup or Restore to save the Radio No Backup or Restore


gateway configuration to a PC or reload the Button
gateway configuration from the PC to the
GigaCenter
Note: If Restore is chosen, the Restore
dialog is displayed.
Note: If Backup is chosen, the Backup
dialog is displayed.
Backup/Restore Click "Backup" to download the gateway Action No Begin backup/Retrieve backup
device configuration and store its contents Button
into the file selected on your PC.
Click "Restore" to retrieve a previously
saved back-up. Clicking in the file name box
launches Window Explorer to allow file
name selection.
Once a valid Restore file is selected , click
"Restore" to load the contents of the saved
configuration file into the GigaCenter. The
GigaCenter will automatically reboot when
the configuration file is loaded on the
GigaCenter. The GigaCenter will then be
restored back to the state of the saved
configuration file settings
Note: Choosing a non-valid restore file
results in an error message being
displayed. Click OK to choose another
restore file.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
65

Restore Defaults
Select the restore button to restore the gateway device to the default settings Upon selecting
this option, the GigaCenter will be restored to factory default settings.

Important: Any changes to the configuration since the last time this command was executed
will be lost.

Utilities - Restore Defaults Field Definitions

Label Definition Field Editable Allowable


Type ? Values/Defaults

Restore Restores the GigaCenter to factory Action No Restore


default settings. Button
Note: While the GigaCenter is resetting,
the screen may show an error condition
which is considered normal. Once the
reset has completed, the Restore
Defaults screen will reappear.
Note: Pressing and holding the Reset
button on the back of the GigaCenter for
over 15 seconds provides the same
results as the Restore Defaults page.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
66

Reboot
Select the Reboot button to reboot the gateway device.

Utilities - Reboot Defaults Field Definitions

Label Definition Field Editable Allowable Values/Defaults


Type ?

Reboot Press the Reboot button to reboot the Action No Reboot the GigaCenter
GigaCenter Button

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
67

Web Activity Log


Web Activity Log displays a list of the most recently accessed websites. This table displays
URL's accessed by the CPE on the LAN side of the RSG.

Utilities - Web Activity Log Field Definitions

Label Definition Field Editable Allowable Values/Defaults


Type ?

Logging "Enabled" and "Disabled" buttons used Radio Yes Enabled ‡ or Disabled
to activate and deactivate the logging of Button
Web activity.
When logging is disabled, the Refresh
option and table are not displayed.
Refresh Allows the Web Activity Log, displayed "Manual" Yes Manual ‡ or Auto with Refresh Rate
on the Web and "Auto" setting.
Activity Log page, to be refreshed Radio Auto refresh intervals: Realtime, 10,
manually or automatically as well as Button 20, 30, or 60 seconds
setting the auto-refresh intervals
If Auto is chosen, a drop-down list of
auto refresh intervals is displayed. If
Manual is chosen, a "Refresh" action
button is displayed

Web Activity Log Output

Date Date of activity/event Info Only No Date format: M/DD/YYYY


Time Time of activity/event Info Only No Time format: H:MM:SS
IP Address IP address of website visited Info Only No Dot delimited: xx.xx.xx.xx
Website URL of website visited Info Only No Alpha-numeric: URL format

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
68

Ping Test
Test your internet connectivity to a specific host using the ping test below. Results of
completed ping tests are displayed with detailed statistics.

Note: When executing the ping test, 4 packets (32 bytes) are sent consecutively for statistical
purposes.

Utilities - Ping Test Field Definitions

Label Definition Field Editable Allowable


Type ? Values/Defaults

Version Define whether IPv4 or IPv6 IP Addresses Radio Button Yes IPv4‡, IPv6
are pinged.
URL or IP Address IPv4 or IPv6 address of specific Web host Alpha-text Box Yes URL or IP Address syntax
to be tested or url for specific IP address.
Packet size in bytes Specific packet size to be sent Numeric-text Yes In bytes
Box
Source IP Address IP Address of GigaCenter initiating ping Numeric-text Yes Dot delimited: xx.xx.xx.xx or colon-
(Optional) Box hexadecimal delimited
Test Click "Test" to commence ping test Action Button Yes Performs ping test

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
69

Ping Test Results

Reply From URL or IP address of host being tested Info Only No Recognizable URL or IP Address
Bytes Bytes received from the pinged host Info Only No Number of bytes
Time Time ping reply was received from host Info Only No Date and time
TTL Total router "hops" before packet times Info Only No Numeric
out.

Ping Statistics

Packets Sent Number of packets sent to the host Info Only No Total number of packets sent per
ping request.
Packets Received Number of packets received back from the Info Only No Total number of packets received
host per ping request.

Packets Loss Number of test packets sent by the Info Only No Percentage of total packets versus
GigaCenter minus the number of packets packets lost.
received back by the GigaCenter

Round Trip Min Minimum elapsed time for a ping-test Info Only No Round trip minimum time in milli-
packet to be sent by the GigaCenter and seconds.
received back from the host by the
GigaCenter
Round Trip Max Maximum elapsed time for a ping-test Info Only No Round trip maximum time in milli-
packet to be sent by the GigaCenter and seconds.
received back from the host by the
GigaCenter
Round Trip Average Average amount of elapsed time for a Info Only No Average round trip time for all 4
ping-test packet to be sent by the packets sent.
GigaCenter and received back from the
host by the GigaCenter

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
70

Traceroute
Traceroute is used to determine the route taken by packets across a network. Each test
reports the round trip times for 3 ICMP packets. Each response shows the maximum
number of hops displayed in the first column. The test repeats until the host is reached or the
maximum hop count of 30 is reached. The times for each ICMP packet are displayed in the
table. An asterisk (*) in a field means that no-response was received for the ICMP packet
request.

Utilities - Traceroute Field Definitions

Label Definition Field Editable Allowable


Type ? Values/Defaults

Version Specify whether the traceroute command is Radio Yes IPv4‡, IPv6
applied to an IPv4 or IPv6 IP address. Button
Enter a URL or IP Enter the URL or IP address of the Alpha-text Yes Recognizable URL or IP Address
Address destination host Box
Mode Select the Traceroute protocol Radio Yes ICMP, UDP
Button
Enable Reverse Enable or Disable reverse DNS execution. Radio Yes Enable/Disable
DNS With reverse DNS enabled, an IP address Button
search provides domain name registry and
registry table information. You may be able
to identify spammers or malicious attacks
on your firewall by using reverse DNS
lookup. Also useful in determining the ISP
name for a particular IP address.
Start Trace Initiate the traceroute request Action Yes Initiate traceroute
Button

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
71

Traceroute Results

Hops Maximum number of hops (up to 30) Info Only No Numeric up to 30


Time 1, 2, 3 Time of round trip for each ICMP packet Info Only No Time value in milli-seconds
from hop to hop
Host/IP Address Displays URL or IP address of traceroute Info only No Recognizable URL or IP Address
host

This site performs a reverse DNS lookup of an IP address by searching domain name
registry and registrar tables. IP addresses are four numbers in the range of 0 to 255 separated
by periods.

You may be able to identify the domain name of a spammer sending you spam email or the
domain name of a computer trying to break into your firewall or someone trying to hack
your system.

You may also be able to use this information to determine the name of the internet service
provider assigned to a particular IP address.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
72

System Log
The system log provides an accounting of significant gateway device events.

Utilities - System Log Field Definitions

Label Definition Field Editable? Allowable


Type Values/Defaults

Refresh Interval - Allows the System Log to be refreshed Radio Yes See options directly below
Manual Refresh manually or automatically as well as Button with
setting the auto-refresh intervals Action
Button
Manual Refresh Allows for on-demand refresh of the "Manual Yes Manual Refresh ‡ Action Radio
System Log Refresh" Button with Refresh Action Button
button and
a "Refresh"
radio button
for manual
refresh
Auto Refresh Allows and schedules auto-refresh of the "Auto Yes Auto Refresh Radio Button with
System Log Refresh" Refresh Action Button
button along Auto refresh intervals list: Real time,
with a pull- 10, 20, 30 seconds, or 1 minute ‡
down list of
auto refresh Manual "Refresh" Radio Button
intervals
Reboot Behavior Controls System Log reboot behavior for N/A N/A N/A
clearing or saving the System Log
information
Clear on Reboot When chosen, clears the System Log on Clear on Yes Clear on Reboot
reboot Reboot
action
button
Save on Reboot When chosen, saves the System Log on Save on Yes Save on Reboot
reboot Reboot
action
button
Save Log Click button to save SystemLog to your PC Action No Save Log action button
Button

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
73

System Log Table Field Definitions

Date Date of significant GigaCenter event Info Only No Date format: mm/dd/yy
Time Time of significant RSG event Info Only No Time format: hh:mm:ss AM/PM
System GigaCenter system that experienced the Info Only No System event Name
event
Action GigaCenter response to the event Info Only No System Response

Firewall Log
The Firewall Log page provides a table of the most recently dropped packets by the firewall.
The output includes information on:
 Source MAC Address
 Destination MAC Address
 Source IP Address
 Destination IP Address
 Packet protocol
 Source Port Assignment
 Destination Port Assignment

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
74

Utilities - Firewall Log Field Definitions

Label Definition Field Editable? Allowable


Type Values/Defaults

Time Displays the date and time the log was Display No date format: mm/dd/yy
captured Only time format: hh:mm:ss AM/PM
Details Displays MAC Address, IP Address, Display No N/A
Packet Protocol, and Port Assignment Only
information.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
75

Advanced Menu
The Advanced Menu provides controls for:
 Scheduling/blocking access to specific sites or services
 Customization of all IP Addressing protocols
 Dynamic vs. Static Routing controls
 QoS settings
 Additional Security settings
 Remote EWI settings

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
76

Scheduling and Blocking Overview


Scheduling and Blocking allows for the configuration of network access, service blocking,
and website blocking.

Note: Features listed below can be customized under the Advanced > Scheduling and
Blocking tab of the EWI.
 Scheduling Access - Limits can be applied to LAN devices as to the time and day these
devices can access the Internet. Configurable by device name or MAC address.
 Service Blocking - Service blocking prevents specific devices from accessing internet
applications. Blocking is accomplished by creating an association between a service and
device name or IP address.
 Website Blocking - Website blocking prevents specific internet sites from being
accessible. Blocking is accomplished by associating a specific URL with a device name or
IP address.

Scheduling Access

Access Scheduler sets Internet access rules for LAN devices. Scheduled devices are displayed
in the Device Access List.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
77

Advanced- Scheduling and Blocking - Scheduling Access Field Definitions

Label Definition Field Editable Allowable Values/Defaults


Type ?

Device If Device Radio Button is chosen, Drop- Radio Yes Alphanumeric Names
down List of device names is displayed Button and Default: Connected LAN devices
Drop-down
List
MAC Address If MAC Address is chosen, Alpha-text box Radio Yes Colon delimited (xx:xx:xx:xx:xx:xx)
is displayed Button and
Alpha-text
Box
Days of the week to Check days of week to allow LAN Check Box Yes Selectable by day of week
allow Internet Access devices Internet access
Time of day ranges Set the hours of the day devices are Drop-down Yes Select pre-defined start and stop times
allowed Internet access List for schedule range
Add Add the chosen device’s Internet access Action Yes Click to apply and save changes
schedule Button

Device Access List

Device Name List of LAN devices that are controlled by Info Only Yes - see List of days allowed (Mon, Tue, Wed,
Internet access list "Create Schedule" above Thur, Fri, Sat, Sun)
MAC Address MAC address of LAN devices that are Info Only Yes - see Alpha-numeric colon delimited MAC
controlled by Internet access list "Create above address
Schedule"
Allowed Days Days Internet access is allowed for each Info Only Yes - see Drop-down List
device above
Allowed Time Starting and Stopping times to allow Info Only Yes - see Drop-down List
Internet access to the device or service above
Remove Remove device from "Create Schedule". Action Yes Remove scheduling restrictions on
Note - removed devices have no Button chosen device
restrictions unless specified otherwise in
Service Blocking or Website Blocking

Service Blocking

Service blocking provides the ability to block specific Internet services per device. From the
Service Blocking tab, a new association can be created between a service and a device. Newly
created association details are displayed in the Service Blocking List.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
78

Advanced - Scheduling and Blocking - Service Blocking List Field Definitions

Label Definition Field Editable Allowable Values/Defaults


Type ?

New Select the "New" button to set up Action Yes Select the New button to open the
blocking of an Internet service per device. Button "Create New Association Dialog shown
above"

Service Blocking List

Device Name List of "Device Names" set up with Info Only No Alphanumeric name of the device where
service blocking service blocking is desired.
IP Address "IP Address" list of devices set up with Info Only No Dot delimited IP address of the device.
service blocking (xx.xx.xx.xx)
Service Blocked Name of "Service Blocked" Info Only No Alphanumeric name of the type of
service to be blocked.
Remove Button to "Remove" the LAN device from Action Yes Remove Service Blocking between this
service blocking Button device and the listed service.

By clicking the New action button on the Service Blocking List screen, an association can be
created between a specific service and a specific device.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
79

Advanced - Scheduling and Blocking - Create New Association

Label Definition Field Editable Allowable Values/Defaults


Type ?

Service A list of service rules previously Drop-down Yes - see Previously configured service blocking rules
configured for service blocking List below appear in this drop-down list.
View Button to "View" an info only chart Action Button Yes View only
listing: "Service Rule", "Protocol"
type, "Port Start", "Port End", and
"Port Map" for the chosen
"Service" pull down menu
New Reveals the "Create New Service Action Button Yes See next section below.
Rule" page used to create a new
service to be added to the
"Service" pull down list. "Create a
New Service Rule" consists of
"Name" field, "Protocol" pull down
list, "Clear Fields" radio button,
"Port Start" field, "Port End" field,
"Port Map" field and "Apply" and
"Cancel" radio buttons - See
Create New Service Rule below
Associate "Device" button used to associate Action Button Yes Device button with alphanumeric list of devices -
Service with selected name on pull down with Device or IP Address
Device the above listed "Service"
Associate "IP Address" button used to reveal Action Button Yes Device button with alphanumeric list of devices -
Service with IP a field for entering the IP Address Device or IP Address
Address of a device to be associated with
the above listed "Service"
Apply/Cancel "Apply" radio button applies and Action Button Yes Apply and Save changes or Cancel
Button saves the "Create New Rule"
settings into the Service Rule
Chart and pull down "Services "
list
"Cancel" radio button cancels
application of the service rule
setting on the "Create New
Service Rule" page and exits the
page

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
80

By clicking the New Service action button in the Create New Association screen, rules can be
configured for specific services.

Advanced - Scheduling and Blocking - Create New Service Rule

Label Definition Field Type Editable? Allowable Values/Defaults

Name Name of the new service blocking Drop-down List Yes Alpha-numeric name
rule to create
Protocol Packet protocol to be used for the Drop-down List No TCP, UDP, or Both
service rule Default: TCP
Clear Fields Use the "Clear Fields" radio button to Action Button Yes Clear fields radio button.
clear the "Name", "Port Start", "Port
End" and "Port Map" fields in the
"Create New Service Rule" section
Port Start Starting TCP or UDP port number to Alpha-numeric Yes Port 1 through 65535
that is affected by the blocking rule. Text
Port End Ending TCP or UDP port number to Alpha-numeric Yes Port 1 through 65535
that is affected by the blocking rule. Text
Port Map Alpha-numeric Yes Port 1 through 65535
Text
Apply/Canc Apply and Save or Cancel the Action Button Yes Apply or Cancel radio button
el changes to the service rule

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
81

Website Blocking

Website blocking provides the ability to block specific websites per device or IP address.

Advanced - Scheduling and Blocking - New Website Blocking Field Definitions

Label Definition Field Editable? Allowable


Type Values/Defaults

New Select the "New" button to set up Action Yes Create Blocking for a website.
blocking of a specific website per device Button
or IP address

List of Blocked Websites

Device Name Specific Device or List of all devices Info Only No Static Table
tagged for blocking Default: All Devices
IP Address Specific IP Address or all IP addresses Info Only No Static Table
associated with a particular device Default: Device Button Selected
Website Blocked Specific website to be blocked Info Only No URL of website to be blocked (dot
delimited format)
Remove Button to Remove the network device Action Yes Remove radio button
from website blocking Button

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
82

Choosing New from the screen above opens the "Create New Association" window where
specific websites, devices, or IP addresses may be blocked.

Advanced - Scheduling and Blocking - Create New Association Field Definitions

Label Definition Field Editable Allowable


Type ? Values/Defaults

New Select the "New" button to set up blocking Action Button Yes Create Blocking for a website.
of a specific website per device or IP
address

Create New Association

Website Address Input a website address that is to be Alpha-numeric Yes Alpha-numeric text in URL format
blocked Text
Associate Website Choose a currently connected network Radio Button Yes Default: Device Button Selected
with Device device to block the URL input above with Drop-down Default: Drop-down List "All
List Devices"
Associate Website Choose a currently connected network Radio Button Yes Dot-delimited IP address
with IP Address device by inputting its IP address with Numeric Default: Radio Button Not Selected
Text
Default: All IP addresses
Apply/Cancel Apply creates an association as Action Button Yes Apply and Save changes.
provisioned above and saves the
association. Cancel discards all changes

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
83

IP Address Overview
IP Addressing settings allow for the configuration of WAN, DHCP, and DNS settings across
the network.

Note: Features listed below can be customized under the Advanced > IP Addressing tab of
the GUI.
 WAN Settings - Sets ISP requirements and parameters for internet access.
 IPv6 LAN Settings - Sets up parameters for IPv6 addressing.
 DHCP Settings - DHCP server configuration, IP addressing reservations, server lease
times, as well as DNS server parameters are configured here.
 DHCP Reservation - DHCP reservations allow for the permanent allocation of a
DHCP address to a client, even after a reboot.
 DNS Host Mapping - DNS Host Mapping creates a static host name for a specific IP
address at the router. Both WAN and LAN IP addresses can be mapped here.
 Dynamic DNS - Dynamic DNS associates a WAN IP address with a specific host name
and updates the DNS server when the WAN IP address changes.
Note: The Dynamic DNS service is hosted through www.dyndns.com (http://www.dyndns.com)

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
84

DHCP Settings

DHCP Settings define the LAN addressing parameters for your device to allocate IP
addresses to LAN devices.

Advanced - IP Addressing - DHCP Settings Field Definitions

Label Definition Field Type Editabl Allowable


e? Values/Defaults

DHCP Host Name Defined host name for the DHCP service. Alpha text box Yes Alpha-numeric string.
Domain Name Assigned Domain Name for the IP Address Alpha text box Yes Alpha-numeric string.
associated with this GigaCenter
DHCP server state Set the "Enabled" or "Disabled" state of the Radio Button Yes Enable or Disable the DHCP
GigaCenter to allocate IP addresses to Server
attached LAN devices
Device IP Address The IP Address of the GigaCenter device Numeric Yes Dot delimited, xx.xx.xx.xx
Beginning IP Address The first assignable IP address for LAN Numeric Yes Dot delimited, xx.xx.xx.xx
devices
Ending IP Address The last assignable IP address for LAN Numeric Yes Dot delimited, xx.xx.xx.xx
devices
Subnet Mask The assigned "Subnet Mask" is used to split Numeric Yes Dot delimited, xxx.xxx.xxx.xxx
and confine traffic to one network. A subnet Default: 255.255.255.0
mask keeps all local network traffic local
and only routes Internet traffic to the
Internet preserving network resources
DHCP Server Lease The length of time the DHCP server lease Alpha-numeric Yes Enter lease time in Days,
Time remains active without renewing Text Hours, and Minutes
Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
85

Advanced - IP Addressing - DHCP Settings Field Definitions

DHCP Reservation Sticky: Once the router initially assigns a Radio Button Yes Sticky‡ or Permanent
particular IP address to a client (laptop,
tablet, smart phone, etc.) the client keeps
that same address until the router is
rebooted. Upon reboot, the router attempts
to restore the existing DHCP address. This
is the default behavior. In this mode, leases
expire and are re-issued using the same IP
address if possible.
Permanent: Once the router assigns a
particular address to a client, the client
always gets that address until the router is
rebooted. Upon reboot, a different address
is assigned to the client however the
previous lease/IP address are retained.
Note: Usage of "permanent" may result in
exhaustion of the IP address pool and
should be used only in rare circumstances.
Please contact your operator before using
permanent.
Note: Performing a factory reset restores
the default behavior (Sticky).
Servers allocated with If Default Servers are selected, assigned Radio Button Yes Default Servers ‡ or Custom
DHCP requests - DNS server (192.168.1.1) is passed to LAN- Servers
DHCP DNS Type side DHCP clients during Offer/ACK Note: If you enable Dynamic
messaging . If Custom Servers is selected, Routing (RIP) without disabling
the primary and secondary DNS servers NAT, an error message
provide the URL to IP translation for a
appears reminding you to
specific site (the ISP assigns DNS server disable NAT before
addresses). proceeding.
Note: This behavior is dependent on NAT
settings as well. With NAT enabled, whether
custom or default servers are chosen, the
GigaCenter always acts as the DNS proxy
agent to LAN side clients, behaving as the
default server (192.168.1.1). If NAT is
disabled, Custom server information from
the ISPs DHCP offers will be sent (when
this field is set to Custom Servers).
Apply Apply and Save changes to DHCP settings Action Button Yes Apply and save changes

This field defines the DNS-Server IP addresses that will be passed to LAN-side DHCP-clients in the Offer/Ack messages.
- If "Default" is selected, the GigaCenter local LAN host (192.168.1.1) will be sent.
- If "Custom" is selected, there is a complication with this that Randy will need to explain. Something to do with NAT….

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
86

IPv6 LAN Settings

IPv6 LAN settings determine whether IPv6 addressing will be supported on this GigaCenter
and now it functions.

Advanced - IP Addressing - IPv6 LAN Settings

Label Definition Field Editable Allowable Values/Defaults


Type ?

Select LAN Select the LAN type. Drop-down Yes Primary Bridge
In this release, only Primary Bridge is List
available.
IPv6 Status Enable or Disable IPv6 address support Radio Yes Enabled, Disabled
Button
DHCPv6 Server Enable or Disable a DHCPv6 capable Radio Yes Enabled (Stateful), Enable (Stateless),
server. Enabled (Stateful) specifies a Button Disabled
standard DHCPv6 server while Enable
(Stateless) uses the Stateless Address
Auto-Configuration (SLAAC) method to
obtain IPv6 addresses.
Name Server Mode Select whether the default Name Server Radio Yes Default, custom
mode is used (DNS servers used by the Button
WAN) or a custom DNS server is
available.
For custom mode, you must enter a
Primary and Secondary DNS server IP
address.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
87

DHCP Reservations

DHCP reservation leases a permanent DHCP allocated address to a client and displays a list
of these reservations.

Advanced - IP Addressing - DHCP Reservations Field Definitions

Label Definition Field Editable Allowable Values/Defaults


Type ?

Select Device or Select the type of LAN device identifier, Radio Yes Choose Device ‡ or MAC Address. If
manually enter a MAC "Device" or a "MAC Address", to Button Device is chosen, select a device from
address associate with an IP Address the drop-down list.
Choosing the "Device" button reveals a If MAC address is chosen, default is
pull down list used to select the LAN Null.
device to be associated with an "IP
Address"
Choosing the "MAC Address" button
reveals a field used to identify the LAN
device to be associated with an "IP
Address"
Select an IP address Select the "IP Address" from the pull Drop-down Yes IP Addresses from the drop-down list.
to associate with a down range of IP Addresses to be List Range: 192.168.1.2 through
MAC address associated with the "Devices" and "MAC 192.168.1.254
Addresses" connected to the GigaCenter Default: 192.168.1.2
Apply "Apply" radio button applies and saves Action Yes Applies and saves changes
the "DHCP Reservation" settings Button

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
88

DHCP Reservation List

Device Name Device Name selected from above Info Only No Alpha-numeric
MAC Address MAC Address input above Info Only No Numeric - MAC address format:
xx:xx:xx:xx:xx:xx
IP Address IP Address selected from the drop-down Info Only No Dot delimited IP Address
list above xx.xx.xx.xx
Remove Remove the LAN device specified from Action Yes Remove the device
the DHCP Reservation List Button

DNS Host Mapping

DNS host mapping creates a static host name for the specified IP address in the DSL router.
WAN and LAN IP addresses are supported. A list of DNS Host mappings is also displayed.

Advanced - IP Addressing - DNS Host Mapping Field Definitions

Label Definition Field Type Editable Allowable


? Values/Defaults

DNS Host Name DNS Host Name to be associated with the Alpha-numeric Text Yes Alphanumeric
DNS IP Address Default: Null
DNS IP Address DNS IP Address to be associated with the Alpha-numeric Text Yes Dot delimited IP Address
above DNS Host Name (xx.xx.xx.xx)
Default: Null
Apply "Apply" radio button applies and saves the Action Button Yes Click to apply and save DNS
"DNS Host Mapping List" Host Mapping

DNS Host Mapping List

IP Address IP Address for the WAN or LAN Static Info Only No Dot delimited IP Address
Host (xx.xx.xx.xx)
DNS Name DNS Name of the Static Host Info Only No Alpha-numeric text
Remove Click to remove the DNS Host IP Address Action Button Yes Click to remove mapping
from the Host Mapping table

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
89

Dynamic DNS

Dynamic DNS associates the WAN IP address of your router with a host name. Dynamic
DNS automatically updates DNS servers upon WAN IP address change. Dynamic DNS
(DDNS) is provided through www.dyndns.com.

Advanced - IP Addressing - Dynamic DNS Field Definitions

Label Definition Field Type Editable Allowable


? Values/Defaults

Dynamic DNS state Select "Enabled" or "Disabled" Dynamic Radio Button Yes Enabled or Disabled ‡
DNS state
If DDNS is set to Disabled, the credential
options are not displayed.

Credentials for www.dyndns.com

Username Enter "Username" in field to access data Alpha-numeric Text Yes AlphaNumeric
base that associates WAN IP address of Default: Null
RSG with a host name
Password Enter "Password" in field to access data Alpha-numeric Text Yes AlphaNumeric
base that associates WAN IP address of Default: Null
RSG with a host name

Show Show the password Radio Button Yes If selected, actual password is
displayed. If not checked,
password is masked (all
"bullets")
Default: Values are masked
Dynamic DNS Enter the DNS host name. The dynamic Alpha-numeric Text Yes AlphaNumeric
hostname DNS service will automatically update Default: Null
DNS servers with any WAN IP address
change to the RSG
Apply "Apply" radio button applies and saves Action Button Yes Apply and Save Dynamic
the "Dynamic DNS host name" DNS security information

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
90

Static Routing
Adding routes manually to the routing table is considered static routing. If a change or a
failure occurs between two statically defined nodes, traffic will not be rerouted and must wait
for the failure to be resolved by the administrator. A list of assigned static routes is also
provided.

Advanced - Routing - Static Routing Field Definitions

Label Definition Field Editable Allowable Values/Defaults


Type ?

Destination IP Manually add the IP address of a Numeric Yes Dot delimited xx.xx.xx.xx
connected device to the gateway routing Default: 0.0.0.0
table
Subnet Mask Manually add the Subnet Mask of the Numeric Yes Dot delimited xx.xx.xx.xx
connected device to the gateway routing Default: 255.0.0.0
table
Gateway IP Manually add the Gateway IP address to Numeric Yes Dot delimited xx.xx.xx.xx
the gateway routing table Default: 0.0.0.0
Apply "Apply" radio button applies and saves Action Yes Click to apply and save changes.
the "Static Routing" settings Button

Static Routes

Destination IP IP address of connected device Info Only No Dot delimited xx.xx.xx.xx


Default: 0.0.0.0
Subnet Mask Subnet Mask of connected device Info Only No Dot delimited xx.xx.xx.xx
Gateway IP Gateway IP address Info Only No Dot delimited xx.xx.xx.xx
Default: 0.0.0.0
Edit (Remove) Remove selected static route from Action No Click Remove to discard static route
routing table Button

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
91

Quality of Service Overview


Quality of Service settings allow for the configuration of QoS prioritization rules across the
network.

Note: Features listed below can be customized under the Advanced > Quality of Service tab
of the EWI.

QoS - Quality of Service helps prioritize LAN to WAN packet movement in and out of a
router. Options exist for classifying traffic type (video, voip, custom), traffic direction
(upstream or down), and DSCP class. Can be applied to all traffic of a given type or only
traffic from a given IPv4 or IPv6 address.

QoS (IPv4)

QoS prioritizes traffic types coming from the Upstream (LAN ports) or Downstream (WAN
port) before standard data traffic. Traffic comes from or to specific applications or devices
such as video players, game consoles, or voice adapters supporting Voice over IP (VoIP). By
applying QoS to your network it can increase performance and prevent your network from
becoming overloaded.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
92

Advanced- Quality of Service - QoS Field Definitions

Label Definition Field Editable? Allowable


Type Values/Defaults

QoS State Sets the "Enabled" or "Disabled" state for Radio Button Yes "Enabled" ‡ or "Disabled"
prioritizing the Quality of Service
New "New" radio button for creating a QoS Radio Button Yes Create a new rule
rule

Create New QoS Rule

QoS Type Select or create a QoS type from the pull Drop-down List Yes Choose Video, VOIP, VOIP
down list: Video, VOIP, VOIP Signaling, Signaling, Custom‡ to create rule.
Custom
Rule Name (Custom If QoS Type = Custom, then enter a Alpha-numeric Yes Alpha-numeric Text
only) name for the rule. Select or create a QoS Text Default: Null
type from the pull down list: Video, VOIP,
VOIP Signaling, Custom
QoS Direction Choose whether QoS is enforced on the Radio Button Yes Upstream ‡ or Downstream
upstream or downstream traffic
DSCP Class If QoS Type = Custom, Differentiated Drop-down List Yes Selectable options from pull down list
(Custom only) Services Code Point (DSCP) for coding of 7 classes of service as well as
QoS rule in IP packet to define "Class" of "Best Effort" ‡ and "Expedited
service Forwarding"
Queue Priority Queue Priority of "Custom" QoS Type: Drop-down List Yes Selectable options from pull down list
(Custom only) High, Medium, Low, Best Effort of: High ‡, Medium, Low, Best Effort
IP Addresses IP Addresses affected by the "QoS Rule": Radio Button Yes Choose either All IP Addresses ‡ or
(Custom only) All or Defined specific IP Addresses that need to
abide by QoS Rules.
Source IP (Define Apply QoS rule to the source IP address Info only No N/A
Only)
IP Apply QoS rule to this source IP address Numeric Yes Dot delimited xx.xx.xx.xx
Network Mask Apply QoS rule to this source Netmask Numeric Yes Dot delimited xx.xx.xx.xx
Default: 255.255.255.0
Port Range to Apply QoS rule to this source Port Range (2) Numeric Yes Alphanumeric range, xxxx.... to xxx....
Fields (to-from)
Destination IP Apply QoS rule to the destination IP Info Only No N/A
Address
IP Apply QoS rule to this destination IP Numeric Yes Dot delimited xx.xx.xx.xx
Address
Network Mask Apply QoS rule to this destination Numeric Yes Dot delimited xx.xx.xx.xx
Netmask Default: 255.255.255.0
Port Range to Apply QoS rule to this destination Port (2) Numeric Yes Alphanumeric range, xxx. . . to xxx. . .
Range Fields (to-from) Default: Null
Apply "Apply" radio button applies and saves Radio Button Yes Click to apply and save changes
the "QoS Rule" settings
Cancel "Cancel" radio button cancels the "QoS Radio Button Yes Click to cancel QoS Rule settings
Rule" settings

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
93

New QoS Definitions List

Name Name of QoS rule Info Only "Edit" mode Info Only
only
Direction Data flow direction to which QoS rule is Info Only "Edit" mode Info Only
applied only
DSCP Differentiated Services Code Point Info Only "Edit" mode Info Only
(DSCP) QoS class of service applied only
Priority Priority of service applied Info Only "Edit" mode Info Only
only
Source Source of data to which QoS rule is Info Only "Edit" mode Info Only
applied only
Destination Destination of data to which QoS rule is Info Only "Edit" mode Info Only
applied only
Edit Edit this QoS rule Radio Button Yes Click Edit to change QoS Rule
settings
Remove Remove this QoS rule Radio Button Yes Click Remove to discard this QoS
Rule

Security Overview
The Calix GigaCenter incorporates various features that ensure overall network security.

Note: Features listed below can be customized under the Advanced > Security tab of the
EWI.
 Administrator Credentials - Administrator credentials prevent outsiders from accessing
the gateway device's firmware settings.
 Application Forwarding - The Application Forwarding feature allows a LAN device to
receive incoming WAN traffic on a "per-application" basis. All traffic into the device
associated with a given application is forwarded to the defined device. Associations are
made between an application and a device name (or IP Address).
 Port Forwarding - Similar to Application Forwarding, Port Forwarding allows a LAN
device to received traffic on a port range basis. Traffic from a specific local port (or range
of ports) and a specific remote port (or range) are specified.
 Firewall - The Firewall blocks incoming IPv4 or IPv6 traffic based on the level of
security desired. Pre-programmed services can be manipulated to allow or ban incoming
or outgoing traffic based on the security level chosen.
 DMZ Hosting - Digital Media Zone Hosting allows for the placement of any LAN
device outside the firewall. Since this device, by definition, is now being hosted
elsewhere, it can now be accessed using the WAN IP address (Connection Status page).
 UPnP - UPnP (Universal Plug and Play) capable devices simplify the connection and
implementation of devices into your network.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
94

Administrator Credentials

Administrator credentials prevent outsiders from accessing the gateway device's firmware
settings. After creating a username and password, you will need to enter them before you can
access the gateway device's configuration settings.

Advanced- Security - Administrator Credentials Field Definitions

Label Definition Field Editable Allowable


Type ? Values/Defaults

Credentials Determines whether credentials are Radio Button Yes Required ‡ or Not Required
required to gain access to the gateway Note: If Not Required is chosen,
device's configuration settings
Login and Password fields are not
displayed
Administrator - Login If credentials are required, the login name Alpha-numeric Yes See the topic entitled Passwords
is entered here. Text for a list of allowable characters
Default: admin
Administrator - If credentials are required, the password is Alpha-numeric Yes See the topic entitled Passwords
Password entered here. Text for a list of allowable characters.
Default: See label shipped with
GigaCenter
Show When checkbox is checked, displays the Checkbox Yes When unchecked, the password is
un-masked password not displayed (masked with a string
of bullets)
Apply Click to apply and save login and Action Button Yes Click to apply and save changes
password

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
95

Application Forwarding

Application Forwarding forwards the application's specified ports to the selected device or IP
address. The subscriber can forward traffic from the WAN source to a local LAN device on
a per-port basis.

Advanced- Security - Applications Forwarding List Field Definitions

Label Definition Field Editable Allowable Values/Defaults


Type ?

Create New Create a new association between an Drop-down Yes Choose from a previously defined
Association - application’s specified port and a device List application from the drop-down list. If
Application or IP address. Applications are defined none exists, create one using the New
using the New Association radio button radio button. To view previously
to the right. created associations, click the View
radio button.
Default: Null
View This button allows the application rules Radio Button Yes View Radio Button (see description
for the selected application to be viewed above)
New This button allows a new application Radio Button Yes New Radio Button (see description
rule to be created above)

Application Forwarding List

Device Name Name of device to be associated with Info Only No Listing device name
an application
IP Address Name of IP address to be associated Info Only No IP Address of device to be forwarded
with an application
Application Forwarded Name of application being forwarded to Info Only No Application name being forwarded
device or IP address
Remove Eliminate the application forwarding Action Button Yes Click Remove to discard application
association forwarding rule

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
96

Upon clicking the New radio button described above, the Create New application Rule screen is displayed:

Advanced- Security - Create New Application Rule Field Definitions

Label Definition Field Editable? Allowable Values/Defaults


Type

Name Assign a name to the new Alpha- Yes Alpha-numeric text


application rule numeric Text Default: Null
Protocol Protocol used for application Drop-down Yes TCP ‡ , UDP, TCP/UDP
forwarding List
Clear Fields This button clears the fields to Radio Button Yes Clear all fields to allow entry of new rule
allow a new rule to be created
Port Start Enter the number of the Numeric Yes Numerals from 1 to 65535
application’s specified start port Default: Null
Port End Enter the number of the Numeric Yes Numerals from 1 to 65535
application’s specified end port Default: Null
Port Map Enter the number of the Radio Button Yes Numerals from 1 to 65535
application’s specified port map Default: Null
Apply/Cancel "Apply" radio button applies and Action Button Yes Choose Apply to apply and save changes.
saves the "Create New Application Click Cancel to discard changes
Rule" settings or "Cancel" radio
button cancels the "Create New
Application Rule" settings

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
97

Advanced - Security - Application Rule List

Protocol Protocol used for application Info Only No unless in edit Info Only
forwarding mode
Port Start The number of the application’s Info Only No unless in edit Info Only
specified start port mode
Port End The number of the application’s Info Only No unless in edit Info Only
specified end port mode
Port Map The number of the application’s Info Only No unless in edit Info Only
specified port map mode
Edit Edit the application rule Radio Button Yes Click radio button to edit
the rule
Remove Eliminate the application rule Radio Button Yes Click radio button to
remove rule
Associate Associate an application with a Info Only N/A N/A
Application device or IP address
With
Device Select "Device" button to reveal a "Device" button for selecting Selectable button "Device" button and
pull down list of defined devices for category and pull down list for and selectable pull alphanumeric selectable
association with an application selecting device down list pull down list
Default: "Device" button
Default:
Wireless_Router
IP Address Select "IP Address" to reveal a "IP Address" button for Selectable button "IP Address" button and
field to enter an IP address for selecting category and numeric and editable a dot delimited numeric
association with an application field for entering IP address numeric field entry field
Default: 0.0.0.0
Apply "Apply" radio button applies and Radio Button Yes Apply and Save the
saves the "Create New Application Rule
Association" settings
Cancel "Cancel" radio button cancels the Radio Button Yes Cancel changes to the
"Create New Association" settings Application Rule

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
98

Port Forwarding

Port forwarding allows a remote device to connect to a local LAN device through a specific
port or port range. Subscribers can forward traffic from the WAN source to a local LAN
device based on a port or range of port addresses.

Advanced- Security - Port Forwarding Field Definitions

Label Definition Field Editable Allowable Values/Defaults


Type ?

New Create a new association between a Radio Yes Click to create a new port association
remote device and a local LAN device Button
through a specified port or port range

Port Forwarding Rules List

Local LAN Ports Number or range of numbers for the local Info Only No N/A
LAN port
Local LAN IP Address IP address of the local device Info Only No N/A
Protocol Protocol used to connect between local Info Only No N/A
and remote devices
Remote Ports Number or range of numbers for remote Info Only No N/A
port
Remote IP Address Remote IP address or all IP addresses Info only No N/A
associated with the remote port
Remove Remove the port forwarding association Radio Yes Click Remove to discard the association
Button

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
99

Advanced- Security - Create New Association Port Forwarding Field Definitions

Label Definition Field Editable? Allowable Values/Defaults


Type

Local Port and IP

Clear Fields Clears the Local Port and IP fields to Action Button Yes Click to clear previously entered data
allow a new association to be created
Device Select the local LAN device to be "Device" Yes Radio button with drop-down list of
connected to the remote device. button with a currently connected local devices.
drop-down Default: Device is selected but drop-
list of devices down list is blank until devices are
added.
IP Address Select "IP Address" to display a field to Radio Button Yes Click to enter IP Address (dot delimited
enter an IP address for association with with numeric xx.xx.xx.xx)
the local device IP Address Default: Not selected
field
Protocol Protocol used to connect between local Drop-down Yes TCP, UDP, TCP/UDP
and remote devices list Default: TCP
Port Start Enter the number of the local port Numeric Yes 1-65535
association’s specified start port Default: Null
Port End Enter the number of the local port Numeric Yes 1-65535
association’s specified end port Default: Null

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
100

Remote Port and IP

Clear Fields Clears the Remote Port and IP fields to Action Button Yes Click to clear previously entered data
allow a new association to be created

All IP Addresses Select "All IP Addresses" to associate all Radio Button Yes Choose between associating all IP
remote IP addresses with a specified port addresses or a specific IP address for
or range of ports creating a port forwarding rule
(association)
Default: Selected
IP Address Select "IP Address" to display a field to Radio Button Yes Click radio button to enter an IP
enter an IP address for association with with numeric address (dot delimited xx.xx.xx.xx)
the local device IP Address Default: Not Selected
field
Port Start Enter the number of the remote port Numeric Yes 1-65535
association’s specified start port Default: Null
Port End Enter the number of the remote port Numeric Yes 1-65535
association’s specified end port Default: Null
Apply/Cancel "Apply" radio button applies and saves Action Yes Click Apply to apply and save
the "Create New Association" settings or Buttons changes. Click Cancel to remove port
"Cancel" radio button cancels the "Create association.
New Association" settings

Firewall

Activating the firewall is optional. When the firewall is activated, security is enhanced, but
some network functionality will be lost.

Note: For additional information on system security settings, refer to the topic entitled System
Security (on page Error! Bookmark not defined.) presented earlier in this guide.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
101

Advanced- Security - Firewall Field Definitions

Label Definition Field Editable Allowable


Type ? Values/Defaults

Security Level

Security Off No filtering of incoming or outgoing traffic Radio Button Yes Turn security off
Default: Selected (Security Off)
Low Security Block pre-defined traffic in per the Radio Button Yes Apply Low Security Settings
"Blocked Services" settings. No blocking Default: Not Selected
of outgoing traffic
Medium Security Block pre-defined traffic in per the Radio Button Yes Apply Medium Security Settings
"Blocked Services" settings. No blocking Default: Not Selected
of outgoing traffic
High Security Block pre-defined traffic in per the Radio Button Yes Apply High Security Settings
"Blocked Services" settings. Block pre- Default: Not Selected
defined traffic out per the "Blocked
Services" settings including DNS

Stealth Mode

Stealth Mode With "Stealth Mode" enabled, the Radio Button Yes Enable or Disable Stealth Mode
GigaCenter device will not respond to all Default: Disabled
unsolicited WAN traffic including pings
Apply "Apply" radio button applies and saves Action Button Yes Click Apply to apply and save
the "Firewall" settings security settings.

If the security level above is set to Low, Medium, or High, the following table is displayed.

Note: Depending on the security level chosen, blocked services will change as it pertains to
traffic in, traffic out, and ports affected.

Note: Blocked Services are disabled and are not displayed when the firewall security level is
set to off.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
102

Advanced- Security - Firewall Blocked Services Field Definitions

Label Definition Field Editable Allowable Values/Defaults


Type ?

Service Name of service that is set up for Info Only No N/A


blocking
Service Type Service Type Name that is set up for Info Only No N/A
blocking
Service Ports Defined service ports that are set up for Info Only No N/A
blocking
Traffic In Select whether you want downstream Checkbox Yes Click the checkbox to enforce
traffic to be blocked incoming traffic blocking
Default: Not blocked
Traffic Out Select whether you want upstream traffic Checkbox Yes Click the checkbox to enforce outgoing
to be blocked traffic blocking
Default: Not blocked

DMZ Hosting

DMZ hosting enables a LAN device to use the device WAN IP address as its own. DMZ
places the LAN device outside the firewall.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
103

Advanced- Security - DMZ Hosting Field Definitions

Label Definition Field Editable Allowable


Type ? Values/Defaults

DMZ State Enable or Disable DMZ hosting Radio Button Yes Select Enable or Disable
Default: Disabled
Device (If DMZ = Select the LAN device to be hosted Radio Button Yes Device Default: Not Selected
Enabled) outside the firewall with Drop-down Drop-down list is alpha-numeric
list of Device
names Default: Null field
IP Addressed (If DMZ Select an IP address of a device to be Radio button Yes Default: IP Address radio button is
= Enabled) hosted outside the firewall with numeric selected
field for IP IP address numeric field (dot
address
delimited xx.xx.xx.xx)
Default: Null field
Apply Apply button applies and saves the Action Button Yes Apply to apply and save changes
DMZ Host settings

DMZ Hosted Device Listing

Device Name Name of currently configured DMZ Info only No N/A


Hosted device
IP Address IP address of the device Info only No N/A
Remove Remove the associated device name Action Button Yes Removes the device from the DMZ
and IP address from the DMZ Hosted list - the listed device will return to
list being hosted inside the DMZ.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
104

UPnP

Universal Plug n Play is a network protocol whose general purpose is to enable zero-
configuration, automatic discovery, and simple configuration of network services on a LAN.
It was developed in 1998 by a consortium led by Microsoft. It allows devices to join a
network, obtain an IP address, announce itself and its services, and learn about the presence
and availability of other UPnP devices and services. UPnP devices are divided into 2
categories: Control Points (CP’s) and Controlled Devices (CD’s).

The most common use cases at present time are for printer discovery and installation, media
server/player discovery and control, and Internet router control. UPnP can allow PC’s to
discover and automatically identify and install drivers for network accessible printers. It
allows network media players such as DLNA clients to automatically locate DLNA servers
on the LAN. Internet routers can be discovered and various elements of control can be
exerted upon them. Each of these functionalities is governed by a particular schema that fits
within the UPnP protocol and those schemas are defined by individual UPnP Working
Groups.

Advanced- Security - UPnP Field Definitions

Label Definition Field Editable Allowable Values/Defaults


Type ?

Universal Plug and Play (UPnP) can be Radio Yes Enabled ‡ or Disabled
UPnP state enabled or disabled by selecting the Button
appropriate buttons
When "Enabled" the UPnP Network Radio Yes Enabled ‡ or Disabled
Address Translator (NAT-T) masks the IP Button
UPnP NAT-T state
addresses of devices on the LAN behind
the Home Gateway
Applies and saves the UPnP settings Action Yes Apply and save changes
Apply
Button

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
105

UPnP NAT-T List

The NAT assigned IP addresses of UPnP Info Only No N/A


IP Address devices masked behind the Home
Gateway
Displays the starting port number for the Info Only No N/A
ExPort Start external device that you want to allow
access
Displays the ending port number for the Info Only No N/A
ExPort End external device that you want to allow
access
Displays the starting port number for the Info Only No N/A
InPort Start internal device that you want to allow
access
Displays the ending port number for the Info Only No N/A
InPort End internal device that you want to allow
access
Protocol being used to connect the Info Only No N/A
Protocol
external and internal devices via UPnP
Edit the UPnP NAT-T list Action Yes Select the Edit Button
Edit
Button

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
106

Remote Management Overview


Remote Management settings allow for the configuration of a secure connection to the
GigaCenter network from a remote location.

Note: Features listed below can be customized under the Advanced > Remote Management
tab of the EWI.

Remote EWI - Provides added security when accessing the GigaCenter EWI from a remote
location.

Remote EWI

Remote EWI enables access into the router from a WAN connection. To access your device
remotely you will need to use http:// followed by the device IP address and the remote EWI
port. For example: http://10.10.200.157:8080

Advanced - Remote Management - Remote EWI Field Definitions

Label Definition Field Editable? Allowable


Type Values/Defaults

Remote EWI state When "Enabled" the feature provides Radio Button Yes Select Enable or Disable
remote EWI access to the router from a Default: Disabled
WAN connection

Credentials

Username User name used to remotely access the Alpha-numeric Yes Alphanumeric string
Home Gateway's EWI text Default: Null field
Password Password used to remotely access the Alpha-numeric Yes Alpha-numeric string
EWI text Default: Null field
Show Selecting this option displays the Checkbox Yes Check box
password (not masked) Default: Not checked
Remote EWI port Port on the Home Gateway for remote Numeric Yes Numeric string
EWI access Default: 8080
Apply Applies and saves the Remote EWI Action Button Yes Click to apply and save changes
security settings

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
Appendix A

Appendix

Wi-Fi Protected Set-up LED Behavior


Depending on the services being configured, the WPS button and associated WPS LED will
react differently.

For data services, WPS is enabled upon pressing the WPS a single time. The WPS LED
begins to flash (green) and continues to do so for up to 180 seconds. During this time, other
Wi-Fi capable devices can be paired to the GigaCenters Wi-Fi radios (either the 2.4 GHz or
the 5.0 GHz band) by initializing a similar WPS function on the remote device, thereby
creating an association with the primary SSID of the GigaCenter and the other device. WPS
LED behavior for pairing to the primary SSID (either 2.4 GHz or 5.0 GHz) is as follows:
 Press WPS button a single time.
 WPS LED illuminates green and flashes for up to 120 seconds.
 Wi-Fi 5.0 GHz LED begins flashing after approximately 10 seconds indicating the
pairing process has begun.
 If another device is found, the GigaCenter pairs with the device, the Wi-Fi 5.0 GHz LED
remains on continuously, and the WPS LED goes out.
 If no device is found, the WPS LED turns red after the initial 120 second time-out and
remains red for another 120 seconds.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
108

For IPTV services, WPS is enabled upon pressing the WPS three times in approximately 1
second intervals. After a short delay, the WPS LED begins to flash (amber) and continues to
do so for up to 180 seconds. During this time, other Wi-Fi capable devices can be paired to
the GigaCenters 5 GHz Wi-Fi radio by initializing a similar WPS function on the remote
device, thereby creating an association with the reserved IPTV SSID (5GHz_IPTV_SSID) of
the GigaCenter and the other device. WPS LED behavior for pairing to the IPTV SSID (5.0
GHz) is as follows:
 Press WPS button exactly three times, at one second intervals. WPS LED turns green
and begins flashing after the 3rd press.
 WPS LED illuminates amber after approximately 10 seconds and flashes for up to 120
seconds. The GigaCenter has entered IPTV SSID pairing mode.
 If another device is found, the GigaCenter pairs with the device and the WPS LED turns
green and remains on for approximately 120 seconds.
 If no device is found, the LED turns red after the 120 second time-out and remains red
for 120 seconds.

GigaCenter LED Behavior


Before leaving the site, verify that the GigaCenter is communicating with the GPON
network. Viewing the LEDs helps the installer determine the exact state of the device.

A properly installed and functional GigaCenter exhibits the following LED behavior:
 When power is initially applied, the power LED behaves differently based on the
state/status of the UPS:
 If no UPS is present or if a UPS is present and is not currently providing primary
power, the power LED illuminates and remains lit.
 If a UPS is present and a battery alarm condition exists, the power LED blinks to
indicate an alarm status.
 If LED does not light, power is off or the UPS power supply is not functional.
 During initial power-up, all remaining LED's come on momentarily (lamp test).
 If the SC-APC pigtail is not connected, the Phone 1 LED will begin to blink when Voice
Smart Activate is activated.
 If the SC-APC pigtail is connected, the Broadband LED begins flashing once
downstream synchronization has been completed. The LED switches to solid green if
the GigaCenter has been provisioned.
 As Ethernet ports are initialized, the corresponding LED illuminates provided an
Ethernet device is connected to the port.
Note: Phone service is not available until the Broadband LED lights and remains on.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
109

Note: The integrated WPS feature allows for the sync'ing of remote WIFI capable products
with the GigaCenter. When in WPS mode (pressing the WPS button), the WIFI LED blinks
rapidly for 120 seconds, indicating the remote device is attempting to pair with the
GigaCenter.

Note: By default, the Wi-Fi radio is disabled upon start-up. Once initialized (via graphical
user interface), the Wi-Fi LED assumes normal functionality).

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
110

LED States and Status


The LED's located on the face of the GigaCenter provide information on the status and
current state of the device.

LED States and Status

LED NAME ON OFF BLINK

Main AC power (either ONT/RSG is on battery and the


No power present (AC
POWER power adapter or UPS) is battery remains in a fully functional
power or battery back-up).
present at the ONT/RSG. state.

When WAN is active, broadband


Broadband physical
Broadband interface is not interface has detected a carrier
connection has been
BROADBAND powered - no signal signal. LED blinks at 50% duty cycle
established. GigaCenter has
detected. when optical light is detected and
ranged with GPON network.
the GigaCenter is in ranging mode.

SERVICE See table below for specific behaviors

WiFi 2.4 GHZ


Wi-Fi is enabled. Wi-Fi is disabled. N/A
WiFi 5 GHz
The GigaCenter is not Activity is present on associated
ETHERNET 4 powered, cable is not device - downstream traffic present.
A powered device is
through attached, or no powered Rate of blink loosely translates to
connected to the port.
ETHERNET 1 device is connected to the the amount of packets being
port. transported.
PHONE 1 At least one POTS port is off Zero POTS ports are in Smart Activate or Voice Activate is
PHONE 2 hook. service (off hook) in process.
A device is connected, and The device is not powered, Activity is present on the USB port.
associated with the USB no cable connected, or no Rate of blink loosely translates to
USB
port however the port is powered devices connected the amount of packets being
currently idle. to the port. transported.

RF RF Video optical level is


RF video optical level is
outside prescribed range
Model 854-1 AND within prescribed AGC N/A
(too low) or no signal is
854-2 only range.
present.
WPS GREEN: On for three The device is not currently in GREEN: The Wi-Fi protected setup
minutes or until WPS button WPS mode and is waiting PBC procedure is in progress.
is pressed again. for the next authentication RED: Session overlap detected
RED: On for two minutes. attempt. (security risk). Wait for 2 minutes,
An error has occurred then press WPS button again to
unrelated to security such as restart. If error persists, refer to PIN-
no partner found, protocol based configuration method.
aborted. Press WPS button
again to restart. WPS
function.

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
111

Service LED States and Status

LED Bridged Mode RG Mode Mixed Mode


Appearance

OFF* No Ethernet port has been No IP address has been N/A


provisioned received or PPPoE session
authentication has not
occurred.
Solid GREEN At least one Ethernet port The GigaCenter has Same as RG Mode
(Indicates internet has been provisioned. received an IP addressed or
service) a PPPoE session
authentication (with
credentials) has been
completed.
Solid RED N/A GigaCenter attempted to Same as RG Mode
connect via IP and failed
(DHCP/PPPoE response or
authentication failed)
* For all modes, the Service Gateway is not powered and a physical broadband connection has not been detected.

Acronyms
Acronyms

ACS Auto Configuration Server AE Active Ethernet


AGC Automatic Gain Control ALG Application Level Gateway
AP Access Point CC Closed Caption
CLI Command Line Interface CoS Class of Service
DDN
CMS Calix Management System Dynamic Domain Name Service (System)
S
DHC
DFS Dynamic Frequency Selection Dynamic Host Configuration Protocol
P
DSC
DNS Domain Name Service (System) Differentiated Services Code Point
P
ESAP Ethernet Service Access Platform EWI Embedded Web Interface
FB Full Bridge FTP File Transfer Protocol
FXS Foreign Exchange Service GE Gigabit Ethernet
HB Half Bridge HSI High Speed Internet
IGMP Internet Group Management Protocol IP Internet Protocol
IP SRV IP Source Verify IPoE Internet Protocol over Ethernet
IPTV Internet Protocol Television ISP Internet Service Provider
MAC
LAN Local Area Network Media Access Controller Forced Forwarding
FF
MDU Multiple Dwelling Unit MEF Metro Ethernet Forum
MIM
MVR Multicast VLAN Registration Multiple-Input_Multiple_Output
O
MMR Microsoft Media Room NAT Network Address Translation
NFV Network Functions Virtualization NTP Network Time Protocol

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
112

Acronyms

OMCI ONT Management Control Interface ONT Optical Network Terminal


ONU Optical Network Unit OOB Out-of-Band
PBC Push Button Control PHY Physical Layer Protocol
PWE
PPPoE Point-to-Point over Ethernet Pseudo-wire End-to-End Emulation
3
QoS Quality of Service RG Residential Gateway
RON
RIP Routing Information Protocol Remote ONT Activation
TA
RSG Residential Service Gateway SFU Single Family Unit
SIP Session Initiation Protocol SISO Single-Input-Single-Output
SSID Service Set Identifier STB Set-top Box
TCP Transport Control Protocol TDM Time Division Multi-plexed
TFTP Trivial File Transfer Protocol UNI User Network Interface
UPnP Universal Plug 'n Play USB Universal Serial Bus
VAP Video Access Point VM Virtual Machine
VoIP Voice over Internet Protocol WAN Wide Area Network
WEP Wireless Encryption Protocol WMM Wireless Multimedia
WPA Wireless Protected Access WPS Wi-Fi Protected Set-up

XML Extensible Markup Language

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.
113

Proprietary Information: Not for use or disclosure except by written agreement with Calix.
© Calix. All Rights Reserved.

You might also like