2Wire Gateway, User Manual

Page 1: ...2Wire Gateway User Guide ...

Page 2: ...ISING OUT OF OR IN CONNECTION WITH THIS MANUAL THE SOFTWARE OR OTHER INFORMATION CONTAINED HEREIN OR THE USE THEREOF 2Wire Inc reserves the right to make any modification to this manual or the information contained herein at any time without notice The software described herein is governed by the terms of a separate user license agreement Updates and additions to software may require an additional...

Page 3: ...ting the System Password 7 Changing Your Time Zone Settings 8 Viewing System Details 9 Broadband Link Tab Viewing Your Broadband Link Summary 10 Connection Status 10 Connection Speed 11 Connection Information 11 Finding Your Hardware Address 11 Connection Details 12 Monitor Internet Connection 15 Test Connection Speed 16 Using Broadband Diagnostics 16 Viewing Statistics 17 Using Advanced Settings ...

Page 4: ...39 Adding an Application Profile 39 Allowing all Applications DMZplus 41 Viewing the Firewall Log 43 Configuring the Firewall Advanced 45 Enabling Advanced Security 45 Stealth Mode 46 Block Ping 47 Strict UDP Session Control 48 Allowing Inbound and Outbound Traffic 49 Disabling Attack Detection 49 Management and Diagnostic Console Accessing the MDC 52 Using the MDC 52 System Summary Page 54 Broadb...

Page 5: ...T Sessions 83 Firewall Advanced Settings Page 84 Enabling Security Features 85 Controlling Inbound and Outbound Traffic 85 Disabling Attack Detection 85 Enabling Full Logging 85 Voice Configure Server Page 86 Troubleshooting DSL Diagnostics Page 88 Analyzing General Information 88 Reviewing Training History 90 Reviewing Bitloading 92 Troubleshooting Event Log Page 93 Troubleshooting Network Tests ...

Page 6: ...Contents iv Advanced Traffic Shaping Page 112 Advanced Link Manager States Page 113 Advanced Detailed Log Page 116 Glossary Regulatory Information ...

Page 7: ...computers and peripherals Networking Technology Overview Ethernet Ethernet is a local area network LAN technology that transmits information between computers at speeds of 10 or 100 Mbps 2Wire gateways have either 1 or 4 Ethernet ports for directly connecting computers or devices If your home or office is wired for Ethernet you can use the Ethernet interface s on the gateway to create a broadband ...

Page 8: ...or higher Viewing Your System Summary The System Summary page provides general information and links to your system s most commonly used features To access the System Summary page Open a Web browser and access the gateway user interface by entering http 2wire gateway net Click the System tab to open the System Summary page Figure 1 System Summary Page ...

Page 9: ...ble POWER light states and their associated meanings If you have not set a system password the Set system password link displays If you have set a password the Change system password link displays You must enter the system password whenever you change system settings Note For additional information refer to Setting a System Password on page 6 Click the Privacy policy link to review the 2Wire priva...

Page 10: ...s of your broadband link connection and your system configuration To access the Broadband Link Summary page click the Broadband Link icon or the View summary link Launching the 2Wire Bandwidth Meter The Bandwidth Meter measures the maximum data throughput obtained from 2Wire s Web site to your system Because it tests the speed over the Internet your results may vary depending on Internet condition...

Page 11: ...etwork to manage the gateway when away from the home For additional information please refer to the Web Remote Access User Guide Firewall Monitor The 2Wire Firewall Monitor enhanced service extends the professional grade firewall capabilities of your 2Wire gateway by continuously assessing threats to your home network Firewall Monitor allows you to Automatically download updates to your firewall s...

Page 12: ...t your system password Open a Web browser and access the gateway user interface by entering http 2wire gateway net Click the System tab Click the System Password link in the System area of the Network at a Glance panel to open the Edit System Password page Figure 3 Edit System Password Page 1 In the Settings panel click the Enable checkbox 2 In the Enter New Password field enter your password 3 In...

Page 13: ...ur hint click the I still can t remember the password link The Reset System Password page opens Figure 4 Reset System Password Page To obtain access to your system 1 In the System Key field enter the 10 digit system key located on the bottom of your gateway 2 In the Enter New Password field enter a new system password In the Confirm New Password field re enter the system password 3 In the Enter Yo...

Page 14: ...em If your Time Zone is incorrectly set you can change it in the Edit Date and Time Settings page To change your time zone settings Open a Web browser and access the gateway user interface by entering http 2wire gateway net Click the System tab Click the Date and Time Settings link in the System area of the Network at a Glance panel to open the Edit Date and Time Settings page Figure 5 Edit Date a...

Page 15: ...a of the Network at a Glance panel to open the View System Details page Figure 6 View System Details Page The Restart the system link restarts your system Your network connections and your broadband connectivity will be briefly disrupted until your system restarts and broadband connectivity is re established with your broadband service provider The View available upgrades and options link accesses...

Page 16: ...y entering http 2Wire gateway net Click the Broadband Link tab Click the Summary link under the tab to open the View Broadband Link Summary page Figure 7 View Broadband Link Summary Page The Connection panel shows information about your gateway s connection to the Internet The elements displayed will vary depending on your gateway model and the type of broadband service you have Connection Status ...

Page 17: ...re it can communicate to the Internet Note This field displays the hardware address only if the gateway is connected to the Internet via PPPoE Key Code The activation code that tells your gateway how to connect to your service provider The key code is used during the installation process to customize the setup screens and settings for your broadband provider Finding Your Hardware Address If requir...

Page 18: ...e following table shows the information that may be displayed on the Broadband Link Details page Note The information displayed depends on the type of broadband service you have and your gateway model Item Description DSL Connection DSL Line Wire Pair The DSL signal can be transmitted on Line 1 inner pair or Line 2 outer pair During installation the gateway automati cally detects on which line the...

Page 19: ...mers who live close to their Central Office usually will have less sig nal loss and a low current attenuation The level is measured in decibels dBs Current Output Power The current DSL transmit power of your gateway The level is measured in decibels dBs DSLAM Vendor Information A DSLAM is the piece of equipment located in the Central Office CO that provides the DSL signal to your DSL line The Vend...

Page 20: ...cally the subnet mask has been set for you If you manually set your Internet address Static IP this is the information that was provided to you by your ISP and entered by you during gateway installation Default Gateway Part of the Internet address settings The default gateway is a device your 2Wire gateway communicates with directly to give you access to the Internet If you receive your Internet a...

Page 21: ...be necessary and may be left blank Domain The name that associates your gateway with your ISP on the broadband link This parameter may not be necessary and may be left blank If you receive your Internet address settings automatically the subnet mask has been set for you If you manually set your Internet address Static IP this is the information that was provided to you by your ISP and entered by y...

Page 22: ...to your computer and can be affected by many factors on the Internet it is not an accurate measurement of the service from your ISP Using Broadband Diagnostics Diagnostics displays an itemized list of your broadband connection s current status Technical support representatives use this information to help troubleshoot problems with your broadband connection To access the Broadband Link Diagnostics...

Page 23: ...re gateway net Click the Broadband Link tab Click the Statistics link under the tab to open the View Broadband Link Statistics page Figure 10 View Broadband Link Statistics Page The Transmit and Receive Data panel displays the following information Transmit The cumulative number of IP packets transmitted the cumulative number of IP payload bytes transmitted and the number and percentage transmitte...

Page 24: ...he number of DSL loss of framing failures since the 2Wire gate way was last restarted and the elapsed time since the last line search initialization DSL Loss of Signal Failures The number of DSL loss of signal failures since the 2Wire gateway was last restarted and the elapsed time since the last loss of sig nal failure DSL Loss of Power Failures The number of DSL loss of power indications from th...

Page 25: ...h DSL and networking technology To access the Broadband Link Advanced Settings page Open a Web browser and access the gateway user interface by entering http 2Wire gateway net Click the Broadband Link tab DSL Uncorrected Blocks The number of uncorrected DSL superframes that had data errors detected ISP Connection Establishment The number of times the ISP connection was established since the statis...

Page 26: ...hich DSL line to use The DSL and ATM panel allows you to select a DSL line and manually configure your ATM settings 1 From the DSL Line Selection drop down menu select Automatic Line 1 inner pair or Line 2 outer pair 2 In the ATM Circuit Identifier VPI and VCI fields enter the VPI and VCI you want the gateway to use to connect to your ISP 3 From the ATM Encapsulation drop down menu select Bridged ...

Page 27: ...n 1 to 10080 minutes the PPP session will time out if the gateway doesn t detect outbound traffic destined for the Internet in the specified time 6 Click SAVE Modifying the Hardware Address By default the gateway uses its built in hardware address The Hardware Address Override panel allows you to manually override the MAC address of the broadband connection which is sometimes required for cable mo...

Page 28: ...ick the Manually configure your DNS information radio button 2 In the Primary Server field enter the IP address of the primary DNS server that the gateway is to use for DNS name resolution 3 In the Secondary Server field enter the IP address of the secondary DNS server that the gateway is to use for DNS name resolution 4 In the Domain Name field enter the specific domain name to be used by the gat...

Page 29: ... Click the Home Network tab to open the View Network Summary page Figure 12 View Network Summary Page Understanding the Local Devices Panel The Local Devices panel shows you the name of the device how it is connected any special configuration information and provides links to other system features that you can set up for the device A device on your network is usually a computer either a personal c...

Page 30: ...our computer was manually configured with a static IP address the static IP address displays instead of the computer s name If you have not named the device but it still obtains its Internet address from the system the word Unknown displays You can change the name of the device so that it will display in the system user interface by clicking the Change name link If you have configured the firewall...

Page 31: ... on your network View device details Displays the technical networking details about the device If you are experiencing difficulties this information may be helpful to a technical support representative Understanding the Status at a Glance Panel The Status at a Glance panel shows you a list of network connection types the number of devices connected via each connection type and your wireless setti...

Page 32: ...Home Network Tab 26 Click the Wireless Settings link to open the Configure the Wireless Network page Figure 13 Configure the Wireless Network Page ...

Page 33: ...ryption key for the 2Wire gateway s wireless access point and configure that same key on each wireless client that will use your 2Wire gateway wireless network Note If encryption is enabled each wireless client must be configured with the encryption key defined on the system before it can operate on your wireless network You can customize the following wireless settings in the Wireless Security pa...

Page 34: ... configuration you can restore the wireless settings to factory defaults by clicking the RESTORE DEFAULTS button Configuring Advanced Settings The Edit Advanced Home Network Settings page displays the current IP settings in use by your system for your home network and allows you to configure your home network settings You should adjust these settings ONLY if you are very familiar with computer net...

Page 35: ... cause unpredictable results To set up a private network Open a Web browser and access the 2Wire gateway user interface by entering http 2Wire gateway net Click the Home Network tab Click the Advanced Settings link under the tab to open the Edit Advanced Home Network Settings page Figure 14 Advanced Home Network Settings Page ...

Page 36: ... the home network IP address range you must renew the DHCP lease on all devices on your home network and manually reconfigure all devices configured with static IP addresses If you are using the 2Wire Network Support Tool you can renew the DHCP lease by selecting Refresh Network Connection in the Network Support Tool menu Setting Up a Public Network The Public Network pane allows you to create a l...

Page 37: ...on with broadband service that provides a range of IP addresses Once enabled the bridge network IP addresses can be assigned to local computers To set up a bridge network 1 Check the Enable checkbox 2 In the Subnet Mask field enter the subnet mask this is typically provided by your service provider and defines how large your IP pool is 3 Click SAVE Showing a Device as Inactive To show a device as ...

Page 38: ...VoIP network Configuring the VoIP Phones To configure VoIP via the gateway user interface follow these steps 1 Access the gateway user interface by opening a web browser and entering http 2wire gateway net Click the Voice Network tab The View Voice Network page opens 2 Click Step 2 Set Up Phone Lines Click EDIT to change the settings ...

Page 39: ...ne Number To ensure that the settings cannot be changed in the Password field enter a password From the Ring Tone pull down menu select the tone you wish to associate with the phone To block the outgoing caller ID click the Anonymous checkbox Click SUBMIT 4 The Phone Settings page allows you to match each phone to a line To do so click EDIT ...

Page 40: ... a name to associate with the phone If you have more than one digital voice line in the Assign Number field select which phone line you wish to associate with this phone Click SUBMIT 6 Setup is complete Click DONE to return to the View Voice Network page ...

Page 41: ...to an external address maintained by the 2Wire gateway effectively hiding the existence of a home network to the Internet The 2Wire gateway then uses this external address to communicate with the Internet on behalf of devices connected to the local network Port Address Translation PAT A function provided by some routers which allows hosts on a LAN to communicate with the rest of a network such as ...

Page 42: ...uters on your network An access list shows the computers Devices on your network and the names of the Allowed Applications for each computer When you allow application traffic external users on the Internet can have limited access to your home network This access might be required to allow some programs such as game servers or instant messaging software to operate properly For example a remote gam...

Page 43: ...r panel shows a brief summary of the number of attacks that were blocked for the current day and week Click VIEW DETAILS to access the Monitor the Firewall page Hosting an Application When you host an application on your network for Internet users to access you must configure the 2Wire gateway firewall to pass through specific application data to a selected computer To host an application Open a W...

Page 44: ... that you wish to host the application 2 Click the Allow individual application s radio button 3 In the Applications panel select an application 4 Click the ADD button The application you selected now appears in the Hosted Applications pane 5 Click DONE To stop hosting an application 1 In the Hosted Applications panel select the application you wish to stop hosting 2 Click the REMOVE button 3 Clic...

Page 45: ...ion Profile list you can add an application using the Add Application Profile page An application profile configures your system s firewall to pass through application specific data This feature is typically used if the application for which you would like to pass through data to a given computer is new or has been recently updated to a new version To create a new application profile Open a Web br...

Page 46: ... a value for the amount of time that can pass before the application times out You can also leave the field blank in which case the system uses the default values 86 400 seconds for the TCP protocol 600 seconds for the UDP protocol d In the Map to Host Port field enter a value that will map the port range you established in step b to the local computer For example if you set the value to 4000 and ...

Page 47: ...llow individual application s option When in DMZplus mode the designated computer Shares your gateway s IP address Router Address Appears as if it is directly connected to the Internet Has all of the unassigned TCP and UDP ports opened and pointed to it Can receive unsolicited network traffic from the Internet Although the computer in DMZplus mode appears to Internet users as though it is directly...

Page 48: ...ay user interface by entering http 2Wire gateway net Click the Firewall tab Click the Firewall Settings link under the tab to open the Edit Firewall Settings page Figure 20 Edit Firewall Settings Page 1 From the Select a computer pull down menu select the computer to which you would like to have all data sent 2 Click Allow all applications DMZplus mode 3 Click DONE ...

Page 49: ... for this computer pane click Maximum protection 3 Click DONE 4 Access the computer that you selected in step 1 If the computer will continue to automatically obtain an IP address proceed to step 5 If the computer will have a static IP address configure it with a valid static IP address 5 Restart the computer Viewing the Firewall Log The 2Wire gateway keeps a log of all firewall related events tha...

Page 50: ...ply a threat to network security Low Occurs when the firewall detects a low level threat to the network such as an invalid IP header or invalid packet length Medium Occurs when a medium level threat is detected such as an invalid IP fragment offset High Occurs when an attack is launched against the network for example a SYN Flood Details Includes the following information The IP address from which...

Page 51: ...e 22 Edit Advanced Firewall Settings Page Note These features should be used only if you are thoroughly familiar with firewalls and networking Enabling Advanced Security Your 2Wire gateway firewall already provides a high level of security You can configure the firewall to provide advanced security features including stealth mode strict UDP or block pings ...

Page 52: ...ealth mode the 2Wire gateway firewall does not return any information in response to network queries that is it will appear to the hacker who is trying to access your network that your network does not exist This discourages hackers from further attempts at accessing your network because to them it will appear as though there is no active network to access To enable Stealth Mode Open a Web browser...

Page 53: ...r Hackers can use ping to launch an attack against your network because ping can determine the number form of the network s IP address for example 105 246 172 72 from the domain name for example www mynetwork com If you enable Block Ping your network will block all ping requests To block ping Open a Web browser and access the 2Wire gateway user interface by entering http 2Wire gateway net Click th...

Page 54: ... about the destination 3 tuple the 2Wire gateway will also use information about the source of the connection 5 tuple Note The ability to send traffic based on destination only is required by some applications Enabling this feature may not allow some on line applications to work properly To enable strict UDP session control Open a Web browser and access the 2Wire gateway user interface by entering...

Page 55: ...ontrol pane deselect the checkbox of the protocol you wish to block 2 Click SAVE Disabling Attack Detection By default the 2Wire gateway firewall rules block the attack types listed in the Attack Detection pane There are some applications and devices that require the use of specific data ports through the firewall The gateway allows users to open the necessary ports through the firewall using the ...

Page 56: ...s UDP and TCP port scans and drops the packet Invalid Source Destination IP address When enabled the firewall will verify IP addresses by checking for the following IP source address is broadcast or multicast drop packet TCP destination IP address is not unicast drop packet IP source and destination address are the same drop packet Invalid IP source received from private home network drop packet P...

Page 57: ...ick the Advanced Settings link under the tab to open the Edit Advanced Firewall Settings page Figure 23 Edit Advanced Firewall Settings Page 1 In the Attack Detection panel deselect the appropriate checkbox 2 Click SAVE ...

Page 58: ...nsole use the diagnostic and configuration tools and modify settings Note The MDC pages available are dependent on the 2Wire gateway software release The MDC pages shown in this chapter are for 2Wire gateways running software release 4 21 x If your gateway is running a software release earlier than 4 21 x some of these pages may not be available Accessing the MDC To access the MDC from your in hom...

Page 59: ...Internet via DSL Local Network Device List Wireless Configure Address Allocation Firewall Settings Detailed Information Advanced Settings Voice Configure Server Troubleshooting DSL Diagnostics Event Log Network Tests Upgrade History Resets Advanced Syslog Settings Provisioning Info Configure Time Services Configure Services Static Routes DNS Resolve Traffic Shaping Link Manager Detailed Log Group ...

Page 60: ...he Statistics page shows the transmit and receive packet count for Ethernet Wireless HomePNA and USB interfaces Firewall Pages Firewall pages allow you to access settings and detailed information for the gateway s firewall and to configure the firewall if necessary For example you can use the Firewall Settings page to access applications that are usually blocked by the firewall Troubleshooting Pag...

Page 61: ...ing pages Broadband Link Configuration Local Network Configuration Local Network Address Allocation Firewall Settings Firewall Detailed Information Firewall Advanced Settings Troubleshooting Configure Logs Troubleshooting Resets Advanced Syslog Settings Advanced Configure Time Services Advanced Configure Services Advanced Static Routes Advanced DNS Resolve Advanced Traffic Shaping The following se...

Page 62: ...uration and components Figure 24 MDC System Summary Page Depending on the service provider and the components installed the System Summary page includes the following information Item Description System Model 2Wire gateway model number for example 2700HGV Gateway Serial Number 2Wire gateway serial number MAC Address 2Wire gateway MAC address ...

Page 63: ...gateway software version Configuration Key Code The key code associated with the current provi sioning settings The value is Unprovisioned if the 2Wire gateway has not yet been provi sioned System Time The day month year and time or Retrieving date and time settings from Internet if not set Time Since Last Boot The time elapsed since the 2Wire gateway was last restarted Last ID Post The time elaps...

Page 64: ...ateway broadband connectivity related settings and reset the Broadband Link and ISP Connection Figure 25 MDC Broadband Link Summary Page The Broadband Link Summary page includes the following information Item Description Connection Information Broadband Connection Built in ADSL Modem or External Broadband Modem via Ethernet ...

Page 65: ... DSLAM vendor identification For G dmt or G lite protocol values are Country Vendor and Specific For ANSI T1 413 protocol values are ID Rev Revision and Std Standard ATM PVC Info The ATM VPI VCI ATM Encapsulation LLC or VCMux ISP Details Connection Type The method by which the 2Wire gateway connects to the ISP Direct_IP PPPoA or PPPoE For the HomePortal 1000 direct uses an RFC2684 formerly RFC 148...

Page 66: ...he IP address of the secondary DNS server that the 2Wire gateway is to use for DNS name resolution on the broadband link Host Name The 2Wire gateway host name This field is only present if the user configures the 2Wire gateway with a host name Domain Name The domain name associated with the 2Wire gateway on the broadband link MTU Maximum size of the packets sent from a computer to the network Spoo...

Page 67: ...ote To update the information displayed on this page click the browser s Refresh button Figure 26 MDC Broadband Link Statistics Page The Broadband Link Statistics page includes the following information Item Description DSL for DSL models only Current Rate The DSL downstream and upstream rate in kilobits Max Rate The maximum DSL downstream and upstream rate in kilo bits ...

Page 68: ...ream DSL transmit and receive power in dB ATM Transmit The cumulative number of cells transmitted and the num ber and percentage transmitted in error Receive The cumulative number of cells received and the number and percentage received in error IP Transmit The cumulative number of IP packets transmitted the cumulative number of IP payload bytes transmitted and the number and percentage transmitte...

Page 69: ...e 2Wire gateway connects to the Internet via ADSL The Broadband Link Detailed DSL Statistics page shows a set of cumulative DSL statistics associated with the 2Wire gateway Figure 27 MDC Broadband Link Detailed DSL Statistics Page Note To update the information displayed on this page click the browser s Refresh button ...

Page 70: ... waiting for response from ATU C since the 2Wire gateway was last restarted and the elapsed time since the last initialization timeout Loss of Framing Failures The number of DSL loss of framing failures since the 2Wire gateway was last restarted and the elapsed time since the last line search initialization Loss of Signal Failures The number of DSL loss of signal failures since the 2Wire gateway w...

Page 71: ...uperframes that had data errors detected during reception Uncorrectable Blocks The number of uncorrected DSL superframes that had data errors detected DSL Unavailable Seconds The number of unavailable seconds modem downtime since the 2Wire gateway was last restarted and the elapsed time since the last unavailable second ISP Connection Establishment The number of times the ISP connection was establ...

Page 72: ...you to modify specific broadband connection settings Figure 28 MDC Broadband Link Configuration Page Note Modifying the settings on this page can impact the ability of computers on the local network to access the broadband connection You should modify these settings ONLY if you are thoroughly familiar with networking ...

Page 73: ...ternet To modify Internet connection and authentication settings 1 Ensure that the Broadband connection Enabled radio button is selected default 2 From the Connection Type pull down menu select the connection type either Direct IP DHCP or Static PPPoE or PPPoA If you connect via PPPoE or PPPoA proceed to step 2 If you connect via Direct IP proceed to step 5 Direct IP connection does not require a ...

Page 74: ...ually configure Internet address settings radio button 2 In the IP Address field enter the IP address you want the 2Wire gateway to use 3 In the Subnet Mask field enter the subnet mask you want the 2Wire gateway to use 4 In the Default Gateway field enter the default gateway address you want the 2Wire gateway to use 5 Click the Submit button Modifying DNS Information By default the 2Wire gateway a...

Page 75: ...e Local Network Status page includes the following information Item Description IP Gateway The IP address allocated to the 2Wire gateway IP Network The IP address used by the network Subnet Mask The subnet mask allocated to the 2Wire gateway DHCP Range The range of IP addresses available on the network the number of addresses Allocated and the number of addresses Remaining ...

Page 76: ...et devices on the network Wireless 802 11 The number of Active and Inactive wireless devices on the network USB Specifies whether a USB device is present Active on the network If a USB device is not present the value is Inac tive Public Network Router Address Defines a separate network on the home side Subnet Mask The subnet mask allocated for public address Bridge Network Router Address Creates a...

Page 77: ...local network Figure 30 MDC Local Network Statistics Page The Local Network Statistics page includes the following information Item Description Ethernet Transmit The cumulative number of frames transmitted over the Ethernet home network interface the number of payload bytes transmitted and the number and percentage of transmitted packets in error ...

Page 78: ...load bytes transmitted and the number and percentage of transmitted packets in error Receive The cumulative number of frames received over the wire less home network interface the number of payload bytes received and the number and percentage of received pack ets in error USB Transmit The cumulative number of frames transmitted over the USB home network interface the number of payload bytes transm...

Page 79: ...evice List Page The following information is displayed Item Description Identity The name of the device If the device does not have a name associated with it the device IP address is displayed Type The type of connection used by the device to connect to the local network Ethernet USB or Wireless MAC Address The hardware address used by the device IP Address The IP address used by the device ...

Page 80: ...XX where XXX represents the last three digits of your 2Wire gateway serial number for example 2WIRE954 Channel The radio frequency band the access point uses for your wireless network the default is 6 Wireless adapter cards auto detect the channels to use If you are having problems with your wireless network it could be due to radio interference You can change the wireless channel to see if interf...

Page 81: ... button To create a custom encryption key click the Use custom encryption key radio button If you select Use custom encryption key you can define a 64 bit or 128 bit encryption key For 64 bit encryption in the Key field enter a 10 digit hexadecimal number For 128 bit encryption enter a 26 digit hexadecimal number A hexadecimal number uses the characters 0 9 a f or A F 3 Click the Submit button Add...

Page 82: ... Configuration page allows you to change the gateway s default local network settings You must click the Submit button for changes to take effect Figure 33 MDC Local Network Configuration Page Private Network Settings By default the gateway uses the 192 168 0 1 255 255 0 0 IP address range The Private Network pane allows you to change the IP address range used by the local network You can choose f...

Page 83: ...he local network is an extension of the broadband network and does not require any special routing Computers that are assigned Bridge Network IP addresses operate without the use of Network Address Translation NAT This feature is typically used in conjunction with broadband service that provides a range of IP addresses Once enabled the bridge network IP addresses can be assigned to local computers...

Page 84: ... IP address of each device on the gateway s local network and allows you to create DHCP mappings for each device Figure 34 MDC Local Network Address Allocation Page To change the DHCP mapping for a device 1 From the IP Address pull down menu next to the device select an address from any of the available networks 2 Click the Submit button Note If you change the home network IP address range you mus...

Page 85: ...the firewall to pass through specific application data to a selected computer Figure 35 MDC Firewall Settings Page Hosting an Application To host an application on the gateway s network for Internet users to access such as a Web server the firewall must be configured to allow users on the Internet to access it To host an application 1 From 1 Select a computer select a computer from the pull down m...

Page 86: ...list select the application profile name 2 Click the REMOVE button Note If an application does not appear in the Applications list the list may need updating If an update is available click the UPDATE APPLICATION LIST button Creating an Application Profile If the application that the user wishes to host is not included in the updated application list you may need to create an application profile A...

Page 87: ...ld enter the port or port range used by the application 5 In the Protocol Timeout seconds field enter the amount of time in seconds that the connection in the specified range should remain open when there is no data transfer In most cases the default value is appropriate 6 In the Map to Host Port field enter the value that provides the mapping offset to the local computer For example if this value...

Page 88: ...d computer Shares the gateway s IP address Appears as if it is directly connected to the Internet Has all of the unassigned TCP and UDP ports opened and pointed to it Can receive unsolicited network traffic from the Internet Note DMZplus can only be configured for one computer on the local network at a time To configure a computer on the user s network for DMZplus mode 1 Select the computer to whi...

Page 89: ...irewall Figure 37 MDC Firewall Detailed Information Page Pinholes A pinhole is a configuration setting in the firewall that allows access to specific services running on the network For example in order for users outside the network to access a specific application such as a game a pinhole must be opened on the gateway firewall to allow requests to the application The Pinholes pane shows the numbe...

Page 90: ...our organization must have the Remote Management feature enabled If the feature is not enabled an error message will display when you click the link to access this page The Firewall Advanced Settings page allows you to configure the gateway s firewall Figure 38 MDC Firewall Advanced Settings Page ...

Page 91: ...l automatically allows this type of traffic to pass through the firewall to the network Even if a particular protocol application type is allowed the firewall still checks and blocks all unsolicited traffic from the Internet unless the firewall is configured to allow the traffic through using an application profile Disabling Attack Detection By default the 2Wire gateway firewall rules block the at...

Page 92: ...e Configure Server Page Note This link is present only if the 2Wire gateway is VoIP enabled The Voice Configure Server page allows you to set up your VoIP server and is used primarily for test purposes Figure 39 MDC Voice Configure Server Page ...

Page 93: ...ng with the SIP proxy Use 11 digit DIDs allows the gateway to automatically append a 1 to the registration phone number Server IP Address Corresponds to the SIP proxy address Port Corresponds to the SIP proxy destination port Number of Lines Displays the number of lines allowed on the gateway End Point Domain Displays the IP domain of the SIP endpoint Register Expire Time Displays the default expi...

Page 94: ...nection or connection attempt These values are also listed in the last row of the Training History pane Item Description Value Comment DSLAM Lists information about the DSLAM including country DSLAM vendor and specifics DSL Line During line search the value will alternate between 1 and 2 The Searching for DSL sig nal comment appears until the ADSL protocol is con firmed with the DSLAM on the curre...

Page 95: ...n parts per million ppm The ideal value is zero 0 The maxi mum difference should be less than 150 ppm Ok or Suspicious hard ware frequency mismatch Final Rx Gain Indicates the current receive gain setting in dB Dependent on DSL line length Ok or Suspicious possi ble saturation Impulse Noise Comp Tones Indicates the number of com pensation tones on which impulse noise is detected For non interleave...

Page 96: ...n YY MM DD and HH MM SS for mat Line The line 1 or 2 on which the gateway is searching for a DSL signal Downstream Rate The net user data rate in kbps for the connection Max 1 Maximum rate achievable at the time of the initial connection based on the line quality specifically the uncapped rate Max 2 Latest estimate of maximum achievable rate adjusted for changing line conditions Max 3 Current or f...

Page 97: ...mples of the typical values that can be represented ERR_LOF_LIMIT Retrained due to loss of framing ERR_LOS_LIMIT Retrained due to loss of signal ERR_HI_BER_LIMIT Retrained due to excessive CRCs RESTART System deliberately restarted modem line search reprovisioning or 30 second timeout when waiting for DSL signal ERR_STATE_TIMEOUT Modem timed out during training for example the modem failed to dete...

Page 98: ...ewing Bitloading The Bitloading pane shows the bits loaded per tone for the upstream tones 6 to 31 and downstream tones 32 to 255 spectrum A single hex digit for each tone shows the numeric values 0 to F in addition to the bar graph depiction ...

Page 99: ...the pull down menu and then clicking the Filter button the screen capture depicted above has the system filter applied Following are descriptions of the logs Access Shows the current access log which registers all significant Content Screening and Internet Access Control events All Shows all logs that register a significant event access firewall fw alert system and wra Firewall Shows all detailed ...

Page 100: ... of the list Events generate an Informational INF or Warning WRN severity level Informational indicates events that are informational only Warning indicates an unexpected condition that does not affect the 2Wire gateway s ability to operate for example a network problem or the 2Wire gateway is not configured properly For events that involve the transfer of packets the following additional informat...

Page 101: ...he 2Wire gateway or 2Wire gateway connections Figure 42 MDC Troubleshooting Network Tests Page The Ping test allows you to ensure that the 2Wire gateway can send data packets to ping a remote host The Traceroute test traces the number of times a data packet sent from the 2Wire gateway is routed before it reaches its destination The DNS Query test finds the IP address of the domain name service ...

Page 102: ...to send The maximum packet size is 576 5 Check the Enable network name resolution checkbox This will ensure that the name of the host location is displayed along with the corresponding IP address 6 Click the Start button The results are displayed on the page as they occur and include round trip latency the aggregate number of packets sent received and lost and the minimum maximum and average round...

Page 103: ...der in which they occurred Figure 43 MDC Troubleshooting Upgrade History Page The Upgrade History page shows the following information Item Description Model number The 2Wire gateway model number Hardware version The current 2Wire gateway hardware version Software version The current 2Wire gateway software version Upgrade Log The initial software version and a record of the last 10 upgrades ...

Page 104: ...ociated with the 2Wire gateway network Figure 44 MDC Troubleshooting Resets Page The Clear button in the Local Network field clears all devices from the Local Network list Doing so will change the configuration settings and may affect 2Wire gateway operation because it removes all devices such as computers from your network The Reset button in the DSL Connection field retrains the 2Wre gateway s D...

Page 105: ...bleshooting page cannot be accessed until the 2Wire gateway completely restarts and the connection is reestablished The Reset button in the to Factory State field resets the 2Wire gateway to an unprovisioned default state Doing so will remove all your configuration settings and requires 2Wire gateway software reinstallation WARNING Resetting the 2Wire gateway to an unprovisioned default state will...

Page 106: ...C Advanced Syslog Settings Page To enable syslog and specify the location of a syslog server 1 Check the Enable Syslog checkbox 2 In the Server Location field enter the IP address of a UNIX or Linux computer running a syslog daemon 3 Optional In the Server Port field enter the outbound port number upon which the syslog server is located 4 To limit the number of log packets check the Enable Throttl...

Page 107: ...d Diagnostic Console 101 Advanced Provisioning Info Page The Advanced Provisioning Info page displays the parameters with which the 2Wire gateway was provisioned Figure 46 MDC Advanced Provisioning Information Page ...

Page 108: ... Advanced Link Manager States page The parameters are set by broadband provisioning UI Param Configuration Configuration parameters that affect the user interface and user interaction The parameters are set by broadband provisioning Server Set Configuration Configuration information defining how the gateway is connected to and interacts with backend provisioning Firewall Configuration Configuratio...

Page 109: ...hange system time and date settings Figure 47 MDC Advanced Configure Time Services Page During the 2Wire gateway setup process you specify the time zone in which you are located so that the time and date are automatically displayed in the 2Wire gateway user interface These time settings are displayed in the Current Time Settings panel which shows the current date time time zone and whether the tim...

Page 110: ...wn menu select the time zone The available time zones are Hawaii Alaska Pacific Mountain Arizona Central Eastern Indiana and Atlantic Canada 5 Check the Daylight Savings Time checkbox if you wish to automatically adjust for daylight savings time You can also specify the time servers from which you wish to obtain system time by entering the time server Internet address in the Time Servers fields Th...

Page 111: ... page The Advanced Configure Services page allows you to enable the 2Wire gateway to operate in bridged mode change the timeout settings for NAT enable notification messages enable the SIP ALG and change the upstream maximum transmission rate Figure 48 MDC Advanced Configure Services Page Routing By default the 2Wire gateway is configured in routed mode The Advanced Configure Services page allows ...

Page 112: ...disabled including firewall and stateful packet inspection DHCP NAT DNS PPP and remote management The gateway no longer functions as a gateway and is in effect a multi protocol Ethernet wireless and USB bridge Note When routing is disabled the gateway s local IP address is set to 172 16 0 1 16 Computers connected to the 2Wire gateway will retain the IP address assigned by the gateway s DHCP server...

Page 113: ...d enter an IP address between 172 16 1 1 to 172 16 1 32 In the Subnet mask field enter 255 255 0 0 In the Default gateway and Preferred DNS server fields enter 172 16 0 1 e Click OK f If required reboot the system for the changes to take effect 2 Attach the computer to the Local Network port of the 2Wire gateway 3 In the Web browser address bar enter 172 16 0 1 management 4 Click Configure Service...

Page 114: ...tification message that the gateway has lost broadband connectivity and cannot access the Internet check the Enable checkbox Enabling Missing DSL Filter Notification Note This field will display only if the CMS organization has the Missing DSL Filter Notification feature enabled To receive a notification message that the gateway has detected a missing DSL filter check the Enable checkbox Enabling ...

Page 115: ...ows you to manually configure static routes that specify the transmission path data must follow between devices on the gateway network Figure 49 MDC Advanced Static Routes Page To define a static route 1 In the Subnet IP field enter the IP address of the network to which you want to configure a static route 2 In the Subnet Mask field enter the subnet mask of the destination network 3 In the Gatewa...

Page 116: ...ent and Diagnostic Console 110 The Route List shows a list of static routes defined by the user For each user defined static route the following information is displayed Subnet IP Subnet Mask Gateway Interface ...

Page 117: ...s users to name network devices such as printers or Web servers so that they may be easily accessed by other users on the network Figure 50 MDC Advanced DNS Name Table Page To add entries to the Name table 1 In the DNS name field enter a name for the device 2 In the IP Address field enter the device s IP address 3 Click ADD 4 The Name table displays the name you defined for each device the device ...

Page 118: ...lows users to change the 2Wire gateway s maximum upstream connection rate Figure 51 MDC Advanced Traffic Shaping Page WARNING Modifying the gateway s configuration settings may impede or interrupt the user s broadband service or violate the service provider s service level agreement To change the gateway s upstream connection rate 1 Check the Enable Traffic Shaping checkbox 2 In the New Upstream R...

Page 119: ...re gateway interface stack and shows the internal state of the 2Wire gateway Figure 52 MDC Advanced Link Manager States Page The Link Manager States page is used to gather dynamic information on internal networking modules and is based on the runtime configuration of the 2Wire gateway The information cannot be used to configure the 2Wire gateway ...

Page 120: ...Manager States tree and includes the following Node Information Description Link status Up The link is functioning properly Climbing The link is attempting to establish a connection Down The link is not yet configured Error An error has occurred State changes The number of times the state of the link has changed since last reboot ...

Page 121: ...ty with the 2Wire gateway home0 Branch for the home network modules vlan0 Home network virtual LAN configuration module ipnet1 Home network IP configuration module vlanmon0 Home network virtual LAN monitor for activity ipbridge0 Home network IP bridge DMZ configuration module ipnet2 Home network public IP network configuration module vlan3 Home network voice virtual LAN module bband0 Branch for th...

Page 122: ...The Advanced Detailed Log page is a debug log facility modeled after syslog and provides advanced diagnostic capabilities Figure 53 MDC Advanced Detailed Log Page Note The Detailed Log retains a persistent across upgrades and system restarts record of gateway events ...

Page 123: ...amp designates that the timestamp occurred after system startup Module in which the state occurred for example netdev Description of the log entry When you click Insert Mark a placeholder is inserted into the code string to mark where the error was found The following table lists the filters that can be applied Filter Description All All log messages aaal5 ATM AAL5 encapsulation algaim AOL Instant...

Page 124: ... initd Initd daemon logs for application control ipsess IP firewall session jtag JTAG device kacct Kernel accounting kelog Kernel event log module kmem Memory kppp PPP kernel network module kpppoa PPPoA kernel network module kpppoe PPPoE kernel network module krtlock Thread locking kthread Thread led LED device lmd Link Manager daemon logs for module login Login application lwdp Lightweight data p...

Page 125: ...on reset Reset switch driver rpcd RPCD daemon logs for CMS interaction rtatm Routed ATM driver scc Voice SLIC drivers sip SIP sntpc Network time client stream Stream network core syslog Syslog daemon system System level ulib Configuration libraries usbd USB device usbhost USB host vlan Virtual LAN voh VoHPNA driver voiced Voice daemon voip Voice over IP vr Voice router vrsip Voice SIP module wave ...

Page 126: ...in Name System The DNS is the way that Internet domain names such as www 2wire com are located and translated into IP addresses DSLAM Digital Subscriber Line Access Multiplexer A device found in telephone company central offices that takes a number of DSL subscriber lines and concentrates them onto a single ATM line E Ethernet A type of local area network that operates over twisted wire and cable ...

Page 127: ...each packet in any transmission If the MTU is too large the packet may need to be retransmitted if it encounters a router that can t handle that large a packet Too small an MTU size means relatively more header overhead and more acknowledgements that have to be sent and handled Most computer operating systems provide a default MTU value that is suitable for most users In general Internet users sho...

Page 128: ...operation for example if there is a long pause between data transfer If this is the case lengthening the timeout may help PVC permanent virtual circuit A virtual circuit that is permanently available Used to establish connections between hosts that communicate frequently R Router The central switching device in a packet switched computer network that directs and controls the flow of data through t...

Page 129: ...l channel on the physical ATM link W Wireless Transmission of data over radio waves rather than wiring Wireless channel The 2Wire gateway supports up to 13 wireless channels based on country restrictions For example the United States and Canada support channels 1 to 11 Europe and Australia support channels 1 to 13 In an 802 1b or 802 11g wireless network data is transmitted at 2 5GHz Wireless node...

Page 130: ...nded that you start using channel 1 and expand to channel 6 and 11 when necessary as these three channels do not overlap Channel 3 2409 5 MHz 2434 5 MHz Channel 4 2414 5 MHz 2439 5 MHz Channel 5 2419 5 MHz 2444 5 MHz Channel 6 2424 5 MHz 2449 5 MHz Channel 7 2429 5 MHz 2454 5 MHz Channel 8 2434 5 MHz 2459 5 MHz Channel 9 2439 5 MHz 2464 5 MHz Channel 10 2444 5 MHz 2469 5 MHz Channel 11 2449 5 MHz ...

Page 131: ...nd television reception WARNING While this device is in operation a separation distance of at least 20 cm 8 inches must be maintained between the radiating antenna inside the ERU and the bodies of all persons exposed to the transmitter in order to meet the FCC RF exposure guidelines Making changes to the antenna or the device is not permitted Doing so may result in the installed system exceeding R...