SMC Networks EZ Connect SMC8014W-G Install Manual

SMC Networks EZ Connect SMC8014W-G Install Manual

Wireless cable modem gateway
Hide thumbs Also See for EZ Connect SMC8014W-G:

Advertisement

Quick Links

EZ Connect™ Wireless Cable Modem Gateway
Install Guide
SMC8014W-G

Advertisement

Table of Contents
loading

Summary of Contents for SMC Networks EZ Connect SMC8014W-G

  • Page 1 EZ Connect™ Wireless Cable Modem Gateway Install Guide SMC8014W-G...
  • Page 2 Copyright Information furnished by SMC Networks, Inc. (SMC) is believed to be accurate and reliable. However, no responsibility is assumed by SMC for its use, nor for any infringements of patents or other rights of third parties which may result from its use. No license is granted by implication or otherwise under any patent or patent rights of SMC.
  • Page 3: Table Of Contents

    TABLE OF CONTENTS CHAPTER 1 | Introduction Features and Benefits Package Contents Minimum Requirements CHAPTER 2 | Getting to know the EZ Connect™ Wireless Cable Modem Gateway LED Indicators Rear Panel Description Resetting and Restoring the EZ Connect™ Wireless Cable Modem Gateway CHAPTER 3 | Installation Basic Installation Procedure CHAPTER 4 | Configuring your Computer...
  • Page 4: Chapter 1 | Introduction

    CHAPTER 1 | Introduction Congratulations on your purchase of the EZ Connect™ Wireless Cable Modem Gateway. SMC is proud to provide you with a powerful yet simple communication device for connecting your local area network (LAN) to the Internet. Features and Benefits •...
  • Page 5: Package Contents

    Please register your product on SMC’s web site at http://www.smc.com. System Requirements You must meet the following minimum requirements: • Provisioned Internet access from a cable operator that has approved the SMC8014W-G • A computer equipped with a wired or wireless network adapter with TCP/IP installed. •...
  • Page 6: Led Indicators

    CHAPTER 2 | Getting to Know the EZ Connect™ Wireless Cable Modem Gateway The EZ Connect™ Wireless Cable Modem Gateway is the perfect all in one solution, for the home or business environment. This full-featured device has: • An approved DOCSIS 1.1 and 2.0 Cable modem •...
  • Page 7: Rear Panel Description

    Rear Panel Description Power Item Description Power Connect the included power adapter to this port. Reset Use this button to reset the power or restore the default factory settings. LAN 1-4 Four 10/100 Auto-sensing switch ports (RJ-45). Connect devices on your local area network to these ports (such as a PC, hub, or switch).
  • Page 8: Chapter 3 | Installation

    CHAPTER 3 | Installation The EZ Connect™ Wireless Cable Modem Gateway can be installed in any location where you have cable Internet access, and your cable Internet service provider has approved the Gateway. To confirm you meet these 2 criteria points, please contact your cable operator. For general installation please follow the guidelines outlined below to best performance: •...
  • Page 9: Basic Installation Procedure

    Note: If this modem was NOT installed by your cable provider (ISP) or is being used to replace another cable modem – please contact your Cable Operator to register the SMC8014W-G. Without registering the modem with your cable operator it will be unable to connect to the cable network system.
  • Page 10: Chapter 4 | Configuring Your Computer

    CHAPTER 4 | Configuring your Computer The information outlined in this chapter will guide you through the configuration for the following Operating Systems: • Windows 95/98 • Windows Me • Windows 2000 • Windows XP • Apple Macintosh Configuring Windows 95/98/Me 1.
  • Page 11: Configuring Windows 2000

    Configuring Windows 2000 1. Access your Network settings by clicking [Start], choose [Settings], and then select [Control Panel] 2. In the Control Panel, locate and double- click the [Network and Dial-up Connections] icon 3. Locate and double-click the [Local Area Connection] icon for the Ethernet adapter that is connected to the Gateway.
  • Page 12: Configuring A Macintosh Computer

    6. Reboot your PC. Configuring a Macintosh Computer You may find that the instructions here do not exactly match your screen. This is because these steps and screen shots were created using Mac OS 10.2. Mac OS 7.x and above are all very similar, but may not be identical to Mac OS 10.2.
  • Page 13: Chapter 5 | Configuring The Ez Connect™ Wireless Cable Modem Gateway

    CHAPTER 5 | Configuring the EZ Connect™ Wireless Cable Modem Gateway After you have configured TCP/IP on a client computer, use a web browser to configure the EZ Connect™ Wireless Cable Modem Gateway. The Gateway can be configured by any Java- supported browser including Internet Explorer 5.0 or above, or Netscape Navigator 5.0 or above.
  • Page 14: Accessing The Ez Connect™ Wireless Cable Modem Gateway Web Management

    Accessing the EZ Connect™ Wireless Cable Modem Gateway’s Web Management To access the EZ Connect™ Wireless Cable Modem Gateway’s web-based management screens, follow the steps below: 1. Launch your web-browser. NOTE: Your computer does not have to be ONLINE to configure the EZ Connect™ Wireless Cable Modem Gateway.
  • Page 15: Chapter 6 | Navigating The Web-Based Administration

    From this section you can configure new passwords for the [mso] and [cusadmin] administrator accounts. You can also set the Idle Time Out value that the SMC8014W-G will keep an admin account logged in for. The default Idle Time Out value is 10 min.
  • Page 16 If your password is lost, or you cannot gain access to the user interface, press the Reset button on the rear panel (holding it down for at least five seconds) to restore the factory defaults. From this section you can also configure the RADIUS, TACACS+ and TACACS authentication. Note: only one form of authentication can be enabled at any one time.
  • Page 17 Remote Management Allows a remote PC to configure, manage, and monitor the Gateway using a standard web browser. To access the Remote Management configuration page, on the Side Navigation bar, click on [System] link and then click on the [Remote Management] link. This feature has several options to configure: •...
  • Page 18: Wan

    To access the WAN configuration page, on the Side Navigation bar, click on [WAN] link. You can setup the SMC8014W-G to support the Pubic LAN IP as the WAN IP by selecting the [Use public LAN IP as the WAN IP] checkbox. The Public LAN IP can be configured in the LAN Settings section.
  • Page 19: Lan

    MAC Spoofing This is an optional configuration that may or may not be required by your cable operator. For more information about MAC Clone/Spoofing please contact your cable operator to determine if this is a required setting. To access the MAC Spoofing configuration page, on the Side Navigation bar, click on [WAN] link and then click on the [MAC Spoofing] link.
  • Page 20 Private LAN IP Settings Define the Gateway’s private LAN settings. The IP address configured here is the Gateway’s (default: 192.168.0.1). NOTE: Port Forwarding and Access Control rules will be based on the network scope defined here. If either of these types of rules were previously setup and the Private LAN IP address is changed, then those rules will need to be recreated to reflect the new Private LAN IP network.
  • Page 21: Routing

    [Static Route] link. NOTE: Users cannot add any static routes to a public network assigned by your cable operator. Users can add other private networks that are located on the LAN side of the SMC8014W-G. Adding Static Routes The screen shot below shows the Configuration Page for adding a Static Route to your network.
  • Page 22 RIP Control Use this section to configure the RIP control settings. RIP is used by some cable operators to advertise Public LAN IPs to their network. Below is an outline of the RIP control options: 1. RIP Send Version: Options are to send RIP1| RIP2| RIP1 and RIP2| DO NOT SEND. 2.
  • Page 23: Wireless

    1. You will need to confirm the network is setup with a valid Public LAN IP in [LAN] page before they enable the RIP setting. NOTE: The RIP setting is disabled by default. 2. After you confirm the LAN Settings, then you will need to configure the RIP Settings. These settings will need to be configured based on how your cable operator network is set up.
  • Page 24 The Wireless Mode can be set to Mixed (default), 11B only, 11B+ only, or 11G only. Also, the Gateway’s wireless interface can be disabled if not being used. Channel and SSID You must specify a common radio channel and SSID (Service Set ID) to be used by the Gateway and all of your wireless clients.
  • Page 25 If you are transmitting sensitive data across wireless channels, you should enable either Wired Equivalent Privacy (WEP) or WiFi Protected Access (WPA) encryption. Encryption requires you to use the same set of encryption/decryption keys for the Gateway and all of your wireless clients.
  • Page 26 keys. Simply configure the Default Key to the one key that you will be using across your network. On the wireless clients, you can use the passphrase option, and client utility will generate the same 4 keys – or you can manually type in the selected KEY that is configured on the Gateway. For more security, you can use 128-bit WEP encryption.
  • Page 27: Nat

    You can also configure a [Device Name] that is associated with a specific MAC address. In doing this, you can easily recognize the computers that you are in your access list. NOTE: MAC filtering only applies to Wireless Clients. Network Address Translation (NAT) allows multiple users at your local site to access the Internet through a single public IP address.
  • Page 28 This Port Forwarding function supports 2 types of Services: • Predefined Service • Customer Defined Service Predefined Service The Predefined Service option has a pull-down menu with several popular Service Applications, such as HTTP (80), FTP (20/21), and AIM/ICQ (5190). To configure Port Forwarding with a Predefined Service rule, follow the steps below: 1.
  • Page 29 4. Click the [Apply] button to save your changes and return to the Port Forwarding main screen Customer Defined Service Rule (Custom) The Customer Defined Service section allows you to custom configure a Port Forwarding rule with any Traffic type (TCP/UDP/TCP and UDP), Public Port, and Private Port. To configure this custom option, please follow the steps below: 1.
  • Page 30: Firewall

    Remote IPs: Any (allow access to any public IP) Public Port: 8000 Private Port: With this configuration, all HTTP (Web) TCP traffic on port 8000 from any IP Address from the WAN side will be redirected through the firewall to the Internal Server (192.168.0.100) on port NOTE: This configuration is useful because you don’t have to reconfigure your web server to accept traffic on a different port, you can do this configuration on the Gateway.
  • Page 31 The second section is used to configure Access Rules for the Private LAN to the Internet. These rules will block services on the private LAN to the Internet. From this section, you can also choose to have the Gateway to [Respond to Ping on Internet WAN Port].
  • Page 32 4. Select the [LAN IPs] that you want this access rule to apply to. You can choose to apply this rule to Any IP Address, a Single IP Address, or a Range of IP Addresses. a. Any IP Address [Any] – choose this option to block all LAN clients. You don’t need to configure the [Start IP] or [End IP] options.
  • Page 33 7. When your configuration is complete, click the [Apply] button to save your changes and return to the main Access Control page. Special Application Some applications, such as Internet gaming, videoconferencing, Internet telephony, and others require multiple connections. Rules are based on the port or range of ports that the application sends data to the server on (destination port).
  • Page 34 6. Set the [Interval] of the rule. This is the time in between the outgoing and incoming data traffic. NOTE: If you set this value too low, the incoming ports will be closed before the return data arrives at the firewall and the connection will be broken and the application will not work.
  • Page 35 3. Enter in a new keyword or URL address that you want to block in the [Keyword/Domain Name] input box. 4. Press the [Add Keyword] button to save this keyword or URL. 5. The new keyword or URL address would be listed in the text box below. NOTE: This list will support 50 Keywords or URLs.
  • Page 36 There are 3 sections to configure on this page: • Email Alerting • Syslog Alerting • Alerting Schedule To enable the Email Alert feature, click the [Enable Email Alerting] checkbox. Follow the steps below to configure the Email Alert feature: 1.
  • Page 37 5. To add an email address to the Alert List, click the [Add] button. The configuration page shown below will be displayed: NOTE: The email alert feature will allow you to send email alerts to 4 different email accounts. For example you could send an email to your home, work, and school email address.
  • Page 38: Tools

    Immediate Alerts can be generated for both the email and Syslog alerts. To configure the type of Alert that you want to get: - An Intrusion is detected – this is a hacker attack attempt from the WAN - Attempts to access a blocked site – alert to any attempts to access a site or keyword listed in your URL/Blocking list.
  • Page 39 Locally Backup Settings to Configuration File The first Tools option is to [Back Up] your configuration settings of your Gateway. This includes, but is not limited to, Port Forwarding, Special Application, and Alert Emails. To save the Gateway settings to a configuration file, follow the steps below: 1.
  • Page 40 3. Click [OK] to confirm the restore process 4. To complete the Restore process the Gateway will reboot. NOTE: This file format (.cfg) is the only format that you can use to restore settings from. This is format that is provided by the Backup option. Remotely Backup/Restore Gateway Settings To backup your configuration settings of your Gateway to a TFTP server, select the [Backup] option.
  • Page 41 3. To complete the Restore process the Gateway will reboot. Reboot In the event that the system stops responding correctly or functioning properly, you can perform a reboot. To access the Reboot option page, on the Side Navigation bar, click on [Tools] link and then click on the [Reboot] link.
  • Page 42: Vpn

    The VPN section allows you to setup VPN end points on the Gateway. By doing so, an encrypted tunnel will be established between the Gateway and the remote VPN end point. To access the VPN configuration page, on the Side Navigation bar, click on [VPN] link. The Gateway supports 3 types of VPN termination: •...
  • Page 43 3. Click the [Apply] button to save your changes 4. On the Side Navigation bar, click on the [Access Control] link 5. Enable LAN clients that will access the IPSec VPN by adding them to the VPN Access List. There are two ways to add a LAN client to the VPN Access List. Either select the radio button next to an [Auto-Learned CPE Device] or manually enter the LAN clients MAC address in the [Manually-Added CPE Devices] section, then select [Add] 6.
  • Page 44 a. Either the Gateway’s Private LAN IP address or Public LAN IP address can be configured as the end point for the VPN tunnel. Select either [Protect Private Lan] or [Protect Public Lan] to enable the entire Private or Public LAN to be part of the VPN tunnel and the respective Gateway LAN IP address will populate the [Intranet Address] and [Intranet Subnet Mask] fields.
  • Page 45 g. Enter the [Authentication method]. Currently, the Gateway only supports [Preshared Key]. h. Enter the [IKE HASH]. The options are MD5 | SHA. Enter the [IKE Encryption]. The options are DES | IDEA | BLOWFISH | RC5 | 3DES. Enter the [IPSec Operation]. The options are ESP | AH. k.
  • Page 46 9. The [Status] should now be [Phase 2 Completed]. Create a PPTP VPN Tunnel To enable and configure a PPTP server on the Gateway, follow the steps below. Note that remote PPTP clients that connect into the Gateway will be assigned IP addresses from the PPTP IP Address Pool on the LAN Settings page for their PPTP WAN interface.
  • Page 47 6. Enter the [User Name] and [Password]. User Name must be at least 3 characters and password must be at least 6 characters. 7. Click [Apply] to save the settings. You will be returned to the PPTP/L2TP Configuration page. Create a L2TP over IPSec VPN Tunnel To enable and configure a L2TP over IPSec end point, follow the steps below.
  • Page 48: Status

    STATUS The Status screen summarizes important information about the Gateway including WAN/LAN connection status, Wireless settings, software version and hardware versions, and uptime statistics. The Network Log shows both firewall and network activity The LAN Client Log shows the clients connected to the Gateway and the type of connection (Ethernet or Wireless).
  • Page 49 The Cable Modem System Event Log shows diagnostic information about your connection and cable system. The Cable Status page shows the users the initialization process the SMC8014W-G has been through, and also includes the information about the downstream channel and the upstream...
  • Page 50 Refer to the Remote Management section in Chapter 6 to enable and configure Telnet and SSH settings. Refer to the 8014 CLI document for command specifics. To remotely access the CLI of the SMC8014W-G via Telnet, open a DOS/Command Prompt and type: telnet IP remote mgmt port Enter •...
  • Page 51: Appendix B | Troubleshooting

    APPENDIX B | Troubleshooting This appendix describes common problems you may encounter and possible solutions to them. B.1 | Verify you are connected to the EZ Connect™ Wireless Cable Modem Gateway If you are unable to access the Gateway’s web-based administration pages, then you may not be properly connected or configured.
  • Page 52 B.3 | I have another IP Address displayed If you have another IP address listed, then the PC may not be configured for a DHCP connection. Please refer to Chapter 4 | Configure your Computer for information. Once you have confirmed your computer is configured for DHCP, follow the steps below. 1.
  • Page 53 B.4 | Pinging the EZ Connect™ Wireless Cable Modem Gateway To verifying Your TCP/IP Connection is configured properly and you are able to access the EZ Connect™ Wireless Cable Modem Gateway’s web-based management screens – you can use the ‘Ping’ command in DOS. To access the DOS dialog window please follow the steps below: 1.
  • Page 54 B.5 | Symptom / Action Troubleshooting The Gateway can be easily monitored through panel indicators to identify problems. Please refer to Chapter 2 – Section 2.0 | LED Definitions to confirm you have the correct LED status. If not, then refer to the symptoms and actions outlined below: SYMPTOM: Power LED is Off ACTION: •...
  • Page 55 SYMPTOM: Internet users can not access my service/server hosted on a LAN computer ACTION: • Configure a Port Forwarding rule as described in the NAT section of CHAPTER 6. • Contact your cable operator for assistance if you do not have this option available in your login.
  • Page 56: Appendix C | Technical Specifications

    APPENDIX C | Technical Specifications Standards • 802.3 10BaseT Ethernet • 802.3u 100BaseTX Fast Ethernet • 802.11g WAN Interface • F-type RF Connector LAN Interfaces • 4 – 10BASE-T/100BASE-TX RJ-45 ports • 1 – USB 1.1 Type B Connector • 1 –...
  • Page 57: Appendix D | Compliances

    APPENDIX D | Compliances FCC Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against radio interference in a commercial environment.
  • Page 58: Appendix E | Technical Support

    APPENDIX E | Technical Support At this time, the SMC8014W-G is only distributed through cable operators. Contact your cable operator with any technical support needs you may have. PHONE From U.S.A. and Canada (24 hours a day, 7 days a week) •...
  • Page 60 SMC Networks, Inc. 38 Tesla Irvine, CA SMC8014W-G 92618 Rev. 1.0 – 4.01.05-TWC...

Table of Contents