Page 2
ARRIS and the ARRIS logo are all trademarks of ARRIS Enterprises, Inc. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and the names of their products. ARRIS disclaims proprietary interest in the marks and names of others.
Page 3
Safety and Regulatory Information Safety and Regulatory Information IMPORTANT SAFETY INSTRUCTIONS Read This Before You Begin — When using your equipment, basic safety precautions should always be followed to reduce the risk of fire, electric shock, and injury to persons, including the following: •...
Page 4
(2) This device must accept any interference received, including interference that may cause undesired operation. FCC CAUTION: Any changes or modifications not expressly approved by ARRIS for compliance could void the user’s authority to operate the equipment. FCC RADIATION EXPOSURE STATEMENT This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment.
Page 5
Safety and Regulatory Information High power radars are allocated as primary users (meaning they have priority) of 5250-5350 MHz and 5650-5850 MHz frequency bands. These radars could cause interference and/or damage to License Exempt–Local Area Network (LE-LAN) devices. IC RADIATION EXPOSURE STATEMENT IMPORTANT NOTE: This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment.
Page 6
CARING FOR THE ENVIRONMENT BY RECYCLING When you see this symbol on a ARRIS product, do not dispose of the product with residential or commercial waste. Recycling your ARRIS Equipment Please do not dispose of this product with your residential or commercial waste. Some countries or regions, such as the European Union, have set up systems to collect and recycle electrical and electronic waste items.
Contents Contents Safety and Regulatory Information ........................i Getting Started ..............................1 In The Box ..........................................1 Additional Items You May Need (Not Included)........................... 2 System Requirements ..................................... 2 Contact Information ......................................2 Product Overview ..............................3 Front Panel .......................................... 3 Wi-Fi Protected Setup™...
Page 8
Contents Set Up Firewall Protection ..................................33 Set Up Parental Controls ..................................... 34 Set Up Port Triggers ...................................... 36 Set Up Port Forwarding....................................37 Set Up the DMZ Host ....................................39 Store Remote Firewall Logs ..................................39 Creating Wi-Fi Networks ........................... 41 Set Up Your Wireless Primary Network ..............................
Page 9
Contents Tables Table 1: SBG6700-AC Package Contents ..............................1 Table 2: SBG6700-AC Front Panel LED Icons ............................3 Table 3: SBG6700-AC Rear Panel Ports & Connectors ........................5 Table 4: SBG6700-AC Web Manager Main Menu Options ......................23 Table 5: Troubleshooting Solutions ................................ 50 Table 6: Front Panel LED Icons and Error Conditions ........................
Getting Started Getting Started The ARRIS Motorola SURFboard® SBG6700-AC Wireless Cable Modem Gateway is an all in one wireless DOCSIS 3.0® cable modem and two-port Ethernet router device. It provides secure ultra high-speed wired and wireless broadband connections for your computer and other wireless network devices on your home or small business network.
Note: Microsoft no longer supports Windows XP. The SBG6700-AC should still function without any problems. ο Mac® 10.4 or higher ο UNIX® ο Linux® Contact Information For technical support and additional ARRIS product information: • Visit the ARRIS Support website: www.arrisi.com/consumer • Call ARRIS Technical Support: 1-877-466-8646 SURFboard®...
Product Overview Product Overview Front Panel Figure 1 – SBG6700-AC Front View Table 2: SBG6700-AC Front Panel LED Icons LED Icon Blinking On (Solid) Not applicable – no LED on Not applicable – no LED on button. button. Note: The Wireless LED will blink Amber to indicate the WPS Pairing process is in progress.
Product Overview LED Icon Blinking On (Solid) Scanning for an upstream (send) Green: Non-bonded upstream channel is channel connection. connected. Blue*: High-speed Internet connection with bonded upstream channels. Scanning for an Internet Green: Startup process completed. connection. Green: Wi-Fi enabled with Green: Any of the following applies: encrypted wireless data activity.
Product Overview Rear Panel Figure 2 – SBG6700-AC Rear View Table 3: SBG6700-AC Rear Panel Ports & Connectors Port Name Description Two one-gigabit Ethernet ports for RJ-45 cable connections: • Green - LED is ON - Indicates a device connection is detected •...
The gateway label is located on the bottom of the SBG6700-AC. It contains specific gateway ID information that you may need when contacting your service provider or ARRIS Technical Support. To receive Internet service, you will have to contact your service provider for assistance. You may need to provide the following information listed on the gateway label: ο...
Installing the Gateway Installing the Gateway This product is for indoor use only. Do not route the Ethernet cable(s) outside of the building. Exposure of the cables to lightning could create a safety hazard and damage the product. Connect the SBG6700-AC to Your Computer Before installing the SBG6700-AC: •...
ο If all four LEDs did not light up solid and you also do not have an Internet connection, you may have to contact your service provider to reactivate the SBG6700-AC or check for signal issues. ο If you still cannot connect to the Internet, your SBG6700-AC may be defective. Please call ARRIS Technical Support at 1-877-466-8646 for assistance.
(see Figure 5). Note: If the default user name and password are not working, your service provider may have to set up alternate login credentials. Please contact your service provider or ARRIS Technical Support for assistance. 5. Click Launch Quick Start Wizard to start the wizard. The Welcome screen displays (see Figure 6).
Setting Up a Wireless Network Connection Figure 5 – SBG6700-AC Quick Start Wizard Opening Screen Note: The ARRIS logo shown here and on other screenshots throughout this user guide represents the company logo for the manufacturer of the SURFboard SBG6700-AC Wireless Cable Modem Gateway.
Setting Up a Wireless Network Connection 6. Click Next to open the Wi-Fi Network Name & Passphrase screen. Figure 7 – SBG6700-AC Quick Start Wizard-Step 2 of 6 Screen 7. Do one of the following to set up your wireless network name in the Network Name (SSID) field: ο...
Setting Up a Wireless Network Connection Figure 8 – SBG6700-AC Quick Start Wizard-Step 3 of 6 Screen 10. Click Next to open the Security Configuration screen. Figure 9 – SBG6700-AC Quick Start Wizard-Step 4 of 6 Screen The wizard configures WPA2-PSK as the default wireless security code. See Set Up Your Wireless Primary Network to change the wireless security code for your wireless home network.
Setting Up a Wireless Network Connection Figure 10 – SBG6700-AC Quick Start Wizard-Step 5 of 6 Screen 12. Click Apply to accept the wireless network settings and open the Saving Settings screen or click Previous to go back and change your wireless network name and/or password. Figure 11 –...
Setting Up a Wireless Network Connection Figure 12 – SBG6700-AC Quick Start Wizard-Step 6 of 6 Screen 13. Click Exit on the Settings Applied screen. Note: You can click Print for a printout of your wireless network settings for later use for logging onto your wireless network or changing your wireless network settings.
Setting Up a Wireless Network Connection Figure 14 – Sample Available Wireless Networks Screen 2. Locate and left-click on the SBG6700-AC wireless network name or SSID (for example, SBG6700AC- #####) for your SBG6700-AC from the list of available wireless networks. The default SSID is located on the gateway label on the bottom of your SBG6700-AC.
Setting Up a Wireless Network Connection Connect Using the Windows Control Panel 1. From the Windows taskbar, click Start button and then click Control Panel. 2. Click Network and Sharing Center to open the Network and Sharing Center window. Figure 17 – Control Panel-Network and Sharing Center Window 3.
Setting Up a Wireless Network Connection Figure 18 – Manually Connect to a Wireless Network Window 5. Click Manually create a network profile to open another Manually Connect to a Wireless Network window. Figure 19 – Manually Connect to a Wireless Network Window SURFboard®...
Setting Up a Wireless Network Connection 6. Enter your configured wireless network name or SSID (SBG6700AC-#####) for your SBG6700-AC in the Network name field. The SSID name is located on the gateway label on the bottom of your SBG6700-AC. Note: You have the option to customize your wireless network name or SSID after completing your initial wireless network connection.
2. Open a web browser on your computer. 3. Type a valid URL (www.arrisi.com) in the address bar, and then click or press Enter. If the website did not open, please contact your service provider or call ARRIS Technical Support at 1-877-466-8646 for assistance.
Figure 20). Note: If the default user name and password are not working, your service provider may have to set up alternate login credentials. Please contact your service provider or ARRIS Technical Support for assistance. SURFboard® SBG6700-AC Wireless Cable Modem Gateway • User Guide...
Managing Your Gateway and Connected Networks Figure 20 – SBG6700-AC Main Screen Gateway Web Manager Menu Options Main Menu Buttons The SBG6700-AC main menu buttons are displayed along the top of the SBG6700-AC Web Manager screen. To display the drop-down submenu options, click the menu button. Figure 21 –...
Managing Your Gateway and Connected Networks Main Menu Links The SBG6700-AC main menu and related submenu option links are also displayed along the bottom of the SBG6700-AC Web Manager screen. To open a submenu option, click the link. Figure 22 – SBG6700-AC Web Manager Main Menu Links Table 4: SBG6700-AC Web Manager Main Menu Options Menu Option Function...
Managing Your Gateway and Connected Networks Get Help You can choose any of the following three options to obtain help information for any SBG6700-AC Web Manager function. General help information is available for any SBG6700-AC menu option when you click the Help button on that page. •...
Managing Your Gateway and Connected Networks Help Links Provides a concise list of your gateway configuration settings with applicable links for easy access when you click Help, About on the SBG6700-AC Main Menu. The link opens the related configuration screen. Figure 24 –...
Managing Your Gateway and Connected Networks View the Gateway Product Information The Status Product Information screen displays general product information, including the software (or firmware) version and the current network connection status of the gateway. To open the Status Product Information page: 1.
Managing Your Gateway and Connected Networks Figure 26 – SBG6700-AC Status Connection Screen Back Up Your Gateway Configuration You can save a backup copy of the current gateway configuration settings to your local computer. You can use the backup file to restore your custom gateway settings in the event that you made changes that you no longer want.
Managing Your Gateway and Connected Networks To create a back up copy of your gateway settings: 1. Click Basic on the SBG6700-AC Main Menu. 2. Click Backup and Restore from the Basic submenu options. Figure 27 – SBG6700-AC Backup and Restore Screen 3.
Managing Your Gateway and Connected Networks WARNING! This process also deletes any custom gateway configurations you may have already created. We recommend that you create a backup copy of your gateway configuration before resetting the gateway. See Back Up Your Gateway Configuration for more information.
Managing Your Gateway and Connected Networks Exit the SBG6700-AC Web Manager To log out and close the SBG6700-AC Web Manager: • Click Logout located in the upper right corner of the screen above the SBG6700-AC Main Menu. SURFboard® SBG6700-AC Wireless Cable Modem Gateway • User Guide 365-095-25781 x.1...
Protecting & Monitoring Your Wireless Network Protecting & Monitoring Your Wireless Network After you have successfully connected the SBG6700-AC gateway and your wireless devices, you should configure the gateway to protect your wireless network from unwanted and unauthorized access by any wireless devices within range of your wireless network.
Protecting & Monitoring Your Wireless Network 5. Click the Status menu button and then click Security to display the Status Security screen. 6. Confirm that Change Username is displayed in the drop-down selection box. 7. Complete each field entry, but note the following: ο...
Protecting & Monitoring Your Wireless Network 10. Complete each field entry, but note the following: ο All fields are case-sensitive. ο Username is your new user name, if you changed it. ο Make sure No is selected for Restore Factory Defaults. ο...
Protecting & Monitoring Your Wireless Network Note: Selecting Off will disable firewall protection on your home network. Your computer(s) and other Ethernet-enabled devices on your network will be at risk for possible attacks from viruses and hackers. 3. Select each Web filter that you want to set for the firewall and then click Apply. Set Up Parental Controls You can set up the following Parental Controls on your home network: •...
Protecting & Monitoring Your Wireless Network Figure 33 – Firewall Parental Control Screen 5. Enter a name for the user profile that you want to create in the Description field. 6. Enter the 12-digit (hexadecimal) MAC address of the device for which you are creating Parental Controls in the MAC Address field.
Protecting & Monitoring Your Wireless Network Set Up Port Triggers You can use Port Triggers to configure dynamic triggers to specific devices on the LAN. This allows special applications that require specific port numbers with bi-directional traffic to function properly. Applications such as video conferencing, voice, gaming, and some messaging program features may require these special settings.
Protecting & Monitoring Your Wireless Network 11. Click Apply to create your port triggers. 12. Repeat steps 3 thru 11 for each additional port trigger that you want to create. Set Up Port Forwarding You can use Port Forwarding to set up a computer or other network device on your home network (LAN) to be accessible to computers or other remote network devices on the Internet.
Protecting & Monitoring Your Wireless Network ο Enter a specific remote IP address of your choice in the External IP Address field and then enter the specific port numbers in the Start and End Port fields (select a specific port from the Commonly Forwarded Ports drop-down list or see Figure 37 for the list).
Protecting & Monitoring Your Wireless Network Set Up the DMZ Host WARNING! The gaming DMZ host is not protected by the SBG6700-AC gateway firewall. It is exposed to the Internet and thus vulnerable to attacks or hacking from any computer on the Internet.
Protecting & Monitoring Your Wireless Network Figure 39 – Firewall Remote Log Screen 2. Select all desired event types that you want to monitor. This will activate the SysLog monitoring feature. 3. Enter the last digits from 10 to 254 of the SysLog server’s IP address. Note: Normally, the IP address of this SysLog server is hard-coded so that the address always agrees with the entry on this page.
Creating Wi-Fi Networks Creating Wi-Fi Networks The SBG6700-AC supports a secure method for setting up multiple access points on your wireless home network. This enables you to designate a guest network for visitors, friends, or other family members without giving them access to your files or other devices on your primary network. You have the option to create a PIN or pushbutton method for logging onto your wireless network.
Creating Wi-Fi Networks Figure 40 – 2.4 GHz & 5 GHz Wireless Primary Network Screens 4. Click the 2.4 GHz or 5 GHz tab to select the frequency range for your wireless network. 5. Select Enabled or Disabled in the Wireless Network field to turn ON or OFF wireless networking on your wireless network.
Creating Wi-Fi Networks 9. Choose the wireless network encryption type in the Encryption field: ο AES – Advanced Encryption Standard: Provides the strongest encryption (recommended) ο AES+TKIP – Advanced Encryption Standard and Temporal Key Integrity Protocol Allows both AES and TKIP-capable clients to connect to your wireless network 10.
Creating Wi-Fi Networks Set Up a Wireless Guest Network Note: This feature may be disabled on your SBG6700-AC. Some service providers or cable operators do not allow for secondary (or guest) wireless networks on their gateway devices. 1. Open a web browser and log onto the SBG6700-AC to open the SBG6700-AC Web Manager. See Start the Gateway Web Manager for more information.
Creating Wi-Fi Networks Figure 42 – 2.4 GHz & 5 GHz Wireless Guest Network Screens 4. Click the 2.4 GHz or 5 GHz tab to select the frequency range for your wireless network. 5. Select the guest network from the Selected Guest Network drop-down list. 6.
Creating Wi-Fi Networks 15. Select Enabled or Disabled in the DHCPv6 Server field to allow the DHCP server to send leases to the guest network clients from the guest network lease pool you specified earlier. Note: If the DHCP server is disabled, you must assign static IP addresses to the guest network STAs. 16.
Creating Wi-Fi Networks 3. Click Primary Network Settings from the Wireless submenu options to open the Wi-Fi Network screen. Figure 43 – Change Your 2.4 GHz & 5 GHz Network Name (SSID) and Password Screens 4. Click the 2.4 GHz or 5 GHz tab to select the frequency range for your wireless network. 5.
Creating Wi-Fi Networks Change the Wireless Channel Network interference may occur at any time when using a wireless network connection. This may be caused by other wireless access points that are using the same wireless channel as your SBG6700-AC and are also operating within close proximity in your home. When experiencing wireless network interference, changing the wireless channel on the SBG6700-AC can improve network connectivity (or signal strength) and avoid network interference.
Page 60
Creating Wi-Fi Networks Note: For 2.4 GHz Wi-Fi networks, it is recommended to use Channel 6 or 11, if it is not listed as the Current Channel. In the Wi-Fi spectrum, there are multiple channels that overlap and thus degrade wireless network performance.
• If none of the above solutions resolves the problem, contact your service provider or call ARRIS Technical Support at 1-877-466-8646 for assistance. • Check that all cable and power connections on your gateway Cannot Access the and computer are properly connected.
Troubleshooting Tips Gateway Problem Possible Solution • If the problem still persists after checking the coaxial cable and Wireless devices cannot Ethernet connections and your IP address, check the Wireless send or receive data Security Mode setting on the Wireless Primary Network screen. •...
Gateway Configuration Screen Definitions Gateway Configuration Screen Definitions This section provides detailed field definitions for the following ARRIS SBG6700-AC network configuration screens: • Basic • Advanced • Firewall Basic Screens Setup You can use the SBG6700-AC Basic Setup screen to configure basic SBG6700-AC IP-related configuration data, including your local network configuration, and WAN connection type.
Gateway Configuration Screen Definitions Table 7: Basic Setup Screen-Field Descriptions Field Description Sets the device mode: Gateway Mode Routed: Allows the internal network devices to use IP addresses from the WAN subnet. Bridged: Disables the network address and port translation settings on the gateway.
Gateway Configuration Screen Definitions Figure 46 – Basic DHCP Screen Table 8: Basic DHCP Screen-Field Descriptions Field Description LAN Network Configuration LAN IP Address The IP address of the SBG6700-AC on your home network (LAN). Enable DHCP Server Checkmark Enabled to enable the SBG6700-AC DHCP Server. Uncheck Enabled to disable the SBG6700-AC DHCP Server.
Gateway Configuration Screen Definitions DDNS You can use the Basic DDNS (Dynamic Domain Name System) screen to set up the DDNS service to assign a static Internet domain name to a dynamic IP address. This allows various servers on the Internet to access your computer for processing your requests when you are visiting various Internet sites.
Gateway Configuration Screen Definitions Backup and Restore You can use the Basic Backup and Restore screen to save a backup copy of the current SBG6700-AC gateway configuration settings locally on your computer or restore previously saved gateway configurations. Figure 48 – Basic Backup & Restore Screen Table 10: Basic Backup &...
Gateway Configuration Screen Definitions Advanced Screens Options You can use the Advanced Options to set the operating modes for adjusting how the SBG6700-AC routes IP traffic on your home network. Figure 49 – Advanced Options Screen SURFboard® SBG6700-AC Wireless Cable Modem Gateway • User Guide 365-095-25781 x.1...
Gateway Configuration Screen Definitions Table 11: Advanced Options-Field Descriptions Field Description WAN Blocking Prevents the SBG6700-AC Web Manager or the computers behind it from being visible to other computers on the SBG6700-AC WAN. IPsec Pass-through Enables the IPsec Pass-through protocol to be used through the SBG6700-AC Web Manager so that a VPN device (or software) may communicate properly with the WAN.
Gateway Configuration Screen Definitions IP Filtering IP filtering allows you to define which local computers will be denied access to the SBG6700-AC WAN. You can configure IP address filters to block Internet traffic to specific network devices on your home network by entering the starting and ending IP address ranges.
Gateway Configuration Screen Definitions MAC Filtering MAC filtering allows you to define up to twenty Media Access Control (MAC) address filters to prevent computers from sending outgoing TCP/UDP traffic to the WAN via their MAC addresses. This is useful because the MAC address of a specific NIC card never changes, unlike its IP address, which can be assigned via the DHCP server or hard-coded to various addresses over time.
Gateway Configuration Screen Definitions Port Filtering Port filtering allows you to define port filters to prevent all devices from sending outgoing TCP/UDP traffic to the WAN on specific IP port numbers. By specifying a starting and ending port range, you can determine what TCP/UDP traffic is allowed out to the WAN on a per-port basis.
Gateway Configuration Screen Definitions Port Triggers You can use Port Triggers to configure dynamic triggers to specific devices on the LAN. This allows special applications that require specific port numbers with bi-directional traffic to function properly. Applications such as video conferencing, voice, gaming, and some messaging program features may require these special settings.
Gateway Configuration Screen Definitions Port Forwarding Port forwarding allows you to run a publicly accessible server on your home network by specifying the mapping of TCP/UDP ports to a local computer. This enables incoming requests on specific port numbers to reach web servers, FTP servers, mail servers, etc. so that they can be accessible from the Internet.
Gateway Configuration Screen Definitions Figure 56 – Advanced Port Forwarding Screen Table 16: Advanced Port Forwarding-Field Descriptions Field Description Single port: Remote IP address and a specific port number (enter the External IP Address same port number in the Start and End Port fields). &...
Gateway Configuration Screen Definitions DMZ Host You can configure one computer on your home network as the DMZ Host. That computer will operate outside of the SBG6700-AC firewall. This feature allows you to set up a separate subnetwork for remote access from the Internet to your computer, gaming devices, or other IP-enabled device so that your home network is not exposed to hackers or other external attacks from the Internet.
Gateway Configuration Screen Definitions Firewall Screens You can configure firewall filters and alert notifications for your home network. The SBG6700-AC firewall protects the SBG6700-AC LAN from unwanted attacks and other intrusions on the Internet. Firewall protection also provides the following benefits: •...
Gateway Configuration Screen Definitions Figure 58 – Firewall Protection Level Screen Table 18: Firewall Protection Level -Field Descriptions Field Description Firewall Protection • Select Low, Medium, or High to set the level of firewall Level protection that you want for your gateway. •...
Gateway Configuration Screen Definitions Parental Control You can use the Parental Control screen to set up user access restrictions on a specific device connected to your SBG6700-AC network. You can set up the following Parental Controls: • Allow or block access to specific Internet sites. •...
Gateway Configuration Screen Definitions Figure 60 – Firewall Parental Control Screen Table 20: Firewall Parental Control -Field Descriptions Field Description Description Enter a name to create a new user profile. MAC Address Enter the 12-digit (hexadecimal) hardware address of the device that you are setting up for parental controls.
Gateway Configuration Screen Definitions Field Description End Port Enter the ending port number of the range of ports for which you want to block incoming or outgoing access. Default port is 0. Protocol Select TCP, UDP, or Both for the Internet protocol. Days Select the days of the week that the selected user can access the Internet.
Gateway Configuration Screen Definitions Field Description SMTP Username Your user name for your email account. Check with your email service provider. SMTP Password Your user password for your email account. Check with your email service provider. Email Alerts Enable or disable emailing firewall alerts. Remote Log You can send firewall attack reports out to a standard SysLog server, so that many instances can be logged over a long period of time.
Gateway Configuration Screen Definitions Table 22: Firewall Remote Log -Field Descriptions Field Description Permitted Connections Select if you want email notification of who is connecting to your network. Blocked Connections Select if you want email notification of who is blocked from connecting to your network.
Product for its installation and use. While every reasonable effort has been made to insure that you will receive a Product that you can use and enjoy, ARRIS does SURFboard® SBG6700-AC Wireless Cable Modem Gateway • User Guide...
Page 85
Product, whether made or suffered by you or another person and whether based in contract or tort. IN NO EVENT SHALL ARRIS BE LIABLE TO YOU OR ANY OTHER PARTY FOR ANY DIRECT, INDIRECT, GENERAL, SPECIAL, INCIDENTAL, CONSEQUENTIAL, EXEMPLARY OR OTHER DAMAGES ARISING OUT OF...
Page 86
ARRIS Enterprises, Inc. 3871 Lakefield Drive, Suwanee, GA 30024 www.arrisi.com 365-095-25781 x.1 07/14...