SBG1000 Wireless Cable Modem Gateway User Guide

SURFboard Cable Modem

Next page
Overview Installation Troubleshooting Contact FAQ Specifications Glossary License Configuration: Basic Gateway TCP/IP Wireless Print Server USB
WARNING: TO PREVENT FIRE OR SHOCK HAZARD, DO NOT EXPOSE THIS PRODUCT TO RAIN OR MOISTURE. THE UNIT MUST NOT BE EXPOSED TO DRIPPING OR SPLASHING. DO NOT PLACE OBJECTS FILLED WITH LIQUIDS, SUCH AS VASES, ON THE UNIT. CAUTION: TO PREVENT ELECTRICAL SHOCK, THIS EQUIPMENT REQUIRES A GROUNDING CONDUCTOR IN THE LINE CORD. THE LINE CORD PROVIDED WITH THE EQUIPMENT IS ACCEPTABLE FOR USE WITH NEMA STYLE 5-15R AC RECEPTACLE SUPPLYING NOMINAL 120 VOLTS. DO NOT CONNECT THE PLUG INTO AN EXTENSION CORD, RECEPTACLE, OR OTHER OUTLET UNLESS THE PLUG CAN BE FULLY INSERTED WITH NO PART OF THE BLADES EXPOSED. CAUTION: TO ENSURE REGULATORY AND SAFETY COMPLIANCE, USE ONLY THE PROVIDED POWER AND INTERFACE CABLES. CAUTION: DO NOT OPEN THE UNIT. DO NOT PERFORM ANY SERVICING OTHER THAN THAT CONTAINED IN THE INSTALLATION AND TROUBLESHOOTING INSTRUCTIONS. REFER ALL SERVICING TO QUALIFIED SERVICE PERSONNEL. CAUTION: CHANGES AND MODIFICATIONS NOT EXPRESSLY APPROVED BY MOTOROLA FOR COMPLIANCE COULD VOID USERS AUTHORITY TO OPERATE THE EQUIPMENT. CAUTION: Exposure to Radio Frequency Radiation. To comply with the FCC RF exposure compliance requirements, the separation distance between the antenna and any persons body (including hands, wrists, feet and ankles) must be at least 20 cm (8 inches). This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. Note: This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:
Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help.
This device must be installed and used in strict accordance with the manufacturers instructions as described in the user documentation that comes with the product. Postpone cable modem installation until there is no risk of thunderstorm or lightning activity in the area. Do not overload outlets or extension cords, as this can result in a risk of fire or electric shock. Overloaded AC outlets, extension cords, frayed power cords, damaged or cracked wire insulation, and broken plugs are dangerous. They may result in a shock or fire hazard. Route power supply cords so that they are not likely to be walked on or pinched by items placed upon or against them. Pay particular attention to cords where they are attached to plugs and convenience receptacles, and examine the point where they exit from the product. Place this equipment in a location that is close enough to an electrical outlet to accommodate the length of the power cord.
Place this equipment on a stable surface. Be sure that the outside cable system is grounded, so as to provide some protection against voltage surges and built-up static charges. Article 820-20 of the NEC (Section 54, Part I of the Canadian Electrical Code) provides guidelines for proper grounding and, in particular, specifies the CATV cable ground shall be connected in the grounding system of the building, as close to the point of cable entry as practical. When using this device, basic safety precautions should always be followed to reduce the risk of fire, electric shock and injury to persons, including the following:
Read all of the instructions {listed here and/or in the user manual} before you operate this equipment. Give particular attention to all safety precautions. Retain the instructions for future reference. Comply with all warning and caution statements in the instructions. Observe all warning and caution symbols that are affixed to this equipment. Comply with all instructions that accompany this equipment. Avoid using this product during an electrical storm. There may be a risk of electric shock from lightning. For added protection for this product during a lightning storm, or when it is left unattended and unused for long periods of time, unplug it from the wall outlet, and disconnect the cable system. This will prevent damage to the product due to lightning and power surges. Avoid damaging the cable modem with static by touching the coaxial cable when it is attached to the earth grounded coaxial cable TV wall outlet. Always first touch the coaxial cable connector on the cable modem when disconnecting or re-connecting USB or Ethernet cable from the cable modem or the users PC. Operate this product only from the type of power source indicated on the products marking label. If you are not sure of the type of power supplied to your home, consult your dealer or local power company. Upon completion of any service or repairs to this products, ask the service technician to perform safety checks to determine that the product is in safe operating condition.

Installation. 19

Before You Begin. 19 Precautions. 20 Signing Up for Service. 21 Computer System Requirements. 21 Connecting the SBG1000 to the Cable System. 22 Cabling the Ethernet or HPNA LAN. 23 Obtaining an IP address in Windows 98, Windows 98 SE, or Windows Me. 23 Obtaining an IP address in Windows 2000 or Windows XP. 23 Obtaining an IP address on Macintosh or UNIX Systems. 23 Connecting a PC to the USB Port. 24 Setting Up the Wireless LAN. 24 Connecting the Printer. 24 Wall Mounting the Wireless Gateway. 25 Wall Mounting Template. 27 Installing the Optional External Diversity Antenna. 28
Setting Up the Wireless LAN. 71
Configuring a Unique Wireless Network Name. 72 Configuring Basic Wireless LAN Security. 73 Configuring Wireless Clients. 74 Wireless Pages in the SBG1000 Setup Program. Wireless > STATUS Page. Wireless > NETWORK Page. Wireless > SECURITY basic Page. Wireless > SECURITY advanced Page. Wireless > STATISTICS page. 78 79
Configuring the Print Server. 81
Configuring the SBG1000 Print Server. Printer > CONFIGURATION Microsoft smb Page Printer > CONFIGURATION Apple Page. Printer > CONFIGURATION lpr Page. Adding a Printer in Windows 98 or Windows Me. 84
Configuring the SBG1000. 31
Starting the SBG1000 Setup Program. 32 Changing the Default Password. 34 Getting Help. 35 Setting the Firewall Policy. 36
Adding a Printer in Windows 2000. 90
Setting Up a USB Driver. 99
Setting Up a USB Driver in Windows 98. 100 Setting Up a USB Driver in Windows 2000. 104 Setting Up a USB Driver in Windows Me. 107 Setting Up a USB Driver in Windows XP. 108 Removing the USB Driver from Windows 98 or Windows Me. 109 Removing the USB Driver from Windows 2000. 112 Removing the USB Driver from Windows XP. 115

Troubleshooting. 121

Front-Panel Lights and Error Conditions. 121
Contact Us. 123 Frequently-Asked Questions. 125 Specifications. 127
General. 127 Cable Modem. 128
Glossary. 129 Software License. 147

Overview

Thank you for purchasing the Motorola SBG1000 Wireless Cable Modem Gateway. The SBG1000 combines a SURFboard cable modem, IEEE 802.11b wireless access point, router with five-port 10/100Base-T switch, print server, and an advanced firewall into one compact product. It is the perfect networking solution for the home, home office, or small business/enterprise. You can create a custom network to share a single broadband connection, files, printers, and other peripherals like scanners, with or without wires. The SBG1000:
Eliminates the need for five separate products, enabling you to maximize the potential of your existing resources Offers enhanced network security for wired and wireless users Enables operators to add future value-added services

Sample USB connection.

Caution!
Before plugging in the USB cable, be sure the Motorola SBG1000 Wireless Cable Modem Gateway CD-ROM is inserted in the PC CD-ROM drive.

HPNA LAN

To eliminate the need to install network wiring, the Motorola SBG1000 Wireless Cable Modem Gateway provides a Home Phoneline Network Alliance (HPNA or HomePNA) connection. HPNA networks use existing telephone lines to connect the computers without interfering with telephone voice service, DSL, ISDN, modems, or fax machines. HPNA networks can extend up to 300 meters (1000 feet).
Sample HPNA network connections

Phone system

Existing wiring
Each computer requires an HPNA adapter to connect to the HPNA network. HPNA adapters (sold elsewhere) are available for PCI or USB. After installing the HPNA adapter, you must install HPNA driver software on the computer following the instructions provided with the HPNA adapter. HPNA 2.0 supports 10 Mbps data transfer similar to Ethernet 10Base-T. If there is more than one telephone line, you must make all HPNA connections to the same line. You can connect a telephone to the top HPNA port on the SBG1000 (see Front Panel on page 6).
IEEE 802.11b Wireless LAN
Wireless communication occurs over radio waves rather than a wire. Like a cordless telephone, a wireless LAN uses radio signals instead of wires to exchange data. A wireless network eliminates the need for expensive and intrusive wiring to connect computers throughout the home or office. Mobile users can remain connected to the network even when carrying their laptop to different locations in the home or office. Each computer on a wireless LAN requires an adapter described in Optional Accessories on page 4:
For wireless laptops connections, use a Motorola PCC11b Wireless Card in the PCMCIA slot. For wireless desktop connections, use a Motorola USB11b Wireless Adapter to connect your PC USB port.
Sample wireless network connections
To set up the SBG1000, on a computer wired to the SBG1000 over Ethernet or USB, perform the procedures in Setting Up the Wireless LAN on page 71. To set up each wireless client (station):
Insert the PCC11b and USB11b Wireless Adapter CD-ROM in the CD-ROM drive on the client. Install the device software from the CD. Connect the Motorola PCC11b wireless card or USB11b wireless adapter following the instructions supplied with the card or adapter.

Security

The Motorola SBG1000 Wireless Cable Modem Gateway provides:
A firewall to protect the SBG1000 LAN from undesired attacks over the Internet Security measures to prevent eavesdropping of wireless data

This button also displays help for the window.
You can scroll to browse the help or click another item to display help for that item.
Setting the Firewall Policy
Firewalls are not foolproof. Choose the most secure firewall policy you can. To enable easy network setup, the default firewall policy is Low, which provides minimum security.
To select a predefined policy for all packets processed by the firewall:
On the SBG1000 Setup Program left panel, click Firewall. Click POLICY. Click basic to display the options for firewall policy:
Select one of the following. Unless you have the necessary expertise and need to setup a custom firewall, use High, Medium, or Low:
High Medium Low Custom None Safest configuration, highest security. We recommend this setting. Common configuration, modest risk. Minimum security, higher risk. You can create a custom firewall policy on the Firewall > POLICY advanced Page (see page 39). Do not create a custom policy unless you have the necessary expertise and the need to do so. This setting disables the firewall. This is the default action. You may consider using one of the SBG1000 pre-defined firewall policies to enhance your network security.
Click Apply to apply your changes.
Firewall Pages in the SBG1000 Setup Program
Use the following pages to configure the firewall:
Firewall > POLICY basic Page (see page 38) Firewall > POLICY advanced Page (see page 39) Firewall > ALERT basic Page (see page 41) Firewall > ALERT email Page (see page 42) Firewall > LOGS Page (see page 43)
Firewall > POLICY basic Page
Use this page to select a predefined firewall policy for all packets processed by the SBG1000 firewall, as described in Setting the Firewall Policy on page 36. Advanced users only can create a custom policy on the Firewall > POLICY advanced Page (see page 39). The FIREWALL POLICY setting None disables the firewall. This is the default setting. You may consider using one of the SBG1000 pre-defined firewall policies to enhance your network security. You can click on the advanced tab to view the firewall rules that are applied for each firewall setting; high, medium, and low. The predefined policies provide outbound Internet access for computers on the SBG1000 LAN. The SBG1000 firewall uses stateful inspection to allow inbound responses when there already is an outbound session running corresponding to the data flow. For example, if you use a web browser, outbound HTTP connections are permitted on port 80. Inbound responses from the Internet are allowed because an outbound session is established. When required, the SBG1000 firewall can be configured to allow inbound packets without first establishing an outbound session.

Gateway > LAN dhcp reservations Page
Use this page to configure DHCP reservations:
Gateway > LAN dhcp reservations page fields Field
GAMING DMZ Enable Gaming DMZ DMZ Host Checking this box designates the selected host as the default Gaming DMZ host. The Gaming DMZ host is a CPE with a private reserved IP address designated to be the default DMZ host. Only one Gaming DMZ host can be active at any one time. The CPE configured to be in the Gaming DMZ is not protected by the firewall and is open to communication from any computer on the Internet. Thus, carful consideration should be given before configuring your CPE to be in the DMZ. This feature is useful if you are having difficulties running certain applications - typecally gaming applications. The benefit of using a Gaming DMZ host as opposed to a NAT Passthrough host is that a Gaming DMZ host does not require a public IP address as would be required by a NAT Passthrough host. If the application requires a public IP address then the host should be configured as a NAT Passthrough. You can reserve up to 32 IP addresses assigned by the SBG1000 DHCP server for specific LAN clients. For example, you can reserve an IP address for a private FTP server to ensure that it always receives the same private IP address. Type the MAC address of the DHCP client for which a reserved IP address is required. The format is 16 hexadecimal numerals. Sets the host portion of the reserved IP address for the LAN client having the specified MAC address. When the LAN client requests an IP address, the SBG1000 DHCP server assigns the client this IP address.
RESERVE NEW IP ADDRESS MAC Address IP Address
Gateway > LAN dhcp reservations page fields (continued) Field
Host Name Add CURRENTLY RESERVED IP ADDRESSES MAC Address IP Address Host Name Delete Delete
If your ISP requires a hostname to access their network, enter the hostname provided to you in the Host Name field. Click Add to reserve a new IP address. Displays all DHCP clients that have specific IP addresses reserved for their use by MAC and IP address. Displays the reserved MAC addresses. Displays the reserved IP addresses. Displays the host name. Click this box to remove the reserved IP address for the client. Click this button to remove the reserved IP addresses for clients designated by the Delete box.

When you complete TCP/IP configuration, go to Verifying the IP Address in Windows 95, Windows 98, or Windows Me on page 68.
Configuring TCP/IP in Windows 2000
On the Windows Desktop, click Start. Select Settings and then Control Panel from the pop-up menus to display the Control Panel window:
Double-click the Network and Dial-up Connections icon to display the Network and Dial-up Connections window:
Click Local Area Connection number. The value of number varies from system to system. The Local Area Connection number Status window is displayed:
Click Properties. Information similar to the following window is displayed:
If Internet Protocol (TCP/IP) is in the list of components, TCP/IP is installed. You can skip to step 10. If Internet Protocol (TCP/IP) is not in the list, click Install. The Select Network Component Type window is displayed:
Click Protocol on the Select Network Component Type window and click Add. The Select Network Protocol window is displayed:
Click Internet Protocol (TCP/IP). Click OK. The Local Area Connection number Properties window is re-displayed.
10 Be sure the box next to Internet Protocol (TCP/IP) is checked.
11 Click Properties. The Internet Protocol (TCP/IP) Properties window is displayed:
12 Be sure Obtain IP address automatically and Obtain DNS server address automatically are selected. 13 Click OK to accept the TCP/IP settings. 14 Click OK to close the Local Area Connection number Properties window. 15 Click OK when prompted to restart the computer and click OK again.
When you complete the TCP/IP configuration, go to Verifying the IP Address in Windows 2000 or Windows XP on page 69.
Configuring TCP/IP in Windows XP
On the Windows desktop, click Start to display the Start window:
Click Control Panel to display the Control Panel window. The display varies, depending on the Windows XP view options. If the display is a Category view as shown below, continue with step 3. Otherwise, skip to step.
Click Network and Internet Connections to display the Network and Internet Connections window:
Click Network Connections to display the LAN or High-speed Internet connections. Skip to step 6. If a classic view similar to below is displayed: :
Click Network Connections to display the LAN or High-speed Internet connections.
Right-click on the network connection. If more than one connection is displayed, be sure to select the one for your network interface:
Select Properties from the pop-up menu to display the Local Area Connection Properties window:
On the Local Area Connection Properties window, be sure Internet Protocol (TCP/IP) is checked. If it is not selected, check it.
Select Internet Protocol (TCP/IP) and click Properties to display the Internet Protocol (TCP/IP) Properties window:
10 Verify that the settings are correct, as shown above. 11 Click OK to close the TCP/IP Properties window. 12 Click OK to close the Local Area Connection Properties window.

Verifying the IP Address in Windows 95, Windows 98, or Windows Me

To check the IP address:

On the Windows Desktop, click Start. Select Run. The Run window is displayed. Type winipcfg.exe and click OK. The IP Configuration window is displayed. The Ethernet Adpater Information field will vary depending on the system, as shown in the following examples:
The values for Adapter Address, IP Address, Subnet Mask, and Default Gateway on the PC will be different than in the image. In Windows 98, if Autoconfiguration is displayed before the IP Address as in the following image, call your service provider.
Select the adapter name the Ethernet card or USB device. Click Renew. Click OK after the system displays an IP address.
If after performing this procedure the computer cannot access the Internet, call your cable service provider for help.
Verifying the IP Address in Windows 2000 or Windows XP
On the Windows Desktop, click Start. Select Run. The Run window is displayed. Type cmd and click OK to display a command prompt window. Type ipconfig and press ENTER to display the IP configuration. A display similar to the following indicates a normal configuration:
If an Autoconfiguration IP Address is displayed as in the following window, there is an incorrect connection between the PC and the SBG1000 or there are cable network problems. Check the cable connections and determine if you can view cable-TV channels on your television:
After verifying the cable connections and proper cable-TV operation, renew the IP address.

To renew the IP address:

Type ipconfig /renew and press ENTER. If a valid IP address is displayed as shown, Internet access should be available.
Type exit and press ENTER to return to Windows.
You can use the Motorola SBG1000 Wireless Cable Modem Gateway as an access point for an IEEE 802.11b wireless LAN without changing its default settings. This section describes:
Configuring a Unique Wireless Network Name (see page 72) Configuring Basic Wireless LAN Security (see page 73) Configuring Wireless Clients (see page 74) Wireless Pages in the SBG1000 Setup Program (see page 74)
The default Wired Equivalent Privacy (WEP) Authentication setting Disable WEP provides no security for wireless data. After the wireless LAN is operational, be sure to configure WEP as described in Configuring Basic Wireless LAN Security on page 73.

Configuring a Unique Wireless Network Name
All clients (stations) on the wireless LAN must have the same network name (ESSID) as the access point on the SBG1000. You must configure the same ESSID on all IEEE 802.11b LAN clients. To configure the ESSID:
Start the SBG1000 Setup Program as described in Starting the SBG1000 Setup Program on page 32. On the left frame, click Wireless. Click the NETWORK tab to display:
In the ESSID field, type a name. It can be any alphanumeric, case-sensitive string up to 32 characters. The default is Motorola. Do not use the default ESSID. Click Save Changes to save your changes.
Configuring Basic Wireless LAN Security
The default settings provide no security for wireless data. After the wireless LAN is operational, be sure to enable Shared Key Authentication and Wired Equivalent Privacy (WEP) encryption. You must configure the same WEP key on the SBG1000 access point and all wireless clients (stations). To enable WEP and set the key on the SBG1000:
On the SBG1000 Setup Program left frame, click Wireless. Click the SECURITY tab to display the Wireless > SECURITY basic screen:

Set the following:

Authentication Sets whether shared key authentication is enabled to provide data privacy on the wireless LAN: Open System Any wireless LAN client can transmit data to any other client without authentication. Open authentication provides no security for transmitted data. Shared Key All data transmitted over the wireless LAN is encrypted. The SBG1000 authenticates and transfers data to and from all clients having shared key authentication enabled and an identical WEP key. For optimal security, we recommend changing the WEP keys frequently. The default is Open System. Use a WEP key length that is compatible with your wireless client adapters. Choose one of: Enable 64-Bit Use only if you have wireless clients that do not support 128-bit encryption Enable 128-Bit The recommended setting for stronger encryption; supported by the Motorola PCC11b wireless card, USB11b wireless adapter, and most current wireless adapters Disable WEP Recommended during network setup only Sets the active WEP key. You can enter up to four 64-bit or 128-bit WEP keys containing the non-case-sensitive hexadecimal characters 0 to 9 and A to F. Only one key can be active: For 64-bit encryption, the key must be 10 characters long. For 128-bit encryption, the key must be 26 characters long.

Encryption

Key 1 to Key 4
If necessary, click Reset Wireless Defaults to reset the wireless defaults. Click Save Changes to save your changes.
Configuring Wireless Clients
For each wireless client computer (station), install the wireless client card or adapter such as a Motorola PCC11b wireless card or Motorola USB11b wireless adapter following the instructions supplied with the card or adapter. Configure the card or adapter to obtain an IP address automatically. The Motorola PCC11b wireless card and Motorola USB11b wireless adapter are supplied with a client configuration program called Wireless Client Manger, which is installed in the Windows Startup group. If Wireless Client Manager is running, the launch the utility. icon is displayed on the Windows task bar. Double-click the icon to

Acknowledge Failed Count Received Fragment Count Multicast Received Fragment Count Frame Check Sequence Error Count Transmitted Frame Count WEP Undecryptable Count
The number of acknowledgment messages not received when expected from a data message transmission. The number of successfully received MPDUs of type Data or Management. The number of MSDUs received when the multicast bit was set in the destination MAC address. The number of FCS errors detected in a received MPDU.
The number of successfully transmitted MSDUs. This number of frames received with the WEP subfield of the Frame Control field set to one and the WEP On key value mapped to the client MAC address. This indicates that the frame should not have been encrypted or that frame was discarded due to the receiving client not having WEP enabled. Click to collect new data.

Refresh

Configuring the Print Server
The SBG1000 print server supports a printer connected to its printer port using Microsoft, UNIX (Linux), or Apple printing. Configuring printing consists of:
Configuring the SBG1000 Print Server Connecting the printer to the SBG1000 as shown in Installation on page 19 Adding a printer to each PC following one of: Adding a Printer in Windows 98 or Windows Me on page 84 Adding a Printer in Windows 2000 on page 90
Configuring the SBG1000 Print Server
Start the SBG1000 Setup Program as described in Starting the SBG1000 Setup Program on page 32. On the left frame, click Printer to display the Printer CONFIGURATION > basic page:
(Optional) For a printer that supports bi-directional communication, you can enable Extended Capabilities Port (ECP) Mode, which can provide a performance benefit over a standard port. Use the following pages to configure the print server for the necessary platform(s):
Windows Macintosh UNIX (Linux) Printer > CONFIGURATION Microsoft smb Page (see page 82) Printer > CONFIGURATION Apple Page (see page 83) Printer > CONFIGURATION lpr Page (see page 84)

Cannot send or receive data
Problems related to unsuccessful USB driver installation The printer icon is not displayed
Check the printer cable connection and power the printer and SBG1000 off and on again. Verify that Enable printer is checked on the Printer CONFIGURATION > basic page.
Front-Panel Lights and Error Conditions
RX (receive) TX (transmit) LNK light is not on Green power icon light is off
Turns Off During Startup If
The receive channel cannot be acquired The send channel cannot be acquired IP registration is unsuccessful
Turns Off During Normal Operation If
The receive channel is lost The send channel is lost The IP registration is lost
The SBG1000 is not properly plugged into the The SBG1000 is unplugged power outlet
For more information about the lights, see Front Panel on page 6.

Contact Us

In the United States and Canada, if you need assistance while working with the SBG1000 and related equipment, call 1-877-466-8646 for technical and warranty support. Support is available 24 hours a day, seven days a week. For information about customer service, technical support, or warranty claims, see the Regulatory, Safety, Software License, and Warranty Information card provided with the SURFboard SBG1000. For answers to typical questions, see Frequently-Asked Questions on page 125. For more information about Motorola consumer cable products, education, and support, visit http://www.motorola.com/broadband.
Frequently-Asked Questions
Here are answers to questions our customers frequently ask:
What is high-speed cable Internet access? Cable Internet access uses cable television wires instead of telephone lines to connect to the Internet. It is extremely fast and does not tie up telephone lines for incoming or outgoing calls and faxes. How fast is the Motorola SBG1000 Wireless Cable Modem Gateway? Cable modems offer Internet access at speeds up to 100 times faster than a traditional phone modem. You can experience speeds of over 1,000 Kbps. Due to network condition such as traffic volume and the speed of the sites you visit, actual speed may vary. Many network and other factors can affect download speeds. How many users can one SBG1000 support? A single SBG1000 can support up to 253 users, each assigned a unique IP address, on a Class C network. What is Network Address Translation? NAT is a technique to translate private IP addresses on your LAN to a single IP address assigned by your cable service provider that is that is visible to outside users on the Internet. What is IEEE_802.11b? IEEE 802.11b is the IEEE wireless network standard. What type of firewall is provided on the SBG1000? The SBG1000 provides a stateful-inspection firewall. What wireless security measures are provided on the SBG1000? To protect data transmitted over wireless connections, the SBG1000 supports WEP encryption and MAC access control lists. For information, see Setting Up the Wireless LAN on page 71. Why is there no Standby button? As a security measure, current Motorola SURFboard cable modems provide a Standby button to temporarily suspend the Internet connection. Because the SBG1000 firewall provides high security levels while connected, the Standby button is not required. Can I still watch cable TV while using my Motorola SBG1000 Wireless Cable Modem Gateway? Yes, your cable TV line can carry the TV signal while you send and receive information on the Internet. What are CableLabs Certified, DOCSIS, and Euro-DOCSIS? CableLabs Certified, DOCSIS, and Euro-DOCSIS are the industry standards for high-speed data distribution over cable television system networks. They are intended to ensure that all compliant cable modems interface with all compliant cable systems. Your SBG1000 is DOCSIS or Euro-DOCSIS certified. If I have an SBG1000, can I still use my old 28.8 Kbps or 56 Kbps modem? Yes you can. However, once youve experienced the speed of cable Internet access, youll never again want to wait for traditional dial-up services.

frame frequency FTP

full-duplex
gateway A device that enables communication between networks using different protocols. See also router. The SBG1000 enables up to 253 computers supporting IEEE 802.11b, Ethernet, USB, or HPNA to share a single broadband Internet connection. The address of the default gateway router on the internet. Also known as the giaddr. Gigahertz one billion cycles per second. graphical user interface
gateway IP address GHz GUI
H.323 half-duplex headend A suite of protocols created by the ITU for interactive video-conferencing, data sharing, and audio applications such as VoIP. Network where only one device at a time can transmit data. See also full-duplex. A location that receives TV programming, radio programming, data, and telephone calls that it modulates onto the HFC network. It also sends return data and telephone transmissions. Headend equipment includes transmitters, preamplifiers, frequency terminals, demodulators, modulators, and other devices that amplify, filter, and convert incoming broadcast TV signals to wireless and cable channels. The data at the beginning of a packet that identifies what is in the packet. A base-sixteen numbering system that uses sixteen sequential numbers (0 to 9 and the letters A to F) as base units before adding a new position. On computers, hexadecimal is a convenient way to express binary numbers. A hybrid fiber/coaxial cable network uses fiber-optic cable as the trunk and coaxial cable to the subscriber premises. The interval between two routers on an IP network. The number of hops a packet traverses toward its destination (called the hop count) is saved in the packet header. For example, a hop count of six means the packet has traversed six routers. The packet hop count increases as the time-to-live (TTL) value decreases. In IP, a host is any computer supporting end-user applications or services with full two-way network access. Each host has a unique host number that combined with the network number forms its IP address. Host also can mean: A computer running a web server that serves pages for one or more web sites belonging to organization(s) or individuals A company that provides this service In IBM environments, a mainframe computer The Home Phoneline Networking Alliance (HomePNA) standard enables home network devices to interact over existing telephone wiring without disturbing normal voice service. An HPNA network processes, manages, transports, and stores data to enable telephones, fax machines, desktops, laptops, printers, scanners and web cameras to connect and interoperate over home telephone wiring. HPNA uses frequencies that are not used for phone modems or voice communications. HPNA can work on a Digital Subscriber Line (DSL). Motorola is an HPNA participant. Hyper Text Markup Language On a LAN, a hub is a device that connects multiple hosts to the LAN. A hub performs no data filtering. See also bridge and router. An IP hub is typically a unit on a rack or desktop. On an HFC network, a hub is a scaled-down headend that performs some or all headend functions for part of the system. Hertz one cycle per second. The unit to measure the frequency that an alternating electromagnetic signal cycles through its highest and lowest states. Used to define the bands of the electromagnetic spectrum used in voice and data communications, or to define the bandwidth of a transmission medium.

network network driver network layer
ohm OSI A unit of electrical resistance. The Open Systems Interconnection reference model is an illustrative model describing how data moves from an application on the source host through a network to an application on the destination host. It is a conceptual framework developed by ISO that is now the primary model for intercomputer communications. OSI is a model only; it does not define a specific networking interface.
packet The unit of data that is routed between the sender and destination on the Internet or other packet-switched network. When data such as an e-mail message or other file is sent over the Internet, IP on the sender divides the data into uniquely-numbered packets.The packet header contains the source and destination IP addresses. The individual packets may travel different routes. When all packets arrive at the destination, IP at that end reassembles the packets. The header and the data can vary in length. Packet and datagram are similar in meaning. A scheme to handle transmissions on a connectionless network such as the Internet. An alternative is circuit-switched. A CableLabs-led project to define a common platform to deliver advanced real-time multimedia services over two-way HFC cable plant. Built on DOCSIS 1.1, PacketCable networks use IP technology as the basis for a highly-capable multimedia architecture. A pass-through client on the SBG1000 LAN obtains its public IP address from the cable service provider DHCP server. Port Address Translation The Personal Computer Memory Card International Association sets international standards for connecting peripherals to portable computers. Laptop computers typically have a PCMCIA slot that can hold one or two PC Cards to provide features such as Ethernet connectivity. personal desktop assistant A protocol data unit is a message containing operational instructions used for SNMP. The basic SNMP V2 PDU types are get-request, get-next-request, get-bulk-request, response, set-request, inform-request, and trap. Ranging that is performed on an on-going basis after initial ranging has taken place. Layer 1 in the OSI architecture. It provides services to transmit bits or groups of bits over a transmission link between open systems. It entails the electrical, mechanical, and handshaking procedures. A process that occurs when a cable modem simultaneously transmits data and requests additional bandwidth. A network utility that tests host reachability by sending a small packet to the host and waiting for a reply. If you PING a computer IP address and receive a reply, you know the computer is reachable over the network. It also stands for Packet InterNet Groper. (Hewlett-Packard) Printer Job Language The physical media-dependent sublayer of the physical layer which transmits bits or groups of bits over particular types of transmission links between open systems. It entails the electrical, mechanical, and handshaking procedures. Physical connection made from one point to another. The plain old telephone service offered through the PSTN; basic analog telephone service. POTS uses the lowest 4 kHz of bandwidth on twisted pair wiring. On a computer or other electronic device, a port is a socket or plug used to physically connect it to the network or to other devices. in TCP/IP, a port is a number from 0 to 65536 used logically by a client program to specify a server program. Ports 0 to 1024 are reserved A feature that enables one port (source) on the SBG1000 to be copied to another port (destination) to be studied. The destination mirrors the transmitted (from) or received (to) data on the source port to enable the person managing the network to monitor activity.

SDU SME SMTP SNMP SOHO spectrum spectrum allocation splitter stateful inspection
static filter static IP address static route station subscriber subnet mask subnetwork

switch

symbol rate
Also known as baud rate, is a measure of the number of times per second a signal in a communications channel varies, or makes a transition between states (states being frequencies, voltage levels or phase angles). Usually measured in symbols per second (sps). A de-facto UNIX standard for logging system events.

SYSLOG

TBCP TCP Tagged Binary Communication Protocol Transmission Control Protocol on OSI transport layer four, provides reliable transport over the network for data transmitted using IP (network layer three). It is an end-to-end protocol defining rules and procedures for data exchange between hosts on top of connectionless IP. TCP uses a timer to track outstanding packets, checks error in incoming packets, and retransmits packets if requested. The Transmission Control Protocol/Internet Protocol suite provides standards and rules for data communication between networks on the Internet. It is the worldwide internetworking standard and the basic communications protocol of the Internet. Trivial File Transfer Protocol is a very simple protocol used to transfer files. A method to enable all hosts on the wired Ethernet LAN, IEEE 802.11b wireless LAN, HPNA LAN, and USB connection to communicate as if they were all connected to the same physical network. Layer of the OSI concerned with protocols for error recognition and recovery. This layer also regulates information flow. Electronic path over which date is transmitted. The time to live is the number of routers (or hops) a packet can traverse before being discarded. When a router processes an packet, it decreases the TTL by 1. When the TTL reaches zero, the packet is discarded. To place packets inside other packets to send over a network. The protocol of the enclosing packet is understood by each endpoint, or tunnel interface, where the packet enters and exits the network. VPNs rely on tunneling to create a secure network. Tunneling requires the following protocol types: A carrier protocol, such as TCP, used by the network that the data travels over An encapsulating protocol, such as IPSec, L2F, L2TP, or PPTP, that is wrapped around the original data A passenger protocol, such as IP, for the original data A cable system that can transmit signals in both directions to and from the headend and the subscriber.

Quick Installation Guide
SURFboard Wireless Cable Modem Gateway SBG1000
Wireless Cable Modem Gateway SBG1000
A home network enables you to access and move information between two or more computers in your home or business. You can connect your home network to your cable TV system to connect to the Internet. Your SURFboard Gateway SBG1000 is the central connection point between your computers and the Internet. It directs (routes) information between the computers connected to your home network. A built-in cable modem transmits information between your home network and the Internet. The SBG1000 provides different network connection types. You can use a wireless or a wired connection (or a combination of the two) to connect your computers to the SBG1000. Your network can use one or any combination of: Ethernet local area network (LAN) Wireless LAN (WLAN) Universal Serial Bus (USB) Home Phoneline Networking Alliance (HPNA) This guide provides information about: Optional accessories and network requirements Cable, Ethernet, USB, wireless, and printer connections Starting the Setup Program Introduction to network security and gaming configuration Troubleshooting and contact information
This guide contains an overview only. For in-depth information, refer to the interactive SBG1000 User Guide on the SBG1000 Installation CD-ROM. If desired, you can print all or part of the user guide.

Optional Accessories

All networks are composed of multiple devices. An SBG1000 works with any IEEE 802.11g or IEEE 802.11b compliant client product. Motorola supplies a range of accessories for use with the SBG1000. Some examples are:
Motorola Wireless Ethernet Bridge WE800G
Motorola Ethernet Broadband Router BR700
Motorola Wireless Notebook Adapter WN825G
Motorola Wireless PCI Adapter WPCI810G
For more information about Motorola cable modems, gateways, and related consumer broadband products, visit http://broadband.motorola.com/consumers.
Basic SBG1000 Network Requirements
An SBG1000 A connection to your cable TV system A subscription to cable modem service from your cable TV provider One or more computers with minimum: Pentium-class processor or faster 16 Mb of memory 10 Mb of hard disk space available Windows 98, Windows 98 SE, Windows Me, Windows 2000, Windows XP, Macintosh, or Linux with operating system CD-ROM available A wired or wireless network adapter for each computer on the network For wired connections, Ethernet cables (one is provided with the SBG1000)
We recommend plugging the SBG1000 into a surge protector.

Connecting the SBG1000

To connect to Ethernet or USB on a PC running a supported Windows version, perform the procedures in the following sections in this guide:
Ethernet USB Wireless A, B, and E A, C, and E A, D, and E For Macintosh or Linux computers, follow the instructions in the SBG1000 User Guide and the operating system documentation.
A. Connect the SBG1000 to Your Cable TV System
You may need to call your cable provider to activate your high-speed Internet service. Your cable provider may require the MAC address labeled CM HFC MAC ID on the bottom of the SBG1000. Please write your CM HFC MAC ID here: 00 : ______ : ______ : ______ : ______ : ______ Connecting Directly to the Cable Outlet 1 Connect one end of the coaxial cable to the cable TV wall outlet and its other end to the cable port on the SBG1000. Plug the AC power cord into the power connector on the SBG1000. Plug the AC power cord into an AC wall outlet or surge protector.

Connecting to the Cable Outlet Using a Splitter Connecting an SBG1000 to the same cable outlet as a TV requires a 5 to 900 MHz splitter and two additional coaxial cables. 1 Check that one end of the coaxial cable is connected to the cable TV outlet. 4 Disconnect that cable from the back of your TV and connect it to the splitter input. Use one coaxial cable to connect the splitter output to your TV. Use the other coaxial cable to connect the splitter output to the CABLE port on your SBG1000.

COAXIAL SPLITTER

OUTPUT

B. Ethernet Connections

Computers using the Ethernet connection require an Ethernet adapter installed and a wired connection to the SBG1000. 1 If you purchased your Ethernet adapter separately, install the Ethernet hardware and driver software according to the manufacturer's instructions. 2 Plug one end of the Ethernet cable into the Ethernet port on the computer. 3 Plug the other end into the ETHERNET port on the SBG1000 or an Ethernet hub or switch connected to the SBG1000, as shown in the illustrated sample LAN. 4 Restart your computer to obtain an IP address. Follow the instructions in the SBG1000 User Guide.

Sample Ethernet LAN

Add additional hubs or switches for further expansion.
You can connect up to 255 computers to Ethernet hubs or switches connected to the SBG1000. Detailed information about network cabling is beyond the scope of this document or the SBG1000 User Guide.

C. USB Connection

You can connect one PC running Windows 98, Windows Me, Windows 2000, or Windows XP to the SBG1000 USB port. The USB connection requires special driver software supplied on the SBG1000 Installation CD-ROM. 1 Insert the SBG1000 Installation CD-ROM into the CD-ROM drive. Be sure the SBG1000 is not connected to your PC. 2 Connect the SBG1000 to the cable TV system as described in Section A. 3 Install the USB driver software and restart your PC. 4 Connect the USB cable to the USB port on the SBG1000. Connect its other end to the USB port on the PC.
If you experience problems with the USB connection, uninstall the USB driver following the instructions in the SBG1000 User Guide.
D. Wireless Network Setup
Computers using the wireless connection require a compatible wireless adapter installed. The adapter type depends on whether the computer has a USB port, PCI slot, or credit-card-sized PCMCIA slot. To provide an initial wireless connection to your network and the Internet: 1 Connect the SBG1000 to the cable TV system as described in Section A. 2 On each wireless client computer, install the wireless adapter hardware and driver software according to the manufacturer's instructions. 3 On each wireless client computer, set up a wireless adapter profile to connect the client to the SBG1000. The procedure depends on your wireless adapter and computer operating system. In your initial profile, use the SBG1000 default wireless Network Name (ESSID) motorola (case-sensitive). Your computers are connected but not secure. The default SBG1000 settings provide no wireless security. After your wireless LAN is operational, be sure to enable security as described in Setting Up the Wireless LAN in the SBG1000 User Guide.

E. Start the SBG1000 Setup Program
1 On a computer wired to the SBG1000 USB or Ethernet port, open your web browser (for example, Microsoft Internet Explorer or Netscape Navigator). Type http//:192.168.100.1 and press ENTER to display the login window:
In the User ID field, type admin (case sensitive) and press TAB. In the Password field, type motorola (case sensitive) and click Log In to display the SBG1000 Setup Program main window:

Network Security

The SBG1000 firewall and wireless security measures are disabled by default. For normal operation, you do not need to change most default settings, except for the password, firewall, and wireless security.
The default SBG1000 settings provide no security for data or protection from Internet attacks. We recommend protecting your network as described on this page.
As soon as your network is operational, run the SBG1000 Setup Program to:
Task Change the default password to prevent unauthorized configuration. Enable the firewall to protect your LAN from Internet attacks. Choose the most secure policy possible for your applications. If you are only using wired Ethernet or USB connections (there are no wireless clients), disable the wireless interface to prevent unauthorized use. For a LAN with one or more wireless clients, enable wireless security on the SBG1000. In User Guide, see Changing the Default Password Setting the Firewall Policy Wireless Network Setup Wireless Network Setup
After enabling wireless security on the SBG1000, as required on each wireless client: If you disabled ESSID broadcasting on the SBG1000, set the client Network Name (ESSID) identical to the ESSID on the SBG1000. If you enabled WEP on the SBG1000, set the client WEP key identical to the WEP key on the SBG1000. If you enabled Allow Only Listed Stations Access, be sure the MAC address for each client is correctly listed on the SBG1000.

Configuration for Gaming

Firewall: By default, the SBG1000 Firewall is disabled. If you enable the SBG1000 firewall, see the game manufacturer's documentation to ensure the necessary ports are open for use by that game. If low security policy is enabled, the SBG1000 can pass XBox Live by default and no user action is required. If medium or high security policies are enabled, the firewall must be configured for X-Box Live traffic. XBox Live requires UDP 88:88 and UDP/TCP 3074:3074. Port Triggering: The SBG1000 has pre-defined port triggers supporting: DirectX 7 and DirectX 8 MSN Games by Zone.com Battle.net If your game uses one of these applications, no user action is required. For a list of games supported by Battle Net, visit http://www.battle.net. You can also configure custom port triggers that other games may require to operate properly. If you set custom port triggers and enable the firewall, you must configure the firewall to allow traffic through those ports. Gaming DMZ: Some games and game devices require the use of random ports or the forwarding of unsolicited traffic. We recommend configuring such a device as a Gaming DMZ device. First reserve a private IP address for that device's network interface MAC address and then designate it as a DMZ device. You can reserve IP addresses for multiple devices, but only one device at a time can be the Gaming DMZ. To connect a PlayStation 2 for PS2 on-line gaming, assign it as the Gaming DMZ because the ports required vary from game to game.

Connecting the SBG1000 Print Server
The print server enables all computers on your wired or wireless home network to print to a single printer connected to the SGB1000. 1 Connect your printer to the SBG1000. Use the parallel cable provided with your printer, or refer to the printer documentation for the correct cable. 2 Start the SBG1000 Setup Program as described in Section E. To configure the print server, click Printer:
For a Windows computer, refer to steps 3 and 4 or for detailed procedures see the SBG1000 User Guide. For a Macintosh or Linux computer, refer to your computer user guide.
Click the Microsoftsmb tab to display the SBG1000 Windows print server configuration:
To enable a Windows PC on the network to print to the SBG1000 printer, add and configure the SBG1000 printer in the Control Panel. The default SBG1000 settings are:
Domain Name Print Server Name\Queue Name WORKGROUP \\SBG1000\P1
For computers on a corporate office network to use SBG1000 print server, the Domain Name on the SBG1000 and network computers must be the same as the Corporate Domain Name.

Troubleshooting

If you experience a problem with the SBG1000, try the following: 1 Press the reset button on the rear panel. Resetting may take 5 to 30 minutes. 2 Refer to Troubleshooting in the SBG1000 User Guide. 3 If you still cannot resolve the issue, in the United States and Canada:
If you rent or lease your SBG1000 If you own your SBG1000 Contact your cable provider. Call 1-877-466-8646 for technical and warranty support available 24 hours a day, 7 days a week.
MOTOROLA and the Stylized M Logo are registered in the US Patent & Trademark Office. Microsoft, Windows, Windows Me, Windows XP, Xbox, Xbox Live, and DirectX are either registered trademarks or trademarks of Microsoft Corporation. Microsoft Windows screen shots are used by permission of Microsoft Corporation. Netscape Navigator is a registered trademark of Netscape. Battle.net is a registered trademark of Blizzard Entertainment. PlayStation and the PS family logo are registered trademarks of Sony Computer Entertainment; Inc. Linux is a registered trademark of Linus Torvalds. Macintosh is a registered trademark of Apple Computers, Inc. All other product or service names are the property of their respective owners. Motorola, Inc. 2004 506703-001 2/04 All rights reserved. No part of the contents of this manual may be reproduced or transmitted in any form or by any means without the written permission of the publisher.