ABOUT THIS USER’S GUIDE INTENDED AUDIENCE This manual is intended for people who want to configure the CGNV2’s features via its Graphical User Interface (GUI). HOW TO USE THIS USER’S GUIDE This manual contains information on each the CGNV2’s GUI screens, and describes how to use its various features.
Settings in the GUI, then Advanced settings. A key stroke is denoted by square brackets and uppercase text. For example: Press [ENTER] to continue. CUSTOMER SUPPORT For technical assistance or other customer support issues, please consult your Hitron representative. ABOUT THIS USER’S GUIDE...
Page 5
This User’s Guide is provided “as is” without express or implied warranty of any kind. Neither Hitron Technologies nor its agents assume any liability for inaccuracies in this User’s Guide, or losses incurred by use or misuse of the information in this User’s Guide.
Page 6
HITRON CGNV2 USER’S GUIDE ABOUT THIS USER’S GUIDE...
1.2 Hardware Connections ...............16 1.3 LEDs ....................18 1.4 IP Address Setup ................20 1.4.1 Manual IP Address Setup ............21 1.5 Login to the CGNV2 ................22 1.6 GUI Overview ..................22 1.7 Resetting the CGNV2 .................23 Cable ....................25 2.1 Cable Overview ..................25 2.1.1 DOCSIS ..................25...
Page 8
HITRON CGNV2 USER’S GUIDE 2.1.6 MAC Addresses ................ 28 2.1.7 Routing Mode ................28 2.1.8 Configuration Files ..............29 2.1.9 Downstream and Upstream Transmissions ......29 2.1.10 Cable Frequencies ..............29 2.1.11 Modulation ................29 2.1.12 TDMA, FDMA and SCDMA ............. 30 2.2 The System Info Screen ..............
Page 9
HITRON CGNV2 USER’S GUIDE 4.5 The Forwarding Screen ..............59 4.5.1 Adding or Editing a Port Forwarding Rule .........61 4.6 The Port Triggering Screen ..............63 4.6.1 Adding or Editing a Port Triggering Rule ........64 Parental Control ................67 5.1 Parental Control Overview ..............67 5.1.1 Website Blocking ...............67...
Internet via the cable connection. Computers with a wired connection to the CGNV2 are on the Local Area Network (LAN), computers with a wireless connection to the CGNV2 are on the Wireless Local Area Network (WLAN) and the CGNV2 connects to the service provider over the Wide Area Network (WAN).
MAC filtering, port forwarding and port triggering, and De-Militarized Zone (DMZ) Parental control: scheduled website blocking and access logs Settings backup and restore Secure configuration interface, accessible by Web browser HARDWARE CONNECTIONS This section describes the CGNV2’s physical ports and buttons. INTRODUCTION...
Reset Use this button to reboot or reset your CGNV2. Press the button and hold it for less than five seconds to reboot the CGNV2. The CGNV2 restarts, using your existing settings.
POWER Use this to connect to the 12v/2A power adapter that came with your CGNV2. NEVER use another power adapter with your CGNV2. Doing so could harm your CGNV2. LEDS This section describes the CGNV2’s LEDs (lights). INTRODUCTION...
A device is connected to a LAN port via a fast ethernet link, but is not transmitting or receiving data. Status Blinking The CGNV2’s cable modem is registering with the service provider. The CGNV2’s cable modem has successfully registered with the service provider. INTRODUCTION...
WIRELESS LED lights up once the wireless network is ready. IP ADDRESS SETUP Before you log into the CGNV2’s GUI, your computer’s IP address must be in the same subnet as the CGNV2. This allows your computer to communicate with the CGNV2.
23. Bear in mind that ALL user-configured settings are lost. 1.4.1 MANUAL IP ADDRESS SETUP By default, your CGNV2’s local IP address is 192.168.0.1. If your CGNV2 is using the default IP address, you should set your computer’s IP address to be between 192.168.0.2 and 192.168.0.254.
LOGIN TO THE CGNV2 Take the following steps to login to the CGNV2’s GUI. NOTE: You can login to the CGNV2’s GUI via the wireless interface. However, it is strongly recommended that you configure the CGNV2 via a wired connection on the LAN.
CGNV2 is returned to its initial configuration state. There are two ways to reset the CGNV2: Press the RESET button on the CGNV2, and hold it in for ten seconds or longer. Click WAN/LAN > Backup. In the screen that displays, click the Factory Reset button.
Page 24
HITRON CGNV2 USER’S GUIDE The CGNV2 turns off and on again, using its factory default settings. NOTE: Depending on your CGNV2’s previous configuration, you may need to re- configure your computer’s IP settings; see IP Address Setup on page 20.
The Data Over Cable Service Interface Specification (DOCSIS) is a telecommunications standard that defines the provision of data services) Internet access) over a traditional cable TV (CATV) network. Your CGNV2 supports DOCSIS version 3.0. 2.1.2 IP ADDRESSES AND SUBNETS Every computer on the Internet must have a unique Internet Protocol (IP) address.
Local Area Network (LAN) and Wireless Local Area Network (WLAN), if enabled. You are free to assign IP addresses to computers on the LAN and WLAN manually, or to allow the CGNV2 to assign them automatically via DHCP (Dynamic Host Configuration Protocol). IANA has reserved the following blocks...
By default, the CGNV2 is a DHCP client on the WAN (the CATV connection). It broadcasts an IP address over the cable network, and receives one from the service provider. By default, the CGNV2 is a DHCP server on the LAN; it provides IP addresses to computers on the LAN which request them.
(or other device). For example, if a single computer has an Ethernet card (to connect to your CGNV2 via one of the LAN ports) and also has a wireless card (to connect to your CGNV2 over the wireless interface) the MAC addresses of the two cards will be different.
HITRON CGNV2 USER’S GUIDE When the CGNV2 is not in routing mode, the service provider assigns an IP address to each computer connected to the CGNV2 directly. The CGNV2 does not perform any routing operations, and traffic flows between the computers and the service provider.
SCDMA allows multiple users to share the same frequency channel by assigning a unique orthogonal code to each user. THE SYSTEM INFO SCREEN Use this screen to see general information about your CGNV2’s hardware, its software, and its connection to the Internet. NOTE: Most of the information that displays in this screen is for troubleshooting purposes only.
MAC Address RF MAC Address This displays the Media Access Control (MAC) address of the CGNV2’s RF module. This is the module that connects to the Internet through the CATV connection. Ethernet MAC This displays the Media Access Control (MAC) address of Address the CGNV2’s Ethernet module.
This screen displays the steps successfully taken to connect to the Internet over the CATV connection. Use this screen for troubleshooting purposes to ensure that the CGNV2 has successfully connected to the Internet; if an error has occurred you can identify the stage at which the failure occurred.
FIGURE 7: The Cable > Initialization Screen For each step: Process displays when the CGNV2 is attempting to complete a connection step. Success displays when the CGNV2 has completed a connection step. THE STATUS SCREEN Use this screen to discover information about: ...
Internet over the CATV connection. Permitted displays if you can access the Internet. Denied displays if you cannot access the Internet. Downstream NOTE: The downstream signal is the signal transmitted to the CGNV2. CABLE...
CATV interface. This is the frequency to which the CGNV2 is locked in; it will only scan for another frequency if this frequency becomes unavailable. If you want the CGNV2 to attempt to connect at a different frequency, enter it in the field and click Apply. NOTE: Do not change the frequency unless you have a good reason to do so.
DHCP server. THE PASSWORD SCREEN Use this screen to change the password with which you log in to the CGNV2. NOTE: If you forget your password, you will need to reset the CGNV2 to its factory defaults.
Re-Enter New Password Password Idle Time Enter the number of minutes of inactivity after which you should be automatically logged out of the CGNV2. Once this period elapses, you will need to login again. Apply Click this to save your changes to the fields in this screen.
A Local Area Network (LAN) is a network of computers that are physically linked together on a single site without the use of telephone lines of any sort. Your CGNV2’s LAN consists of all the computers and other networking devices connected to the LAN 1~2 ports.
Internet even if the IP address of the website’s server has changed. Similarly, the CGNV2 allows you to define a Domain Suffix to the LAN. When you enter the domain suffix into your browser, you can reach the CGNV2 no matter what IP address it has on the LAN.
HITRON CGNV2 USER’S GUIDE See information about the network devices connected to the CGNV2 on the LAN. Click WAN/LAN > LAN IP. The following screen displays. FIGURE 10: The WAN/LAN > LAN IP Screen The following table describes the labels in this screen.
Page 42
The Domain Suffix is hitronhub.home by default. Private LAN DHCP Setting Enable LAN DHCP Select this if you want the CGNV2 to provide IP addresses to network devices on the LAN automatically. Deselect this if you already have a DHCP server on your LAN, or if you wish to assign IP addresses to your computers and other network devices manually.
HITRON CGNV2 USER’S GUIDE TABLE 10: The WAN/LAN > LAN IP Screen (continued) Delete Select a reserved IP’s radio button and click this to remove. The deleted information cannot be retrieved. Connected Computers Host Name This displays the name of each network device connected on the LAN.
HITRON CGNV2 USER’S GUIDE The following table describes the labels in this screen. TABLE 11: The WAN/LAN > LAN IP > Add/Edit Screen Reserved IP MAC Address Use this field to enter the Media Access Control (MAC) address of the network device.
THE BACKUP SCREEN Use this screen to back up your CGNV2’s settings to your computer, to load settings from a backup you created earlier, to reboot your CGNV2, or to return it to its factory default settings. Click WAN/LAN > Backup. The following screen displays.
HITRON CGNV2 USER’S GUIDE THE WAN IP SCREEN Use this screen to: Configure the CGNV2’s WAN IP address, subnet mask and domain suffix Configure the CGNV2’s internal DNS server See the current MTU size of the CGNV2 on the WAN.
HITRON CGNV2 USER’S GUIDE TABLE 14: The WAN/LAN > WAN IP Screen (continued) WAN Subnet Mask This displays the CGNV2’s WAN subnet mask. If you select static IP mode, use this field to enter the subnet mask. WAN IP Gateway This displays the CGNV2’s WAN gateway IP address.
4.1.3 PING The CGNV2 allows you to use the ping utility on the LAN (in the LAN > Debug screen) and also on the WAN (in the Firewall > Firewall Options screen). For more information, see Debugging (Ping and Traceroute) on page 40.
HITRON CGNV2 USER’S GUIDE Deny the devices on the list access to the CGNV2 and the network (in which case all other devices can access the network) Allow the devices on the list to access the network (in which case no other devices can access the network) 4.1.5...
THE FIREWALL OPTIONS SCREEN Use this screen to turn firewall features on or off, and to configure your network’s Demilitarized Zone (DMZ). You can enable or disable the CGNV2’s intrusion detection system, and allow or prevent responses to ICMP requests from the WAN.
LAN. Connected Computers Click this to see a list of the computers currently connected to the CGNV2 on the LAN. [...] IP Address [...] Enter the IP address of the computer that you want to add to the DMZ.
HITRON CGNV2 USER’S GUIDE You can set the CGNV2 to allow only certain devices to access the CGNV2 and the network, or to deny certain devices access. NOTE: To see a list of all the computers connected to the CGNV2 on the LAN, click the Connected Computers button in the Firewall >...
Page 54
TABLE 16: The Firewall > MAC Filtering Screen MAC Filter Options MAC Filter Options Use this field to control whether the CGNV2 performs MAC filtering. Select Allow-All to turn MAC filtering off. All devices may access the CGNV2 and the network.
Select Deny to add the device to the Deny Table. Manually-Added LAN Devices Device Name Enter the name to associate with a network device that you want to permit or deny access to the CGNV2 and the network. NOTE: This name is arbitrary, and does not affect functionality in any way.
HITRON CGNV2 USER’S GUIDE FIGURE 17: The Firewall > IP Filtering Screen The following table describes the labels in this screen. TABLE 17: The Firewall > IP Filtering Screen All IP Filtering Rules Use this to turn IP filtering on or off.
HITRON CGNV2 USER’S GUIDE TABLE 17: The Firewall > IP Filtering Screen (continued) Enable Use this field to turn each IP filtering rule on or off. Select this checkbox to enable the IP filtering rule. Deselect this checkbox to disable the IP filtering rule.
HITRON CGNV2 USER’S GUIDE FIGURE 18: The Firewall > IP Filtering > Add/Edit Screen The following table describes the labels in this screen. TABLE 18: The Firewall > IP Filtering > Add/Edit Screen IP Filtering Add/Edit Application Name Enter a name for the application that you want to block.
HITRON CGNV2 USER’S GUIDE TABLE 18: The Firewall > IP Filtering > Add/Edit Screen Protocol Use this field to specify whether the CGNV2 should block communication via: Transmission Control Protocol (TCP) User Datagram Protocol (UDP) Both TCP and UDP.
These fields display the ports to which the rule applies: The Public field displays the incoming port range. These are the ports on which the CGNV2 received traffic from the originating host on the WAN. The Private field displays the port range to which the CGNV2 forwards traffic to the device on the LAN.
HITRON CGNV2 USER’S GUIDE TABLE 19: The Firewall > Forwarding Screen (continued) Enable Use this field to turn each port forwarding rule on or off. Select this checkbox to enable the port forwarding rule. Deselect this checkbox to disable the port forwarding rule.
Page 62
Public Port Range Use these fields to specify the incoming port range. These are the ports on which the CGNV2 received traffic from the originating host on the WAN. Enter the start port number in the first field, and the end port number in the second field.
CGNV2 detects activity on the Trigger ports from computers on the LAN. Protocol This displays the protocol of the port triggering rule. Timeout (ms) This displays the time (in milliseconds) after the CGNV2 opens the Target ports that it should close them. FIREWALL...
HITRON CGNV2 USER’S GUIDE TABLE 21: The Firewall > Port Triggering Screen Enable Use this field to turn each port triggering rule on or off. Select this checkbox to enable the port triggering rule. Deselect this checkbox to disable the port triggering rule.
To specify only a single port, enter its number in both fields. Target Port Range Use these fields to specify the target ports. The CGNV2 opens these ports in expectation of incoming traffic whenever it detects activity on any of the Trigger ports.
PARENTAL CONTROL This chapter describes the screens that display when you click Parent Control in the toolbar. PARENTAL CONTROL OVERVIEW This section describes some of the concepts related to the Parent Control screens. 5.1.1 WEBSITE BLOCKING The Parent Control screens allow you to block access from computers on the LAN to certain websites, or websites whose URLs (website addresses) contain the keywords you specify.
HITRON CGNV2 USER’S GUIDE FIGURE 23: The Parent Control > Web Site Blocking Screen The following table describes the labels in this screen. TABLE 23: The Parent Control > Web Site Blocking Screen Web Site Blocking Options Enable Web Site Use this field to turn web site blocking on or off.
HITRON CGNV2 USER’S GUIDE TABLE 23: The Parent Control > Web Site Blocking Screen (continued) Blocked Key Words/ This displays the list of websites and keywords to which URLs users on the LAN are denied access. Select a URL or keyword and click Remove to delete it from the list.
HITRON CGNV2 USER’S GUIDE FIGURE 24: The Parent Control > Scheduling Screen The following table describes the labels in this screen. TABLE 24: The Parent Control > Scheduling Screen Days of the Week Select the days of the week on which you want the website blocking filter to be in effect.
HITRON CGNV2 USER’S GUIDE THE LOCAL LOGS SCREEN Use this screen to see information about events that have triggered the website blocking filter. Click Parent Control > Local Logs. The following screen displays. FIGURE 25: The Parent Control > Local Logs Screen The following table describes the labels in this screen.
WIRELESS BASICS This section describes how wireless networks and wireless security work. Your CGNV2’s wireless network is part of the Local Area Network (LAN), known as the Wireless LAN (WLAN). The WLAN is a network of radio links between the CGNV2 and the other computers and devices that connect to it.
Wireless clients must know the SSID in order to be able to connect to the AP. You can configure the CGNV2 to broadcast the SSID (in which case, any client who scans the airwaves can discover the SSID), or to “hide” the SSID (in which case it is not broadcast, and only users who already know the SSID can connect).
CHOOSING A SECURITY METHOD The security method that you choose to use for your wireless network depends upon the security methods supported by the devices on the network (the CGNV2, your PC, your laptop, and so on). Not all devices support the same security methods, so you must find out what security methods each of the supports, and choose a method that they all support.
PBC button in their configuration utilities, in addition to or instead of a physical button). Once you have chosen a security method, you can select it on the CGNV2 in the Wireless > Security screen’s Security Mode field (see The Security Screen page 83).
Wireless > Basic screen and click the PIN button. In the screen that displays, enter the WPS PIN that you want to use for the CGNV2, or the WPS PIN of the client device you want to add to the network.
If so, you can change the wireless channel to one that isn’t so congested. To conduct a site audit on the CGNV2, go to the Wireless > WiFi Site Survey screen. Click Scan. The screen that displays shows the wireless networks in the...
WEP. There are two types of WPA: the “enterprise” version (known simply as WPA) requires the use of a central authentication database server, whereas the “personal” version (supported by the CGNV2) allows users to authenticate using a “pre-shared key” or password instead.
6.4.1 THE BASIC SCREEN Use this screen to configure your CGNV2’s basic wireless settings. You can turn the wireless module on or off, select the wireless mode and channel, run WPS and configure the wireless network’s SSID. Click Wireless > Basic. The following screen displays.
If in doubt, use 11B/G/N (default). Channel Select the wireless channel that you want to use, or select Auto to have the CGNV2 select the optimum channel to use. NOTE: Use the Auto setting unless you have a specific reason to do otherwise.
Click the PIN button to begin the PIN configuration process. In the screen that displays, enter the WPS PIN that you want to use for the CGNV2, or the WPS PIN of the client device you want to add to the network.
HITRON CGNV2 USER’S GUIDE TABLE 26: The Wireless > Basic Screen (continued) In Service This field controls whether or not the SSID is in operation. NOTE: At the time of writing, this field is not user- configurable. WMM Mode Select the checkbox if you want to apply Wifi MultiMedia (WMM) Quality of Service (QoS) settings to this SSID.
The CGNV2 supports up to four WEP keys, of which you can select one as the default. You should input the same four keys, in the same order, in your network’s wireless clients.
Page 85
Select TKIP and AES to allow clients using either encryption type to connect to the CGNV2. Group Key Update Enter the frequency (in seconds) with which you want Interval the CGNV2 to create new pre-shared keys, and issue them to the wireless client. WIRELESS...
To configure MAC address filtering on the wired LAN, see The MAC Filtering Screen on page 52. You can set the CGNV2 to allow only certain devices to access the CGNV2 and the network wirelessly, or to deny certain devices access.
SSID Select the SSID for which you want to configure wireless access control. NOTE: At the time of writing, the CGNV2 supports a single SSID. MAC Filtering Mode Use this field to control whether the CGNV2 performs MAC filtering on the wireless network.
Click this to see information about the fields in this screen. 6.4.4 THE WIFI SITE SURVEY SCREEN Use this screen to view information about the wireless networks within the CGNV2’s coverage area. Click Wireless > WiFi Site Survey. The following screen displays. WIRELESS...
HITRON CGNV2 USER’S GUIDE FIGURE 31: The Wireless > WiFi Site Survey Screen The following table describes the labels in this screen. TABLE 29: The Wireless > WiFi Site Survey Screen Survey Results This field displays the number of the radio channel that the target wireless network is using.
TABLE 29: The Wireless > WiFi Site Survey Screen (continued) Signal (%) This field displays the signal strength of the target wireless network, as received by the CGNV2, as a percentage fro 0 (no reception) to 100 (perfect reception) W-mode This field displays the wireless network standard (for instance, 11n) that the target wireless network is using.
HITRON CGNV2 USER’S GUIDE TABLE 29: The Wireless > WiFi Site Survey Screen (continued) This field displays whether the network is using infrastructure mode, or ad-hoc mode. NOTE: In infrastructure mode, wireless devices connect to a central Access Point (AP), which usually connects to the Internet or another network via a wired connection.
Page 92
HITRON CGNV2 USER’S GUIDE The following table describes the labels in this screen. TABLE 30: The Wireless > Connection List Screen MAC of WiFi Client This displays the MAC address of each device connected to the SSID. RSSI0-1 This displays the value of the Received Signal Strength Indicator.
This chapter describes the screens that display when you click eMTA in the toolbar. These screens display information about the CGNV2’s embedded Multimedia Terminal Adapter module. NOTE: The fields in these screens are read-only, and are provided for troubleshooting purposes only.
HITRON CGNV2 USER’S GUIDE TABLE 31: The eMTA > Status Screen (continued) Telephony Security This displays the type of security used for voice calls through the CGNV2. Telephony TFTP This field displays the status of the remote telephony TFTP server.
HITRON CGNV2 USER’S GUIDE The following table describes the labels in this screen. TABLE 32: The eMTA > DHCP Screen Address Information MTA MAC Address This field displays the Media Access Control (MAC) address of the Media Terminal Adapter (MTA) module.
This chapter describes the screens that display when you click VPN in the toolbar. NOTE: This chapter only applies for firmware which supports VPN function. VPN OVERVIEW This section describes some of the concepts related to the VPN screens. A virtual private network (VPN) extends a private network across a public network, such as the Internet.
HITRON CGNV2 USER’S GUIDE 8.1.1.2 The Internet Key Exchange (IKE) is an IPsec standard protocol used to ensure security for VPN negotiation and remote host or network access. 8.1.1.3 ENCRYPTION ALGORITHMS Data Encryption Standard (DES) is used to encrypt and decrypt packet data.
Click VPN > PassThrough. The following screen displays. NOTE: This screen allows to choose which VPN protocols will be supported by CGNV2 in passthrough mode when the VPN client is a CPE connected to its LAN. FIGURE 35: The VPN > PassThrough Screen The following table describes the labels in this screen.
HITRON CGNV2 USER’S GUIDE TABLE 33: The VPN > PassThrough Screen (continued) PPTP PassThrough Use this field to select whether the PPTP Pass-through be active or not. Select Enabled to activate the PPTP Pass-through. Deselect Enabled to deactivate the PPTP Pass- through.
HITRON CGNV2 USER’S GUIDE FIGURE 36: The VPN > IPsec Screen IPsecThe following table describes the labels in this screen. TABLE 34: The VPN > IPsec Screen IPsec VPN Functions Use this field to select whether the IPsec VPN functions be active or not.
HITRON CGNV2 USER’S GUIDE TABLE 34: The VPN > IPsec Screen (continued) Remote Gateway IP This displays the IP address of the remote gateway on WAN. Status This displays whether the tunnel is connected. Uptime & Count This displays the time period and number of times during the tunnel connected.
HITRON CGNV2 USER’S GUIDE FIGURE 37: The VPN > IPsec > Add/Edit Screen The following table describes the labels in this screen. TABLE 35: The VPN > IPsec > Add/Edit Screen VPN - VPN Tunnel Local Host Setting/ Use this field to select which LAN be protected.
Page 104
HITRON CGNV2 USER’S GUIDE TABLE 35: The VPN > IPsec > Add/Edit Screen (continued) Use this field to configure the ID of the remote gateway. Remote Gateway ID Remote Gateway Use this field to configure the IP address of the remote gateway.
HITRON CGNV2 USER’S GUIDE TABLE 35: The VPN > IPsec > Add/Edit Screen (continued) Use this field to select the type of ESP Authentication you ESP AUTH want to use. See Cryptographic Hash Function on page for information on the screen that displays.
Page 106
HITRON CGNV2 USER’S GUIDE FIGURE 38: The VPN > PPTP Screen The following table describes the labels in this screen. TABLE 36: The VPN > PPTP Screen PPTP Use this field to select whether the PPTP function be PPTP function active or not.
Page 107
HITRON CGNV2 USER’S GUIDE TABLE 36: The VPN > PPTP Screen (continued) PPTP Client settings Internet address (IP/ Use this field to enter the IP address or Fully-Qualified FQDN) Domain Name of your PPTP Client. Enter Username Use this field to enter the username for your PPTP Client Enter Password Use this field to enter the password for your PPTP Client.
Use this section to solve common problems with the CGNV2 and your network. Problem: None of the LEDs Turn On The CGNV2 is not receiving power, or there is a fault with the device. Ensure that you are using the correct power adaptor. ...
Page 110
I Forgot the CGNV2’s IP Address The CGNV2’s default LAN IP address is 192.168.0.1. You can locate the CGNV2’s GUI by entering the LAN domain suffix into your browser’s address bar (on a computer connected to the LAN). The default LAN domain suffix is hitronhub.home.
Page 111
(walls, floors, trees, etc.) and electrical interference (other radio transmitters, microwave ovens, etc) reduce your CGNV2’s signal quality and coverage area. Ensure that the CGNV2 and the wireless client are set to use the same wireless mode and SSID (see The Basic Screen...