User Guide CMAX6000 Wireless AX DOCSIS 3.
CMAX6000 First Edition March 2020 Copyright © 2020 ASUSTeK Computer Inc. All Rights Reserved. No part of this manual, including the products and software described in it, may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means, except documentation kept by the purchaser for backup purposes, without the express written permission of ASUSTeK Computer Inc. (“ASUS”).
Contents 1 Getting to know your cable modem router................................ 5 1.1 1.2 1.3 1.4 1.5 Package contents..................................................................................................... 5 Your cable modem router..................................................................................... 5 Positioning your router.......................................................................................... 5 Product label..............................................
.2 Setting up Parental Control................................................................................28 4.2.1 Managed Sites ......................................................................................................... 29 4.2.2 Managed Services .................................................................................................. 30 4.2.3 Managed Devices ................................................................................................... 32 4.2.4 Reports .....
1 1.1 1.2 1.3 1.4 Getting to know your cable modem router Package contents Your cable modem router Positioning your router Product label The product label at the bottom of your cable modem router contains the default Wi-Fi network name (SSID), Wi-Fi password, login information for the web graphical user interface (web GUI), serial number, MAC address, and other information. 1.
2 Configuring the General Settings 2.1 Internet service Visit your ISP’s website and follow the on-screen instructions to activate your Internet service. If you subscribed to automatic IP (DHCP) service, the Internet is accessible now. NOTES: • Your ISP’s contact information may change. Visit your ISP’s website or check your Internet service billing statement for the latest contact information. • If your router still does not connect to the Internet, contact your ISP and do the following: 1.
2.2 Basic Network Setup To set up your CMAX6000 settings: 1. Launch your web browser and go to Enter the default IP address, router.asus.com or http://10.0.0.1. 2. Enter default login name “admin” and password “password” on the login screen. 3. Click Sign In to log into the software configuration interface. 4. Set up a new password when prompted. 5. Click Save and log into the software configuration interface with your new password.
3 Setting up Your Gateway 3.1 At a Glance This is the first screen displayed when you successfully log into the web management interface. The At a Glance of the Gateway section allows you to view the network connectivity and Wi-Fi connection status, to configure your device operation mode as router or bridge, and to save/upload cable modem router settings. 3.
3.2.1 Status The Status page displays device information and Cable Network Internet/Wireless/LAN connection status connected to your network. To view your network connection status: 1. From the navigation panel, go to Gateway > Connection tab. 2. Select Status from the dropdown menu of the Connection section. 3.2.2 Cable Network The Cable Network screen displays the settings of WAN connection status.
To view your WAN connection status: 1. From the navigation panel, go to Gateway > Connection tab. 2. Select Cable Network from the dropdown menu of the Connection section. 3.2.3 Local IP Configuration Your router uses DHCP to assign IP addresses automatically on your network. The Local IP Configuration screen allows you to modify the LAN IP settings and specify the DHCP IP address range and lease time for the clients on your network.
3.2.4 Wi-Fi The CMAX6000 also operates as a wireless access point, allowing wireless computers to communicate with each other. Private Wi-Fi Network To configure the private wireless settings: 1. From the navigation panel, go to Gateway > Connection tab. 2. Select Wi-Fi from the dropdown menu. 3. Click the edit icon to configure the wireless settings. NOTE: You can set up different wireless security settings for 2.4 GHz and 5 GHz bands.
4. Select On for the Wireless Network to enable the wireless function. 5. Assign a unique name containing up to 32 characters for your SSID (Service Set Identifier) network name to identify your wireless network. Wi-Fi devices can identify and connect to the wireless network via your assigned SSID. The SSID information banner are updated on the Status page once new SSIDs are saved to the settings. 6.
IMPORTANT! The IEEE 802.11n/ac/ax standard prohibits using High Throughput with WPA/WPA2-PSK with TKIP as the unicast cipher. If you use these encryption methods, your data rate will drop to IEEE 802.11a/IEEE 802.11g connection. Only WPA/WPA2PSK with AES authentication supports 802.11 n/ac/ax operation mode. 8. Select the operating channel for your wireless router. Select Auto to allow the wireless router to automatically select the channel that has the least amount of interference. 9.
3.2.4.1 WPS WPS (Wi-Fi Protected Setup) is a wireless security standard that allows you to easily connect devices to a wireless network. You can configure the WPS function via the PIN code or WPS button. NOTE: Ensure that the devices support WPS. To enable WPS on your wireless network: 1. From the navigation panel, go to Gateway > Connection tab. 2. Select Wi-Fi from the dropdown menu. 3. Click on the Add Wi-Fi Protected Setup (WPS) Client button. 4.
a. Click Pair or press the WPS button found at the rear of the wireless router. b. Press the WPS button on your wireless device. This is normally identified by the WPS logo. Note: Check your wireless device or its user manual for the location of the WPS button. 8. To set up WPS using the PIN Method, follow these steps: a. Locate the WPS PIN code on your wireless device’s user manual or on the device itself.
b. Key in the client PIN code on the text box. c. Click Pair to put your wireless router into WPS survey mode. The router’s LED indicators quickly flash three times until the WPS setup is completed. 3.2.4.2 Guest Network The Guest Network provides temporary visitors with Internet connectivity via access to separate SSIDs or networks without providing access to your private network. To configure the guest network settings: 1. From the navigation panel, go to Gateway > Connection tab. 2.
to the wireless network via your assigned SSID. The SSID information banner are updated on the Status page once new SSIDs are saved to the settings. 6. Select any of these wireless Mode options to determine the types of wireless devices that can connect to your wireless router: • 2.4 GHz: 802.11 b/g, 802.11 b/g/n, 802.11 b/g/n/ax • 5 GHz: 802.11a, 802.11a/n/ac, 802.11a/n/ac/ax 7. From the Security Mode dropdown list, select the authentication method for your wireless security.
8. Select the operating channel for your wireless router. Select Auto to allow the wireless router to automatically select the channel that has the least amount of interference. 9. Select any of these Channel Bandwidth to accommodate higher transmission speeds: 2.4 GHz/5 GHz bands: • 20 MHz • 20/40 MHz 5 GHz bands: • 20/40/80 MHz (default) • 20/40/80/160 MHz 10. Enter the Network Password. Passwords can contain from 8~20 alphanumeric characters (A-Z, 0-9) and are case sensitive. 11.
3.2.4.3 MAC Filter Setting Wireless MAC filter provides control over packets transmitted to a specified MAC (Media Access Control) address on your wireless network. To set up the Wireless MAC filter: 1. From the navigation panel, go to Gateway > Connection tab. 2. Select Wi-Fi from the dropdown menu. 3. In the SSID field, select the network name that you want to use for the Wireless MAC filter. 4. In the MAC Filtering Mode dropdown list, select either Allow or Deny.
3.3 Firewall The wireless router can serve as a hardware firewall for your network. NOTE: The Firewall feature is enabled Typical Security (Medium) by default. 3.3.1 IPv4 Firewall / IPv6 Firewall By default, the IPv4 firewall blocks all P2P (peer-to-peer) applications and pings to the router . The IPv6 firewall function blocks all unsolicited incoming traffic. To set up a network service filter by blocking specified services: 1. From the navigation panel, go to Gateway > Firewall tab. 2.
3.4 Software The Software screen displays firmware version number and device model number. 3.5 Hardware 3.5.1 System Hardware The System Hardware screen displays device model number and hardware version number, and serial number, as well as information on the DRAM and Flash memory status.
To view your hardware information: 1. From the navigation panel, go to Gateway > Hardware tab. 2. Select System Hardware from the dropdown menu of the Hardware section. 3.5.2 LAN The LAN screen displays LAN connection status and operation speed information on DHCP clients connected to your network. To view your LAN status: 1. From the navigation panel, go to Gateway > Hardware tab. 2. Select LAN from the dropdown menu of the Hardware section.
3.5.3 Wireless The Wireless screen shows wireless status on your network. To view your Wireless status: 1. From the navigation panel, go to Gateway > Hardware tab. 2. Select Wireless from the dropdown menu of the Hardware section. 3.6 Wizard The setup Wizard allows you to quickly set up your security settings.
To change your login password and Wi-Fi security: 1. From the navigation panel, go to Gateway > Wizard tab. 2. Type your current login password. 3. Set a new password and type the new password again. Passwords can contain from 8~20 alphanumeric characters (A-Z, 0-9) and are case sensitive. 4. Click the checkbox in the Show Typed Password to conceal the password if you like to. 5. When done, click Next Step. 6.
4 Managing Network Clients 4.1 Connected Devices The connection status is displayed as the following screen. To manage your network clients: 1. From the navigation panel, click on Connected Devices. 2. On the Prefer Private Connection, select the edit icon to display your network client’s information. 3. When done, click Save.
4. To block a client’s access to your network, click on the block icon on the screen, then click Yes to block the client’s network access. 4.1.1 Reserved IP Some specific DHCP clients providing network server services require fixed IP addresses to be assigned to them. You can assign a static IP to a certain MAC address within your network. To assign a static IP to a certain network client: 1. From the navigation panel, click on Connected Devices. 2.
3. In the Wi-Fi Protected Setup (WPS) field, move the slider to ON. 4. In the WPS PIN Method field, move the slider to ON. 5. In the Connection Options, select Push Button or PIN Method. If you select Push Button, go to step 6. If you select PIN Method, go to step 7. 6. To set up WPS using the router’s WPS button, follow these steps: a. Click Pair or press the WPS button found at the rear of the wireless router. b. Press the WPS button on your wireless device. This is normally identified by the WPS logo.
4.2.1 Managed Sites To set up the Managed Sites: 1. From the navigation panel, go to Parental Control > Managed Sites tab. 2. Move the slider to ON to deny user access to specific web sites. 3. Click on the add icon and enter either a full URL address or just a Keyword.
4. Select the time rule on the screen to set the blocking schedule. 5. Move the slider to ON to activate the Always Block if you like to. 6. When done, click Save. 7. To allow a connected client to access Internet web sites, move the slider to ON on the Trusted Computers. 4.2.
To set up the Managed Services: 1. From the navigation panel, go to Parental Control > Managed Services tab. 2. Move the slider to ON to block application services. 3. Click on the add icon, define the appropriate rule settings of service name, protocols and port numbers for client PC services. 4. Select the time rule on the screen to set the blocking schedule. 5. Move the slider to ON to activate the Always Block if you like to. 6. When done, click Save. 7.
4.2.3 Managed Devices To set up the Managed Devices: 1. From the navigation panel, go to Parental Control > Managed Devices tab. 2. Move the slider to ON to enable the access control of your network clients. 3. Select the Access Type to Allow All or Block All for allowing or denying your client devices to access your network. 4. Click on the add icon to add a client device who will be denied access to your network. You may also key in the client’s MAC address in the Client MAC Address column.
5. Select the time rule on the screen to set the blocking schedule. 6. Move the slider to ON to activate the Always Block if you like to. 7. When done, click Save. 4.2.4 Reports To view the firewall filtering status: 1. From the navigation panel, go to Parental Control > Reports tab. 2. Select the access control types and time in the Report Filters field and click on the GENERATE REPORT button to display descriptive list of filtering schedule and rules defined. 3.
5 Configuring the Advanced Settings 5.1 Port Forwarding Port forwarding is a method to direct network traffic from the Internet to a specific port or a specific range of ports to a device or number of devices on your local network. Setting up Port Forwarding on your router allows PCs outside the network to access specific services provided by a PC in your network.
• Common Service: Select an external virtual server service. The router redirects the external service request to the appropriate server. • Service Type: Determine which type of service you want to access. • Server IPv4 Address: Key in the client’s LAN IPv4 address. • Server IPv6 Address: Key in the client’s LAN IPv6 address. NOTE: Internet users can access the service they need at the local address to which you redirect them. • Start Port: Enter the starting port number depending on the requested service.
• When done, click Save. 5.2 Port Triggering Port range triggering opens a predetermined incoming port for a limited period of time whenever a client on the local area network makes an outgoing connection to a specified port. Port triggering is used in the following scenarios: 36 • More than one local client needs port forwarding for the same application at a different time. • An application requires specific incoming ports that are different from the outgoing ports.
To set up Port Triggering: 1. From the navigation panel, go to Advanced > Port Triggering tab. 2. Move the slider to ON to enable Port Trigger. 3. Configure the following settings below. • Service Name: Enter a short name or description for the service. • Service Type: Select the protocol, TCP, or UDP. • Trigger Port From: Specify a starting trigger port number to open the incoming port. • Trigger Port To: Specify an end trigger port number to open the incoming port.
5.3 Remote Management HTTPS can be restricted to a subset of IP addresses. The router administrator can define a known PC, single IP address or range of IP addresses that are allowed to access the GUI with HTTPS. The opened port for SSL traffic can be changed from the default of 8181 at the same time as defining the allowed remote management IP address range. To set up remote access to your router: 1. From the navigation panel, go to Advanced > Remote Management tab. 2.
5.4 DMZ Virtual DMZ exposes one client to the Internet, allowing this client to receive all inbound packets directed to your Local Area Network. Inbound traffic from the Internet is usually discarded and routed to a specific client only if port forwarding or a port trigger has been configured on the network. In a DMZ configuration, one network client receives all inbound packets. Setting up DMZ on a network is useful when you need incoming ports open or you want to host a domain, web, or email server.
5.5 Device Discovery Device Discovery provides UPnP (Universal Plug and Play) function. It allows several devices (such as routers, televisions, stereo systems, game consoles, and cellular phone), to be controlled via an IP-based network with or without a central control through a gateway. UPnP connects PCs of all form factors, providing a seamless network for remote configuration and data transfer. Using UPnP, a new network device is discovered automatically.
3. Configure the following settings below. • Advertisement Period: This is the period (in minutes) of how often this wireless router will broadcast its UPnP information to all devices within its range. • Time to Live: This is the number (in hops ) of steps a packet is allowed to propagate before being discarded. • Zero Config: Move the slider to ON to allow for automatic discovery and configuration of a new network device. 4. When done, click Save.
6 Troubleshooting 6.1 Logs The Logs configuration allows you to set the display category and time for monitoring the system activity. To view the system log information: 1. From the navigation panel, go to Troubleshooting > Logs tab. 2. Select the log types and time in the Log Filters field, and click on the Show Logs button to display a list of filtering type and activity time defined. 3. Click on the Print/Download button to print/download the log reports.
6.2 Diagnostic Tools This tool allows you to test Internet connection status, ping test of network clients, and analyze network traffic. To test and display your Internet connection status: 1. From the navigation panel, go to Troubleshooting > Diagnostic Tools tab. 2. Click on the Test Connectivity button to retrieve information and display the packet contents of the Internet connection.
To check the IP Address of your network clients: 1. From the navigation panel, go to Troubleshooting > Diagnostic Tools tab. 2. Enter the IP address in the Check for IPv4 Address Results/ Check for IPv6 Address Results fields. 3. Click the check for IP Address button to execute the ping test and check the Internet connection. To trace the route of captured packets pass through your network: 1. Enter the destination IPv4 Address/ IPv6 Address in the Traceroute Results field. 2.
To use the Device Discovery for displaying available wireless access points (AP) within your network range: 1. From the navigation panel, go to Troubleshooting > Wi-Fi Spectrum Analyzer tab. 2. Choose one of scanned AP’s to connect to by clicking on the button on the screen for Wi-Fi connectivity. 6.4 Reset/Restore Gateway The Reset/Restore Gateway page allows you to configure your wireless router settings. To set up the settings: 1.
• RESET Wi-Fi ROUTER: To reset the Wi-Fi and Router functions of the router. Performing a reset by clicking this button will not change the configuration settings back to the factory default settings. • RESTORE Wi-Fi SETTINGS: To reset the Wi-Fi settings of your router back to the default settings. All of the userdefined Wi-Fi settings will be lost. • RESTORE FACTORY SETTINGS: To reset the router back to the original default settings. All of the user configurations and settings will be lost. 6.
3. Set a new password and type the new password again. Passwords can contain from 8~20 alphanumeric characters (A-Z, 0-9) and are case sensitive. 4. Click the checkbox in the Show Typed Password to conceal the password if you like to. 5. When done, click Save. 6.6 Feedback If your router does not connect to the Internet, do the following: 1. From the navigation panel, go to Troubleshooting > Feedback tab. 2. Click the Generate log and Download File buttons to save the log files. 3.
