SMC Networks SMC8014W-G manual

Install Guide EZ Connect ™ Wireless Cable Modem Gateway SMC8014W-G[...]

Copyright Information furnished by SMC Network s, Inc. (SMC) is believed to be accurate and rel iable. However, no responsibility is assumed by SMC fo r its use, n or for any infringements of patents or other rights of third parties which may resu lt from its use. No license is gr anted by implication or otherwise under any pa tent or pate nt right[...]

TABLE OF CONTENTS CHAPTER 1 | Introduction Features and Benefits Package Contents Minimum Requirements CHAPTER 2 | Getting to know the EZ Connect™ Wireless Cable Modem Gateway LED Indicators Rear Panel Description Resetting and Restoring the EZ Co nnect™ Wireless Cable Modem Gateway CHAPTER 3 | Installation Basic Installation Pr ocedur e CHAPTE[...]

CHAPTER 1 | Introduction Congratulations on your purcha se of the EZ Connect™ Wireless Cable Modem Gateway. SMC is proud to provide you with a powerful yet simple co mmunication device for co nnecting your local area network (LAN) to the Internet. Features and Benefits • EZ 3-Click Installation Wizard - A new and improved way to install your Ga[...]

Package Contents Before installing the EZ Connect™ Wireless Cable Modem Gatew ay , verify that you have the items listed under below. Also be sure that you have the necessary cabling. If any of the ite ms are missing or damaged, contac t your local SMC distributor. • 1 - EZ Connect™ Wireless Cable Modem Gateway • 1 - Power adapter (12V/1.25[...]

CHAPTER 2 | Getting to Know the EZ Connect™ Wireless Cable Modem Gateway The EZ Connect™ Wireless Cable Modem Gateway is the perfect all in one solution, for the home or business environment. This full-featured device has: • An approved DOCSIS 1.1 an d 2.0 Ca ble modem • Advanced SPI Firewall Gateway • High-speed 54 Mbps 802.1 1g Wireless[...]

Rear Panel Description USB CATV Connector Power LAN Ports Reset Button Item Description Power Connect the included power adapter to this port. Reset Use this button to reset the power or restore the default factory settings. LAN 1-4 Four 10/100 Auto-sensing switch po rts (RJ-45). Connect devices on your local area network to these ports (s uch as a[...]

CHAPTER 3 | Installation The EZ Connect™ Wireless Cable Modem Gateway can be installe d in any location where you have cable Internet access, and your cable Internet service provider has approved the Gateway. To confirm you meet these 2 criteria points, please contact your cable operator. For general installation please f ollow t he guidelines ou[...]

Basic Installation Procedure 1. Connect the LAN: You can connect the Gateway to y our PC, or to a hub or switch. Run Ethernet cable from one of the LAN ports on the rear of the Gateway to your computer’s network adapter or to another network device . You can use either a standard straight through or cross over Ethernet cable s inc e the Gateway i[...]

CHAPTER 4 | Configuring your Computer The information outlined in this chapte r wi ll guide you through the configuration for the following Operating Systems: • Windows 95/98 • Windows Me • Windows 2000 • Windows XP • Apple Macintosh Configuring Windows 95/ 98/Me 1. Access your Network settings by clicking [Start], choose [Settings], and [...]

Configuring Windows 20 00 1. Access your Network settings by clicking [Start], choose [Settings], and then select [Control Panel] 2. In the Control Panel, locate and double- click the [Network and Dial-up Connections] icon 3. Locate and double-click the [Local Area Connection] icon for the Ethernet adapter that is connected to the Gateway. When the[...]

6. Reboot your PC. Configuring a Mac intosh Computer You may find that the instructions here do not exactly match your screen. This is because these steps and screen shots we re create d using Mac OS 10.2. Mac OS 7.x and above are all very similar, but may not be identical to Mac OS 10.2. 1. Pull down the Apple Menu. Click System Preferences and se[...]

CHAPTER 5 | Configuring the EZ Connect™ Wireless Cable Modem Gateway After you have configured TCP/IP on a client computer, use a web browser to configure the EZ Connect™ Wireless Cable Modem Gateway. The Gateway can be config ured by any Java- supported browser including Internet Explorer 5.0 o r abo ve, or Netscape Navigator 5.0 or above. Usi[...]

Accessing the EZ Connect™ Wireless Cable Modem Gateway’s Web Manage ment To access the EZ Connect™ Wireless Cable Modem Gateway’s web-based man agement screens, follow the steps below: 1. Launch your web-browser. NOTE : Your computer does not have to be ONLINE to configure the EZ Connect™ Wireless Cable Modem Gateway. 2. In the Address Ba[...]

CHAPTER 6 | Navigating the Web-based Administration The EZ Connect™ Wireless Cable Modem Gatewa y’s management interface allows you to configure both basic and advanced features an d options. Some of these advanced functions include: hacker attack detection, IP and MA C address filtering, intrusion detect ion, port forwarding setup, virtual DMZ[...]

If your password is lost, or yo u cannot gain access to the user interface, press the Reset button on the rear panel (holding it down for at leas t five seconds) to restore the factory defaults. From this section you can also con figure th e RADIUS, TACACS+ and TA CACS au thenti cati on. Note: only one form of authenticat ion can be enabled at any [...]

Remote Management Allows a remote PC to configure, mana ge, and monitor the Gateway using a standard web browser. To access the Remote Man agement configurat ion p age, on the Side Navigation bar, click on [System] link and then click on the [Remote Management] link. This feature has several options to con figure: • Configure the HTTP remote mana[...]

This feature enables the customer to remotel y acces s the web-ba sed administration scre en with their username and password (default: cu sadmin/pa ssword). To enable this feature , check the [Customer Remote Management] checkbox. Remote Management Access Rule This option will allow you to limit who can access the remote management web login from [...]

MAC Spoofing This is an optional conf igu ration that may or may not be required by your cable operat or. For more information ab out M AC Cl one/Spoofing please conta ct your cable operator to determine if this is a required settin g. To access the MAC Spoofing configuration page, on the Side Navigation bar, click on [WAN] link and then click on t[...]

Private LAN IP Settings Define the Gateway’s private LAN settings. The IP address configured here is the Gateway’s (default: 192.168.0.1). NOTE: Port Forwarding and Access Con trol rules will be based on the network scope defined here. If either of these types of rules were previously setup and the Private LAN IP add ress is changed, then those[...]

NOTE : You cannot use the IP address of the Gateway (192.168.0.1 – default I P) in the client address pool. PPTP IP Address Pool When the Gateway is configured to act as a PPT P VPN server in the VPN Settings sect ion, PP TP clients will be assigned IP addre sse s in this range for their PPTP WAN interface. ROUTING From this section you can confi[...]

RIP Control Use this section to configure the RIP control settings. RIP is used by some cabl e operat ors to advertise Public LAN I Ps to their network. Below is an outline of t h e RI P contro l options: 1. RIP Send Version: Options are to send RIP1| RIP2| RIP1 and RIP2| DO NOT SEND . 2. RIP Receive Version: Options are to receive RIP1| RIP2| RIP1[...]

1. You will need to confirm the network is setup with a valid Public LAN IP in [LAN] page before they enable the RIP setting. NOTE : The RIP setting is disabled by default. 2. After you confirm the LAN Settings, the n you will need to configure the RIP Settings. These settings will need to be configured based on how your cable operator network is s[...]

The Wireless Mode can be set to Mixed (default ), 11B only, 11B+ only, or 11G only. Also, the Gateway’s wireless interface can be disabled if not being used. Channel and SSID You must specify a commo n radi o channel and SSID (Service Set ID) to be used by the Gateway and all of your wireless clients. Be sure you configure all of your clients to [...]

If you are transmitting sensitiv e data across wireless channels, you should enable either Wired Equivalent Privacy (WEP) or WiFi Protected Access (WPA) encryption. Encryption requires you to use the same set of encryption/decryption ke ys for the Gateway and all of your wireless clients. To access the Encryption confi gurat ion page, on the Side N[...]

keys. Simply configure the Default Key to th e one key that you will be using across your network. On the wireless clients, you can use the passphrase option, and client utility will generate the same 4 keys – or you can manually type in the sele cted KEY that is configured on the Gateway. For more security, you can use 128-bit WEP encryp tion. T[...]

You can also configure a [Device Name] that is associate d with a specific MAC address. In doing this, you can easily recognize the comput ers that you are in your access list. NOTE : MAC filtering only applies to Wireless Clients. NAT Network Address Translation (NAT) allows multip le users at your l ocal site to access the Internet through a sing[...]

This Port Forwarding function supports 2 types of Services: • Predefined Service • Customer Defined Service Predefined Service The Predefined Service option has a pul l-down menu with several popular Ser vi ce Appl ications, such as HTTP (80), FTP (20/21), and AIM/ICQ (5190). To configure Port Forwarding with a Predefined Service rule, follow t[...]

4. Click the [Apply] button to save your changes and return to the Port Forwarding main screen Customer Defined Service Rule (Custom) The Customer Defined Service section allows you to custom configure a Port Forwarding rule with any Traffic type (TCP/UDP/TCP an d UDP), Public Port, and Private Port. To configure this custom optio n , please follow[...]

Remote IPs: Any (allow access to any public IP) Public Port: 8000 Private Port: 80 With this configuration, all HTTP (Web) TCP tr affic on port 8000 from any IP Address from the WAN side will be redirected through the firewall to the Internal Server (192.16 8.0.1 00) on port 80. NOTE : This configuration is useful because you don’t have to reco n[...]

The se cond sec tion i s used t o conf igure A ccess Rules for the Private LAN to the Internet. These rules will block services on the private LAN to the Internet. From this section, you can also choose to have the Gateway to [Respond to Ping on Internet WAN Port]. If you check this option, the Gatewa y will respond to PING requests to the WAN IP a[...]

4. Select the [LAN IPs] that you want this acce ss rule to apply to. Yo u can choose to apply this rule to Any IP Addres s, a Single IP Address, or a Range of I P Addresses. a. Any IP Address [Any] – choose this option to block all LAN clients. You don’t need to configure the [Start IP] or [End IP] options. b. Single IP Address [Single address][...]

7. When your configuration is complete, click the [Apply] button to save your changes and return to the main Access Control page. Special Application Some applications, such as Internet gaming, vide oconferencing, Internet telephony, and others require multiple connections. Rules are based on the port or range of ports tha t the application sends d[...]

6. Set the [Interval] of the rule. This is the time in between the outgoing and incoming data traffic. NOTE : If you set this value too low, the incoming p orts will be closed before the return data arrives at the firew a ll and the connection will be broken and the application will not work. 7. The last 2 options are for Advanced Users, most users[...]

3. Enter in a new keyword or URL address that you want to block in the [Keyword/Domain Name] input box. 4. Press the [Add Keyword] button to save this keyword or URL. 5. The new keyword or URL address would be listed in the text box below. NOTE : This list will support 50 Keywords or URLs. If you want a PC on your netw ork to bypass these rules you[...]

There are 3 sections to configure on this page: • Email Alerting • Syslog Alerting • Alerting Schedule To enable the Email Alert feature, clic k the [Enable Email Alerting] checkb ox. Follow the steps below to config ure the Email Alert feature: 1. Enter in your SMTP Server Address (this is al so referred to as the outgoing mail server) 2. En[...]

5. To add an email address to the Alert List, click the [Add] button. The configuration page shown below will be displayed: NOTE : The email alert feature will allow you to send email al erts to 4 different email accounts. For example you could send an email to your home, work, and school email address. 6. Enter in the [Name] of the person/acco unt[...]

Immediate Alerts can be generated for both the email and Syslog alerts. To configure the type of Alert that you want to get: - An Intrusion is detected – this is a hacker attack attempt from th e WAN - Attempts to access a blocked site – alert to any attempts to ac c ess a site or keyword liste d in your URL/Blocking list. DMZ Host (Demilitariz[...]

Locally Backup Settings to Configurati on File The first Tools option is to [Back Up] your co nfiguration settings of your Gateway. This includes, but is not limited to, Port Forwar ding, Special Applicatio n, and Alert Emails. To save the Gateway settings to a conf iguration file, follow the steps below: 1. Click on the [Back Up] button 2. Click [[...]

3. Click [OK] to confirm the r estore process 4. To complete the Restore proce ss the G ateway will reboot. NOTE : This file format (.cfg) is the only format that you can use to restore settings from. This is format that is provided by the Backu p option. Remotely Backup/Restore Gateway Settings To backup your configuration se ttings of your Gatewa[...]

3. To complete the Restore proce ss the G ateway will reboot. Reboot In the event that the system stops resp onding correctly or functioning properly, you can perform a reboot. To access the Reboot option page, on the Side Na vigation bar, click on [Tools] link and then click on the [Reboot] link. To reboot the Gateway, follow the steps below: 1. C[...]

VPN The VPN section allows you to setup VPN end points on the Gatew ay. By doing so, an encrypted tunnel will be established between the Gateway and the remote VPN end point. To access the VPN con figuration page, on the Side Navigation bar, click on [VPN] link. The Gateway supports 3 ty pes o f VPN termination: • IPSec • PPTP • L2TP over IPS[...]

3. Click the [Apply] button to save your changes 4. On the Side Navigation bar, cl ick on the [Access Control] link 5. Enable LAN clients that will acce ss the IP Sec VPN by adding them to the VPN Access List. There are two ways to add a LAN client to the VPN Access List. Either select the radio button next to an [Auto-Learned CPE Device] or manual[...]

a. Either the Gateway’s Private LAN I P add ress or Public LAN IP addre ss can be configured as the end point for the VPN t unnel. Select either [Protect Private Lan] or [Protect Public Lan] to enable the entire Private or Public LAN to be part of the VPN tunnel and the respective Gateway LAN IP address will populate the [Intranet Address] and [I[...]

g. Enter the [Authentication method]. Currently, the Gateway only support s [Preshared Key]. h. Enter the [IKE HASH]. The options are MD5 | SHA. i. Enter the [IKE Encryption]. The options are DES | IDEA | BLO W FISH | RC5 | 3DES. j. Enter the [IPSec Operation]. The options are ESP | AH. k. Enter the [ESP Transform]. The option s are DES | I DEA | B[...]

9. The [Status] should now be [Phase 2 Completed]. Create a PPTP VPN Tunnel To enable and configure a PPTP server on the Gatew ay, follow th e steps below. Note that remote PPTP clients that connect into the Gateway will be assign ed IP addresses from the PPTP IP Address Pool on the LAN Setting s page for their PPTP WAN interface. 1. On the Side Na[...]

6. Enter the [User Name] and [Password]. User Name must be at least 3 character s and password must be at least 6 char acters. 7. Click [Apply] to save the setti ngs. You will be returned to the PPTP/L2TP Configuration page. Create a L2TP over IPSec VPN Tunnel To enable and configure a L2TP over IP Sec end point , follow the steps below. 1. First, [...]

STATUS The Status screen summarizes import ant information about the Gateway including WAN/LAN connection status, Wireless setti ngs, software vers ion and ha rdware versions, and uptime statistics. The Network Log shows both fi rewall an d network activity The LAN Client Log show s the cl ients connected to the Gateway and the type of connection ([...]

The Cable Modem System Event Log sh ows diagnostic infor mation about your connection and cable system. The Cable Status page shows the users the init ialization proce ss the SMC8014W-G has been through, and also includes the informat ion ab out the downstream channel and the upstream channel the modem is connected on.[...]

APPENDIX A | Telnet and SSH CLI Commands Refer to the Remote Management se ction in Ch apter 6 to enable and configure Telnet and SSH settings. Refer to the 8014 CLI document for command spe cifics. To remotely access the CLI of the SMC 8014W-G via Telnet, open a DOS/Command Prompt and type: telnet IP remote mgmt port Enter • NOTE : Telnet remote[...]

APPENDIX B | Troubleshooting This appendix describes common p roblems you may encounter an d possible solutions t o them. B.1 | Verify you are connected to the EZ Connect™ Wireless Cable Modem Gateway If you are unable to access the Gateway’s web- based administration pages, then you may n ot be properly connected or configured. The screen shot[...]

B.3 | I have another IP Address displayed If you have another IP address listed, then the PC may not be configured for a DHCP connection. Please refer t o Chapter 4 | Configure your Comput er for information. Once you have confirmed your computer is configured for DHCP, follow the steps below. 1. Open a DOS window as described ab ove. 2. Type “ip[...]

B.4 | Pinging the EZ Connect™ Wireless Cable Mode m Gatew ay To verifying Your TCP/IP Connect ion is configured properly and you are able to access the EZ Connect™ Wireless Cable Modem Gatew ay’s web-ba sed management screens – you can use the ‘Ping’ command in DOS. To ac cess the DOS dialog windo w please follow the steps below: 1. Cli[...]

B.5 | Symptom / Action Troublesho oting The Gateway can be easily monitored t hrough pa nel indicators to identify problems. Please refer to Chapter 2 – Section 2.0 | LE D Definit ions to confirm you have the correct LED status. If not, then refer to the symptoms and actions outlined below: SYMPTOM: Power LED is Off ACTION: • Check connections [...]

SYMPTOM: Internet users can not access my service/server hosted on a LAN comput er ACTION: • Configure a Port Forwarding rule as described in the NAT section of CHAPTER 6. • Contact your cable operator fo r assistance i f you do not have this option available in your login. SYMPTOM: My Gateway is wireless enabled an d I can not connect to the w[...]

APPENDIX C | Technical Specifications Standards • 802.3 10BaseT Ethernet • 802.3u 100BaseTX F ast E t h ernet • 802.11g WAN Interface • F-type RF Connector LAN Interfaces • 4 – 10BASE-T/100BASE-TX RJ-45 ports • 1 – USB 1.1 Type B Connector • 1 – 801.11g Acce ss Point Wireless Interface • 54Mbps IEEE 8 02.11g Wireless LAN • W[...]

APPENDIX D | Compliances FCC Interference Statement This equipment has been tested and found to comp ly with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules. Thes e limits are designed to provide reasonable protection against r adi o in terference in a comme rcial environment. This equip ment can generate, use and radia[...]

APPENDIX E | Technical Support At this time, the SMC8014W-G is only distributed through cable operators. Conta ct your cable operator with any technical support needs you may have. PHONE From U.S.A. and Canada (24 hours a day, 7 days a week) • (800) SMC-4-YOU • (949) 679-8000 • Fax: (949) 6 79-1481 From Europe (8:00 AM - 5:30 PM UK Time) • [...]

[...]

SMC8014W-G SMC Networks, Inc. 38 Tesla Irvine, CA 92618 Rev. 1.0 – 4.01.05-TWC[...]