Quick Installation Guide SURFboard Wireless Cable Modem Gateway SBG900
Wireless Cable Modem Gateway SBG900
A home network enables you to access and move information between two or more computers in your home or business. You can connect your home network to your cable TV system to connect to the Internet. Your SBG900 is the central connection point between your computers and the Internet. It directs (routes) information between the computers connected to your home network. A built-in cable modem transmits information between your home network and the Internet. The SBG900 provides different network connection types. You can use a wireless or a wired connection (or a combination of the two) to connect your computers to the SBG900. Your network can use one or any combination of: Ethernet local area network (LAN) Wireless LAN (WLAN) Universal Serial Bus (USB)
This guide provides information about: Optional accessories and network requirements Cable, Ethernet, USB, and wireless connections Starting the Setup Program Introduction to network security and gaming configuration Troubleshooting and contact information
For in-depth information, refer to the interactive SBG900 User Guide on the SBG900 Installation CD-ROM. If desired, you can print the user guide.

Quick Installation Guide

Optional Accessories
All networks are composed of multiple devices. The SBG900 works with any IEEE 802.11g or IEEE 802.11b compliant client product. Motorola supplies a range of accessories for use with the SBG900. Some examples are:
Motorola Wireless Ethernet Bridge WE800G
Motorola Ethernet Broadband Router BR700
Motorola Wireless Notebook Adapter WN825G
Motorola Wireless PCI Adapter WPCI810G
For more information about Motorola cable modems, gateways, and related consumer broadband products, visit http://broadband.motorola.com/.
Basic SBG900 Network Requirements
An SBG900 A connection to your cable TV system A subscription to cable modem service from your cable TV provider One or more computers with minimum: Pentium-class processor or faster 16 Mb of memory 10 Mb of hard disk space available Windows 98, Windows 98 SE, Windows Me, Windows 2000, Windows XP, Macintosh, or Linux with operating system CD-ROM available A wired or wireless network adapter for each computer on the network For wired connections, Ethernet cables (one is provided with the SBG900)
We recommend plugging the SBG900 AC power adapter into a surge protector.

Connecting the SBG900

To connect to Ethernet or USB on a PC running a supported Windows version, we recommend using the Installation Assistant on the SBG900 Installation CD-ROM. Insert the SBG900 CD-ROM in the CD-ROM drive, agree to the License Agreement, and the following window is displayed:
To start the Installation Assistant, click Installation Assistant. The procedures it guides you through are described in the following sections in this guide:
Ethernet USB A, B, and E A, C, and E
The Installation Assistant does not apply to the following: For wireless connections, follow the steps under A, D, and E. For Macintosh or Linux computers, follow the instructions in the SBG900 User Guide and the operating system documentation.
A. Connect the SBG900 to Your Cable TV System
You may need to call your cable provider to activate your high-speed Internet service. Your cable provider may require the MAC address labeled CM HFC MAC ID on the bottom of the SBG900. Please write your CM HFC MAC ID here: 00 : ______ : ______ : ______ : ______ : ______ Connecting Directly to the Cable Outlet Connect one end of the coaxial cable to the cable TV wall outlet and its other end to the CABLE port on the SBG900. Plug the power cord into the +12VDC port on the SBG900. Connect the AC power adapter to the SBG900. Plug the AC adapter into an AC wall outlet or surge protector.
To AC power adapter in wall 5 outlet 3 surge protector or
Connecting to the Cable Outlet Using a Splitter Connecting an SBG900 to the same cable outlet as a TV requires a 5 to 900 MHz splitter and two additional coaxial cables. Check that one end of the coaxial cable is connected to the cable TV outlet. Disconnect that cable from the back of your TV and connect it to the splitter input. Use one coaxial cable to connect the splitter output to your TV. Use the other coaxial cable to connect the splitter output to the on your SBG900.

CABLE port

COAXIAL SPLITTER

OUTPUT

B. Ethernet Connections
Computers using the Ethernet connection require an Ethernet adapter installed and a wired connection to the SBG900. 1 If you purchased your Ethernet adapter separately, install the Ethernet hardware and driver software according to the manufacturer's instructions. If your computer already has an Ethernet adapter installed, skip to step 2. 2 Insert the SBG900 Installation CD-ROM into the CD-ROM drive. Run the Installation Assistant. Choose Ethernet as your connection. Connect the SBG900 to the cable TV system as described in Section A. Plug one end of the Ethernet cable into the Ethernet port on the computer. Plug the other end into the ETHERNET port on the SBG900 or an Ethernet hub or switch connected to the SBG900, as shown in the illustrated sample Ethernet LAN. The Installation Assistant tests the connection between the computer and the SBG900. This may take up to three minutes. 7 Restart your computer to obtain an IP address. Follow the instructions in the SBG900 User Guide.

Sample Ethernet LAN

You can connect up to 255 computers to Ethernet hubs or switches connected to the SBG900. Detailed information about network cabling is beyond the scope of this document or the SBG900 User Guide.

C. USB Connection

You can connect a single PC running Windows 98, Windows Me, Windows 2000, or Windows XP to the SBG900 USB port. The USB connection requires special driver software supplied on the SBG900 Installation CD-ROM. 1 Insert the SBG900 Installation CD-ROM into the CD-ROM drive. 2 Run the Installation Assistant. Choose USB as your connection. Be sure the SBG900 is not connected to your PC. 3 Connect the SBG900 to the cable TV system as described in Section A. 4 Install the USB driver software. 5 Restart your PC. 6 Connect the USB cable to the USB port on the SBG900. 7 Connect its other end to the USB port on the PC.
If you experience problems with the USB connection, click Uninstall USB Driver on the Installation Assistant Getting Started page to uninstall the USB driver. If necessary, you can install the USB driver following the instructions in the SBG900 User Guide.
D. Wireless Network Setup
Computers using the wireless connection require a compatible wireless adapter installed. The adapter type depends on whether the computer has a USB port, PCI slot, or credit-card-sized PCMCIA slot. To provide an initial wireless connection to your network and the Internet: 1 Connect the SBG900 to the cable TV system as described in Section A. On each wireless client computer, install the wireless adapter hardware and driver software according to the manufacturer's instructions. 3 On each wireless client computer, set up a wireless adapter profile to connect the client to the SBG900. The procedure depends on your wireless adapter and computer operating system. In your initial profile, use the SBG900 default wireless Network Name (ESSID) motorola (case-sensitive). Your computers are connected but not secure. The default SBG900 settings provide no wireless security. After your wireless LAN is operational, be sure to enable security as described in Setting Up the Wireless LAN in the SBG900 User Guide. 2

E. Start the SBG900 Setup Program
On a computer wired to the SBG900 USB or Ethernet port, open your web browser (for example, Microsoft Internet Explorer or Netscape Navigator). Type http//:192.168.100.1 and press ENTER to display the login window:
In the User ID field, type admin (case sensitive) and press TAB. In the Password field, type motorola (case sensitive) and click Log In to display the SBG900 Setup Program main window:

Network Security

The SBG900 firewall and wireless security measures are disabled by default. For normal operation, you do not need to change most default settings, except for the password, firewall, and wireless security.
The default SBG900 settings provide no security for data or protection from Internet attacks. We recommend protecting your network as described on this page.
As soon as your network is operational, run the SBG900 Setup Program to:
Task Change the default password to prevent unauthorized configuration. Enable the firewall to protect your LAN from Internet attacks. Choose the most secure policy possible for your applications. If you are only using wired Ethernet or USB connections (there are no wireless clients), disable the wireless interface to prevent unauthorized use. For a LAN with one or more wireless clients, enable wireless security on the SBG900. In User Guide, see Changing the Default Password Setting the Firewall Policy Wireless Network Setup Wireless Network Setup
After enabling wireless security on the SBG900, as required on each wireless client: If you disabled ESSID broadcasting on the SBG900, set the client Network Name (ESSID) identical to the ESSID on the SBG900. If you enabled WEP on the SBG900, set the client WEP key identical to the WEP key on the SBG900. If you enabled Allow Only Listed Stations Access, be sure the MAC address for each client is correctly listed on the SBG900.

Configuration for Gaming

Firewall: By default, the SBG900 Firewall is disabled. If you enable the SBG900 firewall, see the game manufacturer's documentation to ensure the necessary ports are open for use by that game. If low security policy is enabled, the SBG900 can pass Xbox Live by default and no user action is required. If medium or high security policies are enabled, the firewall must be configured for X-Box Live traffic. XBox Live requires UDP 88:88 and UDP/TCP 3074:3074. Port Triggering: The SBG900 has pre-defined port triggers supporting: DirectX 7 and DirectX 8 MSN Games by Zone.com Ba ttle.net If your game uses one of these applications, no user action is required. For a list of games supported by Battle Net, visit http://www.battle.net. You can also configure custom port triggers that other games may require to operate properly. If you set custom port triggers and enable the firewall, you must configure the firewall to allow traffic through those ports. Gaming DMZ: Some games and game devices require the use of random ports or the forwarding of unsolicited traffic. We recommend configuring such a device as a Gaming DMZ device. First reserve a private IP address for that device's network interface MAC address and then designate it as a DMZ device. You can reserve IP addresses for multiple devices, but only one device at a time can be the Gaming DMZ. To connect a PlayStation 2 for PS2 on-line gaming, assign it as the Gaming DMZ because the ports required vary from game to game.

Troubleshooting

If you experience a problem with the SBG900, try the following: 1 Press the reset button on the rear panel. Resetting may take 5 to 30 minutes. 2 Refer to Troubleshooting in the SBG900 User Guide. 3 If you still cannot resolve the issue, contact your cable provider or Motorola as described in Contact Us.

Contact Us

In the United States and Canada, if you need assistance while working with the SBG900 and related equipment supplied by Motorola:
If you rent or lease your SBG900 If you own your SBG900 Contact your cable provider. Call 1-877-466-8646 for technical and warranty support available 24 hours a day, 7 days a week.
MOTOROLA and the Stylized M Logo are registered in the US Patent & Trademark Office. Microsoft, Windows, Windows Me, Windows XP, Xbox, Xbox Live and DirectX are either registered t ademarks or trademarks of Microsoft Corporation in the United States and/or r other countries. Microsoft Windows screen shots are used by permission of Microsoft Corporation. Battle.net is a registered trademark of Blizzard Entertainment. PlayStation and the PS family logo are registered trademarks of Sony Computer Entertainment, Inc. Linux is a registered trademark of Linus Torvalds. Macintosh is a registered trademark of Apple Computers, Inc. All other product or service names are the property of their respective owners. Motorola, Inc. 2003 506705-001 08/03 All rights reserved. No part of the contents of this manual may be reproduced or transmitted in any form or by any means without the written permission of the publisher.

THIS PRODUCT IS IN COMPLIANCE WITH ONE OR MORE OF THE STANDARDS LISTED ON THE REGULATORY, SAFETY, SOFTWARE LICENSE, AND WARRANTY INFORMATION CARD. NOT ALL STANDARDS APPLY TO ALL MODELS. NO WARRANTIES OF ANY KIND ARE PROVIDED BY MOTOROLA WITH RESPECT TO THIS PRODUCT, EXCEPT AS STATED ON THE REGULATORY, SAFETY, SOFTWARE LICENSE, AND WARRANTY INFORMATION CARD. MOTOROLAS WARRANTIES DO NOT APPLY TO PRODUCT THAT HAS BEEN REFURBISHED OR REISSUED BY YOUR SERVICE PROVIDER.
Copyright 2005 by Motorola, Inc. All rights reserved. No part of this publication may be reproduced in any form or by any means or used to make any derivative work (such as translation, transformation or adaptation) without written permission from Motorola, Inc. Motorola reserves the right to revise this publication and to make changes in content from time to time without obligation on the part of Motorola to provide notification of such revision or change. Motorola provides this guide without warranty of any kind, either implied or expressed, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. Motorola may make improvements or changes in the product(s) described in this manual at any time. MOTOROLA and the Stylized M Logo are registered in the US Patent & Trademark Office. Microsoft, Windows, and Windows Me are registered trademarks and Windows XP is a trademark of Microsoft Corporation. Microsoft Windows screen shots are used by permission of Microsoft Corporation. Macintosh is a registered trademark of Apple Computer, Inc. Navigator is a registered trademark of Netscape Communications Corporation. UNIX is a registered trademark of the Open Group in the United States and other countries. All other product or service names are the property of their respective owners. Motorola, Inc. 2005.

Contents

Overview.1
Easy Setup.2 Network Connection Types.2 Powerful Features in a Single Unit.3 Sample Hybrid LAN.4 Optional Accessories.5 Front Panel.6 Rear Panel.7 Label on the Rear of the SBG900.8 SBG900 LAN Choices.8
Wireless LAN. 9 Wired Ethernet LAN. 10 USB Connection. 11

Security.12

Firewall. DMZ. Port Triggering. Wireless Security. 13 13
Port Forwarding.14 Virtual Private Networks.14 Related Documentation.14

Installation.15

Before You Begin.15 Precautions.16 Signing Up for Service.16 Computer System Requirements.17 Connecting the SBG900 to the Cable System.17 Cabling the LAN.18 Obtaining an IP Address for Ethernet.19
Obtaining an IP Address in Windows 98, Windows 98 Second Edition, or Windows Me. 19 Obtaining an IP Address in Windows 2000 or Windows XP. 19 Obtaining an IP Address on a Macintosh or UNIX System. 19

Connecting a PC to the USB Port.20

Basic Configuration.21

Starting the SBG900 Setup Program.22 Changing the Default Password.24 Enabling Remote Access.25 Getting Help.26
Setting the Firewall Policy.27
Firewall > POLICY advanced Page. Firewall > ALERT basic Page. Firewall > ALERT email Page. Firewall > LOGS Page. 32 33
Gaming Configuration Guidelines.34
Configuring the Firewall for Gaming. 34 Configuring Port Triggers. 34 Configuring a Gaming DMZ Host. 35
Configuring the Gateway.36
Gateway > STATUS Page.37 Gateway > WAN Page.38 Gateway > LAN nat config Page.40 Gateway > LAN dhcp server config Page.41 Gateway > LAN dhcp leases Page.42 Gateway > PORT FORWARDING status Page.43 Gateway > PORT FORWARDING config Page.44 Gateway > PORT TRIGGERS predefined Page.46 Gateway > PORT TRIGGERS custom Page.48 Gateway > LOG Page.49

Configuring TCP/IP.50

Configuring TCP/IP in Windows 95, Windows 98, or Windows Me.50 Configuring TCP/IP in Windows 2000.53 Configuring TCP/IP in Windows XP.57 Verifying the IP Address in Windows 95, Windows 98, or Windows Me.61 Verifying the IP Address in Windows 2000 or Windows XP.62
Setting Up Your Wireless LAN.64
Encrypting Wireless LAN Transmissions.65
Configuring WPA on the SBG900. 66 Configuring WEP on the SBG900. 68
Restricting Wireless LAN Access.70
Configuring the Wireless Network Name on the SBG900. 71 Configuring a MAC Access Control List on the SBG900. 73
Configuring the Wireless Clients.74
Configuring a Wireless Client for WPA. 75 Configuring a Wireless Client for WEP. 75 Configuring a Wireless Client with the Network Name (ESSID). 75
Wireless Pages in the SBG900 Setup Program.76
Wireless > STATUS Page. Wireless > NETWORK Page. Wireless > SECURITY basic Page. Wireless > SECURITY advanced Page. Wireless > STATISTICS page. 82
Setting Up a USB Driver.84
Setting Up a USB Driver in Windows 98 Second Edition.84 Setting Up a USB Driver in Windows 2000.88 Setting Up a USB Driver in Windows Me.91 Setting Up a USB Driver in Windows XP.92 Removing the USB Driver from Windows 98 Second Edition or Windows Me.94 Removing the USB Driver from Windows 2000.95 Removing the USB Driver from Windows XP.98 Running the Motorola USB Driver Removal Utility.102

Troubleshooting.105

Front-Panel Lights and Error Conditions.106
Contact Us.107 Frequently Asked Questions.108 Specifications.110 Glossary.113 Software License.131
Thank you for purchasing a Motorola SURFboard Wireless Cable Modem Gateway SBG900 for your home, home office, or small business/enterprise. Applications where the SURFboard Gateway (SBG) is especially useful include:

To protect LAN data from unauthorized intrusions, you can restrict WLAN access to computers having one or both of: Known MAC addresses (see Configuring a MAC Access Control List on the SBG900) The same unique network name (ESSID) as the SBG900 (see Configuring the Wireless Network Name on the SBG900 and Configuring a Wireless Client with the Network Name (ESSID))
Restricting access to computers having the same network name is also called disabling ESSID broadcasting or enabling closed network operation.

Port Forwarding

The SBG900 opens logical data ports when a computer on its LAN sends data, such as e-mail messages or Web data, to the Internet. A logical data port is different from a physical port, such as an Ethernet port. Data from a protocol must go through certain data ports. Some applications, such as games and videoconferencing, require multiple data ports. If you enable NAT, this can cause problems because NAT assumes that data sent through one port will return to the same port. You may need to configure port forwarding to run applications with special requirements. To configure port forwarding, you specify an inbound (source) port or range of ports that remain open for inbound data. You can configure up to 32 port forwarding entries using the Gateway > PORT FORWARDING config Page.

Virtual Private Networks

The SBG900 supports multiple tunnel VPN pass-through operation to securely connect remote computers over the Internet. The SBG900:
Is compatible with Point to Point Tunneling Protocol (PPTP) and Layer 2 Tunneling Protocol (L2TP) Is fully interoperable with any IPSec client or gateway and ANX certified IPSec stacks

Related Documentation

The SBG900 Quick Installation Guide also provides information about using the SBG900. For information about and documentation for Motorola home-networking products, visit the Motorola Home Networking page http://broadband.motorola.com/consumers/home_networking.asp.

Installation

The following subsections provide information about installing the SBG900 hardware:
Before You Begin Precautions Signing Up for Service Computer System Requirements Connecting the SBG900 to the Cable System Cabling the LAN Obtaining an IP Address for Ethernet Connecting a PC to the USB Port
For information about WLAN setup, see Setting Up Your Wireless LAN.

Before You Begin

Before you begin the installation, check that you received the following items with your SBG900:
Power cord 10/100Base-T Ethernet cable USB cable SBG900 Installation CD-ROM SBG900 Quick Installation Guide
Connects the SBG900 to the external AC power supply Connects to the Ethernet port Connects to the USB port Contains this User Guide and USB drivers

RECEIVE

Cabling the LAN
After connecting to the cable system, you can connect your wired Ethernet LAN. Some samples are shown in Wired Ethernet LAN. On each networked computer, you must install the proper drivers for the Ethernet adapter. Detailed information about network cabling is beyond the scope of this document.
Obtaining an IP Address for Ethernet
Obtaining an IP Address in Windows 98, Windows 98 Second Edition, or Windows Me
You must do the following on each Ethernet client PC running Windows 98, Windows 98 SE, or Windows Me:
On the Windows Desktop, click Start. Select Run. The Run window is displayed. Type winipcfg.exe and click OK. The IP Configuration window is displayed:
Click the Renew button to obtain an IP address for the PC from the DHCP server on the SBG900.
Obtaining an IP Address in Windows 2000 or Windows XP
You must do the following on each Ethernet client PC running Windows 2000 or Windows XP:
On the Windows Desktop, click Start. Select Run. The Run window is displayed. Type cmd and click OK to display a command prompt window. Type ipconfig /renew and press ENTER to obtain an IP address for the PC from the DHCP server on the SBG900. Type exit and press ENTER to return to Windows.
Obtaining an IP Address on a Macintosh or UNIX System
Follow the instructions in your user manual.
Connecting a PC to the USB Port
You can connect a single PC running Windows 98 Second Edition, Windows XP, Windows Me, or Windows 2000 to the SBG900 USB port.
To connect a PC to the USB port:
Insert the SBG900 Installation CD-ROM in the CD-ROM drive. Install the USB driver following the appropriate procedure for Setting Up a USB Driver. Connect the USB cable to the USB port on the SBG900 Rear Panel. Connect the other end to the USB port on the computer.
To AC power adapter Step 4

Step 1

Basic Configuration
The following sections provide information about basic SBG900 configuration:
Starting the SBG900 Setup Program Changing the Default Password Getting Help Setting the Firewall Policy Gaming Configuration Guidelines
For more advanced configuration information, see Configuring TCP/IP, Setting Up Your Wireless LAN, or Setting Up a USB Driver. For normal operation, you do not need to change most default settings. The following caution statements summarize the issues you must be aware of:
To prevent unauthorized configuration, change the default password immediately when you first configure the SBG900. See Changing the Default Password. Firewalls are not foolproof. Choose the most secure firewall policy you can. See Setting the Firewall Policy. If you are using a wired LAN only and have no wireless clients, be sure you disable the wireless interface by turning off Enable Wireless Interface on the Wireless > NETWORK Page. For a wireless LAN only, be sure you follow the instructions in Setting Up Your Wireless LAN.

Getting Help

To get help on any underlined item or field, click the text. For example, if you click a field or the help button on the ADMIN basic page, the following help is displayed:
This button also displays help for the window.
You can scroll to browse the help or click another item to display help for that item.
Setting the Firewall Policy
The SBG900 firewall protects the SBG900 LAN from undesired attacks and other intrusions from the Internet. This section describes using the Firewall > POLICY basic page to choose one of the predefined firewall policy templates provided with the SBG900.
Firewalls are not foolproof. Choose the most secure firewall policy you can. To enable easy network setup, the default firewall policy is None, which provides no security.
To select a predefined policy for all packets processed by the SBG900 firewall:
On the SBG900 Setup Program left panel, click Firewall. Click POLICY. Click basic to display the predefined firewall policy templates:
Select the most secure firewall policy you can:
High The safest predefined firewall policy template, providing the highest security. We recommend this setting.
Medium A predefined firewall policy template providing a common configuration having modest risk. Low A predefined firewall policy template providing minimum security, with a higher risk of intrusions.
Custom You may need to create a custom firewall policy on the Firewall > POLICY advanced Page. Do not create a custom policy unless you have the necessary expertise and the need to do so. None Disables the firewall. To enable easy network setup, it is the default. After you set up your network, use High, Medium, or Low to improve your security.
Click Apply to apply your changes.
After you edit some fields and click Apply, you are warned that you must reboot your SBG900 for your change to take effect. Rebooting takes 10 to 15 seconds. After rebooting, you must log in again. If you have the need, you can:
View the rules for the High, Medium, or Low predefined policy templates or create a custom policy on the Firewall > POLICY advanced Page Configure a firewall alert on Firewall > ALERT basic Page and Firewall > ALERT email Page View the firewall logs on the Firewall > LOGS Page

Apply Policy Template

Firewall > ALERT basic Page
You can use this page to set the alert mechanism for firewall intrusion detection events.
Firewall > ALERT basic page fields Field or Button
Intrusion Detection Apply
Select Email to be alerted through SMTP e-mail. An SMTP server that does not require any authentication such as a user name or password must be present to receive the e-mail. Click to apply your changes.
Firewall > ALERT email Page
You can use this page to configure the e-mail alert parameters:
Firewall > ALERT email page fields Field or Button Description
E-mail Server IP Address Sets the e-mail server IP address in dotted-decimal format. E-mail Server Port E-mail Sender E-mail Recipient List Apply Sets the e-mail server port number. Sets the sender e-mail address. Sets the list of e-mail addresses that receive alerts from the SBG900 firewall. Click to apply your changes.

Firewall > LOGS Page

You can use this page to set which firewall events are logged.
Firewall > LOGS page fields Field or Button

Enable Session Log

Select this box to log every data session from the private LAN that was authorized by the SBG900 firewall. Usually, the session log displays a history of normal data traffic. It also lists the start of sessions the firewall terminated because: The policy was changed They were eventually determined to be an intrusion or attack To display the session log, click session. Select this box to log inbound and outbound packets that the SBG900 firewall: Does not allow to pass because they use protocols and/or ports not explicitly allowed by the active policy Determines to be invalid because of a session or reassembly timeout To display the blocking log, click blocking. Select this box to log attacks using common network intrusion tactics that the SBG900 firewall detects and stops. To display the intrusion log, click intrusion. Click to apply your changes.

Enable Blocking Log

Enable Intrusion Log
If you enable the firewall, the blacklist log is always generated. Any IP address the firewall determines to have breached the active policy is added to the blacklist log. To view the blacklist log, click blacklist. The firewall blocks all traffic to and from a blacklisted IP address for 24 hours or until you reboot the SBG900 or manually clear the blacklist by clicking Clear on the Firewall > LOGS blacklist page.

Gateway > LAN dhcp server config page fields Field
LAN IP Address LAN IP Subnet Mask Starting IP Address # of DHCP Users
You can type the IP address of the SBG900 for your private LAN. The default is 192.168.0.1. Displays the subnet mask in dotted-decimal format. The default is 255.255.255.0. Enter the starting IP address to be assigned by the SBG900 DHCP server to clients in dotted-decimal format. The default is 192.168.0.2. Sets the number of clients for the SBG900 DHCP server to assign a private IP address. There are 253 possible client addresses. The default is 253.
DHCP Server Lease Time Sets the time in seconds that the SBG900 DHCP server leases an IP address to a client. The default is 3600 seconds (60 minutes). Domain Name Time To Live Interface Maximum Transmission Unit Apply Sets the domain name for the SBG900 LAN. The default is None. Sets the TTL (hop limit) for outbound packets. The default is 64. Sets the SBG900 LAN MTU in bytes. The minimum is 68 bytes. The default is 1500 bytes. Click to apply your changes. You must reboot the SBG900.
Gateway > LAN dhcp leases Page
Use this page to configure DHCP leases:
Gateway > LAN dhcp leases page fields Field
GAMING DMZ Enable Gaming DMZ Select this box to designate the selected computer or gaming device as the gaming DMZ host. For more information, see Configuring a Gaming DMZ Host. This can be useful if you have difficulties running certain applications, typically gaming applications. The gaming DMZ host is a computer with a reserved IP address designated as the default DMZ host. Only one gaming DMZ host can be active at once. The gaming DMZ host is not protected by the firewall. It is open to communication or hacking from any computer on the Internet. Consider carefully before configuring a computer to be in the DMZ. The benefit of using a gaming DMZ host instead of a NAT passthrough host is that a gaming DMZ host does not require a public IP address as does a NAT passthrough host. If the application requires a public IP address, configure the computer for NAT passthrough on the Gateway > LAN nat config Page.

(Gaming) DMZ Host

Gateway > LAN dhcp leases page fields (continued) Field
RESERVE NEW IP ADDRESS MAC Address IP Address
You can reserve up to 32 IP addresses assigned by the SBG900 DHCP server for specific LAN clients. For example, to ensure that they always receive the same private IP address, you can reserve IP addresses for a private FTP server or gaming DMZ device. Type the MAC address of the DHCP client for which a reserved IP address is required. The format is 16 hexadecimal numerals. Sets the host portion of the reserved IP address for the LAN client having the specified MAC address. When the LAN client requests an IP address, the SBG900 DHCP server assigns the client this IP address. If your ISP requires a hostname to access their network, enter the hostname provided to you in the Host Name field. Click Add to reserve a new IP address.

Host Name Add

CURRENTLY RESERVED Displays all DHCP clients having reserved IP addresses. IP ADDRESSES MAC Address IP Address Host Name Method Delete Delete Displays the client MAC address. Displays its reserved IP address Displays its host name. Displays dynamic and static lease status. Add or delete dynamic or static lease status in this field. Select this box to designate the reserved IP address for deletion. Click this button to remove the reserved IP addresses for clients designated by the Delete box.
Gateway > PORT FORWARDING status Page
Use this page to display the configured port forwarding entries on the SBG900 LAN. The fields are the same as on the Gateway > PORT FORWARDING config Page:
Gateway > PORT FORWARDING config Page
Use this page to configure up to 32 virtual servers:
Gateway > PORT FORWARDING config page fields Field
ADD NEW PORT FORWARDING ENTRY Template
You can configure up to 32 virtual servers. If you select Custom, you must set the Name, Port Start, Port End, and LAN IP Address. If you select Custom, you must set the Name, Port Start, Port End, and LAN IP Address. If you select a predefined template such as HTTP or FTP, the Name, Port Start, Port End values are provided. You only need to enter LAN IP Address and change default values only if necessary. Type a unique identifier for the custom virtual server. The typical practice is to use the protocol as a unique identifier (for example ftp). Sets the LAN internal interface port or the start of a port range. Inbound Internet connection requests are statically mapped to this port. The ports used by some common applications are: FTP HTTP NTP Secure Shell SMTP e-mail Telnet 20, 25 23

Name Port Start

Gateway > PORT FORWARDING config page fields (continued) Field
Port End LAN IP Address Enable Add PORT FORWARDING
If a range of ports is required, sets the end of the port range. Sets the private LAN IP address for the port forwarding page. An Internet user must know the public IP address to access any port forwarding entry you define on the private LAN. Select this box to enable the port forwarding entries to be accessed through NAT. Click to add the virtual server to the PORT FORWARDING list. Displays the configured custom virtual servers.

Encryption

Key 1 to Key 4
Click Save Changes to save your changes.
Restricting Wireless LAN Access
The default SBG900 wireless settings enable any computer having a compatible wireless adapter to access your WLAN. To protect your network from unauthorized intrusions, you can restrict access to your WLAN to a limited number of computers on the Wireless > SECURITY advanced Page. You can configure one or both of:
Perform Configuring the Wireless Network Name on the SBG900 to disable Extended Service Set Identifier (ESSID) broadcasting to enable closed network operation Perform Configuring a MAC Access Control List on the SBG900 to restrict access to wireless clients with known MAC addresses
You must configure the identical ESSID (network name) to the SBG900. No configuration is required on the client.
Configuring the Wireless Network Name on the SBG900
If you disable ESSID broadcasting on the SBG900, the SBG900 does not transmit the network name (ESSID). This provides additional protection because:
Only wireless clients configured with your network name can communicate with the SBG900 It is more difficult for unauthorized individuals who scan for unsecured WLANs to access your WLAN
Closed network operation is an enhancement of the IEEE 802.11b and IEEE 802.11g standards. If you select Disable ESSID Broadcast, you must perform Configuring a Wireless Client with the Network Name (ESSID) on all WLAN clients (stations). Never provide your ESSID to anyone who is not authorized to use your WLAN. To configure the ESSID on the SBG900:
Start the SBG900 Setup Program as described in Starting the SBG900 Setup Program. On the left panel, click Wireless. Click the NETWORK tab to display:
In the ESSID field, type a unique name. It can be any alphanumeric, case-sensitive string up to 32 characters. The default is Motorola. Do not use the default ESSID. Click Save Changes to save your changes. To restrict WLAN access to clients configured with the same Network Name (ESSID) as the SBG900, click the SECURITY tab.
Click advanced to display the Wireless > SECURITY advanced Page:
Select Disable ESSID Broadcast to restrict WLAN access to clients configured with the same Network Name (ESSID) as the SBG900. Click Apply to save your changes.
Configuring a MAC Access Control List on the SBG900

You can restrict wireless access to one to 32 wireless clients, based on the client MAC address. To configure a MAC access control list:
On the SBG900 Setup Program left panel, click Wireless. Click the SECURITY tab. Click advanced to display the Wireless > SECURITY advanced Page:
To restrict wireless access to systems in the MAC access control list, select Allow Only Listed Stations Access and click Apply. To add a wireless client, type its MAC address in the format xx:xx:xx:xx:xx:xx in the New Station field and click Add Station. You can add up to 32 wireless clients to the MAC access control list.
Configuring the Wireless Clients
For each wireless client computer (station), install the wireless adapter such as a Motorola WN825G, WPCI810G, or WU830G following the instructions supplied with the adapter. Be sure to:
Insert the CD-ROM for the adapter in the CD-ROM drive on the client. Install the device software from the CD. Insert the adapter in the PCMCIA or PCI slot or connect it to the USB port.

Step 2 Step 1 Step 2

Step 3 Step 1
Configure the adapter to obtain an IP address automatically. The Motorola wireless adapters are supplied with a client configuration program called Wireless Client Manager, which is installed in the Windows Startup group. On a PC with Wireless Client Manager installed, the the icon to launch the utility. icon is displayed on the Windows task bar. Double-click
You may need to do the following to use a wireless client computer to surf the Internet:

If You Performed

Configuring WPA on the SBG900 Configuring WEP on the SBG900 Configuring the Wireless Network Name on the SBG900 Configuring a MAC Access Control List on the SBG900
On Each Client, You Need to Perform
Configuring a Wireless Client for WPA Configuring a Wireless Client for WEP Configuring a Wireless Client with the Network Name (ESSID) No configuration on client required
Configuring a Wireless Client for WPA
If you enabled WPA and set a PSK Passphrase by Configuring WPA on the SBG900, you must configure the same passphrase (key) on each wireless client. The SBG900 cannot authenticate a client if:

Removing the USB Driver from Windows 2000
On the Windows desktop, click Start. Click Settings. Click Control Panel to display the Control Panel window:
Double-click System to display the System Properties window.

Click the Hardware tab:

Click Device Manager to display the Device Manager window:
Double-click Network Adapters. Click the Motorola SURFboard SBG900 USB Gateway. The Uninstall icon displays on the window near the top.
Click the Uninstall icon. The following window is displayed:
10 Click OK. 11 Close the Device Manager window. 12 Close the Control Panel window. 13 Perform Running the Motorola USB Driver Removal Utility.
Removing the USB Driver from Windows XP
Click Control Panel to display the Control Panel window. The display varies, depending on the Windows XP view options:
If a Category view similar to the image under step 2 is displayed, click Performance and Maintenance to display the Performance and Maintenance window. Otherwise, skip to step 5.
Click System to display the System Properties window. Skip to step 6.
If a Classic view similar to the following is displayed, double-click System to display the System Properties window:
Click the Hardware tab to display the Hardware page:
Click the Device Manager button to display the Device Manager window:
Double-click Network adapters. Click the Motorola SURFboard SBG900 USB Gateway. The Uninstall icon displays on the window near the top.
10 Click the Uninstall icon. 11 Close the Device Manager and Control Panel windows. 12 Perform Running the Motorola USB Driver Removal Utility.
Running the Motorola USB Driver Removal Utility
Before running the Motorola USB Driver Removal Utility, you must run the Windows Device Manager by performing one of:
To run the Motorola USB Driver Removal Utility: Insert the SBG900 Installation CD-ROM in the CD-ROM drive. After a short time, a window with language choices is displayed. Press the Esc key on the keyboard to exit the start-up screens. To start Windows Explorer, click Start and select Run. On the Run window, type explorer and click OK.

header hexadecimal

HFC hop

HTML hub

IANA The Internet Numbering Address Authority (IANA) is an organization under the Internet Architecture Board (IAB) of the Internet Society that oversees IP address allocation. It is under a contract from the U.S. government. Internet Control Message Protocol is a protocol used for error, problem, and informational messages sent between IP hosts and gateways. ICMP messages are processed by the IP software and are not usually apparent to the end-user. The International Computer Security Association is the security industrys main source of research, intelligence, and product certification. The Institute of Electrical and Electronics Engineers, Inc. (http://www.ieee.org) is an organization that produces standards, technical papers, and symposiums for the electrical and electronic industries and is accredited by ANSI. IEEE wireless network standards. See Ethernet. The Internet Engineering Task Force (http://www.ietf.org) is an open international community of network designers, operators, vendors, and researchers to develop and maintain Internet architecture. Technical working groups issue working documents called Internet-Drafts. The IETF publishes review versions of the drafts called requests for comments (RFCs). Internet Group Membership Protocol is the Internet multicasting standard. IGMP establishes and maintains a database of group multicast addresses and interfaces to which a multicast router forwards multicast packets. IGMP runs between multicast hosts and their immediately-neighboring multicast routers. A process where a router acts as an IGMP querier for multicast hosts and an IGMP host to a multicast router. The total opposition to AC electron current flow within a device. Impedance is typically 75 ohms for coax cable and other CATV components. Noise of very short in duration, typically of the order of 10 microseconds. It is caused by electrical transients such as voltage spikes, electric motors turning on, and lightning or switching equipment that bleed over to the cable. Noise typically caused by discrete frequencies picked up by the cable plant from radio broadcasts or an improperly grounded or shielded home appliance such as a hair dryer. Ingress is the major source of cable system noise. A worldwide collection of interconnected networks using TCP/IP. A collection of interconnected networks allowing communication between all devices connected to any network in the collection. Internet Protocol is a set of standards that enable different types of computers to communicate with one another and exchange data through the Internet. IP provides the appearance of a single, seamless communication system and makes the Internet a virtual network.