Quick Installation Guide SURFboard Wireless Cable Modem Gateway SBG900
Wireless Cable Modem Gateway SBG900
A home network enables you to access and move information between two or more computers in your home or business. You can connect your home network to your cable TV system to connect to the Internet. Your SBG900 is the central connection point between your computers and the Internet. It directs (routes) information between the computers connected to your home network. A built-in cable modem transmits information between your home network and the Internet. The SBG900 provides different network connection types. You can use a wireless or a wired connection (or a combination of the two) to connect your computers to the SBG900. Your network can use one or any combination of: Ethernet local area network (LAN) Wireless LAN (WLAN) Universal Serial Bus (USB)
This guide provides information about: Optional accessories and network requirements Cable, Ethernet, USB, and wireless connections Starting the Setup Program Introduction to network security and gaming configuration Troubleshooting and contact information
For in-depth information, refer to the interactive SBG900 User Guide on the SBG900 Installation CD-ROM. If desired, you can print the user guide.

Quick Installation Guide

Optional Accessories
All networks are composed of multiple devices. The SBG900 works with any IEEE 802.11g or IEEE 802.11b compliant client product. Motorola supplies a range of accessories for use with the SBG900. Some examples are:
Motorola Wireless Ethernet Bridge WE800G
Motorola Ethernet Broadband Router BR700
Motorola Wireless Notebook Adapter WN825G
Motorola Wireless PCI Adapter WPCI810G
For more information about Motorola cable modems, gateways, and related consumer broadband products, visit http://broadband.motorola.com/.
Basic SBG900 Network Requirements
An SBG900 A connection to your cable TV system A subscription to cable modem service from your cable TV provider One or more computers with minimum: Pentium-class processor or faster 16 Mb of memory 10 Mb of hard disk space available Windows 98, Windows 98 SE, Windows Me, Windows 2000, Windows XP, Macintosh, or Linux with operating system CD-ROM available A wired or wireless network adapter for each computer on the network For wired connections, Ethernet cables (one is provided with the SBG900)
We recommend plugging the SBG900 AC power adapter into a surge protector.

Connecting the SBG900

To connect to Ethernet or USB on a PC running a supported Windows version, we recommend using the Installation Assistant on the SBG900 Installation CD-ROM. Insert the SBG900 CD-ROM in the CD-ROM drive, agree to the License Agreement, and the following window is displayed:
To start the Installation Assistant, click Installation Assistant. The procedures it guides you through are described in the following sections in this guide:
Ethernet USB A, B, and E A, C, and E
The Installation Assistant does not apply to the following: For wireless connections, follow the steps under A, D, and E. For Macintosh or Linux computers, follow the instructions in the SBG900 User Guide and the operating system documentation.
A. Connect the SBG900 to Your Cable TV System
You may need to call your cable provider to activate your high-speed Internet service. Your cable provider may require the MAC address labeled CM HFC MAC ID on the bottom of the SBG900. Please write your CM HFC MAC ID here: 00 : ______ : ______ : ______ : ______ : ______ Connecting Directly to the Cable Outlet Connect one end of the coaxial cable to the cable TV wall outlet and its other end to the CABLE port on the SBG900. Plug the power cord into the +12VDC port on the SBG900. Connect the AC power adapter to the SBG900. Plug the AC adapter into an AC wall outlet or surge protector.

To AC power adapter in wall 5 outlet 3 surge protector or
Connecting to the Cable Outlet Using a Splitter Connecting an SBG900 to the same cable outlet as a TV requires a 5 to 900 MHz splitter and two additional coaxial cables. Check that one end of the coaxial cable is connected to the cable TV outlet. Disconnect that cable from the back of your TV and connect it to the splitter input. Use one coaxial cable to connect the splitter output to your TV. Use the other coaxial cable to connect the splitter output to the on your SBG900.

CABLE port

COAXIAL SPLITTER

OUTPUT

B. Ethernet Connections
Computers using the Ethernet connection require an Ethernet adapter installed and a wired connection to the SBG900. 1 If you purchased your Ethernet adapter separately, install the Ethernet hardware and driver software according to the manufacturer's instructions. If your computer already has an Ethernet adapter installed, skip to step 2. 2 Insert the SBG900 Installation CD-ROM into the CD-ROM drive. Run the Installation Assistant. Choose Ethernet as your connection. Connect the SBG900 to the cable TV system as described in Section A. Plug one end of the Ethernet cable into the Ethernet port on the computer. Plug the other end into the ETHERNET port on the SBG900 or an Ethernet hub or switch connected to the SBG900, as shown in the illustrated sample Ethernet LAN. The Installation Assistant tests the connection between the computer and the SBG900. This may take up to three minutes. 7 Restart your computer to obtain an IP address. Follow the instructions in the SBG900 User Guide.

Sample Ethernet LAN

You can connect up to 255 computers to Ethernet hubs or switches connected to the SBG900. Detailed information about network cabling is beyond the scope of this document or the SBG900 User Guide.

C. USB Connection

You can connect a single PC running Windows 98, Windows Me, Windows 2000, or Windows XP to the SBG900 USB port. The USB connection requires special driver software supplied on the SBG900 Installation CD-ROM. 1 Insert the SBG900 Installation CD-ROM into the CD-ROM drive. 2 Run the Installation Assistant. Choose USB as your connection. Be sure the SBG900 is not connected to your PC. 3 Connect the SBG900 to the cable TV system as described in Section A. 4 Install the USB driver software. 5 Restart your PC. 6 Connect the USB cable to the USB port on the SBG900. 7 Connect its other end to the USB port on the PC.

If you experience problems with the USB connection, click Uninstall USB Driver on the Installation Assistant Getting Started page to uninstall the USB driver. If necessary, you can install the USB driver following the instructions in the SBG900 User Guide.
D. Wireless Network Setup
Computers using the wireless connection require a compatible wireless adapter installed. The adapter type depends on whether the computer has a USB port, PCI slot, or credit-card-sized PCMCIA slot. To provide an initial wireless connection to your network and the Internet: 1 Connect the SBG900 to the cable TV system as described in Section A. On each wireless client computer, install the wireless adapter hardware and driver software according to the manufacturer's instructions. 3 On each wireless client computer, set up a wireless adapter profile to connect the client to the SBG900. The procedure depends on your wireless adapter and computer operating system. In your initial profile, use the SBG900 default wireless Network Name (ESSID) motorola (case-sensitive). Your computers are connected but not secure. The default SBG900 settings provide no wireless security. After your wireless LAN is operational, be sure to enable security as described in Setting Up the Wireless LAN in the SBG900 User Guide. 2
E. Start the SBG900 Setup Program
On a computer wired to the SBG900 USB or Ethernet port, open your web browser (for example, Microsoft Internet Explorer or Netscape Navigator). Type http//:192.168.100.1 and press ENTER to display the login window:
In the User ID field, type admin (case sensitive) and press TAB. In the Password field, type motorola (case sensitive) and click Log In to display the SBG900 Setup Program main window:

Network Security

The SBG900 firewall and wireless security measures are disabled by default. For normal operation, you do not need to change most default settings, except for the password, firewall, and wireless security.
The default SBG900 settings provide no security for data or protection from Internet attacks. We recommend protecting your network as described on this page.
As soon as your network is operational, run the SBG900 Setup Program to:
Task Change the default password to prevent unauthorized configuration. Enable the firewall to protect your LAN from Internet attacks. Choose the most secure policy possible for your applications. If you are only using wired Ethernet or USB connections (there are no wireless clients), disable the wireless interface to prevent unauthorized use. For a LAN with one or more wireless clients, enable wireless security on the SBG900. In User Guide, see Changing the Default Password Setting the Firewall Policy Wireless Network Setup Wireless Network Setup

After enabling wireless security on the SBG900, as required on each wireless client: If you disabled ESSID broadcasting on the SBG900, set the client Network Name (ESSID) identical to the ESSID on the SBG900. If you enabled WEP on the SBG900, set the client WEP key identical to the WEP key on the SBG900. If you enabled Allow Only Listed Stations Access, be sure the MAC address for each client is correctly listed on the SBG900.

Configuration for Gaming

Firewall: By default, the SBG900 Firewall is disabled. If you enable the SBG900 firewall, see the game manufacturer's documentation to ensure the necessary ports are open for use by that game. If low security policy is enabled, the SBG900 can pass Xbox Live by default and no user action is required. If medium or high security policies are enabled, the firewall must be configured for X-Box Live traffic. XBox Live requires UDP 88:88 and UDP/TCP 3074:3074. Port Triggering: The SBG900 has pre-defined port triggers supporting: DirectX 7 and DirectX 8 MSN Games by Zone.com Ba ttle.net If your game uses one of these applications, no user action is required. For a list of games supported by Battle Net, visit http://www.battle.net. You can also configure custom port triggers that other games may require to operate properly. If you set custom port triggers and enable the firewall, you must configure the firewall to allow traffic through those ports. Gaming DMZ: Some games and game devices require the use of random ports or the forwarding of unsolicited traffic. We recommend configuring such a device as a Gaming DMZ device. First reserve a private IP address for that device's network interface MAC address and then designate it as a DMZ device. You can reserve IP addresses for multiple devices, but only one device at a time can be the Gaming DMZ. To connect a PlayStation 2 for PS2 on-line gaming, assign it as the Gaming DMZ because the ports required vary from game to game.

Troubleshooting

If you experience a problem with the SBG900, try the following: 1 Press the reset button on the rear panel. Resetting may take 5 to 30 minutes. 2 Refer to Troubleshooting in the SBG900 User Guide. 3 If you still cannot resolve the issue, contact your cable provider or Motorola as described in Contact Us.

Contact Us

In the United States and Canada, if you need assistance while working with the SBG900 and related equipment supplied by Motorola:
If you rent or lease your SBG900 If you own your SBG900 Contact your cable provider. Call 1-877-466-8646 for technical and warranty support available 24 hours a day, 7 days a week.
MOTOROLA and the Stylized M Logo are registered in the US Patent & Trademark Office. Microsoft, Windows, Windows Me, Windows XP, Xbox, Xbox Live and DirectX are either registered t ademarks or trademarks of Microsoft Corporation in the United States and/or r other countries. Microsoft Windows screen shots are used by permission of Microsoft Corporation. Battle.net is a registered trademark of Blizzard Entertainment. PlayStation and the PS family logo are registered trademarks of Sony Computer Entertainment, Inc. Linux is a registered trademark of Linus Torvalds. Macintosh is a registered trademark of Apple Computers, Inc. All other product or service names are the property of their respective owners. Motorola, Inc. 2003 506705-001 08/03 All rights reserved. No part of the contents of this manual may be reproduced or transmitted in any form or by any means without the written permission of the publisher.

To AC power adapter

A wired Ethernet LAN with more than one computer requires one or more hubs or switches. You can connect a hub or switch to the Ethernet port on the SBG900. The following illustration is an example of an Ethernet LAN you can set up using the SBG900. Cable the LAN in an appropriate manner for the site. A complete discussion of Ethernet cabling is beyond the scope of this document.
Sample Ethernet connection to hubs or switches
Add additional hubs or switches for further expansion

USB Connection

You can connect a single PC running Windows 98 Second Edition, Windows XP, Windows Me, or Windows 2000 to the SBG900 USB V1.1 port. For cabling instructions, see Connecting a PC to the USB Port.

Caution!

Before plugging in the USB cable, be sure the SBG900 Installation CD-ROM is inserted in the PC CD-ROM drive.

Sample USB connection

To AC power adapter To AC power adapter To AC power adapter

Security

The SBG900 provides:
A firewall to protect the SBG900 LAN from undesired attacks over the Internet For wireless transmissions, data encryption and network access control
Network Address Translation (NAT) provides some security because the IP addresses of SBG900 LAN computers are not visible on the Internet. This diagram does not necessarily correspond to the network cabling. A full discussion of network security is beyond the scope of this document.
SBG900 security measures shown in a logical network diagram
SBG900 DMZ computer Firewall Wireless Security: Encryption, MAC access control, or closed network operation Computer Computer Computer Laptop Wireless LAN PDA

Firewall

The SBG900 firewall protects the SBG900 LAN from undesired attacks and other intrusions from the Internet. It provides an advanced integrated stateful-inspection firewall supporting intrusion detection, session tracking, and denial-of-service attack prevention. The firewall:
Maintains state data for every TCP/IP session on the OSI network and transport layers Monitors all incoming and outgoing packets, applies the firewall policy to each one, and screens for improper packets and intrusion attempts Provides comprehensive logging for all: User authentications Rejected internal and external connection requests Session creation and termination Outside attacks (intrusion detection)

You can configure the firewall filters to set rules for port usage. For information about choosing a predefined firewall policy template, see Setting the Firewall Policy.
A de-militarized zone (DMZ) is one or more computers logically located outside the firewall between an SBG900 LAN and the Internet. A DMZ prevents direct access by outside users to private data. For example, you can set up a Web server on a DMZ computer to enable outside users to access your website without exposing confidential data on your network. A DMZ can also be useful to play interactive games that may have a problem running through a firewall. You can leave a computer used for gaming only exposed to the Internet while protecting the rest of your network. For more information, see Gaming Configuration Guidelines.

Port Triggering

When you run an application that accesses the Internet, it typically initiates communications with a computer on the Internet. For some applications, especially gaming, the computer on the Internet also initiates communications with your computer. Because NAT does not normally allow these incoming connections:
The SBG900 has preconfigured port triggers for common applications. If needed, you can configure additional port triggers on the Gateway > PORT TRIGGERS custom Page.

Wireless Security

Because WLAN data is transmitted using radio signals, it may be possible for an unauthorized person to access your WLAN unless you prevent them from doing so. To prevent unauthorized eavesdropping of data transmitted over your LAN, you must enable wireless security. The default SBG900 settings neither provide security for transmitted data nor protect network data from unauthorized intrusions. The SBG900 provides the following wireless security measures, which are described in Setting Up Your Wireless LAN:
To prevent unauthorized eavesdropping, you must encrypt data transmitted over the wireless interface using one of: If all of your wireless clients support Wi-Fi Protected Access (WPA) encryption, we recommend using WPA (see Configuring WPA on the SBG900 and Configuring a Wireless Client for WPA). Otherwise, configure a Wired Equivalency Privacy (WEP) key on the SBG900 and each WLAN client (see Configuring WEP on the SBG900 and Configuring a Wireless Client for WEP).
To protect LAN data from unauthorized intrusions, you can restrict WLAN access to computers having one or both of: Known MAC addresses (see Configuring a MAC Access Control List on the SBG900) The same unique network name (ESSID) as the SBG900 (see Configuring the Wireless Network Name on the SBG900 and Configuring a Wireless Client with the Network Name (ESSID))

Gaming Configuration Guidelines
The following subsections provide information about configuring the SBG900 firewall and DMZ for gaming.
Configuring the Firewall for Gaming
By default, the SBG900 firewall is disabled. If, as recommended, you enable the firewall, refer to the games documentation to ensure that the necessary ports are open for use by that game. The pre-defined SBG900 firewall policies affect Xbox LiveTM as follows:
Low Medium or high Xbox Live data can pass through the firewall. No user action is required. To enable Xbox Live traffic to pass, you must configure: Choose Custom on the Firewall > POLICY basic Page UDP 88:88 and UDP/TCP 3074:3074 on the Firewall > POLICY advanced Page
Configuring Port Triggers
Because the SBG900 has pre-defined port triggers for games using any of the following applications, no user action is required to enable them:
DirectX 7 and DirectX 8 MSN Games by Zone.com Battle.net
For a list of games supported by Battle.net, visit http://www.battle.net. You may need to create custom port triggers to enable other games to operate properly. If you set custom port triggers and enable the firewall, you must customize the firewall to allow traffic through those ports. To create custom port triggers, use the Gateway > PORT TRIGGERS custom Page.
Configuring a Gaming DMZ Host Caution!
The gaming DMZ host is not protected by the firewall. It is open to communication or hacking from any computer on the Internet. Consider carefully before configuring a device to be in the DMZ.
Some games and game devices require one of:
The use of random ports The forwarding of unsolicited traffic
For example, to connect a PlayStation 2 for PS2 online gaming, designate it as the gaming DMZ host because the ports required vary from game to game. For these games, we recommend configuring the gaming computer or device as a gaming DMZ device. To configure a gaming DMZ device, on the Gateway > LAN dhcp leases Page:
Reserve a private IP address for the computer or game device MAC address. Designate the device as a DMZ device.
You can reserve IP addresses for multiple devices, but only one can be designated as the gaming DMZ at once.

Configuring the Gateway

This section describes the Gateway configuration pages in the SBG900 Setup Program:
Gateway > STATUS Page Gateway > WAN Page Gateway > LAN nat config Page Gateway > LAN dhcp server config Page Gateway > LAN dhcp leases Page Gateway > PORT FORWARDING status Page Gateway > PORT FORWARDING config Page Gateway > PORT TRIGGERS predefined Page Gateway > PORT TRIGGERS custom Page Gateway > LOG Page

(Gaming) DMZ Host

Gateway > LAN dhcp leases page fields (continued) Field
RESERVE NEW IP ADDRESS MAC Address IP Address
You can reserve up to 32 IP addresses assigned by the SBG900 DHCP server for specific LAN clients. For example, to ensure that they always receive the same private IP address, you can reserve IP addresses for a private FTP server or gaming DMZ device. Type the MAC address of the DHCP client for which a reserved IP address is required. The format is 16 hexadecimal numerals. Sets the host portion of the reserved IP address for the LAN client having the specified MAC address. When the LAN client requests an IP address, the SBG900 DHCP server assigns the client this IP address. If your ISP requires a hostname to access their network, enter the hostname provided to you in the Host Name field. Click Add to reserve a new IP address.

Host Name Add

CURRENTLY RESERVED Displays all DHCP clients having reserved IP addresses. IP ADDRESSES MAC Address IP Address Host Name Method Delete Delete Displays the client MAC address. Displays its reserved IP address Displays its host name. Displays dynamic and static lease status. Add or delete dynamic or static lease status in this field. Select this box to designate the reserved IP address for deletion. Click this button to remove the reserved IP addresses for clients designated by the Delete box.
Gateway > PORT FORWARDING status Page
Use this page to display the configured port forwarding entries on the SBG900 LAN. The fields are the same as on the Gateway > PORT FORWARDING config Page:
Gateway > PORT FORWARDING config Page
Use this page to configure up to 32 virtual servers:
Gateway > PORT FORWARDING config page fields Field
ADD NEW PORT FORWARDING ENTRY Template
You can configure up to 32 virtual servers. If you select Custom, you must set the Name, Port Start, Port End, and LAN IP Address. If you select Custom, you must set the Name, Port Start, Port End, and LAN IP Address. If you select a predefined template such as HTTP or FTP, the Name, Port Start, Port End values are provided. You only need to enter LAN IP Address and change default values only if necessary. Type a unique identifier for the custom virtual server. The typical practice is to use the protocol as a unique identifier (for example ftp). Sets the LAN internal interface port or the start of a port range. Inbound Internet connection requests are statically mapped to this port. The ports used by some common applications are: FTP HTTP NTP Secure Shell SMTP e-mail Telnet 20, 25 23

10 Select Internet Protocol (TCP/IP) and click Properties to display the Internet Protocol (TCP/IP) Properties

window:

11 Verify that the settings are correct, as shown above. 12 Click OK to close the TCP/IP Properties window. 13 Click OK to close the Local Area Connection Properties window.
Verifying the IP Address in Windows 95, Windows 98, or Windows Me

To check the IP address:

On the Windows Desktop, click Start. Select Run. The Run window is displayed. Type winipcfg.exe and click OK. The IP Configuration window is displayed. The Ethernet Adapter Information field will vary depending on the system, as shown in the following examples:
The values for Adapter Address, IP Address, Subnet Mask, and Default Gateway on the PC will be different than in the images. In Windows 98, if Autoconfiguration is displayed before the IP Address as in the following image, call your service provider.
Select the adapter name the Ethernet card or USB device. Click Renew. Click OK after the system displays an IP address.
If after performing this procedure the computer cannot access the Internet, call your cable provider for help.
Verifying the IP Address in Windows 2000 or Windows XP
On the Windows Desktop, click Start. Select Run. The Run window is displayed. Type cmd and click OK to display a command prompt window. Type ipconfig and press ENTER to display the IP configuration. A display similar to the following indicates a normal configuration:
If an Autoconfiguration IP Address is displayed as in the following window, there is an incorrect connection between the PC and the SBG900 or there are cable network problems. Check the cable connections and determine if you can view cable-TV channels on your television:
After verifying the cable connections and proper cable-TV operation, renew the IP address.

To renew the IP address:

Type ipconfig /renew and press ENTER. If a valid IP address is displayed as shown, Internet access should be available.
Type exit and press ENTER to return to Windows.
Setting Up Your Wireless LAN
You can use the SBG900 as an access point for a wireless LAN (WLAN) without changing its default settings.
To prevent unauthorized eavesdropping or access to WLAN data, you must enable wireless security. The default SBG900 settings provide no wireless security. After your WLAN is operational, be sure to enable wireless security.

Configuring the Wireless Clients
For each wireless client computer (station), install the wireless adapter such as a Motorola WN825G, WPCI810G, or WU830G following the instructions supplied with the adapter. Be sure to:
Insert the CD-ROM for the adapter in the CD-ROM drive on the client. Install the device software from the CD. Insert the adapter in the PCMCIA or PCI slot or connect it to the USB port.

Step 2 Step 1 Step 2

Step 3 Step 1
Configure the adapter to obtain an IP address automatically. The Motorola wireless adapters are supplied with a client configuration program called Wireless Client Manager, which is installed in the Windows Startup group. On a PC with Wireless Client Manager installed, the the icon to launch the utility. icon is displayed on the Windows task bar. Double-click
You may need to do the following to use a wireless client computer to surf the Internet:

If You Performed

Configuring WPA on the SBG900 Configuring WEP on the SBG900 Configuring the Wireless Network Name on the SBG900 Configuring a MAC Access Control List on the SBG900
On Each Client, You Need to Perform
Configuring a Wireless Client for WPA Configuring a Wireless Client for WEP Configuring a Wireless Client with the Network Name (ESSID) No configuration on client required
Configuring a Wireless Client for WPA
If you enabled WPA and set a PSK Passphrase by Configuring WPA on the SBG900, you must configure the same passphrase (key) on each wireless client. The SBG900 cannot authenticate a client if:
WPA is enabled on the SBG900 but not on the client The client passphrase does not match the SBG900 PSK Passphrase
For information about the WPA support in Windows XP, visit:
WPA Wireless Security for Home Networks Overview of the WPA Wireless Security Update in Windows XP http://www.microsoft.com/WindowsXP/expertzone/columns/ bowman/03july28.asp http://support.microsoft.com/?kbid=815485
You can download the Microsoft Windows XP Support Patch for WPA from http://www.microsoft.com/downloads/details.aspx?FamilyId=009D8425-CE2B-47A4-ABEC-274845DC9E91&disp laylang=en.

light is off

Cannot send or receive data
Problems related to unsuccessful USB driver installation The SBG900 Setup Program will not start A wireless client(s) cannot send or receive data
The Web cache is full or close to full. In Internet Explorer, choose Internet Options from the Tools menu, and click the General tab. Click Delete Files and Clear History. Then try Starting the SBG900 Setup Program again. Perform the first four checks in Cannot send or receive data. Check the Security Mode setting on the Wireless > SECURITY basic Page: If you enabled WPA and configured a passphrase on the SBG900, be sure each affected wireless client has the identical passphrase. If this does not solve the problem, check whether the wireless client supports WPA. If you enabled WEP and configured a key on the SBG900, be sure each affected wireless client has the identical WEP key. If this does not solve the problem, check whether the client wireless adapter supports the type of WEP key configured on the SBG900. To temporarily eliminate the Security Mode as a potential issue, select None and click Apply. After resolving your problem, be sure to re-enable wireless security. On the Wireless > SECURITY advanced Page: Check whether you turned on Disable ESSID Broadcast. If it is on, be sure the network name (ESSID) on each affected wireless client is identical to the ESSID on the SBG900. Check whether you enabled Allow Only Listed Stations Access. If you did, be sure the MAC address for each affected wireless client is correctly listed. For detailed information, see Setting Up Your Wireless LAN. On the Wireless > SECURITY basic Page check whether the WPA Encryption type is TKIP. If all of your wireless clients support AES, change the WPA Encryption to AES as described in step 4 in Configuring WPA on the SBG900.
Slow wireless transmission speed with WPA enabled
Front-Panel Lights and Error Conditions
RECEIVE SEND ONLINE POWER
Turns Off During Startup If
The downstream receive channel cannot be acquired The upstream send channel cannot be acquired IP registration is unsuccessful The SBG900 is not properly plugged into the power outlet
Turns Off During Normal Operation If
The downstream channel is lost The upstream channel is lost The IP registration is lost The SBG900 is unplugged

Contact Us

In the United States and Canada, if you need assistance while working with the SBG900 and related equipment supplied by Motorola:
If you rent or lease your SBG900 If you own your SBG900 Contact your cable service provider. Call 1-877-466-8646 for technical and warranty support. Support is available 24 hours a day, seven days a week.
For information about customer service, technical support, or warranty claims, see the Regulatory, Safety, Software License, and Warranty Information card provided with the SURFboard SBG900. For answers to typical questions, see Frequently Asked Questions. For more information about Motorola consumer cable products, education, and support, visit http://broadband.motorola.com/consumers.

American Wire Gauge (AWG) ANSI

ANX ARP

asynchronous timing
attenuation authentication authorization auto-MDIX
bandwidth Baseline Privacy baud BCP BER binary bit rate BPKM The transmission capacity of a medium in terms of a range of frequencies. Greater bandwidth indicates the ability to transmit more data over a given period of time. An optional feature that encrypts data between the CMTS and the cable modem or gateway. Protection of service is provided by ensuring that a cable modem or gateway, uniquely identified by its MAC address, can only obtain keys for services it is authorized to access. The analog signaling rate. For complex modulation modes, the digital bit rate is encoded in multiple bits per baud, for example, 64 QAM encodes 6 bits per baud and 16 QAM encodes 4 bits per baud. Binary Communication Protocol The bit error rate is the ratio of the number of erroneous bits or characters received from some fixed number of bits transmitted. A numbering system that uses two digits, 0 and 1. The number of bits (digital 0s and 1s) transmitted per second in a communications channel. It is usually measured in bits per second bps. Baseline Protocol Key Management encrypts data flows between a cable modem or gateway and the CMTS. The encryption occurs after the cable modem or gateway registers to ensure data privacy across the RF network. bits per second An OSI layer 2 networking device that connects two LANs using similar protocols. It filters frames based on the MAC address to reduce the amount of traffic. A bridge can be placed between two groups of hosts that communicate a lot together, but not so much with the hosts in the other group. The bridge examines the destination of each packet to determine whether to transmit it to the other side. See also switch. High bandwidth network technology that multiplexes multiple, independent carriers to carry voice, video, data, and other interactive services over a single cable. A communications medium that can transmit a relatively large amount of data in a given time period. A frequently used synonym for cable TV that can describe any technology capable of delivering multiple channels and services. Simultaneous transmission to multiple network devices; a protocol mechanism supporting group and universal addressing. See also multicast and unicast.

bps bridge

broadband

broadcast

CableHome A project of CableLabs and technology suppliers to develop interface specifications for extending high-quality cable-based services to home network devices. It addresses issues such as device interoperability, QoS, and network management. CableHome will enable cable service providers to offer more services over HFC. It will improve consumer convenience by providing cable-delivered services throughout the home. A research consortium that defines the interface requirements for cable modems and acknowledges that tested equipment complies with DOCSIS. A device installed at a subscriber location to provide data communications over an HFC network. Unless otherwise specified, all references to cable modem in this documentation refer to DOCSIS or Euro-DOCSIS cable modems only. File containing operational parameters that a cable modem or gateway downloads from the cable provider TFTP server during registration.

default route dB dBc DBm dBmV demodulation DHCP

distortion DMZ

DOCSIS

domain name

dotted-decimal format
Method of representing an IP address or subnet mask using four decimal numbers called octets. Each octet represents eight bits. In a class C IP address, the octets are network.network.network.host. The first three octets together represent the network address and the final octet is the host address. In the SBG900 LAN default configuration, 192.168.100 represents the network address. In the final octet, the host address can be from 2 to 254. To copy a file from one computer to another. You can use the Internet to download files from a server to a computer. A DOCSIS or Euro-DOCSIS cable modem or gateway downloads its configuration file from a TFTP server during start-up. In a cable data network, the direction of data received by the computer from the Internet. Software that enables a computer to interact with a network or other device. For example, there are drivers for printers, monitors, graphics adapters, modems, Ethernet, USB, HPNA, and many others. Digital Subscriber Line Direct Sequence Spread Spectrum is an IEEE 802.11b RF modulation protocol. An IP address that is temporarily leased to a host by a DHCP server. The opposite of static IP address.

download

downstream driver DSL DSSS dynamic IP address
encapsulate encode encrypt endpoint ESSID To include data into some other data unit to hide the format of the included data. To alter an electronic signal so that only an authorized user can unscramble it to view the information. To encode data. A VPN endpoint terminates the VPN at the router so that computers on the SBG900 LAN do not need VPN client software to tunnel through the Internet to the VPN server. The Extended Service Set Identifier or network name is a unique identifier that wireless clients use to associate with an access point to distinguish between multiple WLANs in the same area. All clients on a WLAN must have the same ESSID as the access point. On the SBG900, you can set the ESSID on the Wireless > NETWORK page. The most widely used LAN type, also known as IEEE 802.3. The most common Ethernet networks are 10Base-T, which provide transmission speeds up to 10 Mbps, usually over unshielded, twisted-pair wire terminated with RJ-45 connectors. Fast Ethernet (100Base-T) provides speeds up to 100 Mbps. Base means baseband technology and T means twisted pair cable. Each Ethernet port has a physical address called the MAC address. A tComLabs standard that is DOCSIS adapted for use in Europe. A message generated by a device to inform an operator or the network management system that something has occurred. A connection point in a computer where a circuit board can be inserted to add new capabilities. Extensible Authentication Protocol

packetswitched PacketCable
pass-through PAT PCI PCMCIA

PDA PDU

periodic ranging physical layer

piggybacking PING

point-to-point POTS port

port mirroring

port triggering PPP PPTP private IP address protocol provisioning PSTN public IP address
A mechanism that allows incoming communication with specified applications. Primarily used for gaming applications. Point-to-Point Protocol is used to transport other protocols, typically for simple links over serial lines. It is most commonly used to access the Internet with a dial-up modem. Point-to-Point Tunneling Protocol encapsulates other protocols. It is a new technology to create VPNs developed jointly by several vendors. An IP address assigned to a computer on the SBG900 LAN by the DHCP server on the SBG900 for a specified lease time. Private IP addresses are used by the SBG900 LAN only; they are invisible to devices on the Internet. See also public IP address. A formal set of rules and conventions for exchanging data. Different computer types (for example PC, UNIX, or mainframe) can communicate if they support common protocols. The process of autodiscovery or manually configuring a cable modem on the CMTS. The public switched telephone network is the traditional circuit-switched, voice-oriented telephone network. See also POTS. The IP address assigned to the SBG900 by the cable provider. A public IP address is visible to devices on the Internet. See also private IP address.
QAM Quadrature Amplitude Modulation uses amplitude and phase modulation to encode multiple bits of data in one signaling element. QAM achieves faster data transfer than amplitude or phase modulation alone, but the signal is more prone to errors caused by noise. QAM requires a transmission circuit with a higher CNR than alternate modulation formats such as QPSK. Two types of QAM are: 16 QAM encodes four bits per symbol as one of 16 possible amplitude and phase combinations. 64 QAM encodes six bits per symbol as one of 64 possible amplitude and phase combinations. Quadrature Phase Shift Key (QPSK) modulation sends two bits of information per symbol period with one symbol 90 degrees out of phase with other symbols. The four constellation points represented by the coordinates (0,0 0,1 1,0 1,1) represent the four possible combinations. Quality of service describes the priority, delay, throughput, and bandwidth of a connection.
RAS registration return loss RF RFC RJ-11 RJ-45 ROM router Remote Access Server How a cable modem makes itself known to the CMTS. The cable modem configuration file and authorization are verified and the CoS is negotiated. A measurement of the quality of the match of the device to the cable system. Return loss is the ratio of the amount of power reflected by the device. A return loss of 20 dB or greater is preferred. Radio Frequency signals used by the CMTS transmitter and receiver to send data over HFC. The carrier is modulated to encode the digital data stream for transmission across the cable network. Request for Comments published on the IETF or other websites. Many RFCs become international standards. The most common type of connector for household or office phones. An 8-pin modular connector; the most common connector type for 10Base-T or 100Base-T Ethernet networks. read-only memory On IP networks, a device connecting at least two networks, which may or may not be similar. A router is typically located at a gateway between networks. A router operates on OSI network layer 3. It filters packets based on the IP address, examining the source and destination IP addresses to determine the best route on which to forward them. A router is often included as part of a network switch. A router can also be implemented as software on a computer. A table listing available routes that is used by a router to determine the best route for a packet. request to send

routing table RTS

server scope In a client/server architecture, a dedicated computer that supplies files or services such as file transfer, remote login, or printing to clients. The set of IP addresses that a DHCP server can lease to clients.
service provider A company providing cable data services to subscribers. SID A service ID is a unique 14-bit identifier the CMTS assigns to a cable modem or gateway that identifies the traffic type it carries (for example, data or voice). The SID provides the basis for the CMTS to allocate bandwidth to the cable modem and implement CoS. service data unit small and medium enterprise Simple Mail Transfer Protocol is a standard Internet protocol for transferring e-mail. Simple Network Management Protocol is a standard to monitor and manage networks and network devices. Data is exchanged using PDU messages. small office home office A specified range of frequencies used for transmission of electromagnetic signals. An allocation of portions of the available electromagnetic spectrum for specific services, such as AM, FM, or personal communications. A device that divides the signal from an input cable between two or more cables. A type of firewall that tracks each connection traversing all firewall interfaces to ensure validity. In addition to examining the source and destination in the packet header based on static rules, a stateful inspection firewall: Examines packet headers on context established by previous packets that traversed the firewall Monitors the connection state and saves it in a table Closes ports until a connection to a specific port is requested May examine the packet contents up through the application layer to determine more than just the source and destination A stateful-inspection firewall is more advanced than a static filter firewall. A type of firewall that examines the source and destination in the packet header based on administrator-defined rules only. An IP address that is permanently assigned to a host. Normally, a static IP address must be assigned manually. The opposite of dynamic IP address. A manually-defined route. IEEE 802.11b term for wireless client. A home or office user who accesses television, data, or other services from a cable provider. A bit mask that is logically ANDed with the destination IP address of a packet to determine the network address. A router routes packets using the network address. A part of a network; commonly abbreviated subnet. When subnetting is used, the host portion of the IP address is divided into a subnet and host number. Hosts and routers use the subnet mask to identify the bits used for the network and subnet number. On an Ethernet network, a switch filters frames based on the MAC address, in a manner similar to a bridge. A switch is more advanced because it can connect more than two segments.

SDU SME SMTP SNMP SOHO spectrum spectrum allocation splitter stateful inspection
static filter static IP address static route station subscriber subnet mask subnetwork

switch

symbol rate
Also known as baud rate, is a measure of the number of times per second a signal in a communications channel varies, or makes a transition between states (states being frequencies, voltage levels or phase angles). Usually measured in symbols per second (sps). A de-facto UNIX standard for logging system events.

SYSLOG

TBCP TCP Tagged Binary Communication Protocol Transmission Control Protocol on OSI transport layer four, provides reliable transport over the network for data transmitted using IP (network layer three). It is an end-to-end protocol defining rules and procedures for data exchange between hosts on top of connectionless IP. TCP uses a timer to track outstanding packets, checks error in incoming packets, and retransmits packets if requested. The Transmission Control Protocol/Internet Protocol suite provides standards and rules for data communication between networks on the Internet. It is the worldwide internetworking standard and the basic communications protocol of the Internet. Trivial File Transfer Protocol is a very simple protocol used to transfer files. Temporal Key Integrity Protocol A method to enable all hosts on the wired Ethernet LAN, WLAN, and USB connection to communicate as if they were all connected to the same physical network. Layer of the OSI concerned with protocols for error recognition and recovery. This layer also regulates information flow. Electronic path over which data is transmitted. The time to live is the number of routers (or hops) a packet can traverse before being discarded. When a router processes a packet, it decreases the TTL by 1. When the TTL reaches zero, the packet is discarded. To place packets inside other packets to send over a network. The protocol of the enclosing packet is understood by each endpoint, or tunnel interface, where the packet enters and exits the network. VPNs rely on tunneling to create a secure network. Tunneling requires the following protocol types: A carrier protocol, such as TCP, used by the network that the data travels over An encapsulating protocol, such as IPSec, L2F, L2TP, or PPTP, that is wrapped around the original data A passenger protocol, such as IP, for the original data A cable system that can transmit signals in both directions to and from the headend and the subscriber.

TCP/IP

UTP VLAN VoIP

WAN WAP WECA
WiFi Wireless Cable Modem Gateway WLAN world wide web WPA

Software License

Motorola, Inc., Broadband Communications Sector (Motorola), 101 Tournament Drive, Horsham, PA 19044 IMPORTANT: PLEASE READ THIS SOFTWARE LICENSE (LICENSE) CAREFULLY BEFORE YOU INSTALL, DOWNLOAD OR USE ANY APPLICATION SOFTWARE, USB DRIVER SOFTWARE, FIRMWARE AND RELATED DOCUMENTATION (SOFTWARE) PROVIDED WITH MOTOROLAS CABLE DATA PRODUCT (THE CABLE DATA PRODUCT). BY USING THE CABLE DATA PRODUCT AND/OR INSTALLING, DOWNLOADING OR USING ANY OF THE SOFTWARE, YOU INDICATE YOUR ACCEPTANCE OF EACH OF THE TERMS OF THIS LICENSE. UPON ACCEPTANCE, THIS LICENSE WILL BE A LEGALLY BINDING AGREEMENT BETWEEN YOU AND MOTOROLA. THE TERMS OF THIS LICENSE APPLY TO YOU AND TO ANY SUBSEQUENT USER OF THIS SOFTWARE. IF YOU DO NOT AGREE TO ALL OF THE TERMS OF THIS LICENSE (I) DO NOT INSTALL OR USE THE SOFTWARE AND (II) RETURN THE CABLE DATA PRODUCT AND THE SOFTWARE (COLLECTIVELY, PRODUCT), INCLUDING ALL COMPONENTS, DOCUMENTATION AND ANY OTHER MATERIALS PROVIDED WITH THE PRODUCT, TO YOUR POINT OF PURCHASE OR SERVICE PROVIDER, AS THE CASE MAY BE, FOR A FULL REFUND. The Software includes associated media, any printed materials, and any on-line or electronic documentation, as well as any updates, revisions, bug fixes, or drives obtained by you from Motorola or your service provider. Software provided by third parties may be subject to separate end-user license agreements from the manufacturers of such Software. The Software is never sold. Motorola licenses the Software to the original customer and to any subsequent licensee for personal use only on the terms of this License. Motorola and its 3rd party licensors retain the ownership of the Software. You may: USE the Software only in connection with the operation of the Product. TRANSFER the Software (including all component parts and printed materials) permanently to another person, but only if the person agrees to accept all of the terms of this License. If you transfer the Software, you must at the same time transfer the Product and all copies of the Software (if applicable) to the same person or destroy any copies not transferred. TERMINATE this License by destroying the original and all copies of the Software (if applicable) in whatever form. You may not: (1) Loan, distribute, rent, lease, give, sublicense or otherwise transfer the Software, in whole or in part, to any other person, except as permitted under the TRANSFER paragraph above. (2) Copy or translate the User Guide included with the Software, other than for personal use. (3) Copy, alter, translate, decompile, disassemble or reverse engineer the Software, including but not limited to, modifying the Software to make it operate on non-compatible hardware. (4) Remove, alter or cause not to be displayed, any copyright notices or startup message contained in the Software programs or documentation. (5) Export the Software or the Product components in violation of any United States export laws. The Product is not designed or intended for use in on-line control of aircraft, air traffic, aircraft navigation or aircraft communications; or in design, construction, operation or maintenance of any nuclear facility. MOTOROLA AND ITS 3RD PARTY LICENSORS DISCLAIM ANY EXPRESS OR IMPLIED WARRANTY OF FITNESS FOR SUCH USES. YOU REPRESENT AND WARRANT THAT YOU SHALL NOT USE THE PRODUCT FOR SUCH PURPOSES. Title to this Software, including the ownership of all copyrights, mask work rights, patents, trademarks and all other intellectual property rights subsisting in the foregoing, and all adaptations to and modifications of the foregoing shall at all times remain with Motorola and its 3rd party licensors. Motorola retains all rights not expressly licensed under this License. The Software, including any images, graphics, photographs, animation, video, audio, music and text incorporated therein is owned by Motorola or its 3rd party licensors and is protected by United States copyright laws and international treaty provisions. Except as otherwise expressly provided in this License, the copying, reproduction, distribution or preparation of derivative works of the Software, any portion of the Product or the documentation is strictly prohibited by such laws and treaty provisions. Nothing in this License constitutes a waiver of Motorolas rights under United States copyright law. This License and your rights regarding any matter it addresses are governed by the laws of the Commonwealth of Pennsylvania, without reference to conflict of laws principles. THIS LICENSE SHALL TERMINATE AUTOMATICALLY if you fail to comply with the terms of this License. Motorola is not responsible for any third party software provided as a bundled application, or otherwise, with the Software. U.S. GOVERNMENT RESTRICTED RIGHTS The Product and documentation is provided with RESTRICTED RIGHTS. The use, duplication or disclosure by the Government is subject to restrictions as set forth in subdivision (c)(1)(ii) of The Rights in Technical Data and Computer Software clause at 52.227-7013. The contractor/manufacturer is Motorola, Inc., Broadband Communications Sector, 101 Tournament Drive, Horsham, PA 19044.