SMC Networks EZ Connect SMC8014W-G, Install Manual

Page 1: ...Install Guide EZ Connect Wireless Cable Modem Gateway SMC8014W G ...

Page 2: ...ight to change specifications at any time without notice Copyright 2006 by SMC Networks Inc 38 Tesla Irvine California 92618 All rights reserved Trademarks Information furnished by SMC Networks Inc SMC is believed to be accurate and reliable However no responsibility is assumed by SMC for its use nor for any infringements of patents or other rights of third parties which may result from its use No...

Page 3: ...ring Windows 95 98 Me Configuring Windows 2000 Configuring Windows XP Configuring a Macintosh Computer CHAPTER 5 Configuring the EZ Connect Wireless Cable Modem Gateway Browser Configuration Disable Proxy Connection Accessing the EZ Connect Wireless Cable Modem Gateway Web Management CHAPTER 6 Navigating the Web based Administration Making Configuration Changes System WAN LAN Routing Wireless NAT ...

Page 4: ...ce 802 11g interoperable with multiple vendors Wireless WEP and WPA encryption Hide SSID and MAC Filtering DHCP for dynamic IP configuration and DNS for domain name mapping Firewall with Stateful Packet Inspection client privileges hacker prevention DoS and NAT Virtual Private Network VPN end point support using PPTP L2TP or IPSec VPN pass through support using PPTP L2TP or IPSec User definable ap...

Page 5: ...B Drivers If possible retain the carton and original packing materials in case there is a need to return the product Please register your product on SMC s web site at http www smc com System Requirements You must meet the following minimum requirements Provisioned Internet access from a cable operator that has approved the SMC8014W G A computer equipped with a wired or wireless network adapter wit...

Page 6: ...ers may vary dramatically from these upper limits LED Indicators The Gateway includes LED indicators on the front panel that simplify installation and network troubleshooting The Gateway includes LED indicators on the front panel that simplify installation and network troubleshooting LABEL LED COLOR ON FLASHING OFF Power Green Power is supplied to the Gateway N A Power is not supplied to the Gatew...

Page 7: ...nect your cable line to this port Rebooting and Restoring the EZ Connect Wireless Cable Modem Gateway The Reset button is located on the rear panel of the Gateway Use a paper clip or a pencil tip to push the Reset button Reboot If the Gateway is having problems connecting to the Internet simply hold down the reset button for less than 2 seconds then release Restore Factory Defaults If rebooting th...

Page 8: ...riteria points please contact your cable operator For general installation please follow the guidelines outlined below to best performance Keep the Gateway away from any heating devices Do not place the Gateway in a dusty or wet environment For optimum wireless performance install the Gateway away from other electronic devices such as Monitors TV 2 4GHz Cordless Phones These devices can hamper you...

Page 9: ...nnection 2 Connect the WAN Connect a coax cable to the CATV port on the back of the Gateway from a cable port located in your home When connecting to the CATV port use only manufactured coaxial patch cables with F type connectors at both ends for all connections Note If this modem was NOT installed by your cable provider ISP or is being used to replace another cable modem please contact your Cable...

Page 10: ...es dialog box click the Obtain an IP address automatically option see TCP IP dialog box to the right 6 Next click on the Gateway tab and verify the Gateway field is blank If there are IP addresses listed in the Gateway section highlight each one and click Remove until the section is empty 7 Click the OK button to close the TCP IP Properties window 8 On the Network Properties Window click the OK bu...

Page 11: ...Reboot your PC Configuring Windows XP The following instructions assume you are running Windows XP with the default interface If you are using the Classic interface where the icons and menus look like previous Windows versions please follow the instructions for Windows 2000 outlined above 1 Access your Network settings by clicking Start choose Control Panel select Network and Internet Connections ...

Page 12: ...d screen shots were created using Mac OS 10 2 Mac OS 7 x and above are all very similar but may not be identical to Mac OS 10 2 1 Pull down the Apple Menu Click System Preferences and select Network Make sure that 2 Built in Ethernet is selected in the Show field 3 On the TCP IP tab select Using DHCP in the Configure field 4 Close the TCP IP dialog box ...

Page 13: ... Disable Proxy Connection You will also need to verify that the HTTP Proxy feature of your web browser is disabled This is so that your web browser will be able to view the web based configuration pages The following steps are for Internet Explorer and for Netscape Determine which browser you use and follow the appropriate steps Internet Explorer 5 0 or above 1 Open Internet Explorer Click Tools a...

Page 14: ...t username and password and click the Login button to access the Gateway There are 2 default login accounts one for the User and one for the Installer Installer Login for use by cable operator only USERNAME mso PASSWORD msopassword User Login for use by subscriber USERNAME cusadmin PASSWORD password NOTE Usernames and Passwords are case sensitive 4 Once you have logged into the Gateway s web based...

Page 15: ...agement settings To access the System Settings configuration page on the Side Navigation bar click on System link Selecting the Disable ALL Commercial Gateway Functions sets the Gateway to operate as a bridging cable modem In this mode all LAN interfaces are enabled including Ethernet USB and Wireless but all Gateway functions are disabled including Firewall NAT DHCP Server URL Blocking and VPN en...

Page 16: ...ace press the Reset button on the rear panel holding it down for at least five seconds to restore the factory defaults From this section you can also configure the RADIUS TACACS and TACACS authentication Note only one form of authentication can be enabled at any one time ...

Page 17: ... addresses HTTP Remote Management The default setting for this is enabled on port 8080 To access the remote management web page you would access it at http xxx xxx xxx xxx 8080 where xxx xxx xxx xxx is your WAN IP listed on the status page If you change the port to another setting then simply change the information in the URL NOTE Do not set the remote management port to use a port that is already...

Page 18: ... access the web management login screen A combination of one or more IP address ranges and single addresses can be configured WAN From this section you can configure all the WAN Settings To access the WAN configuration page on the Side Navigation bar click on WAN link You can setup the SMC8014W G to support the Pubic LAN IP as the WAN IP by selecting the Use public LAN IP as the WAN IP checkbox Th...

Page 19: ... Domain Name Enable or Disable the integrated DHCP server Configure the DHCP Lease time for your DHCP clients The IP Address Pool range for DHCP clients The PPTP IP Address Pool for PPTP VPN clients To access the LAN configuration page on the Side Navigation bar click on LAN link LAN IP Use the LAN section to configure the LAN IP address for the Gateway and to enable the DHCP server for dynamic cl...

Page 20: ...CP Server Settings The Gateway s DHCP Server can be turned enabled disabled here Also the DHCP client Lease Time can be adjusted from the default One Week setting The Gateway functions as a DNS proxy by default DNS proxy can be disabled by configuring Primary and Secondary DNS values here which LAN DHCP clients will receive in their lease Private IP Address Pool The scope of LAN DHCP IP addresses ...

Page 21: ... on your network A static route setting will allow you to configure a different Gateway for a Specific Destination IP To access the Static Routes configuration page on the Side Navigation bar click on the WAN link and then select the Static Route link NOTE Users cannot add any static routes to a public network assigned by your cable operator Users can add other private networks that are located on...

Page 22: ...D RECEIVE The options are No authentication Simple Password MD5 The Simple Password option uses a clear text password Usually MD5 is preferred for security reason Please be aware that the CMTS s RIP setting must match with the CM s RIP setting 6 Authentication Key ID only for RIPv2 These two values are used with item 5 above If Simple Password or MD5 is chosen for authentication type they must mat...

Page 23: ...ettings These settings will need to be configured based on how your cable operator network is set up WIRELESS This section allows you to configure the Gateway s built in 54 Mbps 802 11g Access Point To setup the wireless connections you will need to do define the Service Set Identifier SSID Channel Encryption options and other optional settings To access the Wireless Settings page shown below on t...

Page 24: ...D or Service Set ID of your wireless network This should be set to the same value as the other wireless devices in your network NOTE The SSID is case sensitive and can consist of up to 32 alphanumeric characters Channel The radio channel through which the Gateway communicates to clients over the wireless network NOTE If you are not getting good wireless performance try another wireless channel bec...

Page 25: ...k on the Encryption link WEP Select WEP from the Encryption Type drop down menu Select the Automatic Open System or Shared Key from the WEP Authentication Type drop down menu You can choose between standard 64 bit or 128 bit encryption keys Below are the configuration options for 64 bit WEP A passphrase or a manual key can be used NOTE To enter a manual WEP key you will need to enter hexadecimal v...

Page 26: ... option to generate random dynamic keys NOTE If you are having a difficult time getting the wireless connection up after enabling WEP please confirm that you have configured the SAME WEP key on both the Gateway and Client card WPA PSK Select WPA PSK from the Encryption Type drop down menu Next enter a passphrase value between 8 and 63 characters in the WPA Passphrase field MAC Filtering The Gatewa...

Page 27: ...e public IP address Port Forwarding The Gateway supports port forwarding that enables customers to host servers on their LAN You can configure this feature to redirect the external service request to the appropriate internal server and port For example if you are running a WEB server you can configure all traffic on port 80 to be redirected to the IP address of the WEB server running on your netwo...

Page 28: ...ccess through the firewall to your LAN from the pull down menu 2 Enter in the LAN Server IP for the LAN PC that is running this service or application 3 You can also configure Remote IPs option to allow access to this specific port from the WAN side This can be configured for 3 different access types a Any IP Address Any choose this option to allow access from any public IP address b Single IP Add...

Page 29: ... this option to allow access from any public IP address b Single IP Address Single Address choose this option to only allow access from a single public IP address c IP Address Range Address Range choose the option to only allow a range of public IP addresses 5 Set the Start Public Port and End Public Port that this application will use on the WAN Internet side The Gateway will listen for incoming ...

Page 30: ...ewall Enable Disable To access the Security Settings configuration page on the Side Navigation bar click on Firewall link To enable this feature check the Enable Firewall Module checkbox Access Control The Access Control section allows the setting of two types of rules enable access to services on your public LAN network from the Internet or to block services on the private LAN from accessing the ...

Page 31: ... the Gateway will respond to PING requests to the WAN IP address By default this option is enabled For convenience each Access Control section includes 2 filtering options Predefined Filtering Customer Defined Filtering Predefined Filtering Access Rule 1 On the Side Navigation bar click on Firewall then select Access Control 2 Under the Predefined Section click on the Add button 3 On the Predefine...

Page 32: ... to block NOTE The Name is only for reference purposes 4 Then select the protocol type from the pull down menu that they would like to block The options are TCP UDP TCP UDP 5 Select the LAN IPs that you want this access rule to apply to You can choose to apply this rule to Any IP Address a Single IP Address or a Range of IP Addresses a Any IP Address Any choose this option to block all LAN clients...

Page 33: ...time To access the Special Application configuration page on the Side Navigation bar click on Firewall link and then click on the Special Application link To enable this option click the Enable Triggering checkbox To configure a Special Application Rule follow the steps outlined below 1 On the Side Navigation bar click on Firewall then select Special Application 2 Click on the Add button on the Sp...

Page 34: ...8 When your configuration is complete click the Apply button to save your changes and return to the main Special Application page URL Blocking This section allows you to control the content network This feature is good for both business and parents looking to control the content accessible from a web browser To access the URL Blocking configuration page on the Side Navigation bar click on Firewall...

Page 35: ...le Rule configuration page on the Side Navigation bar click on Firewall link and then click on the Schedule Rule link To enable this option click the Enable Schedule Function checkbox To configure Schedule Rules follow the steps outlined below 1 On the Side Navigation bar click on Firewall then select Schedule Rule 2 In the Week Day table check the Days that you want to apply URL Keyword Blocking ...

Page 36: ...ure the Email Alert feature 1 Enter in your SMTP Server Address this is also referred to as the outgoing mail server 2 Enter in the Sender s E mail Address this is the email address that is associated with the outgoing mail server account 3 Enter in your email User Name 4 Enter in your email Password NOTE If you don t have your SMTP or outgoing mail server information please contact your cable ope...

Page 37: ...t to send this to 7 Enter in the Recipient s Email Address as the email address you want to send the alert to 8 When complete click the Apply button to save your settings and return to the main Email Syslog Alert configuration page If you need to edit or delete an existing email account follow the steps below 1 Check the radio button next to the email entry 2 Click the Edit or Delete button To ena...

Page 38: ...access the DMZ configuration page on the Side Navigation bar click on Firewall link and then click on the DMZ link To enable this option click the Enable DMZ Host checkbox To configure a DMZ host Enter in the LAN IP Address of the PC on your network in the input fields TOOLS The Tools menu allows a user to Backup the current configuration Restore a previously saved configuration Restore factory se...

Page 39: ...e to a location on your network or local hard drive NOTE You can rename the file as need but you CANNOT change the file extension Locally Restore Settings from Configuration File The second Tools option is used to restore the Gateway settings from the file that you backed up using the Back Up tool To restore the Gateway settings from a configuration file follow the steps below 1 Click the Browse b...

Page 40: ...n file follow the steps below 1 Enter the TFTP Server Address 2 Enter the Gateway Config Filename 3 Click on the Backup button To restore the Gateway settings from a remotely stored configuration file follow the steps below 4 Enter the TFTP Server Address 5 Enter the Gateway Config Filename 6 Click on the Restore button Restore EZ Connect Wireless Cable Modem Gateway to Default Settings The third ...

Page 41: ...ot will be complete when the power LED stops blinking Diagnostics This section can be used to troubleshoot connection and setup issues You can do the following Trace Route enter in the IP Domain Name and click tracert to begin the trace from the Gateway Ping enter in the IP Domain Name and click the ping button to begin the ping from the Gateway Send Inspected Traffic to Log Server enter in the IP...

Page 42: ... VPN termination IPSec PPTP L2TP over IPSec To enable a VPN end point protocol deselect the appropriate option on the VPN settings page and click Apply By default all VPN end point options are disabled Create an IPSec VPN Tunnel To enable and configure an IPSec end point follow the steps below Ensure that each end point is assigned a different LAN IP Subnet 1 On the Side Navigation bar click on th...

Page 43: ...ways to add a LAN client to the VPN Access List Either select the radio button next to an Auto Learned CPE Device or manually enter the LAN clients MAC address in the Manually Added CPE Devices section then select Add 6 On the Side Navigation bar click on the IPsec Tunnel Configuration link NOTE There is a VPN Log on this page that displays VPN event messages 7 Click on the Add button to configure...

Page 44: ...nnel and the respective Gateway LAN IP address will populate the Intranet Address and Intranet Subnet Mask fields b Enter the Local ID which must match the Remote ID of the remote VPN end point c Enter the Remote Gateway ID which must match the Local ID of the remote VPN end point d Enter the Remote Gateway Address e Enter the Pre shared Key which must match the Pre shared Key value of the remote ...

Page 45: ...AH encryption method The options are MD5 SHA DES This option is only available when AH IPSec Operation is selected n Enter the Tunnel Type The options are Public Private o Enter the IPSec Life Duration value p Configure the remote VPN end point LAN network address es in the Tunnel Host Remote Configuration section Select either IP Subnet and enter the remote network address IP Address e g 10 0 0 0...

Page 46: ...ill be assigned IP addresses from the PPTP IP Address Pool on the LAN Settings page for their PPTP WAN interface 1 On the Side Navigation bar click on the VPN link 2 On the VPN settings page deselect the Disable PPTP VPN Functions option 3 Click the Apply button to save your changes 4 On the Side Navigation bar click on the PPTP L2TP Configuration link 5 Under the PPTP L2TP User Table click the Ad...

Page 47: ... follow the steps below 1 First follow the steps to setup an IPSec tunnel in the Creating an IPSec VPN Tunnel section above 2 On the VPN settings page deselect the Disable L2TP over IPsec VPN Functions option and ensure the Disable IPsec VPN Functions option is also deselected 3 Click the Apply button to save your changes 4 On the Side Navigation bar click on the PPTP L2TP Configuration link 5 Und...

Page 48: ...oftware version and hardware versions and uptime statistics The Network Log shows both firewall and network activity The LAN Client Log shows the clients connected to the Gateway and the type of connection Ethernet or Wireless This also shows the IP address assigned to the client and the MAC Address of the client s network adapter ...

Page 49: ...mation about your connection and cable system The Cable Status page shows the users the initialization process the SMC8014W G has been through and also includes the information about the downstream channel and the upstream channel the modem is connected on ...

Page 50: ...net remote management is not enabled by default To enable first log into the Gateway via the HTTP web admin page and go to System Remote Management and select the check box next to Telnet Port For example open a command prompt and type telnet xxx xxx xxx xxx 2323 Enter where xxx xxx xxx xxx is your WAN IP listed on the status page Enter the same user and password as used for the GUI HTTP Commands ...

Page 51: ...r to the information displayed IP Address 192 168 0 X x is number between 100 and 199 Subnet 255 255 255 0 Gateway 192 168 0 1 If you have an IP address that starts with 169 254 XXX XXX then see section A 2 If you have another IP address configured see section A 3 B 2 I am getting an IP Address that starts with 169 254 XXX XXX If you are getting this IP Address then you need to check that you are ...

Page 52: ... 2 Type ipconfig release without the quotes 3 Then type ipconfig renew without the quotes Once you are able to get a valid IP address from the Gateway you can now access the web based Administration pages If you still are not getting an IP address from the Gateway please reset the hardware as outlined in Chapter 2 and follow the steps outlined in this appendix again Note all configured settings wi...

Page 53: ...he OK button Windows 2000 XP users type cmd and click the OK button 3 At the prompt type ping 10 1 10 1 After you click enter to execute the PING command you will get some information back below is an outline of the possible return messages Good Connection Bad Connection There may be something wrong in your installation procedure Check the following items in sequence 1 Is the Ethernet cable correc...

Page 54: ...e SYMPTOM Cable LED is Off or Flashing ACTION Power Cycle the Gateway Unplug the Gateway wait 5 seconds plug it back into power Confirm your cable operator is not having network issues and the network is up and running If you cannot isolate the problem contact your cable operator for assistance SYMPTOM Wireless LED is Off ACTION Check to insure the wireless card in the back panel is firmly plugged...

Page 55: ...to the Wireless section of CHAPTER 6 If Wireless MAC Filtering is enabled Trusted PCs only ensure that the wireless computer s MAC Address has been added to the Wireless Access List Contact your cable operator for assistance if you do not have these options available in your login SYMPTOM My VPN VoIP multimedia or other application is not working ACTION Configure a Special Application rule as desc...

Page 56: ...nt bridging DHCP Client and Server DNS Relay ICMP FTP TFTP and Telnet Security Password protected configuration access Stateful Packet Inspection SPI Firewall Network Address Translation NAT Application Level Gateways ALG WPA and WEP encryption Wireless MAC filtering Disable SSID Broadcast Intrusion Detection logging Denial of Service DoS prevention Email Alerts Management Browser based management...

Page 57: ...in this manual may cause harmful interference to radio communications Operation of this equipment in a residential area is likely to cause interference in which case the user at his own expense will be required to take whatever measures are necessary to correct the interference CE Declaration of Conformity This equipment complies with the requirements relating to electromagnetic compatibility EN 5...

Page 58: ...m U S A and Canada 24 hours a day 7 days a week 800 SMC 4 YOU 949 679 8000 Fax 949 679 1481 From Europe 8 00 AM 5 30 PM UK Time 44 0 118 974 8700 Fax 44 0 118 974 8701 INTERNET E mail addresses techsupport smc com european techsupport smc europe com Driver updates http www smc com index cfm action tech_support_drivers_downloads World Wide Web http www smc com http www smc europe com ...

Page 59: ......

Page 60: ...SMC8014W G SMC Networks Inc 38 Tesla Irvine CA 92618 Rev 1 0 4 01 05 TWC ...