Page 1 4036168 Rev A DDR2200 Series Residential Gateway Installation and Operation Guide...
Page 3 Please Read Important Please read this entire guide. If this guide provides installation or operation instructions, give particular attention to all safety statements included in this guide.
Page 4 Notices Trademark Acknowledgments Cisco and the Cisco logo are trademarks of Cisco Systems, Inc. and /or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at www.cisco.com/go/trademarks. HPNA is a trademark of the Home Phoneline Networking Alliance.
Page 5 Notice to Installers The servicing instructions in this notice are for use by qualified service personnel only. To reduce the risk of electric shock, do not perform any servicing other than that contained in the operating instructions, unless you are qualified to do so. Notice à...
Page 6 Mitteilung für CATV-Techniker Die in dieser Mitteilung aufgeführten Wartungsanweisungen sind ausschließlich für qualifiziertes Fachpersonal bestimmt. Um die Gefahr eines elektrischen Schlags zu reduzieren, sollten Sie keine Wartungsarbeiten durchführen, die nicht ausdrücklich in der Bedienungsanleitung aufgeführt sind, außer Sie sind zur Durchführung solcher Arbeiten qualifiziert. Aviso a los instaladores de sistemas CATV Las instrucciones de reparación contenidas en el presente aviso son para uso exclusivo por parte de personal de mantenimiento cualificado.
Page 7: Table Of Contents
CE Compliance xiii About This Guide xvii Chapter 1 Introducing the DDR2200 Series Residential Gateway 1 Benefits and Features....................... 2 What's On the Front Panel? ....................4 What's On the Back Panel? ..................... 6 Chapter 2 Installing the Residential Gateway Mounting the Residential Gateway Vertically..............
Page 8 Contents Tools - Update Software......................37 Updating Software ......................... 38 Settings Backup ........................40 Update Settings ........................42 Customer Configuration File....................44 Restore Default Settings ......................46 Saving the Configuration for the Residential Gateway ............ 48 Time Settings .......................... 50 Service Control ........................
Page 9 Contents Chapter 6 Security Configuration MAC Filtering Setup ......................166 Incoming IP Filtering ......................174 Outgoing IP Filtering ......................180 Parental Control Setup - Filtering Function ..............185 URL Filtering Function ....................... 191 Stateful Packet Inspection ....................196 Local Certificates ........................199 Trusted CA Certificates .......................
Page 11: Important Safety Instructions
IMPORTANT SAFETY INSTRUCTIONS IMPORTANT SAFETY INSTRUCTIONS Read these instructions. Keep these instructions. Heed all warnings. Follow all instructions. Do not use this apparatus near water. Clean only with dry cloth. Do not block any ventilation openings. Install in accordance with the manufacturer's instructions.
Page 12 IMPORTANT SAFETY INSTRUCTIONS Protect the Product from Lightning In addition to disconnecting the AC power from the wall outlet, disconnect the signal inputs. Verify the Power Source from the On/Off Power Light When the on/off power light is not illuminated, the apparatus may still be connected to the power source.
Page 13 IMPORTANT SAFETY INSTRUCTIONS Check Product Safety Upon completion of any service or repairs to this product, the service technician must perform safety checks to determine that this product is in proper operating condition. Protect the Product When Moving It Always disconnect the power source when moving the apparatus or connecting or disconnecting cables.
Page 14: United States Fcc Compliance
 Consult the service provider or an experienced radio/television technician for help. Any changes or modifications not expressly approved by Cisco Systems, Inc., could void the user's authority to operate the equipment. The information shown in the FCC Declaration of Conformity paragraph below is a requirement of the FCC and is intended to supply you with information regarding the FCC approval of this device.
Page 15 United States FCC Compliance The modem may not be connected to a party line or to a coin-operated telephone. Notification to the telephone company is no longer required prior to connecting registered equipment, but upon request from the telephone company, the user shall tell the telephone company which line the equipment is connected to as well as the registration number and ringer equivalence number of the registered protective circuitry.
Page 16 United States FCC Compliance Repairs to certified equipment should be made by an authorized Canadian maintenance facility designated by the supplier. Any repairs or alterations made by the user may give the telecommunications company cause to request the user to disconnect the equipment. Users should ensure for their own protection that the electrical ground connections of the power utility, telephone lines and internal metallic water pipe system, if present, are connected together.
Page 17: Ce Compliance
This declaration is only valid for configurations (combinations of software, firmware and hardware) supported or provided by Cisco Systems for use within the EU. The use of software or firmware not supported or provided by Cisco Systems may result in the equipment no longer being compliant with the regulatory requirements.
Page 18: National Restrictions
Note: The full declaration of conformity for this product can be found in the Declarations of Conformity and Regulatory Information section of the appropriate product hardware installation guide, which is available on Cisco.com. The following standards were applied during the assessment of the product against the requirements of the Directive 1999/5/EC: ...
Page 19 CE Compliance Antennas Use only the antenna supplied with the product. 20090312 CE_Gateway 4036168 Rev A...
Page 21: About This Guide
Introduction This installation and operation guide applies to the DDR2200 series residential gateway. The DDR2200 series residential gateway connects to the DSL network in your home to deliver data, video, voice, and wired (Ethernet) or wireless gateway capabilities all from one device. Use this guide to install the residential gateway in your home.
Page 23: Chapter 1 Introducing The Ddr2200 Series Residential Gateway
Introduction Imagine walking through your home and accessing the Internet from nearly any room. The DDR2200 series residential gateway connects to the DSL line in your home and to your home network to deliver data, video, voice, and wired (Ethernet) or wireless gateway capabilities all from one device.
Page 24: Benefits And Features
Chapter 1 Introducing the DDR2200 Series Residential Gateway Benefits and Features Your residential gateway offers the following benefits and features: Full routing functionality. The gateway router provides broadband transfer  speeds available between your home network and the service provider's network for multi-user sharing.
Page 25 Benefits and Features ADSL2+. Asymmetric Digital Subscriber Line (ADSL) provides high-access  transmission speeds for delivery of video, voice, and data services to homes over ordinary copper telephone wire. 4036168 Rev A...
Page 26: What's On The Front Panel
Chapter 1 Introducing the DDR2200 Series Residential Gateway What's On the Front Panel? The front panel of your residential gateway provides LED status indicators that indicate the operational state of your gateway. Refer to the following diagram for a description of the front panel.
Page 27 What's On the Front Panel? DSL/WAN—Indicates whether a DSL signal is acquired (or trained). The LED indicators mean the following status:  Off. Not trained.  Blinking. In training.  Solid. Trained. In addition, once the DSL/WAN LED is solid, if any pair drops, the DSL/WAN LED will blink differently to provide additional status as follows: ...
Page 28: What's On The Back Panel
Chapter 1 Introducing the DDR2200 Series Residential Gateway What's On the Back Panel? Refer to the following diagram for a description of the back panel components. Important! Do not connect your PC to both the Ethernet and USB ports at the same time.
Page 29 What's On the Back Panel? USB PC—12 Mbps USB port connects to the USB port on your PC 10 DSL—RJ-11 port connects to the DSL line from the service provider 11 ANTENNA—Receives and transmits data packets to wireless devices 4036168 Rev A...
Page 31: Chapter 2 Installing The Residential Gateway
Chapter 2 Installing the Residential Gateway You can install the residential gateway in your home office and access the Internet from your kitchen computer to get your favorite recipe. Use this chapter to properly install your residential gateway and to connect the residential gateway to your computer and other devices in your home.
Page 32: Mounting The Residential Gateway Vertically
Chapter 2 Installing the Residential Gateway Mounting the Residential Gateway Vertically Some installations may require that you place the residential gateway in a vertical position. Use proper care when installing the residential gateway in a vertical position. Be sure that the housing of the residential gateway is vertical and that the stand is extended as shown in the following illustration: 4036168 Rev A...
Page 33: Mounting The Residential Gateway To The Wall
Mounting the Residential Gateway to the Wall Mounting the Residential Gateway to the Wall The following illustration shows the location and dimensions of the wall-mounting slots on the bottom of the residential gateway. Use the information on this page as a guide for mounting your residential gateway to the wall.
Page 34: Connecting Your Computer To The Residential Gateway
Chapter 2 Installing the Residential Gateway Connecting Your Computer to the Residential Gateway You can connect a computer to the residential gateway using one of the following methods: Ethernet Connection  Wireless Connection  Note: These instructions describe a PC connection. You could also connect another type of device with a wireless interface.
Page 35 Connecting Your Computer to the Residential Gateway Connecting the Computer with a Wireless Connection A wireless connection requires a wireless-enabled notebook or a computer with an 802.11b/g wireless network adapter installed. Complete these steps to connect the computer with a wireless connection. Connect the power adapter that came with the residential gateway to the POWER port on the residential gateway and to an electrical outlet.
Page 36: Connecting The Dsl Interface
Chapter 2 Installing the Residential Gateway Connecting the DSL Interface Now that you have connected the gateway to power and you have made the LAN connections, you can connect the DSL interface (connection to the wall jack) as shown in the following illustration. This illustration shows all of the attached devices connected to the residential gateway.
Page 37: Connecting An Ip Set-Top To The Gateway
Connecting an IP Set-Top to the Gateway Connecting an IP Set-Top to the Gateway For IPTV service, you must connect the residential gateway to an IP set-top. You can connect to an IP set-top using an Ethernet or coaxial connection. Ethernet Connection Complete the following steps to connect the residential gateway to an IP set-top through Ethernet for IPTV service.
Page 38 Chapter 2 Installing the Residential Gateway Coaxial Connection Complete the following steps to connect the residential gateway to an IP set-top with coaxial cable for IPTV service. Ensure that the residential gateway is powered on. Connect a coaxial cable from the HPNA port on the gateway to the TO WALL (Video In) port on the set-top.
Page 39: Chapter 3 Configuration And Operation
Chapter 3 Configuration and Operation The DDR2200 residential gateway contains web pages that show the current status of the residential gateway and that allow you to configure the device. Advanced users can configure parameters such as DHCP (Dynamic Host Configuration Protocol), wireless network settings, port forwarding, parental control, and so forth.
Page 40 Chapter 3 Configuration and Operation In This Chapter  Logging In to the Residential Gateway ..........19  System Summary .................. 21  Setting Up Your System with the Setup Wizard ......22  Setting System Date and Time ............26 ...
Page 41: Logging In To The Residential Gateway
Logging In to the Residential Gateway The default configuration of the residential gateway uses IP address 192.168.1.254. If you have connected the residential gateway correctly and you have properly configured your computer, use the following steps to log in to the residential gateway as an administrator.
Page 42 Chapter 3 Configuration and Operation Enter admin for the user name and admin for the password. The residential gateway opens with the System Summary page in the forefront. You can use this web interface to check the status of the residential gateway and to configure parameters.
Page 43: System Summary
System Summary System Summary The System Summary screen provides a summary of the software used by the residential gateway and indicates the current status of the DSL connection. You can use this screen to find hardware and software information as well as physical and IP layer information.
Page 44: Setting Up Your System With The Setup Wizard
Chapter 3 Configuration and Operation Setting Up Your System with the Setup Wizard The Setup Wizard is a step-by-step sequence to set up your residential gateway for the first time to ensure proper operation. The wizard combines the various tasks into one convenient tool to reduce configuration time.
Page 45 Setting Up Your System with the Setup Wizard Do you want to enable the clone MAC function? MAC cloning enables you to change the MAC address of the residential gateway to match the MAC address of your PC or any service provider supplied MAC address. If you do not enable MAC cloning, the default MAC address of the residential gateway is used.
Page 46 Chapter 3 Configuration and Operation In the Second NTP time server field, select the time server from the drop-down list that you want to use as a backup server for the residential gateway to get its time. In the Time zone offset field, select your time zone from the drop-down list. 10 Click Next.
Page 47 Setting Up Your System with the Setup Wizard 15 In the Wireless Mode field, select one of the following modes:  802.11g & 802.11b  802.11g only  802.11b only 16 In the 54g Protection field, select Auto to enable 54g protection or Off to disable the function.
Page 48: Setting System Date And Time
Chapter 3 Configuration and Operation Setting System Date and Time When you first set up your system with the wizard, you set your system's date and time. At a later time, you may need to reset the date and time, and you can use the following procedure.
Page 49: Setting Password
Setting Password Setting Password To set the password for the residential gateway, complete the following steps. Click System on the main screen. The System Summary window opens. Under the Admin section on the screen, click Password Setting. The Access Control -- Password screen opens. In the Username field, select one of the following options for the user name: ...
Page 50: Dhcp Leases
Chapter 3 Configuration and Operation DHCP Leases The DHCP Leases screen displays the Dynamic Host Configuration Protocol (DHCP) table. This screen shows a mapping of hosts (shown by their MAC addresses) and their assigned IP addresses. The DHCP server for the residential gateway assigns these IP addresses to the devices.
Page 51: Wan Information
WAN Information WAN Information The WAN Info screen provides information about the ADSL2+ wide area network (WAN) parameters and status. You can use this screen to check the ADSL2+ connection. Path: System > Details > WAN In MER protocol (as shown here), press Release or Renew to release your current WAN IP address and obtain a new DHCP lease.
Page 52: Route Information
Chapter 3 Configuration and Operation Route Information The Route Info screen shows the routing table for the residential gateway. This screen provides the gateway address for specific destination IP addresses. Path: System > Details > Route 4036168 Rev A...
Page 53: Arp Information
ARP Information ARP Information The ARP Info screen displays the Address Resolution Protocol (ARP) table. This table shows the IP address to MAC address mapping. Path: System > Details > ARP 4036168 Rev A...
Page 54: Cpu Information
Chapter 3 Configuration and Operation CPU Information The CPU Info screen shows detailed information about the CPU utilization and the active processes running on the residential gateway. Path: System > Details > CPU Info 4036168 Rev A...
Page 55: Memory Information
Memory Information Memory Information The Memory Info screen shows the detailed memory availability of the residential gateway. Path: System > Details > Memory Info 4036168 Rev A...
Page 56: Lan Statistics
Chapter 3 Configuration and Operation LAN Statistics The Statistics -- LAN screen displays statistics for the local area network (LAN). This screen shows the number of transmitted and received packets on the LAN interface for Ethernet, USB, and wireless devices. Path: System >...
Page 57: Wan Statistics
WAN Statistics WAN Statistics The Statistics -- WAN screen displays statistics for the devices and interfaces on the wide area network (WAN). This screen shows the number of transmitted and received packets for the DSL WAN interface. Path: System > Statistics > WAN Reset Statistics To reset the statistics, click Reset Statistics on the screen.
Page 58: Atm Statistics
Chapter 3 Configuration and Operation ATM Statistics The Statistics -- ATM screen displays statistics on the ATM interface. This screen shows the ATM Layer-2 statistics such as the number of ATM cells transmitted and received over the ATM interface. Path: System > Statistics > ATM Reset Statistics To reset the statistics, click Reset on the screen.
Page 59: Tools - Update Software
Tools - Update Software Tools - Update Software The Tools -- Update Software screen allows you to update the software for the residential gateway with a new version. Path: System > Management > Configuration > Update Software 4036168 Rev A...
Page 60: Updating Software
Chapter 3 Configuration and Operation Updating Software To update the software for the residential gateway, complete the following steps. Click System on the main screen. Click Management. The Configuration screen opens with the Configuration tab in the forefront. Click Update Software. The Tools Update Software screen opens. Note: This screen also gives you the option of uploading the bonding master image or the dual image (master and slave firmware together).
Page 61 Updating Software Click Update Software to update the software of your residential gateway with the new version. The residential gateway loads the new software and reboots when the software update is complete. 4036168 Rev A...
Page 62: Settings Backup
Chapter 3 Configuration and Operation Settings Backup The Settings - Backup screen allows you to back up the residential gateway configuration and save it to disk. Path: System > Management > Configuration > Back Up Config File Backing Up Configuration Settings To back up the configuration settings for the residential gateway, complete the following steps.
Page 63 Settings Backup Click Backup Config file. The Settings - Backup screen opens. Click Back Up Settings. The following screen is displayed. Click Save. The system prompts you to select a location to store the backup. Select a location and type in a file name. Click Save to save a backup of the configuration.
Page 64: Update Settings
Chapter 3 Configuration and Operation Update Settings The Update Settings screen allows you to update the settings for the residential gateway from a source file. We recommend that you use this feature if you want to set up multiple residential gateways with a similar configuration. Path: System >...
Page 65 Update Settings Click Update Config file. The Update Settings screen opens. In the Settings File Name field, enter the name of the configuration file that you want to use to update your settings. You can click Browse to locate the file. Click Update Settings to update the configuration of the residential gateway.
Page 66: Customer Configuration File
Chapter 3 Configuration and Operation Customer Configuration File This feature lets you create your own "factory default" configuration so that, when a user presses the Reset button or performs Restore Default Settings from the web UI, the user's device resets to your default settings rather than to the device's original factory default configuration.
Page 67 Customer Configuration File Notes:  When you delete your uploaded customer config file by clicking Erase, the system reverts to the device's original factory default settings.  If the uploaded customer config file exists, the system will reset to the new settings when you click Restore Default Settings in the web UI or press the Reset button on the device.
Page 68: Restore Default Settings
Chapter 3 Configuration and Operation Restore Default Settings The Restore Default Settings screen allows you to restore the residential gateway configuration to the default settings. Note: You can also reset the device by inserting a sharp instrument, such as a paper clip, in the reset area on the back of the residential gateway.
Page 69 Restore Default Settings Click Restore Default Settings. The Tools Restore Default Settings screen opens. Click Restore Default Settings. The system displays the following prompt: Click OK. The system displays the following message: Follow the on-screen instructions to restore the default settings. 4036168 Rev A...
Page 70: Saving The Configuration For The Residential Gateway
Chapter 3 Configuration and Operation Saving the Configuration for the Residential Gateway The Reboot the Residential Gateway screen allows you to save any configuration changes and to reboot the router to make the changes take effect. Path: System > Management > Configuration > Restore Default Settings > Save/Reboot Saving the Configuration and Rebooting the Residential Gateway To save any configuration changes and to reboot the router to make the changes take...
Page 71 Saving the Configuration for the Residential Gateway Click Save/Reboot. The system displays the following message: Follow the instructions on the screen to save the configuration and to reboot the router. The residential gateway displays the following message shown below. The System Summary screen opens when the residential gateway has finished rebooting.
Page 72: Time Settings
Chapter 3 Configuration and Operation Time Settings The Time Settings screen allows you to synchronize the time for the residential gateway with a network-based time server. Path: System > Management > Settings > Internet Time Synchronize with Internet Time To synchronize the time for the residential gateway with the Internet time, complete the following steps.
Page 73 Time Settings Click the Settings tab. The Settings screen opens. Click Internet Time. The Time Settings screen opens. Check the box Automatically synchronize with Internet time servers. The Time Settings screen opens with populated fields. In the First NTP time server field, select a time server from the drop-down list. If you select Other, enter the name of the server in the blank field.
Page 74 Chapter 3 Configuration and Operation In the Second NTP time server field, select a time server from the drop-down list. If you select Other, enter the name of the server in the blank field. In the Time zone offset field, select the time zone specific to your area. Click Save/Apply.
Page 75: Service Control
Service Control Service Control The Service Control screen allows you to enable or disable services such as FTP, HTTP, and ICMP on the residential gateway. Path: System > Management > Settings > Service Control List Enabling or Disabling Services To enable or disable services on the residential gateway, complete the following steps.
Page 76 Chapter 3 Configuration and Operation Click the Settings tab. The Settings screen opens. Click Service Control List. The Service Control screen opens. To enable or disable a service, do the following:  To enable a service, select the check box next to the service you want to enable.
Page 77: Ip Access Control
IP Access Control IP Access Control The IP Address Access Control mode, if enabled, permits access to local management services from IP addresses contained in the Access Control List. If the Access Control mode is disabled, you cannot configure the residential gateway from non-local IP addresses.
Page 78: Adding Ip Address Access Control
Chapter 3 Configuration and Operation Adding IP Address Access Control To add IP address access control, complete the following steps. Click System on the main screen. The System Summary screen opens by default. Click Management. The Configuration screen opens with the Configuration tab in the forefront.
Page 79 IP Access Control Click Add. The Access Control screen opens. In the IP Address field, enter the IP address of the management station that you want to allow access to the local management services. In the IP Address field, enter the IP address of the management station that you want to allow access to the local management services.
Page 80: Password Access To The Residential Gateway
Chapter 3 Configuration and Operation Password Access to the Residential Gateway Access to the residential gateway is controlled through three user accounts: admin. Allows unrestricted access to change and view the configuration of the  residential gateway. This login allows access to privileged information. support.
Page 81: Creating Passwords
Password Access to the Residential Gateway Creating Passwords To create passwords for the residential gateway, complete the following steps. Click System on the main screen. Click Management. The Configuration screen opens with the Configuration tab in the forefront. Click the Settings tab. The Settings screen opens. 4036168 Rev A...
Page 82 Chapter 3 Configuration and Operation Click Passwords. The Access Control -- Passwords screen opens. In the Username field from the drop-down list, select the type of password you are creating: admin, support, or user. The default user name is admin. In the Old Password field, enter the old password.
Page 83: Http Server Port
HTTP Server Port HTTP Server Port The HTTP Server Port screen allows you to specify the TCP port for the HTTP server on both the LAN and WAN interfaces. Path: System > Management > Settings > HttpServer Modifying the Http Server Ports To modify the Http Server ports, complete the following steps.
Page 84 Chapter 3 Configuration and Operation Click the Settings tab. The Settings screen opens. Click HttpServer. The Http Server Port opens. In the LAN Http Server Port field, enter the port number for the HTTP server from the LAN side. In WAN Http Server Port field, enter the port number for the HTTP server from the WAN side.
Page 85: Alg Settings
ALG Settings ALG Settings The ALG settings allow you to enable or disable the SIP ALG based on the customer's requirement. Path: System > Management > Settings > ALG Settings Modifying the ALG Settings To modify the ALG settings, complete the following steps. Click System on the main screen.
Page 86 Chapter 3 Configuration and Operation Click the Settings tab. The Settings screen opens. Click the last option, ALG Settings. The ALG Settings page opens. Set or clear the SIP Enabled check box, depending on your customer's requirement. 4036168 Rev A...
Page 87: System Log Configuration
System Log Configuration System Log Configuration The System Log -- Configuration screen allows you to log all the selected events on the residential gateway. For example, a failed login is an event that you can select. Path: System > Management > Local Management > System Log Configuration Logging Events To log selected events, complete the following steps.
Page 88 Chapter 3 Configuration and Operation Click the Local Management tab. The Local Management screen opens. Click System Log Configuration. The System Log Configuration screen opens. Do you want to enable the logging of events?  If yes, in the Log field select Enable and go to step 6. ...
Page 89 System Log Configuration In the Log Level field, select the level of events that you want to log from the following options. All events above or equal to the selected level will be logged.  Emergency  Alert  Critical ...
Page 90: Disabling Logging
Chapter 3 Configuration and Operation Disabling Logging To disable the logging function, complete the following steps. Click System on the main screen. Click Management. The Configuration screen opens with the Configuration tab in the forefront. Click the Local Management tab. The Local Management screen opens. 4036168 Rev A...
Page 91 System Log Configuration Click System Log Configuration. The System Log Configuration screen opens. In the Log field, click Disable. In the Log Level field, select from the following options to indicate the level of alarms to be logged:  Emergency ...
Page 92 Chapter 3 Configuration and Operation In the Mode field, select from the following options to indicate the location to store the logs.  Local. Store on the residential gateway.  Remote. Store on a remote log server.  Both. Store on the residential gateway and on the remote log server. Click Save/Apply.
Page 93: System Logs
System Logs System Logs The System Log screen allows you to view the logs of activity for the residential gateway. Path: System > Management > Local Management > View System Log Viewing System Logs To view the system log for the residential gateway, complete the following steps. Click System on the main screen.
Page 94 Chapter 3 Configuration and Operation Click the Local Management tab. The Local Management screen opens. Click View System Log. The System Log screen opens. Review the log entries on the screen. Click Refresh to refresh the system log. 4036168 Rev A...
Page 95: Print Server Settings
Print Server Settings Print Server Settings The Print Server Setting screen allows you to enable or disable printer support from the USB connection. Path: System > Advanced > Print Server Enabling the Print Server To enable the print server, complete the following steps. Click System on the main screen.
Page 96: Disabling The Print Server
Chapter 3 Configuration and Operation Check the Enable on-board print server check box. The screen populates with more fields. In the Print server name field, enter the name of the print server you want to enable. In the Make and model field, enter the make and model of the printer. Click Save/Apply to enable the print server.
Page 97 Print Server Settings Clear the Enable on-board print server check box. The screen refreshes and the fields for entering print server name, make, and mode are removed from the screen. Click Save/Apply to disable the print server. 4036168 Rev A...
Page 98: Clone Mac Addresses
Chapter 3 Configuration and Operation Clone MAC Addresses The Clone MAC screen allows you to enable or disable the clone MAC function. The Clone MAC function allows you to clone MAC addresses so that the residential gateway assumes the MAC address of an attached device or a user-specified MAC address.
Page 99 Clone MAC Addresses Click the Clone MAC tab. Select the Enable clone MAC address check box. The screen populates with more fields. In the MAC Address field, enter the MAC address that you want to clone. You can also click Load client PC MAC to locate an address you want to clone. Click Apply/Reboot to clone the MAC address.
Page 100: Disabling The Clone Mac Function
Chapter 3 Configuration and Operation Disabling the Clone MAC Function To disable the Clone MAC function, complete the following steps. Click System on the main screen. Click the Advanced tab. The Print Server settings screen opens with the Print Server tab in the forefront. Click the Clone MAC tab.
Page 101: Voice Sip Basic Configuration
Voice SIP Basic Configuration Voice SIP Basic Configuration The Voice ---- SIP screen allows you to enter and save the session initiation protocol (SIP) parameters and to start and stop the voice application. Path: System > Advanced > VoIP Basic 4036168 Rev A...
Page 102: Setting Up Voip
Chapter 3 Configuration and Operation Setting Up VoIP To enter the VoIP parameters, complete the following steps. Click System on the main screen. Click Advanced. The Print Server Settings screen opens with the Print Server tab in the forefront. 4036168 Rev A...
Page 103 Voice SIP Basic Configuration Click the VoIP Basic tab. The Voice ---- SIP screen opens. In the Interface name field, select the interface you want to use for VoIP. In the Locale selection field, select the country where you are located. 4036168 Rev A...
Page 104 Chapter 3 Configuration and Operation In the Preferred codec list field, select one of the following codec values: Note: If you want to indicate an order of preference, enter a codec value for each column.  G711U  G711A  G723 ...
Page 105 Voice SIP Basic Configuration 15 In the Authentication Name field, enter the name that you want to be authenticated. 16 In the Password field, enter the password for the extension. This allows you to authenticate the phone number. 17 Do you want to activate the line? ...
Page 106: Voice Sip Advanced Configuration
Chapter 3 Configuration and Operation Voice SIP Advanced Configuration The Voice----SIP screen allows you to configure the more advanced VoIP features, such as call forwarding. Path: System > Advanced > VoIP Advanced 4036168 Rev A...
Page 107: Setting Up Advanced Voip Features
Voice SIP Advanced Configuration Setting Up Advanced VoIP Features In consultation with your ISP or VOIP service provider, you can use the Voice----SIP screen to set up advanced VOIP features for the residential gateway. Note: Be sure to consult your ISP or VOIP service provider when making the settings described below.
Page 108 Chapter 3 Configuration and Operation Click the VoIP Advanced tab. The Voice ---- SIP screen opens. 4036168 Rev A...
Page 109 Voice SIP Advanced Configuration In the LineForwarding number field, enter the number to which you want to forward calls. Configure how calls are forwarded to this line using the following options: Check Call forwarding when busy to forward this line to another number when this line is busy.
Page 110: Usb File List
Chapter 3 Configuration and Operation USB File List The USB File List screen allows you to view and download the content of a USB flash drive from any computer connected to the gateway. This feature allows your residential gateway to act like a shared network drive. Path: System >...
Page 111 USB File List Click Enable/Disable USB Devices. The Enable/Disable USB Devices screen opens. Do you wish to enable USB devices?  If yes, check the Enable on-board usb storage devices check box to enable the USB devices. After you enable it, you can view the USB disk information or the Disk File List on the page.
Page 113: Chapter 4 Dsl Configuration
Chapter 4 DSL Configuration The DSL tab allows you to check the status of the DSL connection and to modify the configuration. Use this chapter to help you check the status of the DSL connection, such as performance, and to modify the DSL configuration. In This Chapter ...
Page 114: Dsl Summary
Chapter 4 DSL Configuration DSL Summary The DSL Summary screen shows the DSL performance and operational configuration of the DSL interface, such as signal to noise ratio and output power and line coding. The DSL chip on the residential gateway automatically detects the best method to use to communicate with the DSL access multiplexer (DSLAM).
Page 115: Dsl Statistics
DSL Statistics DSL Statistics The DSL Statistics screen displays statistics for the ADSL connection. This screen shows the number of frames with errors. Path: DSL > Statistics 4036168 Rev A...
Page 116 Chapter 4 DSL Configuration To Test the Quality of the DSL Connection The ADSL Bit Error Rate (BER) will report the quality of the ADSL connection. The ADSL BER test results will show how many bits are sent and are erred among them. To test for quality of the DSL connection: Click DSL on the main screen.
Page 117: Dsl Diagnostics
DSL Diagnostics DSL Diagnostics The Diagnostics screen shows the results of diagnostics tests that the residential gateway performs while testing your DSL connection. The individual tests are listed on the Diagnostics screen. Path: DSL > Diagnostics 4036168 Rev A...
Page 118 Chapter 4 DSL Configuration Running Diagnostic Tests To run diagnostic tests for the residential gateway, complete the following steps. Click DSL on the main screen. Click the Diagnostics tab. The Diagnostics screen opens. Click Rerun Diagnostics Tests to start the diagnostics test. The screen populates with results such as Fail or Pass.
Page 119 DSL Diagnostics When you have a Permanent Virtual Circuit (PVC) up, for example an MER connection as shown in the screen-shot below, then you can see a list of other tests such as OAM F4/F5 or the PING test appear on the DSL Diagnostics page. You can click Test with OAM F4 to run a OAM F4 test.
Page 120: Dsl Settings
Chapter 4 DSL Configuration DSL Settings The DSL Settings screens allow you to configure slave and master settings for the residential gateway. DSL Slave Settings The DSL Slave Settings screen allows you to set the modulation for the residential gateway, select a phone line pair, and to select advanced capability of the chip set: Seamless Rate Adaptation (SRA), Bitswap Enable, PhyR, and so forth.
Page 121 DSL Settings Configuring DSL Slave Settings To configure DSL slave settings for the residential gateway, complete the following steps. Click DSL on the main screen. The Summary screen opens by default. Click the Setting tab. The DSL Slave Settings screen opens by default. Do you want to automatically select the modulation? ...
Page 122: Dsl Advanced Settings
Chapter 4 DSL Configuration Under the Capability field, select the capability that you want to use from the following options:  Bitswap Enable  SRA Enable  PhyR Enable Click Save/Apply to save the settings. DSL Advanced Settings The DSL Advanced Settings screen allows you to select a test mode. Path: DSL >...
Page 123 DSL Settings Configuring DSL Advanced Settings To configure the DSL advanced settings, complete the following steps. Click DSL on the main screen. The Summary screen opens by default. Click the Setting tab. The DSL Slave Settings screen opens by default. Click Advanced Settings.
Page 124: Dsl Master Settings
Chapter 4 DSL Configuration Select the test mode from the following options:  Normal  Reverb  Medley  No refrain  Click Apply to configure and save the advanced settings. DSL Master Settings The DSL Master Settings screen allows you to choose the bonding bypass mode for the RG, and to enable or disable PhyR as needed.
Page 125 DSL Settings Configuring DSL Master Settings To configure DSL master settings for the residential gateway, complete the following steps. Click DSL on the main screen. The Summary screen opens by default. Click the Setting tab. The DSL Slave Settings screen opens by default. Click the DSL Master Settings tab to open the DSL Master Settings screen.
Page 126: Adsl Tone Settings
Chapter 4 DSL Configuration ADSL Tone Settings The ADSL Tone Settings screen allows you to select active DSL tones or frequencies used by the DSL transceiver. Path: DSL > Setting > Advanced Settings > Tone Selection Setting DSL Tones or Frequencies To set DSL tones or frequencies, complete the following steps.
Page 127 ADSL Tone Settings Click Advanced Settings. The DSL Advanced Settings screen opens. Click Tone Selection. The ADSL Tone Settings screen opens. Select the ADSL tone settings as follows.  To select all the tones, click Check All.  To select individual tones, click Clear All and then select the tones you want. Click Apply to configure the tone settings.
Page 129: Chapter 5 Home Network Configuration
Chapter 5 Home Network Configuration The Home Network tab allows you to check the home network configuration. You use this tab to configure and check the status of the devices connected to your home network. In This Chapter  Client Summary .................. 108 ...
Page 130: Client Summary
Chapter 5 Home Network Configuration Client Summary The Client Summary screen shows all the client devices (Wired/Wireless/HPNA) attached to the residential gateway on the LAN side. You can click Show HPNA Client to display the HPNA devices attached to the HPNA RF interface of the residential gateway.
Page 131 Client Summary Click Show HPNA Client. After processing, the HPNA Info screen opens. This screen shows the role, MAC Address, and HPNA version of the Master and the Clients, if connected. Click HPNA Update to update the HPNA software of HPNA devices attached to the residential gateway.
Page 132: Wireless Station List
Chapter 5 Home Network Configuration Wireless Station List This page shows the attached clients (also known as associated stations) to the wireless access point (AP) of the residential gateway. At this time, there is no limit to the number of simultaneously attached devices. Path: Home Network >...
Page 133 Client Summary Click Show Wireless Client. The Wireless Station List screen opens. If you have a wireless client attached to the residential gateway, the screen displays the MAC Address of the client and whether the client is associated with the residential gateway.
Page 134: Wan Quick Setup
Chapter 5 Home Network Configuration WAN Quick Setup The WAN Quick Setup screen allows you to set up wide area network (WAN) connections and settings, such as virtual channel identifiers (VCI), virtual path identifiers (VPI), and quality of service (QoS). Path: Home Network >...
Page 135 WAN Quick Setup Configuring the WAN Interface (PPPoE Broadband Type) To configure a WAN interface with the PPP over Ethernet (PPPoE) broadband type, complete the following steps. Click Home Network on the main screen. The Client Summary screen opens. Click WAN Setup. The WAN Quick Setup screen opens. 4036168 Rev A...
Page 136 Chapter 5 Home Network Configuration Click Add to configure a new WAN interface, or click Edit to edit an existing WAN interface. In the Broadband Type field, select DSL. In the DSL Mode field, select ATM. More fields populate on the screen. Complete the following fields on the screen as follows: Note: This configuration is an example of a specific setting for the residential gateway.
Page 137 WAN Quick Setup Check the VLAN Mux - Enable Multiple Protocols Over a Single PVC check box, if applicable. d In the PPP Username: field, enter the user name for the point-to-point protocol. In the PPP Password: field, enter the password for the point-to-point protocol.
Page 138 Chapter 5 Home Network Configuration Click WAN Setup. The WAN Quick Setup screen opens. 4036168 Rev A...
Page 139 WAN Quick Setup Click Add to add a new WAN interface, or click Edit to modify an existing WAN interface. In the Broadband Type field, enter DSL. In the DSL Mode field, select ATM. More fields populate on the screen. 4036168 Rev A...
Page 140 Chapter 5 Home Network Configuration Complete the following fields on the screen as follows: Note: This configuration is an example of a specific setting for the residential gateway. Your values may differ depending upon your service provider. In the Broadband Connect Type field, select MAC Encapsulation Routing (MER).
Page 141: Configuring Ethernet Wan
WAN Quick Setup Configuring Ethernet WAN To configure a WAN interface for Ethernet WAN (ETH-WAN) broadband type, complete the following steps. Click Home Network on the main screen. The Client Summary screen opens. Click WAN Setup. The WAN Quick Setup screen opens. On the WAN Quick Setup screen, check for any PVCs configured on a DSL connection.
Page 142 Chapter 5 Home Network Configuration Click the ETH WAN Config tab. The Ethernet WAN Configuration screen opens. By default, LAN port 4 (eth1.4/LAN4) is chosen as the WAN port, and Ethernet WAN mode is disabled. Select the appropriate connection mode as follows: ...
Page 143 WAN Quick Setup Settings for Default Connection Mode If you select Default Mode as shown below, this service will have a single service over one connection (i.e., no VLANs). 4036168 Rev A...
Page 144 Chapter 5 Home Network Configuration Click the WAN Setup tab, and then click Add to set up a new WAN interface. The WAN Setup screen appears as shown below. From the Broadband Connect Type drop-down list, choose the appropriate connection type: PPPoE (as in the example above), IPoE, or Bridging. Configure the remaining credentials as appropriate for your WAN interface.
Page 145 WAN Quick Setup Settings for VLAN MUX Mode If you select VLAN MUX Mode as shown below, this service will have multiple VLAN services over one connection. 4036168 Rev A...
Page 146 Chapter 5 Home Network Configuration Click the WAN Setup tab, and then click Add to set up a new WAN interface. The WAN Setup screen appears as shown below. From the Broadband Connect Type drop-down list, choose the appropriate connection type: PPPoE (as in the example above), IPoE, or Bridging. Check the VLAN Mux checkbox, and then enter the VLAN ID used by your WAN interface.
Page 147: Lan Setup
LAN Setup LAN Setup The Local Area Network (LAN) Setup screen allows users to set up LAN settings such as Dynamic Host Configuration Protocol (DHCP), Internet Gateway Multicast Protocol (IGMP), and Universal Plug and Play (UPnP). Path: Home Network > LAN Setup 4036168 Rev A...
Page 148 Chapter 5 Home Network Configuration Configuring the LAN Interface To configure the LAN interface, complete the following steps. Click Home Network on the main screen. The Client Summary screen opens. Click LAN Setup. The Local Area Network (LAN) setup screen opens. In the IP Address field, enter the IP address for the residential gateway.
Page 149: Reserving Ip Addresses
LAN Setup  If yes, check the Enable UPnP check box.  If no, clear the Enable UPnP check box. Do you want to Enable the DHCP server?  If yes, select Enable DHCP Server, and go to step 7. ...
Page 150 Chapter 5 Home Network Configuration Click Home Network on the main screen. The Client Summary screen opens. Click LAN Setup. The Local Area Network (LAN) setup screen opens. 4036168 Rev A...
Page 151 LAN Setup Click Address Reservation. The Reserve Specific IP Addresses for Specific MAC Addresses screen opens. In the Assign this IP field, enter the IP address you want to assign to the MAC address. In the To this MAC field, enter the MAC address to which you want to assign the IP address.
Page 152: Wireless Summary
Chapter 5 Home Network Configuration Wireless Summary The Wireless Summary screen shows the MAC address and security information for the wireless connection. Path: Home Network > Wireless > Summary 4036168 Rev A...
Page 153: Wireless Basic
Wireless Basic Wireless Basic The Wireless -- Basic screen allows you to configure the basic features of the wireless LAN interface. You can enable or disable the LAN interface, hide the network from active scans, enter a name for the wireless network, and restrict the channel set based on country requirements.
Page 154: Enabling The Wireless Network
Chapter 5 Home Network Configuration Enabling the Wireless Network To enable the wireless network, complete the following steps. Click Home Network on the main screen. The Client Summary screen opens. Click Wireless. The Wireless Summary screen opens. 4036168 Rev A...
Page 155 Wireless Basic Click Basic. The Wireless Basic screen opens. Check the Enable Wireless check box to enable the wireless network. The screen populates with additional fields. Do you want to prevent other wireless clients from communicating with the wireless access point (AP) of the residential gateway? ...
Page 156: Securing Your Wireless Network With Wep
Chapter 5 Home Network Configuration In the 54g Protection field, select Auto or Off. Do not disable 54g Protection if there is a possibility that an 802.11b device may need to use your wireless network. Notes: – 54g Protection allows 802.11g and 802.11b devices to co-exist in the same network without “speaking”...
Page 157 Wireless Basic Click Wireless. The Wireless Summary screen opens. Click Security. The Wireless -- Security screen opens. In the Select SSID field, use the drop-down list to choose an option for the service set identifier (SSID). Note: You can add options to this drop-down list on the Wireless -- Basic screen. 4036168 Rev A...
Page 158 Chapter 5 Home Network Configuration In the Network Authentication field, choose one of these two options for the authentication method.  Open. All devices may access the wireless network when WEP Encryption is disabled. When no authentication is required and if encryption is disabled, then the data that is passing between the access point and the client is also not encrypted.
Page 159 Wireless Basic Do you want the system to generate the network key for you?  If yes, go to step 11.  If no, you must disable Serial Number Encryption and enter your own network key(s) in the field provided. Go to step 9. In the Current Network Key field, select a network key from the drop-down list.
Page 160: Disabling The Wireless Network
Chapter 5 Home Network Configuration Disabling the Wireless Network To disable the wireless network, complete the following steps. Click Home Network on the main screen. The Client Summary screen opens. Click Wireless. The Wireless Summary screen opens. 4036168 Rev A...
Page 161 Wireless Basic Click Basic. The Wireless Basic screen opens. Uncheck the Enable Wireless check box. The wireless network fields are removed from the screen. Click Save/Apply to disable the wireless network. 4036168 Rev A...
Page 162: Wireless Security
Chapter 5 Home Network Configuration Wireless Security The Wireless Security screen allows you to configure security features of the wireless LAN interface. You can set the network authentication method, select data encryption, specify whether a network key is required to authenticate to this wireless network, and specify the encryption strength.
Page 163 Wireless Security WPA Personal or WPA2 Personal To secure your wireless network with a pre-shared dynamic key, complete the following steps. Click Home Network on the main screen. The Client Summary screen opens. Click Wireless. The Wireless Summary screen opens. 4036168 Rev A...
Page 164 Chapter 5 Home Network Configuration Click Security. The Wireless -- Security screen opens. In the Network Authentication field, select WPA Personal or WPA2 Personal from the drop-down list. Select Enabled or Disabled to enable or disable your Serial Number Encryption function.
Page 165 Wireless Security Mixed WPA2 Personal/WPA Personal The security mode supports simultaneous WPA Personal and WPA2 Personal connections. You can have devices that use either WPA Personal or WPA2 Personal. The access point automatically chooses the encryption algorithm used by each client device.
Page 166 Chapter 5 Home Network Configuration Click Security. The Wireless -- Security screen opens. In the Network Authentication field, select Mixed WPA2 Personal/WPA Personal from the drop-down list. Select Enabled or Disabled to enable or disable your Serial Number Encryption function. Your serial number will be printed on the back label of your device. If you enable this function, the system will automatically use your serial number as the network key for your WEP encryption.
Page 167 Wireless Security WPA/WPA2 Enterprise WPA/WPA2 Enterprise is used in coordination with a Remote Authentication Dial-In Use Service (RADIUS) server for client authentication. If you choose this to be your authentication method, make sure that a RADIUS server is available in the network for authentication.
Page 168 Chapter 5 Home Network Configuration In the Network Authentication field, select WPA/WPA2 Enterprise from the drop-down list. Select Enabled or Disabled for your WPA2 Pre-authentication. Note: In pre-authentication, a WPA2 wireless client can perform an 802.1X authentication with other wireless access points in its range when it is still connected to its current wireless access point.
Page 169 Wireless Security Mixed WPA/WPA2 Enterprise The security mode supports simultaneous WPA Enterprise and WPA2 Enterprise connections. You can have devices that use either WPA Enterprise or WPA2 Enterprise. The access point automatically chooses the encryption algorithm used by each client device. To configure the Mixed WPA/WPA2 Enterprise security settings for the access point, complete the following steps.
Page 170 Chapter 5 Home Network Configuration In the Network Authentication field, select Mixed WPA2 Enterprise/WPA Enterprise from the drop-down list. Select Enabled or Disabled for your WPA2 Pre-authentication. Note: In pre-authentication, a WPA2 wireless client can perform an 802.1X authentication with other wireless access points in its range when it is still connected to its current wireless access point.
Page 171: Wireless Mac Filtering
Wireless MAC Filtering Wireless MAC Filtering The Wireless -- MAC Filtering screen allows you to allow or block certain wireless clients from accessing the residential gateway. If you know the MAC address of the client you want to block, you can use this screen to provide access to the residential gateway or block that client from accessing it.
Page 172 Chapter 5 Home Network Configuration Click Wireless. The Wireless Summary screen opens. Click Advanced. The Wireless Advanced Settings screen opens. Click MAC Filter. The Wireless MAC Filtering screen opens. In the MAC Restrict Mode field, click Allow to enable the MAC restrict mode. Click Add.
Page 173: Blocking Wireless Clients
Wireless MAC Filtering Blocking Wireless Clients You can block wireless clients from accessing the residential gateway if you know the client's MAC address. MAC restrict mode must be enabled. To prevent wireless clients from accessing the residential gateway, complete the following steps. Click Home Network on the main screen.
Page 174 Chapter 5 Home Network Configuration Click MAC Filter. The Wireless MAC Filtering screen opens. In the MAC Restrict Mode field, click Deny to enable the MAC restrict mode. Click Add. The Wireless -- MAC Filter screen opens. In the MAC Address field, enter the MAC address of the client that you want to prevent from accessing the residential gateway.
Page 175: Wireless Bridge
Wireless Bridge Wireless Bridge Wireless LAN Bridging (also referred to as a Wireless Distribution System, WDS) refers to two or more 802.11 access points that send traffic between them (from access point to access point) as opposed to between access point and a client computer.
Page 176 Chapter 5 Home Network Configuration Bridge Restrict Enabled 4036168 Rev A...
Page 177: Wireless Station List
Wireless Station List Wireless Station List This page shows associated wireless MAC addresses and status. Path: Home Network > Wireless > Advanced > Station Info Showing MAC Addresses and Clients To show the wireless MAC Address and clients, complete the following steps. Click Home Network on the main screen.
Page 178 Chapter 5 Home Network Configuration Click Advanced. The Wireless Advanced Settings screen opens. Click Station Info. The Wireless Station List opens. Click Refresh to update the list of MAC addresses and associated status. 4036168 Rev A...
Page 179: Wi-Fi Protected Setup
Wi-Fi Protected Setup Wi-Fi Protected Setup Wi-Fi Protected Setup (WPS) is a standard for easy and secure establishment of a wireless home network. You can choose to use either the PBC or PIN method for connecting the wireless networks using WPS. But first, you will still need to configure the appropriate authentication on your router.
Page 180 Chapter 5 Home Network Configuration PBC Method The PBC method requires the user to press a button (either actual or virtual) on both the DDR2200 and the new wireless client device to establish the wireless connection. To set up your wireless network using the PBC method, complete the following steps.
Page 181: Hpna Information
HPNA Information HPNA Information The HPNA Info screen allows you to view the HPNA devices connected to the residential gateway and to examine statistics for these devices. Path: Home Network > HPNA > HPNA Info Updating HPNA Information To update the HPNA information, complete the following steps. Click Home Network on the main screen.
Page 182 Chapter 5 Home Network Configuration Click HPNA. After a moment of processing, the HPNA Info screen opens. Click HPNA Update to update the HPNA software of HPNA devices attached to the residential gateway. The Update HPNA Image window opens. In the Software File Name field, enter the name of the file that you want to use to update your system.
Page 183: Viewing Hpna Statistics
HPNA Information Viewing HPNA Statistics From the HPNA Info screen, you can choose the HPNA Master Statistics Info, HPNA Client Statistics Info, or HPNA Diagnostics Info tab. HPNA Master Statistics Info The HPNA Master Statistics Info screen displays the master statistics for the HPNA connection, such as the number of packets transmitted, received, and dropped.
Page 184 Chapter 5 Home Network Configuration HPNA Client Statistics Info The HPNA Client Statistics Info screen displays the client statistics for the HPNA connection, such as the number of packets transmitted, received, and dropped. Path: Home Network > HPNA > HPNA Client Statistics Info 4036168 Rev A...
Page 185 HPNA Information HPNA Diagnostics Info The HPNA Diagnostics Info screen displays the results of the HPNA Diagnostic tests in all possible directions (master to client, client to master, client to client). It also displays diagnostic information such as packets transmitted, PER, SNR, Rx Power, and so on for each direction tested.
Page 187: Chapter 6 Security Configuration
Chapter 6 Security Configuration The Security tab allows you to check the security configuration and modify the configuration. Use this chapter to help you check the status of the security configuration or make changes to the configuration. In This Chapter ...
Page 188: Mac Filtering Setup
Chapter 6 Security Configuration MAC Filtering Setup The MAC Filtering Setup screen allows you to set up filters for packets containing configured MAC addresses. With the MAC Filtering feature, you can restrict access to certain servers based on their MAC address. MAC Filtering is only effective on ATM PVCs configured in Bridge mode.
Page 189 MAC Filtering Setup Blocked MAC Filtering Blocked MAC Filtering means that all MAC layer frames will be BLOCKED except those that match any of the specified rules in the following screen. 4036168 Rev A...
Page 190: Adding Mac Filtering
Chapter 6 Security Configuration Adding MAC Filtering To add MAC Filtering, complete the following steps. Click Security on the main screen. The Packet Filtering tab opens by default. Click MAC Filtering. The MAC Filtering screen opens. Check the Enable Filtering Function check box. 4036168 Rev A...
Page 191 MAC Filtering Setup Click Add to open a blank MAC Filtering screen. 4036168 Rev A...
Page 192 Chapter 6 Security Configuration In the Protocol Type field, select one of the following protocols from the drop- down menu.  PPPoE  IPv4  IPv6  AppleTalk   NetBEUI  IGMP In the Destination MAC Address field, enter the frame's destination MAC address.
Page 193: Forwarding Or Blocking Mac Layer Frames
MAC Filtering Setup Forwarding or Blocking MAC Layer Frames You can change the policy on how MAC layer frames are forwarded or blocked. FORWARDED means that all MAC layer frames will be forwarded except those matching with any of the specified rules in the table on the screen. BLOCKED means that all MAC layer frames will be blocked except those matching with any of the specified rules in the table on the screen.
Page 194: Removing Mac Filtering
Chapter 6 Security Configuration Click Change Policy. The Change MAC Filtering Global Policy screen opens. In this example, the global policy for MAC filtering is "Blocked." Do you want to change the Global Policy?  If yes, click Yes. If the policy is forwarded, clicking Yes changes the policy to blocked, and vice versa.
Page 195 MAC Filtering Setup From the MAC Filtering screen, select Remove in the Remove column next to the MAC filtering rule you wish to remove. Click Remove to remove the MAC filtering. 4036168 Rev A...
Page 196: Incoming Ip Filtering
Chapter 6 Security Configuration Incoming IP Filtering By default, all incoming IP traffic from the WAN is blocked when the firewall is enabled. However, some IP traffic can be accepted by setting up filters. Path: Security > Packet Filtering > Incoming IP Filtering 4036168 Rev A...
Page 197: Adding An Incoming Ip Filter
Incoming IP Filtering Adding an Incoming IP Filter You can create a filter rule to identify incoming IP traffic by specifying a new filter name and at least one condition for the filter. All of the specified conditions in this filter rule must be satisfied for the rule to take effect.
Page 198 Chapter 6 Security Configuration Click Add. The Add IP Filter Incoming screen opens. In the Filter Name field, enter the name of the filter. In the Protocol field, select one of the following protocols:  TCP/UDP    ICMP In the Source IP address field, enter the source IP address of the server sending the incoming packets.
Page 199 Incoming IP Filtering 11 In the Destination Port field, enter the port number for the server receiving the packets. You can enter one port or a range of ports using the following format: port or port:port. Example: 0:5 indicates ports 0 through 5. 12 Do you want to select all of the WAN interfaces? ...
Page 200: Removing An Incoming Ip Filter
Chapter 6 Security Configuration Click Incoming IP Filtering. The Incoming IP Filtering screen opens. Check the Enable Filtering Function check box to enable the filtering function. Removing an Incoming IP Filter To remove an incoming IP filter, complete the following steps. Click Security on the main screen.
Page 201 Incoming IP Filtering Select the Incoming IP Filtering tab. The Incoming IP Filtering screen opens. From the Incoming IP Filtering screen, select Remove in the Remove column next to the filter you wish to remove. Click Remove to remove the filter. 4036168 Rev A...
Page 202: Outgoing Ip Filtering
Chapter 6 Security Configuration Outgoing IP Filtering By default, all outgoing IP traffic from LAN is allowed, but some IP traffic can be BLOCKED by setting up filters. Path: Security > Packet Filtering > Outgoing IP Filtering 4036168 Rev A...
Page 203 Outgoing IP Filtering Enabling the Filtering Function To enable the outgoing IP filtering function, complete the following steps. Click Security on the main screen. The MAC Filtering screen opens by default. Click Outgoing IP Filtering. The Outgoing IP Filtering screen opens. Check the Enable Filtering Function check box to enable the filtering function.
Page 204: Adding An Outgoing Ip Filter
Chapter 6 Security Configuration Adding an Outgoing IP Filter To add an outgoing IP filter, complete the following steps. Click Security on the main screen. The MAC Filtering screen opens by default. Select the Outgoing IP Filtering tab. The Outgoing IP Filtering screen opens. 4036168 Rev A...
Page 205 Outgoing IP Filtering Click Add. The Add IP Filter Outgoing screen opens. In the Filter Name field, enter the name of the filter. Note: You cannot use blank spaces in the filter name. In the Protocol field, select one of the following protocols: ...
Page 206: Removing An Outgoing Ip Filter
Chapter 6 Security Configuration Removing an Outgoing IP Filter To remove an outgoing IP filter, complete the following steps. Click Security on the main screen. The MAC Filtering screen opens by default. Select the Outgoing IP Filtering tab. The Outgoing IP Filtering screen opens. From the Outgoing IP Filtering screen, select Remove in the Remove column next to the filter you wish to remove.
Page 207: Parental Control Setup - Filtering Function
Parental Control Setup - Filtering Function Parental Control Setup - Filtering Function The Client IP/MAC Filtering Setup screen allows you to configure the residential gateway to restrict access to the Internet, email, or other network services at specific days and times. You can set time restrictions for a single computer, a range of computers, or multiple computers.
Page 208: Adding Time Of Day Restrictions
Chapter 6 Security Configuration Adding Time of Day Restrictions The Filtering Function screen allows you to set restrictions that block access to the Internet during certain times of the day. This screen adds time of day restrictions to a special LAN device connected to the residential gateway. The browser's MAC Address automatically displays the MAC address of the LAN device where the browser is running.
Page 209 Parental Control Setup - Filtering Function Click the Firewall tab. The Filtering Function screen opens. Check the Enable Filtering Function check box to enable the filtering function. The Client IP MAC Filtering screen populates with any time restrictions that are set.
Page 210 Chapter 6 Security Configuration Click Add PC. The Add Filtering Function screen opens. In the Client PC Description field, enter a description of the PC for which you want to block services. In the Choose mode field, select IP mode or MAC mode from the drop-down menu.
Page 211: Removing Time Of Day Restrictions
Parental Control Setup - Filtering Function 11 Click Save/Apply to enable the time of day restrictions. Removing Time of Day Restrictions To remove time of day restrictions, complete the following steps. Click Security on the main screen. The MAC Filtering screen opens by default. Click the Firewall tab.
Page 212 Chapter 6 Security Configuration Check the Enable Filtering Function check box to enable the filtering function. The Client IP/MAC Filtering Setup screen populates with any time restrictions that are set. From the Configure field select Remove in the Remove column next to the time of day restriction that you wish to remove.
Page 213: Url Filtering Function
URL Filtering Function URL Filtering Function The URL Filtering Function screen allows you to block websites based on the URL address and/or key words used in the website. For example, if you have children in the home, you may want to block websites that are inappropriate for children by entering the URL or key words.
Page 214: Enabling Url Filtering
Chapter 6 Security Configuration Enabling URL Filtering To enable URL filtering for the firewall, complete the following steps. Click Security on the main screen. The MAC Filtering screen opens by default. Click the Firewall tab. The Filtering Function screen opens by default. 4036168 Rev A...
Page 215 URL Filtering Function Click the URL Filter tab. The URL Filtering Function screen opens. Click Enable URL Filtering Function. The URL Filtering Function screen updates with blank fields for entering the URLs that you want to block. For each rule, enter the URL or keyword that you want to block. In the Week Day area, select Everyday or select the individual days on which you want the filter to take effect.
Page 216: Removing A Url Filter
Chapter 6 Security Configuration Removing a URL Filter To remove a URL filter from the firewall, complete the following steps. Click Security on the main screen. The MAC Filtering screen opens by default. Click the Firewall tab. The Filtering Function screen opens by default. Click the URL Filter tab.
Page 217 URL Filtering Function Click Enable URL Filtering Function. The URL Filtering Function screen updates with blank fields for entering the URLs that you want to block. Click Del next to each rule that you want to delete. If you want to remove all the rules, click Remove All.
Page 218: Stateful Packet Inspection
Chapter 6 Security Configuration Stateful Packet Inspection The Stateful Packet Inspection screen allows the gateway to inspect packets passing through it to deny network attacks. Path: Security > Firewall > Stateful Packet Inspection 4036168 Rev A...
Page 219: Enabling Stateful Packet Inspection
Stateful Packet Inspection Enabling Stateful Packet Inspection To enable stateful packet inspection (SPI), complete the following steps. Click Security on the main screen. The MAC Filtering screen opens by default. Click the Firewall tab. The Filtering Function screen opens by default. 4036168 Rev A...
Page 220 Chapter 6 Security Configuration Click the Stateful Packet Inspection tab. The Intrusion Detection screen opens. Select the Enable SPI, Hacker Pattern and Anti-Dos Firewall field. Select the Enable Email Alert field and fill in the email address and SMTP server address that you want to notify when the DSL must be rebooted.
Page 221: Local Certificates
Local Certificates Local Certificates The Local Certificates screen allows you to load certificates onto the residential gateway. Local certificates are used by peers to verify your identity. A maximum of four certificates can be stored on the residential gateway. Path: Security > Certificate > Local > Local Certificates 4036168 Rev A...
Page 222: Creating Certificates
Chapter 6 Security Configuration Creating Certificates The Create Certificate screen allows you to generate a certificate by specifying certificate parameters shown in this screen. To create a certificate, complete the following steps. Click Security on the main screen. The MAC Filtering screen opens. Click Add.
Page 223 Local Certificates Click Create Certificate Request. The Create New Certificate Request screen opens. In the Certificate Name field, enter the name for the certificate. In the Common Name field, enter the common name of the certificate. In the Organization Name field, enter the name of the organization that owns the certificate.
Page 224: Importing Local Certificates
Chapter 6 Security Configuration Importing Local Certificates The Import Certificate screen allows you to import a pre-existing certificate to the residential gateway. To import a certificate, complete the following steps. Click Security on the main screen. The MAC Filtering screen opens by default. Click Certificate.
Page 225 Local Certificates Click Import Certificate. The Import certificate screen opens. In the Certificate Name field, enter the name of the certificate. In the Certificate area, copy and paste the contents of the certificate file provided by the service provider. In the Private Key area, copy and paste the private key from the certificate file provided by the service provider.
Page 226: Trusted Ca Certificates
Chapter 6 Security Configuration Trusted CA Certificates The Trusted CA (Certificate Authority) Certificates screen allows you to load certificates onto the residential gateway. You can use CA certificates to verify peers' certificates. A maximum of four certificates can be stored. Path: Security >...
Page 227: Importing Trusted Ca Certificates
Trusted CA Certificates Importing Trusted CA Certificates The Import CA certificate screen allows you to import a pre-existing trusted CA certificate to the residential gateway. Click Security on the main screen. The MAC Filtering screen opens by default. Click Certificate. The Local Certificates screen opens. 4036168 Rev A...
Page 228 Chapter 6 Security Configuration Click the Trusted CA tab. The Trusted CA (Certificate Authority) Certificates screen opens. Click Import Certificate. The Import CA Certificate screen opens. In the Certificate Name field, enter the name of the certificate. In the Certificate area, copy and paste the contents of the certificate file provided by the service provider.
Page 229: Chapter 7 Advanced Configuration
Chapter 7 Advanced Configuration The Advanced tab lets you to check the quality of service and IP traffic over your network and change the configuration. Use this chapter to check the status of the more advanced features of your residential gateway, such as port mapping and DNS server configuration, and to change the configuration.
Page 230: Upstream Quality Of Service
Chapter 7 Advanced Configuration Upstream Quality of Service The Upstream Quality of Service screen allows you to configure the Quality of Service (QoS) settings for the residential gateway. Path: Advanced > QoS > Upstream Quality of Service Adding Upstream Quality of Service Settings To add upstream Quality of Service settings, complete the following steps.
Page 231 Upstream Quality of Service Click Add. The Add Upstream QoS Rule screen opens. In the Name field, enter the name of the QoS rule. In the LAN Port field, select the LAN port for which you want to apply the rule. In the Protocol field, select the protocol that you want to use from the following options: ...
Page 232: Queues Configuration
Chapter 7 Advanced Configuration 10 In the MAC Mask field, enter the mask for the source MAC address from which the packets are being sent and the MAC Mask for the destination MAC address. A MAC mask of ff:ff:ff:00:00:00 matches all devices made by the same manufacturer (identified by the first three pairs of the MAC address).
Page 233 Upstream Quality of Service Click Queues Configuration. The Queues Configuration screen opens. Click Add to add a queue. For the Queue Configuration Status, select Enable or Disable to enable or disable your queue configuration. Select from the Queue drop-down list for the associated WAN interface or connection type for Queue.
Page 234: Remote Management
Chapter 7 Advanced Configuration Remote Management The Remote Management -- TR-069 Client screen allows an auto-configuration server (ACS) to perform auto-configuration, provisioning, collection of statistics, and diagnostics for this residential gateway. Path: Advanced > Remote Management 4036168 Rev A...
Page 235 Remote Management Configuring the TR-069 Client Options To configure the TR-069 client options, complete the following steps. Click Advanced on the main screen. The Remote Management -- TR-069 Client screen opens. In the Inform field, choose one of the following options: ...
Page 236: Port Mapping
Chapter 7 Advanced Configuration Port Mapping The Port Mapping screen allows you to specify which traffic will be transmitted over the WAN interface. Traffic is classified by ingress port, such as Ethernet port, or by DHCP option settings. Port Mapping supports multiple ports to PVC and bridging groups.
Page 237: Adding Port Mapping
Port Mapping Adding Port Mapping To add port mapping, complete the following steps. CAUTION: This procedure is for administrators only. Incorrectly using this function can adversely affect your system operation. Click Advanced on the main screen. The Upstream Quality of Service screen opens.
Page 238 Chapter 7 Advanced Configuration Click the Port Mapping tab. The Port Mapping screen opens. 4036168 Rev A...
Page 239 Port Mapping Click Add. The Port Mapping Configuration screen opens. In the Group Name field, enter the name of the group. The group name must be unique. For example, enter IPTV. For the Grouped Interfaces field, select interfaces from the Available Interfaces list and add them to the grouped interface list using the arrow buttons to create the required mapping of the ports.
Page 240: Virtual Servers Setup
Chapter 7 Advanced Configuration Virtual Servers Setup The NAT -- Virtual Servers Setup screen allows you to configure servers to which you want to forward IP packets that belong to a specific service. Path: Advanced > IP Networking > NAT > Virtual Servers Adding a Virtual Server To add and configure a virtual server, complete the following steps.
Page 241 Virtual Servers Setup Click Virtual Servers. The Virtual Servers screen opens. 4036168 Rev A...
Page 242 Chapter 7 Advanced Configuration From the Virtual Servers Setup screen, click Add. The NAT -- Virtual Servers screen opens. Under Server Name, choose one of the following:  Click Select a Service, and choose a service from the drop-down list. ...
Page 243: Removing A Virtual Server
Virtual Servers Setup 10 In the Remote IP field, enter the service request (client) sender's IP address. Leave it blank to accept all incoming service requests regardless of the senders' IP address. 11 Click Save/Apply to add the virtual server. Removing a Virtual Server To remove a virtual server, complete the following steps.
Page 244: Port Triggering Setup
Chapter 7 Advanced Configuration Port Triggering Setup Some applications require that specific ports in the router's firewall be opened for access by the remote parties. The Port Triggering feature dynamically opens up the "Open Ports" in the firewall when an application on the LAN initiates a TCP/UDP connection to a remote party using the Triggering Ports feature.
Page 245 Port Triggering Setup Click Port Triggering. The NAT -- Port Triggering screen opens. From the NAT -- Port Triggering screen, click Add. The NAT Port Triggering screen opens with a list of available protocols. 4036168 Rev A...
Page 246: Closing A Port On The Firewall
Chapter 7 Advanced Configuration Under Application Name, choose one of the following:  Click Select an Application and choose an application from the drop-down list.  Click Custom Application, and enter a name for the application. Complete the fields on the screen as follows: ...
Page 247 Port Triggering Setup Click Port Triggering. The NAT -- Port Triggering screen opens. From the NAT -- Port Triggering screen, click Remove in the Remove column next to the port you wish to close. Click Remove. The port you selected is closed. 4036168 Rev A...
Page 248: Dmz Host Setup
Chapter 7 Advanced Configuration DMZ Host Setup The NAT -- DMZ Host screen allows the IP packets from the WAN that do not belong to any of the applications configured in the Virtual Servers table to be forwarded to the DMZ (demilitarized zone) host computer. Path: Advanced >...
Page 249: Dns Server Configuration
DNS Server Configuration DNS Server Configuration The DNS Server Configuration screen allows you to configure the Domain Name Server (DNS). If the Enable Automatic Assigned DNS check box is checked, the residential gateway will accept the first received DNS assignment from one of the PPPoA, PPPoE or MER/DHCP enabled PVC(s) during the connection establishment.
Page 250: Dns Entries
Chapter 7 Advanced Configuration DNS Entries The DNS Entries page allows you to add domain names and the IP addresses to be resolved by the Gateway. You could add a DNS entry by entering the Domain name and the corresponding IP address in the fields. Click Save/Apply to save your settings.
Page 251: Dynamic Dns
Dynamic DNS Dynamic DNS The Dynamic DNS screen allows you to alias a dynamic IP address to a static hostname in any of the many domains. The alias allows your DSL router to be more easily accessed from various locations on the Internet. Path: Advanced >...
Page 252 Chapter 7 Advanced Configuration Click DNS. The DNS screen opens. Click Dynamic DNS. The Dynamic DNS screen opens. Click Add on the Dynamic DNS screen. The Add dynamic DDNS screen opens. 4036168 Rev A...
Page 253 Dynamic DNS In the D-DNS provider field, select the provider from the drop-down list. In the Hostname field, enter the name of the host. In the Interface field, select the interface from the drop-down list. Under DynNDS Settings, enter your user name and password. 10 Click Save/Apply.
Page 254: Nslookup
Chapter 7 Advanced Configuration Nslookup The Nslookup tool is a utility to look up information in the DNS (Domain Name System). Basically, DNS maps domain names to IP addresses. Type in the domain name in the field, and press Start to look up the IP address. Path: Advanced >...
Page 255: Default Gateway Routing
Default Gateway Routing Default Gateway Routing The Default Gateway screen allows you to make gateway assignments for devices that are connected to the residential gateway. Note: If you change the Enable Automatic Assigned Default Gateway check box from unselected to selected, you must reboot the router to get the automatic assigned default gateway.
Page 256 Chapter 7 Advanced Configuration Click Routing. The Routing screen opens. Click Default Gateway. The Default Gateway screen opens. Do you want to enable the automatic assigned default gateway?  If yes, be sure the Enable Automatic Assigned Default Gateway check box is checked.
Page 257: Static Route
Static Route Static Route The Residential Gateway lets you set up static routes when routing packets from a specific network to another. Path: Advanced > IP Networking > Routing > Static Route To add a static routing entry, complete the following steps. Click Advanced on the main screen.
Page 258: Ping
Chapter 7 Advanced Configuration Ping The ping utility can be used to test connectivity with other network devices. Path: Advanced > IP Networking > Routing > Ping To test the connectivity with other devices (ping them), complete the following steps. Click Advanced on the main screen.
Page 259 Ping Enter the IP address of a remote host and click Start Ping Processing. The Ping result appears on the screen as shown below. 4036168 Rev A...
Page 260: Dhcp Server Probing
Chapter 7 Advanced Configuration DHCP Server Probing You can set up the residential gateway to perform DHCP server probing, an operation that requests a new DHCP lease if the default gateway happens to be out of service due to a power outage or other problems. With DHCP server probling, the residential gateway probes the default gateway based on the probing interval value.
Page 261 DHCP Server Probing Click DHCP Server Probing. The DHCP Server Probing screen opens. Select Enable to enable DHCP server probing. Enter the Probing Interval in seconds, or accept the default value if appropriate. Note: This parameter defines how often the residential gateway communicates with the default gateway to see if it is still active.
Page 262: Internet Group Management Protocol
Chapter 7 Advanced Configuration Internet Group Management Protocol The IGMP screen allows you to configure the Internet Group Management Protocol (IGMP) parameters. IGMP is a communications protocol that is used to manage the membership of Internet Protocol multicast groups. Routers use IGMP to manage multicasting.
Page 263 Internet Group Management Protocol In the Last member Query Interval field, enter the interval in seconds. It is the amount of time in seconds that the IGMP router waits to receive a response to a Group-Specific Query message. In the Last member Query Count field, enter the value in numbers. It is the number of Group-Specific Query messages sent upon receipt of a message indicating a leave.
Page 264: Ipsec Settings
Chapter 7 Advanced Configuration IPSec Settings The IPSec Settings screen allows you to configure IP security settings for the residential gateway. Path: Advanced > IP Networking > IPSec Adding an IPSec Connection To add an IPSec connection, complete the following steps. Click Advanced on the main screen.
Page 265 IPSec Settings Click Add New Connection. The IPSec Settings screen opens. In the IPSec Connection Name field, enter the name of the connection. In the Remote IPSec Gateway Address field, enter the gateway address for the remote IPSec gateway. In the Tunnel access from local IP addresses field, select Subnet or Single Address.
Page 266 Chapter 7 Advanced Configuration 16 In the Perfect Forward Secrecy field, select one of the following options:  If you select Enable, Perfect Forward Secrecy is enabled.  If you select Disable, Perfect Forward Secrecy is disabled. 17 Do you want to configure the advanced settings? ...
Page 267: Chapter 8 Customer Information
Chapter 8 Customer Information Introduction This chapter provides contact information to obtain product support and return products for service. In This Chapter  Customer Support ................246  Return Products for Repair..............248 4036168 Rev A...
Page 268: Customer Support
If you have technical questions, telephone your nearest technical support office at one of the following telephone numbers. The Americas Technical Support United States Cisco Services ® Atlanta, Georgia  For Digital Broadband Delivery System products only, call: –...
Page 269: Additional Information
Customer Support Australia Technical Support Australia Sydney Telephone: 011-61-2-8446-5394 Fax: 011-61-2-8446-8015 Japan Japan Tokyo Technical Support Telephone: 011-81-3-5322-2067 Fax: 011-81-3-5322-1311 Additional Information Access your company's extranet site to view or order additional technical publications. For accessing instructions, contact the representative who handles your account.
Page 270: Return Products For Repair
Chapter 8 Customer Information Return Products for Repair You must obtain a return material authorization (RMA) number before you send products to us for repair or upgrade. To return a product for repair or upgrade, complete the following steps. Obtain the following information about the product that you want to return for repair or upgrade: ...
Page 271 Return Products for Repair Pack the product in its original container and protective packing material. Important:  If the original container and packing material are no longer available, pack the product in a sturdy, corrugated box and cushion it with packing material that is appropriate for the method of shipping.
Page 273: Index
Index Creating Passwords • 59 Customer Configuration File • 44 Customer Information • 245 Adding a Virtual Server • 218 Customer Support • 246 Adding an Alias for a Dynamic IP Address to a Static Host Name • 229 Adding an Incoming IP Filter • 175 Adding an IPSec Connection •...
Page 274 Installing the Residential Gateway • 9 Reserving IP Addresses • 127 Internet Group Management Protocol • 240 Restore Default Settings • 46 Introducing the DDR2200 Series Residential Return Products for Repair • 248 Gateway • 1 IP Access Control • 55 Route Information •...
Page 275 Index Voice SIP Advanced Configuration • 84 Voice SIP Basic Configuration • 79 WAN Information • 29 WAN Quick Setup • 112 WAN Statistics • 35 What's On the Back Panel? • 6 What's On the Front Panel? • 4 Wi-Fi Protected Setup •...
Page 276 This document includes various trademarks of Cisco Systems, Inc. Please see the Notices section of this document for a list of the Cisco Systems, Inc. trademarks used in this document. Product and service availability are subject to change without notice.

Cisco DDR2200 Series Installation And Operation Manual

Important Safety Instructions

United States FCC Compliance

CE Compliance

About this Guide

In this Chapter

Chapter 1 Introducing the DDR2200 Series Residential Gateway

Chapter 2 Installing the Residential Gateway

Chapter 3 Configuration and Operation

Chapter 4 DSL Configuration

Chapter 5 Home Network Configuration

Chapter 6 Security Configuration

Chapter 7 Advanced Configuration

Chapter 8 Customer Information

Index

Quick Links

Related Manuals for Cisco DDR2200 Series

Summary of Contents for Cisco DDR2200 Series