Page 4
Safety and Regulatory Information SAFETY AND REGULATORY INFORMATION IMPORTANT SAFETY INSTRUCTIONS When using your equipment, basic safety precautions should always be followed to reduce the risk of fire, electric shock, and injury to persons, including the following: • Read all of the instructions listed here and/or in the user manual before you operate this device.
Page 5
CARING FOR THE ENVIRONMENT BY RECYCLING When you see this symbol on a Motorola product, do not dispose of the product with residential or commercial waste.
Page 6
(1) This device may not cause harmful interference, and (2) This device must accept any interference received, including interference that may cause undesired operation. FCC CAUTION: Any changes or modifications not expressly approved by Motorola for compliance could void the user’s authority to operate the equipment.
Page 7
Motorola website. INTERNATIONAL DECLARATION OF CONFORMITY We, Motorola, Inc., 101 Tournament Drive, Horsham, PA 19044, U.S.A., declare under our sole responsibility that the SBG901 SURFboard Wireless Cable Modem Gateway Series to which this declaration relates is in conformity with one or more of the following standards:...
Table of Contents Safety and Regulatory Information Overview Contact Information ..........................9 SBG901 Features..........................9 SBG901 LAN Choices........................10 Wireless LAN ...........................11 Wired Ethernet LAN.........................12 Front Panel LEDs Overview ......................13 Rear Panel Overview ........................14 MAC Label ............................15 Getting Started Before You Begin..........................16 Precautions ..........................17 Signing Up for Service......................17 System Requirements ......................17 Connecting the SBG901 to the Cable System ................18...
Page 9
Status Connection Page .........................32 Status Security Page ........................33 Changing the SBG901 Default Password ................33 Status Diagnostics Page.........................34 Ping Utility ..........................34 Traceroute Utility........................35 Status Event Log Page ........................36 Basic Pages Basic Setup Page..........................37 Basic DHCP Page ...........................39 Basic DDNS Page ...........................40 Basic Backup Page .........................41 Restoring Your SBG901 Configuration..................41 Backing Up Your SBG901 Configuration..................41...
Page 10
Encrypting Wireless LAN Transmissions .................73 Installing Wireless Clients ......................74 Configuring a Wireless Client for WPA ..................74 Configuring a Wireless Client for WEP ..................75 Configuring a Wireless Client with the Network Name (SSID)..........75 Troubleshooting Solutions ............................76 Front-Panel LEDs and Error Conditions ..................77 Product Specifications Glossary Software License...
For any questions or assistance with the SBG901 wireless gateway, contact your Internet Service provider. For information on customer service, technical support, or warranty claims; see the Motorola SBG901 Software License, Warranty, Safety, and Regulatory Information card provided with the SBG901 wireless cable modem gateway. SBG901 Features The SBG901 wireless gateway combines high-speed Internet access, networking, and computer security for a home or small-office LAN.
Port Forwarding to configure ports to run applications having special network requirements. For the most recent product documentation, visit the Modems & Gateways page on the Motorola website: http://broadband.motorola.com/consumers/support/default.asp. SBG901 LAN Choices You can connect up to 245 client computers to the SBG901 using one or any combination of the following network connections: •...
Your maximum wireless operation distance depends on the type of materials through which the signal must pass and the location of your SBG901 and clients (stations). Motorola cannot guarantee wireless operation for all supported distances in all environments. 1 • Overview...
Wired Ethernet LAN You can easily connect any PC with an Ethernet LAN port to the SBG901 Ethernet connection. Because the SBG901 Ethernet port supports auto-MDIX, you can use straight-through or cross-over cable to connect a hub, switch, or computer. Use category 5, or better, cabling for all Ethernet connections.
Front Panel LEDs Overview The SBG901 front panel contains indicator lights and a Pairing button which is used for configuring a secure wireless connection with a client card that also has a Pairing button/feature to automatically connect to the SBG901 wireless network. The display remains dark until there is a connection or activity on an interface.
Rear Panel Overview The SBG901 rear panel contains the following cabling port and connectors: Item Description ETHERNET Connects to an Ethernet-equipped computer, hub, or switch using an RJ-45 cable connection. Activity LED — Green LED defines the activity of the Ethernet connector.
MAC Label The SBG901 Media Access Control (MAC) label contains the MAC address which is a unique, 48-bit value that identifies each Ethernet network device. To receive data service, you will need to provide the MAC address marked HFC MAC ID to your Internet Service provider.
Determine which connection types you will make to the SBG901. Check that you have the required cables, adapters, and adapter software. You may need: Item Description Wireless LAN Wireless adapter and driver software for each computer having a wireless connection Wired Ethernet Ethernet cables and network interface cards (NICs) with accompanying installation software...
Automatically retrieve the IP address using the Network DHCP server The Motorola SBG901 gateway provides a DHCP server on its LAN. It is recommended that you configure your LAN to obtain the IPs for the LAN and DNS server automatically.
5. Select Internet Protocol (TCP/IP) and click Properties to display the Internet Protocol (TCP/IP) Properties window. 6. Select Obtain an IP address automatically and Obtain DNS server address automatically. 7. Click OK to save the TCP/IP settings and exit the TCP/IP Properties window. 8.
This can occur if the SBG901 is configured to automatically obtain an IP address from a Dynamic Host Configuration Protocol (DHCP) server. When Autoconfiguration is enabled, Windows automatically assigns an IP address if the cable modem gateway is unable to obtain one.
Wall Mounting the SBG901 Do the following to mount the SBG901 on the wall: • Locate the unit as specified by the local or national codes governing residential or business cable TV and communications services. • Follow all local standards for installing a network interface unit/network interface device (NIU/NID).
After mounting, reconnect the coaxial cable input and Ethernet connection. Plug the power cord into the +12VDC connector on the cable modem and the electrical outlet. Route the cables so that they are not a safety problem. Wall Mounting Template You can print the following page to use as a wall mounting template.
2. In the Address or Location field of your browser, type http://192.168.0.1 and press ENTER. 3. Type admin in the Username field (this field is case-sensitive). 4. Type motorola in the Password field (this field is case-sensitive). 3 • Basic Configuration...
Page 28
5. Click Login to display the SBG901 Status Connection page. The Status Connection page provides the following status information on the network connection of the SBG901: • RF Downstream Channel which uses lower cable frequencies to transmit data • RF Upstream Channel which uses higher cable frequencies to receive data Click the Refresh button in your web browser any time you want to refresh the information on this page.
Configures and monitors the SBG901 parental control feature Wireless Configures and monitors SBG901 wireless networking features Logout Exits the SBG901 Configuration Manager CAUTION: To prevent unauthorized configuration, immediately change the default password when you first configure your Motorola SBG901. 3 • Basic Configuration...
SBG901 Submenu Options Additional features for each menu option are displayed by clicking a Submenu Option in the left panel of each page. When selected, the submenu option will be highlighted in yellow. Changing the SBG901 Default Password Do the following to change the default password: 1.
DMZ host because the ports required vary from game to game. For these games, Motorola recommends configuring the gaming computer or device as a gaming DMZ device. To configure a gaming DMZ device, on the...
Status Pages The SBG901 Status pages provide information about the SBG901 hardware and software, MAC address, cable modem IP address, serial number, and related information. You can also monitor your cable system connection. Additional pages provide diagnostic tools and allow you to change your SBG901 user name and password. You can click any Status submenu option to view or change the status information for that option.
Status Connection Page This page provides the HFC and IP network connectivity status of the SBG901 cable modem. You can click the Refresh button in your web browser to refresh the information on this page at any time. Field Descriptions for the Status Connection Page Field Description Startup Procedure...
Status Diagnostics Page This page provides the following diagnostic tools for troubleshooting IP connectivity problems: • Ping (LAN) • Traceroute (WAN) Ping Utility Ping (Packet InterNet Groper) allows you to check connectivity between the SBG901 and other devices on the SBG901 LAN. This utility sends a small packet of data and then waits for a reply.
Traceroute Utility Traceroute allows you to map the network path from the SBG901 Configuration Manager to a public host. Selecting Traceroute from the Select Utility drop-down list will present alternate controls for the Traceroute utility. 1. Enter the IP address or Host Name of the computer you want to target for the Traceroute operation in the Target field.
Status Event Log Page This page lists the critical system events in chronological order. A sample Event log is shown below: Field Descriptions for the Status Event Log Page Field Description Time Indicates the date and time the error occurred Priority Indicates the level of importance of the error Description...
Basic Pages The SBG901 Basic Pages allow you to view and configure SBG901 IP-related configuration data, including Network Configuration, WAN Connection Type, DHCP, and DDNS. The Backup option allows you to save a copy of your SBG901 configuration on your computer. You can click any Basic submenu option to view or change the configuration information for that option.
Page 40
Field Description IP Address Enter the IP address of the SBG901 on your private LAN. MAC Address Media Access Control address — a set of 12 hexadecimal digits assigned during manufacturing that uniquely identifies the hardware address of the SBG901 Access Point. IP Address The public WAN IP address of your SBG901 device, which is either dynamically or statically assigned by your ISP.
Basic DHCP Page This page allows you to configure and view the status of the optional internal SBG901 DHCP (Dynamic Host Configuration Protocol) server for the LAN. CAUTION: Do not modify these settings unless you are an experienced network administrator with strong knowledge of IP addressing, subnetting, and DHCP.
Field Description WINS Addresses Specifies up to three Windows Internet Name Service (WINS) Server Addresses. When done, click Apply to save your changes. To renew a DHCP client IP address, choose Select and then click Force Available. Basic DDNS Page This page allows you to set up the Dynamic Domain Name System (DDNS) service.
Basic Backup Page This page allows you to save your current SBG901 configuration settings locally on your computer or restore previously saved configurations. Field Descriptions for the Basic Backup Page Field Description Restore Lets you restore a previously saved configuration. Backup Lets you create a backup copy of the current configuration.
Advanced Pages The SBG901 Advanced Pages allow you to configure the advanced features of the SBG901: • IP Filtering • MAC Filtering • Port Filtering • Port Forwarding • Port Triggers • DMZ Host • Routing Information Protocol (RIP) Setup You can click any Advanced submenu option to view or change the advanced configuration information for that option.
Page 45
Field Descriptions for the Advanced Options Page Field Description WAN Blocking Prevents the SBG901 Configuration Manager or the PCs behind it from being visible to other computers on the SBG901 WAN. Checkmark Enable to turn on this option. IPsec PassThrough Enables the IPsec Pass-Through protocol to be used through the SBG901 Configuration Manager so that a VPN device (or software) may communicate properly with the WAN.
Advanced IP Filtering Page This page allows you to define which local PCs will be denied access to the SBG901 WAN. You can configure IP address filters to block Internet traffic to specific network devices on the LAN by entering starting and ending IP address ranges. Note that you only need to enter the LSB (Least-significant byte) of the IP address;...
Advanced MAC Filtering Page This page allows you to define up to twenty Media Access Control (MAC) address filters to prevent PCs from sending outgoing TCP/UDP traffic to the WAN via their MAC addresses. This is useful because the MAC address of a specific NIC card never changes, unlike its IP address, which can be assigned via the DHCP server or hard-coded to various addresses over time.
Advanced Port Filtering Page This page allows you to define port filters to prevent all devices from sending outgoing TCP/UDP traffic to the WAN on specific IP port numbers. By specifying a starting and ending port range, you can determine what TCP/UDP traffic is allowed out to the WAN on a per-port basis.
Advanced Port Forwarding Page This page allows you to run a publicly accessible server on the LAN by specifying the mapping of TCP/UDP ports to a local PC. This enables incoming requests on specific port numbers to reach web servers, FTP servers, mail servers, etc. so that they can be accessible from the public Internet.
Advanced Port Triggers Page This page allows you to configure dynamic triggers to specific devices on the LAN. This allows for special applications that require specific port numbers with bi-directional traffic to function properly. Applications such as video conferencing, voice, gaming, and some messaging program features may require these special settings.
Field Description Protocol Select TCP, UDP, or Both from the drop-down list. Enable Select checkbox to activate the IP port triggers. Advanced DMZ Host Page This page allows you to specify the default recipient of WAN traffic that NAT is unable to translate to a known local PC.
Page 52
automatically identifies and uses the best known and quickest route to any given destination address. To help reduce network congestion and delays, the Advanced RIP setup is used in WAN networks to identify and use the best known and quickest route to given destination addresses.
Page 53
Field Description packet, and it also indicates the authentication algorithm. RIP Reporting Interval Determines how long before a RIP packet is sent out to the CPE. RIP Destination IP Address Location where the RIP packet is sent to update the routing table in your CPE.
Firewall Pages The SBG901 Firewall Pages allow you to configure the SBG901 firewall filters and firewall alert notifications. The SBG901 firewall protects the SBG901 LAN from undesired attacks and other intrusions from the Internet. It provides an advanced, integrated stateful-inspection firewall supporting intrusion detection, session tracking, and denial-of-service attack prevention.
Firewall Web Content Filter Page This page allows you to configure the firewall by enabling or disabling various Web filters related to blocking or exclusively allowing different types of data through the Configuration Manager from the WAN to the LAN. Java Applets, Cookies, ActiveX controls, popup windows, and Proxies can be blocked from this page.
Firewall Local Log Page This page allows you to set up how to send notification of the firewall event log in either of the following formats: • Individual e-mail alerts sent out automatically each time the firewall is under attack •...
Firewall Remote Log Page This page allows you to send firewall attack reports out to a standard SysLog server so many instances can be logged over a long period of time. You can select individual attack or configuration items to send to the SysLog server so that only the items of interest will be monitored.
Parental Control Pages The SBG901 Parental Control Pages allow you to configure access restrictions to a specific device connected to the SBG901 LAN. You can click any Parental Control submenu option to view or change the configuration information for that option. Parental Control User Setup Page This page is the master page.
Page 59
Field Descriptions for the Parental Control User Setup Page Field Description Add User Adds a user to set the parental controls for a specific user. User Settings Select the user for whom you want to modify access restrictions. Checkmark Enable to select the user. Click Remove User to delete the user from Parental Controls.
Parental Control Basic Setup Page This page allows you to set rules to block certain kinds of Internet content and certain Web sites. After you have changed your Parental Control settings, click the appropriate Apply, Add, or Remove button. Click Refresh in your web browser window to view your current settings. 8 •...
Parental Control Time of Day Access Policy Page This page allows you to block all Internet traffic to and from specified devices on your SBG901 network based on the day and time settings you specify. You can set policies to block Internet traffic for the entire day or just certain time periods within each day for specific users.
Parental Control Event Log Page This page displays the Parental Control event log report. The event log is a running list of the last 30 Parental Control access violations, which include the following items on Internet traffic: • If the user’s Internet access is blocked (time filter) •...
Wireless Pages The SBG901 Wireless Pages allow you to configure your wireless LAN (WLAN). You can click any Wireless submenu option to view or change the configuration information for that option. WPA or WPA2 encryption provides higher security than WEP encryption, but older wireless client cards may not support the newer WPA or WPA2 encryption methods.
Wireless 802.11 Primary Network Page This page allows you to configure the Primary wireless network. Field Descriptions for the Wireless 802.11 Primary Network Page Field Description Primary Network When set to Enabled, beacon frames are transmitted with the Primary Network SSID. Network Name (SSID) Sets the Network Name (also known as SSID) of the Primary wireless network.
Page 65
Field Description WPA/WPA2 Encryption When using WPA or WPA2 authentication, these WPA encryption modes can be set: TKIP, AES, or TKIP + AES. AES (Advanced Encryption Standard) provides the strongest encryption, while TKIP (Temporal Key Integrity Protocol) provides strong encryption with improved compatibility. The TKIP + AES mode allows both TKIP and AES-capable clients to connect.
Page 66
Field Description 802.1x Authentication This is another type of authentication and is used on top of WEP. 802.1x Authentication is a much stronger type of authentication than WEP. Network Key 1 – 4 Sets the static WEP keys when WEP encryption is enabled. •...
Wireless 802.11 Guest Network Page This page allows you to configure a secondary guest network on the wireless interface. This network is isolated from the LAN. Any clients that associate with the guest network SSID will be isolated from the private LAN and can only communicate with WAN hosts. Field Descriptions for the Wireless 802.11 Guest Network Page Field Description...
Page 68
Field Description Guest Network Name (SSID) Assigns a unique network name (SSID) for the guest network, which appears in the beacon frames. Closed Network With a closed network, users type the SSID into the client application instead of selecting the SSID from a list. This feature makes it slightly more difficult for the user to gain access.
Wireless 802.11 Advanced Page This page allows you to configure data rates and Wi-Fi thresholds. Field Descriptions for the Wireless 802.11 Advanced Page Field Description 54g™ Mode Sets these network modes: 54g Auto 54g Performance 54g LRS 802.11b only 54g Auto accepts 54g, 802.11g, and 802.11b clients, but optimizes performance based on the type of connected clients.
Page 70
Field Description are mixed wireless networks in the surrounding area from 802.11a/b/g networks. Afterburner™ Technology This is also a performance-enhancing Wi-Fi technology that enhances the existing 802.11g standard by increasing throughput by 40 percent. Rate Forces the transmission rate for the AP to a particular speed. Auto will provide the best performance in nearly all situations.
Wireless 802.11 Access Control Page This page allows you to configure the Access Control to the AP as well as status on the connected clients. Field Descriptions for the Wireless 802.11 Access Control Page Field Description MAC Restrict Mode Selects whether wireless clients with the specified MAC address are allowed or denied wireless access.
Page 73
Field Description EDCA AP Parameters Specifies the transmit parameters for traffic transmitted from the AP to the STA in four Access Categories: Best Effort (AC_BE) Background (AC_BK) Video (AC_VI) Voice (AC_VO) Transmit parameters include Contention Window (CWmin and CWmax), Arbitration Inter Frame Spacing Number (AIFSN), and Transmit Opportunity Limit (TXOP Limit).
Wireless 802.11 Bridging Page This page allows you to configure the WDS features. Field Descriptions for the Wireless 802.11 Bridging Page Field Description Wireless Bridging Enables or disables wireless bridging. Remote Bridges Table of remote bridge MAC addresses authorized to establish a wireless bridge.
You must configure the identical WEP key to the SBG901 SBG901 on each wireless client. If all of your wireless clients support WPA encryption, Motorola recommends using WPA instead of WEP because WPA: • Provides much stronger encryption and is more secure •...
Installing Wireless Clients Note: Use the SBG901 Installation CD-ROM to set the client security. The passcode is located on the label. For each wireless client computer (station), install the wireless adapter by following the instructions supplied with the adapter. Be sure to: 1.
Configuring a Wireless Client for WEP If you enabled WEP and set a key by configuring WEP on the SBG901, you must configure the same WEP key on each wireless client. The SBG901 cannot authenticate a client if: • Shared Key Authentication is enabled on the SBG901 but not on the client •...
Troubleshooting If the solutions listed here do not solve your problem, contact your service provider. Before calling your service provider, try pressing the Reset button on the rear panel of the SBG901. Resetting the SBG901 may take five to 30 minutes. Your service provider may ask for the status of the lights as described in Front-Panel LEDs and Error Conditions.
Problem Possible Solution Wireless client(s) Perform the first four checks in “Cannot send or receive data.” cannot send or receive Check the Security Mode setting on the Wireless Primary Network data Page: • If you enabled WPA and configured a passphrase on the SBG901, be sure each affected wireless client has the identical passphrase.
Product Specifications All features, functionality, and other product specifications are subject to change without notice or obligation. Certain features may not be activated by your service provider and/or their network settings may limit the feature’s functionality. Additionally, certain features may require a subscription.
Page 81
UPSTREAM Modulation 8***, 16, 32***, 64***,128*** QAM or QPSK Maximum Channel Rate 30 Mbps** Bandwidth 200 kHz, 400 kHz, 800 kHz, 1.6 MHz, 3.2 MHz, 6.4 MHz*** Symbol Rates 160, 320, 640, 1280, 2560, 5120*** ksym/s Operating Level Range A-TDMA 8 to 54 dBmV (32, 64 QAM), 8 to 55 dBmV (8, 16 QAM) , 8 to 58 dBmV (QPSK)
Glossary This glossary defines some of the terms and acronyms used in this document. TERM DEFINITION Authentication A process where the CMTS verifies that access is authorized, using a password, trusted IP address, or serial number. cable modem A device installed at a subscriber location to provide data communications over an HFC network.
Page 83
TERM DEFINITION gateway A device that enables communication between networks using different protocols. The SBG901 enables up to 245 computers supporting IEEE 802.11b/g or Ethernet to share a single broadband Internet connection. Internet Service Provider MAC address The Media Access Control address is a unique, 48-bit value permanently saved in ROM at the factory to identify each Ethernet network device.
Page 84
Wi-Fi Protected Access (WPA) encryption, as described on the Wi-Fi Alliance web page: http://www.wifialliance.org. It is a far more robust form of encryption than WEP. Motorola recommends using WPA if all of your client hardware supports WPA. B • Glossary...
The Software is never sold. Motorola licenses the Software to the original customer and to any subsequent licensee for personal use only on the terms of this License. Motorola and its 3rd party licensors retain the ownership of the Software.
Page 86
Motorola and its 3rd party licensors. Motorola retains all rights not expressly licensed under this License. The Software, including any images, graphics, photographs, animation, video, audio, music and text incorporated therein is owned by Motorola or its 3rd party licensors and is protected by United States copyright laws and international treaty provisions.