Home

Cisco Systems 4034441 Router User Manual

1. 77 Manage the Gateway 78 Field Remote Access UPnP IGMP Description Remote Management Allows you to enable to disable remote management This feature allows you to access and manage your gateway settings from the Internet when you are away from home To allow remote access select Enable Otherwise keep the default setting as Disable The protocol HTTP is required for remote management To remotely access the device enter https xxx xxx xxx xxx 8080 the x s represent the device s public Internet IP address and 8080 represents the specified port in your web browser s Address field Management Port Enter the port number that will be open to outside access The factory default setting is 8080 This port must be used when you establish a remote connection UPnP Universal Plug and Play UPnP allows Windows XP and Vista to automatically configure the Gateway for various Internet applications such as gaming and videoconferencing If you want to use UPnP keep the default Enable Otherwise select Disable IGMP Proxy Internet Group Multicast Protocol IGMP is used to establish membership in a multicast group and is commonly used for multicast streaming applications For example you may have Internet Protocol Television IPTV with multiple set top boxes on the same local network These set top boxes have different video streams running simultaneously so you should use the IGMP feature of the Router I
2. Encryption Authentication PFS Pre Shared Key Key Lifetime NOT Conntected Connect Disconnect Advanced Settings 4021196 Rev C Configure Security Security VPN Tunnel Page Description Use the descriptions and instructions in the following table to configure the VPN tunnel for your gateway After you make your selections click Save Settings to apply your changes or Cancel Changes to cancel Section VPN Tunnel Local Secure Group Remote Secure Group 4021196 Rev C Field Description Select Tunnel Entry Allows you to display a list of created VPN tunnels Create Button Click this button to create a new tunnel entry Delete Button Click this button to delete all settings for the selected tunnel Summary Button Click this button to display the settings and status of all enabled tunnels IPSec VPN Tunnel Allows you to enable or disable Internet Security Protocol for the VPN tunnel Tunnel Name Enter the name for this tunnel Select the local LAN user s that can use this VPN tunnel This may be a single IP address or sub network Note that the Local Secure Group must match the remote gateway s Remote Secure Group IP Enter the IP address of the local network Mask If the Subnet option is selected enter the mask to determine the IP address on the local network Select the remote LAN user s behind the remote gateway who can use this VPN tunnel This may be a single IP address a sub network
3. Note The factory default Wireless Security Mode is WPA or WPA2 Personal Encryption Allows you to select a level of encryption based on the wireless security mode you choose See Wireless Security on page 39 for detailed descriptions of encryption Pre Shared Key The pre shared key for the device The key can be from 8 to 63 characters The factory default Pre Shared Key is equal to the 9 digit serial number of your gateway The serial number can be found on the rating label attached to your wireless gateway Note Your service provider may provide you with a wireless configuration card that contains SSID and wireless security configuration information for your home network that may differ from what is described above 4021196 Rev C 4021196 Rev C How Do Configure My DOCSIS Residential Gateway Setup gt Lan Setup The Setup Lan Setup page allows you to configure the settings for the Local Area Network LAN in your home These settings include the range of IP addresses that define the LAN itself as well as how the addresses are assigned automatically by DHCP or manually as new devices are added to the network Important Unless you are knowledgeable about administering IP addresses we recommend that you do not change these settings If you change these values incorrectly you can lose Internet access Select the Lan Setup tab to open the Setup Lan Setup page Access Applications et x a Restrictions amp
4. E Radio Band Em Channel Width E Standard Channel m Wireless Network Name SSID Wi Fi Protected Setup WPS When you select Wi Fi Protected Setup as your wireless configuration many settings will be pre configured WPS allows simplified setup that allows you to easily attached new WPA enabled devices to your network Important When using WPS mode WEP is not supported If you must use WEP encryption WPS must be disabled by setting the Wireless Configuration to Manual Note WPS is the default setting 4021196 Rev C 35 Configure Wireless Settings Wireless Configuration Wi Fi Protected Setup Example Access Applications Restrictions amp Gaming Administration Status Setup Security igs Wireless Security MAC Filter Advanced Settings WDS Settings Gos Log OFF Basic Settings Wireless Network Enable Disable Wireless Contiguration Manual amp Wi Fi Protected Setup Wi Fi Protected Setup Use one of the following for each Wi Fi Protected Setup supported device 1 If your client device has a Wi Fi Protected Setup button click or press that button and then click the button on the right OR 2 If your client device has a VVi Fi Protected Setup PIN number enter that number here 94380507 and then click OR 3 If your client asks for the Gateway s PIN number enter this number 12345670 in your client device and then click Wi Fi Protected Setup Status Configured Network Hame SSID ced8
5. This declaration is only valid for configurations combinations of software firmware and hardware supported or provided by Cisco Systems for use within the EU The use of software or firmware not supported or provided by Cisco Systems may result in the equipment no longer being compliant with the regulatory requirements Benrapcku Tosa o opygeaHe OTTOBapA Ha CbLUIECTBEHUTe N3MCKBAHMA N NPHNOKUMM Bulgarian knay3n Ha JIMpextuea 1999 5 EC Cesky Toto za zen je v souladu se z kladn mi po adavky a ostatn mi odpov daj c mi Czech ustanoven mi Sm rnice 1999 5 EC Dansk Dette udstyr er i overensstemmelse med de v sentlige krav og andre Danish relevante bestemmelser i Direktiv 1999 5 EF Deutsch Dieses Gerat entspricht den grundlegenden Anforderungen und den weiteren German entsprechenden Vorgaben der Richtlinie 1999 5 EU Eesti See seade vastab direktiivi 1999 5 EU olulistele n uetele ja teistele Estonian asjakohastele s tetele English This equipment is in compliance with the essential requirements and other ng relevant provisions of Directive 1999 5 EC Espa ol Este equipo cumple con los requisitos esenciales asi como con otras Spanish disposiciones de la Directiva 1999 5 CE EMnvik Autoc o sEonMop eivat OE OU PPWON HE Tic OVaWSEC ANAIT EL KOL Greek ade oyetik Siar e tng OSnyiac 1999 5 EC Fran ais Cet appareil est conforme aux exigences essentielles et aux a
6. Wireless DOCSIS WAN About Online Help Model Cisco EPC3825 Vendor Cisco Hardware Revision 1 0 Serial Number 222596078 MAC Address 00 22 3a ce d8 75 Bootloader Revision 2 3 0_R1 Current Software Revision epe3825 ESIP 16 v302112911 091029 Firmware Name epc3825 ESIP 16 v3021r12911 091029 bin Firmyvare Build Time Oct 29 2009 15 48 04 Cable Modem Status Operational Downstream Channels Power Level Signal to Noise Ratio Channel 1 17 1 dBm 33 7 dBmv Channel 2 0 0 dBmv 0 0 dBmv Channel 3 0 0 dBm 0 0 dBmv Channel 4 0 0 dBmv 0 0 dBmwv Channel 5 0 0 dBmv 0 0 dBmv Channel 6 0 0 dBmv 0 0 dBmv Channel 7 0 0 dBmv 0 0 dBmv Channel 8 0 0 dBm 0 0 dBmv Upstream Channels Power Level Channel 1 41 0 dBm Channel 2 0 0 dBmv Channel 3 0 0 dBmv Channel 4 0 0 dBmv Refresh DOCSIS WAN Page Description Use the descriptions in the following table to review the status of your DOCSIS WAN network Section Field Description About Model Displays the name of the residential gateway Vendor Displays the manufacturer of the residential gateway Hardware Revision Displays the revision of the circuit board design Serial Number Displays the unique serial of the residential gateway 4021196 Rev C 89 Monitor Gateway Status 90 Section Downstream Channels Upstream Channels Field Description MAC Address CM MAC Address Displays the CM MAC Address The CM MAC Address is
7. 192 168 0 10 End IP Address 192 168 0 128 DHCP Client Table _ ARPRARP Table Refresh Use the following table to review the status of your gateway and your Internet connection Section Field Description Local Network MAC Address A unique alphanumeric address for the private LAN home network A MAC address is a hardware address that uniquely identifies each node of a network 4021196 Rev C 85 Monitor Gateway Status Section DHCP Client Table 86 Field Description IP Address Displays the IP address for the LAN subnet Subnet Mask Displays the subnet mask for your LAN DHCP Server Displays the status of your local DHCP server Enabled or Disabled Starting IP Address Displays the beginning of the range of IP addresses used by the DHCP server in your gateway End IP Address Displays the end of the range of IP addresses used by the DHCP server Click DHCP Client Table to show which devices are attached to your LAN that have been isued IP addresses by the DHCP server in the gateway On the DHCP Client Table page you will see a list of DHCP clients computers and other network devices with the following information Client Host Names IP Addresses MAC Addresses and the length of time before their assigned IP addresses expire To retrieve the most up to date information click Refresh To exit this page and return to the Local Network page click Close The following illustration shows an example of
8. Administration Status Log OFF Basic Settings Wireless Security MAC Filter Advanced Settings WDS Settings Ges Quality of Service Q0S Wireless WWMM Support Enable Disable Default Enable No ACK Enable Disable Default Disable Save Settings Cancel Changes Wireless QoS Page Description Use the descriptions and instructions in the following table to configure each QoS setting After you make your selections click Save Settings to apply your changes or Cancel Changes to cancel Section Field Description Quality of Service QoS Wireless WMM Support If WMM Wi Fi Multimedia is supported by your wireless clients enabling this feature means that multimedia traffic will be given higher priority than other traffic Select the desired option E Enable factory default E Disable 49 Configure Wireless Settings Section Field Description No ACK Allows you to enable or disable NO ACK This feature is recommended for data services where transmission is important and packet loss is tolerable to a certain degree If you select Disable an acknowledge packet is returned for every packet received This provides a more reliable transmission but it increases traffic load which decreases performance Select the desired option E Enable E Disable factory default 50 4021196 Rev C Configure Security Configure Security Security gt Firewall Advanced firewall technology deters
9. E If yes click OK To close the TCP IP Control Panel window click File and then scroll down to click Close You have completed this procedure E If no you must power off your Macintosh With the power off simultaneously press and hold down the Command Apple Option P and R keys on your keyboard Keeping those keys pressed down power on your Macintosh but do not release these keys until you hear the Apple chime at least three times then release the keys and let the computer restart When your computer fully reboots repeat steps 1 through 7 to verify that all TCP IP settings are correct If your computer still does not have a Hardware Address contact your authorized Apple dealer or Apple technical support center for further assistance Q How Do I Renew the IP Address on My PC A If your PC cannot access the Internet after the residential gateway is online it is possible that your PC did not renew its IP address Follow the appropriate instructions in this section for your operating system to renew the IP address on your PC 4021196 Rev C Frequently Asked Questions Renewing the IP Address on Windows 95 98 98SE and ME Systems 1 Click Start and then click Run to open the Run window 2 Type winipcfg in the Open field and click OK to execute the winipcfg command The IP Configuration window opens 3 Click the down arrow to the right of the top field and select the Ethernet adapter that is installed on your PC The IP
10. High Speed Data Registration continued Step Front Panel Indicator Data Network Registration Complete e uss onorBinins a for 4021196 Rev C 97 Front Panel LED Status Indicator Functions Normal Operations AC Power applied The following chart illustrates the appearance of the residential gateway front panel LED status indicators during normal operations when AC power is applied to the gateway Front Panel LED Status Indicators During Normal Conditions Front Panel Indicator Normal Operations ETHERNET 1 4 WIRELESS LINK WIRELESS SETUP ES 98 On When a single device is connected to the Ethernet port and no data is being sent to or from the modem Blinks When only one Ethernet device is connected and data is being transferred between the consumer premise equipment CPE and the wireless home gateway Off When no devices are connected to the Ethernet ports On When a single device is connected to the USB port and no data is being sent to or from the modem Blinks When only one USB device is connected and data is being transferred between the consumer premise equipment CPE and the wireless home gateway Off When no devices are connected to the USB ports On When the wireless access point is enabled and operational Blinks When data is being transferred between the CPE and the wireless home gateway Off When the wireless access point is disabled by the user Off When wireless setup
11. The residential gateway does not register an Ethernet connection E Verify that your computer has an Ethernet card and that the Ethernet driver software is properly installed If you purchase and install an Ethernet card follow the installation instructions very carefully E Verify the status of the front panel status indicator lights The residential gateway does not register an Ethernet connection after connecting to a hub If you are connecting multiple PCs to the residential gateway you should first connect the modem to the uplink port of the hub using the correct crossover cable The LINK LED of the hub will illuminate continuously The residential gateway does not register a cable connection E The modem works with a standard 75 ohm RF coaxial cable If you are using a different cable your residential gateway will not function properly Contact your cable service provider to determine whether you are using the correct cable E Your NIC card or USB interface may be malfunctioning Refer to the troubleshooting information in the NIC or USB documentation 4021196 Rev C Tips for Improved Performance Tips for Improved Performance Check and Correct If your residential gateway does not perform as expected the following tips may help If you need further assistance contact your service provider 4021196 Rev C Verify that the plug to your residential gateway AC power is properly inserted into an electrical outlet Verify
12. 00 00 00 Mac 13 00 00 00 00 00 00 mac 23 00 00 00 00 00 00 MAC 14 0l 0 00 00 00 00 MAC 30 MAC 15 00 00 00 00 00 00 MAC 31 00 00 00 00 00 00 MAC 16 00 00 00 00 00 00 MAC 32 00 00 00 00 00 00 Save Settings Cancel Changes Wireless MAC Filter Page Description Use the descriptions and instructions in the following table to configure the MAC address filtering for the wireless network for your residential gateway After you make your selections click Save Settings to apply your changes or Cancel Changes to cancel Section Field Description MAC Filter Allows you to Enable or Disable MAC Filtering for the residential gateway 4021196 Rev C 43 Configure Wireless Settings 44 Section Field Description Access Access Restriction Restriction Allows you to permit or block computers from accessing the wireless network The choice that you make here affects the addresses listed on this page Choose one of the following options E Block computers listed below from accessing the wireless network Select this option to deny Internet access to the MAC addresses of the devices you list in the table All other MAC addresses will be allowed Internet access E Permit computers listed below access to the wireless network Select this option to allow Internet access only to the MAC addresses of the devices you list in the table Any MAC addresses no
13. Only minor reduction of the default value is recommended In most cases it should remain at its default value of 2346 RTS Threshold The RTS Threshold determines at what packet size beyond which the ready to send clear to send RTS CTS mechanism is invoked Should you encounter inconsistent data flow only minor reduction of the default value 2346 is recommended If a network packet is smaller than the preset RTS Threshold size the RTS CTS mechanism will not be enabled The device sends Request to Send RTS frames to a particular receiving station and negotiates the sending of a data frame After receiving an RTS the wireless station responds with a Clear to Send CTS frame to acknowledge the right to begin transmission The RTS Threshold value should remain at its default value of 2347 47 Configure Wireless Settings Wireless gt WDS Settings The Wireless Distribution System WDS Settings page allows you to expand the coverage of your wireless network by deploying signal repeaters Make sure the channel settings are the same for all WDS enabled devices Select the WDS Settings tab to open the Wireless WDS Settings page Use this page to configure the WDS settings Access Applications Sah er oe Restrictions amp Gaming Administration Status Log OFF Basic Settings Wireless Security MAC Filter Advanced Settings MADS Semmgs oS WDS MAC Address 00 22 CE 7B D9 EC C Allow wireless signal to be repeated by
14. Pass Listed Select Pass Listed to allow Internet access only to the MAC addresses of the devices you list in the table Any MAC addresses not listed in the table will be denied Internet access Function Keys The following function keys appear on the Advanced Settings MAC Address Filtering page Key Description Apply Saves the values you enter into the fields without closing the page Add MAC Address Saves the MAC Address entered in the associated text field Remove MAC Address Removes the selected MAC address Clear All Removes all defined MAC addresses 4021196 Rev C 61 Control Access to the Gateway 62 Access Restrictions gt Basic Rules Access restrictions allow you to block or allow specific kinds of Internet usage and traffic such as Internet access designated applications websites and inbound traffic during specific days and times The Access Restrictions Basic Rules page allows you to configure parental controls on the residential gateway and to monitor the individuals who are authorized to set parental controls Select the Basic Rules tab to open the Access Restrictions Basic Rules page Access Applications Setup Wireless Security Restrictions amp Gaming Administration Status Log OFF IP Add Filtering MAC Add Filtering Rule Time of Day Rules UserSetup LoralLog Parental Basic Setup Parental Control Activation This box must be checked to turn on Parental Control C Enable Parental Control
15. a unique alphanumeric address for the cable modem coaxial interface which is used to connect to the CMTS at the headend A MAC address is a hardware address that uniquely identifies each node of a network Bootloader Revision Displays the boot revision code version Current Software Revision Displays the revision version of the firmware Firmware Name Displays the name of the firmware Firmware Build Time Displays the date and time the firmware was built Cable Modem Status Displays one of the possible current states of the gateway Channels 1 8 Displays the power level and the signal to noise ratio of the active downstream channels Channels 1 4 Displays the power level of the active upstream channels 4021196 Rev C Frequently Asked Questions Frequently Asked Questions 4021196 Rev C Q How Do Configure TCP IP Protocol A To configure TCP IP protocol you need to have an Ethernet Network Interface Card NIC with TCP IP communications protocol installed on your system TCP IP is a communications protocol used to access the Internet This section contains instructions for configuring TCP IP on your Internet devices to operate with the residential gateway in Microsoft Windows or Macintosh environments TCP IP protocol in a Microsoft Windows environment is different for each operating system Follow the appropriate instructions in this section for your operating system Configuring TCP IP on Windows 2000 Systems 1
16. bottom of your gateway This SSID is a unique identity and does not need to be changed unless you choose to do so Your service provider may provide you with wireless setup information that may call for a different SSID BSSID Displays the Basic Service Set Identifier BSSID of your wireless network The BSSID is typically the MAC Address of the wireless access point Note This may not be the same MAC Address as the CM MAC Address used to determine the factory default SSID Broadcast SSID When this box is checked factory default the gateway transmits or advertises its presence to other wireless devices Client devices can automatically detect the access point when this beacon is enabled Uncheck this box if you want to hide your network from wireless clients If you hide your network you will need to configure each of your wireless client devices manually Important The Enable check box is not currently in use and does not impact operation of the gateway Wireless gt Wireless Security Selecting a wireless security mode helps protect your network If you select Disable then your wireless network is not secure and any wireless device within range may connect to it To keep intruders out of your wireless network use the Wireless Security page to configure your security parameters including the security mode the level of encryption encryption keys and other security settings Select the Wireless Security tab to open
17. head and the wall Then go to step 4 Install the mounting screws into the wall leave a gap of about 1 4 inch between the screw head and the wall Then go to step 4 Verify that no cables or wires are connected to the residential gateway Lift the residential gateway into position Slip the large end of both mounting slots located in the back of the residential gateway over the mounting screws and then slide the residential gateway down until the narrow end of the keyhole slot contacts the screw shaft Important Verify that the mounting screws securely support the residential gateway before you release the unit 23 How Do Connect My Gateway for Internet Service How Do I Connect My Gateway for Internet Service You can use your residential gateway to provide Internet access and you can share that Internet connection with other Internet devices in your home or office Sharing one connection among many devices is called networking Connecting and Installing Internet Devices Professional installation may be available Contact your local service provider for further assistance To connect devices The following diagram illustrates one of the various networking options that are available to you Ethernet Cabl RF Cable Ready aoe J Cables TV VCR or Set Top PCs Converter T14568 Connecting the Residential Gateway for High Speed Data Service The following installation procedure ensures proper setup
18. in wood or masonry bit as appropriate for the wall composition A copy of the wall mounting illustrations shown on the following pages Mount the modem as shown in one of the following illustrations Horizontal Mounting Mounting Mounting Concrete Screws Holes Wood or 114569 4021196 Rev C 21 How Do Mount the Modem on a Wall Optional Vertical Mounting Mounting Mounting Screws Holes Loe Concrete A Wood or ae Drywall en 1 4 in 0 65 cm N i Ka sia laa Location and Dimensions of the Wall Mounting Slots iw 714570 The following illustration shows the location and dimensions of the wall mounting slots on the bottom of the modem Use the information on this page as a guide for mounting your modem to the wall 22 4021196 Rev C 4021196 Rev C How Do Mount the Modem on a Wall Optional Mounting the Residential Gateway on a Wall 1 Using a drill with a 3 16 inch bit drill two holes at the same height and 4 inches apart Note The preceding graphic illustrates the location of the mounting holes on the back of the residential gateway Are you mounting the residential gateway into a drywall or concrete surface where a wooden stud is available E If yes go to step 3 E If no drive the anchor bolts into the wall and install the mounting screws into the anchor bolts leave a gap of about 1 4 inch between the screw
19. or any addresses If Any is set the Gateway acts as responder and accepts requests from any remote user Note that the Remote Secure Group must match the remote gateway s Local Secure Group IP Enter the IP address of the remote network Mask If the Subnet option is selected enter the mask to determine the IP addresses on the remote network 55 Configure Security Section Field Description Remote Select the desired option IP Addr Any or FQDN If the remote gateway has a Secure dynamic IP address select Any or FQDN If Any is selected then the Gateway will Gateway accept requests from any IP address FQDN If FQDN is selected enter the domain name of the remote gateway so the Gateway can locate a current IP address using DDNS IP The IP address in this field must match the public WAN or Internet IP address of the remote gateway at the other end of this tunnel Key Key Exchange Method M t anagemen The gateway supports both automatic and manual key management When automatic key management is selected Internet Key Exchange IKE protocols are used to negotiate key material for Security Association SA If manual key management is selected no key negotiation is needed Basically manual key management is used in small static environments or for troubleshooting purposes Note that both sides must use the same key management method 56 4021196 Rev C Section Key Management continued 4021196 Rev C Co
20. page Access Applications Re Hons Setup Wireless Security amp Gaming Administration Status Log OFF Port Filtering Port Range Forwarding Pont Range Tmiggermg DMZ Port Range Triggering Triggered Range Forwarded Range Start Port End Port Start Port End Port Protocol Enable lt tojo ro too TEP too TCP too TCP too TCP to TCP too Ter too TCP TCP TCP TCP to lo to 0 jto 0 to 0 to 0 lto l0 to 0 Be lo 0 0 o ltolo o 0 0 0 0 ee ee a a HBoaAoanoono0o000 ofolofolofolfofoso to 0 Save Settings Cancel Changes Applications and Gaming Port Range Triggering Page Description Use the descriptions and instructions in the following table to configure the port range triggering for the residential gateway Select enable for each After you make your selections click Save Settings to apply your changes or Cancel Changes to cancel Section Field Description Port Range Triggering Triggered Range Start Port For the Start port select a port from the recommended 49152 65535 range Keep in mind that ports used are program specific so check which ones the program requires to be forwarded End Port For the End port select a port from the recommended 49152 65535 range Keep in mind that ports used are program specific so check which ones the program requires to be forwarded Forwarded Range Start Port For the Start port select a port
21. selected keywords from the list Blocked Domain List Blocked Domain List Allows you to create a list of domains that the gateway should block access to Any attempt to access any of the Domains in this list will be blocked by the gateway Add Remove Domain Allows you to add new domains to the list or to delete selected domains from the list Allowed Domain List Allowed Domain List Allows you to create a list of domains to which the gateway allows access Add Remove Allowed Domain Allows you to add new domains to the list or to delete selected domains from the list 4021196 Rev C 63 Control Access to the Gateway 64 Section Field Description Override the Password Password Allows you to create a password to temporarily override user access restrictions to a blocked Internet site Re Enter Password Re enter the same password for confirmation of the override password in the previous field Access Duration Allows you to designate an amount of time in minutes that the Override password will allow temporary access to a restricted Internet site Apply Saves all additions edits and changes To use keyword and domain blocking Keyword and Domain blocking allows you to restrict access to Internet sites by blocking access to those sites based on a word or a text string contained in the URLs used to access those Internet sites Domain blocking allows you to restrict access to Websites based on the site s Domain Name T
22. that you set up a new password to safeguard against the possibility of Internet attacks that look for devices operating with well known or factory default user names and or passwords 4021196 Rev C 27 How Do Configure My DOCSIS Residential Gateway 28 Access Applications Setup Wireless Security Restrictions amp Gaming Administration Status Log OFF Managemem Reporting Diagnostics BackUp amp Restore Factory Defaults Gateway Setup WAN Internet Connection Type Connection Mode DHCP Eo MTU MTU size o Gateway Access Local Access Current User Name Change Current User Name to Change Password to Re Enter New Password SECURITY WARMING The password is currently set to the factory default password As a security measure it is highly recommended that you change the password Remote Access Remote Management Enable Disable san Management Port 8080 OEnabie disable IGMP Proxy Enable Odisable Save Settings Cancel Changes 4 Onthe Administration Management page create a User Name and Password and then click Save Settings Once you save the settings for your User Name and Password on the Administration Management page the Setup Quick Setup page opens Important You have the option to leave the password field blank factory default However if you do not change your User Name and Password you will be directed to the Administrative Management page each ti
23. the Wireless Security page The following table shows examples of the Wireless Security page with various wireless security modes selected 4021196 Rev C 39 Configure Wireless Settings Section Wireless Security 40 Wireless Security Page Description Use the following table to configure the wireless security for the residential gateway After you make your selections click Save Settings to apply your changes or Cancel Changes to cancel Field Description Wireless Security Mode Choose one of these options for the security mode WEP Wired Equivalent Privacy WEP security mode is defined in the original IEEE 802 11 standard This mode is no longer recommended because of its weak security protection Users are urged to migrate to either WPA Personal or WPA2 Personal Access Applications Setup el Security G Setup Wireless Security RESANS amp Gaming Administration S Log OFF Basic Settings Wireless Securmy MAC Filter Advanced Settings WOS Settings Goo Wireless Security Wireless Security py Mode Kae Encryption 40 64 bit 10 hex digits Wireless Passphrase Generate Key 1 0101010101 Key 2 0101010101 Key 3 0101010101 Key 4 0101010101 TX Key 1 Save Settings Cancel Changes Field Descriptions E Encryption Select a level of WEP encryption 40 64 bits 10 hex digits or 104 128 bits 26 hex digits E Wireless Passphrase To complete your wireless security set
24. 2 Click Start select Settings and choose Network and Dial up Connections Double click the Local Area Connection icon in the Network and Dial up Connections window Click Properties in the Local Area Connection Status window Click Internet Protocol TCP IP in the Local Area Connection Properties window and then click Properties Select both Obtain an IP address automatically and Obtain DNS server address automatically in the Internet Protocol TCP IP Properties window and then click OK Click Yes to restart your computer when the Local Network window opens The computer restarts The TCP IP protocol is now configured on your PC and your Ethernet devices are ready for use Try to access the Internet If you cannot access the Internet contact your service provider for further assistance Configuring TCP IP on Windows XP Systems 1 Click Start and depending on your Start menu setup choose one of the following options E If you are using the Windows XP Default Start Menu select Connect to choose Show all connections and then go to step 2 m If you are using the Windows XP Classic Start Menu select Settings choose Network Connections click Local Area Connection and then go to step 3 Double click the Local Area Connection icon in the LAN or High Speed Internet section of the Network Connections window Click Properties in the Local Area Connection Status window Click Internet Protocol TCP IP and then click Propert
25. 75 Security psk Wireless Passphrase Save Settings Cancel Changes Wireless Configuration Wi Fi Protected Setup Page Description Use the descriptions and instructions in the following table to configure the basic settings for Wi Fi Protected Setup for the residential gateway After you make your selections click Save Settings to apply your changes or Cancel Changes to cancel Section Field Description Basic Settings Enable or Disable the wireless network Wi Fi Protected Setup Configuration The Wi Fi Protected Setup feature automatically configures an encryption secured wireless network To use Wi Fi Protected Setup you must have at least one other device that supports Wi Fi Protected Setup in your network After you have configured your Wi Fi Protected Setup devices you can manually configure other devices WPS Push Button Setup Option 1 Press the Wi Fi Protected Setup button on the Basic Wireless Settings page or the button on the back panel of the gateway to register a wireless client with the gateway Press the Wi Fi Protected Setup software button on the client side at the same time as the Wi Fi Protected Setup button is pushed on the gateway The connection will be automatically set up 36 4021196 Rev C Configure Wireless Settings Section Field Description WPS Setup Using Your Wi Fi Adapter PIN Option 2 This is the most secure option to register a wireless client with the gateway You need the Wi F
26. Address Filtering Use the Access Restrictions MAC Address Filtering page to configure MAC address filters These filters permit you to allow or block a range of MAC addresses from accessing the Internet based on MAC Address Note If you are not familiar with the advanced settings detailed in this section contact your service provider before you attempt to change any of the residential gateway default advanced IP filtering settings 4021196 Rev C Control Access to the Gateway Select the MAC Address Filtering tab to open the Access Restrictions MAC Address Filtering page Access Applications Setup Wireless Security Restrictions amp Gaming Administration Status Log OFF IPAddress Filter MAC aa A a Corallog MAC Filtering MAC Addresses example 01 23 45 67 89 AB Add MAC Address Addresses entered 0 20 Remove MAC Address Clear All Cancel Changes The Block Pass drop down menu allows you to block or pass Internet access to the MAC addresses of the devices you list in the MAC Address Filters table The following table describes the function of the Block Pass drop down menu After you make your selections click Save Settings to apply your changes or Cancel Changes to cancel Field Name Description MAC Filtering Block Listed Default Select Block Listed to deny Internet access to the MAC addresses of the devices you list in the table All other MAC addresses will be allowed Internet access
27. Apafi CISCO Cisco Model DPC3825 and EPC3825 8x4 DOCSIS 3 0 Wireless Residential Gateway User Guide In This Document IMPORTANT SAFETY INSTRUCTIONS scsssissucncsnnicesissrneonssdinntosssrmenunsredeeiniysaeniass 2 Miodu GoNia a a a E 12 Wh ts Inthe Carton emiirin aieri nnr aD 14 Front Panel Description sessesssesesesesesesssssreseseseseecosesesesesesesessssssssssesesestseeseeeresesese 15 Back Panel Description 2 iusstieeianmedsbeuneidiecssssunecnbaeaaveiaieealiaataanincs 16 What Are the System Requirements for Internet Service ccceeeeeeeeeeees 18 How Do I Subscribe to High Speed Internet Service cccssssssssssseeeeeees 19 Where Is the Best Location for My DOCSIS Residential Gateway 004 20 How Do I Mount the Modem on a Wall Optional 21 How Do I Connect My Gateway for Internet Service sssesseesesesrersererseese 24 How Do I Configure My DOCSIS Residential Gateway ccccesseeeeeseeees 26 Configure Wireless SELES ccr cctaceicersanenstuaensstcicaskukartanssienenenusbecicnselensiasonexciesintenen 35 Configure Security esseisti ea a iN oa eein i K ESE a E eR aaea 51 Control Access to the Gateway sci veusosaainesscsvnesdiimnevuiadeavsnss nainciasesvonierapnnsapnavenapunetes 60 Configure Applications and Gaming esssesssssesesesessssrerisrsrssteseressentnresesessesrene 69 Manage the GateWaYeneniniiiiiserenriesi irirna aaen e eiaeia a Eia ey 75 Monitor Gateway EE US asses iesene oe
28. C with Microsoft Windows 2000 operating system or later with TCP IP protocol installed or an Apple Macintosh computer with TCP IP protocol installed E An active 10 100 1000BASE T Ethernet network interface card NIC installed 18 4021196 Rev C How Do Subscribe to High Speed Internet Service How Do Subscribe to High Speed Internet Service Before you can use your residential gateway you need to have a high speed Internet access account If you do not have a high speed Internet access account you need to set up an account with your local service provider Choose one of the options in this section Do Not Have a High Speed Internet Access Account If you do not have a high speed Internet access account your service provider will set up your account and become your Internet Service Provider ISP Internet access enables you to send and receive e mail access the World Wide Web and receive other Internet services You will need to give your service provider the following information m The serial number of the modem m The Media Access Control MAC address of the modem CM MAC E Other MAC address numbers as needed These numbers appear on a bar code label located on the residential gateway The serial number consists of a series of alphanumeric characters preceded by S N The MAC address consists of a series of alphanumeric characters preceded by CM MAC The following illustration shows a sample bar code label WAN MAC Ad
29. Cae Rule Settings Toe Keyword List anonymizer A v Add Keyword Remove Keyword Blocked Domain List Blocked Domain List a nonymizer com v a Add Domain Allowed Domain List Allowed Domain List v Add Allowed Domain Remove Allowed Domain Override the Password A 7 Password sweeeee Re Enter Password oe Access Duration 30 Apply 4021196 Rev C Control Access to the Gateway Use the descriptions and instructions in the following table to configure the access restrictions basic rules for your residential gateway After you make your selections click Save Settings to apply your changes or Cancel Changes to cancel Section Field Description Parental Control Basic Parental Control Activation Setup Allows you to enable or disable parental controls To enable parental controls select the Enable Parental Control check box and click Apply To disable parental controls clear the Enable Parental Control check box and click Apply Add Rule Adds and saves a new Rule to the list of content rules Remove Rule Removes the selected rule from the content rule list Keyword List Keyword List Allows you to create a list of keywords Any attempt to access a URL that contains any of the keywords in this list will be blocked by the gateway Add Remove Keyword Allows you to add new keywords to the list or to delete
30. Configuration window displays the Ethernet adapter information 4 Click Release and then click Renew The IP Configuration window displays a new IP address 5 Click OK to close the IP Configuration window you have completed this procedure Note If you cannot access the Internet contact your service provider for further assistance Renewing the IP Address on Windows NT 2000 or XP Systems 1 Click Start and then click Run The Run window opens 2 Type cmd in the Open field and click OK A window with a command prompt opens 3 Type ipconfig release at the C prompt and press Enter The system releases the IP address 4 Type ipconfig renew at the C prompt and press Enter The system displays a new IP address 5 Click the X in the upper right corner of the window to close the Command Prompt window You have completed this procedure Note If you cannot access the Internet contact your service provider for further assistance Q What if don t subscribe to cable TV A If cable TV is available in your area data service may be made available with or without subscribing to cable TV service Contact your local service provider for complete information on cable services including high speed Internet access Q How do arrange for installation A Call your service provider to inquire about professional installation A professional installation ensures proper cable connection to the modem and to your PC and it ensures the pr
31. GMP forwarding proxying is a system that improves multicasting for LAN side clients If the clients support this option keep the default Enable Otherwise select Disable 4021196 Rev C Manage the Gateway Administration gt Reporting Administration reporting allows you to email various system activities to your email address Select the Reporting tab to open the Administration Reporting page Access Applications S ss Security x 7 s al Setup Wireless Security Restrictions amp Gaming Administration Status Log OFF Management Renaming Diagnostics BackOpe Restore Reporting E Mail Alerts O Enable Disable SMTP Mail Server E Mail Address for Alert Logs Save Settings Cancel Changes Use the descriptions and instructions in the following table to configure the reporting feature on the gateway After you make your selections click Save Settings to apply your changes or Cancel Changes to cancel Section Field Description Reporting E Mail Alerts If enabled an e mail will be sent immediately if any reportable events are detected To use this feature provide the necessary e mail address information SMTP Mail Server Enter the address domain name or IP address of the Simple Mail Transport Protocol SMTP server you use for outgoing e mail E Mail Address for Alert Logs Enter the e mail address that should receive the logs 4021196 Rev C 79 Manage the Gateway View Log To view the lo
32. Gaming Administration Status Log OFF Setup Wireless Security Quick Setup LanSetap DONS Network Setup LAN Local IP Address 192 168 0 41 Subnet Mask 255 255 255 0 Gateway IP Warning Changes to LAN IP network settings may require reconfiguration of all attached devices Some network devices may be out of service until the change is detected Network Address DHCP Server Server Settings DHCP Enable Disable Connected Devices Summary f Pre assigned DHCP IP Addresses Starting IP Address 192 168 10 10 Maximum Number of DHCP Users Client Lease Time eo minutes 0 means one day LAN 1 Static DNS 1 LAN 1 Static DNS 2 LAN 1 Static DNS 3 Time Zone ei Se ANE C GMT Greenwich Mean Time Dublin Edinburgh Lisbon London Automatically adjust clock for daylight saving time Save Settings Cancel Changes Configuring Your Network Settings Use the descriptions and instructions in the following table to configure the network settings for your residential gateway After you make your selections click Save Settings to apply your changes or click Cancel Changes to cancel Section Field Description Network Setup Local IP Address EAN The base IP address of the private home LAN The factory default Gateway IP LAN IP Address is 192 168 0 1 Subnet Mask The subnet mask for your LAN 31 How Do I Configure My DOCSIS Residential Gateway 32 S
33. O DESCARGA EL CTRICA NO EXPONGA LA UNIDAD A LA LLUVIA O A LA HUMEDAD Este s mbolo tiene como fin alertarle de la presencia de importantes instrucciones de operaci n y mantenimiento revisi n contenidas en la literatura que acompa a al producto 20080814_Installer820_Intl IMPORTANT SAFETY INSTRUCTIONS IMPORTANT SAFETY INSTRUCTIONS 1 Read these instructions 2 Keep these instructions 3 Heed all warnings 4 Follow all instructions 5 Do not use this apparatus near water 6 Clean only with dry cloth 7 Do not block any ventilation openings Install in accordance with the manufacturer s instructions 8 Do not install near any heat sources such as radiators heat registers stoves or other apparatus including amplifiers that produce heat 9 Do not defeat the safety purpose of the polarized or grounding type plug A polarized plug has two blades with one wider than the other A grounding type plug has two blades and a third grounding prong The wide blade or the third prong are provided for your safety If the provided plug does not fit into your outlet consult an electrician for replacement of the obsolete outlet 10 Protect the power cord from being walked on or pinched particularly at plugs convenience receptacles and the point where they exit from the apparatus 11 Only use attachments accessories specified by the manufacturer 12 Use only with the cart stand tripod bracket or table specified by t
34. Personal as the security mode for your home network depending on which mode is supported by the wireless adapter in your PC or wireless clients WPA Personal aka WPA PSK or WPA Pre Shared Key provides a more secure wireless network that WEP WPA Personal introduces TKIP user authentication and stronger encryption keys than WEP WPA2 Personal aka WPA2 PSK or WPA2 Pre Shared Key provides the most secure standards based wireless networking WPA2 Personal incorporates AES Advanced Encryption Standard for data transmission Note Not all wireless adapters support WPA2 WPA is supported across a wider range of devices Whether you use WPA or WPA2 make sure to use a strong passphrase A strong passphrase is a string of random characters at least 21 characters in length Select from one of the following three WPA or WPA2 Personal modes E WPA Personal E WPA2 Personal E WPA or WPA2 Personal Access Applications Si Q eless Security He Setup varens Security Restrictions amp Gaming Administration Status Log OFF Basic Settings Wireless Secumy MAC Filter Advanced Settings WDS Settings oS Wireless Security Wireless Security Mode WPA Personal N Encryption AES v Pre Shared Key 222596078 Key Renewal 3600 seconds Save Settings Cancel Changes Field Descriptions E Encryption The default is TKIP AES E Pre Shared Key Enter a key of 8 to 63 characters E Key Renewal Enter a Key Renewal period which i
35. Rev C 37 Configure Wireless Settings 38 Section Basic Settings Field Description Wireless Network Enable or Disable the wireless network Wireless Configuration The default is WPS See Wi Fi Protected Setup WPS on page 35 for more information about using WPS Select Manual to manually set up your network using this option Network Mode Choose one of these options for the network mode G only B G Mixed B G N Mixed factory default Important When TKIP authentication only is selected B G N Mixed network mode is not available Radio Band Select Enabled 2 4GHz factory default or Enabled 5GHz Note The 5GHz radio band may not be supported on some models Channel Width Choose Standard 20 MHz Channel or Wide 40 MHz Channel Standard Channel Select one of the channels from the drop down list to correspond with your network settings All devices in your wireless network must broadcast on the same channel in order to communicate You can select Auto factory default for automatic channel selection 4021196 Rev C Configure Wireless Settings Section Field Description Wireless Network Name SSID The SSID is the name of your wireless network The SSID is used by wireless technology to identify your network from other wireless networks in the area The SSID can be up to 32 characters long The factory default SSID is typically the last 6 characters of the CM MAC address found on the rating label located on the
36. TION RISK OF ELECTRIC SHOCK DO NOT OPEN CAUTION To reduce the risk of electric shock do not remove cover or back No user serviceable parts inside Refer servicing to qualified service personnel WARNING TO PREVENT FIRE OR ELECTRIC SHOCK DO NOT EXPOSE THIS UNIT TO RAIN OR MOISTURE This symbol is intended to alert you of the presence of important operating and maintenance servicing instructions in the literature accompanying this product Les instructions relatives aux interventions d entretien fournies dans la pr sente notice s adressent exclusivement au personnel technique qualifi Pour r duire les risques de chocs lectriques n effectuer aucune intervention autre que celles d crites dans le mode d emploi et les instructions relatives au fonctionnement moins que vous ne soyez qualifi pour ce faire Remarque a l attention de l installateur du syst me Avec cet appareil le blindage cran du c ble coaxial doit tre mis la terre aussi pr s que possible du point d entr e du c ble dans le b timent En ce qui conceme les produits vendus aux tats Unis et au Canada ce rappel est foumi pour attirer l attention de l installateur sur les articles 820 93 et 820 100 du Code national de l lectricit ou Code de l lectricit canadien Partie 1 qui fournissent des lignes directrices concemant la mise la terre correcte du blindage cran du c ble coaxial Ce symbole a pour but de vous pr v
37. Wireless ecurity Restrictions amp Gaming Administration Status Lag OFF Managemem Reporting Diagnostics BackUp amp Restore Gateway Setup WAN Internet Connection Type Connection Mode DHCP v MTU MTU size 0 Gateway Access Local Access Current User Name user Change Current User Name to Change Password to Re Enter New Password Remote Access Remote Management Enable Disable Management Port 6080 UPnP O Enabie disable IGMP IGMP Proxy Enable disable Save Settings Cancel Changes Administration Management Page Description Use the descriptions and instructions in the following table to configure the administration management for the residential gateway when DHCP or Static IP connection mode is selected After you make your selections click Save Settings to apply your changes or Cancel Changes to cancel 4021196 Rev C 75 Manage the Gateway Field Gateway Setup WAN Description Connection Mode This setting allows you to determine how the WAN or gateway interface to the Internet obtains its IP address Internet Connection DHCP factory default Type 76 Allows the gateway to obtain a public IP address automatically Setup Wireless Management Reporting Gateway Setup WAN Internet Connection Type MTU Gateway Access Local Access Remote Access UPnP IGMP Static IP Security Diar Back Up amp Connectio
38. a repeater Remote Access Point s MAC Address MAC 1 MAC 2 MAC 3 Save Settings Cancel Changes Wireless WDS Settings Page Description Use the descriptions and instructions in the following table to configure the wireless distribution system settings for your residential gateway After you make your selections click Save Settings to apply your changes or Cancel Changes to cancel Section Field Description WDS WDS MAC Address Displays the WDS MAC Address or BSSID of your gateway access point Allow Wireless Signal To Be Repeated by a Repeater Check this box to allow a wireless client to connect to a repeater and route traffic between the wireless client and a repeater A maximum of 3 repeaters are allowed Remote Access Point s MAC Address MAC 1 through 3 Use the three fields MAC 1 2 and 3 to enter the MAC address of the repeaters 48 4021196 Rev C 4021196 Rev C Configure Wireless Settings Wireless gt QoS Quality of Service QoS ensures better service to high priority types of network traffic which may involve demanding real time applications such as video conferencing QoS settings allow you to specify priorities for different types of traffic Lower priority traffic will be slowed down to allow greater throughput or less delay for high priority traffic Select the QoS tab to open the Wireless QoS page Access Applications Setup ire Sec J Setup aniona Security Restrictions amp Gaming
39. ade any changes click Save Settings to first apply your changes Disconnect Click this button to break a connection for the current VPN tunnel View Log Click this button to view the VPN log which shows details of each established tunnel Advanced Settings If the Key Exchange Method is Auto IKE this button provides access to additional settings relating to IKE Click this button if the gateway is unable to establish a VPN tunnel to the remote gateway and make sure the Advanced Settings match those on the remote gateway E Phase 1 Operation Mode Select the method appropriate for the remote VPN endpoint Main Main mode is slower but more secure Aggressive Aggressive mode is faster but less secure E Local Identity Select the desired option to match the Remote Identity setting at the other end of this tunnel Local IP Address Your WAN Internet IP address Name Your domain name E Remote Identity Select the desired option to match the Local Identity setting at the other end of this tunnel Local IP Address WAN Internet IP address of the remote VPN endpoint Name Domain name of the remote VPN endpoint E Encryption This is the Encryption algorithm used for the IKE SA It must match the setting used at the other end of the tunnel 4021196 Rev C 4021196 Rev C Configure Security View Log The Security VPN View Log page shows events captured by the firewall The log displays the
40. and configuration for the residential gateway 1 Choose an appropriate and safe location to install the residential gateway close to a power source an active cable connection your PC if using high speed Internet A WARNING E To avoid personal injury follow the installation instructions in the exact order shown E Wiring and connections must be properly insulated to prevent electrical shock E Disconnect power from the residential gateway before attempting to connect to any device 2 Power off your PC and other networking device then unplug them from the power source 24 4021196 Rev C How Do Connect My Gateway for Internet Service 3 Connect the active RF coaxial cable from your service provider to the coax connector labeled CABLE on the back of the residential gateway Note To connect a TV DHCT set top or VCR from the same cable connection you will need to install a cable signal splitter not included Always check with your service provider before using a splitter as a splitter may degrade the signal 4 Connect your PC to the residential gateway using either of the following methods E Ethernet Connection Locate the yellow Ethernet cable connect one end of the Ethernet cable to the Ethernet port on your PC and connect the other end to the yellow ETHERNET port on the back of the residential gateway Note To install more Ethernet devices than ports provided on the residential gateway use an external mu
41. arton contains the following items One of the DOCSIS Residential One wall mount style power adapter Gateway models DPC3825 or models requiring external power EPC3825 supply OR One desktop style power adapter models requiring external power supply One Ethernet cable CAT5 RJ 45 One CDROM If any of these items are missing or damaged please contact your service provider for assistance Note You will need an optional cable signal splitter and additional standard RF coaxial cables if you want to connect a VCR a Digital Home Communications Terminal DHCT or a set top converter or a TV to the same cable connection as your wireless residential gateway 4021196 Rev C Front Panel Description Front Panel Description The front panel of your residential gateway provides LED status indicators that indicate how well and at what state your residential gateway is operating See Front Panel LED Status Indicator Functions on page 96 for more information on front panel LED status indicator functions 714565 123 4 5 Model DPC3825 shown here 1 POWER ON power is applied to the wireless residential gateway 2 DS ON the wireless residential gateway is receiving data from the cable network 3 US On the wireless residential gateway is sending data to the cable network 4 ONLINE ON the wireless residential gateway is registered on the network and fully operational 5 ETHERNET 1 4 ON a device is con
42. assword Enter the selected user s password in this field Each user must enter their User Name and Password each time they use the Internet User names and passwords are case sensitive Note The residential gateway will allow each user access to the Internet subject to the rules selected on this page for that user Re Enter Password Re enter the same password for confirmation of the password in the previous field Trusted User Check this box if the currently selected user is to be designated a trusted user Trusted users are not subject to Internet access rules Content Rule Select the Content Rule for the current user profile Content Rules must first be defined by going to the Rules Configuration page You can access the Rule Configuration page by clicking on the Basic Rules tab on this page Time Access Rule Select the Time Access Rule for the current user profile Time Access Rules must first be defined by going to the Time of Day Rules page You can access the Time of Day Rules page by clicking on the Time of Day Rules tab on this page Session Duration 1440 minutes Factory default when a user is created Otherwise it is 0 zero Enter the amount of time in minutes that the user will be granted Internet access beginning at the time they sign on using their User Name and Password Note Set the Session Duration to 0 zero to prevent session timeout 67 Control Access to the Gateway 68 Section Fi
43. ate networks This is accomplished by creating a VPN tunnel A VPN tunnel connects the two PCs or networks and allows data to be transmitted over the Internet as if it were on a private network The VPN tunnel uses IPsec to encrypt the data sent between the two endpoints and encapsulate the data within a normal Ethernet IP frame allowing the data to pass between networks securely and seamlessly A VPN provides a cost effective and more secure alternative to using a private dedicated leased line for a private network Using industry standard encryption and authentication techniques an IPsec VPN creates a secure connection that operates as if you were directly connected to your local private network For example a VPN allows users to sit at home and connect to his her employer s corporate network and receive an IP address in their private network just as though they were sitting in their office connected to their corporate LAN Select the VPN tab to open the Security VPN page Use this page to configure the VPN for your residential gateway Access Applications Restrictions amp Gaming Administration Status Log OFF Setup Wireless Security Firewall YPN Passthrougn PN VPN Tunnel Select Tunnel Entry Tunnel list is EMPTY Create Delete Summary IPSec VPN Tunnel Enable Disable Tunnel Name Local Secure Group Subnet J Remote Secure Group Remote Secure Gateway P Adar Key Management Key Exchange Method
44. atus Log OFF Back Up onfiguration Select a file to restore Field Description Back Up Configuration Use the Back Up Configuration feature to save a copy of the current configuration and store the file on your computer Click Back Up to start the download Configuration Use the Restore Configuration feature to restore a previously saved configuration file Click Browse to select the configuration file and then click Restore to load the configuration file to the device 4021196 Rev C 4021196 Rev C Manage the Gateway Administration gt Factory Defaults The Administration Factory Defaults page allows you to restore the configuration to its factory default settings Select the Factory Defaults tab to open the Administration Factory Defaults page A CAUTION If you restore the factory defaults the gateway will lose all of the settings you have entered Before you reset the gateway to its factory default settings write down all of your custom settings After the defaults have been restored you will have to re enter all of your configuration settings se Access Applications S S Ss ation Statu a eee eer Restrictions amp Gaming OEN zi Management Reporting Diagnostics BackUp amp Restore Factory Defaults Factory Defaults Restore Factory Defaults Restore Factory Defaults To restore factory defaults click Restore Factory Defaults to reset all configuration settings to their default valu
45. auja no Elektronisko sakaru direkcijas Vair k inform cijas http www esd lv Note The regulatory limits for maximum output power are specified in EIRP The EIRP level of a device can be calculated by adding the gain of the antenna used specified in dBi to the output power available at the connector specified in dBm Antennas Use only the antenna supplied with the product 20090312 CE_Gateway Introduction Introduction Welcome to the exciting world of high speed Internet service Your new Cisco Model DPC3825 DOCSIS 3 0 or EPC3825 EuroDOCSIS Wireless Residential Gateway is a cable modem that meets industry standards for high speed data connectivity The DPC3825 and EPC3825 residential gateway delivers data and wired Ethernet or wireless gateway capabilities to connect a variety of devices in the home or small office and support high speed data access all in one device With a DPC3825 or EPC3825 residential gateway your Internet enjoyment home and business communications and personal productivity will surely soar This guide provides procedures and recommendations for placing installing configuring operating and troubleshooting your DPC3825 and EPC3825 residential gateway for high speed Internet for your home or office Refer to the appropriate section in this guide for the specific information you need for your situation Contact your service provider for more information about subscribing to these services Benef
46. claimer Cisco Systems Inc assumes no responsibility for errors or omissions that may appear in this publication We reserve the right to change this publication at any time without notice This document is not to be construed as conferring by implication estoppel or otherwise any license or right under any copyright or patent whether or not the use of any information in this document employs an invention claimed in any existing or later issued patent The maximum performance for wireless is derived from IEEE Standard 802 11 specifications Actual performance can vary including lower wireless network capacity data throughput rate range and coverage Performance depends on many factors conditions and variables including distance from the access point volume of network traffic building materials and construction operating system used mix of wireless products used interference and other adverse conditions Copyright 2010 2012 Cisco and or its affiliates All rights reserved Printed in the United States of America Information in this publication is subject to change without notice No part of this publication may be reproduced or transmitted in any form by photocopy microfilm xerography or any other means or incorporated into any information retrieval system electronic or mechanical for any purpose without the express permission of Cisco Systems Inc 4021196 Rev C 4021196 Rev C Notices Software and Firmware Us
47. ct is used outdoors in the band 2454 2483 5 MHz There are no restrictions when used in other parts of the 2 4 GHz band Check http www arcep fr for more details Pour la bande 2 4 GHz la puissance est limit e 10 mW en p i r e pour les quipements utilis s en ext rieur dans la bande 2454 2483 5 MHz Il n y a pas de restrictions pour des utilisations dans d autres parties de la bande 2 4 GHz Consultez http www arcep fr pour de plus amples d tails Italy This product meets the National Radio Interface and the requirements specified in the National Frequency Allocation Table for Italy Unless this wireless LAN product is operating within the boundaries of the owner s property its use requires a general authorization Please check http www comunicazioni it it for more details Questo prodotto conforme alla specifiche di Interfaccia Radio Nazionali e rispetta il Piano Nazionale di ripartizione delle frequenze in Italia Se non viene installato all interno del proprio fondo l utilizzo di prodotti Wireless LAN richiede una Autorizzazione Generale Consultare http www comunicazioni it it per maggiori dettagli 4021196 Rev C 4021196 Rev C IMPORTANT SAFETY INSTRUCTIONS Latvia The outdoor usage of the 2 4 GHz band requires an authorization from the Electronic Communications Office Please check http www esd lv for more details 2 4 GHz frekven u joslas izmanto anai rpus telp m nepiecie ama at
48. cualificado Con el fin de reducir el riesgo de descarga el ctrica no realice ninguna otra operaci n de reparaci n distinta a las contenidas en las instrucciones de funcionamiento a menos que posea la cualificaci n necesaria para hacerlo Nota para el instalador del sistema En lo que se refiere a este aparato el blindaje del cable coaxial debe conectarse a tierra lo m s cerca posible al punto por el cual el cable entra en el edificio En el caso de los productos vendidos en los EE UU y Canad el presente aviso se suministra para llamar la atenci n del instalador del sistema sobre los Articulos 820 93 y 820 100 del NEC o C digo El ctrico de Canad Parte 1 que proporcionan directrices para una correcta conexi n a tierra del blindaje del cable coaxial Este s mbolo tiene como fin advertirle de que una tensi n sin aislamiento en el interior de este producto podr a ser de una magnitud suficiente como para provocar una descarga el ctrica Por consiguiente resulta peligroso realizar cualquier tipo de contacto con alguno de los componentes intemos de este producto CAUTION RISK OF ELECTRIC SHOCK ATENCION RIESGO DE DESCARGA ATENCI N con el fin de reducir el riesgo de descarga el ctrica no retire la tapa ni la parte posterior No existen en el interior componentes que puedan ser reparados porel usuario Encargue su revisi n a personal de mantenimiento cualificado ADVERTENCIA PARA EVITAR EL RIESGO DE INCENDIO
49. dress wove orcas i lI MODEM No 160160se DOCSIS 3 0 GATEWBY USB MAC 001CEA880F39 of vel le Bn 4094138 WAN MAC 001CEA880F3B CISCO input 15V 1 2A PAVIA HW 1 0 MADE IN CHINA rece X A NE NIE oso 2 M MAC 001CEA880F3 aed Date of mfg 05 06 NMIUIIII Serial Number CM MAC Address 14567 Write down these numbers in the space provided here Serial Number MAC Address Already Have an Existing High Speed Internet Access Account If you have an existing high speed Internet access account you must give your service provider the serial number and the MAC address of the residential gateway Refer to the serial number and MAC address information listed previously in this section 4021196 Rev C 19 Where Is the Best Location for My DOCSIS Residential Gateway Where Is the Best Location for My DOCSIS Residential Gateway 20 The ideal location for your residential gateway is where it has access to outlets and other devices Think about the layout of your home or office and consult with your service provider to select the best location for your residential gateway Read this user guide thoroughly before you decide where to place your residential gateway Consider these recommendations Choose a location close to your computer if you will also use the residential gateway for high speed Internet service E Choose a location that is near an existing RF coaxial connection to eliminate the need for an additi
50. e The software described in this document is protected by copyright law and furnished to you under a license agreement You may only use or copy this software in accordance with the terms of your license agreement The firmware in this equipment is protected by copyright law You may only use the firmware in the equipment in which it is provided Any reproduction or distribution of this firmware or any portion of it without our express written consent is prohibited 101 For Information For Information If You Have Questions If you have technical questions call Cisco Services for assistance Follow the menu options to speak with a service engineer 102 4021196 Rev C For Information 4021196 Rev C 103 Afafe CISCO Cisco Systems Inc 678 277 1120 5030 Sugarloaf Parkway Box 465447 800 722 2009 Lawrenceville GA 30042 www cisco com This document includes various trademarks of Cisco Systems Inc Please see the Notices section of this document for a list of the Cisco Systems Inc trademarks used in this document Product and service availability are subject to change without notice 2010 2012 Cisco and or its affiliates All rights reserved May 2012 Printed in USA PartNumber 4021196 Rev C
51. e minimum separation distance from the antenna to general bystander is 7 9 inches 20 cm to maintain compliance Canada This system has been evaluated for RF exposure for humans in reference to ANSI C 95 1 limits The evaluation was based on evaluation per RSS 102 Rev 2 The minimum separation distance from the antenna to general bystander is 7 9 inches 20 cm to maintain compliance EU This system has been evaluated for RF exposure for humans in reference to the ICNIRP International Commission on Non lonizing Radiation Protection limits The evaluation was based on the EN 50385 Product Standard to Demonstrate Compliance of Radio Base Stations and Fixed Terminals for Wireless Telecommunications Systems with basic restrictions or reference levels related to Human Exposure to Radio Frequency Electromagnetic Fields from 300 MHz to 40 GHz The minimum separation distance from the antenna to general bystander is 20 cm 7 9 inches Australia This system has been evaluated for RF exposure for humans as referenced in the Australian Radiation Protection standard and has been evaluated to the ICNIRP International Commission on Non Ionizing Radiation Protection limits The minimum separation distance from the antenna to general bystander is 20 cm 7 9 inches 20091016 FCC DSL_Dom and Intl 4021196 Rev C IMPORTANT SAFETY INSTRUCTIONS CE Compliance Declaration of Conformity with Regard to the EU Directive 1999 5 EC R amp TTE Directive
52. e the diagnostics feature on the gateway After you make your selections click Save Settings to apply your changes or Cancel Changes to cancel Section Field Description Ping Test Ping Test Parameters Ping Target IP The IP address that you want to ping Ping Size The size of the packet you want to use Number of Pings The number of times you wish to ping the target device Ping Interval The time period milliseconds between each ping Ping Timeout The desired time period milliseconds of the timeout If no response is received within this ping period the ping test is considered a failure Start Test To start a test complete the following steps 1 Click Start Test to begin the text A new page opens and displays a summary of the test results 2 Click the Save Settings to save the test results or click Cancel Changes to cancel the test 81 Manage the Gateway 82 Administration gt Backup amp Restore Administration Backup amp Restore allows you to back up you configuration of the Gateway and store it on your computer You can use this file to restore a previously saved configuration for your Gateway Select the Back Up amp Restore tab to open the Administration Back Up amp Restore page A Setup Restore C Section Restore CAUTION Restoring a configuration file will destroy overwrite all of the existing settings Access Applications ec aahi Restrictions amp Gaming Administration St
53. ection Network Address Server Settings DHCP Field Description DHCP Server Allows you to enable or disable the DHCP server in the residential gateway The DHCP server is used to automatically allocate IP addresses to devices as they are attached to your home network E Connected Devices Summary page Click Connected Devices Summary in the Lan Setup page The Connected Devices Summary page opens This page is a pop up window that displays the MAC Address and IP Address of the devices that are connected to the residential gateway Connected Devices Summary Connected Devices Summary Connected to MAC Address Assign IP Address Eth Switch Lan 4 00 15 58 7E 4B 41 192 168 0 10 802 11 RF WiFi O 00 1F 3C CD C 7 FE 192 168 0 11 E Pre assigned DHCP IP Addresses page Click Pre assigned DHCP IP Addresses in the Lan Setup page The Pre assigned DHCP IP Addresses page opens This page allows you to assign a specific IP address to a PC or other device when they request an IP address using DHCP Only addresses within the range of the gateway s DHCP address pool can be reserved with this feature Pre aan pd resses Pre assigned DHCP IP Addresses MAC Address Assign to IP MAC Address IP Address Status 00 15 58 7e 4b 41 lt gt 192 168 010 Active 00 1f 3 cd c7 fe lt gt 192 168 011 Active Remove Static IP Notes The Add Static IP button adds the Static IP address to the list of pre assigned IP addresse
54. eld Description Inactivity Time 60 minutes Factory default when a user is created Otherwise it is 0 zero Enter the amount of time during a user session where there is no Internet access activity indicating that the user is no longer online If the inactivity timer is triggered the user session will be closed automatically In order to regain Internet access the user must log in again with their User Name and Password Note Set the Inactivity time value to 0 zero to prevent session timeout Access Restrictions gt Local Log This page allows you to track by user any attempts made by that user to access Internet sites that are restricted From this page you can also view events captured by the parental control event reporting feature Select the Local Log tab to open the Access Restrictions Local Log page The following illustration is an example of the Access Restrictions Local Log page Access Applications Setup Wireless Security Restrictions amp Gaming Administration Status Log OFF IP Address Filtering MAC Address Filtering Basic Rules Time of Day Rules UserSetup igealiog itr LETE Parental Control Event Log ast z RA action Target User Source Section Field Description Local Log Last Occurence Parental Control Event Displays the time of the most recent attempt to access a Log restricted Internet site Action Displays the action taken by the system Target Displays the URL of the restr
55. enir que des tensions lectriques non isol es existent l int rieur de ce produit pouvant tre d une intensit suffisante pour causer des chocs lectriques Il est donc dangereux d tablir un contact quelconque avec l une des pi ces comprises l int rieur de ce produit CAUTION DO NOT OPEN ATTENTION NE PAS OUVRIR ATTENTION Pour r duire les risques de chocs lectriques ne pas enlever le couvercle ou le panneau arri re Ne contient aucune pi ce r parable par l utilisateur Confier les interventions aux techniciens d entretien qualifi s AVERTISSEMENT POUR VITER LES INCENDIES OU LES CHOCS LECTRIQUES NE PAS EXPOSER L APPAREIL LA PLUIE OU L HUMIDIT Ce symbole a pour but de vous pr venir de la pr sence d instructions importantes relatives au fonctionnement ou l entretien et aux r parations dans la documen tation accompagnant ce produit 4021196 Rev C 4021196 Rev C IMPORTANT SAFETY INSTRUCTIONS Mitteilung fur CATV Techniker Die in dieser Mitteilung aufgef hrten Wartungsanweisungen sind ausschlie lich fiir qualifiziertes Fachpersonal bestimmt Um die Gefahr eines elektrischen Schlags zu reduzieren sollten Sie keine Wartungsarbeiten durchf hren die nicht ausdr cklich in der Bedienungsanleitung aufgef hrt sind aufer Sie sind zur Durchf hrung solcher Arbeiten qualifiziert Mitteilung an den Systemtechniker F r dieses Ger t muss der Koaxialkabelschutz Schirm so nahe wie m g
56. er Setup page Access Applications Setup Wireless Security Reaivictions amp Gaming Administration Status Lag OFF IPAddress Filtering MAC Address Filtering Basic Rules Time of Day Rules isersSemp Cocal Cog User Configure User Settings 1 Defaut C Enabie Remove User Password Re Enter Password Trusted User Enable Content Rule 1 Default Time Access Rule Session Duration Inactivity time Save Settings Cancel Changes 4021196 Rev C Control Access to the Gateway Access Restrictions User Setup Page Description Use the descriptions and instructions in the following table to configure the user setup for your residential gateway After you make your selections click Save Settings to apply your changes or Cancel Changes to cancel Section User Configure 4021196 Rev C Field Description Add User Allows you to add a new user profile Enter the name of the user and click the Add User button to add the user to the list User Settings Allows you to edit a user profile by using the drop down menu to edit a user profile The drop down menu allows you to recall the profile to be edited User names and passwords are case sensitive Make sure to check the Enable box to activate the user profile If a profile is not active that user will not have any access to the Internet To remove a user profile use the drop down menu to select the user to be removed and click the Remove User button P
57. es Any settings you have saved will be lost when the default settings are restored 83 Monitor Gateway Status Monitor Gateway Status 84 This section describes the options available under the Status tab that you can use to monitor the status of the residential gateway and to perform diagnostics on the device and the network Status gt Gateway The Gateway Status page displays information about the gateway and its current settings The on screen information varies depending on the Internet Connection type you use Select the Gateway tab to open the Status Gateway screen Click Refresh to update the data displayed on screen Access Applications Restrictions amp Gaming Setup Wireless Security Administration Status Log OFF pateway Local Network Wireless DOCSIS WAN Gateway Information Firmware Version epce3825 ESIP 16 v302112911 091029 MAC Address 00 22 3a ce d8 75 Current Time Mon Jan 25 21 18 14 2010 Internet Connection IP Address 10 13 1 43 Subnet Mask 255 255 248 0 Default Gateway 10 13 0 1 DNS 1 DNS 2 DNS 3 192 168 19 227 0 1 255 255 0 0 0 0 Refresh Use the descriptions in the following table to review the status of your gateway and your Internet connection Section Gateway Information Field Description Firmware Version The version number of the firmware MAC Address CM MAC Address A unique alphanumeric address for the cable modem coaxial interface which
58. et Mask Enter the gateway s subnet mask as seen from the Internet including your service provider Default Gateway Enter the default gateway of the service provider s server Primary DNS Enter the primary domain name server IP address es provided by your service provider This is required Secondary DNS Enter the secondary domain name server IP address es provided by your service provider This is optional MTU size MTU is the Maximum Transmission Unit The MTU size specifies the largest packet size permitted for Internet transmission The factory default 0 1500 bytes Current User Name Identifies the currently logged in user Change Current User Name to This field allows you to change your user name If you want to change your user name enter your new user name in this field and click Save Settings to apply the change Note The factory default user name is a blank field Change Password to This field allows you to change your password If you want to change your password enter your new password in this field Then re enter your new password in the Re Enter New Password field and click Save Settings to apply the change Note The factory default password is a blank field Re Enter New Password Allows you to re enter the new password You must enter the same password as the one entered in the previous field Change Password to After you re enter your new password click Save Settings to apply the change
59. filter proxy If local users have access to WAN proxy servers they may be able to circumvent the content filters and access Internet sites blocked by the device If you select the Filter Proxy feature it will block access to any WAN proxy servers Block Pop Up Windows Enables disables popup windows Some commonly used applications employ popup windows as part of the application If you disable popup windows it may interfere with some of these applications Block Web Page Cookies Enables disables cookie blocking This feature filters the unsolicited delivery of cookies to devices from the Internet to devices in your private local network Cookies are computer files that contain personal information or web surfing behavior data Block Java and ActiveX Scripts Enables disables java applets and ActiveX scripts This feature helps to protect the devices in your private network from irritating or malicious Java applets that are sent unsolicited to devices in your private network from the Internet These applets run automatically when they are received by a PC Java is a programming language for websites If you select the Filter Java Applets feature you may not have access to Internet sites created using this programming language This feature also helps to protect the devices in your private network from irritating or malicious ActiveX controls that are sent unsolicited to devices in your private network from the Internet These Ac
60. following items E Description of the event E Number of events that have occurred E Last occurrence of an event E Target and source addresses You can view the following logs from this page E Access log E Firewall log mE VPN log Parental Control log Type Firewall Log v Description Count ERE Target Source Thu Jan 01 4 00 00 54 192 168 0 1 80 64 100 106 97 1332 1970 LAN side SYN Flood Click Clear to clear the log data 59 Control Access to the Gateway Control Access to the Gateway 60 Access Restrictions gt IP Address Filtering Use the Access Restrictions IP Filtering page to configure IP address filters These filters block a range of IP addresses from accessing the Internet Note If you are not familiar with the advanced settings detailed in this section contact your service provider before you attempt to change any of the residential gateway default advanced IP filtering settings Select the IP Address Filtering tab to open the Access Restrictions IP Address Filtering page After you make your selections click Save Settings to apply your changes or Cancel Changes to cancel Access Applications c Setup Wireless Security Restrictions amp Gaming Administration Status Log OFF SSERGEI MAC Address Filtering Basic Rules Timeo Day Riles Usersetup Cocaflog IP Filtering Access Restrictions gt MAC
61. from the recommended 49152 65535 range Keep in mind that ports used are program specific so check which ones the program requires to be forwarded 4021196 Rev C Configure Applications and Gaming Section Field Description End Port For the End port select a port from the recommended 49152 65535 range Keep in mind that ports used are program specific so check which ones the program requires to be forwarded Protocol Select one of the following protocols TCP UDP E Both Enable Click the Enable checkbox to enable port range triggering for the relevant application Applications amp Gaming gt DMZ Use this page to configure an IP address whose ports are directly exposed to the public Internet or to the Wide Area Network WAN Demilitarized Zone DMZ hosting is commonly referred to as exposed host and allows you to specify a recipient of WAN traffic that Network Address Translation NAT is unable to translate to a known local PC A DMZ is typically used by a company that wants to host its own Internet server DMZ allows one IP address to be placed on the Internet side of the gateway firewall while others remain protected behind the firewall The DMZ allows a device to be directly accessible to Internet traffic such as a web HTTP server an FTP server an SMTP e mail server and a domain name system DNS server Select the DMZ tab to open the Applications amp Gaming DMZ page Access Applications Set
62. gs complete the following steps 1 Click View Log A new window opens with the log data page Type Firewallog Y B Aes Last Description Count ERR Target Source Thu Jan 01 4 00 00 54 192 168 0 1 80 64 100 106 97 1332 1970 LAN side SYN Flood 2 To view a particular log select one of the following options from the Type drop down menu E All E Access Log E Firewall Log E VPN Log 3 After the log data is displayed use one of the following options E Click the Page Refresh button to update the log E Click the Clear button to clear all the information in the current log E Click the Previous Page button to go back to the information previously displayed E Click the Next Page button to see the next section of the log if available 80 4021196 Rev C 4021196 Rev C Manage the Gateway Administration gt Diagnostics Administration diagnostics allow you to check the status of your Internet connection by using a Ping test Select the Diagnostics tab to open the Administration Diagnostics page Access Applications She pein Restrictions amp Gaming Administration Status Log OFF Management Reporting piagnosti BackUp E Restore Ping Test Ping Test Parameters Ping Target IP Ping Size Number of Pings 3 Range 1 100 Ping Interval 1000 milliseconds Ping Timeout 1000 milliseconds Start Test Use the descriptions and instructions in the following table to configur
63. hackers and protects the home network from unauthorized access Use this page to configure a firewall that can filter out various types of unwanted traffic on the gateway s local network Select the Firewall tab to open the Security Firewall page Access Applications i s amp G etup Wireless seeney Restrictions amp Gaming Administration Status Log OFF Firewall PN Passthrough VPN Firewall SPI Firewall Protection Enable Disable o Filter Proxy o Block Pop Up Windows C Block Web Page Cookies C Block Java and ActiveX Scripts C Block fragmented IP packets C Block Port Scan Detection Y Block IP Flood Detection Block WAN Requests V Block Anonymous Internet Requests Save Settings Cancel Changes Use the descriptions and instructions in the following table to configure the firewall for your residential gateway After you make your selections click Save Settings to apply your changes or Cancel Changes to cancel Section Field Description Firewall SPI Firewall Protection SPI Firewall Protection blocks Denial of Service DoS attacks A DoS attack does not attempt to steal data or damage your computers but it overloads your Internet connection so you cannot use it Select the desired option E Enable factory default E Disable 4021196 Rev C 51 Configure Security 52 Section Filters Block WAN Requests Field Description Filter Proxy Enables disables
64. he Domain Name is the portion of the URL that precedes the familiar COM ORG or GOV extension Keyword blocking allows you to block access to Internet sites based on a Keyword or text string being present anywhere in the URL not just in the Domain Name Note The Domain blocking feature blocks access to any Domain in the Domain List It will also block Domains any portion of which contains an exact match to entries in the list For example if you enter example com as a Domain any site that contains example com will be blocked Generally you do not want to include www ina Domain Name since doing so limits the blocking to only the site that matches that Domain Name exactly For instance if you enter www example com into the list only the one site that matches that name exactly will be blocked Consequently if you do not include the www then all sites within and associated with example com will be blocked Block Access to Websites If you wish to block access to websites use the Blocked Domain List or the Keyword List To use the Blocked Domain List enter the URLs or domain names of the websites you wish to block 4021196 Rev C Control Access to the Gateway Use the Keyword List to enter the keywords you wish to block If any of these keywords appears in the URL of a website access to the site will be blocked Note that only the URL is check not the content of each webpage Access Restrictions g
65. he manufacturer or sold with the apparatus When a cart is used use caution when moving the cart apparatus combination to avoid injury from tip over 13 Unplug this apparatus during lightning storms or when unused for long periods of time 14 Refer all servicing to qualified service personnel Servicing is required when the apparatus has been damaged in any way such as a power supply cord or plug is damaged liquid has been spilled or objects have fallen into the apparatus the apparatus has been exposed to rain or moisture does not operate normally or has been dropped Power Source Warning A label on this product indicates the correct power source for this product Operate this product only from an electrical outlet with the voltage and frequency indicated on the product label If you are uncertain of the type of power supply to your home or business consult your service provider or your local power company The AC inlet on the unit must remain accessible and operable at all times Ground the Product AN WARNING Avoid electric shock and fire hazard If this product connects to coaxial cable wiring be sure the cable system is grounded earthed Grounding provides some protection against voltage surges and built up static charges 4021196 Rev C 4021196 Rev C IMPORTANT SAFETY INSTRUCTIONS Protect the Product from Lightning In addition to disconnecting the AC power from the wall outlet disconnect the signal inputs Ve
66. i Protected Setup PIN number which is found in the client Wi Fi Protected Setup utility After entering the client s Wi Fi Protected Setup PIN number you can then connect to the gateway WPS Setup Using the Gateway PIN Option 3 Note the gateway s Wi Fi Protected Setup PIN number that is displayed on the Wi Fi Protect Setup page Click the Register button in Option 3 then using any Wi Fi Protected Setup client utility or Microsoft Vista enter the gateway s Wi Fi Protected Setup PIN number into the client device to complete registration Wireless Configuration Manual Page Example Access Applications ag PS Santas Setup Wireless Security Restrictions amp Gaming Administration Status Log OFF Basic Senmgs Wireless Security MAC Filter Advanced Settings WDS Settings Gos Basic Settings Wireless Network Enable Disable Wireless Configuration Manual Wi Fi Protected Setup Network Mode BIGIN Mixed v Radio Band Enabled 2 4GHz Y Channel Width Standard 20 MHz Channel Standard Channel Auto v Wireless Network Hame Broadcast ssi Basa SSID ced8 75 00 22 CE 7B D3 EC Save Settings Cancel Changes Wireless Basic Settings Page Description Use the following table to configure the basic settings for wireless communication for the residential gateway After you make your selections click Save Settings to apply your changes or Cancel Changes to cancel 4021196
67. icted site User Displays the user who attempted a restricted site Source Displays the IP address of the PC that was used when attempting to access a restricted website 4021196 Rev C Configure Applications and Gaming Configure Applications and Gaming Overview Most well known Internet applications are supported by Application Layer Gateways ALGs ALGs automatically adjust the gateway firewall to allow data to pass without making any custom settings We recommend that you test your application before making changes in this section Applications amp Gaming gt Port Filtering Use this window to configure transmission control protocol TCP and user datagram protocol UDP port filters These filters prevent a range of TCP UDP ports from accessing the Internet You can also prevent PCs from sending outgoing TCP UDP traffic to the WAN on specific IP port numbers This filter is not IP address or MAC address specific The system blocks the specified port ranges for all PCs Select the Port Filtering tab to open the Applications amp Gaming Port Filtering page Access Applications Setup Wireless Security Restrictions amp Gaming Adrninistration Status Log OFF Por fiterma PortRange Forwarding PorRange Triggering DMZ Port Filtering i BiB FI G8 8 aia s8 Save Settings Cancel Changes Applications and Gaming Port Filtering Page Description Use the descriptions and instructions in the followi
68. ies in the Local Area Connection Properties window 91 Frequently Asked Questions 92 5 Select both Obtain an IP address automatically and Obtain DNS server address automatically in the Internet Protocol TCP IP Properties window and then click OK Click Yes to restart your computer when the Local Network window opens The computer restarts The TCP IP protocol is now configured on your PC and your Ethernet devices are ready for use Try to access the Internet If you cannot access the Internet contact your service provider for further assistance Configuring TCP IP on Macintosh Systems 1 Click the Apple icon in the upper left corner of the Finder Scroll down to Control Panels and then click TCP IP Click Edit on the Finder at the top of the page Scroll down to the bottom of the menu and then click User Mode Click Advanced in the User Mode window and then click OK Click the Up Down selector arrows located to the right of the Connect Via section of the TCP IP window and then click Using DHCP Server Click Options in the TCP IP window and then click Active in the TCP IP Options window Note Make sure that the Load only when needed option is unchecked Verify that the Use 802 3 option located in the upper right corner of the TCP IP window is unchecked If there is a check mark in the option uncheck the option and then click Info in the lower left corner Is there a Hardware Address listed in this window
69. ifies a key used to encrypt and decrypt IP traffic Both character and hexadecimal values are acceptable in this field Note that both sides must use the same Encryption Key Authentication The Authentication method authenticates the Encapsulating Security Payload ESP packets Select MD5 or SHA Notice that both sides VPN endpoints must use the same method MD5 A one way hashing algorithm that produces a 128 bit digest SHA A one way hashing algorithm that produces a 160 bit digest Authentication Key This field specifies a key used to authenticate IP traffic Both character and hexadecimal values are acceptable in this field Note that both sides must use the same Authentication Key Inbound SPI Outbound SPI The Security Parameter Index SPI is carried in the ESP header This enables the receiver to select the SA under which a packet should be processed The SPI is a 32 bit value Both decimal and hexadecimal values are acceptable e g 987654321 or 0x3ade68b1 Each tunnel must have a unique Inbound SPI and Outbound SPI No two tunnels share the same SPI Note that the Inbound SPI must match the remote gateway s Outbound SPI and vice versa 57 Configure Security Section Status Buttons 58 Field Description This field shows the connection status for the selected tunnel The state is either Connected or Disconnected Connect Click this button to establish a connection for the current VPN tunnel If you have m
70. intele esentiale si cu alte Romanian prevederi relevante ale Directivei 1999 5 EC Slovensko Ta naprava je skladna z bistvenimi zahtevami in ostalimi relevantnimi pogoji Slovenian Direktive 1999 5 EC Slovensky Toto zariadenie je v zhode so z kladn mi po iadavkami a in mi pr slu n mi Slovak nariadeniami direktiv 1999 5 EC Suomi T m laite t ytt direktiivin 1999 5 EY olennaiset vaatimukset ja on siin Finnish asetettujen muiden laitetta koskevien m r ysten mukainen Svenska Denna utrustning r i verensst mmelse med de v sentliga kraven och andra Swedish relevanta best mmelser i Direktiv 1999 5 EC 4021196 Rev C 9 IMPORTANT SAFETY INSTRUCTIONS Note The full declaration of conformity for this product can be found in the Declarations of Conformity and Regulatory Information section of the appropriate product hardware installation guide which is available on Cisco com The following standards were applied during the assessment of the product against the requirements of the Directive 1999 5 EC E Radio EN 300 328 E EMC EN 301 489 1 and EN 301 489 17 E Safety EN 60950 and EN 50385 The CE mark and class 2 identifier are affixed to the product and its packaging This product conforms to the following European directives 1999 5 EC National Restrictions This product is for indoor use only France For 2 4 GHz the output power is restricted to 10 mW EIRP when the produ
71. is not active Blinks When wireless setup is active to add new wireless clients on the wireless network 4021196 Rev C 4021196 Rev C Front Panel LED Status Indicator Functions Special Conditions The following chart describes the appearance of the cable modem front panel LED status indicators during special conditions to show when you have been denied network access ml Panel LED Status Indicators During Special Conditions Front Panel Front Panel Indicator Network Access Denied POWER Slow Blinking k Slow Blinking ka 3 Slow Blinking K ONLINE Slow Blinking E 5 ETHERNET Slow Blinking mi Slow Blinking ka WIRELESS Slow Blinking WIRELESS Slow Blinking e 99 Notices Notices 100 Trademarks Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and or its affiliates in the U S and other countries A listing of Cisco s trademarks can be found at www cisco com go trademarks DOCSIS is a registered trademark of Cable Television Laboratories Inc EuroDOCSIS EuroPacketCable and PacketCable are trademarks of Cable Television Laboratories Inc The Wi Fi Protected Setup mark is a mark of the Wi Fi Alliance Wi Fi Protected Setup is a trademark of the Wi Fi Alliance Other third party trademarks mentioned are the property of their respective owners The use of the word partner does not imply a partnership relationship between Cisco and any other company 1009R Publication Dis
72. is product before cleaning Do not use a liquid cleaner or an aerosol cleaner Do not use a magnetic static cleaning device dust remover to clean this product A WARNING Avoid electric shock and fire hazard Never push objects through the openings in this product Foreign objects can cause electrical shorts that can result in electric shock or fire Service Warnings A WARNING Avoid electric shock Do not open the cover of this product Opening or removing the cover may expose you to dangerous voltages If you open the cover your warranty will be void This product contains no user serviceable parts IMPORTANT SAFETY INSTRUCTIONS Check Product Safety Upon completion of any service or repairs to this product the service technician must perform safety checks to determine that this product is in proper operating condition Protect the Product When Moving It Always disconnect the power source when moving the apparatus or connecting or disconnecting cables 20090915_Modem No Battery_Safety 6 4021196 Rev C 4021196 Rev C IMPORTANT SAFETY INSTRUCTIONS United States FCC Compliance This device has been tested and found to comply with the limits for a Class B digital device pursuant to part 15 of the FCC Rules These limits are designed to provide reasonable protection against such interference in a residential installation This equipment generates uses and can radiate radio frequency energy If not installed and used in acco
73. is used to connect to the cable modem termination system CMTS at the headend A media access control MAC address is a hardware address that uniquely identifies each node of a network Current Time The time based on the time zone selected on the Basic Setup page is displayed 4021196 Rev C Monitor Gateway Status Section Field Description Internet Connection IP Address Displays the IP address of the WAN interface This address is assigned to the gateway when it goes online Subnet Mask Displays the subnet mask for your WAN port This address is automatically assigned to your WAN port by your ISP except when a static IP address is set up Default Gateway The IP address of the ISP s Default Gateway DNS1 3 The DNS IP addresses currently used by the gateway WINS The WINS IP address currently used by the gateway Status gt Local Network The Local Network Status page displays information about the status of the local area network Select the Local Network tab to open the Status Local Network page Click Refresh to update the data on the page Access Applications e m reram Aj Administration Status Voice Restrictions amp Gaming Setup Wireless Security Gateway DoteiNetNOrk Wireless DOCSISWAN DOCSIS Signal DOCSIS Status Channels Selection DOCSIS Log Local Network MAC Address 00 22 3a 8 44 be IP Address 192 168 0 1 24 Subnet Mask 255 255 255 0 DHCP Server Enabled Starting IP Address
74. its and Features Your new DPC3825 and EPC3825 residential gateway offers the following outstanding benefits and features Compliant with DOCSIS 3 0 2 0 and 1 x standards along with PacketCable and EuroPacketCable specifications to deliver high end performance and reliability High performance broadband Internet connectivity to energize your online experience Four 1000 100 10BASE T Ethernet ports to provide wired connectivity m 802 11n Wireless Access Point m Wireless Protected Setup WPS including a push button switch to activate WPS for simplified and secure wireless setup E User configurable Parental Control blocks access to undesirable Internet sites m Advanced firewall technology deters hackers and protects the home network from unauthorized access E Attractive compact design that allows for vertical horizontal or wall mounted operation 4021196 Rev C 4021196 Rev C Introduction Color coded interface ports and corresponding cables simplify installation and setup DOCSIS 5 compliant LED labeling and behavior provides a user and technician friendly method to check operational status and act as a troubleshooting tool Allows automatic software upgrades by your service provider 13 What s In the Carton What s In the Carton When you receive your wireless residential gateway you should check the equipment and accessories to verify that each item is in the carton and that each item is undamaged The c
75. lections click Save Settings to apply your changes or click Cancel Changes to cancel Section Field Description Change Password Displays the user name for the operator currently logged in Change Password to Allows you to change your password Re Enter New Password Allows you to re enter the new password You must enter the same password as the one entered in the field Change Password to 29 How Do I Configure My DOCSIS Residential Gateway 30 Section WLAN Field Description Wireless Network Allows you to enable or disable the wireless network Select the desired option E Enable E Disable Wireless Network Name SSID Allows you to enter a name for your wireless network or to use the default value The value you enter he will be viewable on PCs and other wireless client devices such as the wireless network name Note The factory default Service Set Identifier SSID is either the last 6 characters of the CM MAC Address or the SSID as identified on the product label Some service providers supply a special wireless configuration card that provides the SSID information and wireless security information Wireless Security Mode Allows you to select a wireless security mode to help protect your network If you select Disable then your wireless network is not secure and any wireless device within range may connect to it See Wireless Security on page 39 for detailed descriptions of wireless security modes
76. lich am Eintrittspunkt des Kabels in das Geb ude geerdet werden Dieser Erinnerungshinweis liegt den in den USA oder Kanada verkauften Produkten bei Er soll den Systemtechniker auf Paragraph 820 93 und Paragraph 820 100 der US Elektrovorschrift NEC oder der kanadischen Elektrovorschrift Canadian Electrical Code Teil 1 aufmerksam machen in denen die Richtlinien f r die ordnungsgem e Erdung des Koaxial kabelschirms festgehalten sind Dieses Symbol weist den Benutzer auf das Vorhandensein von nicht isolierten gef hrlichen Spannungen im Ger t hin die Stromschl ge verursachen k nnen Ein Kontakt mit den internen Teilen dieses Produktes ist mit Gefahren verbunden CAUTION DO NOT OPEN ACHTUNG NICHT FFNEN ACHTUNG Zur Vermeidung eines Stromschlags darf die Abdeckung bzw die Ger ter ckwand nicht entfernt werden Das Ger t enth lt keine vom Benutzer wartbaren Teile Wartungsarbeiten d rfen nur von qualifiziertem Fachpersonal durchgef hrt werden WARNUNG DAS GER T NICHT REGEN ODER FEUCHTIGKEIT AUSSETZEN UM STROMSCHLAG ODER DURCH EINEN KURZSCHLUSS VERURSACHTEN BRAND ZU VERMEIDEN Dieses Symbol weist den Benutzer darauf hin dass die mit diesem Produkt gelieferte Dokumentation wichtige Betriebs und Wartungsanweisungen f r das Ger t enth lt Aviso a los instaladores de sistemas CATV Las instrucciones de reparaci n contenidas en el presente aviso son para uso exclusivo por parte de personal de mantenimiento
77. lti port Ethernet switch s E Wireless Make sure that your wireless device is powered up You will need to associate your wireless device with the wireless gateway once the gateway is operational Follow the directions provided with your wireless device for associating with a wireless access point More information about the factory default configuration of your wireless gateway can be found later in this user guide in Configure Wireless Settings on page 35 5 Locate the AC power cord provided with your residential gateway Insert one end of the power cord into the AC connector on the back of the residential gateway Then plug the AC power cord into an AC outlet to power up the residential gateway The residential gateway will perform an automatic search to locate and sign on to the broadband data network This process may take up to 2 5 minutes The modem will be ready for use when the POWER DS US and ONLINE LEDs on the front panel of the residential gateway stop blinking and remain on continuously 6 Plug in and power on your PC and other home network devices The LINK LED on the residential gateway corresponding to the connected devices should be on or blinking 7 Once the residential gateway is online most Internet devices will have immediate Internet access Note If your PC does not have Internet access refer to Frequently Asked Questions on page 91 for information on how to configure your PC for TCP IP For Internet device
78. me you access the gateway This serves as a reminder to set up your personalized password Once you have personalized your Password subsequent logins will take you directly to the Setup Quick Setup page After you make your selections click Save Settings to apply your changes or Cancel Changes to cancel Setup gt Quick Setup The Setup Quick Setup page is the first page to open after you have logged on to your gateway You can use the settings on this page to change your password and to configure the WLAN Important The settings on this page are unique to your device If you choose you do not need to make any changes to the settings on this page These default settings are all that you need to operate a secure wireless network 4021196 Rev C 4021196 Rev C Wireless Security Access Applications Restrictions amp Gaming Can Setup DONS Change Password How Do I Configure My DOCSIS Residential Gateway Administration Status Log OFF User Name Change Password to Re Enter New Password Wireless Network Enable Disable Wireless Network less o i Name SSID jecds75 Wireless Security PERS WP Personal Encryption TKIP AES 1 x Pre Shared Key 222596078 Save Settings Configuring Quick Settings User Name Cancel Changes Use the descriptions and instructions in the following table to configure the network settings for the device After you make your se
79. ming Administration Status Log OFF ce VP VPN Passthrough IPSec Passthrough Enable C Disable PPTP Passthrough Enable C Disable Save Settings Cancel Changes Use the descriptions and instructions in the following table to configure the VPN passthrough for your residential gateway After you make your selections click Save Settings to apply your changes or Cancel Changes to cancel Section Field Description VPN IPSec Passthrough Passthrough Enables disables Internet Protocol Security IPsec IPsec is a suite of protocols used to implement secure exchange of packets at the IP layer If you enable IPSec Passthrough applications that use IPsec IP Security can pass through the firewall To disable IPSec Passthrough select Disable Select the desired option E Enable factory default E Disable PPTP Passthrough Enables disables Point to Point Tunneling Protocol PPTP PPTP allows the Point to Point Protocol PPP to be tunneled through an IP network If you enable PPTP passthrough applications that use Point to Point Tunneling Protocol PPTP can pass through the firewall To disable PPTP Passthrough select Disable Select the desired option E Enable factory default E Disable 4021196 Rev C 53 Configure Security Security gt VPN A Virtual Private Network VPN is a connection between two endpoints in different networks that allows private data to be sent securely over public networks or other priv
80. ming Port Range Forward Page Description Use the descriptions and instructions in the following table to configure the port range forwarding for the residential gateway Select enable for each After you make your selections click Save Settings to apply your changes or Cancel Changes to cancel Section Port Range Forwarding Field Description Start For the Start port select a port from the recommended 49152 65535 range Keep in mind that ports used are program specific so check which ones the program requires to be forwarded End For the End port select a port from the recommended 49152 65535 range Keep in mind that ports used are program specific so check which ones the program requires to be forwarded Protocol Select one of the following protocols E TCP E UDP E Both IP Address Enter the computer s IP address to which this is to apply Enable Check this box to enable port forwarding for the specified ports and IP addresses 71 Configure Applications and Gaming 72 Applications amp Gaming gt Port Range Triggering Port range triggering is a way to dynamically forward ports to a LAN PC that needs them at a particular time That particular time is when it runs a certain application that performs some event that trigger the router This event must be an outbound access of a particular port range Select the Port Range Triggering tab to open the Applications amp Gaming Port Range Triggering
81. n Mode DHC MTU size Access Applications Restrictions amp Gaming Administration Status Log OFF Current User Name user Change Current User Name to Change Password to Re Enter New Password Remote Management Enable Management Port 8080 Disable O Enable disable IGMP Proxy Enable O disable Cancel Changes Allows you to specify the WAN IP address and corresponding server information as static or fixed values that will be used whenever the gateway goes online Setup Wireless Security Managemen Reporting Diagnostics BackUp amp Restore Gateway Setup WAN Internet Connection Type Gateway Access Local Access Remote Access UPnP Access Applications Restrictions amp Gaming Administration Status Log OFF Connection Mode Internet IP Address 0 Subnet Mask jo JA Default Gateway Primary DNS Secondary DNS MTU size Current User Name user Change Current User Name to Change Password to Re Enter New Password Remote Management Enable Management Port 8080 Disable O Enable Disable IGMP Proxy Enable Obisable Save Settings 4021196 Rev C 4021196 Rev C Field MTU Gateway Access Local Access Manage the Gateway Description Internet IP Address Enter the gateway s IP address as seen from the Internet Subn
82. n the address bar Follow the instructions on the website to set up an account To enable DDNS follow these steps 1 On the DDNS page select www DynDNS org as your DDNS server Arcess Applications ae anes lt a Restrictions amp Gaming Administration Status Log OFF Quick Setup CanSetup DENS DDNS User Name Password Host Name Configure the following fields User Name Password Host Name o u Eu E N Click Save Settings The device will now advise the DDNS service of your current WAN Internet IP address whenever this address changes Important The Status area of the window will display the status of the DDNS service connection 4021196 Rev C Configure Wireless Settings Configure Wireless Settings This section describes the options available from the Wireless pages that you can use to configure the parameters of the WAP to meet your specific requirements and needs Wireless gt Basic Settings Setting up your residential gateway for wireless communication provides you with the freedom to connect to the Internet from any location within range of the WAP without having to use wired connections Select the Basic Settings tab to open the Wireless Basic Settings page The Wireless Basic Settings page allows you to choose your wireless network mode and other basic features m Wireless Network Enable or Disable Em Wireless Configuration Manual or Wi Fi Protected Setup E Network Mode
83. nected to one of the Ethernet ports BLINKING indicates that data is being transferred over the Ethernet connection 6 USB ON a device is connected to the USB port BLINKING indicates that data is being transferred over the USB connection 7 WIRELESS LINK ON the Wireless Access Point is operational BLINKING indicates that data is being transferred over the wireless connection OFF indicates that the wireless access point has been disabled by the user 8 WIRELESS SETUP OFF normal condition wireless setup is not active BLINKING indicates the user has activated wireless setup to add new wireless clients on the wireless network 4021196 Rev C 15 Back Panel Description Back Panel Description The following illustrations show the description and function of the back panel components on the Cisco DPC3825 residential gateway Model DPC3825 Model EPC3825 114566 1 POWER Connects the residential gateway to the AC power adapter that is provided with your residential gateway A CAUTION Avoid damage to your equipment Only use the power supply that is provided with your residential gateway ON OFF SWITCH European models only Allows you to power of the residential gateway without removing the power cord MAC ADDRESS LABEL Displays the MAC address of the residential gateway USB Connects to selected client devices ETHERNET Four RJ 45 Ethernet ports connect to the Ethernet port on your PC or your home netw
84. nfigure Security Field Description Select one of the following options for the key exchange method Auto IKE Encryption The Encryption method determines the length of the key used to encrypt decrypt ESP packets Notice that both sides must use the same method Authentication The Authentication method authenticates the Encapsulating Security Payload ESP packets Select MD5 or SHA Notice that both sides VPN endpoints must use the same method MD5 A one way hashing algorithm that produces a 128 bit digest SHA A one way hashing algorithm that produces a 160 bit digest Perfect Forward Secrecy PFS If PFS is enabled IKE Phase 2 negotiation will generate new key material for IP traffic encryption and authentication Note that both sides must have PFS enabled Pre Shared Key IKE uses the Pre Shared Key to authenticate the remote IKE peer Both character and hexadecimal values are acceptable in this field e g My_ 123 or 0x4d795f40313233 Note that both sides must use the same Pre Shared Key Key Lifetime This field specifies the lifetime of the IKE generated key If the time expires a new key will be renegotiated automatically The Key Lifetime may range from 300 to 100 000 000 seconds The default lifetime is 3600 seconds Manual Encryption The Encryption method determines the length of the key used to encrypt decrypt ESP packets Notice that both sides must use the same method Encryption Key This field spec
85. ng table to configure the port filtering for applications and gaming features used on your residential gateway Click the Enable checkbox to enable port forwarding for the relevant application After you make your selections click Save Settings to apply your changes or Cancel Changes to cancel 4021196 Rev C 69 Configure Applications and Gaming 70 Section Field Description Port Filtering Start Port This is the beginning of the port range Enter the beginning of the range of port numbers external ports used by the server or Internet application Check with the software documentation of the Internet application for more information if necessary End Port This is the end of the port range Enter the end of the range of port numbers external ports used by the server or Internet application Check with the software documentation of the Internet application for more information if necessary Protocol Select one of the following protocols E TCP E UDP E Both Enable Check this box to enable filtering on the specified ports Applications amp Gaming gt Port Range Forwarding Important The gateway normally implements a feature called Port Translation Port Translation monitors what ports are actually being used by your PCs or other devices on your LAN This monitoring provides an added level of security beyond what the firewall provides However there are some applications that require the gateway to use specific po
86. nstructs the device how often it should change encryption keys The default is 3600 seconds 41 Configure Wireless Settings Section 42 Field Description Security for Enterprise Networks WPA Enterprise Modes This option features WPA used in coordination with a RADIUS server for client authentication This should only be used when a RADIUS server is connected to the device Select from one of the following three WPA or WPA2 Enterprise modes WPA Enterprise E WPA2 Enterprise E WPA or WPA2 Enterprise Access Applications S a Sec ha Setup boucan Security Restrictions amp Gaming Administration Status Lag OFF Basic Settings Wireless Secunia MAC Filter Advanced Settings WDS Settings Gos Wireless Security Wireless Security Mode Encryption RADIUS Server RADIUS Port Shared Key Key Renewal 3600 seconds Save Settings Cancel Changes Field Descriptions E Encryption The default is TKIP AES RADIUS Server Enter the RADIUS server s IP address RADIUS Port Enter the port number used by the RADIUS server The default is 1812 Shared Key Enter the key used by the device and RADIUS server Key Renewal Enter a Key Renewal period which instructs the device how often it should change encryption keys The default is 3600 seconds 4021196 Rev C Configure Wireless Settings Wireless gt MAC Filter The MAC Filter feature is used to either allow or block access to y
87. nterval 1 Default 1 Range 1 255 Fragmentation Threshold 2346 Default 2346 Range 256 2346 RTS Threshold 2347 Default 2347 Range 0 2347 Save Settings Cancel Changes Wireless Advanced Settings Page Description Use the descriptions and instructions in the following table to configure the advanced wireless settings for your residential gateway After you make your selections click Save Settings to apply your changes or Cancel Changes to cancel 45 Configure Wireless Settings Section Field Description Advanced N Transmission Rate Wireless The rate of data transmission should be set depending on the speed of your Wireless N networking Select from a range of transmission speeds or select Auto to have the device automatically use the fastest possible data rate and enable the Auto Fallback feature Auto Fallback negotiates the best possible connection speed between the device and a wireless client The factory default setting is Auto Choose one of the following options for transmission rate E Auto factory default E Use Legacy Rate E 0 6 5 or 13 5 Mbps E 1 13 or 27 Mbps E 2 19 5 or 40 5 Mbps E 3 26 or 54 Mbps E 4 39 or 81 Mbps E 5 52 or 108 Mbps E 6 58 5 or 121 5 Mbps E 7 65 or 135 Mbps E 8 13 or 27 Mbps E 9 26 or 54 Mbps E 10 39 or 81 Mbps E 11 52 or 108 Mbps E 12 78 or 162 Mbps E 13 104 or 216 Mbps E 14 117 or 243 Mbps E 15 130 or 270 Mbps CTS Protection Mode CTS Clear To Send Pr
88. onal RF coaxial outlet E Choose a location that is relatively protected from accidental disturbance or harm such as a closet basement or other protected area E Choose a location so that there is plenty of room to guide the cables away from the modem without straining or crimping them E Airflow around the residential gateway should not be restricted E Read this user guide thoroughly before installing the residential gateway 4021196 Rev C How Do Mount the Modem on a Wall Optional How Do I Mount the Modem on a Wall Optional You can mount the residential gateway on a wall using two wall anchors two screws and the mounting slots located on the unit The modem can be mounted vertically or horizontally Before You Begin Before you begin choose an appropriate mounting place The wall can be made of cement wood or drywall The mounting location should be free of obstructions on all sides and the cables should be able to easily reach the residential gateway without strain Leave sufficient clearance between the bottom of the residential gateway and any flooring or shelving underneath to allow access to cabling In addition leave enough slack in all cables so that the residential gateway can be removed for any required maintenance without disconnecting the cables Also verify that you have the following items Two wall anchors for 8 x 1 inch screws E Two 8 x 1 inch pan head sheet metal screws E Drill with a 3 16
89. oper configuration of all hardware and software settings Contact your service provider for more information about installation 4021196 Rev C 93 Frequently Asked Questions 94 Q How does the residential gateway connect to my computer A The residential gateway connects to the PC using a wireless connection or the 10 100 1000BASE T Ethernet port on your PC If you want to use an Ethernet interface Ethernet cards available from your local PC or office supply retailer or from your service provider For best performance over an Ethernet connection your PC should be equipped with a Gigabit Ethernet card Q After my residential gateway is connected how do access the Internet A Your local service provider becomes your Internet Service Provider ISP They offer a wide range of services including e mail chat news and information services Your service provider will provide the software you will need Q Can I watch TV and surf the Internet at the same time A Absolutely If you subscribe to cable television service you can watch TV and use your residential gateway at the same time by connecting your TV and your residential gateway to the cable network using an optional cable signal splitter Common Troubleshooting Issues don t understand the front panel status indicators See Front Panel LED Status Indicator Functions on page 96 for more detailed information on front panel LED status indicator operation and function
90. ork CABLE F connector connects to an active cable signal from your service provider WIRELESS SETUP Pressing this switch initiates wireless setup this feature allows the user to add new Wireless Protected Setup WPS compliant wireless clients to the home network 4021196 Rev C 4021196 Rev C Back Panel Description 8 RESET A momentary pressing 1 2 seconds of this switch reboots the EMTA Pressing the switch for more than ten seconds first causes a reset to factory default of all settings and then reboots the gateway A CAUTION The Reset button is for maintenance purposes only Do not use unless instructed to do so by your cable service provider Doing so may cause you to lose any cable modem settings you have selected 17 What Are the System Requirements for Internet Service What Are the System Requirements for Internet Service To ensure that your residential gateway operates efficiently for high speed Internet service verify that all of the Internet devices on your system meet or exceed the following minimum hardware and software requirements Note You will also need an active cable input line and an Internet connection Minimum System Requirements for a PC A PC with a Pentium MMX 133 processor or greater E 32 MB of RAM Web browsing software m CD ROM drive Minimum System Requirements for Macintosh E MAC OS7 5 or later E 32 MB of RAM System Requirements for an Ethernet Connection A P
91. otection Mode boosts the device s ability to catch all wireless transmissions but can severely decrease performance Select Auto to use this feature when needed when the Wireless N G products are not able to transmit to the device in an environment with heavy 802 11b traffic Select Disable to permanently disable this feature Beacon Interval The Beacon Interval value indicates the frequency interval of the beacon A beacon is a packet broadcast by the device to synchronize the wireless network Default 100 msec Range 20 1000 46 4021196 Rev C Section 4021196 Rev C Configure Wireless Settings Field Description DTIM Interval The Delivery Traffic Indication Message DTIM indicates the interval between Broadcasts Multicast transmissions DTIM field is a countdown field informing clients of the next window for listening to broadcast and multicast messages When the device has buffered broadcast or multicast messages for associated clients it sends the next DTIM with a DTIM Interval value Its clients hear the beacons and awaken to receive the broadcast and multicast messages Default 1 Range 1 255 Fragmentation Threshold The fragmentation threshold value specifies the maximum size for a packet before data is fragmented into multiple packets If you experience a high packet error rate you may slightly increase the Fragmentation Threshold Setting the Fragmentation Threshold too low may result in poor network performance
92. our wireless LAN based on the MAC Address of the wireless client devices The MAC Filter feature also known as an access list can be used to help protect your wireless network from access by unauthorized users Select the MAC Filter tab to open the Wireless MAC Filter page Access Applications Setup vraies Security Restrictions amp Gaming Administration Status Log OFF Basi ings Wire a o Advanced Settings WODS Settings Gos MAC Filter Enable Disable Access Restriction Block computers listed below from accessing the wireless network Permit computers listed below to access the wireless network MAC Address Filter List MAC o1 00 00 00 00 00 00 MAC 17 00 00 00 00 00 00 MAC 02 00 00 00 00 00 00 mac 18 00 00 00 00 00 00 MAC 03 00 00 00 00 00 00 Mac 19 00 00 00 00 00 00 MAC 04 00 00 00 00 00 00 MAC 20 o0 00 00 00 00 00 Mac os 00 00 00 00 00 00 mac 21 00 00 00 00 00 00 MAC 06 o0 00 00 00 00 00 mac 22 o0 00 00 00 00 00 MAC O07 00 00 00 00 00 00 mac 23 00 00 00 00 00 00 MAC 08 00 00 00 00 00 00 MAC 24 00 00 00 00 00 00 MAC 09 00 00 00 00 00 00 MAC 25 00 00 00 00 00 00 Mac 10 00 00 00 00 00 00 mac 26 00 00 00 00 00 00 MAC 11 00 00 00 00 00 00 MAC 27 00 00 00 00 00 00 MAC 12 00 00 00 00 00 00 MAC 28 o0 00 00
93. owing two Model DPC3825 EPC3825 conditions 1 the device may not cause Manufactured by harmful interference and 2 the device must Cisco Systems Inc accept any interference received including 5030 Sugarloaf Parkway interference that may cause undesired Lawrenceville Georgia 30044 USA operation Telephone 678 277 1120 Canada EMI Regulation This Class B digital apparatus complies with Canadian ICES 003 Cet appareil num rique de la class B est conforme a la norme NMB 003 du Canada IMPORTANT SAFETY INSTRUCTIONS Dynamic Frequency Selection DFS Dual Band Frequencies Some configurations of this product may operate in the 5150 5250MHz and 5470 5725MHz bands If you select a channel in these frequency ranges the product is restricted to indoor operation only per FCC guidance The use of this product on the affected frequencies when outside is in non compliance of the FCC regulations and guidelines Radiation Exposure Statements Note This transmitter must not be co located or operated in conjunction with any other antenna or transmitter This equipment should be installed and operated with a minimum distance of 7 9 inches 20 cm between the radiator and your body US This system has been evaluated for RF exposure for humans in reference to ANSI C 95 1 American National Standards Institute limits The evaluation was based in accordance with FCC OFT Bulletin 65C rev 01 01 in compliance with Part 2 1091 and Part 15 27 Th
94. rdance with the instructions it may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment OFF and ON the user is encouraged to try to correct the interference by one or more of the following measures E Reorient or relocate the receiving antenna E Increase the separation between the equipment and receiver E Connect the equipment into an outlet on a circuit different from that to which the receiver is connected E Consult the service provider or an experienced radio television technician for help Any changes or modifications not expressly approved by Cisco Systems Inc could void the user s authority to operate the equipment The information shown in the FCC Declaration of Conformity paragraph below is a requirement of the FCC and is intended to supply you with information regarding the FCC approval of this device The phone numbers listed are for FCC related questions only and not intended for questions regarding the connection or operation for this device Please contact your service provider for any questions you may have regarding the operation or installation of this device FE Declaration of Conformity This device complies with Part 15 of FCC DOCSIS Residential Gateway Rules Operation is subject to the foll
95. red the IP addresses of those servers in these fields Otherwise the gateway will forward the DNCS server information from your service provider automatically The default is to leave these fields blank Time Settings Time Zone Select the time zone for your location If your location follows daylight saving time select Automatically adjust clock for daylight saving time Setup gt DDNS Dynamic Domain Name Service DDNS provides the residential gateway that may have a changing IP address with a host name or URL resolvable by network applications through standard DNS queries DDNS is useful when you are hosting your own website FTP server or other server behind the device Before using this feature you need to sign up for DDNS service Select the DDNS tab to open the Setup DDNS page 4021196 Rev C 33 How Do Configure My DOCSIS Residential Gateway 34 Section Field Description DDNS Disabling DDNS Factory Default Settings Service To disable DDNS select Disabled from the drop down list and click Save Settings Access Applications Waterers jess Restrictions amp Gaming Administration Status Log OFF Quick Setup LanSetup BDNS Enabling DDNS Note In order to use the DDNS feature you must first set up an account and establish a URL with www DynDNS org The DDNS feature will not work without a valid account To set up a DDNS account open your browser and enter www DynDNS org i
96. rify the Power Source from the On Off Power Light When the on off power light is not illuminated the apparatus may still be connected to the power source The light may go out when the apparatus is turned off regardless of whether it is still plugged into an AC power source Eliminate AC Mains Overloads WARNING Avoid electric shock and fire hazard Do not overload AC mains outlets extension cords or integral convenience receptacles For products that require battery power or other power sources to operate them refer to the operating instructions for those products Provide Ventilation and Select a Location Remove all packaging material before applying power to the product Do not place this apparatus on a bed sofa rug or similar surface Do not place this apparatus on an unstable surface Do not install this apparatus in an enclosure such as a bookcase or rack unless the installation provides proper ventilation Do not place entertainment devices such as VCRs or DVDs lamps books vases with liquids or other objects on top of this product Do not block ventilation openings Protect from Exposure to Moisture and Foreign Objects A WARNING Avoid electric shock and fire hazard Do not expose this product to dripping or splashing liquids rain or moisture Objects filled with liquids such as vases should not be placed on this apparatus A WARNING Avoid electric shock and fire hazard Unplug th
97. ront panel LED status indicators during power up calibration and registration on the network when AC power is applied to the residential gateway Use this chart to troubleshoot the power up calibration and registration process of your residential gateway Note After the residential gateway completes Step 6 Request High Speed Data Provisioning File the modem proceeds immediately to Normal Operations See Normal Operations AC Power applied on page 98 Front Panel LED Status Indicators During Initial Power Up Calibration and Registration High Speed Data Registration Step 1 2 3 4 5 6 Front Panel Indicator Self Downstream Downstream Ranging Requesting IP Request High Test Scan Signal Lock Address Speed Data Provisioning File 1 POWER On On On On On On 2 DS On Blinking On On On On 3 US On Off Off Blinking On On 4 ONLINE On Off Off Off Off Blinking 5 ETHERNET1 4 On On or On or On or On or Blinking On or Blinking Blinking Blinking Blinking 6 USB On On or On or On or On or Blinking On or Blinking Blinking Blinking Blinking 7 WIRELESS Off On or On or On or On or Blinking On or Blinking LINK Blinking Blinking Blinking 8 WIRELESS Off On or On or On or On or Blinking On or Blinking SETUP Blinking Blinking Blinking 96 4021196 Rev C Front Panel LED Status Indicator Functions Front Panel LED Status Indicators During Initial Power Up Calibration and Registration
98. rts to connect over the Internet Use Port Range Forwarding to forward ports from the public Internet to specific IP addresses in your local network Select the Port Range Forwarding tab to open the Applications amp Gaming Port Range Forwarding page For the Start and End Port select a port from the recommended 49152 65535 range Keep in mind that ports used are program specific so check which ones the program requires to be forwarded Type the port number or range in both boxes In the IP Address box type the name of the computer s IP address to which this is to apply Note Port Range Forwarding continually exposes the selected ports to the public Internet This means that the gateway s firewall is no longer active on these ports The device with the forwarding IP address can be exposed to hacker attacks while the port range is being forwarded 4021196 Rev C 4021196 Rev C Access Restrictions amp Gaming Setup Wireless Security Configure Applications and Gaming Applications Administration Status Log OFF PortFittering Porm Range rorwarding Port Range Triggering DMZ Port Range Forwarding Port Range elo o o lo ojoje jefe o e ete o Jees GG End IP Address 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 loooo 0 0 0 0 loooo oP ee ae ae Save Settings Cancel Changes Applications and Ga
99. s The Remove Static IP button removes the Static IP address from the list of pre assigned IP addresses Starting IP Address Displays the starting address used by the built in DHCP server to distribute Private LAN IP addresses Because the device default IP address of the gateway is 192 168 0 1 the starting IP address must be 192 168 0 2 or greater but smaller than 192 168 0 253 The default Starting IP Address is 192 168 0 10 4021196 Rev C How Do I Configure My DOCSIS Residential Gateway Section Field Description Maximum Number of DHCP Users Enter the maximum number of users to which the DHCP server can assign IP addresses for use in the LAN This number cannot be greater than 254 minus the starting IP address described above Client Lease Time The Client Lease Time is the amount of time an IP address is valid IP address leases are renewed automatically by your PC and other devices that use DHCP to obtain IP addresses If a lease is allowed to expire the IP address will be returned to the pool of available IP addresses that can be assigned by the DHCP server as new devices are added to your network The default is 60 minutes when the gateway is online LAN Static DNS Domain Name Server 1 3 DNS is used by a PC or other client devices to discover the public IP address associated with a URL or the name based address of a website You can manually specify which DNS servers are to be used by devices in your network by ente
100. s other than PCs refer to the DHCP or IP Address configuration section of the User Guide or Operations Manual for those devices 4021196 Rev C 25 How Do I Configure My DOCSIS Residential Gateway How Do I Configure My DOCSIS Residential Gateway 26 To configure your residential gateway you must first access the WebWizard configuration pages This section provides detailed instructions and procedures for accessing the WebWizard pages and for configuring your residential gateway to operate correctly This section also presents examples and descriptions of each WebWizard configuration page Use the WebWizard pages to customize your residential gateway to your needs rather than using the default settings The WebWizard pages in this section are organized in the order shown on the Setup page Important The WebWizard pages and the examples shown in this section are for illustration purposes only Your pages may differ from the pages shown in this guide The pages shown in this guide also represent the default values for the device Note If you are not familiar with the network configuration procedures detailed in this section contact your service provider before you attempt to change any of the residential gateway default settings Logging in to the Gateway for the First Time The default configuration of the gateway uses IP address 192 168 0 1 If you have connected the gateway correctly and you have properly configured your computer u
101. se the following steps to log in to the gateway as an administrator 1 On your PC open the web browser that you prefer to use 4021196 Rev C How Do Configure My DOCSIS Residential Gateway 2 Inthe address field enter the following IP address 192 168 0 1 A Status DOCSIS WAN login page similar to the following page opens Status Log In i Online Help User Name Password About Model Cisco EPC3825 Vendor Cisco Hardware Revision 1 0 Serial Number 222596078 MAC Address 00 22 3a ce d8 75 Bootloader Revision 2 3 0_R1 Current Software Revision epe3825 ESIP 16 v302r12911 091029 Firmware Name epc3825 ESIP 16 v302r12911 091029 bin Firmware Build Time Oct 29 2009 15 48 04 Cable Modem Status Operational Downstream Channels l Power Level Signal to Hoise Ratio Channel 1 17 1 dBmv 33 9 dBmv Channel 2 0 0 dBmv 0 0 dBmv Channel 3 0 0 dBmv 0 0 dBmv Channel 4 0 0 dBmv 0 0 dBmv Channel 5 0 0 dBmv 0 0 dBmv Channel 6 0 0 dBmv 0 0 dBmv Channel 7 0 0 dBmv 0 0 dBmv Channel 8 0 0 dBmv 0 0 dBmv Upstream Channels Power Level Channel 1 41 0 dBmv Channel 2 0 0 dBmv Channel 3 0 0 dBmv Channel 4 0 0 dBmv 3 On the Status DOCSIS WAN page leave the User Name and Password field blank and click Log In The gateway opens with an Administration Management page in the forefront You can use the Administration Management page to set your User Name and Password Important We highly recommend
102. sie ies Eee ee errea ioir r seei ie eai rigi 84 Frequently Asked Ques tOMs iccossvenarsasswnsasitovespseasevuritersniorunee destvnnmmannvagivnndeyietsl 91 Tips for Improved Performance sis cccavinnsecaswnncntsnsnstensssdectnaosuntantsanncatdusansusteanantiuess 95 Front Panel LED Status Indicator Functions unccnnundciiniinnndeaieunsndes 96 ING ECCS A IA P AA A E TN O seoeeeun tees 100 IMPORTANT SAFETY INSTRUCTIONS Notice to Installers IMPORTANT SAFETY INSTRUCTIONS The servicing instructions in this notice are for use by qualified service personnel only To reduce the risk of electric shock do not perform any servicing other than that contained in the operating instructions unless you are qualified to do so Note to System Installer For this apparatus the coaxial cable shield screen shall be grounded as close as practical to the point of entry of the cable into the building For products sold in the US and Canada this reminder is provided to call the system installers attention to Article 820 93 and Article 820 100 of the NEC or Canadian Electrical Code Part 1 which provides guidelines for proper grounding of the coaxial cable shield This symbol is intended to alert you that uninsulated voltage within this product may have sufficient magnitude to cause electric shock Therefore it is dangerous to make any kind of contact with any inside part of this product Notice a l attention des installateurs de r seaux cabl s CAU
103. st 4021196 Rev C Cisco5 00 22 CE 7B D9 EC 802 11n 5GHz Ciscos Wide 40 MHz Channel 4 AES Refresh 87 Monitor Gateway Status Status Wireless Page Description Use the following table to review the status of your wireless network Section Field Description Wireless Network MAC Address Displays the MAC Address of your gateway s local wireless access point Radio Band Displays one of the following radio band frequencies currently in operation E 24GHz E 5GHz E 2 4and5 GHz Note Not all products support the 5 GHz radio band Network Name SSID Displays the name or service set identifier SSID of your wireless access point Channel Width Displays the channel bandwidth setting selected on the Basic Wireless Settings page Wide Channel Displays the Wide Channel setting selected on the Basic Wireless Settings page Standard Channel Displays the Standard Channel setting selected on the Basic Wireless Settings page Security Displays the security method used by your wireless network SSID Broadcast Displays the status of the gateway s SSID Broadcast feature 88 4021196 Rev C Monitor Gateway Status Status gt DOCSIS WAN DOCSIS WAN Status displays information about the system of your cable modem Select the DOCSIS WAN tab to open the Status DOCSIS WAN page access Applications Setup Wireless Security Restrictions amp Gaming Administration Status Log OFF y LocalNetwork
104. t Time of Day Rules Use the Access Restrictions Time of Day Rules page to configure web access filters to block all Internet traffic to and from specific network devices based on day of week and time of day settings that you select Select the Time of Day Rules tab to open the Access Restrictions Time of Day Rules Page The following illustration is an example of the Access Restrictions Time of Day Rules page Note The residential gateway uses the network time of day clock that is managed by your data service provider The time of day clock must be accurate and represent the time of day in your time zone for this feature to operate properly Verify that the Status and Set Time pages reflect the correct time of day If they do not reflect the correct time of day contact your data service provider You can also adjust your settings to account for the difference Access Applications Restrictions amp Gaming Setup Wireless Security Administration Status Log OFF IP Address Filtering MAC Address Filtering Basic Rules Timea Day mane Usersetup Coral log Add No fiters entered L Enabled Remove Days to Block Ll Everyday Sunday 1 Monday C Tuesday I Wednesday LI Thursday Clrriday I saturday Schedule Time to Block O al day Stat 12 hour 00min AM End 12 hour 00 min AM Save Settings Cancel Changes Access Restrictions Time of Day Rules Page Description Use the descriptions and ins
105. t listed in the table will be denied Internet access MAC Address MAC Address Filter List Filter List The MAC Address Filter List displays users whose wireless access you want to control Click Wireless Client List to display a list of network users by MAC address From the To Sort by drop down menu you can sort the table by IP Address MAC Address Status Interface or Client Name To view the most up to date information click the Refresh button Wireless gt Advanced Settings Your advanced wireless settings add another layer of security to the wireless network for your residential gateway This page is used to set up the advanced wireless functions Only an expert administrator should adjust these settings Incorrect settings can reduce wireless performance Select the Advanced Settings tab to open the Wireless Advanced Settings page Use this page to configure the following options N Transmission Rate CTS Protection Mode Beacon Interval DTM Interval Fragmentation Threshold RTS Threshold 4021196 Rev C 4021196 Rev C Access Applications Setup Security ef Setup Security Restrictions amp Gaming Administration Status Basic Settings i curity MAC Filter Aivaiced Settings WDS Settings Gos Configure Wireless Settings Log OFF Advanced Wireless N Transmission Rate Auta w Default Auto CTS Protection Mode Disable Y Default Disable Beacon Interval 100 Default 100 msec Range 1 65535 DTIM I
106. that your residential gateway AC power cord is not plugged into an electrical outlet that is controlled by a wall switch If a wall switch controls the electrical outlet make sure the switch is in the ON position Verify that the ONLINE LED status indicator on the front panel of your residential gateway is illuminated Verify that your cable service is active and that it supports two way service Verify that all cables are properly connected and that you are using the correct cables Verify that your TCP IP is properly installed and configured if you are using the Ethernet connection Verify that you have called your service provider and given them the serial number and MAC address of your residential gateway If you are using a cable signal splitter so that you can connect the residential gateway to other devices remove the splitter and reconnect the cables so that the residential gateway is connected directly to the cable input If the residential gateway now functions properly the cable signal splitter may be defective and may need to be replaced For best performance over an Ethernet connection your PC should be equipped with a Gigabit Ethernet card 95 Front Panel LED Status Indicator Functions Front Panel LED Status Indicator Functions Initial Power Up Calibration and Registration AC Power applied The following chart illustrates the sequence of steps and the corresponding appearance of the residential gateway f
107. the DHCP Client Table DHCP Client Table DHCP Client Table DHCP Server IP Address 192 168 0 1 MAC Address IP Address Subnet Mask Duration Expires 0015587e4b41 192 168 0 10 255 255 255 0 D 00 H 01 M 00 3 00 Fri Sep 25 00 15 59 2009 O01fSccdce7fe 192 168 0 11 255 255 255 0 D 00 H 01 M 00 S 00 Fri Sep 25 00 18 16 2009 4021196 Rev C Monitor Gateway Status ARP RARP Table Click ARP RARP Table to see a complete list of all devices that are connected to your network To retrieve the most up to date information click Refresh To exit this page and return to the Local Network page click Close The following illustration shows an example of the ARP RARP Table Status gt Wireless ARP RARP Table ARP RARP Table 10 13 04 00 13 SF 05 95 DA 10131 42 00 22 34 CE D8 75 10 13 1 43 00 22 34 CE D8 79 1013 81 00 13 5F 05 95 D4 192 168 0 1 00 22 34 CE D8 78 192 168 0 10 00 15 58 7E 4B 41 192 168 0 11 00 1F 3C CD C7 FE The Wireless Network Status page displays basic information about the wireless network of the gateway Select the Wireless tab to open the Status Wireless page Click Refresh to update the data on the page D e P Access Setup Wireless Security Gateway Local Network Annek DOCSIS WARY Restrictions Applications amp Gaming Administration Status Log OFF Wireless Network MAC Address Radio Band Network Name SSID Channel Width Standard Channel Security SSID Broadca
108. tiveX controls run automatically when they are received by a PC Block fragmented IP packets Enables disables filtering of fragmented IP packets This feature helps protect your private local network from Internet based denial of service attacks Block Port Scan Detection Enables disables the gateway from responding to Internet based port scans This feature is designed to protect your private local network from Internet based hackers who attempt to gain unsolicited access your network by detecting open IP ports on your gateway Block IP Flood Detection checked factory default Blocks malicious devices that are attempting to flood devices or networks with illegal broadcast packets Also referred to as broadcast storm Block Anonymous Internet Requests checked factory default Enable this feature to keep your network from being pinged or detected by other Internet users The Block Anonymous Internet Requests feature also hides your network ports Both make it more difficult for outside users to enter your network 4021196 Rev C Configure Security Security gt VPN Passthrough Use this page to configure Virtual Private Network VPN support Enabling the settings on this page allows VPN tunnels using IPsec or PPTP protocols to pass through the gateway s firewall Select the VPN Passthrough tab to open the Security VPN Passthrough page Access Applications A s Sec Setup Wireless vecurity Restrictions amp Ga
109. tructions in the following table to configure the time of day rules for your residential gateway After you make your selections click Save Settings to apply your changes or Cancel Changes to cancel 4021196 Rev C 65 Control Access to the Gateway 66 Section Field Description Tod Filter Add Allows you to add a new Time of Day access filter or rule Enter the name of the filter and click the Add key to add the filter to the list Time of Day rules are used to restrict Internet access based on the day and time Remove Removes the selected filter from the Time of Day filter list Schedule Days to Block Allows you to control access based on days of the week Time to Block Allows you to control access based on time of day Access Restrictions gt User Setup Use the Access Restrictions User Setup page to set up additional accounts and user profiles for household members Each profile can be assigned customized levels of Internet access as defined by the access rules assigned to that user s profile Important These additional accounts do not grant administrative access to the gateway Note Once you define and enable user profiles each user must sign on each time they wish to access the Internet The user can sign on when the pop up sign on screen appears in their Web browser The user must enter their correct user name and password in order to gain Internet access Select the User Setup tab to open the Access Restrictions Us
110. up you should choose a wireless passphrase that is easy for you to remember and hard for anyone else to guess The first time you connect a new wireless device to this network you may need to enter this passphrase into the appropriate setup section in the connected device To improve your network security do not give out this passphrase to unauthorized uses Please enter a phrase of letters and or numbers from 4 to 24 digits long Then click Generate to create the Passphrase E Key 1 4 If you want to manually enter WEP keys then complete the fields provided Each WEP key can consist of the letters A through F and the numbers 0 through 9 It should be 10 characters in length for 40 64 bit encryption or 26 characters in length for 104 128 bit encryption E TX Key Choose a Transmit TX Key from 1 to 4 The TX key is the key that will be used to encrypt your data Although four keys can be created only one key is used for encrypting data Select one of the four keys for WEP encryption Use the selected TX key to set up your wireless clients 4021196 Rev C Section 4021196 Rev C Configure Wireless Settings Field Description WPA Security for Personal Networks WPA or WPA2 Personal Modes Wi Fi Protected Access WPA is a more secure wireless technology than WEP WPA can be used for both Enterprise corporate applications and Personal home network wireless networks We strongly recommend that you select either WPA Personal or WPA2
111. up Wireless Security Restrictions amp Gaming Administration Status Log OFF PortFiltering PortRange Forwarding PortRange Triggering DDMA DMZ Hosting Enable disable DMZ Host IP Address 0 0 0 0 Save Settings Cancel Changes 4021196 Rev C 73 Configure Applications and Gaming 74 Applications and Gaming DMZ Page Description Use the descriptions and instructions in the following table to configure the port range triggering for the residential gateway Select enable for each DMZ Host IP address After you make your selections click Save Settings to apply your changes or Cancel Changes to cancel Section Field Description DMZ DMZ Hosting Select the desired option E Enable E Disable factory default DMZ Host IP Address DMZ allows one IP address to be unprotected while others remain protected Enter the IP address of the computer you want to expose to the Internet in this field 4021196 Rev C Manage the Gateway Manage the Gateway Administration gt Management The Administration Management page allows the network s administrator to manage specific gateway functions for access and security Select the Management tab to open the Administration Management page Important The following page displays when DHCP factory default is the Connection Mode The page that displays when Static IP is selected is shown and described later in this section Access Applications 8 S Security j ps Setup
112. utres dispositions French pertinentes de la Directive 1999 5 EC slenska etta t ki er samkv mt grunnkr fum og rum vi eigandi kv um Icelandic Tilskipunar 1999 5 EC Italiano Questo apparato conforme ai requisiti essenziali ed agli altri principi sanciti Italian dalla Direttiva 1999 5 CE Latviski iek rta atbilst Direkt vas 1999 5 EK b tiskaj m pras b m un citiem ar to Latvian saist tajiem noteikumiem Lietuvi is renginys tenkina 1999 5 EB Direktyvos esminius reikalavimus ir kitas ios Lithuanian direktyvos nuostatas Nederlands Dit apparaat voldoet aan de essentiele eisen en andere van toepassing zijnde Dutch bepalingen van de Richtlijn 1999 5 EC Malti Dan l apparat huwa konformi mal ti iet essenzjali u l provedimenti l o ra Maltese rilevanti tad Direttiva 1999 5 EC Magyar Eza k sz l k teljes ti az alapvet k vetelm nyeket s mas 1999 5 EK Hungarian ir nyelvben meghat rozott vonatkoz rendelkez seket Norsk Dette utstyret er i samsvar med de grunnleggende krav og andre relevante Norwegian bestemmelser i EU direktiv 1999 5 EF Polski Urz dzenie jest zgodne z og lnymi wymaganiami oraz szczeg lnymi Polish warunkami okre lonymi Dyrektyw UE 1999 5 EC Portugu s Este equipamento esta em conformidade com os requisitos essenciais e outras Portuguese provis es relevantes da Directiva 1999 5 EC Romana Acest echipament este in conformitate cu cer

Cisco Systems 4034441 Router User Manual

Contents

Download Pdf Manuals

Related Search

Related Contents