User manual 2WIRE GATEWAY

2Wire Gateway User Guide Notice to Users ©2007 2Wire, Inc. All rights reserved. This manual in whole or in part, may not be reproduced, translated, or reduced to any machinereadable form without prior written approval. 2WIRE PROVIDES NO WARRANTY WITH REGARD TO THIS MANUAL, THE SOFTWARE, OR OTHER INFORMATION CONTAINED HEREIN AND HEREBY EXPRESSLY DISCLAIMS ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR ANY PARTICULAR PURPOSE WITH REGARD TO THIS MANUAL, THE SOFTWARE, OR SUCH OTHER INFORMATION, IN NO EVENT SHALL 2WIRE, INC. BE LIABLE FOR ANY INCIDENTAL, CONSEQUENTIAL, OR SPECIAL DAMAGES, WHETHER BASED ON TORT, CONTRACT, OR OTHERWISE, ARISING OUT OF OR IN CONNECTION WITH THIS MANUAL, THE SOFTWARE, OR OTHER INFORMATION CONTAINED HEREIN OR THE USE THEREOF. 2Wire, Inc. reserves the right to make any modification to this manual or the information contained herein at any time without notice. The software described herein is governed by the terms of a separate user license agreement. Updates and additions to software may require an additional charge. Subscriptions to online service providers may require a fee and credit card information. Financial services may require prior arrangements with participating financial institutions. 2Wire, the 2Wire logo, and HomePortal are registered trademarks, and HyperG, Greenlight, FullPass, and GuestPass are trademarks of 2Wire, Inc. All other trademarks are trademarks of their respective owners. 5100-000326-000 Rev C 08/2007 Contents Introduction Networking Technology Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 System Tab Viewing Your System Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 Network at a Glance Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 System Area of the Network at a Glance Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Broadband Link Area of the Network at a Glance Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Home Network Area of the Network at a Glance Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Enabling Enhanced Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Web Remote Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Firewall Monitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Parental Controls . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Setting a System Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 Resetting the System Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Changing Your Time Zone Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 Viewing System Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Broadband Link Tab Viewing Your Broadband Link Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 Connection Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 Connection Speed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Connection Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Finding Your Hardware Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Connection Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 Monitor Internet Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16 Test Connection Speed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16 Using Broadband Diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16 Viewing Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 Using Advanced Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20 Modifying DSL and ATM Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 Modifying Broadband Connection Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22 Modifying the Hardware Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22 Enabling Hostname Override . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22 Modifying the Broadband IP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 Modifying the Broadband DNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 Home Network Tab Viewing Your Home Network Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 Understanding the Local Devices Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 Understanding the Status at a Glance Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 Monitoring Your Wireless Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 Customizing Security Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 Configuring MAC Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 Configuring Additional Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 Configuring Advanced Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 1 Contents Setting up a Private Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 Setting Up a Public Routed Subinterface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 Setting Up a Public Proxied Subnet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 Selecting a Default DHCP Pool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 Showing a Device as Inactive . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 VoIP Network Tab Configuring the VoIP Phones . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 Firewall Tab Firewall Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37 Viewing Your Firewall Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 Hosting an Application . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Updating the Application Profile List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 Adding an Application Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 Allowing all Applications (DMZplus) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44 Viewing the Firewall Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46 Configuring the Firewall (Advanced) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48 Enabling Advanced Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49 Stealth Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49 Block Ping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51 Strict UDP Session Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52 Allowing Inbound and Outbound Traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 Disabling Attack Detection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 Management and Diagnostic Console Accessing the MDC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56 Using the MDC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56 System Summary Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58 Broadband Link Pages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58 Local Network Pages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58 Firewall Pages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58 Voice Pages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58 Troubleshooting Pages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58 Advanced Pages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58 Remote Management Feature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 System Summary Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60 Broadband Link - Summary Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 Broadband Link - Statistics Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65 Broadband Link - Detailed DSL Statistics Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67 Broadband Link - Configuration Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70 Modifying DSL and ATM Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71 Modifying Internet Connection and Authentication Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . 71 Modifying Hardware Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72 Modifying Internet Address Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72 Modifying DNS Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72 Local Network - Status Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73 Local Network - Statistics Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75 Local Network - Device List Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77 2 Contents Local Network - Wireless Settings Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78 Customizing Security Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79 Additional Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79 Local Network - Configuration Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80 Private Network Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80 Public Routed Subinterface Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81 Public Proxied Subnet Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81 Display Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81 Enable Router Behind Router Alert . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81 Firewall - Settings Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82 Hosting an Application . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83 Creating an Application Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83 Allowing all applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85 Firewall - Detailed Information Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86 Pinholes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86 NAT Sessions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86 Firewall - Advanced Settings Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87 Enabling Security Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88 Controlling Inbound and Outbound Traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88 Disabling Attack Detection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88 Enabling Full Logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88 Voice Server - Summary Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89 Voice - Configure Server Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90 Voice - Associate Server Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92 Troubleshooting - DSL Diagnostics Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93 Analyzing General Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94 Reviewing Training History . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95 Reviewing Bitloading . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97 Troubleshooting - Event Log Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98 Troubleshooting - Network Tests Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100 Troubleshooting - Upgrade History Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102 Troubleshooting - Resets Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103 Advanced - Syslog Settings Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105 Advanced - Provisioning Info Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106 Advanced - Configure Time Services Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108 Advanced - Configure Services Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110 Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110 Changing Timeout Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113 Enabling Broadband Status Notification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113 Enabling Missing DSL Filter Notification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113 Enabling SIP Application Layer Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113 Changing the Upstream MTU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113 Advanced - Static Routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115 Advanced - DNS Resolve Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117 Advanced - Traffic Shaping Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118 Advanced - Link Manager States Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119 Advanced - Detailed Log Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122 Glossary 3 Introduction The 2Wire gateway allows you to create a network with your computers and peripheral devices. Following are just a few of the benefits derived from using the 2Wire gateway to network your home or office. High performance integrated modem. 2Wire's technology improves DSL1 performance, especially for homes further away from the local exchange. It also minimizes common interference found when other devices (such as dimmer switches or fluorescent lighting) are in contact with the DSL line. Super-fast router. The 2Wire gateway's router provides the fastest data transfer speeds available between your network and the Internet. The high-performance router distributes data seamlessly to all of the computers on your network, without a dramatic loss of performance or speed. Professional-grade firewall. The 2Wire gateway firewall includes both standard NAT/PAT security and Stateful Packet Inspection to defend against Denial of Service Internet attacks. Flexible networking. The 2Wire gateway includes a variety of home networking technologies in one box: Ethernet, direct USB, and HyperG wireless2. Use any or all of the following technologies to create a network with your computers and peripherals. Networking Technology Overview Ethernet. Ethernet is a local area network (LAN) technology that transmits information between computers at speeds of 10 or 100 Mbps. 2Wire gateways have either 1 or 4 Ethernet ports for directly connecting computers or devices. If your home or office is wired for Ethernet, you can use the Ethernet interface(s) on the gateway to create a broadband network. USB. The 2Wire gateway's USB 1.1 port allows you to directly connect a computer or other network-ready device. Wireless. The 2Wire gateway includes an integrated wireless access point, which allows users to roam wirelessly throughout the home or office. 2Wire's high-powered wireless technology virtually eliminates wireless "coldspots" in the home. The 2Wire gateway's high power 400mW transmitter ensures that users benefit from increased wireless bandwidth throughout the coverage area. In addition, the 2Wire gateway employs a special triple antenna design. The third antenna is used only for transmitting packets, thus mitigating the power loss associated with switching the antenna use back and forth between transmit and receive. This results in greater access point sensitivity, as antenna placement can be better optimized with a dedicated set of receive-only antennas. 1. The 200 series gateways connect via Ethernet. 2. Some interfaces are not available on specific models. 1 System Tab This chapter describes the 2Wire gateway System features. Note: 2Wire recommends that you use Internet Explorer 5.5 (or higher) or Netscape 6 (or higher). Viewing Your System Summary The System Summary page provides general information and links to your system's most commonly used features. To access the System Summary page: · · Open a Web browser and access the gateway user interface by entering http://gateway.2wire.net. Click the System tab to open the System Summary page. Figure 1. System Summary Page 2 System Tab Network at a Glance Panel The Network at a Glance panel provides a summary of the System, Broadband Link, and Home Network states of your gateway. System Area Broadband Link Area Home Network Area Figure 2. Network at a Glance Panel System Area of the Network at a Glance Panel The System area of the Network at a Glance panel displays your 2Wire gateway model name, the version of gateway software that you are using, and the status of your gateway password. The diamond symbol in this area indicates the gateway's POWER light status and corresponds to the Power light on the front of your gateway. The following table shows a list of possible POWER light states and their associated meanings: Power Light Off Blinking Green Solid Green Blinking Orange Solid Red Condition Power is not being supplied to the system. The power supply is not plugged in correctly, or the power adapter has malfunctioned. The system is performing a self test. Power is on. The gateway is undergoing a software upgrade. System error. Contact Technical Support. If you have not set a system password, the Set system password link displays. If you have set a password, the Change system password link displays. You must enter the system password whenever you change system settings. Note: For additional information, refer to "Setting a System Password" on page 6. 3 System Tab Click the Privacy policy link to review the 2Wire privacy policy. Broadband Link Area of the Network at a Glance Panel The Broadband Link area of the Network at a Glance panel displays the overall status of your gateway's physical connectivity. The diamond symbol in this area indicates the overall status of the broadband link and corresponds to the Internet light on the front of your gateway. The following table shows a list of possible BROADBAND LINK light states and their associated meanings: Broadband Link Light Off Condition The gateway has been unable to detect a DSL signal. DSL signal detected; the gateway is attempting to train. The gateway is fully connected to your broadband service(s). Solid Green Connection Speed displays the broadband speed for which DSL is configured by your ISP Both the Incoming . (or Downstream -- from your service provider to your system) and Outgoing (or Upstream -- from your system to your service provider) connection rates are shown. The actual throughput of your Internet connection rate (such as downloading a file from a Web site) will be somewhat less, because of the overhead required to send information over the Internet. Accessing the Broadband Link Summary Page The Broadband Link Summary page provides general information about the current status of your broadband link connection and your system configuration. To access the Broadband Link Summary page, click the Broadband Link icon or the View summary link. Launching the 2Wire Bandwidth Meter The Bandwidth Meter measures the maximum data throughput obtained from 2Wire's Web site to your system. Because it tests the speed over the Internet, your results may vary, depending on Internet conditions. To launch the 2Wire Bandwidth Meter, click the Test connection speed link. Home Network Area of the Network at a Glance Panel The Home Network area of the Network at a Glance panel displays your system's LOCAL NETWORK light status and a list of the devices currently connected to your local network. The diamond symbol in this area indicates the overall status of the network and corresponds to the Ethernet, USB, or Wireless light on the front of your gateway. Ethernet, USB, or Wireless Light Off Solid Green Condition The gateway is powered off or booting up. Device(s) connected via Ethernet, USB, or Wireless. 4 System Tab Accessing the Home Network Summary Page The Home Network Summary page displays information about the devices installed on your network. To access the Home Network Summary page, click the View the home network link. Enabling Enhanced Services 2Wire provides a suite of enhanced services: Web Remote Access, Firewall Monitor, and Parental Controls. If your service provider offers these enhanced services, links to set them up are available on the gateway Home page. Following is a brief description of these services. Web Remote Access The Web Remote Access enhanced service allows you to access your home computer files from remote locations using any standard Web browser. Web Remote Access authenticates and encrypts access between the Web browser and the 2Wire gateway, enabling you to securely access and download important files or manage other enhanced services such as Parental Controls or Firewall Monitor. You can optionally define a unique Web Domain Name during setup (for example, http:// myname.accessmyhome.net), making it easy for users that are allowed to access the home network to manage the gateway when away from the home. For additional information, please refer to the Web Remote Access User Guide. Firewall Monitor The 2Wire Firewall Monitor enhanced service extends the professional-grade firewall capabilities of your 2Wire gateway by continuously assessing threats to your home network. Firewall Monitor allows you to: · · · Automatically download updates to your firewall software to protect against new threats. Receive on-screen notification to alert you of network attacks. Review details about attacks blocked and the source of the attacks. For additional information, please refer to the Firewall Monitor User Guide. Parental Controls The 2Wire Parental Controls enhanced service offers two features that allow parents to maintain control over what their children can access on the Internet, and how often: Content Screening and Internet Access Controls. Content Screening allows you to protect your children from Websites with questionable content. You control what sites or types of sites your child can and cannot access. Internet Access Control gives you power to decide when your child can use the Internet and allows you to restrict Internet access by day of week and time of day. For additional information, please refer to the Parental Controls User Guide. 5 System Tab Setting a System Password Setting a system password protects your gateway settings from being modified or changed by someone who has not been given permission to do so. After setting a system password, you will be required to enter it whenever you attempt to access a gateway configuration page -- for example, if you try to change the gateway's broadband connection settings or upgrade the gateway software. If a password has not been set, a reminder notice is displayed when you attempt to access pages where settings can be changed. To set your system password: · · · Open a Web browser and access the gateway user interface by entering http://gateway.2wire.net. Click the System tab. Click the System Password link in the System area of the Network at a Glance panel to open the Edit System Password page. Figure 3. Edit System Password Page 1. 2. 3. In the Settings panel, click the Enable checkbox. In the Enter New Password field, enter your password. In the Confirm New Password field, re-enter your password. 6 System Tab 4. Optional: In the Enter Your Hint field, enter a hint. A hint is a word, phrase, or question that reminds you what the password is. There is an I forgot the password link on the password entry page. When you click this link, it shows you your hint and allows you to enter your password. Click SAVE. 5. To disable password protection, deselect the Enable checkbox and click SAVE. To safeguard your network against unauthorized users, it is also a good practice to periodically change your password. Resetting the System Password If you forget your password and still cannot remember it after seeing your hint, click the I still can't remember the password link. The Reset System Password page opens. Figure 4. Reset System Password Page 7 System Tab To obtain access to your system: 1. 2. In the System Key field enter the 10-digit system key located on the bottom of your gateway. In the Enter New Password field, enter a new system password. In the Confirm New Password field, reenter the system password. In the Enter Your Hint field, enter an appropriate hint as described under "Setting a System Password" on page 6. Click Submit. 3. 4. Changing Your Time Zone Settings The 2Wire gateway sets the time automatically using time servers on the Internet. It retrieves date/time information in Greenwich Mean Time (GMT). Your local time is set using the Time Zone setting you configured when you set up your system. If your Time Zone is incorrectly set, you can change it in the Edit Date and Time Settings page. To change your time zone settings: · · · Open a Web browser and access the gateway user interface by entering http://gateway.2wire.net. Click the System tab. Click the Date and Time Settings link in the System area of the Network at a Glance panel to open the Edit Date and Time Settings page. Figure 5. Edit Date and Time Settings Page 1. 2. From the drop-down menu, select the time zone. Click SAVE. 8 System Tab Viewing System Details The System Details page provides information about your gateway, any enhanced services you may have, and provides a link that you can use to restart your system. To view the System Details page: · · · Open a Web browser and access the gateway user interface by entering http://gateway.2wire.net. Click the System tab. Click the View details link in the System area of the Network at a Glance panel to open the View System Details page. Figure 6. View System Details Page The Restart the system link restarts your system. Your network connections and your broadband connectivity will be briefly disrupted until your system restarts and broadband connectivity is re-established with your broadband service provider. The View available upgrades and options link accesses a page that displays available software upgrades or enhanced services. If your gateway is running the latest software or enhanced services are not available, the following message displays. 9 Broadband Link Tab This chapter describes the 2Wire gateway Broadband Link features, and provides detailed instructions on how to customize your broadband settings. Viewing Your Broadband Link Summary The Broadband Link Summary page provides general information about the current status of your broadband link connection and your system configuration. To access your Broadband Link Summary: · · · Open a Web browser and access the gateway user interface by entering http://gateway.2wire.net. Click the Broadband Link tab. Click the Summary link under the tab to open the View Broadband Link Summary page. Figure 7. View Broadband Link Summary Page The Connection panel shows information about your gateway's connection to the Internet. The elements displayed will vary, depending on your gateway model and the type of broadband service you have. Connection Status There are two ways you can check the current status of your gateway's broadband connection: you can use the DSL and Internet indicator lights on the front of your gateway, or, if your computer is connected to the network, you can view the user interface. 10 Broadband Link Tab Connection Speed Connection Speed shows the incoming and outgoing data rates of your DSL connection, measured in kilobits per second (Kbps). Incoming is the speed of data flowing from the Internet to your network; Outgoing is the speed of data flowing from your network to the Internet. Connection Information Connection Information shows the following basic system configuration information: · Internet Address. The broadband IP address assigned by your service provider to your gateway so that it can communicate on the Internet. This address is assigned to you by your Internet Service Provider for all communication on the Internet, and can either be Static (permanently assigned and manually entered) or Dynamic (automatically assigned and configured), depending on your subscribed service type. Hardware Address. (Also known as the MAC address, physical address or, if you are a cable customer, the C number.) When your gateway is connected to the broadband network, an association is made between its unique hardware address and its Internet address before it can communicate to the Internet. Note: This field displays the hardware address only if the gateway is connected to the Internet via PPPoE. · Key Code. The activation code that tells your gateway how to connect to your service provider. The key code is used during the installation process to customize the setup screens and settings for your broadband provider. · Finding Your Hardware Address If required to find your Hardware (MAC) address, refer to the following table and follow the instructions for your operating system. Windows OS 1. 2. 3. Macintosh 8.x & 9.x 1. 2. 3. 4. Macintosh OS X 1. 2. Click the Start menu. Click Run. Enter "cmd" in the entry field. Click OK. At the C:\> prompt, enter "ipconfig/all". Locate the Physical address (for example, 01-24-H5-18-B3-00). To close the window, enter "exit" at the C:\> prompt. Click the Apple icon. Select Control Panels. Select TCP/IP . Click the Apple icon. Select System Preferences. 3. Click the Network icon. Click the TCP/IP tab. From the Configure pulldown menu, select Built-in Ethernet. Your MAC address appears in the lower-left corner as the Ethernet Address. 4. 5. From the Configure pulldown menu, select Built-in Ethernet. 4. 5. 5. 6. 7. From the File menu, select Get Info. Your MAC address appears as either the Hardware Address or the Ethernet Address. 11 Broadband Link Tab Connection Details The View connection details link accesses the Broadband Link Details page, which displays technical information about your broadband connection. Technical support representatives use this information to help troubleshoot problems with your broadband connection. Figure 8. View Broadband Link Details Page The following table shows the information that may be displayed on the Broadband Link Details page. Note: The information displayed depends on the type of broadband service you have and your gateway model. 12 Broadband Link Tab Item DSL Connection DSL Line (Wire Pair) Description The DSL signal can be transmitted on Line 1 (inner pair) or Line 2 (outer pair). During installation, the gateway automatically detects on which line the DSL signal is being transmitted. Displays which DSL protocol is being used to communicate between your system and your service provider. The speed at which data comes over your broadband connection from the Internet to your network, measured in kilobits per second (kbps). The speed at which data goes over your broadband connection from your network to the Internet, measured in kilobits per second (kbps). The setting in this field is determined by your ISP's DSLAM equipment. Indicates how much the noise on the DSL line can increase before it begins to affect the DSL signal. As the noise on the DSL line increases, the margin will approach zero. If the noise exceeds the current noise margin, the DSL signal will be lost. The level is measured in decibels (dBs). Represents the decrease in signal strength between origination of the DSL (Central Office) and your gateway. Customers who live close to their Central Office usually will have less signal loss and a low current attenuation. The level is measured in decibels (dBs). The current DSL transmit power of your gateway. The level is measured in decibels (dBs). A DSLAM is the piece of equipment located in the Central Office (CO) that provides the DSL signal to your DSL line. The Vendor Information identifies information about the configuration of this equipment. Displays the pair of numbers that uniquely identifies the ATM virtual circuit between the system and the provider of your DSL service. Protocol Downstream Rate Upstream Rate Channel Current Noise Margin Current Attenuation Current Output Power DSLAM Vendor Information PVC Info Internet Connection Details Connection Type Identifies the method by which the gateway connects to the Internet Service Provider (ISP): PPPoE, PPPoA, or Direct. 13 Broadband Link Tab Item Username Description The name used to connect with your Internet Service Provider (ISP). Your username was either assigned to you or configured by you during the install process. The correct username is required to successfully connect to the Internet. A number that is assigned to a computer so that it can communicate on a network and on the Internet. This address is assigned to you by your Internet Service Provider for all communication on the Internet, and can be either Static (permanently assigned and manually entered) or Dynamic (automatically assigned and configured). The typical configuration is for your ISP to automatically assign and configure an Internet address (Dynamic) when your system connects to the Internet. Businesses or power users may use a static address enabling them to run advanced services such as Internet servers and video conferencing. Static addresses typically cost more because they must be leased from the ISP . If you receive your Internet address settings automatically, the subnet mask has been set for you. If you manually set your Internet address (Static IP), this is the information that was provided to you by your ISP and entered by you during gateway installation. Part of the Internet address settings and used in conjunction with your Internet address. If you receive your Internet address settings automatically, the subnet mask has been set for you. If you manually set your Internet address (Static IP), this is the information that was provided to you by your ISP and entered by you during gateway installation. Part of the Internet address settings. The default gateway is a device your 2Wire gateway communicates with directly to give you access to the Internet. If you receive your Internet address settings automatically, the subnet mask has been set for you. If you manually set your Internet address (Static IP), this is the information that was provided to you by your ISP and entered by you during the system installation. Internet Address Subnet Mask Default Gateway 14 Broadband Link Tab Item Primary Domain Name Server Description Part of the Internet address settings. A domain name is a meaningful, easy-to-remember "handle" for an Internet address. The DNS allows Internet users to specify a name (domain name) to reach a Web page (for example, www.domainname.com) instead of its Internet address (for example, 111.222.111.222). When you enter the name of a Web location (URL), the DNS looks up the name and resolves it to the Web page's Internet address. If you receive your Internet address settings automatically, the subnet mask has been set for you. If you manually set your Internet address (static IP), this is the information that was provided to you by your ISP and entered by you during gateway installation. Used as a backup if the Primary server fails to respond. If you receive your Internet address settings automatically, the subnet mask has been set for you. If you manually set your Internet address (Static IP), this is the information that was provided to you by your ISP and entered by you during the system installation. This parameter may not be necessary and may be left blank. The name that associates your gateway with your ISP on the broadband link. This parameter may not be necessary and may be left blank. If you receive your Internet address settings automatically, the subnet mask has been set for you. If you manually set your Internet address (Static IP), this is the information that was provided to you by your ISP and entered by you during gateway installation. Shows the maximum size allowed on packets that are sent to and from your network to your ISP . The 2Wire gateway periodically checks the connection between itself and your ISP's Default Gateway. This field informs you that the check has been performed and whether or not it was successful. The gateway periodically checks the connection between itself and your ISP's domain name server(s) to make sure DNS is available. This field informs you that the check has been performed and whether or not it was successful. The gateway periodically checks the connection between itself and the 2Wire Component Management System. This field informs you that the check has been performed and whether or not it was successful. Secondary Domain Name Server Domain Maximum Transmission Unit (MTU) Gateway Ping DNS Communication Configuration Server Post 15 Broadband Link Tab Monitor Internet Connection The Monitor Internet connection link launches the Speed Meter. The Speed Meter measures the actual rate at which data is coming into (Incoming Kbps) and going out of (Outgoing Kbps) your system. It measures real-time data throughput in Kilobits per second and displays in one-second intervals. The Speed Meter monitors the actual data rates while connecting to a Web site. This data rate can differ from the reported speed of your broadband connection due to many factors, including traffic to the Web site or the speed of the Web servers at the site you are visiting. Note: To use the Speed Meter, your browser must support Java 2. Test Connection Speed The Test connection speed link launches the 2Wire Bandwidth Meter. The Bandwidth Meter measures the maximum download speed from 2Wire's Web site to your system in Kilobits per second (Kbps). The 2Wire Bandwidth Meter estimates your connection speed from the Internet. Because the Internet consists of thousands of interconnections, your connection to a Web site could be affected by many different factors. If you experience slow performance on a particular Web site, you can use the 2Wire Bandwidth Meter to verify whether this is isolated to that particular Web site, or if it is a more general occurrence. Because the 2Wire Bandwidth Meter measures the download speed from 2Wire's Web site to your computer and can be affected by many factors on the Internet, it is not an accurate measurement of the service from your ISP . Using Broadband Diagnostics Diagnostics displays an itemized list of your broadband connection's current status. Technical support representatives use this information to help troubleshoot problems with your broadband connection. To access the Broadband Link Diagnostics page: · · Open a Web browser and access the gateway user interface by entering http://gateway.2wire.net. Click the Broadband Link tab. 16 Broadband Link Tab · Click the Diagnostics link under the tab to open the Broadband Link Diagnostics page. Figure 9. Broadband Link Diagnostics Page To update the broadband link status, click REFESH. To initiate a full test of your broadband link, click TEST. The test will take several minutes, during which the system reestablishes all broadband connections. You will not be able to access the Internet until the test is complete. Viewing Statistics The View Broadband Link Statistics page shows statistics associated with the 2Wire gateway broadband link, including cumulative DSL statistics. To access the Broadband Link Statistics page: · · Open a Web browser and access the gateway user interface by entering http://gateway.2wire.net. Click the Broadband Link tab. 17 Broadband Link Tab · Click the Statistics link under the tab to open the View Broadband Link Statistics page. Figure 10. View Broadband Link Statistics Page The Transmit and Receive Data panel displays the following information. · · Transmit. The cumulative number of IP packets transmitted, the cumulative number of IP payload bytes transmitted, and the number and percentage transmitted in error. Receive. The number of bytes and packets received, and the number and percentage received in error. 18 Broadband Link Tab The Data Errors panel displays the following information. Data Error ATM Cell Header Errors Description The number of ATM cell header CRC errors since the 2Wire gateway was last restarted, and the elapsed time since the last cell header error. The number of ATM loss of cell delineation errors since the 2Wire gateway was last restarted, and the elapsed time since the last loss of cell delineation error. The number of DSL retrains since the 2Wire gateway was last restarted, and the time elapsed since the last retrain. The number of failed DSL retrains since the 2Wire gateway was last restarted, and the elapsed time since the last failed retrain. The number of timeouts waiting for response from ATU-C since the 2Wire gateway was last restarted, and the elapsed time since the last initialization timeout. The number of DSL loss of framing failures since the 2Wire gateway was last restarted, and the elapsed time since the last line search initialization. The number of DSL loss of signal failures since the 2Wire gateway was last restarted, and the elapsed time since the last loss of signal failure. The number of DSL loss of power indications from the ATU-C since the 2Wire gateway was last restarted, and the elapsed time since the last loss of power indication. The number of DSL loss-of-margin failures at current data rate since the 2Wire gateway was last restarted, and the elapsed time since the last loss of margin failure. The number of cumulative errored seconds since the 2Wire gateway was last restarted, and the elapsed time since the last error. The number of severely errored seconds since the 2Wire gateway was last restarted, and the elapsed time since the last severely errored second. The number of corrected DSL superframes that had data errors detected during reception. ATM Loss of Cell Delineation DSL Link Retrains DSL Training Errors DSL Training Timeouts DSL Loss of Framing Failures DSL Loss of Signal Failures DSL Loss of Power Failures DSL Loss of Margin Failures DSL Cumulative Errored Seconds DSL Severely Errored Seconds DSL Corrected Blocks 19 Broadband Link Tab Data Error DSL Uncorrected Blocks ISP Connection Establishment Description The number of uncorrected DSL superframes that had data errors detected. The number of times the ISP connection was established since the statistics were last reset, and the elapsed time since the last establishment. Using Advanced Settings The Advanced Settings page allows you to manually configure your DSL and Internet connection settings. Typically, these settings are automatically provided by your service provider. You should adjust these settings ONLY if you are very familiar with DSL and networking technology. To access the Broadband Link Advanced Settings page: · · Open a Web browser and access the gateway user interface by entering http://gateway.2wire.net. Click the Broadband Link tab. 20 Broadband Link Tab · Click the Advanced Settings link under the tab to open the Broadband Link Advanced Settings page. Figure 11. Broadband Link Advanced Settings Page Modifying DSL and ATM Settings By default, the gateway automatically detects which DSL line to use. The DSL and ATM panel allows you to select a DSL line and manually configure your ATM settings. 1. From the DSL Line Selection drop-down menu, select Automatic, Line 1 (inner pair), or Line 2 (outer pair). In the ATM Circuit Identifier VPI and VCI fields, enter the VPI and VCI you want the gateway to use to connect to your ISP . 2. 21 Broadband Link Tab 3. From the ATM Encapsulation drop-down menu, select Bridged LLC, Bridged VC-Mux, Routed LLC, or Routed VC-Mux. In the ATM/PVC Search field, click the Enabled or Disabled radio button. Click SAVE. 4. 5. Modifying Broadband Connection Settings The Broadband Connection panel allows you to modify your broadband connection. 1. From the Connection Type drop-down menu, select the connection type: PPPoE, PPPoA, Direct IP (DHCP or Static), or Routed IPoA. If you connect via PPPoE or PPPoA, proceed to step 2. If you connect via Direct IP or Routed IPoA, proceed to step 5. Direct IP and Routed IPoA connections do not require a user name or password. 2. 3. 4. 5. In the Username field, enter your user name. In the Password field, enter your password. In the Confirm Password field, re-enter your password. In the PPP on Demand field, enter a value for the length of time you wish the PPP session to remain active. If the value is set to 0, the PPP session will not time-out (it will be always-on). If the value is between 1 to 10080 minutes, the PPP session will time-out if the gateway doesn't detect outbound traffic destined for the Internet in the specified time. 6. Click SAVE. Modifying the Hardware Address By default, the gateway uses its built-in hardware address. The Hardware Address Override panel allows you to manually override the MAC address of the broadband connection, which is sometimes required for cable modems that perform MAC address authentication. 1. 2. 3. Click the Override the built-in hardware address radio button. In the Hardware Address field, enter the alternative hardware address. Click SAVE. Enabling Hostname Override In the DHCP Host Name field, enter the DHCP host name you want the gateway to use. This field is only relevant if your ISP uses DHCP host name authentication. 22 Broadband Link Tab Modifying the Broadband IP By default, the gateway automatically obtains its Internet address. The Broadband IP panel allows you to manually configure your Internet address settings. 1. 2. 3. 4. 5. Click the Manually configure IP address settings radio button. In the IP address field, enter the IP address you want the gateway to use. In the Subnet Mask field, enter the subnet mask you want the gateway to use. In the Default Gateway field, enter the default gateway address you want the gateway to use. Click SAVE. Modifying the Broadband DNS By default, the gateway automatically obtains the DNS server addresses via DHCP The Broadband DNS . panel allows you to manually configure your DNS information. 1. 2. Click the Manually configure your DNS information radio button. In the Primary Server field, enter the IP address of the primary DNS server that the gateway is to use for DNS name resolution. In the Secondary Server field, enter the IP address of the secondary DNS server that the gateway is to use for DNS name resolution. In the Domain Name field, enter the specific domain name to be used by the gateway. Click SAVE. 3. 4. 5. Note: If you choose to manually configure your system and have a problem, re-run your installation and follow the installation instructions provided to you by your service provider. 23 Home Network Tab This chapter describes the 2Wire gateway Home Network features, and provides detailed instructions on how to customize your network settings. Viewing Your Home Network Summary The Home Network Summary page displays information about the devices installed on your network. To access the Home Network Summary page: · · Open a Web browser and access the 2Wire gateway user interface by entering http://gateway.2wire.net. Click the Home Network tab to open the View Network Summary page. Figure 12. View Network Summary Page Understanding the Local Devices Panel The Local Devices panel shows you the name of the device, how it is connected, any special configuration information, and provides links to other system features that you can set up for the device. A "device" on your network is usually a computer -- either a personal computer used by a household member, or a computer that is dedicated to a specific use (such as a Web server that hosts online games). The status of each device is shown in the Local Devices list in your 2Wire gateway user interface. 24 Home Network Tab Each device on your home network is represented with a computer icon. If the "show inactive devices" option is enabled, and the device becomes inactive because it is powered off or removed from your network, this icon will display as Inactive. Note: For additional information, refer to "Showing a Device as Inactive" on page 33. A symbol next to the device shows how it is connected to your home network: Ethernet USB Wireless If you defined a name for your computer during System Setup or when your computer was set up, the name displays next to the device. However, there are two instances where the device name will not appear: · · If your computer was manually configured with a static IP address, the static IP address displays instead of the computer's name. If you have not named the device but it still obtains its Internet address from the system, the word "Unknown" displays. You can change the name of the device so that it will display in the system user interface by clicking the Change name link. If you have configured the firewall to allow information from the Internet to pass through to the computer (also referred to as "hosting an application"), the name of the application(s) that you are hosting are displayed under the device name. Note: For additional information, refer to "Hosting an Application" on page 41. If you have defined special features for the computer (such as DMZplus mode), the feature is displayed under the device name. 25 Home Network Tab Depending on the permissions you have set for devices on your network, the following links may display next to the device: · Access shared files. Accesses the shared files available from this computer. This feature only works with Microsoft Windows computers that have shared files and file sharing installed. Note: If your computer is configured with a static IP address, this link will not appear. · Edit firewall settings. Accesses the system user interface page, which allows you to edit the firewall pass-through settings for the computer. For example, you may need to change the pass-through settings for the computer if you want to play an Internet game. View Internet Access Control. Accesses the Internet Access Restriction schedule for this computer. Edit Content Screening. Accesses the Content Screening settings page, allowing you to change the Web site permissions for users on your network. View device details. Displays the technical networking details about the device. If you are experiencing difficulties, this information may be helpful to a technical support representative. · · · Understanding the Status at a Glance Panel The Status at a Glance panel shows you a list of network connection types, the number of devices connected via each connection type, and your wireless settings. To change your wireless settings, click the EDIT SETTINGS button. To disable a network device, click the DISABLE button. A message asks you to confirm your decision. Monitoring Your Wireless Settings Your 2Wire gateway has an integrated wireless access point, which enables you to connect your wirelessenabled computers to your home network. By default, the 2Wire gateway ships with WEP enabled and a preconfigured network name. The default WEP key is located on the bottom of the gateway, next to the serial number. To check your current settings and configure changes: · · Open a Web browser and access the 2Wire gateway user interface by entering http://gateway.2wire.net. Click the Home Network tab. 26 Home Network Tab · Click the Wireless Settings link to open the Configure the Wireless Network page. Figure 13. Configure the Wireless Network Page 27 Home Network Tab The Current Settings panel shows the 2Wire gateway's wireless access point settings: · · · Access Point. The designated name of the wireless access point. Network Name. The name assigned to your wireless network. The default is 2WIREXXX, where XXX represents the last three digits of your 2Wire gateway serial number (for example, 2WIRE954). Channel. The radio frequency band the access point uses for your wireless network (the default is 6). Wireless adapter cards auto-detect which channels to use. If you are having problems with your wireless network, it could be due to radio interference. You can change the wireless channel to see if interference is reduced on a different channel. Note: For more information on wireless channels, refer to the wireless channel entry on page 132 in the Glossary. · · Authentication. The security method used to ensure that users are authorized to access the wireless network: WEP-Open, WEP-Shared, or WPA-PSK. Encryption. The security setting that makes it difficult for unauthorized users to access your network. Customizing Security Settings You should always enable encryption for wireless communication. When encryption is enabled, you must define an encryption key for the 2Wire gateway's wireless access point and configure that same key on each wireless client that will use your 2Wire gateway wireless network. Note: If encryption is enabled, each wireless client must be configured with the encryption key defined on the system before it can operate on your wireless network. You can customize the following wireless settings in the Wireless Security panel. 1. From the Authentication pull-down menu, select an authentication setting: WEP-Open, WEP-Shared, or WPA-PSK. Note: WPA-PSK authentication is supported only on HG model gateways. Open authentication allows users to configure their wireless adapter as either Open or Shared; in either case an encryption key is required. Shared authentication allows users to configure their wireless adapter for Shared authentication, which requires an encryption key. WPA-PSK requires that users configure their wireless adapter using TKIP . 2. To use the encryption key that came with your gateway, click the Use default encryption key radio button. To create a custom encryption key, click the Use custom encryption key radio button. If you select Use custom encryption key, you can define a 64-bit or 128-bit encryption key. For 64-bit encryption, enter a 10-digit hexadecimal number. For 128-bit encryption, enter a 26-digit hexadecimal number. A hexadecimal number uses the characters 0-9, a-f, or A-F. 3. Click SAVE. 28 Home Network Tab Configuring MAC Filtering The Media Access Control (MAC) address is a unique number assigned to computer hardware. When setting up your network, you can set your Wireless Broadband Router to give access only to certain MAC addresses. By doing so, you limit access only to your computer hardware and no one else's. 1. In the MAC Filtering pane, click the EDIT MAC FILTERING button. The Wireless MAC Filtering page opens. 2. 3. Click the Enable checkbox. The MAC addresses of devices on your network appear in the ALLOWED DEVICES field. To block specific devices from accessing your network, highlight the device's MAC address (or name) and use the arrows to move the address to the BLOCKED DEVICES field. Click SAVE. 4. Configuring Additional Settings The Additional Settings panel allows you to customize wireless settings. In general, it is recommended that you leave the default settings in place; however, if you are experiencing connection or performance difficulties, altering these settings may improve performance. Note: Because the fields that display are dependent on the type of wireless adapter you are using, some of these settings may not display. · Wireless Mode. Allows you to force the gateway to use 802.11b/g, 802.11b-only, or 802.11g-only modes of operation. Note: This field displays only for 802.11b/g based models. 29 Home Network Tab · · DTIM Period (seconds). Determines at which interval the access point will send its broadcast traffic. The default value is 4 seconds. Maximum Connection Rate. The maximum rate at which your wireless connection works (1, 2, 5.5, 11, or 22 Mbps for 802.11b-based models; 1, 2, 5.5, 11, 6, 9, 12, 24, 36, 48, or 54 Mbps for 802.11b/ g-based models). Power Setting. Allows you to select the power level for your wireless connection. The default list is 1 to 4; additional options may appear based on the service provider's configuration. · If you have customized your wireless system configuration, you can restore the wireless settings to factory defaults by clicking the RESTORE DEFAULTS button. Configuring Advanced Settings The Edit Advanced Home Network Settings page displays the current IP settings in use by your system for your home network, and allows you to configure your home network settings. You should adjust these settings ONLY if you are very familiar with computer networking technologies. The Current Settings panel shows the following information: · Router Address. The IP address used by your system on the private home network (the default is 192.168.0.1). The system has two IP addresses: a private address that it uses on the home network, and one that is used on the public broadband connection on the Internet. You can change the home network IP address by changing the home network IP address range. Subnet Mask. The subnet mask is determined by the home network IP address range settings (the default is 255.255.0.0). DHCP Range. The range of IP addresses used by your system (the default is 192.16.1.33 through 192.16.1.250). IP addresses can be either static (permanently assigned) or dynamic (automatic and temporary). · · Setting up a Private Network By default, the 2Wire gateway uses the 192.168.1.0/255.255.0.0 IP address range. You can select from two additional IP address ranges, or configure the network settings manually. You should manually configure these settings ONLY if you thoroughly understand IP internetworking, because an incorrect configuration can cause unpredictable results. To set up a private network: · · Open a Web browser and access the 2Wire gateway user interface by entering http://gateway.2wire.net. Click the Home Network tab. 30 Home Network Tab · Click the Advanced Settings link under the tab to open the Edit Advanced Home Network Settings page. Figure 14. Advanced Home Network Settings Page 31 Home Network Tab 1. Click the radio button that corresponds to the IP address range you wish to use. If you select the 172.16.0.0 / 255.255.0.0 or 10.0.0.0 / 255.255.0.0 range, continue to step 5. If you select Configure manually, continue to step 2. In the Router Address field, enter the IP address used by your system on the private home network. In the Subnet Mask field, enter the subnet mask. The subnet mask is determined by the home network IP address range settings. Click the Enable DHCP checkbox. a. In the First DHCP Address field, enter the first DHCP address that you'll be distributing over the private network. b. In the Last DHCP Address field, enter the last DHCP address that you'll be distributing over the private network. c. In the Set DHCP Lease Time field, enter a value for the number of hours before the DHCP lease expires. 2. 3. 4. 5. Click SAVE. Note: If you change the home network IP address range, you must renew the DHCP lease on all devices on your home network and manually reconfigure all devices configured with static IP addresses. If you are using the 2Wire Network Support Tool, you can renew the DHCP lease by selecting "Refresh Network Connection" in the Network Support Tool menu. Setting Up a Public Routed Subinterface The Public Routed Subinterface pane allows you to create a local network that has broadband networkaccessible IP addresses by creating a route from the Internet to the specified public network. The public network operates without Network Address Translation (NAT). This feature is typically used in conjunction with broadband service that provides a range of available IP addresses. Once enabled, the public IP addresses can be assigned to local computers. To set up a Public Routed Subinterface network: 1. 2. 3. 4. Check the Enable checkbox. In the Router Address field, enter the router address (this is typically provided by your service provider). In the Subnet Mask field, enter the subnet mask (this is typically provided by your service provider). (Optional) To open all firewall ports, check the Auto Firewall Open checkbox. (By default, your firewall protection is enabled.) Click SAVE. 5. 32 Home Network Tab Setting Up a Public Proxied Subnet The Public Proxied Subnet pane allows you to create a local network that has broadband-accessible IP addresses. Public Proxied Subnet is a public network in which the local network is an extension of the broadband network and does not require any special routing. Computers that are assigned Public Proxied Subnet IP addresses operate without Network Address Translation (NAT). This feature is typically used in conjunction with broadband service that provides a range of IP addresses. Once enabled, the Public Proxied Subnet IP addresses can be assigned to local computers. To set up a public proxied subnet: 1. 2. Check the Enable checkbox. In the Subnet Mask field, enter the subnet mask (this is typically provided by your service provider, and defines how large your IP pool is). (Optional) To open all firewall ports, check the Auto Firewall Open checkbox. (By default, your firewall protection is enabled.) Click SAVE. 3. 4. Selecting a Default DHCP Pool By default, all devices on the home network that use dynamic (non-static) IP addresses receive these from the Private Network DHCP pool. When either Public Routed Subinterface or Public Proxied Subnet is enabled, click the Default DHCP Pool radio button in the corresponding section to have devices receive their IP addresses from those pools. Showing a Device as Inactive To show a device as Inactive: 1. 2. 3. 4. 5. Open a Web browser and access the 2Wire gateway user interface. Click the Home Network tab. Click the Advanced Settings link under the tab. In the Settings pane, select the Show inactive devices in network list checkbox. Click SAVE. 33 VoIP Network Tab This chapter describes the 2Wire gateway VoIP Network features, and provides detailed instructions on setting up a VoIP network. Configuring the VoIP Phones To configure VoIP via the gateway user interface, follow these steps. 1. Access the gateway user interface by opening a web browser and entering http://gateway.2wire.net. Click the Voice Network tab. The View Voice Network page opens 2. In the Voice Network Setup box, click Introduction. The Introduction page displays. 34 VoIP Network Tab 3. Click NEXT to continue. The Set Up Phones (Step 1: Phone Wiring) page displays. Follow the on-screen instructions. 4. Click NEXT. The Step 2: Set Up Phone Lines page opens. Activate a line by checking the box next to Phone Number/Userid. Click EDIT to change the settings. 5. The account is based on username or phone number. To change this setting, enter a Username or phone number in the User Name box. From the Ring Tone pull-down menu, select the tone you wish to associate with the phone (and click LISTEN to hear the selected ring tone). To block the outgoing caller ID, click the Anonymous checkbox. To ensure that the settings cannot be changed, enter a username 35 VoIP Network Tab and password in the Auth Username and Auth Password boxes under the Credentials subheading. Click SUBMIT to continue. Next, the Phone Settings page opens. 6. The Phone Settings page allows you to match each telephone to a phone line.To do so, click EDIT. 36 VoIP Network Tab 7. In the Phone Name field, select a name to associate with the phone. If you have more than one digital voice line, in the Assign Number field select the phone line you wish to associate with this phone. Click SUBMIT to continue. The Phone Settings (Step 3: Match each Phone to a Line) page displays. 8. Check the box next to each phone line to activate it. To identify and locate each phone listed, click RING NOW, which will momentarily ring that telephone. Click EDIT to edit phone name, line connection association, and whether to enable service outage detection. Click NEXT to continue. 37 VoIP Network Tab 9. Congratulations, setup is complete. Click DONE to return to the Voice Network summary page. If you want to change your settings, go to the System Summary page, then click the Voice Network tab. Note: To make any broadband connection settings changes, such as configuring the voice servers, refer to the Management and Diagnostic Console. See "Management and Diagnostic Console" on page 58. Once the VoIP server configuration settings have been implemented, open a browser and enter http:// gateway.2wire.net. Click the Voice Network tab. The View Voice Network page displays. You can view the status of your VoIP line(s) in the Status at a Glance section. Note: To comply with Australian standards, local ports shall not be connected via shared building cabling. 38 Firewall Tab This chapter describes the 2Wire gateway firewall features, and provides detailed instructions on how to modify the firewall settings. Firewall Features The 2Wire gateway has a professional-grade firewall to help prevent unauthorized users from accessing your local network. The 2Wire gateway firewall includes the following features: Stateful packet inspection. Blocks common Denial of Service attacks (such as SYN/FIN flooding or Smurf), and detects and logs TCP and UDP port scans. Stateless packet inspection. Filters specific NetBios traffic, suspicious packets and IP fragments; blocks packets sent from the private network to the Internet that have spoofed IP addresses. Network Address Translation (NAT). Translates a local network's IP address to an external address maintained by the 2Wire gateway, effectively "hiding" the existence of a home network to the Internet. The 2Wire gateway then uses this external address to communicate with the Internet on behalf of devices connected to the local network. Port Address Translation (PAT). A function provided by some routers which allows hosts on a LAN to communicate with the rest of a network (such as the Internet) without revealing their own private IP address. All outbound packets have their IP address translated to the router's external IP address. Replies come back to the router, which then translates them back into the private IP address of the original host for final delivery. During PAT, each computer on the LAN is translated to the same IP address, but with a different port number assignment. Inbound and outbound port blocking. Blocks common inbound and outbound protocol types from passing information to or receiving information from the Internet. 39 Firewall Tab Viewing Your Firewall Summary The Firewall Summary page provides summary information and links to the most commonly used securityrelated features of your system. To access the Firewall Summary page: · · Open a Web browser and access the gateway user interface by entering http://gateway.2wire.net. Click the Firewall tab to open the View Firewall Summary page. Figure 15. View Firewall Summary Page The Firewall Settings panel displays the Current Settings for your firewall. · · Default. Unsolicited inbound traffic is not allowed to pass through the firewall. Custom. Applications are associated with computers on your network. An access list shows the computers (Devices) on your network and the names of the Allowed Applications for each computer. When you allow application traffic, external users on the Internet can have limited access to your home network. This access might be required to allow some programs (such as game servers or instant messaging software) to operate properly. For example, a remote game player on the Internet might need to contact the game server program that you have installed on your home network in order to play against you. Normally, the firewall blocks this communication. By changing the firewall settings, this communication is permitted to pass through a "pinhole" in the firewall. This function may be referred to as "port-mapping" or "port-forwarding" in your software program documentation. 40 Firewall Tab Click VIEW DETAILS to access the Firewall Details page, which shows a list of all the devices that have applications configured in the firewall and the details of these configurations. Figure 16. View Firewall Details Page If you have the Firewall Monitor enhanced service, the Firewall Monitor panel shows a brief summary of the number of attacks that were blocked for the current day and week. Click VIEW DETAILS to access the Monitor the Firewall page. Hosting an Application When you host an application on your network for Internet users to access, you must configure the 2Wire gateway firewall to pass through specific application data to a selected computer. To host an application: · · Open a Web browser and access the gateway user interface by entering http://gateway.2wire.net. Click the Firewall tab. 41 Firewall Tab · Click the Firewall Settings link under the tab to open the Edit Firewall Settings page. Figure 17. Edit Firewall Settings Page 1. 2. 3. 4. 5. From the Select a computer pull-down menu, select the computer that you wish to host the application. Click the Allow individual application(s) radio button. In the Applications panel, select an application. Click the ADD > button. The application you selected now appears in the Hosted Applications pane. Click DONE. 42 Firewall Tab To stop hosting an application: 1. 2. 3. In the Hosted Applications panel, select the application you wish to stop hosting. Click the < REMOVE button. Click DONE. Updating the Application Profile List If the application you want to host does not appear in the Application Profile list, you may need to update the application list. If an update is available, the UPDATE APPLICATION LIST button appears above the list of application profiles. If the application that you want to host is not included in the updated application list, you may need to add your own application profile. Adding an Application Profile If you wish to host an application that is not included in the Application Profile list, you can add an application using the Add Application Profile page. An application profile configures your system's firewall to pass through application-specific data. This feature is typically used if the application for which you would like to pass through data to a given computer is new or has been recently updated to a new version. To create a new application profile: · · · Open a Web browser and access the gateway user interface by entering http://gateway.2wire.net. Click the Firewall tab. Click the Firewall Settings link under the tab to open the Edit Firewall Settings page. 43 Firewall Tab · In the Applications panel, click the Add a new user-defined application link to open the Edit Application page. Figure 18. Edit Application Page 44 Firewall Tab 1. In the Application Name field, enter a name for the application profile. You can enter any name you like, although it's recommended that you use the name of the application (for example, Redwing Game Server). In the Definition panel, create a definition for your application. A definition consists of a series of protocol-specific ports that are to be allowed through the firewall. This information should be contained in the documentation provided by the company that produces the application. a. In the Protocol field, select the TCP or UDP radio button. If the application you are adding requires both, you must create a separate definition for each. b. In the Port (or Range) field, enter the port or port range the application uses. For example, some applications may require only one port to be opened (such as TCP port 500); others may require that all TCP ports from 600 to 1000 be opened. c. In the Protocol Timeout (seconds) field, you may optionally enter a value for the amount of time that can pass before the application "times out." You can also leave the field blank, in which case the system uses the default values (86,400 seconds for the TCP protocol; 600 seconds for the UDP protocol). 2. d. In the Map to Host Port field, enter a value that will map the port range you established in step b to the local computer. For example, if you set the value to 4000 and the range being opened is 100 to 108, the forwarded data to the first value in the range will be sent to 4000. Subsequent ports will be mapped accordingly; 101 will be sent to 4001, 102 will be sent to 4002, etc. e. From the Application Type drop-down menu, select the application type. If you do not know the application type, select None (Default). 3. 4. Click ADD DEFINTION to add the values to the profile definition list. Click DONE. Repeat these steps for each port or range of ports required for the application profile. To edit or delete an application profile: · · · Open a Web browser and access the 2Wire gateway user interface by entering http://gateway.2wire.net. Click the Firewall tab. Click the Firewall Settings link under the tab to open the Edit Firewall Settings page. 45