FCC ID: NKR-LV65C-T3 Internet Gateway

Verizon Internet Gateway User Manual CR200A CONTENTS 01 /

INTRODUCTION 1.0 Inside the box 1.1 Getting to Know The Verizon Internet Gateway 5 5 1.2 Setting Up The Verizon Internet Gateway 10 02 /

CONFIGURING THE VERIZON INTERNET GATEWAY 2.0 Configure The Verizon Internet Gateway 15 2.1 Computer Network Configuration 2.2 Main Screen 19 26 03 /

WI-FI SETTINGS 3.0 Overview 3.1 Basic Settings 33 35 3.2 Advanced Settings 43 04 /

CONNECTED DEVICES 4.0 Device Settings 4.1 Setting Parental Controls 52 57 4.2 Universal Plug & Play 61 TABLE OF CONTENTS 3 07 /

SPECIFICATIONS 7.0 General Specifications 7.1 Connections 160 161 08 /

NOTICES 8.0 Regulatory Compliance 164 Notices 05 /

CONFIGURING ADVANCED SETTINGS 5.0 Security & Firewall 5.1 Network Settings 5.2 Diagnostics &

Monitoring 5.3 System 06 /

TROUBLESHOOTING 6.0 Troubleshooting Tips 6.1 Frequently Asked Questions 68 84 123 130 146 153 01 /

INTRODUCTION 1.0 Inside the box 1.1 Getting to Know The Verizon Internet Gateway 1.2 Setting Up The Verizon Internet Gateway INSIDE ThE bOx 1.0/ INSIDE ThE bOx Inside the product package you should find the following items. Contact Verizon (https://www.verizon.com/support/contact-us/) if any item is missing or damaged. Verizon Internet Gateway Setup guide Power adapter 1.1/ GETTING TO KNOW ThE VERIZON INTERNET GATEWAY The Verizon Internet Gateway provides fast Wi-Fi (with channel steering) for all your devices, and features built-in network security as well as parental controls, guest Wi-Fi and automatic software updates. 01 / INTRODUCTION 6 Take a moment to familiarize with the product:

GETTING TO KNOW ThE VERIZON INTERNET GATEWAY 1.1a/ RESET bUTTON The reset button allows you to reset the gateway back to its factory default state. Using the reset function will revert all settings and changes made during the setup process. To perform a factory reset and return the Verizon Internet Gateway to default settings, press and hold the reset button for 3+ seconds. The System LED will flash yellow to indicate a reset has been triggered, followed by fading in/out (white) while the gateway restarts. 1.1b/ WPS WPS is an easy way to add supported Wi-Fi devices to your network. Press the WPS button on the back of the Gateway to activate WPS. You will need to activate WPS on your Wi-Fi device too. Refer to 3.1d/ Wi-Fi Protected Setup (WPS) on page 40. 1.1c/ LEDS The LEDs indicate the system and connection status, and WPS activity. Front LED Mode Status LED Pattern System Status (O) System off Off Bootup System booting Soft blink white Firmware update Fast blink white 01 / INTRODUCTION 8 LED Pattern Fast blink yellow Soft blink red Hard blink red Solid red Front LED Mode Status Other Factory reset Hardware error No SIM card No signal Signal Status (5G/LTE Home customer) Low bar Weak mobile coverage Solid white (

) Low bar and Mid bar Good mobile coverage Solid white (

Excellent mobile Low bar, Mid bar and coverage High bar Solid white (

) Regular usage Setup complete 50% bright white Wi-Fi (

) Regular usage Passing signal Setup complete Not connected to Internet Solid white Solid white Solid red Wi-Fi disabled by user Solid green GETTING TO KNOW ThE VERIZON INTERNET GATEWAY Front LED Mode Status LED Pattern Paring Pairing WPS (in progress) WPS connection success WPS connection unsuccessful (time out) WPS connection failure (interrupted) Hard blink blue Fast blink blue Fast blink red Hard blink red Other Hardware error Soft blink red Note: Installation mode lasts for 15 minutes only during first bootup, after which the Gateway will switch to regular usage mode. Ethernet Port LED Mode Status Left LED Right LED Wired LAN connection Ethernet >

100M* Link

* Threshold level can be decided based on port capability Ethernet >

100M* Activity Ethernet <

100M* Link Ethernet <

100M* Activity No Ethernet connection Off Off Solid white Blinking white Solid yellow Off Blinking yellow Off Off Off 01 / INTRODUCTION 10 1.2/ SETTING UP ThE VERIZON INTERNET GATEWAY The Verizon Internet Gateway comes with a pre-installed SIM card and can be up and running in just a couple of minutes. The Verizon Internet Gateway can only be used with the 5G Home Internet or LTE Home Internet service, and the SIM card is only authorized for use in the Verizon Internet Gateway. You may not remove the SIM card and Insert it into another device. 1.2a/ POSITIONING ThE VERIZON INTERNET GATEWAY For the best wireless signal transmission from the Gateway to your network devices:

Place the Gateway in a central area near a window. Avoid keeping the device in the basement to get better signal. Avoid having obstacles near the device, clear any objects near the window that could interfere with getting a signal. Keep the Gateway away from metal obstructions and away from direct sunlight. Keep the Gateway away from 802.11g or 20MHz only Wi-Fi devices, 2.4GHz computer peripherals, Bluetooth devices, cordless phones, transformers, heavy-duty motors, fluorescent lights, microwave ovens, refrigerators, and other industrial equipment to prevent signal interference or loss. SETTING UP ThE VERIZON INTERNET GATEWAY 1.2b/ SETUP REQUIREMENTS To configure your wireless network via computer, you need a computer that meets the following system requirements:

For Wired Connection: Ethernet RJ-45 (LAN) port

(10Base-T/100Base-TX/1000Base-TX/ 2500Base-TX) For Wi-Fi Connection: IEEE 802.11a/b/g/n/ac/ax wireless capability An installed TCP/IP service Web browser such as Microsoft Edge, Firefox, Safari, or Google Chrome 1.2c/ SETTING UP Before you begin, if you are replacing an existing gateway, disconnect it. Remove all old gateway components, including the power supply. They will not work with the new Verizon Internet Gateway. 1. Plug the Verizon Internet Gateway into a power outlet with the included power adapter. 2. Wait for a couple of minutes for the Gateway to power up and establish an LTE/5G connection. The LED should display on

(white) after starting up. 3. Thats it! You can connect your Internet devices to the Gateways Wi-Fi networks named Verizon_<your network>

(check the gateways product label on the bottom side for 01 / INTRODUCTION 12 your unique Wi-Fi network name and password). You can also connect Internet devices to the Gateway by connecting the devices LAN ports with an Ethernet cable. Wi-Fi Network The Verizon Internet Gateway has one Wi-Fi name supporting 2.4 GHz, 5 GHz and 6 GHz signals. The Self-

Organizing Network (SON) feature lets your devices move between these signals automatically for an optimized Wi-Fi connection. 4. Go to 2.2/ Main Screen to login to the Gateway and configure settings such as Wi-Fi security. 02 /

CONFIGURING ThE VERIZON INTERNET GATEWAY 2.0 Configure The Verizon Internet Gateway 2.1 Computer Network Configuration 2.2 Main Screen 02 / CONFIGURING THE VERIZON INTERNET GATEWAY 14 Connecting the Verizon Internet Gateway and accessing its web-based User Interface (UI) are both simple procedures. Accessing the UI may vary slightly, depending on your devices operating system and web browser. CONFIGURE THE VERIZON INTERNET GATEWAY 2.0/ CONFIGURE ThE VERIZON INTERNET GATEWAY 1. Open a web browser on the device connected to the Verizon Internet Gateway network. 2. In the browser address field (URL), enter:

mynetworksettings.com, then press the Enter keyboard. Alternately, you can enter: https://192.168.1.1 Enter key on your Your 3. You may see a security message warning that Your connection is not private connection is not private when you visit mynetworksettings.com (https://192.168.1.1) for GUI management. To get to the login screen, click the ADVANCED Proceed to 192.168.1.1 (unsafe) ADVANCED button, then on Proceed to 192.168.1.1 (unsafe) link. 02 / CONFIGURING THE VERIZON INTERNET GATEWAY 16 4. The login screen will appear. The first time you access the Verizon Internet Gateway, an Easy Setup Wizard displays to help step you through the setup process. 5. On the Log in to Verizon Internet Gateway Log in to Verizon Internet Gateway screen, enter the password that is printed next to the Password on the label on the bottom of the Gateway. 6. Click Log In Log In. The Change Wi-Fi name Change Wi-Fi name screen displays. Move the selector to onon for setting up the Guest Wi-Fi personalize your Guest Wi-Fi Name and Password. Guest Wi-Fi to CONFIGURE THE VERIZON INTERNET GATEWAY For your protection, the Verizon Internet Gateway is pre-

set at the factory to use WPA2 (Wi-Fi Protected Access II) encryption for your Wi-Fi network. This is the best setting for most users and provides security. 7. Click Continue Continue. The Apply Wi-Fi changes Apply Wi-Fi changes screen appears. You have an option of saving the Wi-Fi settings as an image on your device by clicking the Save as image After you click Save as image as an image, click Apply Verizon Internet Gateway. Save as image to save your Wi-Fi settings Apply to save the Wi-Fi changes to the Save as image button. 02 / CONFIGURING THE VERIZON INTERNET GATEWAY 18 Note: Selecting Save as image browsers download folder. Save as image will store image files to your web Important: Changing the name or password of your Wi-Fi network will automatically disconnect any device connected to the Verizon Internet Gateway. Youll be prompted to reconnect by the Gateway using the new settings. CONFIGURE THE VERIZON INTERNET GATEWAY Youre all set up! screen displays once the Gateway verifies the The Youre all set up!

final settings and has successfully connected to the internet and is ready for use. You can click on Go to Network Settings the main screen of the Verizon Internet Gateway. Go to Network Settings to access Upon resetting the Verizon Internet Gateway to factory default settings, the settings printed on the label will take effect again. This guide contains troubleshooting steps that can be used to resolve connection issues with the Verizon Internet Gateway. 2.1/ COMPUTER NETWORK CONFIGURATION Each network interface on your computer should either automatically obtain an IP address from the upstream Network DHCP server (default configuration) or be manually configured with a statically defined IP address and DNS address. We recommend leaving this setting as it is. 02 / CONFIGURING THE VERIZON INTERNET GATEWAY 20 2.1a/ CONFIGURING DYNAMIC IP ADDRESSING To configure a computer to use dynamic IP addressing:

WINDOWS 7/8 1. 2. In the Control Panel, locate Network and Internet View Network Status and Tasks. View Network Status and Tasks Network and Internet, then select View your active networks Connect or disconnect In the View your active networks Connect or disconnect section, click Local Area Connection Connections Local Area Connection in the Connections field. The Local Area Connection Status window displays. 3. Click Properties window displays. Properties. The Local Area Connection Properties 4. Select Internet Protocol Version 4 (TCP/IPv4) Internet Protocol Version 4 (TCP/IPv4), then click Properties. The Internet Protocol Version 4 (TCP/IPv4) Properties Properties window displays. 5. Click the Obtain an IP address automatically Obtain an IP address automatically radio button. 6. Click the Obtain DNS server address automatically Obtain DNS server address automatically radio button, then click OKOK. 7. In the Local Area Connection Properties window, click OKOK to save the settings. 8. To configure Internet Protocol Version 6 (TCP/IPv6) to use dynamic IP addressing, repeat steps 1 to 7. However for step 4, select Internet Protocol Version 6 (TCP/

Internet Protocol Version 6 (TCP/

IPv6) IPv6) in the Properties Verizon Internet Gateway configuration). Properties option (refer to IPv6 section for COMPUTER NETWORK CONFIGURATION WINDOWS 10 1. On the Windows desktop, click on the StartStart icon. Select Network & Internet. Settings and click Network & Internet Settings 2. Ethernet. In the Network & Internet, click Ethernet 3. Select Network and Sharing Center View your basic Network and Sharing Center. The View your basic network information and set up connections network information and set up connections window displays. 4. View your active networks, click Ethernet In the View your active networks Connections field. The Ethernet Status Connections Ethernet Status window displays. Ethernet in the 5. Click Properties Properties. The Ethernet Properties Ethernet Properties window displays. 6. Select Internet Protocol Version 4 (TCP/IPv4) Internet Protocol Version 4 (TCP/IPv4), then click Properties Internet Protocol Version 4 (TCP/IPv4) Properties. The Internet Protocol Version 4 (TCP/IPv4) Properties window displays. Properties 7. Click the Obtain an IP address automatically Obtain an IP address automatically radio button. 8. Click the Obtain DNS server address automatically Obtain DNS server address automatically radio button, then click OKOK. 9. Local Area Connection Properties window, click OK OK to In the Local Area Connection Properties save the settings. 10. To configure Internet Protocol Version 6 (TCP/IPv6) to use dynamic IP addressing, repeat steps 1 to 9. However for step 6, select Internet Protocol Version 6 (TCP/

Internet Protocol Version 6 (TCP/

IPv6) in the Properties IPv6) Verizon Internet Gateway configuration). Properties option (refer to IPv6 section for 02 / CONFIGURING THE VERIZON INTERNET GATEWAY 22 MACINTOSh OS x 1. Click the Apple menu displays. Apple icon in the top left corner of the desktop. A 2. Select System Preferences System Preferences. The System Preferences window displays. Network. 3. Click Network 4. Verify that Ethernet Ethernet, located in the list on the left, is Connected. highlighted and displays Connected Assist Me. 5. Click Assist Me 6. Follow the instructions in the Network Diagnostics Assistant. 2.1b/ CONNECTING OThER COMPUTERS AND NETWORK DEVICES You can connect the Verizon Internet Gateway to other computers or set top boxes using an Ethernet cable or Wi-Fi connection. EThERNET 1. Plug one end of an Ethernet cable into one of the Ethernet ports on the bottom of the Verizon Internet Gateway. 2. Plug the other end of the Ethernet cable into an Ethernet port on the computer. 3. Repeat these steps for each computer to be connected to the Verizon Internet Gateway using Ethernet. COMPUTER NETWORK CONFIGURATION CONNECTING A WI-FI DEVICE USING WPS Wi-Fi Protected Setup (WPS) is an easier way for many devices to set up a secure Wi-Fi network connection. Instead of manually entering passwords or multiple keys on each Wi-Fi client, such as a laptop, printer, or external hard drive, the Verizon Internet Gateway creates a secure Wi-Fi network connection. In most cases, this only requires the pressing of two buttons one on the Gateway and one on the Wi-Fi client. This could be either a built-in button or one on a compatible Wi-Fi adapter/card, or a virtual button in software. Once completed, this allows Wi-Fi clients to join your Wi-Fi network. To initialize the WPS process, you can either press and hold the WPS button located on the back of the Verizon Internet Gateway for more than two seconds or use the UI and press the on-screen button. You can easily add Wi-Fi devices to your Wi-Fi network using the WPS option if your Wi-Fi device supports the WPS feature. To access WPS using the user interface:

1. From the BasicBasic menu, select Wi-FiWi-Fi settings, then click Wi-Fi Protected Setup. Wi-Fi Protected Setup 02 / CONFIGURING THE VERIZON INTERNET GATEWAY 24 2. Enable the protected setup by moving the selector to onon. 3. Use one of the following methods:

If your Wi-Fi client device has a WPS button, press the WPS button on the Gateway for more than two seconds, then click the Start WPS Start WPS button in Option 1 WPS registration process. Option 1 to start the If your client device has a WPS PIN, locate the PIN printed on the clients label or in the client documentation. Enter the PIN number in Option 2 Option 2 on the user interface. Register. Click Register Alternatively, you can enter the Gateways PIN shown on this screen into the WPS user interface of your device, if this PIN mode is supported by your Wi-Fi device. 4. After pressing the WPS button on the Gateway, you have two minutes to press the WPS button on the client device before the WPS session times out. COMPUTER NETWORK CONFIGURATION When the WPS button on the Gateway is pressed, the Status LED on the front of the Gateway begins flashing blue. The flashing continues until WPS pairing to the client device completes successfully. At this time, the Status LED turns solid blue. If WPS fails to establish a connection to a Wi-Fi client device within two minutes, the Status LED on the Gateway flashes red for two minutes to indicate the WPS pairing process was unsuccessful. After flashing red, the light returns to solid white to indicate that Wi-Fi is on. Note: Wi-Fi Protected Setup (WPS) cannot be used if WPA3 security is enabled or SSID broadcast is disabled or if MAC address authentication is enabled with an empty white list. CONNECTING A WI-FI DEVICE USING A PASSWORD 1. Verify each device that you are connecting with Wi-Fi has built-in Wi-Fi or an external Wi-Fi adapter. 2. Open the devices Wi-Fi settings application. 3. Select the Wi-Fi network name (SSID) of the Gateway from the devices list of discovered Wi-Fi networks. 4. When prompted, enter the Gateways Wi-Fi password (WPA2 or WPA3 key) into the devices Wi-Fi settings. The Gateways default Wi-Fi network name and password are located on the sticker on the bottom of the Gateway. 02 / CONFIGURING THE VERIZON INTERNET GATEWAY 26 5. Verify the changes were implemented by using the devices web browser to access a site on the internet. 6. Repeat these steps for every device that you are connecting with Wi-Fi to the Gateway. 2.2/ MAIN SCREEN When you log into the Gateway, the dashboard main page displays the navigation menus of Basic and Advanced settings, Wi-Fi settings, Devices, Parental Controls, and connection status, and Basic quick links. MAIN SCREEN The configuration options available via the left-hand main menu are described in the following chapters:

Basic Settings System - this chapter Wi-Fi - Chapter 3 Devices - Chapter 4 Advanced Settings - Chapter 5 2.2a/ SYSTEM SYSTEM STATUS To view the status:

1. Access the dashboard HomeHome page. 2. You can quickly view the Gateways status by clicking System\System Status on the screen. This section displays System\System Status the status of the Gateways local network (LAN) and internet connection (WAN), firmware and hardware version numbers, MAC Address, IP settings of Verizon Internet Gateway and Wi-Fi extender(s) (ifconnected). 02 / CONFIGURING THE VERIZON INTERNET GATEWAY 28 MAIN SCREEN 02 / CONFIGURING THE VERIZON INTERNET GATEWAY 30 OPEN SOURCE SOFTWARE To view: From the BasicBasic menu, select System Open Source Software. then click Open Source Software System from the left pane and 03 /

WI-FI SETTINGS 3.0 Overview 3.1 Basic Settings 3.2 Advanced Settings 03 / WI-FI SETTINGS 32 Wi-Fi networking enables you to free yourself from wires, making your devices more accessible and easier to use. You can create a Wi-Fi network, including accessing and configuring Wi-Fi security options. OVERVIEW 3.0/ OVERVIEW The Verizon Internet Gateway provides you with Wi-Fi connectivity using the 802.11a, b, g, n, ac or ax standards. These are the most common Wi-Fi standards. The Verizon Internet Gateway contains 2.4 GHz, 5 GHz and 6 GHz Wi-Fi bands, and the operation modes and speeds are listed as follows:

2.4 GHz Legacy operation mode: supports IEEE 802.11b/g/n with maximum theoretical rate at 600 Mbps Compatibility mode: supports IEEE 802.11ax backward compatible with IEEE 802.11b/g/n/ac maximum theoretical rate up to 1.1 Gbps 5 GHz Legacy operation mode: supports IEEE 802.11a/n/ac with maximum theoretical rate at 2.2 Gbps Compatibility mode: supports IEEE 802.11ax backward compatible with IEEE 802.11a/n/ac maximum theoretical rate up to 2.4 Gbps 6 GHz Operation mode: supports IEEE 802.11ax Maximum rate up to 4.8 Gbps 03 / WI-FI SETTINGS 34 Note: 802.11a, 802.11b, and 802.11g are legacy modes and are not recommended. Even one such device connected to the network will slow your entire Wi-Fi network. The Wi-Fi service and Wi-Fi security are activated by default. The level of security is preset to WPA2 encryption using a unique default WPA2 key (also referred to as a passphrase or password) pre-

configured at the factory. This information is displayed on a sticker located on the back of the Gateway. The gateway integrates multiple layers of security. These include Wi-Fi Protected Access, and firewall. BASIC SETTINGS 3.1/ bASIC SETTINGS 3.1a/ PRIMARY NETWORK You can configure the basic security settings for 2.4 GHz, 5 GHz or 6 GHz of your Wi-Fi network. To configure the basic security radio, SSID and security settings:

1. From the Basic Basic menu, select Wi-Fi Wi-Fi from the left pane and Primary Network. then click Primary Network 2. To activate the Wi-Fi radio, move the selector to onon. If the radio is not enabled, no Wi-Fi devices will be able to connect to the office network. 3. If desired, enter a new name and password for the Wi-Fi network or leave the default name and password that displays automatically. Note: The SSID is the network name. All devices must use the same SSID. 03 / WI-FI SETTINGS 36 4. To configure the Wi-Fi Security Security, click the setup button and select WPA2 WPA2 or WPA3WPA3. Caution: These settings should only be configured by experienced network technicians. Changing the settings could adversely affect the operation of the Gateway and your local network. Broadcast Wi-Fi network name (SSID) Broadcast Wi-Fi network name (SSID) You can configure the Gateways SSID broadcast capabilities to allow or disallow Wi-Fi devices from automatically using a broadcast SSID name to detect the gateway Wi-Fi network. To enable SSID broadcasting, move the selector to onon. SSID broadcast is enabled by default. The SSID of the Wi-Fi network will be broadcast to all Wi-Fi devices. To disable SSID broadcasting, move the selector to off. off. The public SSID broadcast will be hidden from all Wi-Fi devices. You will need to manually configure additional Wi-Fi devices to join the Wi-Fi network. MAC Authentication MAC Authentication You can configure the Gateway to limit access to your Wi-Fi network to only those devices with specific MAC addresses. BASIC SETTINGS To set Wi-Fi MAC authentication:

Edit List. 1. To setup access control, click on the Edit List 2. Select either:

Access List Access List allows the listed devices to access the Wi-Fi network. Warning: This will block Wi-Fi network access for all devices not in the list. Only devices in the list will be able to connect to the Wi-Fi network. Device Access Device Access Wi-Fi devices will be able to access the Wi-Fi network if they use the correct Wi-Fi password. Add new 3. Enter the MAC address of a device and click Add new device. device 4. Repeat step 2 and step 3 to add additional devices, as needed. 5. When all changes are complete, click Apply Changes Apply Changes to save the changes. 03 / WI-FI SETTINGS 38 3.1b/ GUEST NETWORK The Guest Network Guest Network is designed to provide internet connectivity to your guests while restricting access to your primary network and shared files. The primary network and the guest network are separated from each other through firewalls. You create one Guest Wi-Fi SSID and one password, and use it for all guests. The guest network SSID does not change when you make a change to your primary network SSID. The Verizon Internet Gateway is shipped from the factory with Guest Wi-Fi turned off. The default SSID for Guest Wi-Fi is preconfigured at the factory to the default Wi-Fi network name (SSID) which is displayed on a sticker located on the bottom of the Gateway followed by hyphen guest (-Guest). For example, if the Gateway is shipped with a default SSID of Verizon-ABCDE then the default SSID for Guest Wi-Fi is Verizon-ABCDE-Guest. BASIC SETTINGS To configure the security settings for your guest network:

1. From the Basic Guest Basic menu, select Wi-Fi Wi-Fi and then click Guest Network. Network 2. Move the selector to onon. 3. If desired, enter a new name and password for the Wi-Fi network or leave the default name and password that displays automatically. 4. Press Apply Changes Apply Changes to save the changes. Important: It is not recommended to create a guest network without a password. 3.1c/ IOT NETWORK The Gateway supports connection of multiple IoT devices on a separate Wi-Fi SSID. The IoT Network is designed to provide an easier setup experience for your Internet of Things (IoT) devices which benefit from connecting to the 2.4 GHz band while keeping your Primary Network settings unchanged. IoT devices and Primary devices can communicate with no firewall restrictions separating them. The Gateway is shipped from the factory with IoT Wi-Fi turned off. The default SSID for IoT Wi-Fi is preconfigured at the factory to the default Wi-Fi network name (SSID) which is displayed on a sticker located on the bottom of the Gateway followed by hyphen IoT

(-IoT). For example, if the Gateway is shipped with a default SSID of Verizon-ABCDE then the default SSID for IoT Wi-Fi is Verizon-

ABCDE-IoT. 03 / WI-FI SETTINGS 40 To enable IoT Wi-Fi link:

1. From the Basic IoT Basic menu, select Wi-Fi Wi-Fi and then click IoT Network. Network 2. Move the selector to on.on. 3. If desired, enter a new name and password for the Wi-Fi network or leave the default name and password that displays automatically. 4. Press Apply Changes Apply Changes to save the changes. 3.1d/ WI-FI PROTECTED SETUP (WPS) Wi-Fi Protected Setup (WPS) is an easier way for many devices to set up a secure Wi-Fi network connection. Instead of manually entering passwords or multiple keys on each Wi-Fi client, such as a laptop, printer, or external hard drive, the Gateway creates a secure Wi-Fi network connection. BASIC SETTINGS In most cases, this only requires the pressing of two buttons one on the Gateway and one on the Wi-Fi client. This could be either a built-in button or one on a compatible Wi-Fi adapter/card, or a virtual button in software. Once completed, this allows Wi-Fi clients to join your Wi-Fi network. To initialize the WPS process, you can either press and hold the WPS button located on the back of the Gateway for more than two seconds or use the UI and press the on-screen button. You can easily add Wi-Fi devices to your Wi-Fi network using the WPS option if your Wi-Fi device supports the WPS feature. To access WPS using the user interface:

1. From the Basic Basic menu, select Wi-Fi Wi-Fi and then click Wi-Fi Wi-Fi Protected Setup (WPS). Protected Setup (WPS) 2. Enable the protected setup by moving the selector to onon. 03 / WI-FI SETTINGS 42 3. Use one of the following methods:

If your Wi-Fi client device has a WPS button, press the WPS button on the Gateway for more than two seconds, then click the Start WPS Start WPS button in Option 1 WPS registration process. Option 1 to start the If your client device has a WPS PIN, locate the PIN printed on the clients label or in the client documentation. Enter the PIN number in Option 2 Option 2 on the user interface. Register. Click Register Alternatively, you can enter the Gateways PIN shown on this screen into the WPS user interface of your device, if this PIN mode is supported by your Wi-Fi device. 4. After pressing the WPS button on the Gateway, you have two minutes to press the WPS button on the client device before the WPS session times out. When the WPS button on the Gateway is pressed, the Status LED on the front of the Gateway begins flashing blue. The flashing continues until WPS pairing to the client device completes successfully. At this time, the Status LED turns solid white. If WPS fails to establish a connection to a Wi-Fi client device within two minutes, the Status LED on the Gateway flashes red for two minutes to indicate the WPS pairing process was unsuccessful. After flashing red, the light returns to solid white to indicate that Wi-Fi is on. Note: Wi-Fi Protected Setup (WPS) cannot be used if WPA3 security is enabled or SSID broadcast is disabled or if MAC address authentication is enabled with an empty white list. ADVANCED SETTINGS 3.2/ ADVANCED SETTINGS 3.2a/ PRIMARY NETWORK Self-Organizing Network (SON) The Verizon Internet Gateway supports supports 2.4 GHz, 5 GHz and 6 GHz signals. The Self-Organizing Network (SON) feature lets your devices move between the two signals automatically for an optimized Wi-Fi connection. To configure SON, Wi-Fi radio, SSID and security settings:

1. From the Advanced Advanced menu, select Wi-Fi Wi-Fi from the left pane and then click Primary Network Primary Network. 2. To enable SON, move the selector to onon. 03 / WI-FI SETTINGS 44 3. To activate the Wi-Fi radio, move the selector to onon. If the radio is not enabled, no Wi-Fi devices will be able to connect to the primary network. 4. If desired, enter a new name and password for the Wi-Fi network or leave the default name and password that displays automatically. Note: The SSID is the network name. All devices must use the same SSID. 5. To configure the Wi-Fi security, click the setup button. Caution: These settings should only be configured by experienced network technicians. Changing the settings could adversely affect the operation of the Gateway and your local network. ADVANCED SETTINGS Group key Group key - to update the WPA shared key, move the selector to onon. Wi-Fi QoS (WMM) Wi-Fi QoS (WMM) - improves the quality of service (QoS) for voice, video, and audio streaming over Wi-Fi by prioritizing these data streams. WMM Power Save WMM Power Save - improves battery life on mobile Wi-Fi devices such as smart phones and tablets by fine-tuning power consumption. 3.2b/ RADIO MANAGEMENT You can configure the channel settings for the 2.4 GHz, 5 GHz and 6 GHz band(s) of your Wi-Fi network. 03 / WI-FI SETTINGS 46 To view and configure the channel settings:

1. From the Advanced Radio Advanced menu, select Wi-Fi Wi-Fi and then click Radio Management. Management 2. Click on Settings Management page to configure the channel scan settings:

Management Radio Settings on the top right-hand side of the Radio ADVANCED SETTINGS Keep my channel selection during power Select the Keep my channel selection during power cycle cycle check box to save your channel selection when the Gateway is rebooted. Enable DFS channels during channel scan Enable DFS channels during channel scan: DFS channels are enabled by default during channel scans. Note: DFS channels are a subset of the 5 GHz network that is shared with radar systems. Some consumer devices do not support these channels and cannot connect to gateways using them. Examples include some media streaming devices. Disabling this feature will allow the Gateway to select the best available channel to broadcast on and allow these devices to connect. Press Apply Changes Apply Changes to save the changes. 3. Click ScanScan to perform a channel availability scan for the Gateway to identify the radio channels providing the best Wi-Fi performance. 4. On the Radio Management Radio Management page for either 2.4 GHz, 5 GHz or 6 GHz, the following information displays and can be configured:

Channel Analysis Channel Analysis - scans and displays channel bandwidth and signal strength of available APs. Channel Channel Score Score displays a network congestion score of zero to ten in each Wi-Fi channel. It can be used to determine which channels to use or to avoid. Higher score indicates less congestion in a channel. Channel Settings - this is the radio channel used by the Channel Settings Wi-Fi gateway and its clients to communicate with each 03 / WI-FI SETTINGS 48 other. The channel must be the same on the Gateway and all of its Wi-Fi clients. Select the channel you want the Wi-Fi radio to use to communicate, or accept the default (Auto) automatically assign itself a radio channel. Auto) channel selection. Then the Gateway will WidthWidth - displays the bandwidth available to the Wi-Fi channel currently in use on each band. Users can select from available channels. 802.11 Mode 802.11 Mode You can limit the Wi-Fi access to your network by selecting the 2.4GHz and 5 GHz Wi-Fi communication standard best suited for the devices you allow to access your Wi-Fi network. Select the Wi-Fi mode as follows:

Compatibility This is the default mode setting on 5GHz, providing a good balance of performance and interoperability with existing Wi-Fi devices. 802.11a,n,ac and ax devices can connect. Legacy This is the default mode setting on 2.4 GHz, providing broad connection support for old and new Wi-Fi devices. 802.11a,b,g,n and ac devices can connect. Notes:

802.11n is available on both 2.4 GHz and 5 GHz frequencies. Connecting 802.11a, b or g devices will cause your Wi-Fi network to slow on that radio and is not recommended. ADVANCED SETTINGS To view the channel settings history:

1. From the Advanced Radio Advanced menu, select Wi-Fi Wi-Fi and then click Radio Management. Management 2. Click on History History to display the channel settings history. 04 /

CONNECTED DEVICES 4.0 Device Settings 4.1 Setting Parental Controls 4.2 Universal Plug & Play 04 / CONNECTED DEVICES 51 You can view the settings of the network devices connected to the Verizon Internet Gateways network. The abundance of harmful information on the internet poses a serious challenge for employers and parents alike as they ask How can I regulate what my employee or child does on the internet?

With that question in mind, the Verizon Internet Gateways Parental Controls were designed to allow control of internet access on all locally networked devices. DEVICE SETTINGS 4.0/ DEVICE SETTINGS To view and manage the connected devices on your network:

1. From the Basic Basic menu, select Devices Devices from the left pane. 2. The screen displays information about connected devices Device Name and identifiers, Parental Controls including Device Name type of network connection, and settings that you can view and configure. Parental Controls, the 04 / CONNECTED DEVICES 53 3. To easily add a new device to the network:

i. Click Add Device Add Device button on the screen. ii. Select the preferred Network Type Network Type from the dropdown list (Primary Primary, Guest Guest or IoTIoT). iii. Scan the provided QR code with the new devices camera. iv. Tap the push notification to connect the device to your network. v. You can add the new device to your Wi-Fi network Start WPS button if your Wi-Fi device by clicking the Start WPS supports the WPS feature. Refer to 3.1d/ Wi-Fi Protected Setup (WPS) on page 40 for detailed information. vi. Click DoneDone to save the changes. 4. Click and drag the horizontal scrolling bar to the right on the screen for device configuration. DEVICE SETTINGS 5. Click the Block/Allow Block/Allow option to quickly disable/enable a device from having internet access. For additional information about blocking websites, refer to Setting Parental Controls on page 57. 6. Click the Settings icon to access the Device Settings Device Settings page for that device:

04 / CONNECTED DEVICES 55 Device Information:

Device Information Device Type, Name/Host Name, Location, Mobility Device Type, Name/Host Name, Location, and Mobility

- Displays the current known information of the device. These can be updated or corrected as needed. Click EditEdit and SaveSave to apply any changes. DEVICE SETTINGS Device Add-Ons Device Add-Ons Port Forwarding Port Forwarding - Port Forwarding allows your network to be exposed to the internet in specific limited and controlled ways. For example, you could allow specific applications, such as video conferencing, voice, and chat, to access servers in the local network. To access the Port Forwarding page, click the setup button. For additional information, refer to the Port Forwarding section in Chapter 5 Configuring Advanced Settings. Access Control - Access Control restricts access from Access Control the local network to the internet. To access the Access Control page, click the setup button. For additional information, refer to the Access Control section in Chapter 5 Configuring Advanced Settings. DMZ host DMZ host - DMZ host allows a single device on your primary network to be fully exposed to the internet for special purposes such as an email server. To access the DMZ host page, click the setup button. For additional information, refer to the section in Chapter 5 Configuring Advanced Settings. DNS Server DNS Server - DNS Server manages the DNS server host name and IP address. To access the DNS Server page, click the setup button. For additional information, refer to the section in Chapter 5 Configuring Advanced Settings. 04 / CONNECTED DEVICES 57 Device Connection Device Connection This section provides the device MAC Address, Access Point information the device is connected to as well as the IPv4 Address of the device. This section displays Connection information of how and how well the device is connected to the Access Point. It also displays the Network related information, including IPv6 addresses and a Ping Test Ping Test option. 4.1/ SETTING PARENTAL CONTROLS 4.1a/ ACTIVATING PARENTAL CONTROLS You can create a basic access policy by using the provided Rule Rule Templates for any computer or device on the Gateway network. Templates Parental Controls limit internet access to specific websites based on a schedule that you create. Access can be limited on specific websites or keywords embedded in a website. For example, you can block access to the www. anysite.com as well as block any website that has the word any in its site name. SETTING PARENTAL CONTROLS To limit device access:

1. From the Basic Basic menu, select Devices Parental Controls. then click Parental Controls Devices from the left pane and 2. To use the default Rule Templates, Rule Templates, select one of the pre-

defined rules as shown on screen to quickly setup access policy for devices on your network. 3. To create a new access policy, click on the New Rule New Rule and the configuration page displays. 4. Create a rule name. 5. Create a Schedule dropdown list. Schedule by selecting User defined User defined from the 04 / CONNECTED DEVICES 59 6. Select the days of the week when the rule will be active or inactive. 7. Set the time when the rule will be active or inactive, then specify the start time and end time. 8. Click Apply Apply to save changes. 9. Select the Condition Internet is Internet is always off/Internet is Condition rule of Internet is always off always on to block/allow the access to all internet websites. always on 10. Create the Devices Devices rule by selecting User defined User defined from the dropdown list and select the computers or clicking Add Add Devices to add a device where you are limiting access. Devices SETTING PARENTAL CONTROLS 11. Click Apply Apply to save changes. 12. To remove a device from the llist, click Remove Remove for the assigned device. 13. Click Add Exceptions Add Exceptions for the following exception options:

Enter the name of the website or keywords within a URL to block/allow the specified websites and websites with names containing the specified keyword. 14. Click Apply Apply to save changes. 04 / CONNECTED DEVICES 61 4.1b/ ACTIVE RULES You can view the rules created for the Gateway shown on the Parental Controls page. Parental Controls 4.2/ UNIVERSAL PLUG & PLAY You can use Universal Plug and Play (UPnP) to support new devices without configuring or rebooting the Gateway. In addition, you can enable the automatic cleanup of invalid rules. When enabled, this functionality verifies the validity of all UPnP services and rules every five minutes. Old and unused UPnP defined services are removed, unless a user-defined rule depends on it. UPnP services are not deleted when disconnecting a computer without proper shutdown of the UPnP applications, such as messenger. Services may often not be deleted and eventually this leads to the exhaustion of rules and services. No new services can be defined. The cleanup feature locates the invalid services and removes them, preventing services exhaustion. UNIVERSAL PLUG & PLAY To access this setting:

1. From the Advanced Advanced menu, select Devices Devices from the left pane Universal Plug & Play. and then click Universal Plug & Play 2. To enable UPnP and allow UPnP services to be defined on any network hosts, select the UPnP Enabled UPnP Enabled check box. Enable 3. To enable automatic cleanup of invalid rules, select Enable Automatic Cleanup of Old Unused UPnP Services check box. Automatic Cleanup of Old Unused UPnP Services 4. Click Apply Changes Apply Changes to save changes. 05 /

CONFIGURING ADVANCED SETTINGS 5.0 Security & Firewall 5.1 Network Settings 5.2 Diagnostics & Monitoring 5.3 System 05 / CONFIGURING ADVANCED SETTINGS 64 Advanced settings cover a wide range of sophisticated configurations for the Verizon Internet Gateway firmware, security setup and network. The security suite of the Gateway includes comprehensive and robust security services, such as stateful packet inspection, firewall security, user authentication protocols, and password protection mechanisms. These and other features help protect your computers from security threats on the internet. This chapter covers the following advanced features:

Security & Firewall Security & Firewall General Firewall manages the security level for the firewall. Access Control restricts access from the local network to the internet. DMZ Host allows a single device on your primary network to be fully exposed to the internet for special purposes such as video conferencing. IPv6 Pinholes provides access tunnel to a service on a host for a particular application. Port Forwarding enables access from the internet to specified services provided by computers on the local network. Port Forwarding Rules displays port forwarding rules. Port Triggering defines port triggering entries to dynamically open the firewall for some protocols or ports. Scheduler Rules Settings limits the activation of firewall rules to specific time periods. SIP ALG supports the Application Layer Gateway for Session Initiation Protocol. 05 / CONFIGURING ADVANCED SETTINGS 66 Network Settings Network Settings ARP Table displays active devices with their IP and MAC addresses. DNS Server manages the DNS server host name and IP address. Dynamic DNS allows a static domain name to be mapped to the dynamic IP address. IPv4/IPv6 Address Distribution adds computers configured as DHCP clients to the network. IPv6 enables IPv6 support. NDP (Neighbor Discovery Protocol) Table displays active devices with their IPv6 and MAC addresses of DHCP connection. Network Connections displays and manages the details of a specific network connection. Network Objects defines a group, such as a group of computers. Port Configuration sets up the Ethernet ports as either full- or half-duplex ports, at either 10 Mbps, 100 Mbps, or 1000 Mbps, or 2500 Mbps. Routing manages the routing and IP address distribution rules. Diagnostics & Monitoring performs diagnostic tests and displays Diagnostics & Monitoring the details and status of:

Bandwidth Monitoring System Logging Full Status/System wide Monitoring of Connections/Traffic Monitoring Backhaul Logging Advanced System Settings Advanced System Settings Date & Time Settings sets the time zone and enables automatic time updates. Factory Reset resets the Gateway to its default settings. LED Brightness controls the Status LED light to either dim or brighten. Reboot Router restarts the Gateway. Remote Administration - enables remote configuration of the Gateway from any internet-accessible computer. System Settings sets up various system and management parameters. 05 / CONFIGURING ADVANCED SETTINGS 68 5.0/ SECURITY & FIREWALL The firewall is the cornerstone of the security suite for the Gateway. It has been exclusively tailored to the needs of the residential or office user and is pre-configured to provide optimum security. The firewall provides both the security and flexibility that office users seek. It provides a managed, professional level of network security while enabling the safe use of interactive applications, such as video conferencing. Additional features, including surfing restrictions and access control, can also be configured locally through the user interface or remotely by a service provider. The firewall regulates the flow of data between the local network and the internet. Both incoming and outgoing data are inspected, then either accepted and allowed to pass through the Gateway or rejected and barred from passing through the Gateway, according to a flexible and configurable set of rules. These rules are designed to prevent unwanted intrusions from the outside, while allowing local network users access to internet services. The firewall rules specify the type of services on the internet that are accessible from the local network and types of services in the local network that are accessible from the internet. Each request for a service that the firewall receives is checked SECURITY & FIREWALL against the firewall rules to determine whether the request should be allowed to pass through the firewall. If the request is permitted to pass, all subsequent data associated with this request or session is also allowed to pass, regardless of its direction. For example, when accessing a website on the internet, a request is sent to the internet for this site. When the request reaches the Gateway, the firewall identifies the request type and origin, such as HTTP and a specific computer in the local network. Unless the Gateway is configured to block requests of this type from this computer, the firewall allows this type of request to pass to the internet. When the website is returned from the web server, the firewall associates the website with this session and allows it to pass;

regardless HTTP access from the internet to the local network is blocked or permitted. It is the origin of the request, not subsequent responses to this request, which determines whether a session can be established. 5.0a/ SETTING FIREWALL CONFIGURATION You can select a normal, high, or low security level to limit, block, or permit all traffic. The following table shows request access for each security level. 05 / CONFIGURING ADVANCED SETTINGS 70 Security Level Internet Requests Incoming Traffic Local Network Requests Outgoing Traffic High Normal Low Blocked Blocked Limited Unrestricted Unrestricted Unrestricted The request access is defined as:

Blocked traffic no access allowed, except as configured in Port Forwarding and Remote Access Limited permits only commonly used services, such as email and web browsing Unrestricted permits full access of incoming traffic from the internet and allows all outgoing traffic, except as configured in Access Control SPECIFYING GENERAL SETTINGS FOR IPV4 OR IPV6 To set your firewall configuration:

1. From the Security & Firewall General Security & Firewall General settings page, click on IPv4 settings/IPv6 settings option to configure IPv4/

desired IPv4 settings/IPv6 settings IPv6 security. SECURITY & FIREWALL 2. Select a security level by clicking one of the radio buttons. Low Security setting may expose the local network Using the Low Security to significant security risks, and should only be used for short periods of time to allow temporary network access. 3. Click Apply Changes Apply Changes to save changes. 5.0b/ ACCESS CONTROL You can block individual computers on your local network from accessing specific services on the internet. For example, you could block one computer from accessing the internet, then block a second computer from transferring files using FTP as well as prohibit the computer from receiving incoming email. Access control incorporates a list of preset services, such as applications and common port settings. 05 / CONFIGURING ADVANCED SETTINGS 72 ALLOW OR RESTRICT SERVICES To allow or restrict services:

1. From the Advanced Advanced menu, select Security & Firewall Security & Firewall from the left pane and then click Access Control Access Control Access Control. The Access Control page opens with the allowed and blocked status displayed. The allowed section only displays when the firewall is set to maximum security. 2. To apply the rule to:

Networked Device or Network Group - select AnyAny. User Specific devices only select networked device or User Defined. Defined 3. Select the networked device to be allowed or blocked in the list. SECURITY & FIREWALL 4. Add devices, enter the group name, then click AddAdd. In the Add devices The new network group is automatically added to the Access Access Control section. Control 5. To block a service, select the internet protocol to be blocked in the Protocol Protocol field. 6. If the service is not included in the list, select User Defined User Defined, Add another entry. define the service, then click Add another entry Access 7. Click AddAdd. The service is automatically added to the Access Control section. Control 05 / CONFIGURING ADVANCED SETTINGS 74 8. Specify when the rule is active as Always User Defined. Always or User Defined 9. Specify days of the week, and set the start time and end time when the rule will be active or inactive. 10. Click Add day/time Add day/time to create the schedule time and choose the schedule rule by clicking on the check box on the screen. 11. Click AddAdd to apply the changes. 12. The Access Control access control rule. Access Control page displays a summary of the new 13. To modify the current settings, click the edit icon in the action Apply button. column and then the Apply 14. To remove an access restriction, click the trash icon. The rule is removed from the Access Control table. SECURITY & FIREWALL 5.0c/ DMZ hOST DMZ Host allows a single device on your primary network to be fully exposed to the internet for special purposes like video conferencing. Warning: Enabling DMZ Host is a security risk. When a device on your network is a DMZ Host, it is directly exposed to the internet and loses much of the protection of the firewall. If it is compromised, it can also be used to attack other devices on your primary network. Follow these steps to designate a device on your primary network as a DMZ Host:

1. From the Advanced Advanced menu, select Security & Firewall then click DMZ Host DMZ Host. Security & Firewall and 2. Select Enable Enable for the DMZ Host. 3. Enter the IP address or select the MAC address of the device you want to designate as the DMZ Host. 4. Click Apply Changes Apply Changes to save changes. 05 / CONFIGURING ADVANCED SETTINGS 76 5.0d/ IPV6 PINhOLES The IPv6 Pinhole feature of the Gateway allows an application to send incoming packets for a certain port number to the destination computer by setting up the rule of authorization. To configure the rules:

1. From the Advanced Advanced menu, select Security & Firewall IPv6 Pinhole. then click IPv6 Pinhole Security & Firewall and 2. Select external and internal host, protocol and the application port type. 3. To schedule the rule, select either Always Always or User Defined User Defined in the Schedule Schedule list box. 4. Click Add to list Add to list. The screen displays opened pinhole port and its status. It shows the IP addresses of remote device and connected device on your network. 5. Click Apply Changes Apply Changes to save changes. SECURITY & FIREWALL 5.0e/ PORT FORWARDING You can activate port forwarding to expose the network to the internet in a limited and controlled manner. For example, enabling applications, such as video conferencing and voice, to work from the local network as well as allowing internet access to servers within the local network. To create port forwarding rules:

1. From the Advanced Advanced menu, select Security & Firewall Security & Firewall from the left pane and then click Port Forwarding Forwarding page opens with the current rules displayed. Forwarding Port Port Forwarding. The Port 2. To create a new rule, enter the application name, configure its inbound and outbound port numbers, forwarding destination address, then select the protocol. 3. To schedule the rule, select either Always Always or User Defined User Defined in the Schedule Schedule list box. 05 / CONFIGURING ADVANCED SETTINGS 78 4. Click Add to list Add to list. The rule displays in the Rules List Rules List section. 5. Click Apply Changes Apply Changes to save changes. 5.0f/ PORT FORWARDING RULES You can view, modify, and delete port forwarding rules. To access the rules:

1. Select Port Forwarding Rules Security & Firewall Port Forwarding Rules in the Security & Firewall section. 2. To create or edit a protocol rule, click the Add new Add new or EditEdit Edit Service page displays. icon in the action column. The Edit Service SECURITY & FIREWALL 3. Modify the Service Name Service Name and Service Description Service Description, as needed. 4. To add server ports, click AddAdd. 5. To modify the current protocol, click the EditEdit icon in the action column. The Edit Service Server Ports Edit Service Server Ports page displays. 05 / CONFIGURING ADVANCED SETTINGS 80 6. Enter the Protocol, Source Ports Protocol, Source Ports and Destination Ports Destination Ports, as needed. 7. Click Apply Apply to save changes. 5.0g/ PORT TRIGGERING Port triggering can be described as dynamic port forwarding. By setting port triggering rules, inbound traffic arrives at a specific network host using ports that are different than those used for outbound traffic. The outbound traffic triggers the ports where the inbound traffic is directed. For example, a web server is accessed using UDP protocol on port 2222. The web server then responds by connecting the user using UDP on port 3333, when a web session is initiated. In this case, port triggering must be used since it conflicts with the following default firewall settings:

Firewall blocks inbound traffic by default. Server replies to the Gateway IP, and the connection is not sent back to the host since it is not part of a session. To resolve the conflict, a port triggering entry must be defined, which allows inbound traffic on UDP port 3333 only after a network host generated traffic to UDP port 2222. This results in the Gateway accepting the inbound traffic from the web server and sending it back to the network host which originated the outgoing traffic to UDP port 2222. SECURITY & FIREWALL To configure port triggering:

1. From the Advanced Advanced menu, select Security & Firewall then click Port Triggering Port Triggering. Security & Firewall and 2. To add a service as an active protocol, enter the application name, configure its inbound and outbound (triggered/

forwarded) port range, then select the protocol. 3. To schedule the rule, select either Always Always or User Defined User Defined in the Schedule Schedule list box. 4. Click Add to list Add to list. The rule displays in the Rules List Rules List section. 5. Click Apply Changes Apply Changes to save changes. 5.0h/ SChEDULER RULES Scheduler Rules Scheduler Rules are used for limiting the activation of firewall rules to specific time periods. The time periods are either for days of the week or for hours of each day based on activity or inactivity. 05 / CONFIGURING ADVANCED SETTINGS 82 To define a rule:

1. Verify that the date and time of the Gateway is correct. 2. Select Scheduler Rules Scheduler Rules in the Security & Firewall Security & Firewall section. 3. Click AddAdd. The Rule Scheduler Rule Scheduler page displays. SECURITY & FIREWALL 4. Enter the name of the rule, select the active or inactive days of the week and the start and end time range. 5. Specify if the rule is active active or inactive inactive at the scheduled time. 6. Click Apply Changes Apply Changes to save changes. 5.0i/ SIP ALG SIP ALG (Application Level Gateway) - supports various multiple application protocols by allowing dynamic ephemeral TCP/ UDP ports to communicate with the known ports which a particular client application (such as FTP, VoIP service, net meeting or streaming media) requires. To enable the SIP ALG settings:

1. From the Advanced Advanced menu, select Security & Firewall SIP ALG. then click SIP ALG Security & Firewall and 2. Select Enabled Enabled for the SIP ALG. 3. Click Apply Changes Apply Changes to save changes. 05 / CONFIGURING ADVANCED SETTINGS 84 5.1/ NETWORK SETTINGS 5.1a/ ARP TAbLE You can view the IPv4 and MAC addresses of each DHCP connection. To view the IPv4 and MAC addresses for each device: From the Advanced menu, select Network Settings Advanced ARP Table. Network Settings and then click ARP Table 5.1b/ DNS SERVER You can edit the host name and/or IP address, if the host was manually added to the DNS table. If not, you can only modify the host name. To access the DNS server:

1. From the Advanced click DNS Server DNS Server. Advanced menu, select Network Settings Network Settings and then NETWORK SETTINGS 2. To disable DNS rebind protection for all devices connected Enable DNS Rebind to the Gateway, untick the check box of Enable DNS Rebind Protection. Protection. Warning: Disabling this protection may create a risk of cyber security attack to devices connected to this Gateway. Add DNS 3. To add a computer stored in the DNSDNS table, click Add DNS EntryEntry. The DNS Entry DNS Entry page displays. 05 / CONFIGURING ADVANCED SETTINGS 86 4. In the Host Name enter the IP address Host Name field, enter the name of the computer, then IP address and click Apply Apply to save changes. 5. Then the DNS Server DNS Server page displays. Add Exceptions 6. To add a new IP address entry, select the Add Exceptions Exceptions to DNS Rebind Protection section. EntryEntry in the Exceptions to DNS Rebind Protection The Add Exceptions List Add Exceptions List page displays. Edit the IP address. 7. To remove a host from the DNS table, click the Remove Remove icon on the screen. 8. Click Apply Changes Apply Changes to save changes. 5.1c/ DYNAMIC DNS Typically, when connecting to the internet, the Gateway is assigned an unused public IP address from a pool, and this address changes periodically. Dynamic DNS allows a static domain name to be mapped to the dynamic IP address, allowing a computer within your network to be more easily accessible from the internet. When using Dynamic DNS, each time the public IP address changes, the DNS database is automatically updated with the new IP address. In this way, even though the IP address changes often, the domain name remains constant and accessible. NETWORK SETTINGS To set up dynamic DNS:

1. Select Dynamic DNS Dynamic DNS in the Network Settings Network Settings section. 2. To set up a new entry, click the AddAdd button. 3. Configure the following parameters:

Host Name Host Name enter the full domain name for your Dynamic DNS domain. Provider Provider select the Dynamic DNS account provider from the menu. 05 / CONFIGURING ADVANCED SETTINGS 88 User Name enter the user name for your Dynamic DNS User Name account. Password Password enter the password for your Dynamic DNS account. SSL Mode SSL Mode select if your Dynamic DNS service supports SSL. 4. Click Apply Apply to save your changes. 5.1d/ IPV4 ADDRESS DISTRIbUTION You can easily add computers configured as DHCP clients to the network. The DHCP server provides a mechanism for allocating IP addresses to these hosts and for delivering network configuration parameters to the hosts. For example, a client (host) sends a broadcast message on the network requesting an IP address for itself. The DHCP server then checks its list of available addresses and leases a local IP address to the host for a specific period of time and simultaneously designates this IP address as taken. At this point, the host is configured with an IP address for the duration of the lease. The host can renew an expiring lease or let it expire. If it renews a lease, the host receives current information about network services, as it did during the original lease, allowing it to update its network configurations to reflect any changes that occurred since the first connection to the network. NETWORK SETTINGS If the host wishes to terminate a lease before its expiration, it sends a release message to the DHCP server. This makes the IP address available for use by other hosts. The DHCP server performs the following functions:

Displays a list of all DHCP host devices connected to the Gateway Defines the range of IP addresses that can be allocated in the network Defines the length of time the dynamic IP addresses are allocated Provides the above configurations for each network device and can be configured and enabled or disabled separately for each network device Assigns a static lease to a network computer to receive the same IP address each time it connects to the network, even if this IP address is within the range of addresses that the DHCP server may assign to other computer Provides the DNS server with the host name and IP address of each computer connected to the network To view a summary of the services provided by the DHCP server:

1. Select IPv4 Address Distribution Network Settings IPv4 Address Distribution in the Network Settings section. 05 / CONFIGURING ADVANCED SETTINGS 90 2. You can edit the DHCP server settings for a device. On the IPv4 Address Distribution IPv4 Address Distribution page, click the EditEdit icon on the screen. The DHCP Settings page opens with the device information displayed. 3. To enable the DHCP server, select DHCP Server IPv4 DHCP Server in the IPv4 Address Distribution field. Address Distribution 4. Once enabled, the DHCP server provides automatic IP assignments (IP leases) based on the preset IP range defined below. NETWORK SETTINGS 5. To configure the DHCP server, complete the following fields:

Start IP Address Start IP Address enter the first IP address that the Gateway will automatically begin assigning IP addresses from. Since the Gateways default IP address is 192.168.1.1, the default start IP address should be 192.168.1.2. End IP Address End IP Address enter the last IP address that the Gateway will stop at for the IP address allocation. The maximum end IP address range that can be entered is 192.168.1.254. WINS Server WINS Server determines the IP address associated with a network device. Lease Time in Minutes Lease Time in Minutes assigns the amount of time in minutes that each device is assigned an IP address by the DHCP server when it connects to the network. When the lease expires, the server determines if the computer has disconnected from the network. If it has, the server may reassign this IP address to a newly connected computer. 6. Click Apply Apply to save changes. IPv4 Address Distribution According to DhCP option 60 (Vendor Class Identifier) DHCP vendor class is related to DHCP option 60 configuration within the Gateway. User can add option 60 configurations such that particular vendor can get lease from a specified pool of address. The existing vendor class ID, IP address, MAC address and QoS are shown on the screen above. 05 / CONFIGURING ADVANCED SETTINGS 92 DhCP Connection List You can view a list of the connections currently assigned and recognized by the DHCP server. To view a list of computers:

1. On the IPv4 Address Distribution Connection List. IPv4 Address Distribution page, click Connection List 2. To define a new static connection with a fixed IP address, Add static connection. click Add static connection 3. Enter the host name. 4. Enter the fixed IP address to be assigned. NETWORK SETTINGS 5. Enter the MAC address of the network interface of the computer used with this DHCP static connection. 6. Click Apply Apply to save changes. 5.1e/ IPV6 Use the IPv6 feature settings to enable, disable, or configure an IPv6 Internet connection and IPv6 LAN settings. 1. To configure your network to use the IPv6 Internet connection type, select IPv6IPv6 in the Network Settings to display the IPv6 service options:

Network Settings section 2. Select Enabled Enabled in the Enable IPv6 Support Enable IPv6 Support field. 3. Click Apply Changes Apply Changes to have changes take effect. Note: The Internet IPv6 service is required for this feature to work over the internet. 05 / CONFIGURING ADVANCED SETTINGS 94 4. To disable the IPv6 service, move the selector to offoff in the Enable IPv6 Support field. Enable IPv6 Support 5. Click Apply Changes Apply Changes to have changes take effect. Once configured using valid IPv6 WAN and LAN configurations, you should not see any errors when you click on the Apply Changes Apply Changes button and the Basic/System/System Status Gateways new IPv6 address. Basic/System/System Status page will reflect the You should also see the IPv6 address for all IPv6 supported devices on your local network displayed on the BasicBasic/Devices Devices page by selecting the Settings icon to access the Device Settings for that device. Device Settings page Devices/Devices NETWORK SETTINGS IPv6 WAN with LAN IPv6 Stateless Settings 1. To configure IPv6 LAN Stateless mode with DHCPv6 WAN, select the Stateless Controls page as shown below:

Controls IPv6 Configuration Stateless option on the IPv6 Configuration 2. Specify the settings to be used to assign LAN IPv6 addresses by entering the following details:

IPv6 LAN Configuration IPv6 LAN Configuration (select Stateless dropdown list) Stateless from the LAN Prefix LAN Prefix (automatically populated) LAN Link Local Address LAN Link Local Address (automatically populated) Router Advertisement Lifetime Router Advertisement Lifetime (minutes between 0-150) Option: Allow ICMPv6 Echo Request for LAN devices Option: Allow ICMPv6 Echo Request for LAN devices using their Global IPv6 Address from WAN side using their Global IPv6 Address from WAN side -

requesting an IPv6 address from any available DHCPv6 servers available on the ISP 05 / CONFIGURING ADVANCED SETTINGS 96 Apply 3. After entering all appropriate IPv6 settings, click Apply Changes to have changes take effect. Changes IPv6 WAN with LAN IPv6 Stateful (DhCPv6) Settings 1. Specify the Stateful (DHCPv6) Stateful (DHCPv6) settings to be used to assign LAN IPv6 addresses by entering the following details:

IPv6 LAN Configuration IPv6 LAN Configuration (select Stateful dropdown list) Stateful from the LAN Prefix LAN Prefix (automatically populated) DHCPv6 Client Address Range DHCPv6 Client Address Range (start and end) LAN Link Local Address LAN Link Local Address (automatically populated) Router Advertisement Lifetime Router Advertisement Lifetime (minutes between 0-150) IPv6 Address Lifetime (minutes between 3-150) IPv6 Address Lifetime NETWORK SETTINGS Option: Allow ICMPv6 Echo Request for LAN devices Option: Allow ICMPv6 Echo Request for LAN devices using their Global IPv6 Address from WAN side using their Global IPv6 Address from WAN side -

requesting an IPv6 address from any available DHCPv6 servers available on the ISP Apply 2. After entering all appropriate IPv6 settings, click Apply Changes to have changes take effect. Changes 5.1f/ IPV6 ADDRESS DISTRIbUTION To view a summary of the services provided by the DHCP server:

1. Select IPv6 Address Distribution Network Settings IPv6 Address Distribution in the Network Settings section. 2. You can edit the DHCP server settings for a device. On the IPv6 Address Distribution page, click the EditEdit icon on the IPv6 Address Distribution screen column. The DHCP Settings page opens with the device information displayed. 05 / CONFIGURING ADVANCED SETTINGS 98 3. To configure the DHCP server complete the following fields:

Start IPv6 Address Start IPv6 Address the starting IPv6 address in the consecutive list of addresses that makes up this LAN pool for the DHCPv6 server. End IPv6 Address End IPv6 Address the ending IPv6 address in the consecutive list of addresses that makes up this LAN pool for the DHCPv6 server. Lease Time in Minutes Lease Time in Minutes assigns the amount of time in minutes that each device is assigned an IP address by the DHCP server when it connects to the network. When the lease expires, the server determines if the computer has disconnected from the network. If it has, the server may reassign this IP address to a newly connected computer. 4. Click Apply Apply to save changes. DhCP Connection List You can view a list of the connections currently assigned and recognized by the DHCP server. To view a list of computers:

1. On the IPv6 Address Distribution Connection List. IPv6 Address Distribution page, click Connection List 2. To define a new static connection with a fixed IP address, Add static connection. click Add static connection 3. Enter the host name. 4. Enter the fixed IP address to be assigned. NETWORK SETTINGS 5. Enter the MAC address of the network interface of the computer used with this DHCP static connection. 6. Click Apply Apply to save changes. 5.1g/ NDP TAbLE You can view the IPv6 and MAC addresses of each DHCP connection. To view the IPv6 and MAC addresses for each device: select NDP NDP

(Neighbor Discovery Protocol ) Table section. Network Settings Table in the Network Settings 05 / CONFIGURING ADVANCED SETTINGS 100 5.1h/ NETWORK CONNECTIONS Caution: The settings described in this chapter should only be configured by experienced network technicians. Changes could adversely affect the operation of the Gateway and your local network. To view the network connections:

1. From the Advanced Advanced menu, select Network Settings Network Settings from the Network Connections. left pane and then click Network Connections. 2. To view and edit the details of a specific network connection, click the hyperlinked name or the action icon. The following sections detail the types of network connections that you can view. NETWORK SETTINGS NETWORK (hOME/OFFICE) CONNECTION You can view the properties of your local network. This connection is used to combine several network interfaces under one virtual network. For example, you can create a home/office network connection for Ethernet and other network devices. Note: When a network connection is disabled, the underlying devices formerly connected to it will not be able to obtain a new DHCP address from that Gateway network interface. To view the connection:

1. On the Network Connections Network Network Connections page, click the Network

(Home/Office) Network (Home/ Office)

(Home/Office) connection link. The Network (Home/ Office) Properties page displays. Properties 05 / CONFIGURING ADVANCED SETTINGS 102 2. To rename a network connection, enter the new network name in the NameName field. 3. Click SaveSave to save the changes. CONFIGURING ThE hOME/OFFICE NETWORK To configure the network connection:

1. Settings. Network (Home/Office) properties page, click Settings In the Network (Home/Office) The configuration page displays. NETWORK SETTINGS 05 / CONFIGURING ADVANCED SETTINGS 104 2. Configure the following sections, as needed. General In the General General section, verify the following information:

Status Status displays the connection status of the network. Connection Type Connection Type displays the type of connection interface. Physical Address Physical Address displays the physical address of the network card used for the network. MTUMTU displays the Maximum Transmission Unit (MTU) indicating the largest packet size permitted for internet transmissions:

Automatic Automatic: sets the MTU (Maximum Transmission Unit) at 1500. NETWORK SETTINGS Automatic by DHCP Automatic by DHCP: sets the MTU according to the DHCP connection. Manual Manual: allows you to manually set the MTU. Subnet Mask: the network connection IP address and Subnet Mask IP address uses a permanent or static IP address address, provided by Verizon or experienced network technician. Subnet Mask IP address and Subnet Mask Bridge Bridge In the Bridge Network (Home/Office) Bridge section of the Network (Home/Office) properties, you can configure the various LAN interfaces. Caution: Do not change these settings unless specifically instructed to by Verizon. Changes could adversely affect the operation of the Gateway and your local network. Verify the following information:

IP Passthrough select to disable Wi-Fi and routing IP Passthrough capabilities of the Gateway. May be necessary if connecting 3rd party routers to the Gateway and disabling the IP Passthrough mode into the device. Status Status displays the connection status of a specific network connection. Action Action contains an EditEdit hyperlink that, when clicked, generates the next level configuration page for the specific network connection or network device. 05 / CONFIGURING ADVANCED SETTINGS 106 IP Address Distribution IP Address Distribution The IP Address Distribution IP Address Distribution section is used to configure the Dynamic Host Configuration Protocol (DHCP) server parameters of the Gateway. Once enabled and configured, the DHCP server automatically assigns IP addresses to any network devices which are set to obtain their IP address dynamically. If DHCP Server is enabled on the Gateway, configure the network devices as DHCP Clients. There are 2 basic options in this section: Disabled DHCP Server. Disabled and DHCP Server To set up the Gateways network bridge to function as a DHCP server:

1. IP Address Distribution section, select the In the IP Address Distribution DHCP server DHCP server. Once enabled, the DHCP server provides automatic IP assignments (also referred to as IP leases) based on the preset IP range defined below. Start IP Address Start IP Address Enter the first IP address in the IP range that the Gateway will automatically begin assigning IP addresses from. Since the Gateways IP address is 192.168.1.1, the default Start IP Address is 192.168.1.2. End IP Address End IP Address Enter the last IP address in the IP range that the Gateway will automatically stop the IP address allocation at. The maximum end IP address range that can be entered is 192.168.1.254. NETWORK SETTINGS 2. 3. If Windows Internet Naming Service (WINS) is being WINS Server address. used, enter the WINS Server Lease time in minutes field, enter the amount In the Lease time in minutes of time a network device is allowed to connect to the Gateway with its currently issued dynamic IP address. IP Address Distribution According to DHCP option 60 IP Address Distribution According to DHCP option 60

(vendor class Identifier)

(vendor class Identifier) DHCP vendor class is related to DHCP option 60 configuration within the Gateway. Adding option 60 configurations allows a particular vendor to get a lease from a specified pool of addresses. Routing Table You can configure the Gateway to use static or dynamic routing. Static routing Static routing specifies a fixed routing path to neighboring destinations based on predetermined metrics. Dynamic routing Dynamic routing automatically adjusts how packets travel on the network. The path determination is based on network/device reachability and the status of the network being traveled. To configure routing:

1. Routing Table section, click the Add new route In the Routing Table to display and modify the new route configuration page. Add new route button 05 / CONFIGURING ADVANCED SETTINGS 108 Apply. 2. To save your changes click Apply Wi-Fi ACCESS POINT CONNECTION A Wi-Fi Access Point network connection allows Wi-Fi devices to connect to the local area network (LAN) using the 2.4 GHz, 5 GHz or 6 GHz Wi-Fi network. Note: Once disabled, all Wi-Fi devices connected to that Wi-Fi network will be disconnected from the LAN network and internet. To view the connection settings:

1. From the Advanced Advanced menu, select Network Settings Network Settings from the Network Connections. left pane and then click Network Connections. 2. To access the connection settings pages, click on the link of the Wi-Fi Access Point connections listed under Network Network name on the Network Connections name Network Connections page. NETWORK SETTINGS 3. From the connections Enable Settings Enable Settings page, to enable or disable the connection, move the selector to on on or off off. 4. To rename the connection, enter a name in the NameName field. 5. Click Apply Apply to save the changes. 6. Reboot the Gateway. CONFIGURING Wi-Fi ACCESS POINT PROPERTIES To configure the connection:

Enable Settings 1. On the bottom of the Access Points specific Enable Settings page, click Settings Settings. The configuration page displays. 05 / CONFIGURING ADVANCED SETTINGS 110 2. Verify the following information:

General Status Status - displays the connection status of the network. Network Network displays the type of network connection. Connection Type Connection Type displays the type of connection interface. Physical Address Physical Address displays the physical address of the network card used for the network. MTUMTU - specifies the largest packet size permitted for internet transmissions:

Automatic Automatic: set the MTU (Maximum Transmission Unit) at 1500. NETWORK SETTINGS Automatic by DHCP Automatic by DHCP: sets the MTU according to the DHCP connection. Manual Manual: allows you to manually set the MTU. 3. Click Apply Apply to save changes. EThERNET CONNECTION You can view the properties of your Ethernet LAN connection using an Ethernet cable inserted into one of the Gateways Ethernet LAN ports. To view the connection settings:

1. To access the Ethernet Ethernet Ethernet properties page, click the Ethernet link listed under Network name page. Network Connections Network name on the Network Connections 05 / CONFIGURING ADVANCED SETTINGS 112 2. To rename the network connection, enter the new name in the NameName field. 3. Click Apply Apply to save changes. CONFIGURING EThERNET PROPERTIES To configure the connection:

1. Ethernet page, click Settings Settings. The configuration page In the Ethernet displays. NETWORK SETTINGS 2. Verify the following information:

General Status Status displays the connection status of the network. Network Network displays the type name of network connection. Connection Type Hardware Ethernet Switch. Connection Type displays as Hardware Ethernet Switch Physical Address Physical Address displays the physical address of the network card used for the network. MTUMTU - specifies the largest packet size permitted for Automatic Automatic: sets the MTU (Maximum Transmission Unit at 1500). Automatic by DHCP Automatic by DHCP: sets the MTU according to the DHCP connection. Manual Manual: allows you to manually set the MTU. HW Switch Ports HW Switch Ports displays the status of each LAN port. 3. Click Apply Apply to save the changes. bROADbAND CONNECTION You can view the properties of your broadband connection (your connection to the internet). This connection may be via Ethernet cable. To view the connection settings:

1. Broadband Network Connections page, click the Broadband In the Network Connections Connection. Connection 05 / CONFIGURING ADVANCED SETTINGS 114 NETWORK SETTINGS 2. From the connections Enable Settings Enable Settings page, to enable or disable the connection, move the selector to on on or off off. 3. To rename the network connection, enter the new name in the NameName field. 4. Click Apply Apply to save changes. CONFIGURING ThE EThERNET CONNECTION To configure the connection:

1. Broadband Connection page, click Settings Settings. The In the Broadband Connection configuration page displays. 05 / CONFIGURING ADVANCED SETTINGS 116 2. Configure the following settings, as needed. General Verify the following information:

Status Status - displays the connection status of the network. Network Network displays the type of network connection. Connection Type Connection Type - displays the type of connection interface. MTUMTU - specifies the largest packet size permitted for internet transmissions:

Automatic Automatic: sets the MTU (Maximum Transmission Unit at 1500). Automatic by DHCP Automatic by DHCP: sets the MTU according to the DHCP connection. Manual Manual: allows you to manually set the MTU. NETWORK SETTINGS Internet APN (Access Point Name) you may input APN Internet APN information for your private network. WAN IP Address WAN IP Address, Internet Protocol section of WAN IP Address In the Internet Protocol specify one of the following:

No IPv4 Address No IPv4 Address: the connection has no IP address. This is useful if the connection operates under a bridge. Obtain an IPv4 Address Automatically Obtain an IPv4 Address Automatically: the network connection is required by Verizon to obtain an IP address automatically. The server assigning the IP address also assigns a subnet mask address, which can be overridden by entering another subnet mask address. Use the Following IP Address Use the Following IP Address: the network connection Subnet IP address and Subnet uses a permanent or static IP address MaskMask address, provided by Verizon or experienced network technician. To override the subnet mask, select the Override Subnet Override Subnet MaskMask check box, then enter the new subnet mask. Click Release Release/Renew Renew in the DHCP Lease DHCP Lease field to drop/get an IP address from the DHCP server. Expires In field, enter the amount of time In the Expires In a network device is allowed to connect to the Verizon Internet Gateway with its currently issued dynamic IP address. 05 / CONFIGURING ADVANCED SETTINGS 118 Obtain IPv4 DNS Address Dynamically IPv4 DNS - selects Obtain IPv4 DNS Address Dynamically IPv4 DNS -

for using Dynamic DNS. Each time the public IP address changes, the DNS database is automatically updated with the new IPv4 address. In this way, even though the IP address changes often, the domain name remains constant and accessible. Internet Connection Firewall -

Internet Connection Firewall - allows you to enable or disable the firewall configuration on this interface. 3. Click Apply Apply to save changes. 5.1i/ NETWORK ObJECTS Network objects define a group, such as a group of computers, on the Gateway network by MAC address, IP address, and/or host name. The defined group becomes a network object. You can apply settings, such as configuring system rules, to all devices defined in the network object. For example, instead of setting the same website filtering configuration individually to five computers one at a time, you can define the computers as a network object. Website filtering can then be simultaneously applied to all the computers. You can use network objects to apply security rules based on host names, instead of IP addresses. This is useful since IP addresses change from time to time. In addition, you can define network objects according to MAC address to make the rule application more persistent against network configuration settings. NETWORK SETTINGS To define a network object:

1. From the Advanced Network Settings. Advanced menu, select Network Settings. 2. Select Network Objects Network Objects in the Network Settings Network Settings section. 3. To define a network object, enter a name for the network object in the Objects Name Objects Name field. 4. Select and configure the type of network object as IP address, IP subnet, IP range, MAC address, host name, or DHCP option, and click AddAdd. 5. The network object displays in the Objects List Objects List section. 6. Repeat the above steps to create additional network objects. 7. When complete, click Apply Changes Apply Changes to save changes. 05 / CONFIGURING ADVANCED SETTINGS 120 5.1j/ PORT CONFIGURATION Ethernet port configuration allows you to set up the Ethernet ports as either full- or half-duplex ports, at either 10 Mbps, 100 Mbps, 1000 Mbps, or 2500 Mbps. To configure the ports:

1. Select Port Configuration Port Configuration in the Network Settings Network Settings section. 2. To emulate the speed and duplex configuration of the port with which its communicating, select AutoAuto or select the port speed and duplicity. 3. Click Apply Changes Apply Changes to save changes. NETWORK SETTINGS 5.1k/ ROUTING You can view the routing and IP address distribution rules as well as add, edit, or delete the rules. Routing Table To view the rules:

1. Select Routing Routing in the Network Settings Network Settings section. New Route. 2. To add a new Route, click New Route 05 / CONFIGURING ADVANCED SETTINGS 122 3. Specify the following parameters:

Routing Entry Routing Entry select the IP address type. NameName the network connection type. Destination Destination enter the destination IP of the destination host, subnet address, network address, or default route. The destination for a default route is 0.0.0.0. Netmask Netmask enter the network mask. This is used in conjunction with the destination to determine when a route is used. Gateway Gateway enter the IP address of the Gateway. MetricMetric enter a measurement preference of the route. Typically, the lowest metric is the most preferred route. If multiple routes exist to a specific destination network, the route with the lowest metric is used. 4. Click Apply Apply and Apply Changes Apply Changes to save changes. Internet Group Management Protocol (IGMP) IGMP allows for managing a single upstream interface and multiple downstream interfaces of the IGMP/MLD (Multicast Listener Discovery)-based forwarding. This function enables the system to send IGMP host messages on behalf of hosts that the system discovers through standard IGMP interfaces. Also, IGMP snooping allows an Ethernet switch to listen in on the IGMP conversation between hosts and routers, while IGMP querier will send out periodic IGMP queries. DIAGNOSTICS & MONITORING To enable this function:

1. Choose the IGMP interfaces by clicking on the check boxes on the screen. 2. Click Apply Changes Apply Changes to save changes. 5.2/ DIAGNOSTICS & MONITORING 5.2a/ bANDWIDTh MONITORING You can view and monitor the recorded bandwidth usage measured in bytes. To view the bandwidth:

1. From the Advanced Diagnostics & Monitoring. Advanced menu, select Diagnostics & Monitoring. 2. Bandwidth Diagnostics & Monitoring section, select Bandwidth In the Diagnostics & Monitoring Monitoring. Monitoring Refresh. 3. To refresh the page, click Refresh Auto-refresh on. 4. To continuously refresh the page, click Auto-refresh on 05 / CONFIGURING ADVANCED SETTINGS 124 5.2b/ DIAGNOSTICS You can use diagnostics to test network connectivity. To diagnose network connectivity:

1. Select Diagnostics Diagnostics in the Diagnostics & Monitoring Diagnostics & Monitoring section. 2. To ping an IP address, enter the IP address or domain name in the Destination Destination field and click GoGo. The diagnostics will display the number of pings, status, packets sent, and round trip time. If no diagnostic status displays, click refresh in your web browser. DIAGNOSTICS & MONITORING 5.2c/ SYSTEM LOGGING System logging provides a view of the most recent activity of the Gateway. In addition, you can view additional logs, such as the security, advanced, firewall, WAN link and LAN DHCP. To view the system log:

1. Select System Logging Diagnostics & Monitoring System Logging in the Diagnostics & Monitoring section. Options 2. To view a specific time of log event, click on the Options button. 05 / CONFIGURING ADVANCED SETTINGS 126 3. Select your preferred logging time. 4. Click Save Save to save changes. 5. To view a specific type of log event such as Security Log, WAN Log, etc., click the appropriate link in the menu on the top. Refresh. 6. To update the data, click Refresh DIAGNOSTICS & MONITORING 5.2d/ SYSTEM-WIDE CONNECTIONS You can view a summary of the monitored data collected for the Gateway. To view the Gateways full system status and traffic monitoring data:

1. Select System-wide Connections Diagnostics &

System-wide Connections in the Diagnostics &

Monitoring section. Monitoring 05 / CONFIGURING ADVANCED SETTINGS 128 2. To modify the connection properties, click the individual connection links. Auto-refresh on. 3. To continuously refresh the page, click Auto-refresh on DIAGNOSTICS & MONITORING 5.2e/ bACKhAUL LOGGING You can view a summary of the BHM (backhaul modes: Ethernet and Wi-Fi) status of your network. To view the backhaul modes log:

1. Select Backhaul Logging Diagnostics & Monitoring Backhaul Logging in the Diagnostics & Monitoring section. Refresh. 2. To refresh the page, click Refresh 3. To delete the log information, click ClearClear. 4. To save the log information, click SaveSave. 05 / CONFIGURING ADVANCED SETTINGS 130 5.3/ SYSTEM 5.3a/ SYSTEM STATUS To view the status:

1. From the Advanced System. Advanced menu, select System 2. You can quickly view the Gateways status by selecting System Status in the System System Status System section. Refresh. 3. To refresh the page, click Refresh Auto-refresh on. 4. To continuously refresh the page, click Auto-refresh on This section displays the status of the Gateways local network (LAN) and internet connection (WAN), firmware and hardware version numbers, MAC Address, IP settings of Verizon Internet Gateway and extender(s) (if connected). SYSTEM 05 / CONFIGURING ADVANCED SETTINGS 132 SYSTEM 5.3b/ DATE & TIME SETTINGS You can set the time zone and enable automatic time updates. To configure the settings:

1. From the Advanced System. Advanced menu, select System. 2. Select Date & Time Date & Time in the System System section. 3. Select the local time zone. The Gateway automatically detects daylight saving times for selected time zone. 4. Automatic Time Update section, click Enable In the Automatic Time Update perform an automatic time update. Enable onon to Refresh. 5. To refresh the page, click Refresh 05 / CONFIGURING ADVANCED SETTINGS 134 5.3c/ FACTORY RESET You can use this functionality to save and load configuration files. These files are used to backup and restore the current configuration of the Gateway. Only configuration files saved on a specific Verizon Internet Gateway can be applied to that Verizon Internet Gateway. You cannot transfer configuration files between Gateways. Warning: Manually editing a configuration file can cause the Gateway to malfunction or become completely inoperable. Restore Options You can restore your configuration settings to the Gateway factory default settings. Restoring the default settings erases the current configuration, including user defined settings and network connections. All connected DHCP clients must request new IP addresses. The Gateway must restart. Prior to restoring the factory defaults, you may want to save your current configuration to a file. This allows you to reapply your current settings and parameters to the default settings, as needed. Note: When restoring defaults, the setting and parameters of the Gateway are restored to their default values. This includes the administrator password. A user-specified password will no longer be valid. SYSTEM To restore the Gateways factory default settings:

1. Click Factory Reset Factory Reset in the System System section. Default Settings or Default Settings except current 2. Select Default Settings or Default Settings except current user settings. user settings Default Settings Default Settings will erase all gateway settings including user settings for SSID and Passwords. Default Settings except current user settings Default Settings except current user settings will erase all gateway settings but will retain the user settings for SSID and passwords. 3. Click the Restore Restore button. The factory default settings are applied and the Gateway restarts. Once complete, the Login page for the First Time Easy Setup Wizard displays. To load the configuration file:

1. Select Factory Reset Factory Reset in the System System section. Recent 2. To load a previously saved configuration file, select Recent backup or Load a backup file backup choose file. Load a backup file then click choose file 05 / CONFIGURING ADVANCED SETTINGS 136 Restore 3. Browse to the location of the file, and click the Restore button to begin the configuration uploading process. 4. Accessing the My Fios App My Verizon account also My Fios App or the My Verizon allows you to restore the previously saved settings. Select Restore from account My Verizon My Fios App or My Verizon Restore from account and use My Fios App account to restore the saved settings to the Gateway. 5. Click the Restore Restore button. The Gateway will automatically restart with that configuration. Save Options To save the configuration file:

1. From the Advanced System. Advanced menu, select System. 2. Select Factory Reset Factory Reset in the System System section. 3. Select Router Router or Backup file Backup file to save the current configuration, then click Save Save button. SYSTEM 4. If you select Backup file web browsers download folder. Backup file, the configuration file is saved to you 5. Click SaveSave button to begin the configuration backup process. 5.3d/ LED bRIGhTNESS The Verizon Internet Gateway allows you to set the LED brightness to turn Off(0%) or stay bright (50% or 100%) using the user interface. To control the LED brightness:

1. Select LED Brightness LED Brightness in the System System section. 2. Slide the bar to adjust the brightness of the LED. 3. Select your preferred timeout period (in minutes) from the dropdown list for the LED dimming setting. The Status LED will automatically turn off after the timeout period. 05 / CONFIGURING ADVANCED SETTINGS 138 4. Click Apply Changes Apply Changes to save changes. Note: The light will activate again on status changes like WPS pairing or loss of connection. 5.3e/ OPEN SOURCE SOFTWARE To view: From the Advanced and then click Open Source Software Open Source Software. Advanced menu, select System System from the left pane 5.3f/ REbOOT VERIZON INTERNET GATEWAY Warning: Only select Reboot Router if instructed to do so by Verizon support. You can reboot the Gateway using the Reboot Router feature. Refer to 1.1a/ Reset Button for factory reset function. SYSTEM To reboot the Gateway using the user interface:

1. Select Reboot Router Reboot Router in the System System section. 2. To reboot, click Reboot Device Reboot Device. The Gateway will reboot. This may take up to a minute. 3. To access the Gateway user interface, refresh your web browser. 4. After the Status LED on the front panel turns solid white, you will automatically be sent to the web browser login page. 5.3g/ REMOTE ADMINISTRATION Caution: Enabling Remote Administration places the Gateway network at risk from outside attacks. You can access and control the Gateway not only from within Remote the local network, but also from the internet using Remote Administration. Administration 05 / CONFIGURING ADVANCED SETTINGS 140 You can allow incoming access to the following:

Allow Incoming WAN Access to Web-Management Allow Incoming WAN Access to Web-Management - used to obtain access to the Gateways UI and gain access to all settings and parameters through a web browser. Diagnostic Tools Diagnostic Tools - used for troubleshooting and remote system management by a user or Verizon. Remote administration access of Web Management may be used to modify or disable firewall settings. Web Management services should be activated only when absolutely necessary. To enable remote administration:

1. Select Remote Administration Remote Administration in the System System section. 2. To enable access, select the check box. 3. To remove access, clear the check box. 4. Click Apply Changes Apply Changes to save changes. SYSTEM 5.3h/ SYSTEM SETTINGS You can configure various system and management parameters. To configure system settings:

1. Select System Settings System Settings in the System System section.. 05 / CONFIGURING ADVANCED SETTINGS 142 2. In the Router Status Router Status section, configure the following:

Routers Hostname Routers Hostname enter the host name of the Verizon Internet Gateway. Local Domain Local Domain view the local domain of the network. Location Location select your current location of the Gateway from the dropdown list. 3. 4. User Settings section, you can view the administration In the User Settings user that can currently access your Wi-Fi network. In addition, you can modify the login password and manage the number of unsuccessful login attempts the administration user can enter before the Gateway temporarily denies all further login attempts by the user. Router section, configure the following by selecting In the Router the check box:

Automatic Refresh of System Monitoring Web Pages Automatic Refresh of System Monitoring Web Pages activates the automatic refresh of system monitoring web pages. Prompt for Password when Accessing via LAN Prompt for Password when Accessing via LAN causes the Gateway to ask for a password when trying to connect to the network. Warn User Before Configuration Changes Warn User Before Configuration Changes activates user warnings before network configuration changes take effect. Session Lifetime field, specify the length of time In the Session Lifetime required before re-entering the login password after the Gateway has been inactive. SYSTEM Number of concurrent sessions that can be logged In the Number of concurrent sessions that can be logged into the router into the router field, select the number of users that can access the Gateway at the same time. 5. Remote Administration section, configure the In the Remote Administration following:

Primary HTTP Management Port. Enter the Primary HTTP Management Port Refer to 5.3g Remote Administration for using this feature. System Logging section move the selector to onon to In the System Logging activate system logging. Remote System Notify Level Remote System Notify Level specify the type of information, such as none, error, warning, and information, received for remote system logging. Remote Security Notify Level Remote Security Notify Level specify the type of information, such as none, error, warning, and information, received for remote network security logging. 6. Click Apply Changes Apply Changes to save changes. 06 /

TROUbLE ShOOTING 6.0 Troubleshooting Tips 6.1 Frequently Asked Questions 06 / TROUBLESHOOTING 145 This chapter lists solutions for issues that may be encountered while using the Verizon Internet Gateway as well as frequently asked questions. Although the majority of internet connectivity is automatic and transparent, if an issue does occur accessing the internet (e.g. complete loss of connectivity, inability to access services, etc.), you may need to take additional steps to resolve the problem. TROUBLESHOOTING TIPS Note: The advanced settings should only be configured by experienced network technicians to avoid adversely affecting the operation of the Gateway and your local network. 6.0/ TROUbLEShOOTING TIPS 6.0a/ IF YOU ARE UNAbLE TO CONNECT TO ThE INTERNET:

The first thing to check is whether the Gateway is powered on and is connected to the internet. Check the Status LED on the front of the Gateway. Be sure to refer to the 1.1c/ LEDs on page 7 to determine status of the Gateway. If the prior tips do not resolve your connection issue, try power cycling the Gateway by unplugging the power cord from the power supply and wait 2 minutes. During the 2min. wait period, also power cycle the network device (e.g. the computer, tablet, etc.) and then plug the power cable back into the Gateway. After 3-5 minutes, recheck the Status LED and try again to access the internet. If rebooting the Gateway does not resolve your connection issue, try resetting the Gateway back to its factory default state by manually pressing the reset button on the bottom panel of the Gateway for 3+ seconds (the Status LED should go off) to begin resetting the Gateway. The Gateway will perform a factory reset and return the Gateway to default settings. The Gateway will return to service in 3-5 minutes depending on your network connection. Check Status LED and if it is solid white, try again to access the internet. 06 / TROUBLESHOOTING 147 6.0b/ IF YOU ARE UNAbLE TO CONNECT TO ThE VERIZON INTERNET GATEWAY USING WI-FI:

Be sure your Wi-Fi device is within range of the Gateway; move it closer to see if your connection improves. Check your network devices Wi-Fi settings to be sure your devices Wi-Fi is on (enabled) and that you have the correct Wi-Fi network and password (if using a Wi-Fi password) as configured on the Gateway. Be sure you are connecting to the correct Wi-Fi network; check to be sure you are using the Gateways SSID. In some cases, if using a Wi-Fi password, you may need to enter the Wi-Fi password into your network device again to be sure your device accepts the password. Check to be sure you are running the latest software for your network device. Try turning your network devices Wi-Fi off and on, and try to connect. If you have made any changes in your network settings and turning your network devices Wi-Fi off and on does not help, try to restart your network device. You may need to turn the Wi-Fi settings from on to off, and back to on again and apply the changes. If you are still unable to access the Gateway, you may need to try connecting to the Gateway using another network device. If the issue goes away with another network device, the issue is likely with that individual network devices configuration. TROUBLESHOOTING TIPS 6.0c/ ACCESSING ThE VERIZON INTERNET GATEWAY IF YOU ARE LOCKED OUT If the Gateway connection is lost while making configuration changes, a setting that locks access to Gateways UI may have inadvertently been activated. The common ways to lock access to the Gateway are:

Scheduler - If a schedule has been created that applies to the computer over the connection being used, the Gateway will not be accessible during the times set in the schedule. Access Control - If the access control setting for the computer is set to block the computer, access to the Gateway is denied. To gain access, restore the default settings to the Gateway. 6.0d/ RESTORING ThE VERIZON INTERNET GATEWAYS DEFAULT SETTINGS There are two ways to restore the default settings of the Gateway. It is important to note that after performing either procedure, all previously save settings on the Gateway will be lost. For additional information regarding the Restore Defaults feature, refer to section 5.3c/ Factory Reset/Restore Options. Using the tip of a paperclip or similar object, press and hold the Reset button on the bottom of the Gateway for over three seconds. 06 / TROUBLESHOOTING 149 Access the UI and navigate to the Advanced Settings page. Select the 5.3c/ Factory Reset option. After saving your configuration, if desired, click the Factory Default radio button. For additional details, refer to the 5.3c/ Factory Reset/Restore Options section of this guide. Note: If you reset or reboot the Gateway, you may also need to disconnect the Gateways power supply for a few minutes (3 or more) and then reconnect the power cable. 6.0e/ LAN CONNECTION FAILURE To troubleshoot a LAN connection failure:

Verify the Gateway is properly installed, LAN connections are correct, and that the Gateway and communicating network devices are all powered on. Confirm that the computer and the Gateway are both on the same network segment. If unsure, let the computer get the IP address automatically by initiating the DHCP function, then verify the computer is using an IP address within the default range of 192.168.1.2 through 192.168.1.254. If the computer is not using an IP address within the correct IP range, it will not connect to the Gateway. Verify the subnet mask address is set to 255.255.255.0. TROUBLESHOOTING TIPS 6.0f/ TIMEOUT ERROR OCCURS WhEN ENTERING ThE URL OR IP ADDRESS Verify the following:

All computers are working properly. IP settings are correct. The Gateway is on and connected properly. The Gateway settings are the same as the computer. For connections experiencing lag or a slow response:

Check for other devices on the network utilizing large portions of the bandwidth and if possible temporarily stop their current utilization and recheck the connection. If lag still exists, clear the cache on the computer and if still needed, unplug the Ethernet cable or disable the Wi-Fi connection to the computer experiencing the slow connection and then reconnect or enable the Wi-Fi connection and try the connection again. In rare cases you may also need to:

Unplug the Ethernet cable to the Gateway and restart the Gateway, wait 1-2 mins. and insert the Ethernet cable again. Under limited circumstances you may use a port forwarding configuration on the Gateway, based on the application you are using (refer to the 5.0e/ Port Forwarding section or Verizons support online help for more details). 06 / TROUBLESHOOTING 151 6.0g/ FRONT LEDS AND WPS bUTTON Front LED Mode Status LED Pattern System Status (O) Bootup System booting Soft blink white System off Off Other Firmware update Fast blink white Factory reset Hardware error No SIM card No signal Fast blink yellow Soft blink red Hard blink red Solid red Signal Status (5G/LTE Home customer) Low bar Weak mobile coverage Solid white (

) Low bar and Mid bar Good mobile coverage Solid white (

Excellent mobile Low bar, Mid bar and coverage High bar Solid white (

) Regular usage Setup complete 50% bright white TROUBLESHOOTING TIPS Front LED Mode Status LED Pattern Wi-Fi (

) Regular usage Paring Passing signal Setup complete Not connected to Internet Solid white Solid white Solid red Wi-Fi disabled by user Solid green Pairing WPS (in progress) WPS connection success Hard blink blue Fast blink blue WPS connection unsuccessful (time out) WPS connection failure

(interrupted) Fast blink red Hard blink red Other Hardware error Soft blink red The rear panels WPS Button allows quick access to the Wi-Fi Protected Setup (WPS) feature and handset paging/paring mode. 06 / TROUBLESHOOTING 153 6.0h/ REAR LIGhTED INDICATORS Ethernet Port LED Mode Status Left LED Right LED Wired LAN connection Ethernet >

100M* Link

* Threshold level can be decided based on port capability Ethernet >

100M* Activity Ethernet <

100M* Link Ethernet <

100M* Activity No Ethernet connection Off Off Solid white Blinking white Solid yellow Off Blinking yellow Off Off Off 6.1/ FREQUENTLY ASKED QUESTIONS 6.1a/ IVE RUN OUT OF EThERNET PORTS ON MY VERIZON INTERNET GATEWAY. hOW DO I ADD MORE COMPUTERS OR DEVICES?

Plugging in an Ethernet hub or switch expands the number of ports on the Gateway. Run a straight-through Ethernet cable from the Uplink port of the new hub to the Gateway. FREQUENTLY ASKED QUESTIONS Use a crossover cable if there is no Uplink port/switch on your hub, to connect to the Gateway. Remove an existing device from the Ethernet port on the Gateway and use that port. 6.1b/ hOW DO I ChANGE ThE PASSWORD ON MY GATEWAY UI?

To change the password:

1. On the main screen, select Advanced System Advanced, then select System Settings in the System Settings System section. 2. In the User Settings User Settings section, set a new password. 6.1c/ IS ThE WI-FI OPTION ON bY DEFAULT ON MY GATEWAY?

Yes, the Gateways Wi-Fi option is activated out of the box. 6.1d/ IS ThE WI-FI SECURITY ON bY DEFAULT WhEN ThE WI-FI OPTION IS ACTIVATED?

Yes, with the unique WPA2 (Wi-Fi Protected Access II) key, also called the Wi-Fi Password, that is printed on the sticker on the bottom of the Gateway. 06 / TROUBLESHOOTING 155 6.1e/ ARE ThE GATEWAYS EThERNET PORTS AUTO-

SENSING?

Yes. Either a straight-through or crossover Ethernet cable can be used. 6.1f/ CAN I USE AN OLDER WI-FI DEVICE TO CONNECT TO MY GATEWAY?

Yes, the Gateway can interface with 802.11b, g, n, ac or ax devices. The Gateway also can be setup to handle only n Wi-Fi cards, g Wi-Fi cards, b Wi-Fi cards, or any combination of the three. 6.1g/ CAN MY WI-FI SIGNAL PASS ThROUGh FLOORS, WALLS, AND GLASS?

The physical environment surrounding the Gateway can have a varying effect on signal strength and quality. The denser the object, such as a concrete wall compared to a plaster wall, the greater the interference. Concrete or metal reinforced structures experience a higher degree of signal loss than those made of wood, plaster, or glass. FREQUENTLY ASKED QUESTIONS 6.1h/ hOW DO I LOCATE ThE IP ADDRESS ThAT MY COMPUTER IS USING?

In Windows 8 or Windows 10, click the Windows button and select Settings the Properties Settings, then click Network & Internet Properties button for details of IP address. Network & Internet and Status Status. Click On Mac OS X, open System Preferences and click the Network icon. The IP address displays near the top of the screen. To find the IP address from the gateway GUI:

1. From the Basic Basic menu, select Devices Devices from the left pane.. 2. Click the Settings icon to access the Device Settings Device Settings page for that device to view detailed IP address information for the device. 6.1i/ I USED DhCP TO CONFIGURE MY NETWORK. DO I NEED TO RESTART MY COMPUTER TO REFRESh MY IP ADDRESS?

No. In Windows 8, Windows 10 and Mac OSX, unplug the Ethernet cable or Wi-Fi card, then plug it back in. 6.1j/ I CANNOT ACCESS MY GATEWAY UI. WhAT ShOULD I DO?

If you cannot access the UI, verify the computer connected to the Gateway is set up to dynamically receive an IP address. 06 / TROUBLESHOOTING 157 6.1k/ I hAVE A FTP OR WEb SERVER ON MY NETWORK. hOW CAN I MAKE IT AVAILAbLE TO USERS ON ThE INTERNET?

For a web server, enable port forwarding for port 80 to the IP address of the server. Also, set up the web server to receive that port. Configuring the server to use a static IP address is recommended. For a FTP server, enable port forwarding for port 21 to the IP address of the server. Also, set up the web server to receive that port. Configuring the server to use a static IP address is recommended. 6.1l/ hOW MANY COMPUTERS CAN bE CONNECTED ThROUGh MY GATEWAY?

The Gateway is capable of 254 connections, but we recommend having no more than 132 connections. As the number of connections increases, the available speed for each computer decreases. 07 /

SPECIFICATIONS 7.0 General Specifications 7.1 Connections 07 / SPECIFICATIONS 159 The specifications for the Verizon Internet Gateway are as follows. This includes standards, cabling types and environmental parameters. GENERAL SPECIFICATIONS Note: The specifications listed in this chapter are subject to change without notice. 7.0/ GENERAL SPECIFICATIONS CR200A Model Number:

Technical Standard:

3GPP Release 16 (DL CAT 20, UL CAT 18) Frequency band:

LTE Band: B2,B5,B13,B48,B66, DL 4x4 MIMO UL 1x1 SISO 5G Band: n2,n5,n48, n66, n77, DL 4x4 MIMO UL 2x2 MIMO Wi-Fi Standard:

802.11 a/b/g/n/ac/ax Dimensions:

130 mm x 130 mm x 220.5 mm

(L x W x H) Weight:

Certifications:

1.36 Kg FCC, UL Operating Temperature: 5 C to 40 C (41 F to 104 F) Storage Temperature: -45 C to 70 C (-49 F to 158 F) Operating Humidity:

5% to 90%

Storage Humidity:

5% to 90% (non-condensing) 07 / SPECIFICATIONS 161 7.1/ CONNECTIONS DC Input:

source adapter: 12V/3A Ethernet:

RJ-45 LAN ports x 2 08 /

NOTICES 8.0 Regulatory Compliance Notices 08 / NOTICES 163 This chapter lists various compliance and modification notices, as well as the NEBS requirements and GPL. REGULATORY COMPLIANCE NOTICES 8.0/ REGULATORY COMPLIANCE NOTICES 8.0a/ Class b Equipment This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures:

Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/ TV technician for help. FCC Caution: Any changes or modifications not expressly approved by the grantee of this device could void the users authority to operate the equipment. FCC regulations restrict the operation of this device to indoor use only. 08 / NOTICES 165 The operation of this device is prohibited on oil platforms, cars, trains, boats, and aircraft, except that operation of this device is permitted in large aircraft while flying above 10,000 feet. Operation of transmitters in the 5.925-7.125 GHz band is prohibited for control of or communications with unmanned aircraft systems. RF Exposure:

To comply with FCC RF exposure compliance requirements, the antenna used for this transmittermust be installed to provide a separation distance of at least 22cm from all persons (indoor), and must not be co-located or operating in conjunctionwith any other antenna or transmitter. This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. 8.0b/ NEbS (Network Equipment building System) Statement An external SPD is intended to be used with CR200A. WARNING:

WARNING: The intra-building ports of the equipment or subassembly is suitable for connection to intra-building or unexposed wiring or cabling only. The intra-building port(s) of the equipment or subassembly MUST NOT be metallically connected to interfaces that connect to the OSP or its wiring. These interfaces REGULATORY COMPLIANCE NOTICES are designed for use as intra-building interfaces only (Type 4 ports as described in GR-1089) and require isolation from the exposed OSP cabling. The addition of Primary Protectors is not sufficient protection in order to connect these interfaces metallically to OSP wiring. Caution: The Verizon Internet Gateway must be installed inside the home or office. The Gateway is not designed for exterior installation. 8.0c/ GENERAL PUbLIC LICENSE This product includes software made available under open source licenses. Additional information about that software, applicable licenses, and downloadable copies of source code, is available at:

https://verizon.com/opensource/

All open source software contained in this product is distributed WITHOUT ANY WARRANTY. All such software is subject to the copyrights of the authors and to the terms of the applicable licenses included in the download. This information is provided for those who wish to edit or otherwise change such programs. You do not need a copy of any of such open source software source code to install or operate the device.

LV65C_Label 2023/06/13 Normal Internal Use Confidential Restricted Confidential Label area Label area Normal Internal Use Confidential Restricted Confidential 2

Wisiron NeWeb Corp. Covered list Attestation Statement Date: May 29, 2023 Federal Communications Commission 7435 Oakland Milis Road Columbia, MD 21046 Subject: Attestation Statements Part 2.911(d)(5)(i) Filing FCC ID: NKR-LV65C-T3 Wistron NeWeb Corporation certifies that the equipment for which authorization is sought is not covered equipment prohibited from receiving an equipment authorization pursuant to section 2.903 of the FCC rules. Sincerely, Signature Ena wh (N Contact Name: Brown Wang Job Title: Project Management Email: brown.wang@wmc.com.tw bol by FPr\ ry"

Wistron NeWeb Corp. Date: 2023-06-13 To the attention of:

Federal Communications Commission Authorization and Evaluation Division Declaration Letter for Low Power Indoor Access Points (61D) We, Wistron NeWeb Corporation, attest that this device under FCC ID: NKR-LV65C-T3 complies with device protocol requirements and operational restrictions for Indoor Access Point Devices (61D). a) The method used by this indoor access point to control the associated client/subordinate power control is as follows: This indoor access point can act as a master as defined in Section 15.202, allowing it to transmit without receiving an enabling signal. This mode can select a channel and initiate a network by sending enabling signals to client devices and subordinate devices. b) This Low-power Indoor Access Point operates in the 5.925-7.125 GHz band. It is supplied power from a wired connection, has an integrated antenna, is not battery-powered, and does not have a weatherized enclosure. c) We acknowledge this device is subject to and in full compliance with the device restrictions listed below. All users are notified of these restrictions through the user manual. e Low-power indoor Access Point. Access Point operating in the 5.925-7.125 GHz band shall be supplied power from a wired connection, has an integrated antenna, is not battery powered, and does not have a weatherized enclosure. This device's operation will not be allowed on oil platforms, cars, trains, boats, and aircraft, except that operation of this device is permitted in large aircraft while flying above 10,000 feet. e This device is prohibited for control of or communications with unmanned aircraft systems, including drones. d) This device employs a Contention-Based Protocol as demonstrated in the test report. If you should have any questions regarding this declaration, please do not hesitate to contact us, thank you!

Sincerely, snare LOW) 1151-4!

Contact Name: Brown Wang Job Title: Project Management . Email: brown.wang@wme.com.tw