Compal Broadband Networks CH6640E/CG6640E Wireless Gateway Series User Guide
Table of Contents Overview Contact Information............................................................................................................... 1 Standard Features ................................................................................................................ 1 CH6640E/CG6640E LAN Choices......................................................................................... 2 Wireless LAN........................................................................................
Advanced Port Filtering Page .............................................................................................. 33 Advanced Port Forwarding Page ......................................................................................... 34 Advanced Port Triggers Page ............................................................................................. 36 Advanced DMZ Host Page ..................................................................................................
1 Overview The CBN CH6640E/CG6640E Wireless Gateway is designed for your home, home office, or small business/enterprise. It can be used in households with one or more computers capable of wireless connectivity for remote access to the wireless gateway. This user guide provides product overview and setup information for the CH6640E/CG6640E. It also provides instructions for installing the wireless gateway and configuring the wireless LAN, Ethernet, router, DHCP, and security settings.
• • CH6640E/CG6640E wireless function supports Wi-Fi 2.4G single-band mode. • Routing for a wireless LAN (WLAN) or a wired Ethernet LAN; you can connect more than four computers using hubs and/or switches • A built-in DHCP server to easily configure a combined wired and/or wireless Class C private LAN. • Virtual private network (VPN) pass-through operation supporting IPSec, PPTP, or L2TP to securely connect remote computers over the Internet.
Sample Wireless Network Connections (CH6640E model shown) Sample Wireless Network Connections (CG6640E model shown) Your maximum wireless operation distance depends on the type of materials through which the signal must pass and the location of your CH6640E/CG6640E and clients (stations). CBN cannot guarantee wireless operation for all supported distances in all environments. Note: To get better wireless coverage, CH6640E/CG6640E wireless gateway vertically.
Wired Ethernet LAN You can easily connect any PC with an Ethernet cable to the CH6640E/CG6640E Ethernet port. Because the CH6640E/CG6640E Ethernet port supports auto-MDIX, you can use a straight-through or cross-over cable to connect a hub, switch, or computer. Use category 5, or better, cabling for all Ethernet connections.
A wired Ethernet LAN with more than four computers requires one or more hubs, switches, or routers. You can: • • Connect a hub or switch to any Ethernet port on the CH6640E/CG6640E. Use Ethernet hubs, switches, or routers to connect up to any combination of 253 computers and wireless clients to the CH6640E/CG6640E. More detailed information on Ethernet cabling is beyond the scope of this document.
LED Flashing On 5 TEL1 TEL 2 Telephone is off-hook; dialing or call in progress Green: Telephone is connected and activated; on-hook 6 WIRELESS Amber: WPS function is enabled. Green: Wi-Fi wireless interface is active now.
Rear Panel The CH6640E (shown above) rear panel contains the following cabling port and connectors: Item Description 1 TEL 1 TEL 2 VoIP connection for a single telephone. Two sets of telephone can be supported. 2 ETHERNET 1 2 3 4 Use any Ethernet port to connect an Ethernet-equipped computer, hub, bridge, or switch using an RJ-45 cable. Activity LED - Green LED defines the activity of the Ethernet connector. When LED is ON, this indicates that there is no data traffic and a connection is stabilized.
The CG6640E (shown above) rear panel contains the following cabling port and connectors: 1 Item Description ETHERNET 1 2 3 4 Use any Ethernet port to connect an Ethernet-equipped computer, hub, bridge, or switch using an RJ-45 cable. Activity LED - Green LED defines the activity of the Ethernet connector. When LED is ON, this indicates that there is no data traffic and a connection is stabilized. When LED is FLASHING, this indicates that there is data being transmitted upstream or downstream.
Note: Label may differ according to local settings or requirements.
2 Getting Started Inside the Box Before you install the CH6640E/CG6640E Wireless Gateway, verify that the following items are included in the box with the CH6640E/CG6640E: Item Description Power cord Connects the CH6640E/CG6640E to an AC electrical outlet Software License Regulatory Card CH6640E/CG6640E Install Sheet & Contains software license, warranty, and safety information for the CH6640E/CG6640E.
Before You Begin Take the following precautions before installing the CH6640E/CG6640E: • Postpone installation until there is no risk of thunderstorm or lightning activity in the area. • To avoid potential shock, always unplug the power cord from the wall outlet or other power source before disconnecting it from the CH6640E/CG6640E rear panel. • To prevent overheating the CH6640E/CG6640E, do not block the ventilation holes on the sides of the unit. Do not open the unit.
Connecting the CH6640E/CG6640E Before starting, be sure the computer is turned on and the CH6640E/CG6640E power cord is unplugged. 1. Connect one end of the coaxial cable to the cable outlet or splitter. 2. Connect the other end of the coaxial cable to the Cable connector on the CH6640E/CG6640E. Hand-tighten the connectors to avoid damaging them. 3. Plug the power cord into the Power port on the CH6640E/CG6640E. 4. Plug the other end of the power cord into an electrical wall outlet.
9. For a second telephone, plug the telephone wire of a single-line telephone into the TEL 2 port on the rear of the CH6640E. 10. Check that the LEDs on the front panel cycle through the following sequence: CH6640E/CG6640E LED Activity During Startup LED Description POWER Turns on when AC power is connected CH6640E/CG6640E. Indicates that the power is connected properly. RECEIVE Flashes while scanning for the downstream receive channel. Changes to solid green when single downstream channel is locked.
Wall Mounting the CH6640E/CG6640E You have the option to wall mount the CH6640E/CG6640E. Do the following before mounting the CH6640E/CG6640E on the wall: • Locate the unit as specified by the local or national codes governing residential or business cable TV and communications services. • Follow all local standards for installing a network interface unit/network interface device (NIU/NID).
8. Slide the CH6640E/CG6640E down until it stops against the top of the keyhole opening. 9. After mounting, reconnect the coaxial cable input and Ethernet connection. 10. Plug the power cord into the +12VDC connector on the gateway and the electrical outlet. 11. Route the cables to avoid any safety hazards.
Wall Mounting Template Figure 1 Wall Mounting Template Setting Up Internet Access After installing the CH6640E/CG6640E, check that you can connect to the Internet. You can retrieve an IP address for your computer’s network interface using one of the following options: • • Retrieve the statically defined IP address and DNS address Automatically retrieve the IP address using the Network DHCP server The CBN CH6640E/CG6640E Wireless Gateway provides a DHCP server on its LAN.
Configuring TCP/IP in Windows XP 1. Open the Control Panel. 2. Double-click Network Connections to list the Dial-up and LAN or High-Speed Internet connections. 3. Right-click the network connection for your network interface. 4. Select Properties from the drop-down menu to display the Local Area Connection Properties window. Be sure Internet Protocol (TCP/IP) is checked. 5. Select Internet Protocol (TCP/IP) and click Properties to display the Internet Protocol (TCP/IP) Properties window. 6.
4. Type ipconfig and press ENTER to display your IP configuration. If an Auto-configuration IP Address displays, this indicates possible cable network problems or an improper connection between your computer and the CH6640E/CG6640E. Check the following: • • Your cable connections Whether you can see cable-TV channels on your television After successfully verifying your cable connections and proper cable-TV operation, you can renew your IP address.
3 Basic Configuration For normal operation, you do not need to change most default settings. Carefully consider the following caution statements: Starting the CH6640E/CG6640E Configuration Manager (CMGR) The CH6640E/CG6640E Configuration Manager (CMGR) allows you to change and view the settings on your CH6640E/CG6640E. 1. Open the web browser on a computer connected to the CH6640E/CG6640E over an Ethernet connection. Note: Do not attempt to configure the CH6640E/CG6640E over a wireless connection. 2.
There are two default privileged account in CH6640E/CG6640E: Username Password Privilege admin admin Allow access gateway pages root compalbn Operator mode. Allow access gateway, provisioning pages and provide more configuration information. CH6640E/CG6640E Menu Options Bar The CH6640E/CG6640E Menu Options bar is displayed at the top of the CH6640E/CG6640E Configuration Manager window.
4 CABLE MODEM Pages The CABLE MODEM pages provide the information of cable connection status, channel signals, network IP address, and system logs during the establishment of cable connection to cable service provider’s CMTS. CABLE MODEM Status Page This page provides information about the startup process of the Cable Modem.
CABLE MODEM Signals Page This page provides information about the connection between the Cable Modem and the CMTS of cable service provider. Field Descriptions for the Status Connection Page Field Description Downstream Status information about the RF downstream channels, including downstream channel frequency and downstream signal power and modulation.
Field Description Upstream Status information about the RF upstream channels, including upstream channel ID and upstream signal power and modulation. CABLE MODEM Logs Page This page lists the critical system events in chronological order.
CABLE MODEM Configuration Page This page is able to configure upstream channel ID and Favorite Frequency then save it. Cable modem will scan the frequency you specify first. Reset All Defaults button will reset all configurations of the cable modem to factory defaults.
CABLE MODEM Provisioning Page This page shows IP provisioning status from DHCP, this item only appears in operator mode.
5 GATEWAY Basic Pages CH6640E/CG6640E GATEWAY pages provide five major items including BASIC, ADVANCED, WIRELESS, USB and MANAGEMENT to control all gateway functions, describing respectively as below. Basic Setup Page The CH6640E/CG6640E Basic Pages allow you to view and configure CH6640E/CG6640E IP-related configuration data, including Network Configuration, WAN Connection Type and DHCP. You can click any Basic submenu option to view or change the configuration information for that option.
27
Field Descriptions for the Basic Setup Page Field Description NAPT mode NAPT is a special case of NAT, where many IP numbers are hidden behind a number of addresses. In contrast to the original NAT, however, this does not mean there can be only that number of connections at a time. In NAPT mode, an almost arbitrary number of connections are multiplexed using TCP port information. The number of simultaneous connections is limited by the number of addresses multiplied by the number of available TCP ports.
Basic DHCP Page This page allows you to configure and view the status of the optional internal CH6640E/CG6640E DHCP (Dynamic Host Configuration Protocol) server for the LAN. CAUTION: Do not modify these settings unless you are an experienced network administrator with strong knowledge of IP addressing, subnetting, and DHCP.
Field Description server to assign a private IP address. There are 253 possible client addresses. Lease Time Sets the time in seconds that the CH6640E/CG6640E DHCP server leases an IP address to a client. The default is 3600 seconds (60 minutes). DHCP Clients Lists DHCP client device information. Static clients Assigned DHCP Reserve IP addresses assigned by the CH6640E/CG6640E DHCP server for specific LAN clients When done, click Apply to save your changes.
6 GATEWAY Advanced Pages The CH6640E/CG6640E Advanced Pages allow you to configure the advanced features of the CH6640E/CG6640E: • • • • • • • • IP Filtering MAC Filtering Port Filtering Port Forwarding Port Triggers DMZ Host Dynamic DNS IDS You can click any Advanced submenu option to view or change the advanced configuration information for that option. Advanced Options Page This page allows you to set the operating CH6640E/CG6640E device routes IP traffic.
Advanced IP Filtering Page This page allows you to define which local PCs will be denied access to the CH6640E/CG6640E WAN. You can configure IP address filters to block Internet traffic to specific network devices on the LAN by entering start and end IP address ranges. Note that you only need to enter the LSB (Least-significant byte) of the IP address; the upper bytes of the IP address are set automatically from the CH6640E/CG6640E Configuration Manager’s IP address.
Field Descriptions for the Advanced MAC Filtering Page Field Description MAC Addresses Media Access Control address — a unique set of 12 hexadecimal digits assigned to a PC during manufacturing. Setting a MAC Address Filter 1. Enter the MAC address in the MAC Addresses field for the PC you want to block. 2. Click Add MAC Address. 3. Repeat above steps for up to twenty MAC addresses.
Note: The specified port ranges are blocked for ALL PCs, and this setting is not IP address or MAC address specific. For example, if you wanted to block all PCs on the private LAN from accessing HTTP sites (or “web surfing”), you would set the “Start Port” to 80, “End Port” to 80, “Protocol” to TCP, checkmark Enabled, and then click Apply. Field Descriptions for the Advanced Port Filtering Page Field Description Start Port Start port number. End Port End port number. Protocol TCP, UDP, or Both .
The ports used by some common applications are: • • • • • • HTTP: 80 FTP: 20, 21 Secure Shell: 22 Telnet: 23 SMTP e-mail: 25 SNMP: 161 To map a port, you must enter the range of port numbers that should be forwarded locally and the IP address to which traffic to those ports should be sent. If only a single port specification is desired, enter the same port number in the “start” and “end” locations for that IP address.
Advanced Port Triggers Page This page allows you to configure dynamic triggers to specific devices on the LAN. This allows for special applications that require specific port numbers with bi-directional traffic to function properly. Applications such as video conferencing, voice, gaming, and some messaging program features may require these special settings. The Advanced Port Triggers are similar to Advanced Port Forwarding except that they are not static ports held open all the time.
Advanced DMZ Host Page This page allows you to specify the default recipient of WAN traffic that NAT is unable to translate to a known local PC. The DMZ (De-militarized Zone) hosting (also commonly referred to as “Exposed Host”) can also be described as a computer or small sub-network that is located outside the firewall between the trusted internal private LAN and the untrusted public Internet. It prevents direct access by outside users to private data.
Field Descriptions for the Dynamic DNS Page Field Description Enable Check the box to enable Dynamic DNS. Dynamic DNS Provider Choose your Dynamic DNS provider from the drop down menu. User Name Enter the user name for your Dynamic DNS account. Password Enter the password for your Dynamic DNS account. Hostname Enter the host name that you registered with your Dynamic DNS provider. Status Indicate the status of DDNS service.
• • • • User authentications Rejected internal and external connection requests Session creation and termination Outside attacks (intrusion detection) The predefined policies provide outbound Internet access for computers on the CH6640E/CG6640E LAN. The CH6640E/CG6640E firewall uses stateful-inspection to allow inbound responses when there already is an outbound session running that corresponds to the data flow. For example, if you use a web browser, outbound HTTP connections are permitted on port 80.
7 GATEWAY Wireless Pages The CH6640E/CG6640E Wireless Pages allow you to configure your wireless LAN (WLAN). You can click any Wireless submenu option to view or change the configuration information for that option. WPA or WPA2 encryption provides higher security than WEP encryption, but older wireless client cards may not support the newer WPA or WPA2 encryption methods. Wireless Band Mode Page CH6640E/CG6640E is a single band product, Select 2.4GHz if you want to use the 2.
Field Descriptions for the Wireless Basic Page Field Description SSID Sets the Network Name (also known as SSID) of the Primary wireless network. This is a 1-32 ASCII character string. Hide Network With a hide network, users type the SSID into the client application instead of selecting the SSID from a list. This feature makes it slightly more difficult for the user to gain access. WMM Enabling WMM can help control latency and jitter when transmitting multimedia content over a wireless connection.
Field Description features. Enable Enable or disable this wireless interface. Transmission Mode Select which 802.11 mode is used by CH6640E/CG6640E, including 802.11b/g/n mixed mode, 802.11n only, 802.11b/g mixed mode. Channel Width Select the channel width (20 MHz or 20/40 MHz) to be used by CH6640E/CG6640E. When 20/40MHz is selected 802.11n clients experience improved throughput using 40 MHz, while legacy clients(either 802.11a or 802.11b/g) can still be serviced without interruption using 20MHz.
Field Descriptions for Mixed WPA-PSK/WPA2-PSK, WPA2-PSK and WPA-PSK page Field Description Data Encryption When using WPA or WPA2 authentication, these WPA encryption modes can be set: TKIP, AES, or TKIP + AES. AES (Advanced Encryption Standard) provides the strongest encryption, while TKIP (Temporal Key Integrity Protocol) provides strong encryption with improved compatibility. the TKIP + AES mode allows both TKIP and AES-capable clients to connect.
Field Description WPA Group Rekey Interval Sets the WPA Group Rekey Interval in seconds. Set to zero to disable periodic rekeying. Field of Mixed WPA-Enterprise/WPA2-Enterprise, WPA-Enterprise and WPA2-Enterprise are similar.
Field Description (xxx.xxx.xxx.xxx). RADIUS UDP Port Sets the UDP port number of the RADIUS server. The default is 1812. RADIUS Shared Secret Sets the shared secret for the RADIUS connection. The key is a 0 to 255 character ASCII string.
Field Descriptions for the WEP Page Field Description Encryption Mode Select the use of Shared Key authentication in WEP protocol. If select Open System , Shared Key authentication is optional. If select Shared Key, the Shared Key authentication is required for WEP. Authentication Type The CPE uses either the 64-bit or 128-bit key to encrypt the challenge text and sends the encrypted text to the access point.
Wireless WPS Page CH6640E/CG6640E provide WPS (Wi-Fi Protected Setup) function, with it enable will support WPS clients to join the network very easily. It is a standard for easy and secure establishment of a wireless network. With WPS you can setup and protect your wireless network in just a few easy steps. Field Descriptions for the Wireless WPS Control Page Field Description Enable Enable or disable WPS. WPS method There are two common ways to establish WPS connection in CH6640E/CG6640E: 1.
1. 2. 3. Click or press the WPS button on the CH6640E/CG6640E’s front panel or select Push Button Configuration (PBC) option radio then click “Connect” button in the web page “Home / Gateway / Wireless / WPS”, the wireless LED will flash with orange color. Click or press the WPS button on the wireless device within 120 seconds. If WPS connection successfully established, the wireless LED will turn green. PIN 1.
Field Descriptions for the Wireless Access Control Page Field Description Access Control Select “Disable” to disable access control Select Enabled in Allow mode then you can maintain a list of client allowed to connect to this device. Select Enabled in Deny mode then you can maintain a list of client cannot to connect to this device.
Wireless Status Page This page show a histogram to represent wireless channel status on your environment, channel loading value between 0~100, higher value represents heavy traffic on this channel. For example: value 0 means no network traffic transmits on this channel, value 100 means the channel is heavy congested.
Encrypting Wireless LAN Transmissions To prevent unauthorized viewing of data transmitted over your WLAN, you must encrypt your wireless transmissions.
8 GATEWAY USB Pages (optional) The CH6640E/CG6640E support a variety of USB devices including printer and storage. You can plug USB printers and storages on the device and share them through internet. Print Server CH6640E/CG6640E support USB printer and share it based on Internet Printing Protocol (IPP) protocol that allow users connect and manage print jobs Field Descriptions for the Print Server Page Field Description Enable Enable or disable print server. Printer The printer’s name.
4. 5. The wizard will prompt you to select a driver for your printer. If all went well, you should see complete window. Click Finish. FTP Server CH6640E/CG6640E support USB storage and share it based on FTP (File Transfer Protocol) that allows users can login and manage it. Field Descriptions for the FTP Server Page Field Description Enable Enable or disable FTP server. Username The login username of ftp server. Password The login password of ftp server.
File Server CH6640E/CG6640E support USB storage and share it based on Samba service that allow users can login and manage it. Field Descriptions for the File Server Page Field Description Enable Enable or disable File server. Description The server string of samba server. Workgroup The workgroup name that the samba server resides on. Status Show information about the USB stick, including vendor name, model name, per partition size and file system type.
9 GATEWAY MANAGEMENT Pages Remote Management Control Generally, only the members of your network can browse the web pages to perform administration tasks on CH6640E/CG6640E. Remote Management Control allows CH6640E/CG6640E to be configured by web browser and perform administration task from Internet. Field Descriptions for Remote Management Control Field Description Enable Web Browser Web server port on WAN Interface Check the box to allow remote control by web browser.
Field Descriptions for Loopback IP and Secondary LAN Interface Field Description Enable Check the box to allow manager to configure loopback and Secondary LAN interface. Loopback Interface IP Address Subnet Mask Enter the IP address for loopback interface. Enter the subnet mask for loopback interface. Secondary LAN Interface IP Address Subnet Mask Enter the IP address for the secondary LAN interface. Enter the subnet mask for the secondary LAN interface.
10 TELEPHONE Pages The Multimedia Terminal Adapter (MTA) in your CH6640E provides digital VoIP services, which allow you to use the Internet to make telephone calls. Basic telephone functions, such as threeway calling, voice mail, and fax transmissions, can be supported with this connection on the CH6640E. Click any TELEPHONE submenu option to view the status information for that option. TELEPHONE Status Page This page displays the initialization status of the MTA.
TELEPHONE Call Page Call Status Tab This tab displays the MTA call status. Quality Of Service Tab This tab displays the MTA Quality of Service (QoS) parameters.
TELEPHONE Logs Page Telephone Log Tab This tab displays the Telephone Log information related to your CH6640E VoIP telephone connection. It shows Diagnostic messages generated by the MTA. This information is intended for use by a qualified technician. Call Signaling Log Tab This tab displays the log of call signaling messages which are exchanged during MTA initialization, call creation and deletion.
60
TELEPHONE Provisioning Page This page contains the MTA provisioning details about your CH6640E VoIP telephone connection (PROVISIONING item only appears in operator mode). Setup Tab This tab displays the primary parameters for MTA provisioning, including MTA FQDN, Provisioning Method, MTA IP Address, Mask and Gateway, DNS server, Configuration File, Provisioning State and so on.
Call Features Tab If your ISP supports call features for SIP, this tab will list all call features for each phone line respectively. Errors Tab This tab displays the error items in MTA configuration.
TELEPHONE Configuration Page This page shows the configuration file received from provider of cable broadband service.
11 HELP Pages Click any HELP submenu option to view the status information for that option. HELP Cable Modem Page This page provides some important and useful information about CH6640E/CG6640E, including modem name, firmware version, serial number and Wi-Fi driver version. HELP Telephone Page This page provides the brief description of TELEPHONE submenu and the standard checkup procedure.
65
12 Troubleshooting If the solutions listed here do not solve your problem, contact your service provider. Before calling your service provider, try pressing the Reset button on the rear panel of the CH6640E/CG6640E. Please note, if you press the Reset button, you will lose all your custom configuration settings, including Firewall and Advanced settings. Your service provider may ask for the front panel LED status; see Front-Panel LEDs and Error Conditions.
Problem Possible Solution transmission speed with WPA enabled Encryption type is TKIP. If all of your wireless clients support AES, change the WPA Encryption to AES.
