| all | frequencies |
|
|
exhibits | applications |
|---|---|---|---|---|---|
| manuals | |||||
| app s | submitted / available | |||||||
|---|---|---|---|---|---|---|---|---|
| 1 |
|
Install Guide | Users Manual | 3.66 MiB | January 05 2007 / February 05 2007 | |||
| 1 |
|
User Guide | Users Manual | 3.28 MiB | January 05 2007 / February 05 2007 | |||
| 1 | External Photos | January 05 2007 / February 05 2007 | ||||||
| 1 | Internal Photos | January 05 2007 / February 05 2007 | ||||||
| 1 | RF Exposure Info | January 05 2007 / February 05 2007 | ||||||
| 1 | Test Setup Photos | January 05 2007 / February 05 2007 | ||||||
| 1 | Cover Letter(s) | January 05 2007 / February 05 2007 | ||||||
| 1 | Cover Letter(s) | January 05 2007 / February 05 2007 | ||||||
| 1 | ID Label/Location Info | January 05 2007 / February 05 2007 | ||||||
| 1 | Test Report | January 05 2007 / February 05 2007 |
| 1 | Install Guide | Users Manual | 3.66 MiB | January 05 2007 / February 05 2007 |
2Wire Gateway Installation Guide For 2701HGV DRAFT ONLY2Wire Confidential Contents Contents .......................................................................................................................................... 1 Getting Started .............................................................................................................................. 1 Remove or Disable Conflicting Applications ................................................................1 Check Your Computers Browser and System Requirements ........................................1 Browser Requirements ........................................................................................1 System Requirements .........................................................................................1 Connect the First Computer to the Gateway ............................................................................. 2 Choose a Computer and Connection Type ..................................................................2 Install the DSL Filter .................................................................................................2 For Wall-Mounted Phones .....................................................................................3 Ethernet Connection .................................................................................................4 Check Your Connections ......................................................................................4 Wireless Connection .................................................................................................5 Non-2Wire Wireless Adapter Configuration .............................................................6 USB Connection .......................................................................................................7 Install the 2Wire Gateway USB Driver - Windows ....................................................8 Install the 2Wire Gateway USB Driver - Macintosh .................................................8 Check Your Connections ......................................................................................8 Run the 2Wire Setup Wizard ....................................................................................................... 9 Windows XP/2K/ME/98SE .....................................................................................9 Macintosh OS 10.1.4/10.1.5/10.2.0 - 10.2.8/10.3.3 - 10.3.8 .................................9 Add Computers to the Network ................................................................................................. 10 Ethernet Connection ...............................................................................................11 USB Connection .....................................................................................................12 Wireless Connection ...............................................................................................13 Appendix A: Install the Gateway on Other Operating Systems ............................................. 14 Ethernet Connection ...............................................................................................14 USB Connection .....................................................................................................15 Configuring the Internet Connection ....................................................................16 Regulatory Information ............................................................................................................... 17 DRAFT ONLY2Wire Confidential Notice to Users 2006 2Wire, Inc. All rights reserved. This manual in whole or in part, may not be reproduced, translated, or reduced to any machine-
readable form without prior written approval. 2WIRE PROVIDES NO WARRANTY WITH REGARD TO THIS MANUAL, THE SOFTWARE, OR OTHER INFORMATION CONTAINED HEREIN AND HEREBY EXPRESSLY DISCLAIMS ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR ANY PARTICULAR PURPOSE WITH REGARD TO THIS MANUAL, THE SOFTWARE, OR SUCH OTHER INFORMATION, IN NO EVENT SHALL 2WIRE, INC. BE LIABLE FOR ANY INCIDENTAL, CONSEQUENTIAL, OR SPECIAL DAMAGES, WHETHER BASED ON TORT, CONTRACT, OR OTHERWISE, ARISING OUT OF OR IN CONNECTION WITH THIS MANUAL, THE SOFTWARE, OR OTHER INFORMATION CONTAINED HEREIN OR THE USE THEREOF. 2Wire, Inc. reserves the right to make any modification to this manual or the information contained herein at any time without notice. The software described herein is governed by the terms of a separate user license agreement. Updates and additions to software may require an additional charge. Subscriptions to online service providers may require a fee and credit card information. Financial services may require prior arrangements with participating financial institutions. 2Wire, the 2Wire logo, and HomePortal are registered trademarks, and HyperG, Greenlight, FullPass, and GuestPass are trademarks of 2Wire, Inc. All other trademarks are trademarks of their respective owners. 5100-000457-000 Rev B 03/2007 DRAFT ONLY2Wire Confidential Getting Started Remove or Disable Conflicting Applications Internet sharing software and PC based firewall applications typically interfere with the 2Wire gateway, and should be removed or disabled before you install the gateway. The 2Wire gateway provides the same features as the products listed below. If you have any of the following (or similar) applications installed on your computers, remove or disable them according to the manufacturers instructions before proceeding. Internet Sharing Applications Proxy Software Security Software Microsoft Internet Connection Sharing Wingate Norton Internet Security Intel Anypoint ISS 3Com HomeClick Sygate Black Ice Zone Alarm Check Your Computers Browser and System Requirements Verify that your computers meet the following minimum requirements:
Browser Requirements Windows: Microsoft Internet Explorer 5.5 or higher (included on the 2Wire CD), Netscape Navigator 4.7 or higher, or Firefox 1.0 or higher. Macintosh: Safari 1.0, Microsoft Internet Explorer 5.0, or Netscape 4.74 or higher. System Requirements
5 MB of available hard disk space for 2Wire gateway software.
Windows XP, Windows 2000, Windows NT 4.0 with Service Pack 6, Windows ME, Windows 98/98SE, or Mac OS 8.6 or higher.
Network adapter (such as Ethernet, USB, or 802.11b/g wireless). 1 DRAFT ONLY2Wire Confidential Connect the First Computer to the Gateway Congratulations on the purchase of your 2Wire gateway. To install your gateway and configure your network, follow these steps. Note: Features for different models may vary. Product details will be specified for each particular model. Choose a Computer and Connection Type There are many ways to set up your network, but typically the first computer is located in the same room as the gateway and your DSL connection. Ethernet is the preferred connection method for your first computer, although instructions for connecting via wireless and USB are also provided. The first computer you connect to the network is used to configure the 2Wire gateway for proper operation. Choose one of the following methods to connect your first computer to the gateway. Save and close all open programs before you begin connecting your gateway. Connection Type Ethernet Wireless USB Page page 4 page 5 page 7 Install the DSL Filter Note: New DSL customers only. Existing DSL customers with filters already installed should proceed to Ethernet Connection on page 4, Wireless Connection on page 5, or USB Connection on page 7. Regular telephone and Digital Subscriber Line (DSL) signals are carried over the same line. Converting your regular telephone line to DSL can cause high-pitched tones and static when using the phone. Installing a filter on every telephone or telephone device sharing the same telephone number as your DSL1 separates these signals and eliminates the noise. 1. Do not install DSL filters if your telephone line is only carrying a DSL signal. 2 DRAFT ONLY2Wire Confidential Connect the First Computer to the Gateway To install the DSL filter:
1. Locate the phone jack where you want to connect your 2Wire gateway. Insert the DSL filter into the jack. If you have a phone, answering machine, fax machine, satellite TV equipment, or other phone device in this jack location, plug it into the filter port labeled PHONE. Install a DSL filter on all other phone devices in your house (such as dial-up modems, fax machines, caller ID devices, and set top boxes). Plug each of these devices into the filter port labeled PHONE. 2. 3. 4. For Wall-Mounted Phones If you have a wall-mounted telephone, install a wall-mount DSL filter following these steps. 1. Lift the telephone from the wall pegs and disconnect the phone cord from the wall jack. 2. Connect the telephone cord from the back of the DSL filter into the wall jack. Align the keyhole slots on the filter with the wall plate pegs and press down gently to secure. 3. Connect the telephone cord to the phone jack located on the front of the mounted filter. 4. Attach the telephone to the mounting pegs on the DSL filter and your installation is complete. Note: The extra phone jack located at the bottom of the filter (labeled LINE) is provided should you wish to connect your gateway at this phone connection. 3 DRAFT ONLY2Wire Confidential Connect the First Computer to the Gateway Ethernet Connection Telephone wall jack with DSL Computer 2Wire DSL filter AC power L S D T E S E R S E N I L E N O H P R E W O P Gateway Figure 1. Gateway Connected Via Ethernet 1. Connect the provided power adapter from the gateways POWER port to an electrical outlet. The POWER light on the front of the gateway should be green. 2. Connect the provided gray phone cable from the gateways PHONE LINE port to the DSL filter jack labeled DSL/HPNA. 3. Connect the yellow Ethernet cable provided with the gateway from any available LOCAL ETHERNET port on the gateway to your computers Ethernet port. Check Your Connections With your computer completely started, verify the POWER and ETHERNET indicator lights on the front of the 2Wire gateway are green. If they are not, see Understanding the Indicator Lights on page 18. The INTERNET indicator light will not turn green until the gateway software has been installed and an Internet connection has been established. 4 DRAFT ONLY2Wire Confidential Connect the First Computer to the Gateway Wireless Connection Requires wireless-enabled notebook or a computer with an 802.11b/g wireless network adapter installed. Wireless adapters can be purchased from your service provider. Telephone wall jack with DSL AC power Gateway 2701 2Wire DSL filter L S D 2 T E S E R S E N I L E N O H P R E W O P Computer
(with 802.11g wireless adapter installed) Figure 2. Gateway Connected Via Wireless 1. Connect the provided AC power adapter from the 2Wire gateways POWER port to an electrical outlet. The POWER light on the front of the gateway should be green. 2. Connect the provided gray telephone cable from the gateways PHONE LINE port to a telephone jack with DSL service. 3. Install your wireless adapter according to the manufacturers instructions (see note below). Note: If you use a 2Wire wireless adapter (PCI, PC card, or USB adapter) for wireless networking, the 2Wire CD automatically configures it to communicate with the gateway during setup. If you are NOT using a 2Wire wireless adapter, you must manually configure your adapter to communicate with the gateway using the information on page 6. 5 DRAFT ONLY2Wire Confidential Connect the First Computer to the Gateway Non-2Wire Wireless Adapter Configuration Locating the Serial Number and Wireless Encryption Key The serial number of your 2Wire gateway is used as the network name (SSID). Beneath the serial number is a ten-digit number which is used as the encryption key. These are located on the bottom of your gateway
(shown in vertical orientation). You will need this information to configure your wireless adapter. 2Wire Gateway www.2Wire.com Made in Malaysia Patent No. Des. 437,289 5,1V 3A RG2701HGV-00 SN: 145511100110
[ 4119627022 ]
Assembly Number 4200-000428-000 2701HGV Tested To Comply With FCC Standards FCC ID: PGR2W2701 FLX Concentrador Inalambrico para Red (ADSL) Marca: 2Wire Modelo: RG2701HGV-00 Complies with Part 68, FCC Rules FCC Reg: 66KRDL01BTW2701 REN=0.1 This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. POWER E THERNE T WIRELESS PHONE 1 PHONE 2 USB-PC DSL INTERNE T 2701HGV Configuring the Adapter 1. Install and configure your wireless adapter according to the manufacturers instructions. 2. Use the network adapter configuration software or Windows network connection wizard to set the network name (SSID) and encryption key (WEP). a. The network name is the word 2WIRE (in all capital letters), followed by the last three digits of the gateway serial number (for example, 2WIRE110). b. The encryption key is a 64-bit hex value, located beneath the bar code on the bottom of the 2Wire gateway. In the example, it is 4119627022. c. For Mac OS X users, you may need to enter the $ character at the beginning of the encryption key
(for example, $4119627022). 6 DRAFT ONLY2Wire Confidential Connect the First Computer to the Gateway USB Connection Telephone wall jack Computer DSL filter AC power E N I L E N O H P C P
B S U E N O H P E L E T T E S E R R E W O P Gateway 2701 USB cable Figure 3. Gateway Connected Via USB 1. Connect the provided AC power adapter from the 2Wire gateways POWER port to an electrical outlet. The POWER light on the front of the gateway should be green. 2. Connect the provided blue USB cable from the gateways USB port to the USB port on your computer. 3. Connect the provided gray telephone cable from the gateways PHONE LINE port to a telephone jack with DSL service. 7 DRAFT ONLY2Wire Confidential Connect the First Computer to the Gateway Install the 2Wire Gateway USB Driver - Windows 1. Power on your computer and place the 2Wire CD in your computers CD-ROM drive. 2. If the Add Hardware Wizard displays, follow the on-screen instructions. If prompted to identify where to search for drivers, deselect Floppy Disk drive and check CD-ROM drive. 3. After the driver installs click Finish to complete the driver installation. The Setup Wizard will resume when your PC has rebooted. Note: Microsoft Windows 98 users may be prompted to insert the Windows 98 installation CD-ROM after installing the 2Wire gateway USB drivers. After the Windows 98 updates are complete, remove the Windows 98 CD and reinsert the 2Wire CD into your CD-ROM prior to rebooting your PC. Install the 2Wire Gateway USB Driver - Macintosh Note: The 2Wire gateway supports USB for Macintosh OS 8.6, 9.2, 10.1.4, 10.1.5, 10.2.0, 10.2.1 to 10.2.6, 10.3.3 to 10.3.9, 10.4.0, and 10.4.1. Before making your USB connection to the gateway, you must install the 2Wire gateway USB driver on your computer. The following instructions are for USB installation on Macintosh computers running OS 10.2. 1. Power on your computer and place the 2Wire CD in your computers CD-ROM drive. 2. Double-click the 2Wire CD icon on your desktop. 3. Double-click 2Wire USB to begin the driver installation. 4. 5. If you have set up an administrator name and password, the Authenticate screen opens. Enter your administrator name and password and click OK. Follow the on-screen instructions. When the driver installation is complete, you will be prompted to restart your computer. 6. After your computer restarts, connect the provided blue USB cable from the USB-PC port on the 2Wire gateway to your computers USB port. Check Your Connections With your computer completely started, verify the POWER and USB-PC indicator lights on the front of the 2Wire gateway are green. If they are not, see Understanding the Indicator Lights on page 18. The INTERNET indicator light will not turn green until the gateway software has been installed and an Internet connection has been established. 8 DRAFT ONLY2Wire Confidential Run the 2Wire Setup Wizard Windows XP/2K/ME/98SE 1. Insert the 2Wire CD and follow the on-screen instructions. If the 2Wire Setup Wizard does not automatically start:
Double-click the My Computer icon located on the desktop. Double-click the icon that corresponds to your CD-ROM drive. Double-click Setup.exe and follow the on-screen instructions. 2. If prompted by the Setup Wizard, enter the 20-digit key code you received from your service provider. If you were not provided with a key code, contact your service provider. Macintosh OS 10.1.4/10.1.5/10.2.0 - 10.2.8/10.3.3 - 10.3.8 Note: MAC OS 9.X AND OTHER OPERATING SYSTEM USERS: Users running Mac OS 9.X and operating systems other than those stated above must perform a manual configuration of the gateway. Refer to Appendix A: Install the Gateway on Other Operating Systems on page 14 for step-by-step instructions. 1. Insert the 2Wire CD. 2. Double-click the 2Wire icon. 3. Double-click the 2Wire Setup Wizard icon. 4. If prompted by the Setup Wizard, enter the 20-digit key code you received from your service provider. If you were not provided with a key code, contact your service provider. 9 DRAFT ONLY2Wire Confidential Add Computers to the Network After your first computer is connected to the 2Wire gateway and your Internet connection has been established, you can connect other computers to the network. Use any of the following methods to connect additional computers to your network. Connection Type Ethernet Page page 11 USB page 12 Wireless page 13 10 DRAFT ONLY2Wire Confidential Add Computers to the Network Ethernet Connection Telephone wall jack with DSL DSL filter AC Power Additional computer with Ethernet card First computer with Ethernet connection L S D T E S E R S E N I L E N O H P R E W O P Figure 4. Gateway Connected to Second Computer Via Ethernet 1. Connect an Ethernet cable from any available LOCAL ETHERNET1 port on the gateway to your computers Ethernet port. 1. The number of Ethernet ports vary by model (from one to four). If your gateway has four Ethernet ports, you can connect up to four computers to your network via Ethernet. 11 DRAFT ONLY2Wire Confidential Telephone wall jack with DSL DSL filter First computer with Ethernet card Add Computers to the Network USB Connection AC Power Additional computer with available USB port E N I L E N O H P C P
B S U E N O H P E L E T T E S E R R E W O P Figure 5. Gateway Connected to Second Computer Via USB 1. Connect the provided blue USB cable from the gateways USB-PC port to the USB port on your computer. 2. Install the USB driver (refer to page 8 for instructions). 3. Repeat Run the 2Wire Setup Wizard on page 9. 12 DRAFT ONLY2Wire Confidential Add Computers to the Network Wireless Connection Requires a computer with an 802.11b/g wireless network adapter installed. Wireless adapters are purchased separately from the 2Wire gateway. Telephone wall jack with DSL AC power Gateway 2701 2Wire DSL filter L S D 2 T E S E R S E N I L E N O H P R E W O P Computer
(with 802.11g wireless adapter installed) Figure 6. Gateway Connected to Second Computer Via Wireless Note: If you use a 2Wire wireless adapter (PCI, PC card, or USB adapter) for wireless networking, the gateway installation software automatically configures it to communicate with the gateway during setup. If you are NOT using a 2Wire wireless adapter, you must manually configure your adapter to communicate with the gateway using the information on page 6. 1. Install your wireless adapter according to the manufacturers instructions (see note above). 2. Repeat Run the 2Wire Setup Wizard on page 9. 13 DRAFT ONLY2Wire Confidential Appendix A: Install the Gateway on Other Operating Systems Follow these instructions if you are using an operating system that is not supported by the 2Wire CD (such as any Macintosh OS prior to 10.2, UNIX, or Linux). There are many ways to set up your network, but typically the first computer is located in the same room as the gateway and your DSL connection. Ethernet is the preferred connection method for your first computer, although instructions for connecting via USB are also provided. Ethernet Connection DSL filter Computer L S D T E S E R S E N I L E N O H P R E W O P Gateway 2701 Figure 7. Gateway Connected Via Ethernet (Macintosh) 1. Install DSL phone filters according to the instructions on page 2. 2. Connect the provided power adapter from the gateways POWER port to an electrical outlet. 3. Connect the provided gray phone cable from the gateways PHONE LINE port to the DSL filter jack labeled DSL/HPNA. 4. Connect the yellow Ethernet cable provided with the gateway from a LOCAL ETHERNET port on the gateway to your computers Ethernet port. 14 DRAFT ONLY2Wire Confidential Appendix A: Install the Gateway on Other Operating Systems 5. Proceed to Configuring the Internet Connection on page 16. USB Connection Note: Connecting your computer to the gateway using USB requires an available USB port. Only one Windows or Macintosh computer can be directly connected to the 2Wire gateway using the USB connection. The following instructions are for Macintosh computers running OS 9.x. DSL filter Computer E N I L E N O H P C P
B S U E N O H P E L E T T E S E R R E W O P Gateway 2701 USB cable Figure 8. Gateway Connected Via USB (Macintosh) 1. 2. Install DSL phone filters according to the instructions on page 2. Insert the 2Wire CD in the computers CD-ROM drive. 3. Double-click the 2Wire CD icon on your desktop. 4. Double-click 2Wire USB to begin the driver installation. 5. 6. If you have set up an administrator name and password, the Authenticate screen opens. Enter your administrator name and password and click OK. Follow the on-screen instructions. When the driver installation is complete, you will be prompted to restart your computer. 7. After your computer restarts, connect the provided blue USB cable from the USB-PC port on the 2Wire gateway to your computers USB port. 15 DRAFT ONLY2Wire Confidential Appendix A: Install the Gateway on Other Operating Systems 8. Open the network Control Panel by selecting the Apple icon > Control Panel > TCP/IP. 9. Verify that Connect Via: 2Wire USB Remote NDIS is selected to set the network adapter as active. 10. Click Save to complete your installation. 11. Proceed to Configuring the Internet Connection on page 16. Configuring the Internet Connection Now that your first computer is connected to the gateway, you need to configure your gateway to communicate with your Internet service provider. To activate your Internet account:
1. Open your Internet browser. 2. Type http://gateway.2wire.net/setup into the browsers address line. 3. When prompted to enter a key code, enter the key code provided by your Internet service in the key code field, and click NEXT. 4. Select your Local Time Zone and click NEXT. 5. You may be prompted to enter service provider information such as username and password. Enter any required service provider information and click NEXT. 6. The connection process will begin. During this process the INTERNET light on the front of the gateway will first blink green then turn solid green. This step could take up to five minutes as the gateway searches for your broadband service. 7. The gateway will now connect to the Internet. This process may take several minutes. If the registration screen opens, click the REGISTER button and complete the 2Wire registration process. 16 DRAFT ONLY2Wire Confidential Regulatory Information Declaration of Conformity Trade Name:
2700 Series Gateway Responsible Party:
2Wire, Inc. Address:
1704 Automation Parkway San Jose, CA Telephone:
408.856.1600 This device complies with Part 15 of the FCC rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:
Reorient or relocate the receiving antenna. Increase the separation between the equipment and the receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help. You are cautioned that any changes or modifications not expressly approved in this manual could void your authority to operate this equipment. Only peripherals (computer input/output devices, terminals, printers, and so forth) that comply with FCC Class B limits may be attached to this computer product. Operation with noncompliant peripherals is likely to result in interference to radio and television reception. WARNING: While this device is in operation, a separation distance of at least 20 cm (8 inches) must be maintained between the radiating antenna inside the ERU and the bodies of all persons exposed to the transmitter in order to meet the FCC RF exposure guidelines. Making changes to the antenna or the device is not permitted. Doing so may result in the installed system exceeding RF exposure requirements. This device must not be co-located or operated in conjunction with any other antenna or radio transmitter. Installers and end users must follow the installation instructions provided in this guide. FCC Part 68 This equipment complies with Part 68 of the FCC rules. On the bottom of this equipment is a label that contains, among other information, the FCC equivalence number (REN) for this equipment. If requested, this information must be provided to the telephone company. The REN is used to determine the quantity of devices that may be connected to the telephone line. Excessive RENs on the telephone line may result in the devices not ringing in response to an incoming call. In most, but not all areas, the sum of the RENs should not exceed five. To be certain of the number of devices that may be connected to the line, as determined by the total RENs, contact the telephone company to determine the maximum REN for the calling area. 17 DRAFT ONLY2Wire Confidential Regulatory Information If the terminal equipment causes harm to the telephone network, the telephone company will notify you in advance that temporary discontinuance of service may be required. But if advance notice is not practical, the telephone company will notify the customer as soon as possible. Also, you will be advised of your right to file a complaint with the FCC if you believe it is necessary. The telephone company may make changes in its facilities, equipment, operations or procedures that could affect the operations of the equipment. If this happens, the telephone company will provide advance notice in order for you to make the necessary modifications in order to maintain uninterrupted service. If trouble is experienced with this equipment, please contact the store, reseller, or agent from whom the product was purchased. Repair of this equipment should be made only by the 2Wire Service Center or a 2Wire authorized agent. 18 DRAFT ONLY2Wire Confidential
| 1 | User Guide | Users Manual | 3.28 MiB | January 05 2007 / February 05 2007 |
2Wire Gateway User Guide Notice to Users 2006 2Wire, Inc. All rights reserved. This manual in whole or in part, may not be reproduced, translated, or reduced to any machine-
readable form without prior written approval. 2WIRE PROVIDES NO WARRANTY WITH REGARD TO THIS MANUAL, THE SOFTWARE, OR OTHER INFORMATION CONTAINED HEREIN AND HEREBY EXPRESSLY DISCLAIMS ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR ANY PARTICULAR PURPOSE WITH REGARD TO THIS MANUAL, THE SOFTWARE, OR SUCH OTHER INFORMATION, IN NO EVENT SHALL 2WIRE, INC. BE LIABLE FOR ANY INCIDENTAL, CONSEQUENTIAL, OR SPECIAL DAMAGES, WHETHER BASED ON TORT, CONTRACT, OR OTHERWISE, ARISING OUT OF OR IN CONNECTION WITH THIS MANUAL, THE SOFTWARE, OR OTHER INFORMATION CONTAINED HEREIN OR THE USE THEREOF. 2Wire, Inc. reserves the right to make any modification to this manual or the information contained herein at any time without notice. The software described herein is governed by the terms of a separate user license agreement. Updates and additions to software may require an additional charge. Subscriptions to online service providers may require a fee and credit card information. Financial services may require prior arrangements with participating financial institutions. 2Wire, the 2Wire logo, and HomePortal are registered trademarks, and HyperG, Greenlight, FullPass, and GuestPass are trademarks of 2Wire, Inc. All other trademarks are trademarks of their respective owners. 5100-000326-000 Rev A Contents Introduction Networking Technology Overview . 1 System Tab Viewing Your System Summary . 2 Network at a Glance Panel . 3 System Area of the Network at a Glance Panel . 3 Broadband Link Area of the Network at a Glance Panel . 4 Home Network Area of the Network at a Glance Panel . 4 Enabling Enhanced Services . 5 Web Remote Access . 5 Firewall Monitor . 5 Parental Controls . 5 Setting a System Password . 6 Resetting the System Password . 7 Changing Your Time Zone Settings . 8 Viewing System Details . 9 Broadband Link Tab Viewing Your Broadband Link Summary . 10 Connection Status . 10 Connection Speed . 11 Connection Information . 11 Finding Your Hardware Address . 11 Connection Details . 12 Monitor Internet Connection . 15 Test Connection Speed . 16 Using Broadband Diagnostics . 16 Viewing Statistics . 17 Using Advanced Settings . 19 Modifying DSL and ATM Settings . 20 Modifying Broadband Connection Settings . 21 Modifying the Hardware Address . 21 Enabling Hostname Override . 21 Modifying the Broadband IP . 21 Modifying the Broadband DNS . 22 i Contents Home Network Tab Viewing Your Home Network Summary . 23 Understanding the Local Devices Panel . 23 Understanding the Status at a Glance Panel . 25 Monitoring Your Wireless Settings . 25 Customizing Security Settings . 27 Configuring Additional Settings . 28 Configuring Advanced Settings . 28 Setting up a Private Network . 28 Setting Up a Public Network . 30 Setting Up a Bridge Network . 31 Showing a Device as Inactive . 31 VoIP Network Tab Configuring the VoIP Phones . 32 Firewall Tab Firewall Features . 35 Viewing Your Firewall Summary . 36 Hosting an Application . 37 Updating the Application Profile List . 39 Adding an Application Profile . 39 Allowing all Applications (DMZplus) . 41 Viewing the Firewall Log . 43 Configuring the Firewall (Advanced) . 45 Enabling Advanced Security . 45 Stealth Mode . 46 Block Ping . 47 Strict UDP Session Control . 48 Allowing Inbound and Outbound Traffic . 49 Disabling Attack Detection . 49 Management and Diagnostic Console Accessing the MDC . 52 Using the MDC . 52 System Summary Page . 54 Broadband Link Pages . 54 Local Network Pages . 54 Firewall Pages . 54 Troubleshooting Pages . 54 Advanced Pages . 54 Remote Management Feature . 55 System Summary Page . 56 Broadband Link - Summary Page . 58 Broadband Link - Statistics Page . 61 Broadband Link - Detailed DSL Statistics Page . 63 Broadband Link - Configuration Page . 66 Modifying DSL and ATM Settings . 67 Modifying Internet Connection and Authentication Settings . 67 ii Contents Modifying Hardware Address . 68 Modifying Internet Address Settings . 68 Modifying DNS Information . 68 Local Network - Status Page . 69 Local Network - Statistics Page . 71 Local Network - Device List Page . 73 Local Network - Wireless Settings Page . 74 Customizing Security Settings . 75 Additional Settings . 75 Local Network - Configuration Page . 76 Private Network Settings . 76 Public Network Settings . 77 Bridge Network Settings . 77 Display Settings . 77 Enable Router Behind Router Alert . 77 Local Network - Address Allocation Page . 78 Firewall - Settings Page . 79 Hosting an Application . 79 Creating an Application Profile . 80 Allowing all applications . 82 Firewall - Detailed Information Page . 83 Pinholes . 83 NAT Sessions . 83 Firewall - Advanced Settings Page . 84 Enabling Security Features . 85 Controlling Inbound and Outbound Traffic . 85 Disabling Attack Detection . 85 Enabling Full Logging . 85 Voice - Configure Server Page . 86 Troubleshooting - DSL Diagnostics Page . 88 Analyzing General Information . 88 Reviewing Training History . 90 Reviewing Bitloading . 92 Troubleshooting - Event Log Page . 93 Troubleshooting - Network Tests Page . 95 Troubleshooting - Upgrade History Page . 97 Troubleshooting - Resets Page . 98 Advanced - Syslog Settings Page . 100 Advanced - Provisioning Info Page . 101 Advanced - Configure Time Services Page . 103 Advanced - Configure Services Page . 105 Routing . 105 Changing Timeout Parameters . 108 Enabling Broadband Status Notification . 108 Enabling Missing DSL Filter Notification . 108 Enabling SIP Application Layer Gateway . 108 Changing the Upstream MTU . 108 Advanced - Static Routes . 109 Advanced - DNS Resolve Page . 111 iii Advanced - Traffic Shaping Page . 112 Advanced - Link Manager States Page . 113 Advanced - Detailed Log Page . 116 Contents Glossary Regulatory Information iv Introduction The 2Wire gateway allows you to create a network with your computers and peripheral devices. Following are just a few of the benefits derived from using the 2Wire gateway to network your home or office. High performance integrated modem. 2Wires technology improves DSL1 performance, especially for homes further away from the local exchange. It also minimizes common interference found when other devices (such as dimmer switches or fluorescent lighting) are in contact with the DSL line. Super-fast router. The 2Wire gateways router provides the fastest data transfer speeds available between your network and the Internet. The high-performance router distributes data seamlessly to all of the computers on your network, without a dramatic loss of performance or speed. Professional-grade firewall. The 2Wire gateway firewall includes both standard NAT/PAT security and Stateful Packet Inspection to defend against Denial of Service Internet attacks. Flexible networking. The 2Wire gateway includes a variety of home networking technologies in one box:
Ethernet, direct USB, and HyperG wireless2. Use any or all of the following technologies to create a network with your computers and peripherals. Networking Technology Overview Ethernet. Ethernet is a local area network (LAN) technology that transmits information between computers at speeds of 10 or 100 Mbps. 2Wire gateways have either 1 or 4 Ethernet ports for directly connecting computers or devices. If your home or office is wired for Ethernet, you can use the Ethernet interface(s) on the gateway to create a broadband network. USB. The 2Wire gateways USB 1.1 port allows you to directly connect a computer or other network-ready device. Wireless. The 2Wire gateway includes an integrated wireless access point, which allows users to roam wirelessly throughout the home or office. 2Wire's high-powered wireless technology virtually eliminates wireless coldspots in the home. The 2Wire gateways high power 400mW transmitter ensures that users benefit from increased wireless bandwidth throughout the coverage area. In addition, the 2Wire gateway employs a special triple antenna design. The third antenna is used only for transmitting packets, thus mitigating the power loss associated with switching the antenna use back and forth between transmit and receive. This results in greater access point sensitivity, as antenna placement can be better optimized with a dedicated set of receive-only antennas. 1. The 200 series gateways connect via Ethernet. 2. Some interfaces are not available on specific models. 1 System Tab This chapter describes the 2Wire gateway System features. Note: 2Wire recommends that you use Internet Explorer 5.5 (or higher) or Netscape 6 (or higher). Viewing Your System Summary The System Summary page provides general information and links to your systems most commonly used features. To access the System Summary page:
Open a Web browser and access the gateway user interface by entering http://2wire.gateway.net.
Click the System tab to open the System Summary page. Figure 1. System Summary Page 2 Network at a Glance Panel The Network at a Glance panel provides a summary of the System, Broadband Link, and Home Network states of your gateway. System Tab System Area Broadband Link Area Home Network Area Figure 2. Network at a Glance Panel System Area of the Network at a Glance Panel The System area of the Network at a Glance panel displays your 2Wire gateway model name, the version of gateway software that you are using, and the status of your gateway password. The diamond symbol in this area indicates the gateways POWER light status and corresponds to the Power light on the front of your gateway. The following table shows a list of possible POWER light states and their associated meanings:
Power Light Off Blinking Green Solid Green Blinking Orange Solid Red Condition Power is not being supplied to the system. The power supply is not plugged in correctly, or the power adapter has malfunctioned. The system is performing a self test. Power is on. The gateway is undergoing a software upgrade. System error. Contact Technical Support. If you have not set a system password, the Set system password link displays. If you have set a password, the Change system password link displays. You must enter the system password whenever you change system settings. Note: For additional information, refer to Setting a System Password on page 6. Click the Privacy policy link to review the 2Wire privacy policy. 3 System Tab Broadband Link Area of the Network at a Glance Panel The Broadband Link area of the Network at a Glance panel displays the overall status of your gateways physical connectivity. The diamond symbol in this area indicates the overall status of the broadband link and corresponds to the internet light on the front of your gateway. The following table shows a list of possible BROADBAND LINK light states and their associated meanings:
Broadband Link Light Condition Off Solid Green The gateway has been unable to detect a DSL signal. DSL signal detected; the gateway is attempt-
ing to train. The gateway is fully connected to your broad-
band service(s). Connection Speed displays the broadband speed for which DSL is configured by your ISP. Both the Incoming
(or Downstream from your service provider to your system) and Outgoing (or Upstream from your system to your service provider) connection rates are shown. The actual throughput of your Internet connection rate (such as downloading a file from a Web site) will be somewhat less, because of the overhead required to send information over the Internet. Accessing the Broadband Link Summary Page The Broadband Link Summary page provides general information about the current status of your broadband link connection and your system configuration. To access the Broadband Link Summary page, click the Broadband Link icon or the View summary link. Launching the 2Wire Bandwidth Meter The Bandwidth Meter measures the maximum data throughput obtained from 2Wires Web site to your system. Because it tests the speed over the Internet, your results may vary, depending on Internet conditions. To launch the 2Wire Bandwidth Meter, click the Test connection speed link. Home Network Area of the Network at a Glance Panel The Home Network area of the Network at a Glance panel displays your systems LOCAL NETWORK light status and a list of the devices currently connected to your local network. The diamond symbol in this area indicates the overall status of the network and corresponds to the Ethernet, USB, or Wireless light on the front of your gateway. Ethernet, USB, or Wireless Light Condition Off Solid Green The gateway is powered off or booting up. Device(s) connected via Ethernet, USB, or Wireless. 4 System Tab Accessing the Home Network Summary Page The Home Network Summary page displays information about the devices installed on your network. To access the Home Network Summary page, click the View the home network link. Enabling Enhanced Services 2Wire provides a suite of enhanced services: Web Remote Access, Firewall Monitor, and Parental Controls. If your service provider offers these enhanced services, links to set them up are available on the gateway Home page. Following is a brief description of these services. Web Remote Access The Web Remote Access enhanced service allows you to access your home computer files from remote locations using any standard Web browser. Web Remote Access authenticates and encrypts access between the Web browser and the 2Wire gateway, enabling you to securely access and download important files or manage other enhanced services such as Parental Controls or Firewall Monitor. You can optionally define a unique Web Domain Name during setup (for example, http://
myname.accessmyhome.net), making it easy for users that are allowed to access the home network to manage the gateway when away from the home. For additional information, please refer to the Web Remote Access User Guide. Firewall Monitor The 2Wire Firewall Monitor enhanced service extends the professional-grade firewall capabilities of your 2Wire gateway by continuously assessing threats to your home network. Firewall Monitor allows you to:
Automatically download updates to your firewall software to protect against new threats.
Receive on-screen notification to alert you of network attacks.
Review details about attacks blocked and the source of the attacks. For additional information, please refer to the Firewall Monitor User Guide. Parental Controls The 2Wire Parental Controls enhanced service offers two features that allow parents to maintain control over what their children can access on the Internet, and how often: Content Screening and Internet Access Controls. Content Screening allows you to protect your children from Websites with questionable content. You control what sites or types of sites your child can and cannot access. Internet Access Control gives you power to decide when your child can use the Internet and allows you to restrict Internet access by day of week and time of day. For additional information, please refer to the Parental Controls User Guide. 5 System Tab Setting a System Password Setting a system password protects your gateway settings from being modified or changed by someone who has not been given permission to do so. After setting a system password, you will be required to enter it whenever you attempt to access a gateway configuration page for example, if you try to change the gateways broadband connection settings or upgrade the gateway software. If a password has not been set, a reminder notice is displayed when you attempt to access pages where settings can be changed. To set your system password:
Open a Web browser and access the gateway user interface by entering http://2wire.gateway.net.
Click the System tab.
Click the System Password link in the System area of the Network at a Glance panel to open the Edit System Password page. Figure 3. Edit System Password Page 1. 2. 3. In the Settings panel, click the Enable checkbox. In the Enter New Password field, enter your password. In the Confirm New Password field, re-enter your password. 4. Optional: In the Enter Your Hint field, enter a hint. A hint is a word, phrase, or question that reminds you what the password is. There is an I forgot the password link on the password entry page. When you click this link, it shows you your hint and allows you to enter your password. 5. Click SAVE. 6 To disable password protection, deselect the Enable checkbox and click SAVE. To safeguard your network against unauthorized users, it is also a good practice to periodically change your password. System Tab Resetting the System Password If you forget your password and still cannot remember it after seeing your hint, click the I still cant remember the password link. The Reset System Password page opens. Figure 4. Reset System Password Page To obtain access to your system:
1. 2. 3. In the System Key field enter the 10-digit system key located on the bottom of your gateway. In the Enter New Password field, enter a new system password. In the Confirm New Password field, re-
enter the system password. In the Enter Your Hint field, enter an appropriate hint as described under Setting a System Password on page 6. 4. Click Submit. 7 System Tab Changing Your Time Zone Settings The 2Wire gateway sets the time automatically using time servers on the Internet. It retrieves date/time information in Greenwich Mean Time (GMT). Your local time is set using the Time Zone setting you configured when you set up your system. If your Time Zone is incorrectly set, you can change it in the Edit Date and Time Settings page. To change your time zone settings:
Open a Web browser and access the gateway user interface by entering http://2wire.gateway.net.
Click the System tab.
Click the Date and Time Settings link in the System area of the Network at a Glance panel to open the Edit Date and Time Settings page. Figure 5. Edit Date and Time Settings Page 1. From the drop-down menu, select the time zone. 2. Click SAVE. 8 System Tab Viewing System Details The System Details page provides information about your gateway, any enhanced services you may have, and provides a link that you can use to restart your system. To view the System Details page:
Open a Web browser and access the gateway user interface by entering http://2wire.gateway.net.
Click the System tab.
Click the View details link in the System area of the Network at a Glance panel to open the View System Details page. Figure 6. View System Details Page The Restart the system link restarts your system. Your network connections and your broadband connectivity will be briefly disrupted until your system restarts and broadband connectivity is re-established with your broadband service provider. The View available upgrades and options link accesses a page that displays available software upgrades or enhanced services. If your gateway is running the latest software or enhanced services are not available, the following message displays. 9 Broadband Link Tab This chapter describes the 2Wire gateway Broadband Link features, and provides detailed instructions on how to customize your broadband settings. Viewing Your Broadband Link Summary The Broadband Link Summary page provides general information about the current status of your broadband link connection and your system configuration. To access your Broadband Link Summary:
Open a Web browser and access the gateway user interface by entering http://2Wire.gateway.net.
Click the Broadband Link tab.
Click the Summary link under the tab to open the View Broadband Link Summary page. Figure 7. View Broadband Link Summary Page The Connection panel shows information about your gateways connection to the Internet. The elements displayed will vary, depending on your gateway model and the type of broadband service you have. Connection Status There are two ways you can check the current status of your gateways broadband connection: you can use the DSL and Internet indicator lights on the front of your gateway, or, if your computer is connected to the network, you can view the user interface. 10 Broadband Link Tab Connection Speed Connection Speed shows the incoming and outgoing data rates of your DSL connection, measured in kilobits per second (Kbps). Incoming is the speed of data flowing from the Internet to your network;
Outgoing is the speed of data flowing from your network to the Internet. Connection Information Connection Information shows the following basic system configuration information:
Internet Address. The broadband IP address assigned by your service provider to your gateway so that it can communicate on the Internet. This address is assigned to you by your Internet Service Provider for all communication on the Internet, and can either be Static (permanently assigned and manually entered) or Dynamic (automatically assigned and configured), depending on your subscribed service type.
Hardware Address. (Also known as the MAC address, physical address or, if you are a cable customer, the C number.) When your gateway is connected to the broadband network, an association is made between its unique hardware address and its Internet address before it can communicate to the Internet. Note: This field displays the hardware address only if the gateway is connected to the Internet via PPPoE.
Key Code. The activation code that tells your gateway how to connect to your service provider. The key code is used during the installation process to customize the setup screens and settings for your broadband provider. Finding Your Hardware Address If required to find your Hardware (MAC) address, refer to the following table and follow the instructions for your operating system. Windows OS Macintosh 8.x & 9.x Macintosh OS X 1. Click the Start menu. 1. Click the Apple icon. 1. Click the Apple icon. 2. Click Run. 2. Select Control Panels. 2. Select System 3. Enter cmd in the 3. Select TCP/IP. entry field. 4. Click OK. 5. At the C:\> prompt, enter ipconfig/all. 6. Locate the Physical address (for example, 01-24-H5-18-B3-00). 7. To close the window, enter exit at the C:\> prompt. 4. 5. From the Configure pulldown menu, select Built-in Ethernet. From the File menu, select Get Info. Your MAC address appears as either the Hardware Address or the Ethernet Address. Preferences. 3. Click the Network icon. 4. Click the TCP/IP tab. 5. From the Configure pulldown menu, select Built-in Ethernet. Your MAC address appears in the lower-left corner as the Ethernet Address. 11 Connection Details The View connection details link accesses the Broadband Link Details page, which displays technical information about your broadband connection. Technical support representatives use this information to help troubleshoot problems with your broadband connection. Broadband Link Tab Figure 8. View Broadband Link Details Page The following table shows the information that may be displayed on the Broadband Link Details page. Note: The information displayed depends on the type of broadband service you have and your gateway model. Item DSL Connection DSL Line (Wire Pair) Protocol Description The DSL signal can be transmitted on Line 1 (inner pair) or Line 2 (outer pair). During installation, the gateway automati-
cally detects on which line the DSL signal is being transmit-
ted. Displays which DSL protocol is being used to communicate between your system and your service provider. 12 Broadband Link Tab Item Downstream Rate Upstream Rate Channel Current Noise Margin Current Attenuation Current Output Power DSLAM Vendor Information PVC Info Internet Connection Details Connection Type Username Description The speed at which data comes over your broadband connec-
tion from the Internet to your network, measured in kilobits per second (kbps). The speed at which data goes over your broadband connec-
tion from your network to the Internet, measured in kilobits per second (kbps). The setting in this field is determined by your ISPs DSLAM equipment. Indicates how much the noise on the DSL line can increase before it begins to affect the DSL signal. As the noise on the DSL line increases, the margin will approach zero. If the noise exceeds the current noise margin, the DSL signal will be lost. The level is measured in decibels (dBs). Represents the decrease in signal strength between origina-
tion of the DSL (Central Office) and your gateway. Customers who live close to their Central Office usually will have less sig-
nal loss and a low current attenuation. The level is measured in decibels (dBs). The current DSL transmit power of your gateway. The level is measured in decibels (dBs). A DSLAM is the piece of equipment located in the Central Office (CO) that provides the DSL signal to your DSL line. The Vendor Information identifies information about the configura-
tion of this equipment. Displays the pair of numbers that uniquely identifies the ATM virtual circuit between the system and the provider of your DSL service. Identifies the method by which the gateway connects to the Internet Service Provider (ISP): PPPoE, PPPoA, or Direct. The name used to connect with your Internet Service Provider
(ISP). Your username was either assigned to you or configured by you during the install process. The correct username is required to successfully connect to the Internet. 13 Broadband Link Tab Item Internet Address Subnet Mask Default Gateway Primary Domain Name Server Description A number that is assigned to a computer so that it can com-
municate on a network and on the Internet. This address is assigned to you by your Internet Service Provider for all com-
munication on the Internet, and can be either Static (perma-
nently assigned and manually entered) or Dynamic
(automatically assigned and configured). The typical configuration is for your ISP to automatically assign and configure an Internet address (Dynamic) when your system connects to the Internet. Businesses or power users may use a static address enabling them to run advanced services such as Internet servers and video conferencing. Static addresses typically cost more because they must be leased from the ISP. If you receive your Internet address settings automatically, the subnet mask has been set for you. If you manually set your Internet address (Static IP), this is the information that was provided to you by your ISP and entered by you during gateway installation. Part of the Internet address settings and used in conjunction with your Internet address. If you receive your Internet address settings automatically, the subnet mask has been set for you. If you manually set your Internet address (Static IP), this is the information that was provided to you by your ISP and entered by you during gateway installation. Part of the Internet address settings. The default gateway is a device your 2Wire gateway communicates with directly to give you access to the Internet. If you receive your Internet address settings automatically, the subnet mask has been set for you. If you manually set your Internet address (Static IP), this is the information that was provided to you by your ISP and entered by you during the sys-
tem installation. Part of the Internet address settings. A domain name is a meaningful, easy-to-remember handle for an Internet address. The DNS allows Internet users to specify a name
(domain name) to reach a Web page (for example, www.domainname.com) instead of its Internet address (for example, 111.222.111.222). When you enter the name of a Web location (URL), the DNS looks up the name and resolves it to the Web pages Internet address. If you receive your Internet address settings automatically, the subnet mask has been set for you. If you manually set your Internet address (static IP), this is the information that was provided to you by your ISP and entered by you during gateway installation. 14 Broadband Link Tab Item Description Secondary Domain Name Server Domain Used as a backup if the Primary server fails to respond. If you receive your Internet address settings automatically, the subnet mask has been set for you. If you manually set your Internet address (Static IP), this is the information that was provided to you by your ISP and entered by you during the sys-
tem installation. This parameter may not be necessary and may be left blank. The name that associates your gateway with your ISP on the broadband link. This parameter may not be necessary and may be left blank. If you receive your Internet address settings automatically, the subnet mask has been set for you. If you manually set your Internet address (Static IP), this is the information that was provided to you by your ISP and entered by you during gateway installation. Maximum Transmission Unit
(MTU) Shows the maximum size allowed on packets that are sent to and from your network to your ISP. Gateway Ping DNS Communication Configuration Server Post The 2Wire gateway periodically checks the connection between itself and your ISP's Default Gateway. This field informs you that the check has been performed and whether or not it was successful. The gateway periodically checks the connection between itself and your ISP's domain name server(s) to make sure DNS is available. This field informs you that the check has been per-
formed and whether or not it was successful. The gateway periodically checks the connection between itself and the 2Wire Component Management System. This field informs you that the check has been performed and whether or not it was successful. Monitor Internet Connection The Monitor Internet connection link launches the Speed Meter. The Speed Meter measures the actual rate at which data is coming into (Incoming Kbps) and going out of (Outgoing Kbps) your system. It measures real-time data throughput in Kilobits per second and displays in one-second intervals. The Speed Meter monitors the actual data rates while connecting to a Web site. This data rate can differ from the reported speed of your broadband connection due to many factors, including traffic to the Web site or the speed of the Web servers at the site you are visiting. Note: To use the Speed Meter, your browser must support Java 2. 15 Broadband Link Tab Test Connection Speed The Test connection speed link launches the 2Wire Bandwidth Meter. The Bandwidth Meter measures the maximum download speed from 2Wires Web site to your system in Kilobits per second (Kbps). The 2Wire Bandwidth Meter estimates your connection speed from the Internet. Because the Internet consists of thousands of interconnections, your connection to a Web site could be affected by many different factors. If you experience slow performance on a particular Web site, you can use the 2Wire Bandwidth Meter to verify whether this is isolated to that particular Web site, or if it is a more general occurrence. Because the 2Wire Bandwidth Meter measures the download speed from 2Wires Web site to your computer and can be affected by many factors on the Internet, it is not an accurate measurement of the service from your ISP. Using Broadband Diagnostics Diagnostics displays an itemized list of your broadband connections current status. Technical support representatives use this information to help troubleshoot problems with your broadband connection. To access the Broadband Link Diagnostics page:
Open a Web browser and access the gateway user interface by entering http://2Wire.gateway.net.
Click the Broadband Link tab.
Click the Diagnostics link under the tab to open the Broadband Link Diagnostics page. Figure 9. Broadband Link Diagnostics Page To update the broadband link status, click REFESH. To initiate a full test of your broadband link, click TEST. The test will take several minutes, during which the system reestablishes all broadband connections. You will not be able to access the Internet until the test is complete. 16 Broadband Link Tab Viewing Statistics The View Broadband Link Statistics page shows statistics associated with the 2Wire gateway broadband link, including cumulative DSL statistics. To access the Broadband Link Statistics page:
Open a Web browser and access the gateway user interface by entering http://2Wire.gateway.net.
Click the Broadband Link tab.
Click the Statistics link under the tab to open the View Broadband Link Statistics page. Figure 10. View Broadband Link Statistics Page The Transmit and Receive Data panel displays the following information.
Transmit. The cumulative number of IP packets transmitted, the cumulative number of IP payload bytes transmitted, and the number and percentage transmitted in error.
Receive. The number of bytes and packets received, and the number and percentage received in error. 17 Broadband Link Tab The Data Errors panel displays the following information. Data Error Description ATM Cell Header Errors ATM Loss of Cell Delineation DSL Link Retrains DSL Training Errors DSL Training Timeouts DSL Loss of Framing Failures DSL Loss of Signal Failures DSL Loss of Power Failures DSL Loss of Margin Failures The number of ATM cell header CRC errors since the 2Wire gateway was last restarted, and the elapsed time since the last cell header error. The number of ATM loss of cell delineation errors since the 2Wire gateway was last restarted, and the elapsed time since the last loss of cell delineation error. The number of DSL retrains since the 2Wire gateway was last restarted, and the time elapsed since the last retrain. The number of failed DSL retrains since the 2Wire gateway was last restarted, and the elapsed time since the last failed retrain. The number of timeouts waiting for response from ATU-C since the 2Wire gateway was last restarted, and the elapsed time since the last initialization timeout. The number of DSL loss of framing failures since the 2Wire gate-
way was last restarted, and the elapsed time since the last line search initialization. The number of DSL loss of signal failures since the 2Wire gateway was last restarted, and the elapsed time since the last loss of sig-
nal failure. The number of DSL loss of power indications from the ATU-C since the 2Wire gateway was last restarted, and the elapsed time since the last loss of power indication. The number of DSL loss-of-margin failures at current data rate since the 2Wire gateway was last restarted, and the elapsed time since the last loss of margin failure. DSL Cumulative Errored Sec-
onds The number of cumulative errored seconds since the 2Wire gate-
way was last restarted, and the elapsed time since the last error. DSL Severely Errored Seconds The number of severely errored seconds since the 2Wire gateway was last restarted, and the elapsed time since the last severely errored second. DSL Corrected Blocks The number of corrected DSL superframes that had data errors detected during reception. 18 Broadband Link Tab Data Error Description DSL Uncorrected Blocks The number of uncorrected DSL superframes that had data errors detected. ISP Connection Establishment The number of times the ISP connection was established since the statistics were last reset, and the elapsed time since the last establishment. Using Advanced Settings The Advanced Settings page allows you to manually configure your DSL and Internet connection settings. Typically, these settings are automatically provided by your service provider. You should adjust these settings ONLY if you are very familiar with DSL and networking technology. To access the Broadband Link Advanced Settings page:
Open a Web browser and access the gateway user interface by entering http://2Wire.gateway.net.
Click the Broadband Link tab. 19
Click the Advanced Settings link under the tab to open the Broadband Link Advanced Settings page. Broadband Link Tab Figure 11. Broadband Link Advanced Settings Page Modifying DSL and ATM Settings By default, the gateway automatically detects which DSL line to use. The DSL and ATM panel allows you to select a DSL line and manually configure your ATM settings. 1. 2. 3. From the DSL Line Selection drop-down menu, select Automatic, Line 1 (inner pair), or Line 2 (outer pair). In the ATM Circuit Identifier VPI and VCI fields, enter the VPI and VCI you want the gateway to use to connect to your ISP. From the ATM Encapsulation drop-down menu, select Bridged LLC, Bridged VC-Mux, Routed LLC, or Routed VC-Mux. 20 Broadband Link Tab 4. In the ATM/PVC Search field, click the Enabled or Disabled radio button. 5. Click SAVE. Modifying Broadband Connection Settings The Broadband Connection panel allows you to modify your broadband connection. 1. From the Connection Type drop-down menu, select the connection type: PPPoE, PPPoA, Direct IP (DHCP or Static), or Routed IPoA. If you connect via PPPoE or PPPoA, proceed to step 2. If you connect via Direct IP or Routed IPoA, proceed to step 5. Direct IP and Routed IPoA connections do not require a user name or password. 2. 3. 4. 5. In the Username field, enter your user name. In the Password field, enter your password. In the Confirm Password field, re-enter your password. In the PPP on Demand field, enter a value for the length of time you wish the PPP session to remain active. If the value is set to 0, the PPP session will not time-out (it will be always-on). If the value is between 1 to 10080 minutes, the PPP session will time-out if the gateway doesnt detect outbound traffic destined for the Internet in the specified time. 6. Click SAVE. Modifying the Hardware Address By default, the gateway uses its built-in hardware address. The Hardware Address Override panel allows you to manually override the MAC address of the broadband connection, which is sometimes required for cable modems that perform MAC address authentication. 1. Click the Override the built-in hardware address radio button. 2. In the Hardware Address field, enter the alternative hardware address. 3. Click SAVE. Enabling Hostname Override In the DHCP Host Name field, enter the DHCP host name you want the gateway to use. This field is only relevant if your ISP uses DHCP host name authentication. Modifying the Broadband IP By default, the gateway automatically obtains its Internet address. The Broadband IP panel allows you to manually configure your Internet address settings. 1. Click the Manually configure IP address settings radio button. 2. In the IP address field, enter the IP address you want the gateway to use. 21 Broadband Link Tab 3. 4. In the Subnet Mask field, enter the subnet mask you want the gateway to use. In the Default Gateway field, enter the default gateway address you want the gateway to use. 5. Click SAVE. Modifying the Broadband DNS By default, the gateway automatically obtains the DNS server addresses via DHCP. The Broadband DNS panel allows you to manually configure your DNS information. 1. Click the Manually configure your DNS information radio button. 2. 3. In the Primary Server field, enter the IP address of the primary DNS server that the gateway is to use for DNS name resolution. In the Secondary Server field, enter the IP address of the secondary DNS server that the gateway is to use for DNS name resolution. 4. In the Domain Name field, enter the specific domain name to be used by the gateway. 5. Click SAVE. Note: If you choose to manually configure your system and have a problem, re-run your installation and follow the installation instructions provided to you by your service provider. 22 Home Network Tab This chapter describes the 2Wire gateway Home Network features, and provides detailed instructions on how to customize your network settings. Viewing Your Home Network Summary The Home Network Summary page displays information about the devices installed on your network. To access the Home Network Summary page:
Open a Web browser and access the 2Wire gateway user interface by entering http://2Wire.gateway.net.
Click the Home Network tab to open the View Network Summary page. Figure 12. View Network Summary Page Understanding the Local Devices Panel The Local Devices panel shows you the name of the device, how it is connected, any special configuration information, and provides links to other system features that you can set up for the device. A device on your network is usually a computer either a personal computer used by a household member, or a computer that is dedicated to a specific use (such as a Web server that hosts online games). The status of each device is shown in the Local Devices list in your 2Wire gateway user interface. 23 Each device on your home network is represented with a computer icon. If the show inactive devices option is enabled, and the device becomes inactive because it is powered off or removed from your network, this icon will display as Inactive. Home Network Tab Note: For additional information, refer to Showing a Device as Inactive on page 31. A symbol next to the device shows how it is connected to your home network:
Ethernet USB Wireless If you defined a name for your computer during System Setup or when your computer was set up, the name displays next to the device. However, there are two instances where the device name will not appear:
If your computer was manually configured with a static IP address, the static IP address displays instead of the computers name. If you have not named the device but it still obtains its Internet address from the system, the word Unknown displays. You can change the name of the device so that it will display in the system user interface by clicking the Change name link. If you have configured the firewall to allow information from the Internet to pass through to the computer
(also referred to as hosting an application), the name of the application(s) that you are hosting are displayed under the device name. Note: For additional information, refer to Hosting an Application on page 37. If you have defined special features for the computer (such as DMZplus mode), the feature is displayed under the device name. 24 Home Network Tab Depending on the permissions you have set for devices on your network, the following links may display next to the device:
Access shared files. Accesses the shared files available from this computer. This feature only works with Microsoft Windows computers that have shared files and file sharing installed. Note: If your computer is configured with a static IP address, this link will not appear. Edit firewall settings. Accesses the system user interface page, which allows you to edit the firewall pass-through settings for the computer. For example, you may need to change the pass-through settings for the computer if you want to play an Internet game. View Internet Access Control. Accesses the Internet Access Restriction schedule for this computer. Edit Content Screening. Accesses the Content Screening settings page, allowing you to change the Web site permissions for users on your network. View device details. Displays the technical networking details about the device. If you are experiencing difficulties, this information may be helpful to a technical support representative. Understanding the Status at a Glance Panel The Status at a Glance panel shows you a list of network connection types, the number of devices connected via each connection type, and your wireless settings. To change your wireless settings, click the EDIT SETTINGS button. To disable a network device, click the DISABLE button. A message asks you to confirm your decision. Monitoring Your Wireless Settings Your 2Wire gateway has an integrated wireless access point, which enables you to connect your wireless-
enabled computers to your home network. By default, the 2Wire gateway ships with WEP enabled and a preconfigured network name. The default WEP key is located on the bottom of the gateway, next to the serial number. To check your current settings and configure changes:
Open a Web browser and access the 2Wire gateway user interface by entering http://2Wire.gateway.net.
Click the Home Network tab. 25
Click the Wireless Settings link to open the Configure the Wireless Network page. Home Network Tab Figure 13. Configure the Wireless Network Page 26 Home Network Tab The Current Settings panel shows the 2Wire gateways wireless access point settings:
Access Point. The designated name of the wireless access point.
Network Name. The name assigned to your wireless network. The default is 2WIREXXX, where XXX represents the last three digits of your 2Wire gateway serial number (for example, 2WIRE954).
Channel. The radio frequency band the access point uses for your wireless network (the default is 6). Wireless adapter cards auto-detect which channels to use. If you are having problems with your wireless network, it could be due to radio interference. You can change the wireless channel to see if interference is reduced on a different channel. Note: For more information on wireless channels, refer to the wireless channel entry on page 123 in the Glossary.
Authentication. The security method used to ensure that users are authorized to access the wireless network: WEP-Open, WEP-Shared, or WPA-PSK.
Encryption. The security setting that makes it difficult for unauthorized users to access your network. Customizing Security Settings You should always enable encryption for wireless communication. When encryption is enabled, you must define an encryption key for the 2Wire gateways wireless access point and configure that same key on each wireless client that will use your 2Wire gateway wireless network. Note: If encryption is enabled, each wireless client must be configured with the encryption key defined on the system before it can operate on your wireless network. You can customize the following wireless settings in the Wireless Security panel. 1. From the Authentication pull-down menu, select an authentication setting: WEP-Open, WEP-Shared, or WPA-PSK. Note: WPA-PSK authentication is supported only on HG model gateways. Open authentication allows users to configure their wireless adapter as either Open or Shared; in either case an encryption key is required. Shared authentication allows users to configure their wireless adapter for Shared authentication, which requires an encryption key. WPA-PSK requires that users configure their wireless adapter using TKIP. 2. To use the encryption key that came with your gateway, click the Use default encryption key radio button. To create a custom encryption key, click the Use custom encryption key radio button. If you select Use custom encryption key, you can define a 64-bit or 128-bit encryption key. For 64-bit encryption, enter a 10-digit hexadecimal number. For 128-bit encryption, enter a 26-digit hexadecimal number. A hexadecimal number uses the characters 0-9, a-f, or A-F. 3. Click SAVE. 27 Home Network Tab Configuring Additional Settings The Additional Settings panel allows you to customize wireless settings. In general, it is recommended that you leave the default settings in place; however, if you are experiencing connection or performance difficul-
ties, altering these settings may improve performance. Note: Because the fields that display are dependent on the type of wireless adapter you are using, some of these settings may not display.
Wireless Mode. Allows you to force the gateway to use 802.11b/g, 802.11b-only, or 802.11g-only modes of operation. Note: This field displays only for 802.11b/g based models.
DTIM Period (seconds). Determines at which interval the access point will send its broadcast traffic. The default value is 4 seconds.
Maximum Connection Rate. The maximum rate at which your wireless connection works (1, 2, 5.5, 11, or 22 Mbps for 802.11b-based models; 1, 2, 5.5, 11, 6, 9, 12, 24, 36, 48, or 54 Mbps for 802.11b/
g-based models).
Power Setting. Allows you to select the power level for your wireless connection. The default list is 1 to 4; additional options may appear based on the service providers configuration. If you have customized your wireless system configuration, you can restore the wireless settings to factory defaults by clicking the RESTORE DEFAULTS button. Configuring Advanced Settings The Edit Advanced Home Network Settings page displays the current IP settings in use by your system for your home network, and allows you to configure your home network settings. You should adjust these settings ONLY if you are very familiar with computer networking technologies. The Current Settings panel shows the following information:
Router Address. The IP address used by your system on the private home network (the default is 192.168.0.1). The system has two IP addresses: a private address that it uses on the home network, and one that is used on the public broadband connection on the Internet. You can change the home network IP address by changing the home network IP address range.
Subnet Mask. The subnet mask is determined by the home network IP address range settings (the default is 255.255.0.0).
DHCP Range. The range of IP addresses used by your system (the default is 192.16.1.33 through 192.16.1.250). IP addresses can be either static (permanently assigned) or dynamic (automatic and temporary). Setting up a Private Network By default, the 2Wire gateway uses the 192.168.1.0/255.255.0.0 IP address range. You can select from two additional IP address ranges, or configure the network settings manually. You should manually configure 28 Home Network Tab these settings ONLY if you thoroughly understand IP internetworking, because an incorrect configuration can cause unpredictable results. To set up a private network:
Open a Web browser and access the 2Wire gateway user interface by entering http://2Wire.gateway.net.
Click the Home Network tab.
Click the Advanced Settings link under the tab to open the Edit Advanced Home Network Settings page. Figure 14. Advanced Home Network Settings Page 29 Home Network Tab 1. Click the radio button that corresponds to the IP address range you wish to use. If you select the 172.16.0.0 / 255.255.0.0 or 10.0.0.0 / 255.255.0.0 range, continue to step 5. If you select Configure manually, continue to step 2. 2. 3. In the Router Address field, enter the IP address used by your system on the private home network. In the Subnet Mask field, enter the subnet mask. The subnet mask is determined by the home network IP address range settings. 4. Click the Enable DHCP checkbox. a. b. c. In the First DHCP Address field, enter the first DHCP address that youll be distributing over the private network. In the Last DHCP Address field, enter the last DHCP address that youll be distributing over the private network. In the Set DHCP Lease Time field, enter a value for the number of hours before the DHCP lease expires. 5. Click SAVE. Note: If you change the home network IP address range, you must renew the DHCP lease on all devices on your home network and manually reconfigure all devices configured with static IP addresses. If you are using the 2Wire Network Support Tool, you can renew the DHCP lease by selecting Refresh Network Connection in the Network Support Tool menu. Setting Up a Public Network The Public Network pane allows you to create a local network that has broadband network-accessible IP addresses by creating a route from the Internet to the specified public network. The public network operates without Network Address Translation (NAT). This feature is typically used in conjunction with broadband service that provides a range of available IP addresses. Once enabled, the public IP addresses can be assigned to local computers. To set up a public network:
1. Check the Enable checkbox. 2. 3. In the Router Address field, enter the router address (this is typically provided by your service provider). In the Subnet Mask field, enter the subnet mask (this is typically provided by your service provider). 4. Click SAVE. 30 Home Network Tab Setting Up a Bridge Network The Bridge Network pane allows you to create a local network that has broadband-accessible IP addresses. Bridge Network is a public network in which the local network is an extension of the broadband network and does not require any special routing. Computers that are assigned Bridge Network IP addresses operate without Network Address Translation (NAT). This feature is typically used in conjunction with broadband service that provides a range of IP addresses. Once enabled, the bridge network IP addresses can be assigned to local computers. To set up a bridge network:
1. Check the Enable checkbox. 2. In the Subnet Mask field, enter the subnet mask (this is typically provided by your service provider, and defines how large your IP pool is). 3. Click SAVE. Showing a Device as Inactive To show a device as Inactive:
1. Open a Web browser and access the 2Wire gateway user interface. 2. Click the Home Network tab. 3. Click the Advanced Settings link under the tab. 4. In the Settings pane, select the Show inactive devices in network list checkbox. 5. Click SAVE. 31 VoIP Network Tab This chapter describes the 2Wire gateway VoIP Network features, and provides detailed instructions on setting up a VoIP network. Configuring the VoIP Phones To configure VoIP via the gateway user interface, follow these steps. 1. Access the gateway user interface by opening a web browser and entering http://2wire.gateway.net. Click the Voice Network tab. The View Voice Network page opens. 2. Click Step 2: Set Up Phone Lines. Click EDIT to change the settings. 32 3. The account is based on username or phone number. To change this setting, from the pull-down menu select Username or Phone Number. To ensure that the settings cannot be changed, in the Password field enter a password. From the Ring Tone pull-down menu, select the tone you wish to associate with the phone. To block the outgoing caller ID, click the Anonymous checkbox. Click SUBMIT. VoIP Network Tab 4. The Phone Settings page allows you to match each phone to a line.To do so, click EDIT. 33 5. In the Phone Name field, select a name to associate with the phone. If you have more than one digital voice line, in the Assign Number field select which phone line you wish to associate with this phone. Click SUBMIT. VoIP Network Tab 6. Setup is complete. Click DONE to return to the View Voice Network page. 34 Firewall Tab This chapter describes the 2Wire gateway firewall features, and provides detailed instructions on how to modify the firewall settings. Firewall Features The 2Wire gateway has a professional-grade firewall to help prevent unauthorized users from accessing your local network. The 2Wire gateway firewall includes the following features:
Stateful packet inspection. Blocks common Denial of Service attacks (such as SYN/FIN flooding or Smurf), and detects and logs TCP and UDP port scans. Stateless packet inspection. Filters specific NetBios traffic, suspicious packets and IP fragments; blocks packets sent from the private network to the Internet that have spoofed IP addresses. Network Address Translation (NAT). Translates a local networks IP address to an external address maintained by the 2Wire gateway, effectively hiding the existence of a home network to the Internet. The 2Wire gateway then uses this external address to communicate with the Internet on behalf of devices connected to the local network. Port Address Translation (PAT). A function provided by some routers which allows hosts on a LAN to communicate with the rest of a network (such as the Internet) without revealing their own private IP address. All outbound packets have their IP address translated to the routers external IP address. Replies come back to the router, which then translates them back into the private IP address of the original host for final delivery. During PAT, each computer on the LAN is translated to the same IP address, but with a different port number assignment. Inbound and outbound port blocking. Blocks common inbound and outbound protocol types from passing information to or receiving information from the Internet. 35 Firewall Tab Viewing Your Firewall Summary The Firewall Summary page provides summary information and links to the most commonly used security-
related features of your system. To access the Firewall Summary page:
Open a Web browser and access the gateway user interface by entering http://2Wire.gateway.net.
Click the Firewall tab to open the View Firewall Summary page. Figure 15. View Firewall Summary Page The Firewall Settings panel displays the Current Settings for your firewall.
Default. Unsolicited inbound traffic is not allowed to pass through the firewall.
Custom. Applications are associated with computers on your network. An access list shows the computers (Devices) on your network and the names of the Allowed Applications for each computer. When you allow application traffic, external users on the Internet can have limited access to your home network. This access might be required to allow some programs (such as game servers or instant messaging software) to operate properly. For example, a remote game player on the Internet might need to contact the game server program that you have installed on your home network in order to play against you. Normally, the firewall blocks this communication. By changing the firewall settings, this communication is permitted to pass through a pinhole in the firewall. This function may be referred to as port-mapping or port-forwarding in your software program documentation. 36 Click VIEW DETAILS to access the Firewall Details page, which shows a list of all the devices that have applications configured in the firewall and the details of these configurations. Firewall Tab Figure 16. View Firewall Details Page If you have the Firewall Monitor enhanced service, the Firewall Monitor panel shows a brief summary of the number of attacks that were blocked for the current day and week. Click VIEW DETAILS to access the Monitor the Firewall page. Hosting an Application When you host an application on your network for Internet users to access, you must configure the 2Wire gateway firewall to pass through specific application data to a selected computer. To host an application:
Open a Web browser and access the gateway user interface by entering http://2Wire.gateway.net.
Click the Firewall tab. 37
Click the Firewall Settings link under the tab to open the Edit Firewall Settings page. Firewall Tab Figure 17. Edit Firewall Settings Page 1. From the Select a computer pull-down menu, select the computer that you wish to host the application. 2. Click the Allow individual application(s) radio button. 3. In the Applications panel, select an application. 4. Click the ADD > button. The application you selected now appears in the Hosted Applications pane. 5. Click DONE. To stop hosting an application:
1. In the Hosted Applications panel, select the application you wish to stop hosting. 2. Click the < REMOVE button. 3. Click DONE. 38 Firewall Tab Updating the Application Profile List If the application you want to host does not appear in the Application Profile list, you may need to update the application list. If an update is available, the UPDATE APPLICATION LIST button appears above the list of application profiles. If the application that you want to host is not included in the updated application list, you may need to add your own application profile. Adding an Application Profile If you wish to host an application that is not included in the Application Profile list, you can add an application using the Add Application Profile page. An application profile configures your systems firewall to pass through application-specific data. This feature is typically used if the application for which you would like to pass through data to a given computer is new or has been recently updated to a new version. To create a new application profile:
Open a Web browser and access the gateway user interface by entering http://2Wire.gateway.net.
Click the Firewall tab.
Click the Firewall Settings link under the tab to open the Edit Firewall Settings page.
In the Applications panel, click the Add a new user-defined application link to open the Edit Application page. Figure 18. Edit Application Page 39 Firewall Tab 1. In the Application Name field, enter a name for the application profile. You can enter any name you like, although its recommended that you use the name of the application (for example, Redwing Game Server). 2. In the Definition panel, create a definition for your application. A definition consists of a series of protocol-specific ports that are to be allowed through the firewall. This information should be contained in the documentation provided by the company that produces the application. a. b. c. d. In the Protocol field, select the TCP or UDP radio button. If the application you are adding requires both, you must create a separate definition for each. In the Port (or Range) field, enter the port or port range the application uses. For example, some applications may require only one port to be opened (such as TCP port 500);
others may require that all TCP ports from 600 to 1000 be opened. In the Protocol Timeout (seconds) field, you may optionally enter a value for the amount of time that can pass before the application times out. You can also leave the field blank, in which case the system uses the default values (86,400 seconds for the TCP protocol; 600 seconds for the UDP protocol). In the Map to Host Port field, enter a value that will map the port range you established in step b to the local computer. For example, if you set the value to 4000 and the range being opened is 100 to 108, the forwarded data to the first value in the range will be sent to 4000. Subsequent ports will be mapped accordingly; 101 will be sent to 4001, 102 will be sent to 4002, etc. e. From the Application Type drop-down menu, select the application type. If you do not know the application type, select None (Default). 3. Click ADD DEFINTION to add the values to the profile definition list. 4. Click DONE. Repeat these steps for each port or range of ports required for the application profile. To edit or delete an application profile:
Open a Web browser and access the 2Wire gateway user interface by entering http://2Wire.gateway.net.
Click the Firewall tab.
Click the Firewall Settings link under the tab to open the Edit Firewall Settings page. 40
In the Applications panel, click the Edit or delete user-defined application link. The Select a Hosted Application page opens. Firewall Tab Figure 19. Select a Hosted Application Page 1. In the User-Defined Application Profiles panel, highlight the application you wish to edit or delete. f. To edit the application profile, click EDIT. The Edit Application screen appears. Make the necessary changes to the application profile and click DONE. g. To delete the application profile, click DELETE. Allowing all Applications (DMZplus) DMZplus is a special firewall mode that is used for hosting applications if you cannot get an application to work properly using the Allow individual application(s) option. When in DMZplus mode, the designated computer:
Shares your gateways IP address (Router Address).
Appears as if it is directly connected to the Internet.
Has all of the unassigned TCP and UDP ports opened and pointed to it.
Can receive unsolicited network traffic from the Internet. Although the computer in DMZplus mode appears to Internet users as though it is directly connected to the Internet, it is still protected by your system firewall. All traffic is inspected by the firewall's Stateful Packet Inspection engine and all known hacker attacks continue to be blocked. Because all filtered traffic is forwarded to the designated computer, you should use DMZplus mode with caution. A computer in DMZplus mode is less secure because all available ports are open and all incoming Internet traffic is directed to this computer. 41 Firewall Tab Note: DMZplus can only be configured for one computer on your home network at a time. To configure DMZplus:
Open a Web browser and access the 2Wire gateway user interface by entering http://2Wire.gateway.net.
Click the Firewall tab.
Click the Firewall Settings link under the tab to open the Edit Firewall Settings page. Figure 20. Edit Firewall Settings Page 1. From the Select a computer pull-down menu, select the computer to which you would like to have all data sent. 2. Click Allow all applications (DMZplus mode). 3. Click DONE. 42 Firewall Tab 4. Access the computer that you selected in step 1. 5. Confirm that the computer is configured for DHCP. If it is not, configure it for DHCP. 6. Restart the computer. When the computer restarts, it receives a special IP address from the system and all unassigned TCP and UDP ports are forwarded to it. To stop DMZplus:
1. From the Select a computer pull-down menu, select the computer for which you would like to disable DMZplus. 2. In the Edit firewall settings for this computer pane, click Maximum protection. 3. Click DONE. 4. Access the computer that you selected in step 1. If the computer will continue to automatically obtain an IP address, proceed to step 5. If the computer will have a static IP address, configure it with a valid static IP address. 5. Restart the computer. Viewing the Firewall Log The 2Wire gateway keeps a log of all firewall-related events that occur. Each log entry contains the date and time the event occurred, the severity level of the event, and details about the event. To view the log:
Open a Web browser and access the 2Wire gateway user interface by entering http://2Wire.gateway.net.
Click the Firewall tab. 43
Click the Firewall Log link under the tab to open the View Firewall Log page. Firewall Tab Figure 21. View Firewall Log Page The following table provides additional information about the log entries. Severity
Info. Informational onlythe event does not imply a threat to network security. Low. Occurs when the firewall detects a low-level threat to the network, such as an invalid IP header or invalid packet length.
Medium. Occurs when a medium-level threat is detected, such as an invalid IP fragment offset.
High. Occurs when an attack is launched against the network (for example, a SYN Flood). Details Includes the following information:
The IP address from which the packet originated. The destination IP address of the packet. The action that was taken. Click CLEAR LOG to clear the log. 44 Configuring the Firewall (Advanced) The Edit Advanced Firewall Settings page allows you to configure advanced features on your firewall. Firewall Tab Figure 22. Edit Advanced Firewall Settings Page Note: These features should be used only if you are thoroughly familiar with firewalls and networking. Enabling Advanced Security Your 2Wire gateway firewall already provides a high level of security. You can configure the firewall to provide advanced security features, including stealth mode, strict UDP, or block pings. 45 Firewall Tab Stealth Mode In normal firewall operation, when an unknown remote device makes a request to connect to a users network the firewall does not allow the connection to be made and responds with a connection not available message. This may not discourage a determined hacker, because the message confirms that there is an active network sending the response. The hacker may then use more sophisticated tools in an attempt to access your network. When in stealth mode, the 2Wire gateway firewall does not return any information in response to network queries; that is, it will appear to the hacker who is trying to access your network that your network does not exist. This discourages hackers from further attempts at accessing your network, because to them it will appear as though there is no active network to access. To enable Stealth Mode:
Open a Web browser and access the 2Wire gateway user interface by entering http://2Wire.gateway.net.
Click the Firewall tab.
Click the Advanced Settings link under the tab to open the Edit Advanced Firewall Settings page. 1. In the Security pane, click the Stealth Mode checkbox. 2. Click SAVE. 46 Firewall Tab Block Ping Ping is a basic Internet program that, when used without malicious intent, allows a user to verify that a particular IP address exists and can accept requests. Ping is used diagnostically to ensure that a host computer you are trying to reach is operating. It can also be used to see how long it takes to get a response back from a specific host computer. Hackers can use ping to launch an attack against your network, because ping can determine the number form of the networks IP address (for example, 105.246.172.72) from the domain name (for example, www.mynetwork.com). If you enable Block Ping, your network will block all ping requests. To block ping:
Open a Web browser and access the 2Wire gateway user interface by entering http://2Wire.gateway.net.
Click the Firewall tab.
Click the Advanced Settings link under the tab to open the Edit Advanced Firewall Settings page. 1. In the Security pane, click the Block Pings checkbox. 2. Click SAVE. 47 Firewall Tab Strict UDP Session Control Enabling this feature provides increased security by preventing the 2Wire gateway from accepting packets sent from an unknown source over an existing connection. Strict UDP instructs the 2Wire gateway to be more restrictive about what packets are allowed to transmit over an established connection from a local network computer to the Internet. In addition to relying on information about the destination (3-tuple), the 2Wire gateway will also use information about the source of the connection (5-tuple). Note: The ability to send traffic based on destination only is required by some applications. Enabling this feature may not allow some on-line applications to work properly. To enable strict UDP session control:
Open a Web browser and access the 2Wire gateway user interface by entering http://2Wire.gateway.net.
Click the Firewall tab.
Click the Advanced Settings link under the tab to open the Edit Advanced Firewall Settings page. 1. In the Security pane, click the Strict UDP Session Control checkbox. 2. Click SAVE. 48 Firewall Tab Allowing Inbound and Outbound Traffic The Inbound and Outbound Control pane displays some common protocol types. When one of the Inbound protocol boxes is checked, the firewall allows the corresponding protocol to pass through from the Internet to the network. If one of the Outbound protocol boxes is checked, the firewall allows the traffic from the network to pass through the firewall to the Internet. Note: If you configure the firewall to block an Inbound protocol, you may disable support for hosted applications that require that type of protocol. To block an Inbound or Outbound protocol:
Open a Web browser and access the 2Wire gateway user interface by entering http://2Wire.gateway.net.
Click the Firewall tab.
Click the Advanced Settings link under the tab to open the Edit Advanced Firewall Settings page. 1. In the Inbound and Outbound Control pane, deselect the checkbox of the protocol you wish to block. 2. Click SAVE. Disabling Attack Detection By default, the 2Wire gateway firewall rules block the attack types listed in the Attack Detection pane. There are some applications and devices that require the use of specific data ports through the firewall. The gateway allows users to open the necessary ports through the firewall using the Firewall Settings page. If the user requires that a computer have all incoming traffic available to it, this computer can be set to the DMZplus mode. While in DMZplus mode, the computer is still protected against numerous broadband attacks (for example, SYN Flood or Invalid TCP flag attacks). In rare cases, the incoming traffic may be inadvertently blocked by the firewall (for example, when integrating with external third-party firewalls or VPN servers). You may need to disable one or more of the attack detection capabilities for any device placed in the DMZplus. In this case, the third-party server provides the attack protection normally provided by the gateway. 49 The following table lists the attacks for which the gateway firewall filters continuously check. Attack Description and Action Taken Excessive Session Detection TCP/UDP Port Scan Invalid Source/Destination IP address When enabled, the firewall will detect applications on the local network that are creating excessive sessions out to the Internet. This activity is likely due to a virus or worm infected computer (for example, Blaster Worm). When the event is detected, the gateway displays a HURL warning page. A port scan is a series of messages sent by someone attempting to break into a computer to learn which com-
puter network services, each associated with a well-known port number (such as UDP and TCP), the computer pro-
vides. When enabled, the firewall detects UDP and TCP port scans, and drops the packet. When enabled, the firewall will verify IP addresses by checking for the following:
IP source address is broadcast or multicast drop packet. TCP destination IP address is not unicast drop packet. IP source and destination address are the same drop packet. Invalid IP source received from private/home network drop packet. Packet Flood (SYN/UDP/ICMP/
Other) When enabled, the firewall will check for SYN, UDP, ICMP, and other types of packet floods on the local and Internet facing interfaces and stop the flood. Invalid TCP Flag Attacks (NULL/
XMAS/Other) When enabled, the firewall will scan inbound and out-
bound packets for invalid TCP Flag settings, and drop the packet to prevent SYN/FIN, NULL, and XMAS attacks. Invalid ICMP Detection The firewall checks for invalid ICMP/code types, and drops the packet. Miscellaneous The firewall checks for the following:
Unknown IP protocol drop packet. Port 0 attack detected drop packet. TCP SYN packet drop packet. Not a start session packet drop packet. ICMP destination unreachable terminate session. To disable attack detection for a specific port:
Open a Web browser and access the 2Wire gateway user interface by entering http://2Wire.gateway.net.
Click the Firewall tab. Firewall Tab 50
Click the Advanced Settings link under the tab to open the Edit Advanced Firewall Settings page. Firewall Tab Figure 23. Edit Advanced Firewall Settings Page 1. In the Attack Detection panel, deselect the appropriate checkbox. 2. Click SAVE. 51 Management and Diagnostic Console This chapter describes the 2Wire gateway Management and Diagnostic Console (MDC). The Management and Diagnostic Console provides information about the status of the 2Wire gateway, its broadband network connections, attached home networking devices, system and security information, and a running log of any error conditions. You can use the tools provided to:
View configuration and service provisioning information. View operation logs. Perform diagnostic tests.
Configure the gateway. The following sections describe how to access the Management and Diagnostic Console, use the diagnostic and configuration tools, and modify settings. Note: The MDC pages available are dependent on the 2Wire gateway software release. The MDC pages shown in this chapter are for 2Wire gateways running software release 4.21.x If your gateway is running a software release earlier than 4.21.x, some of these pages may not be available. Accessing the MDC To access the MDC from your in-home or office network, enter the following URL:
http://gateway.2wire.net/management Using the MDC After you access the Management and Diagnostic Console, a navigation bar allows you to quickly select pages on the site. The navigation bar consists of the following links:
Group Summary Broadband Link Local Network Link System Summary Summary Statistics Detailed Statistics Configure Status Statistics 52 Management and Diagnostic Console Group Local Network Link Device List Wireless Configure Firewall Settings Address Allocation Voice Troubleshooting Advanced Detailed Information Advanced Settings Configure Server DSL Diagnostics Event Log Network Tests Upgrade History Resets Syslog Settings Provisioning Info Configure Time Services Configure Services Static Routes DNS Resolve Traffic Shaping Link Manager Detailed Log Note: The link groups that display are dependent on the 2Wire gateway model. For example, DSL Diagnostics will display only if a user has a gateway that connects to the Internet via DSL. 53 Management and Diagnostic Console System Summary Page The System Summary page shows general information about the 2Wire gateway, its configuration, and components. For example, it shows the hardware and software version being used by the 2Wire gateway. Broadband Link Pages The Broadband Link pages show summary, detailed status, and statistical information about the 2Wire gateway broadband link; and lets you change configuration settings. For example, the Statistics page shows current upstream and downstream DSL data rates. Local Network Pages Local Network pages show the general operating status of the home network, and statistics associated with network interfaces. For example, the Statistics page shows the transmit and receive packet count for Ethernet, Wireless, HomePNA, and USB interfaces. Firewall Pages Firewall pages allow you to access settings and detailed information for the gateways firewall, and to configure the firewall if necessary. For example, you can use the Firewall Settings page to access applications that are usually blocked by the firewall. Troubleshooting Pages Troubleshooting pages allow you to view detailed logs that maintain a record of all significant 2Wire gateway events, and to perform diagnostic tests. For example, if you are experiencing connection problems you can use the Ping tool on the WAN Tests page to ensure that the 2Wire gateway can ping a designated IP address. Advanced Pages Advanced pages provide detailed information and sophisticated diagnostics that, in general, should only be accessed by technically advanced users. 54 Management and Diagnostic Console Remote Management Feature Management and Diagnostic Console pages that affect gateway configuration can be accessed remotely only if your organization has enabled the Remote Management feature. If the feature is not enabled, an error message will display when you click the link to access the following pages.
Broadband Link - Configuration
Local Network - Configuration Local Network - Address Allocation Firewall - Settings Firewall - Detailed Information Firewall - Advanced Settings Troubleshooting - Configure Logs Troubleshooting - Resets Advanced - Syslog Settings Advanced - Configure Time Services Advanced - Configure Services Advanced - Static Routes Advanced - DNS Resolve Advanced - Traffic Shaping The following section shows Management and Diagnostic Console pages and describes how to use the information provided to troubleshoot the 2Wire gateway. 55 Management and Diagnostic Console System Summary Page The System Summary page shows general information about the 2Wire gateway, its configuration, and components. Figure 24. MDC System Summary Page Depending on the service provider and the components installed, the System Summary page includes the following information:
Item System Model Description 2Wire gateway model number (for example, 2700HGV Gateway). Serial Number MAC Address 2Wire gateway serial number. 2Wire gateway MAC address. 56 Management and Diagnostic Console Item Description Hardware Version 2Wire gateway hardware version. Hardware Options The type of peripheral device installed. DSL Modem Type ADSL or ISDN. Current Software 2Wire gateway software version. Configuration Key Code System Time Time Since Last Boot Last ID Post Components DSL Modem Firewall Rules The key code associated with the current provi-
sioning settings. The value is Unprovisioned if the 2Wire gateway has not yet been provi-
sioned. The day, month, year, and time; or Retrieving date and time settings from Internet if not set. The time elapsed since the 2Wire gateway was last restarted. The time elapsed since the 2Wire gateway com-
municated with the configuration server. DSL modem software version. Current version of the installed firewall rules database. Application List Current version of the application list. Note: The contents of the Components list varies according to service provider-specific information. For example, the Components list may contain language files (such as common_en, common_es, or common_fr); user interface files (such as base_ui); or VoIP files (such as base_voice). 57 Management and Diagnostic Console Broadband Link - Summary Page The Broadband Link - Summary page allows you to view 2Wire gateway broadband connectivity-related settings, and reset the Broadband Link and ISP Connection. Figure 25. MDC Broadband Link Summary Page The Broadband Link Summary page includes the following information:
Item Description Connection Information Broadband Connection Built-in ADSL Modem or External Broadband Modem via Ethernet. 58 Management and Diagnostic Console Item Current Status Description The current operating condition of the broadband link. Fully operational. The broadband link is operational (includ-
ing connection to ISP and other services). Initializing. The broadband link is preparing to connect. Establishing link. The broadband link is connecting. No physical link signal. No physical signal detected on the broadband link. Physical connection. The broadband link is connected. Error. There is a broadband link error. DSL Connection Details (for DSL models only) DSL Line (Wire Pair) Line 1 (inner pair), Line 2 (outer pair), or Searching for DSL signal. During installation, the 2Wire gateway auto detects whether the DSL signal is on line 1 or line 2. Protocol DSL Channel DSLAM G.dmt, G.lite, or ANSI (T1.413). Fast or Interleaved. DSLAM vendor identification. For G.dmt or G.lite protocol, values are Country, Vendor, and Specific. For ANSI (T1.413) protocol, values are ID, Rev (Revision), and Std (Standard). ATM PVC Info The ATM VPI/VCI. ATM Encapsulation LLC or VCMux. ISP Details Connection Type The method by which the 2Wire gateway connects to the ISP:
Direct_IP, PPPoA, or PPPoE. For the HomePortal 1000, direct uses an RFC2684 (formerly RFC 1483) bridged Ethernet connection without FCS (PID=0x00-07) format. User Name The 2Wire gateway user name. PPPoE Access Concentrator This field is present only when the connection type is PPPoE. PPPoE Service The type of PPPoE services being used. This field is present only when the connection type is PPPoE. IP Address Range The broadband address of the 2Wire gateway. Subnet Mask Gateway The subnet mask to be used by the 2Wire gateway on the broadband link. The IP address of the default gateway (default router) that the 2Wire gateway connects to on the broadband link. 59 Item Primary DNS Secondary DNS Host Name Domain Name MTU Spoof MAC Address Management and Diagnostic Console Description The IP address of the primary DNS server that the 2Wire gateway is to use for DNS name resolution on the broadband link. The IP address of the secondary DNS server that the 2Wire gateway is to use for DNS name resolution on the broadband link. The 2Wire gateway host name. This field is only present if the user configures the 2Wire gateway with a host name. The domain name associated with the 2Wire gateway on the broadband link. Maximum size of the packets sent from a computer to the network. Either Disabled (if the default factory-set MAC address is used) or Enabled (if the computers MAC address is used). If there is an error on the broadband link or with the ISP connection, click the Reset Broadband Link or Reset ISP Connection button to reset the connections. 60 Management and Diagnostic Console Broadband Link - Statistics Page The Broadband Link - Statistics page shows statistics associated with the 2Wire gateway broadband link. Note: To update the information displayed on this page, click the browsers Refresh button. Figure 26. MDC Broadband Link Statistics Page The Broadband Link Statistics page includes the following information:
Item Description DSL (for DSL models only) Current Rate Max Rate The DSL downstream and upstream rate, in kilobits. The maximum DSL downstream and upstream rate, in kilo-
bits. 61 Management and Diagnostic Console Item Description Current Connection ATM Transmit Receive IP Transmit Receive Current Noise Margin. The current downstream and upstream noise margin in dB. Current Attenuation. The current downstream and upstream DSL attenuation in dB. Current Output Power. The current downstream and upstream DSL transmit and receive power in dB. The cumulative number of cells transmitted, and the num-
ber and percentage transmitted in error. The cumulative number of cells received, and the number and percentage received in error. The cumulative number of IP packets transmitted, the cumulative number of IP payload bytes transmitted, and the number and percentage transmitted in error. The number of bytes and packets received, and the num-
ber and percentage received in error. To reset the broadband link statistics, click the Reset button. 62 Management and Diagnostic Console Broadband Link - Detailed DSL Statistics Page Note: This link is present only if the 2Wire gateway connects to the Internet via ADSL. The Broadband Link Detailed DSL Statistics page shows a set of cumulative DSL statistics associated with the 2Wire gateway. Figure 27. MDC Broadband Link Detailed DSL Statistics Page Note: To update the information displayed on this page, click the browsers Refresh button. 63 Management and Diagnostic Console The Broadband Link Detailed DSL Statistics page includes the following information:
Item ATM Cell Header Errors Loss of Cell Delineation DSL Link Retrains DSL Training Errors Training Timeouts Loss of Framing Failures Loss of Signal Failures Loss of Power Failures Loss of Margin Failures Cumulative Seconds w/Errors Description The number of ATM cell header CRC errors since the 2Wire gateway was last restarted, and the elapsed time since the last cell header error. The number of ATM loss of cell delineation errors since the 2Wire gateway was last restarted, and the elapsed time since the last loss of cell delineation error. The number of DSL retrains since the 2Wire gateway was last restarted, and the time elapsed since the last retrain. The number of failed DSL retrains since the 2Wire gate-
way was last restarted, and the elapsed time since the last failed retrain. The number of timeouts waiting for response from ATU-C since the 2Wire gateway was last restarted, and the elapsed time since the last initialization timeout. The number of DSL loss of framing failures since the 2Wire gateway was last restarted, and the elapsed time since the last line search initialization. The number of DSL loss of signal failures since the 2Wire gateway was last restarted, and the elapsed time since the last loss of signal failure. The number of DSL loss of power indications from the ATU-C since the 2Wire gateway was last restarted, and the elapsed time since the last loss of power indication. The number of DSL loss-of-margin failures at current data rate since the 2Wire gateway was last restarted, and the elapsed time since the last loss of margin failure. The number of cumulative errored seconds since the 2Wire gateway was last restarted, and the elapsed time since the last error. 64 Management and Diagnostic Console Item Description Cumulative Sec.w/Severe Errors Corrected Blocks Uncorrectable Blocks DSL Unavailable Seconds ISP Connection Establishment The number of severely errored seconds since the 2Wire gateway was last restarted, and the elapsed time since the last severely errored second. The number of corrected DSL superframes that had data errors detected during reception. The number of uncorrected DSL superframes that had data errors detected. The number of unavailable seconds (modem downtime) since the 2Wire gateway was last restarted, and the elapsed time since the last unavailable second. The number of times the ISP connection was established since the statistics were last reset, and the elapsed time since the last establishment. To reset the DSL statistics, click the Reset button. 65 Broadband Link - Configuration Page The Broadband Link Configuration page allows you to modify specific broadband connection settings. Management and Diagnostic Console Figure 28. MDC Broadband Link Configuration Page Note: Modifying the settings on this page can impact the ability of computers on the local network to access the broadband connection. You should modify these settings ONLY if you are thoroughly familiar with networking. 66 Management and Diagnostic Console Modifying DSL and ATM Settings By default, the gateway automatically detects which DSL line to use. The DSL and ATM Settings pane allows you to select a DSL line and manually configure your ATM settings. To modify DSL or ATM settings:
1. 2. 3. 4. From the DSL Line Selection pull-down, select Automatic, Line 1(inner pair), or Line 2 (outer pair). In the ATM Circuit Identifier VPI and VCI fields, enter the VPI and VCI you want the gateway to use to connect to the ISP. From the ATM Encapsulation pull-down menu, select VC-Mux or LLC. In the ATM/PVC Search field, click the Enabled or Disabled radio button. 5. Click the Submit button. Modifying Internet Connection and Authentication Settings The Internet Connection Settings - Connection and Authentication pane allows you to modify the method by which you connect to the Internet. To modify Internet connection and authentication settings:
1. Ensure that the Broadband connection Enabled radio button is selected (default). 2. From the Connection Type pull-down menu, select the connection type (either Direct IP (DHCP or Static), PPPoE, or PPPoA). If you connect via PPPoE or PPPoA, proceed to step 2. If you connect via Direct IP, proceed to step 5. Direct IP connection does not require a user name or password. 3. 4. 5. In the Username field, enter your user name. In the Password field, enter your password. In the Confirm Password field, re-enter your system password. 6. Click the Submit button. The PPP on Demand field allows you to enable PPP on-demand. If the value is set to 0 minutes, the PPP session will be persistent (always-on). If the value is between 1 to 10080 minutes, the PPP session will timeout if the 2Wire gateway does not detect outbound traffic destined for the Internet in the specified time. When the 2Wire gateway detects outbound traffic, the session is reestablished. Note: By default, the minimum timeout value is 3 minutes. 67 Management and Diagnostic Console Modifying Hardware Address By default, the 2Wire gateway uses its built-in hardware address. The Internet Connection Settings -
Hardware Address Override pane allows you to manually override the MAC address of the broadband connection, which is sometimes required for cable modems that perform MAC address authentication. To modify the hardware address:
1. Click the Override the built-in hardware address radio button. 2. In the Hardware Address field, enter the alternative hardware address. 3. Click the Submit button. Modifying Internet Address Settings By default, the 2Wire gateway automatically obtains its Internet address. The Internet Connection Settings -
Internet Address pane allows you to manually configure your Internet address settings. To manually configure your Internet address settings:
1. Click the Manually configure Internet address settings radio button. 2. 3. 4. In the IP Address field, enter the IP address you want the 2Wire gateway to use. In the Subnet Mask field, enter the subnet mask you want the 2Wire gateway to use. In the Default Gateway field, enter the default gateway address you want the 2Wire gateway to use. 5. Click the Submit button. Modifying DNS Information By default, the 2Wire gateway automatically obtains DNS server addresses via DHCP. The Internet Connection Settings - DNS pane allows you to manually configure your DNS information. To manually configure your DNS information:
1. Click the Manually configure your DNS information radio button. 2. 3. In the Primary Server field, enter the IP address of the primary DNS server that the 2Wire gateway is to use for DNS name resolution. In the Secondary Server field, enter the IP address of the secondary DNS server that the 2Wire gateway is to use for DNS name resolution. 4. In the Domain Name field, enter the specific domain name to be used by the 2Wire gateway. 5. Click the Submit button. 68 Local Network - Status Page The Local Network Status page shows the status of the local network. Management and Diagnostic Console Figure 29. MDC Local Network Status Page The Local Network Status page includes the following information:
Item IP Gateway IP Network Subnet Mask DHCP Range Description The IP address allocated to the 2Wire gateway. The IP address used by the network. The subnet mask allocated to the 2Wire gateway. The range of IP addresses available on the network, the number of addresses Allocated, and the number of addresses Remaining. 69 Management and Diagnostic Console Item DHCP Timeout Devices Ethernet Wireless (802.11) USB Public Network Router Address Subnet Mask Bridge Network Router Address Subnet Mask Description The time, in minutes, before the DHCP lease must be renewed. The number of Active and Inactive Ethernet devices on the network. The number of Active and Inactive wireless devices on the network. Specifies whether a USB device is present (Active) on the network. If a USB device is not present, the value is Inac-
tive. Defines a separate network on the home side. The subnet mask allocated for public address. Creates a bridge network with the broadband. The subnet mask allocated for public address. Note: If you have Enhanced Services (such as Internet Access Control) installed, the specific service and its status display in the Devices panel. 70 Local Network - Statistics Page The Local Network Statistics page shows information about the interfaces on the local network. Management and Diagnostic Console Figure 30. MDC Local Network Statistics Page The Local Network Statistics page includes the following information:
Item Ethernet Transmit Description The cumulative number of frames transmitted over the Ethernet home network interface, the number of payload bytes transmitted, and the number and percentage of transmitted packets in error. 71 Management and Diagnostic Console Item Receive Description The cumulative number of frames received over the Ether-
net home network interface, the number of payload bytes received, and the number and percentage of received pack-
ets in error. Wireless (this field is present only on wireless 2Wire gateway models) Transmit Receive USB Transmit Receive The cumulative number of frames transmitted over the wireless home network interface, the number of payload bytes transmitted, and the number and percentage of transmitted packets in error. The cumulative number of frames received over the wire-
less home network interface, the number of payload bytes received, and the number and percentage of received pack-
ets in error. The cumulative number of frames transmitted over the USB home network interface, the number of payload bytes transmitted, and the number and percentage of transmit-
ted packets in error. The cumulative number of frames received over the USB home network interface, the number of payload bytes received, and the number and percentage of received pack-
ets in error. To reset the local network statistics, click the Reset button. 72 Local Network - Device List Page The Local Network - Device List page displays information about each device in the local network. Management and Diagnostic Console Figure 31. MDC Local Network Device List Page The following information is displayed. Item Identity Type Description The name of the device. If the device does not have a name associated with it, the device IP address is displayed. The type of connection used by the device to connect to the local network: Ethernet, USB, or Wireless. MAC Address IP Address The hardware address used by the device. The IP address used by the device. 73 Management and Diagnostic Console Local Network - Wireless Settings Page The Local Network - Wireless Settings page allows you to view or change the wireless settings with which your gateway is configured. Figure 32. MDC Local Network Wireless Settings Page The Current Settings panel shows the 2Wire gateways wireless access point settings.
Access Point. The designated name of the wireless access point.
Network Name. The name assigned to your wireless network. The default is 2WIREXXX, where XXX represents the last three digits of your 2Wire gateway serial number (for example, 2WIRE954).
Channel. The radio frequency band the access point uses for your wireless network (the default is 6). Wireless adapter cards auto-detect the channels to use. If you are having problems with your wireless network, it could be due to radio interference. You can change the wireless channel to see if interference is reduced on a different channel.
Authentication. The security method used to ensure that users are authorized to access the wireless network: WEP-Open, WEP-Shared, or WPA-PSK.
Encryption. The security setting that makes it difficult for unauthorized users to access your network. 74 Management and Diagnostic Console The Settings panel allows you to change the Network Name and Wireless Channel, and enable SSID broadcast. Customizing Security Settings You should always enable encryption for wireless communication. When encryption is enabled, you must define an encryption key for the 2Wire gateways wireless access point and configure that same key on each wireless client that will use your 2Wire gateway wireless network. Note: If encryption is enabled, each wireless client must be configured with the encryption key defined on the system before it can operate on your wireless network. You can customize the following wireless settings in the Wireless Security panel. 1. From the Authentication pull-down menu, select an authentication setting: WEP-Open, WEP-Shared, or WPA-PSK. Open authentication allows users to configure their wireless adapter as either Open or Shared; in either case an encryption key is required. Shared authentication allows users to configure their wireless adapter for Shared authentication, which requires an encryption key. WPA-PSK requires that users configure their wireless adapter using TKIP. 2. To use the encryption key that came with your gateway, click the Use default encryption key radio button. To create a custom encryption key, click the Use custom encryption key radio button. If you select Use custom encryption key, you can define a 64-bit or 128-bit encryption key. For 64-bit encryption, in the Key field enter a 10-digit hexadecimal number. For 128-bit encryption, enter a 26-digit hexadecimal number. A hexadecimal number uses the characters 0-9, a-f, or A-F. 3. Click the Submit button. Additional Settings The Additional Settings panel allows you to customize wireless settings. In general, it is recommended that you leave the default settings in place; however, if you are experiencing connection or performance difficulties, altering these settings may improve performance. Note: Because the fields that display are dependent on the type of wireless adapter you are using, some of these settings may not display.
Wireless Mode. Allows you to force the gateway to use 802.11b/g, 802.11b-only, or 802.11g-only modes of operation.
DTIM Period (seconds). Determines at which interval the access point will send its broadcast traffic. The default value is 1 second.
Power Setting. Allows you to select the power level for your wireless connection. The default list is 1 to 4; additional options may appear based on the service providers configuration.
Maximum Connection Rate. The maximum rate at which your wireless connection works (1, 2, 5.5, 11, or 22 Mbps for 802.11b-based models; 1, 2, 5.5, 11, 6, 9, 12, 24, 36, 48, or 54 Mbps for 802.11b/
g-based models). 75 Management and Diagnostic Console Local Network - Configuration Page Note: To access this page, your organization must have the Remote Management feature enabled. If the feature is not enabled, an error message will display when you click the link to access this page. The Local Network - Configuration page allows you to change the gateways default local network settings. You must click the Submit button for changes to take effect. Figure 33. MDC Local Network Configuration Page Private Network Settings By default, the gateway uses the 192.168.0.1/255.255.0.0 IP address range. The Private Network pane allows you to change the IP address range used by the local network. You can choose from three standard configuration options, or configure the network settings manually. 76 Management and Diagnostic Console Note: If you change the local network IP address range, you must renew the DHCP lease on all devices on the gateways local network and manually reconfigure all devices configured with static IP addresses. Public Network Settings The Public Network pane allows you to create a local network that has broadband network-accessible IP addresses by creating a route from the Internet to the public network specified. The public network operates without the use of Network Address Translation (NAT). This feature is typically used in conjunction with broadband service that provides a range of available IP addresses. Once enabled, the public IP addresses can be assigned to local computers. Bridge Network Settings The Bridge Network pane allows you to create a local network that has broadband-accessible IP addresses. Bridge Network is a public network in which the local network is an extension of the broadband network and does not require any special routing. Computers that are assigned Bridge Network IP addresses operate without the use of Network Address Translation (NAT). This feature is typically used in conjunction with broadband service that provides a range of IP addresses. Once enabled, the bridge network IP addresses can be assigned to local computers. Display Settings If the Show Inactive Devices checkbox is checked, devices that are no longer on the local network will display in the Local Network Local Devices list as an inactive device. If this checkbox is not checked, inactive devices will not be displayed in the device list. Enable Router Behind Router Alert If the Display alert when another router is connected to this router checkbox is checked, the Router Behind Router error page displays in the gateway user interface if the gateway detects the presence of a third-party router. If a third-party router is connected to the 2Wire gateway, the network can become unstable because both devices are trying to manage private IPs via NAT. 77 Management and Diagnostic Console Local Network - Address Allocation Page Note: To access this page, your organization must have the Remote Management feature enabled. If the feature is not enabled, an error message will display when you click the link to access this page. The Local Network - Address Allocation page shows the name and IP address of each device on the gateways local network, and allows you to create DHCP mappings for each device. Figure 34. MDC Local Network Address Allocation Page To change the DHCP mapping for a device:
1. From the IP Address pull-down menu next to the device, select an address from any of the available networks. 2. Click the Submit button. Note: If you change the home network IP address range, you must renew the DHCP lease on all devices on your home network and manually reconfigure all devices configured with static IP addresses. 78 Management and Diagnostic Console Firewall - Settings Page Note: To access this page, your organization must have the Remote Management feature enabled. If the feature is not enabled, an error message will display when you click the link to access this page. The Firewall - Settings page allows you to configure the firewall to pass through specific application data to a selected computer. Figure 35. MDC Firewall Settings Page Hosting an Application To host an application on the gateways network for Internet users to access (such as a Web server), the firewall must be configured to allow users on the Internet to access it. To host an application:
1. 2. From 1 Select a computer, select a computer from the pull-down menu. From 2 Edit firewall settings for this computer, click the Allow individual application(s) radio button. 79 Management and Diagnostic Console 3. From the Applications list, select an application profile. 4. Click the ADD > button. The application displays in the Hosted Applications list. 5. Click the Submit button. To stop an application that is routed to a selected computer:
1. From the Hosted Applications list, select the application profile name. 2. Click the < REMOVE button. Note: If an application does not appear in the Applications list, the list may need updating. If an update is available, click the UPDATE APPLICATION LIST button. Creating an Application Profile If the application that the user wishes to host is not included in the updated application list, you may need to create an application profile. An application profile configures the systems firewall to pass through application-specific data. 80 To create an application profile:
1. Click the Add a new user-defined application link. The Edit Application page opens. Management and Diagnostic Console Figure 36. MDC Firewall Edit Application Page 2. 3. 4. 5. 6. In the Application Name field, enter a name for the application profile. In the Protocol field, click the TCP or UDP radio button. If both protocols are required, you must create a definition for each. In the Port (or Range) field, enter the port or port range used by the application. In the Protocol Timeout (seconds) field, enter the amount of time (in seconds) that the connection in the specified range should remain open when there is no data transfer. In most cases the default value is appropriate. In the Map to Host Port field, enter the value that provides the mapping offset to the local computer. For example, if this value is set to 4000 and the range being opened is 100 to 108, the forwarded data to the first value in the range will be sent to 4000. Subsequent ports will be mapped accordingly; 101 will be sent to 4001, 102 will be sent to 4002, etc. 81 Management and Diagnostic Console 7. From the Application Type pull-down menu, select the application type: None (Default), File Transfer Protocol (FTP), Microsoft Games, H.323-based Internet telephony, IRC (Internet relay chat) server, or PPTP virtual private network server. 8. Click the Add Definition button. 9. Repeat the previous step for each port or range of ports required for the application profile. Allowing all applications DMZplus is used for hosting applications if an application will not operate properly using the Allow individual application(s) option. When in DMZplus mode, the designated computer:
Shares the gateways IP address.
Appears as if it is directly connected to the Internet.
Has all of the unassigned TCP and UDP ports opened and pointed to it.
Can receive unsolicited network traffic from the Internet. Note: DMZplus can only be configured for one computer on the local network at a time. To configure a computer on the users network for DMZplus mode:
1. Select the computer to which the user wishes to have all data sent. 2. Click the Allow all applications (DMZplus mode) radio button. 3. Click Submit. 4. Access the selected computer. 5. Confirm that the computer is configured for DHCP. If it is not, configure it for DHCP. 6. Restart the computer. When the computer restarts, it receives a special IP address from the system and all unassigned TCP and UDP ports are forwarded to it. 82 Management and Diagnostic Console Firewall - Detailed Information Page Note: To access this page, your organization must have the Remote Management feature enabled. If the feature is not enabled, an error message will display when you click the link to access this page. The Firewall - Detailed Information page shows detailed information about the gateways firewall. Figure 37. MDC Firewall Detailed Information Page Pinholes A pinhole is a configuration setting in the firewall that allows access to specific services running on the network. For example, in order for users outside the network to access a specific application (such as a game), a pinhole must be opened on the gateway firewall to allow requests to the application. The Pinholes pane shows the number of pinholes that are currently open. There are 192 pinholes available. NAT Sessions The NAT Sessions pane shows the number of NAT sessions currently running. 83 Management and Diagnostic Console Firewall - Advanced Settings Page Note: To access this page, your organization must have the Remote Management feature enabled. If the feature is not enabled, an error message will display when you click the link to access this page. The Firewall - Advanced Settings page allows you to configure the gateways firewall. Figure 38. MDC Firewall Advanced Settings Page 84 Management and Diagnostic Console Enabling Security Features The Security pane allows you to configure the gateways firewall to provide additional security features. Following are descriptions of the features. Stealth Mode. Enabling Stealth Mode suppresses error responses (for example, TCP resets). Block Ping. Enabling Block Ping blocks ping responses. Strict UDP Session Control. Enabling Strict UDP Session Control prevents another source from piggybacking onto a UDP session. Controlling Inbound and Outbound Traffic If an Inbound box is checked, the firewall allows the corresponding protocol to pass through from the Internet to the network. If an Outbound box is checked, the firewall allows the traffic from the network to pass through the firewall to the Internet. You must click the Submit button for changes to take effect. Note: Allowing inbound traffic does not mean that the firewall automatically allows this type of traffic to pass through the firewall to the network. Even if a particular protocol/application type is allowed, the firewall still checks and blocks all unsolicited traffic from the Internet unless the firewall is configured to allow the traffic through using an application profile. Disabling Attack Detection By default, the 2Wire gateway firewall rules block the attack types listed in the Attack Detection pane. Some hosted applications require that the user open specific ports (for example, TCP or UDP) to allow outside users to access their network. The Attack Detection pane allows you to configure the gateways firewall rules to allow traffic through on the specified ports. To disable attack detection for a specific port, deselect the corresponding checkbox and click the Submit button. Enabling Full Logging To log all packets, check the Enable Full Logging checkbox. Note: When full logging is enabled, the gateway logs every packet. This will significantly reduce overall system performance because the log buffer capacity will be reached more quickly. 85 Management and Diagnostic Console Voice - Configure Server Page Note: This link is present only if the 2Wire gateway is VoIP-enabled. The Voice - Configure Server page allows you to set up your VoIP server, and is used primarily for test purposes. Figure 39. MDC Voice Configure Server Page 86 Management and Diagnostic Console The Edit VoIP Settings panel displays the current SIP settings, and allows you to edit the settings. The following table describes the fields. Server IP Address Port Corresponds to the SIP proxy address. Corresponds to the SIP proxy destination port. Number of Lines Displays the number of lines allowed on the gateway. End Point Domain Register Expire Time Displays the IP domain of the SIP endpoint. Displays the default expiration (in seconds) of the SIP registration, and indicates how frequently re-registration will occur. Register Retry Interval Indicates the period of time (in seconds) before the gateway will retry registration after a failed attempt. By default, the Show CID Names and Require Authentication checkboxes are checked. Show CID Names allows the gateway to display the configured outbound caller ID information. Require Authentication allows the gateway to use authentication when registering with the SIP proxy. Use 11-digit DIDs allows the gateway to automatically append a 1 to the registration phone number. 87 Troubleshooting - DSL Diagnostics Page The Troubleshooting - DSL Diagnostics page displays data associated with the 2Wire gateways DSL link. Management and Diagnostic Console Figure 40. MDC Troubleshooting DSL Diagnostics Page Analyzing General Information The General Information pane shows diagnostic information for the current DSL connection (or connection attempt). These values are also listed in the last row of the Training History pane. Item DSLAM DSL Line Description Value Comment Lists information about the DSLAM, including country, DSLAM vendor, and specifics. During line search, the value will alternate between 1 and 2. The Searching for DSL sig-
nal comment appears until the ADSL protocol is con-
firmed with the DSLAM on the current line. 1 or 2. None or Searching for DSL signal. Downstream Rate Cap The configured DSL service downstream speed. Varies by service provider. 88 Management and Diagnostic Console Item Description Value Comment Downstream Atten. at 300kHz The measurement (in kbps) of the decrease in downstream signal strength. Varies by service provider. Uncancelled Echo Measure (in dB) of the uncan-
celled echo relative to the background noise on the line, indicating how much the uncancelled echo is affecting DSL performance. Ok or Suspicious - check phone filters and alarm. Appropriate values usually range between -25dB and
-6dB. A positive value (for exam-
ple, +12) could indicate the pres-
ence of an unfil-
tered telephony device and/or an alarm. VCXO Frequency Offset Indicates the difference between the gateways and the DSLAM ports crystal fre-
quency in parts per million
(ppm). The ideal value is zero (0). The maxi-
mum difference should be less than 150 ppm. Ok or Suspicious - hard-
ware frequency mismatch. Final Rx Gain Impulse Noise Comp. Tones Excessive Impulse Noise Indicates the current receive gain setting (in dB). Dependent on DSL line length. Ok or Suspicious - possi-
ble saturation. Indicates the number of com-
pensation tones on which impulse noise is detected. For non-interleaved lines with impulse noise, the connect rate will be lowered to avoid excessive errors on the line;
however, impulse noise may vary with time, so connect rates may vary accordingly. Impulse Noise Compensation is currently disabled for inter-
leaved lines. Indicates to what degree impulse noise is present on the line. The ideal value is zero (0). Ok or Suspicious -
Impulse noise detected. The ideal value is zero (0). 89 Item Description Value Comment Management and Diagnostic Console Impulse noise protection Delay of latency path Measurement of how much impulse noise can be miti-
gated. Dependent on the cur-
rent line configuration. Measurement of how much delay is introduced. Depen-
dent on the current line config-
uration. Reviewing Training History The Training History pane provides a record of the last 20 connection attempts. The current connection or connection attempt is displayed in the last row. Item Time Description Initially this field will display the time (since power on) in DAYS HH:MM:SS format, until the gateway can access the Internet and retrieve the current local time. Sub-
sequently the time (since power on) is displayed in YY:MM:DD and HH:MM:SS for-
mat. Line The line (1 or 2) on which the gateway is searching for a DSL signal. Downstream Rate Max 1 Max 2 Max 3 Mgn 1 Mgn 2 Attn Pwr CRCs FECs INP DLY The net user data rate (in kbps) for the connection. Maximum rate achievable at the time of the initial connection based on the line quality (specifically, the uncapped rate). Latest estimate of maximum achievable rate adjusted for changing line conditions. Current or final estimated maximum achievable rate without impulse noise com-
pensation. Noise margin (in dB) at the start of the connection. Latest noise margin adjusted for changing line conditions since the connection was first established. Measured attenuation (in dB) of the line. Transmit power (in dB). Total uncorrected errors for this connection. Total corrected errors for this connection. Impulse noise protection. Delay of latency path. 90 Management and Diagnostic Console Item Upstream Description Rate Max Mgn Attn Pwr CRCs FECs Mode Vendor State Exit Code Echo VXCO Rx Gain The new user data rate (in kbps) for the connection. Maximum rate achievable at the time of the initial connection based on the line quality (specifically, the uncapped rate). Noise margin (in dB) at the start of the connection. Measured attenuation (in dB) of the line. Transmit power (in dB). Total uncorrected errors for this connection. Total corrected errors for this connection. The DSL mode used (G.DMT, T1.413, or G.LITE). Vendor ID of the DSLAM (for example, ALCB indicates Alcatel DSLAM in G.DMT mode). The internal state of the modem. If there are repeated connection problems, tech-
nical support representatives can use this information to determine at what point during training the modem failed, or whether the modem is repeatedly failing at the same point. Indicates the reason for a lost connection or a terminated training attempt. Follow-
ing are examples of the typical values that can be represented:
ERR_LOF_LIMIT - Retrained due to loss of framing. ERR_LOS_LIMIT - Retrained due to loss of signal. ERR_HI_BER_LIMIT - Retrained due to excessive CRCs. RESTART - System deliberately restarted modem (line search, reprovisioning, or 30-
second timeout when waiting for DSL signal. ERR_STATE_TIMEOUT - Modem timed out during training (for example, the modem failed to detect pilot signal at the appropriate time). ERR_ALL_OPTIONS_FAIL - Failed to negotiate a final bitrate with DSLAM. RETRAIN_HIGHER - Proactive retrain in order to obtain a significantly higher connect rate. A measure of the uncancelled echo relative to the background noise on the line. This is an indication of how much the uncancelled echo is affecting DSL perfor-
mance, rather than an absolute measure of the uncancelled echo. Indicates the difference between the gateways and the DSLAM ports crystal fre-
quency in parts per million (ppm). Indicates the current receive gain settings, which will depend on the length of the DSL line. INC Tones Indicates the number of compensation tones on which impulse noise is detected. 91 Management and Diagnostic Console Reviewing Bitloading The Bitloading pane shows the bits loaded per tone for the upstream (tones 6 to 31) and downstream
(tones 32 to 255) spectrum. A single hex-digit for each tone shows the numeric values (0 to F) in addition to the bar-graph depiction. 92 Management and Diagnostic Console Troubleshooting - Event Log Page The Troubleshooting Event Log page displays all security related events for the broadband and local network. Log information is stored in an 8 KB buffer. When the buffer is full, the oldest items are purged from the log. You can also clear the log contents by clicking the Clear Log button. Figure 41. MDC Troubleshooting Event Log Page You can view specific information by selecting which log to view from the pull-down menu and then clicking the Filter button (the screen capture depicted above has the system filter applied). Following are descriptions of the logs.
Access. Shows the current access log, which registers all significant Content Screening and Internet Access Control events.
All. Shows all logs that register a significant event (access, firewall, fw alert, system, and wra).
Firewall. Shows all detailed firewall events, including Internet Access Control and Firewall Monitor. FW Alert. Shows the current Firewall Monitor log, which registers all significant Firewall Monitor-related events.
HURL. Shows the Broadband Redirect messages that have been enabled by a service provider. 93 Management and Diagnostic Console
Modem. Shows the current modem log, which registers all significant modem-related events.
System. Shows the current system log, which registers all significant events within the 2Wire gateway since it was last restarted.
WRA. Shows the current Web Remote Access log, which registers all significant Web Remote Access-
related events. Each log entry includes the severity level, a description of the event, and the actual time that it occurred. The most recent events display at the bottom of the list. Events generate an Informational (INF) or Warning (WRN) severity level. Informational indicates events that are informational only; Warning indicates an unexpected condition that does not affect the 2Wire gateways ability to operate (for example, a network problem or the 2Wire gateway is not configured properly). For events that involve the transfer of packets, the following additional information is displayed. Item src dst ipprot sport dport Description Source IP address Destination IP address Protocol number as indicated in the IP header field Source port (TCP and UDP) Destination port (TCP and UDP) Disposition of the event The action taken when the event occurs (for example, Unknown inbound session stopped) 94 Management and Diagnostic Console Troubleshooting - Network Tests Page The Troubleshooting Network Tests page provides the Ping, Traceroute, and DNS Query tools, which help diagnose problems with the 2Wire gateway or 2Wire gateway connections. Figure 42. MDC Troubleshooting Network Tests Page The Ping test allows you to ensure that the 2Wire gateway can send data packets to (ping) a remote host. The Traceroute test traces the number of times a data packet sent from the 2Wire gateway is routed before it reaches its destination. The DNS Query test finds the IP address of the domain name service. 95 Management and Diagnostic Console To perform a ping or traceroute test:
1. 2. 3. From the drop-down menu, select Ping or Traceroute. In the Host field, enter the URL of the host location to which you wish the 2Wire gateway to send the ping or traceroute. In the Test field, enter the number of times you want the ping to occur (the maximum is 25) or the number of hops you want traceroute to trace. 4. In the Packet Size field, enter the packet size you wish to send. The maximum packet size is 576. 5. Check the Enable network name resolution checkbox. This will ensure that the name of the host location is displayed along with the corresponding IP address. 6. Click the Start button. The results are displayed on the page as they occur, and include round trip latency; the aggregate number of packets sent, received, and lost; and the minimum, maximum, and average round-trip latency. To discontinue Ping or Traceroute, click the Stop button. To perform a DNS query:
1. 2. From the drop-down menu, select DNS Query. In the Host field, enter the domain name (URL) for which you wish to obtain the IP address. 3. Click the Start button. 96 Management and Diagnostic Console Troubleshooting - Upgrade History Page The Troubleshooting - Upgrade History page shows a log of all system software upgrades, and lists the upgrades in the order in which they occurred. Figure 43. MDC Troubleshooting Upgrade History Page The Upgrade History page shows the following information. Item Model number Hardware version Software version Upgrade Log Description The 2Wire gateway model number. The current 2Wire gateway hardware version. The current 2Wire gateway software version. The initial software version, and a record of the last 10 upgrades. 97 Management and Diagnostic Console Troubleshooting - Resets Page Note: To access this page, your organization must have the Remote Management feature enabled. If the feature is not enabled, an error message will display when you click the link to access this page. The Troubleshooting Resets page allows you to reset various components associated with the 2Wire gateway network. Figure 44. MDC Troubleshooting Resets Page The Clear button in the Local Network field clears all devices from the Local Network list. Doing so will change the configuration settings, and may affect 2Wire gateway operation because it removes all devices
(such as computers) from your network. The Reset button in the DSL Connection field retrains the 2Wre gateways DSL connection. The Reset button in the ISP Connection field resets the PPP connection and/or releases and renews the broadband IP address. 98 Management and Diagnostic Console The Reset button in the Broadband Link field allows you to reset the 2Wire gateway broadband link. For 2Wire gateway models with a DSL connection, this means the DSL connection is reset. The Reset button in the Gateway field allows you to restart the 2Wire gateway. During 2Wire gateway restart, the Troubleshooting page cannot be accessed until the 2Wire gateway completely restarts and the connection is reestablished. The Reset button in the to Factory State field resets the 2Wire gateway to an unprovisioned default state. Doing so will remove all your configuration settings, and requires 2Wire gateway software reinstallation. WARNING: Resetting the 2Wire gateway to an unprovisioned default state will clear all update records from the Upgrade History page, and delete all provisioning, firewall, and Enhanced Services configuration settings. 99 Management and Diagnostic Console Advanced - Syslog Settings Page The Advanced - Syslog Settings page allows users to maintain a history of security events greater than the capacity of the 2Wire gateway by enabling a syslog server. Note: Use of this feature requires a UNIX or Linux computer running a syslog daemon. Figure 45. MDC Advanced Syslog Settings Page To enable syslog and specify the location of a syslog server:
1. Check the Enable Syslog checkbox. 2. In the Server Location field, enter the IP address of a UNIX or Linux computer running a syslog daemon. 3. Optional: In the Server Port field, enter the outbound port number upon which the syslog server is located. 4. To limit the number of log packets, check the Enable Throttling checkbox. 5. In the Limit Logging to field, enter the number of logs per second that you wish to log. 6. Click the Submit button. 100 Management and Diagnostic Console Advanced - Provisioning Info Page The Advanced Provisioning Info page displays the parameters with which the 2Wire gateway was provisioned. Figure 46. MDC Advanced Provisioning Information Page 101 Management and Diagnostic Console The gateway provisioning parameters are dynamic, and vary depending on the software version that the gateway is running.
Module Configuration. Configuration parameters for modules listed in the Advanced Link Manager States page. The parameters are set by broadband provisioning.
UI Param Configuration. Configuration parameters that affect the user interface and user interaction. The parameters are set by broadband provisioning.
Server Set Configuration. Configuration information defining how the gateway is connected to and interacts with backend provisioning.
Firewall Configuration. Configuration information for the firewall. 102 Management and Diagnostic Console Advanced - Configure Time Services Page Note: To access this page, your organization must have the Remote Management feature enabled. If the feature is not enabled, an error message will display when you click the link to access this page. The Advanced Configure Time Services page allows you to view and change system time and date settings. Figure 47. MDC Advanced Configure Time Services Page During the 2Wire gateway setup process, you specify the time zone in which you are located so that the time and date are automatically displayed in the 2Wire gateway user interface. These time settings are displayed in the Current Time Settings panel, which shows the current date, time, time zone, and whether the time was automatically or manually configured. If you wish to manually set the time and date, you can do so in the Manually Set Time/Date panel. 103 Management and Diagnostic Console To manually set the time and date:
1. Check the Enable checkbox. 2. 3. 4. In the Time field, enter the time in 24-hour HH:MM:SS format (for example, 10:02:11). In the Date field, enter the date in YYYY/MM/DD format (for example, 2006/10/09). From the Time Zone pull-down menu, select the time zone. The available time zones are Hawaii, Alaska, Pacific, Mountain, Arizona, Central, Eastern, Indiana, and Atlantic (Canada). 5. Check the Daylight Savings Time checkbox if you wish to automatically adjust for daylight savings time. You can also specify the time servers from which you wish to obtain system time by entering the time server Internet address in the Time Servers fields. These settings are typically provided by the service provider and/or backend management system. 104 Management and Diagnostic Console Advanced - Configure Services Page Note: To access this page, your organization must have the Remote Management feature enabled. If the feature is not enabled, an error message will display when you click the link to access this page. The Advanced Configure Services page allows you to enable the 2Wire gateway to operate in bridged mode, change the timeout settings for NAT, enable notification messages, enable the SIP ALG, and change the upstream maximum transmission rate. Figure 48. MDC Advanced Configure Services Page Routing By default, the 2Wire gateway is configured in routed mode. The Advanced Configure Services page allows you to configure the 2Wire gateway to operate in bridged mode. 105 Management and Diagnostic Console IMPORTANT: Bridged mode is intended for testing purposes only, as in WT-062 (ADSL), BER (Bit Rate Error), or industry standard performance tests. When routed mode is disabled, the 2Wire gateway can no longer be managed via CMS, and any DSL connection will require an external PPP connection (via software of third-party hardware). It is strongly recommended that you disable routed mode ONLY if you thoroughly understand the ramifications of doing so. To operate the gateway in bridged mode:
1. Deselect the Enable Routing checkbox. 2. Click the Submit button. Most gateway features are now disabled, including firewall and stateful packet inspection, DHCP, NAT, DNS, PPP, and remote management. The gateway no longer functions as a gateway and is, in effect, a multi-
protocol (Ethernet, wireless, and USB) bridge. Note: When routing is disabled the gateways local IP address is set to 172.16.0.1/16. Computers connected to the 2Wire gateway will retain the IP address assigned by the gateways DHCP server until a new IP address is obtained from an alternative DHCP server, or is manually assigned. To re-enable routed mode:
1. Configure the computers IP address to work on the same subnet as the gateway. a. From the Windows desktop or the Start menu, right-click the My Network Places icon, then left-click Properties. b. Right-click the icon that represents the network connection to the gateway, and left-click Properties. 106 c. Click Internet Protocol (TCP/IP), then click the Properties button. Management and Diagnostic Console d. In the General tab, click the Use the following IP address radio button. In the IP address field, enter an IP address between 172.16.1.1 to 172.16.1.32. In the Subnet mask field, enter 255.255.0.0. In the Default gateway and Preferred DNS server fields, enter 172.16.0.1. e. Click OK. f. If required, reboot the system for the changes to take effect. 2. Attach the computer to the Local Network port of the 2Wire gateway. 3. In the Web browser address bar, enter 172.16.0.1/management. 4. Click Configure Services. 107 Management and Diagnostic Console 5. Click the Enable Routing checkbox. 6. Click the Submit Settings button. The gateway PPP, routing, and TCP/IP functions are now re-enabled, and the Local Network LED will turn Green. The computer can now be reset to a DHCP-assigned IP address, or left to obtain it statically. Changing Timeout Parameters By default, TCP and UDP are configured to timeout in 1,440 and 10 minutes, respectively. You can change the parameters by entering different values in the TCP Timeout and UDP Timeout fields, and then clicking the Submit button. Enabling Broadband Status Notification Note: This field will display only if the CMS organization has the Broadband Status Notification feature enabled. To receive a notification message that the gateway has lost broadband connectivity and cannot access the Internet, check the Enable checkbox. Enabling Missing DSL Filter Notification Note: This field will display only if the CMS organization has the Missing DSL Filter Notification feature enabled. To receive a notification message that the gateway has detected a missing DSL filter, check the Enable checkbox. Enabling SIP Application Layer Gateway To enable the SIP ALG on the gateway firewall, check the Enable checkbox. Changing the Upstream MTU The MTU (Maximum Transmission Unit) is the largest size packet or frame, specified in octets (eight-byte bits), that can be sent from a computer to the network. The 2Wire gateways MTU varies, depending on the connection type used (for example, PPP or direct IP). To change the gateways upstream MTU:
1. In the Force Upstream MTU field, enter the value specified by the service provider. 2. Click the Submit button. 108 Management and Diagnostic Console Advanced - Static Routes Note: To access this page, your organization must have the Remote Management feature enabled. If the feature is not enabled, an error message will display when you click the link to access this page. The Advanced - Static Routes page allows you to manually configure static routes that specify the transmission path data must follow between devices on the gateway network. Figure 49. MDC Advanced Static Routes Page To define a static route:
1. 2. 3. In the Subnet IP field, enter the IP address of the network to which you want to configure a static route. In the Subnet Mask field, enter the subnet mask of the destination network. In the Gateway IP field, enter the IP address of the router for the specified subnet. 4. Click the Add button. 109 The Route List shows a list of static routes defined by the user. For each user-defined static route, the following information is displayed:
Management and Diagnostic Console
Subnet IP
Subnet Mask
Gateway
Interface 110 Management and Diagnostic Console Advanced - DNS Resolve Page Note: To access this page, your organization must have the Remote Management feature enabled. If the feature is not enabled, an error message will display when you click the link to access this page. The Advanced - DNS Resolve page allows users to name network devices (such as printers or Web servers) so that they may be easily accessed by other users on the network. Figure 50. MDC Advanced DNS Name Table Page To add entries to the Name table:
1. 2. In the DNS name field, enter a name for the device. In the IP Address field, enter the devices IP address. 3. Click ADD. 4. The Name table displays the name you defined for each device, the devices IP address, and the entry type. To remove the device from the Name table, click the Remove button. 111 Management and Diagnostic Console Advanced - Traffic Shaping Page Note: To access this page, your organization must have the Remote Management feature enabled. If the feature is not enabled, an error message will display when you click the link to access this page. The Advanced - Traffic Shaping page allows users to change the 2Wire gateways maximum upstream connection rate. Figure 51. MDC Advanced Traffic Shaping Page WARNING: Modifying the gateways configuration settings may impede or interrupt the users broadband service, or violate the service providers service level agreement. To change the gateways upstream connection rate:
1. Check the Enable Traffic Shaping checkbox. 2. In the New Upstream Rate field, enter the upstream rate at which you want the gateway to connect. 3. Click the Submit button. 112 Management and Diagnostic Console Advanced - Link Manager States Page The Advanced Link Manager States page is a tree representation of the 2Wire gateway interface stack, and shows the internal state of the 2Wire gateway. Figure 52. MDC Advanced Link Manager States Page The Link Manager States page is used to gather dynamic information on internal networking modules, and is based on the runtime configuration of the 2Wire gateway. The information cannot be used to configure the 2Wire gateway. 113 Management and Diagnostic Console To view information about each node, click the node link. Information displays below the Link Manager States tree, and includes the following:
Node Information Description Link status Up. The link is functioning properly. Climbing. The link is attempting to establish a connection. Down. The link is not yet configured. Error. An error has occurred. State changes The number of times the state of the link has changed (since last reboot). 114 The following table shows the possible nodes that can display on the Link Manager States page. Management and Diagnostic Console Node root0 global0 device0 rnat0 route0 fw0 cms0 home0 vlan0 ipnet1 vlanmon0 ipbridge0 ipnet2 vlan3 bband0 vlan1 dhcp0 ipnet0 Description Root for configuration tree. Branch for all global configuration modules. Maintains the status and configuration for devices on the 2Wire gateway. Maintains the application mappings and pinholes for nodes on the 2Wire gateway. Maintains all static routes on the 2Wire gateway. Maintains all firewall rules on the 2Wire gateway. Monitors CMS connectivity and activity with the 2Wire gateway. Branch for the home network modules. Home network virtual LAN configuration module. Home network IP configuration module. Home network virtual LAN monitor for activity. Home network IP bridge/DMZ configuration module. Home network public IP network configuration module. Home network voice virtual LAN module. Branch for the primary broadband network. Primary broadband virtual LAN configuration module. Primary broadband DHCP client module. Primary broadband IP configuration module. dnstest0 Primary broadband DNS access test module. vlan2 dsl0 apvc0 pppoe0 pppoa0 rtatm0 Primary broadband PPP bridge virtual LAN. DSL device control module. Primary broadband ATM and auto PVC search module. Primary broadband PPPoE configuration module. Primary broadband PPPoA configuration module. Primary broadband routed ATM configuration module. The nodes that display are dependent on the 2Wire gateway. For example, 2Wire gateways that are not connected to the Internet via ADSL will not display ADSL information. 115 Management and Diagnostic Console Advanced - Detailed Log Page The Advanced Detailed Log page is a debug log facility modeled after syslog, and provides advanced diagnostic capabilities. Figure 53. MDC Advanced Detailed Log Page Note: The Detailed Log retains a persistent (across upgrades and system restarts) record of gateway events. 116 Management and Diagnostic Console From the Filter pull-down menus, you can select the level of filtering you want to view (for example, DBG or higher) and the specific gateway component that was affected. Each log displays the following information:
Status level: DBG (debug), INF (informational), NTC (notice), WRN (warning), ERR (error), FTL (fatal), ALR
(alarm), or EMR (emergency).
Timestamp (in days, hours, minutes, and seconds) since the state occurred. A + preceding the timestamp designates that the timestamp occurred upon system startup. A time zone (such as GMT) following the timestamp designates that the timestamp occurred after system startup.
Module in which the state occurred (for example, netdev).
Description of the log entry. When you click Insert Mark, a placeholder is inserted into the code string to mark where the error was found. The following table lists the filters that can be applied. Filter
(All) aaal5 algaim algesp algh323 alghttp algintt Description All log messages ATM AAL5 encapsulation AOL Instant Messenger ALG IPSec ESP ALG H323 ALG HTTP ALG Intoto Wrapper ALG algmsgame Microsoft Game ALG algmsn algpptp algrtp algrtsp algsip algww amon atm cm devfs MSN Messenger ALG PPTP ALG RTP ALG RTSP ALG SIP ALG Kineto QoS ALG Application monitoring issues ATM stack Configuration Manager/configuration database Device files system 117 Filter dhcpd dsl dslice eth Description DHCP server DSL modem and DSL control module DSL hardware Ethernet device ethatm Ethernet to ATM bridge (1483) fw gpio Firewall GPIO (general purpose input/output) device hostapd Wireless access point daemon hpna httpd initd ipsess jtag kacct kelog kmem kppp kpppoa kpppoe krtlock kthread led lmd login lwdp mdog msig HPNA interface HTTP daemon Initd daemon logs for application control IP firewall session JTAG device Kernel accounting Kernel event log module Memory PPP kernel network module PPPoA kernel network module PPPoE kernel network module Thread locking Thread LED device Link Manager daemon logs for module Login application Lightweight data protocol (VoHPNA) Hardware watchdog Machine signal-related named DNS server Management and Diagnostic Console 118 Filter netdev nodesd pdump pkg pki ppp reset rpcd rtatm scc sip sntpc stream syslog system ulib usbd Description Network device core Network device status daemon Packet dump (used for debugging) Package management Public Key Infrastructure subsystem Point-to-Point Protocol daemon Reset switch driver RPCD daemon logs for CMS interaction Routed ATM driver Voice SLIC drivers SIP Network time client Stream network core Syslog daemon System level Configuration libraries USB device usbhost USB host vlan voh voiced voip vr vrsip wave Virtual LAN VoHPNA driver Voice daemon Voice over IP Voice router Voice SIP module Wireless device Management and Diagnostic Console 119 Glossary A Access Point. A device that transports data between a wireless network and a wired network. With the help of the system, a wireless base station is an example of an access point that acts between a wireless node and with other wired PCs and peripherals. D Default Gateway. A device that is placed between network segments (or subnets) to ensure that traffic is properly routed between different subnets. To communicate with a device on another network, users need to know the default gateways IP address. DHCP (Dynamic Host Configuration Protocol). A TCP/IP protocol that allows servers to assign IP addresses dynamically to PCs and workstations. The PC or workstation borrows the IP address for a period of time, then the IP address returns to the DHCP server for reassignment. DMZ (Demilitarized Zone). A computer or small subnetwork that sits between a trusted internal network
(such as a LAN), and an untrusted external network (such as the Internet). Typically, the DMZ contains devices accessible to Internet traffic, such as Web (HTTP) servers, FTP servers, SMTP (e-mail) servers and DNS servers. DNS (Domain Name System). The DNS is the way that Internet domain names (such as www.2wire.com) are located and translated into IP addresses. DSLAM (Digital Subscriber Line Access Multiplexer). A device found in telephone company central offices that takes a number of DSL subscriber lines and concentrates them onto a single ATM line. E Ethernet. A type of local area network that operates over twisted wire and cable at speeds of up to 10 Mbps. I ICMP (Internet Control Message Protocol). ICMP supports packets containing error, control, and informational messages. For example, the PING command uses ICMP to test an Internet connection. Although ICMP is generally harmless, there are some message types that should be dropped. Redirect (5), Alternate Host Address (6), and Router Advertisement (9) can be used to redirect traffic from your site. Echo (8), Timestamp (13), and Address Mask Request (17) can be used to obtain information on whether the host is up, the local time, and the address mask used on your network, respectively. ICMP messages are also sometimes used as part of DOS attacks (such as flood ping or ping of death). Invalid TCP flags. Combination of TCP flags (such as SYN/FIN) that signal a malicious attempt to get past the firewall. IP (Internet Protocol). The standard signaling method used for all communication over the Internet. 120 Glossary IP Address. A numeric identifier for your computer. Just as the post office delivers mail to your home address, servers know to deliver data to your computer based on your IP address. IP addresses can be dynamic, meaning that your computer borrows the IP address for the necessary timeframe, or they can be fixed, meaning that the number is permanently assigned to your computer. L LAN (Local Area Network). A network connecting a number of computers to each other or to a central server so that the computers can share programs and files. M MAC (Media Access Control) Address. A hardware address that has been embedded into the network interface card (NIC) by its vendor to uniquely identify each node, or point of connection, of a network. Map to Host Port. When set (not left blank or set to 0), this value provides the mapping offset to the local computer. For example, if this value is set to 4000 and the range being opened is 100 to 108, the forwarded data to the first value in the range will be sent to 4000. Subsequent ports will be mapped accordingly; 101 will be sent to 4001, 102 will be sent to 4002, etc. MTU (maximum transmission unit). The largest size packet or frame, specified in octets (eight-bit bytes), that can be sent from a computer to the network. The Internet's TCP uses the MTU to determine the maximum size of each packet in any transmission. If the MTU is too large, the packet may need to be retransmitted if it encounters a router that can't handle that large a packet. Too small an MTU size means relatively more header overhead and more acknowledgements that have to be sent and handled. Most computer operating systems provide a default MTU value that is suitable for most users. In general, Internet users should follow the advice of their Internet service provider (ISP) about whether to change the default value and what to change it to. N NAT (Network Address Translation). Enables a LAN to use one set of IP addresses for internal traffic and a second set of IP addresses for external traffic. This feature is used by the system so an end user can have an internal computer network in their home, with all its computers using internal IP addresses, using only one routable IP address, which accesses the outside (Internet). P PAT (Port Address Translation). Allows hosts on a LAN to communicate with the rest of a network (such as the Internet) without revealing their own private IP address. All outbound packets have their IP address translated to the routers external IP address. Replies come back to the router, which then translates them back into the private IP address of the original host for final delivery. PPP (Point-to-Point Protocol). A protocol that allows a computer to access the Internet using a dial-up phone line and a high-speed modem. This can be accomplished over Ethernet (PPPoE), or over Asynchronous Transfer Mode (ATM; PPPoA). 121 Glossary PPPoA (Point-to-Point Protocol over ATM). A specification for connecting multiple computer users on an Ethernet LAN to a remote site through common customer premises equipment (such as a modem). PPPoA combines the Point-to-Point Protocol (PPP), commonly used in dialup connections, with the ATM
(Asynchronous Transfer Mode) protocol, which supports multiple users in a LAN. PPPoE (Point-to-Point Protocol over Ethernet). A specification for connecting multiple computer users on an Ethernet LAN to a remote site through common customer premises equipment (such as a modem). PPPoE combines the Point-to-Point Protocol (PPP), commonly used in dialup connections, with the Ethernet protocol, which supports multiple users in a LAN. Protocol Timeout. The amount of time (in seconds) during which a connection in the specified range remains open when there is no data transfer. After a connection has been established on a given port, the sender and receiver usually determine when the session is finished and the connection is closed. However, if the connection is left open and data transfer stops, the system must eventually close the connection and reclaim the resources in order to protect your network. In some cases, the system might close the application during normal operation (for example, if there is a long pause between data transfer). If this is the case, lengthening the timeout may help. PVC (permanent virtual circuit). A virtual circuit that is permanently available. Used to establish connections between hosts that communicate frequently. R Router. The central switching device in a packet-switched computer network that directs and controls the flow of data through the network. S Subnet Mask. The IP addressing system allows subnetworks or interchanges to be created, and devices numbers or extensions to be established within these subnetworks. These numbers are created using a mathematical device called a subnet mask. A subnet mask, like the IP address, is a set of four numbers in dotted decimal notation. Subnet masks typically take three forms:
255.0.0.0 255.255.0.0 255.255.255.0 The number 255 masks out the corresponding number of the IP address, resulting in IP address numbers that are valid for the network. For example, an IP address of 123.45.67.89 and a subnet mask of 255.255.255.0 results in a sub network number of 123.45.67.0 and a device number of 89. The subnet mask used for the network typically corresponds to the class of IP address assigned, as shown in the following table. IP Address Class Dotted-Decimal Notation Ranges Corresponding Subnet Mask Class A Class B Class C 1.xxx.xxx.xxx to 126.xxx.xxx.xxx 255.0.0.0 128.0.xxx.xxx to 191.255.xxx.xxx 255.255.0.0 192.0.0.xxx to 223.255.255.xxx 255.255.255.0 122 Glossary SYN Flood. A method that the user of a hostile client program can use to conduct a denial-of-service (DOS) attack on a computer server. The hostile client repeatedly sends SYN (synchronization) packets to every port on the server, using fake IP addresses. T TCP/IP (Transmission Control Protocol/Internet Protocol). A method of packet-switched data transmission used on the Internet. The protocol specifies the manner in which a signal is divided into parts, as well as the manner in which address information is added to each packet to ensure that it reaches its destination and can be reassembled into the original message. Transmission Control Protocol/Internet Protocol (TCP/IP). See TCP/IP. U UDP (User Datagram Protocol). A TCP/IP protocol describing how data packets reach application programs within a destination computer. V VPI (Virtual Path Identifier). Identifier contained in the ATM cell header to designate the virtual path on the physical ATM link. VCI (Virtual Channel Identifier). Identifier contained in the ATM cell header to designate the virtual channel on the physical ATM link. W Wireless. Transmission of data over radio waves rather than wiring. Wireless channel. The 2Wire gateway supports up to 13 wireless channels (based on country restrictions). For example, the United States and Canada support channels 1 to 11; Europe and Australia support channels 1 to 13. In an 802.1b or 802.11g wireless network, data is transmitted at 2.5GHz. Wireless nodes communicate with each other using radio frequency signals in the band between 2.4GHz and 2.5GHz. Neighboring channels are 5 MHz apart; however, due to the spread spectrum effect of the signals, a node sending signals using a particular channel will use frequency spectrum 12.5HHz above and below the center channel frequency. As a result, two separate wireless networks using neighboring channels (for example, channels 1 and 2) in the same general vicinity will interfere with each other. Applying two channels that allow the maximum channel separation (such as channels 1 and 6, or channels 6 and 11) will provide a noticeable performance increase over networks with minimal channel separation. The radio frequency channels used in 802.11b/g networks are shown in the following table. Channel Channel 1 Channel 2 Range 2399.5 MHz - 2424.5 MHz 2404.5 MHz - 2429.5 MHz 123 Glossary Channel Channel 3 Channel 4 Channel 5 Channel 6 Channel 7 Channel 8 Channel 9 Channel 10 Channel 11 Channel 12 Channel 13 Range 2409.5 MHz - 2434.5 MHz 2414.5 MHz - 2439.5 MHz 2419.5 MHz - 2444.5 MHz 2424.5 MHz - 2449.5 MHz 2429.5 MHz - 2454.5 MHz 2434.5 MHz - 2459.5 MHz 2439.5 MHz - 2464.5 MHz 2444.5 MHz - 2469.5 MHz 2449.5 MHz - 2474.5 MHz 2454.5 MHz - 2479.5 MHz 2459.5 MHz - 2484.5 MHz The preferred channel separation between the channels in neighboring wireless networks is 25 MHz (5 channels). This means that you can apply up to three different channels within your wireless network. There are only 11 usable wireless channels in the United States. It is recommended that you start using channel 1 and expand to channel 6 (and 11 when necessary), as these three channels do not overlap. 124 Regulatory Information Declaration of Conformity Trade Name: 2Wire Responsible Party: 2Wire, Inc. Address: 1704 Automation Parkway San Jose, CA This device complies with Part 15 of the FCC rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:
Reorient or relocate the receiving antenna. Increase the separation between the equipment and the receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help. You are cautioned that any changes or modifications not expressly approved in this manual could void your authority to operate this equipment. Only peripherals (computer input/output devices, terminals, printers, and so forth) that comply with FCC Class B limits may be attached to this computer product. Operation with noncompliant peripherals is likely to result in interference to radio and television reception. All cables used to connect peripherals must be shielded and grounded. Operation with cables, connected to peripherals that are not shielded and grounded may result in interference to radio and television reception. WARNING: While this device is in operation, a separation distance of at least 20 cm (8 inches) must be maintained between the radiating antenna inside the ERU and the bodies of all persons exposed to the transmitter in order to meet the FCC RF exposure guidelines. Making changes to the antenna or the device is not permitted. Doing so may result in the installed system exceeding RF exposure requirements. This device must not be co-located or operated in conjunction with any other antenna or radio transmitter. Installers and end users must follow the installation instructions provided in this guide. FCC Part 68 This equipment complies with Part 68 of the FCC rules. On the bottom of this equipment is a label that contains, among other information, the FCC equivalence number (REN) for this equipment. If requested, this information must be provided to the telephone company. The REN is used to determine the quantity of devices that may be connected to the telephone line. Excessive RENs on the telephone line may result in the devices not ringing in response to an incoming call. In most, but not all areas, the sum of the RENs should not exceed five. To be certain of the number of devices that may be connected to the line, as determined by the total RENs, contact the telephone company to determine the maximum REN for the calling area. If the terminal equipment causes harm to the telephone network, the telephone company will notify you in advance that temporary discontinuance of service may be required. But if advance notice is not practical, the telephone company will notify the customer as soon as possible. Also, you will be advised of your right to file a complaint with the FCC if you believe it is necessary. The telephone company may make changes in its facilities, equipment, operations or procedures that could affect the operations of the equipment. If this happens, the telephone company will provide advance notice in order for you to make the necessary modifications in order to maintain uninterrupted service. If trouble is experienced with this equipment, please contact the store, reseller, or agent from whom the product was purchased. Repair of this equipment should be made only by the 2Wire Service Center or a 2Wire authorized agent. 125
| frequency | equipment class | purpose | ||
|---|---|---|---|---|
| 1 | 2007-05-02 | 2412 ~ 2462 | DTS - Digital Transmission System | Original Equipment |
| app s | Applicant Information | |||||
|---|---|---|---|---|---|---|
| 1 | Effective |
2007-05-02
|
||||
| 1 | Applicant's complete, legal business name |
ARRIS
|
||||
| 1 | FCC Registration Number (FRN) |
0017832825
|
||||
| 1 | Physical Address |
310 Providence Mine Road
|
||||
| 1 |
Nevada City, California 95959
|
|||||
| 1 |
United States
|
|||||
| app s | TCB Information | |||||
| 1 | TCB Application Email Address |
h******@atcb.com
|
||||
| 1 | TCB Scope |
A4: UNII devices & low power transmitters using spread spectrum techniques
|
||||
| app s | FCC ID | |||||
| 1 | Grantee Code |
PGR
|
||||
| 1 | Equipment Product Code |
2W2701HGV
|
||||
| app s | Person at the applicant's address to receive grant or for contact | |||||
| 1 | Name |
M****** A******** R******
|
||||
| 1 | Title |
Principal Hardware Engineer Regulatory compliance
|
||||
| 1 | Telephone Number |
530-2********
|
||||
| 1 | Fax Number |
530-2********
|
||||
| 1 |
m******@arris.com
|
|||||
| app s | Technical Contact | |||||
| 1 | Firm Name |
Elliott labs
|
||||
| 1 | Name |
D**** B****
|
||||
| 1 | Physical Address |
645 West Maude Ave
|
||||
| 1 |
Sunnyvale, California 94086
|
|||||
| 1 |
United States
|
|||||
| 1 | Telephone Number |
408 2********
|
||||
| 1 | Fax Number |
408 2********
|
||||
| 1 |
d******@elliottlabs.com
|
|||||
| app s | Non Technical Contact | |||||
| n/a | ||||||
| app s | Confidentiality (long or short term) | |||||
| 1 | Does this application include a request for confidentiality for any portion(s) of the data contained in this application pursuant to 47 CFR § 0.459 of the Commission Rules?: | Yes | ||||
| 1 | Long-Term Confidentiality Does this application include a request for confidentiality for any portion(s) of the data contained in this application pursuant to 47 CFR § 0.459 of the Commission Rules?: | No | ||||
| if no date is supplied, the release date will be set to 45 calendar days past the date of grant. | ||||||
| app s | Cognitive Radio & Software Defined Radio, Class, etc | |||||
| 1 | Is this application for software defined/cognitive radio authorization? | No | ||||
| 1 | Equipment Class | DTS - Digital Transmission System | ||||
| 1 | Description of product as it is marketed: (NOTE: This text will appear below the equipment class on the grant) | 802.11 BG Access Point | ||||
| 1 | Related OET KnowledgeDataBase Inquiry: Is there a KDB inquiry associated with this application? | No | ||||
| 1 | Modular Equipment Type | Does not apply | ||||
| 1 | Purpose / Application is for | Original Equipment | ||||
| 1 | Composite Equipment: Is the equipment in this application a composite device subject to an additional equipment authorization? | No | ||||
| 1 | Related Equipment: Is the equipment in this application part of a system that operates with, or is marketed with, another device that requires an equipment authorization? | No | ||||
| 1 | Grant Comments | Power listed is Conducted. The antenna used for this device must be installed to provide a separation distance of at least 20cm from all persons, and must not be co-located or operating in conjunction with any other antenna or transmitter other than those contained within this device. Users and installers must be provided with antenna installation instructions and transmitter operating conditions for satisfying RF Exposure compliance. | ||||
| 1 | Is there an equipment authorization waiver associated with this application? | No | ||||
| 1 | If there is an equipment authorization waiver associated with this application, has the associated waiver been approved and all information uploaded? | No | ||||
| app s | Test Firm Name and Contact Information | |||||
| 1 | Firm Name |
Elliott Laboratories Inc.
|
||||
| 1 | Name |
D****** B********
|
||||
| 1 | Telephone Number |
408-2********
|
||||
| 1 | Fax Number |
408-2********
|
||||
| 1 |
d******@elliottlabs.com
|
|||||
| Equipment Specifications | |||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Line | Rule Parts | Grant Notes | Lower Frequency | Upper Frequency | Power Output | Tolerance | Emission Designator | Microprocessor Number | |||||||||||||||||||||||||||||||||
| 1 | 1 | 15C | 2412.00000000 | 2462.00000000 | 0.5000000 | ||||||||||||||||||||||||||||||||||||
some individual PII (Personally Identifiable Information) available on the public forms may be redacted, original source may include additional details
This product uses the FCC Data API but is not endorsed or certified by the FCC