DOCSIS 3.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway Support Thank you for selecting NETGEAR products. After installing your device, locate the serial number on the label of your product and use it to register your product at https://my.netgear.com. You must register your product before you can use NETGEAR telephone support. NETGEAR recommends registering your product through the NETGEAR website. For product updates and web support, visit http://support.netgear.com. Phone (US & Canada only): 1-888-NETGEAR.
Contents Chapter 1 Connecting to the Internet Gateway Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 Gateway Rear Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 Wireless Performance and Gateway Location . . . . . . . . . . . . . . . . . . . . . . 8 Log In to Your Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 View Basic Settings . . . . . . . . . . . . . . . . . . . . .
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway Port Forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37 Port Triggering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 DMZ Host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 LAN IP Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1. Connecting to the Internet 1 For help installing the gateway, see the DOCSIS 3.0 N450 Wi-Fi Data Gateway CG3000D Installation Guide. This chapter describes how to log in and monitor your gateway and includes these sections: • Gateway Front Panel • Gateway Rear Panel • Wireless Performance and Gateway Location • Log In to Your Gateway • View Basic Settings For information about product features and compatible NETGEAR products, visit the NETGEAR website at http://www.netgear.com.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway Gateway Front Panel Figure 1. Gateway front view You can use the LEDs to verify status and connections. The following table lists and describes each LED and button on the front panel of the gateway. Table 1. LEDs and buttons LED Description Power Downstream • • • • Solid green. Power is supplied to the cable modem. Blinking. The modem is performing a power-on self-test. Red.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway LED Description Upstream Internet LAN (Ethernet) Wireless On/Off • • • • Blue. More than one upstream channel is locked. Solid. One upstream channel is locked. Blinking green. The unit is ranging on the upstream. Off. No downstream channel is locked. • • • • Solid green. The cable modem is online. Slow blink. The cable modem is receiving DHCP information. Fast blink. The cable modem is downloading configuration file. Off. The cable modem is offline.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway Gateway Rear Panel Ethernet LAN ports USB port Reset button Coaxial cable connector Power adapter input Figure 2. Gateway rear panel The rear panel includes the following connectors, viewed from left to right: • Four Gigabit Ethernet LAN ports. To connect local computers, use these ports. • USB port. The USB port is a USB host and can be used for connecting a USB hard drive, flash drive, or printer. • Reset.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway • Near the center of the area in which your computers operate. • In an elevated location such as a high shelf where the wirelessly connected computers have line-of-sight access (even if through walls). • Away from sources of interference, such as computers, microwave ovens, and 2.4 GHz cordless phones. • Away from large metal surfaces. • To provide the best side-to-side coverage, put the gateway in a vertical position.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway When you connect to the gateway, the Modem Status screen displays. View Basic Settings The Basic Settings screen displays the Internet settings for the gateway. To view or configure basic settings: 1. From the main menu, select Basic Settings. 2. Enter the Domain Name. If your Internet service provider requires a Domain Name, type that name here. 3. Enter the Device Name.
2. Configuring Your Wireless Network 2 This chapter describes now to configure your gateway’s Internet connection and add devices to your network. It includes the following sections: • Set Up Your Wireless Network • Configure Wireless Settings Manually • Use Push 'N' Connect (WPS) Wireless Setup • Add a Client Using a PIN • Set Up Wi-Fi Multimedia • Change the Password Note: Before changing wireless settings, connect the gateway and set up its Internet connection as described in the DOCSIS3.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway Set Up Your Wireless Network To set up the wireless network, you can enter wireless settings, or you can use Wi-Fi Protected Setup (WPS). To wirelessly connect to the gateway, a computer or wireless device must be configured with the same wireless settings as the gateway. Configure Wireless Settings Manually You can manually configure the wireless settings and security in the Wireless Settings screen. To view or configure the wireless settings: 1.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway 4. Specify the Wireless Network settings for your network: • Name (SSID). The name of the wireless network. The default wireless network name (SSID) for the gateway appears on the label of the gateway. You can enter a different name here for better wireless security and to make it easier to recognize your network when you want to connect to it wirelessly. • Region. The location where the gateway operates. • Channel. The available channels depend on the region.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway Note: If you plan to use WPS, and you want to keep your wireless settings the same, go to the Advance Wireless Settings screen and make sure that the Keep Existing Settings check box is selected. See Advanced Wireless Settings on page 33. Use Push 'N' Connect (WPS) Wireless Setup Push 'N' Connect (WPS) can be a quick way to automatically set up your gateway’s wireless network and set up your wireless computer to connect to it at the same time.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway To add a wireless device to your gateway using the WPS button: 1. Make sure that you know how WPS works on your computer or wireless device. If it works with WPS, it has a WPS utility and might also have a WPS button that you can press. 2. Log in to the gateway. For more information, see Log In to Your Gateway on page 9. 3. In the main menu, select Add WPS Client. The following screen displays. 4. Click Next. The Add WPS Client screen displays: 5.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway 7. To click the WPS button, follow the utility’s instructions. When the computer connects to the wireless network, the gateway sends its SSID and WPA-PSK or WPA2-PSK configuration to that computer. 8. On the computer that just joined the wireless network, make sure you can connect to the Internet. You should see the gateway’s Internet LED blink, showing that the Internet connection is in use.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway 6. In the Enter Client’s PIN field, type the PIN that you located in Step 1. 7. Click Next. • The WPS LED on the front of the gateway begins to blink. • The gateway tries to communicate with the wireless computer or device for 4 minutes. • If the security option in the Wireless Settings screen was set to Disable, it is automatically changed to WPA-PSK (including a PSK security password).
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway • Power Save Support. To conserve battery power in smaller devices that are connected to the gateway, select On. 4. Click Apply. Change the Password For security reasons, the gateway has its own user name and password. NETGEAR recommends that you change the default password to a more secure password. The ideal password should contain no dictionary words from any language, and should be a mixture of both uppercase and lowercase letters, numbers, and symbols.
3. 3 Filtering Content This chapter describes how to monitor and filter the content traveling on your network. When you log in to the gateway (see Log In to Your Gateway on page 9), these tasks are grouped under Content Filtering.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway View Denial of Service (DoS) Attack Logs A content filter log is a detailed record of the Denial of Service (DoS) attacks directed at your network. You can set up email notification or you can view the logs on the gateway. To receive notification of attacks by email: 1. In the main menu, under Content Filtering, select Logs. 2. Enter an email address. This address is the full email address to which you want the gateway to send logs. 3.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway Limit Internet Site Access You can establish rules to limit access to certain Internet websites in one of two ways: • Blocking sites that contain certain words. • Blocking access to certain domains. To block access to sites containing certain words: 1. In the main menu, under Content Filtering, select Block Sites. 2. Check the Enable Keyword Blocking box. 3. In the Keyword List, enter the words you want to block. 4. Click Add Keyword.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway 4. Click Add Domain. To unblock a domain: 1. Select the domain name. 2. Click Remove Domain. Allow Unrestricted Access You can specify up to three computers to have unrestricted access to the Internet. To allow unrestricted access: 1. In the main menu, under Content Filtering, select Block Sites. 2. Click the Allow Trusted Computer to Visit Blocked Sites box. 3. Enter the MAC address of each computer. 4. Click Apply.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway The following table describes the fields displayed in this screen. Table 1. Firewall features Feature Description Firewall • • Enable. The gateway performs stateful packet inspection (SPI). Disable.The gateway does not perform SPI. IPSec Pass-Through • • Enable. The gateway forwards IPS traffic. Disable. The gateway blocks traffic. PPTP Pass-Through • • Enable.The gateway forwards PPTP traffic. Disable.The gateway blocks PPTP traffic.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway NAT ALG status features appear near the bottom of the screen. To allow NAT traversal filters for certain application layer control/data protocols, check the corresponding box.
4. Maintaining Your Network 4 This chapter describes how to perform network maintenance tasks with your gateway. When you log in to the gateway (see Log In to Your Gateway on page 9), these tasks are grouped under Maintenance.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway View the Gateway Status To see hardware and firmware details and basic status information about the gateway, use the Modem Status screen. From the main menu, under Maintenance, select Modem Status. The following screen displays. The following table describes the fields displayed in this screen: Table 1. Modem status fields Modem field Description Standard Specification Compliant DOCSIS 3.0 Hardware Version The hardware version of the gateway.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway View the Connection Status To track the gateway’s initialization procedure, and to get details about the downstream and upstream cable channel, use the Connection screen. The time appears after the gateway is initialized. To view the gateway’s initialization procedure: In the main menu, under Maintenance, select Connection.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway To save the backup settings: 1. In the main menu, under Maintenance, select Backup. 2. Click BackUp. If you did not set up your browser to save downloaded files automatically, indicate where you want to save the file and click Save. If you did set up your browser to save downloaded files automatically, the file is saved to the browser’s download location on the hard drive. To restore the backup settings: 1.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway To view the event log: 1. In the main menu, under Maintenance, select Event Log. 2. Do either of the following: • To clear the log, click Clear Log. • To refresh the log, click Refresh. Run the Diagnostic Utilities From the Diagnostics screen, you can run ping and traceroute utilities.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway 3. Select Ping in the Utility list. 4. Specify the following parameters for the ping utility. • Target. The IP address of the ping target computer. • Ping Size. The size of the ping packet. • No. of Pings. The number of times to ping the target computer. • Ping Interval. The time between pings. 5. Click Start Test. The ping results display: To stop a ping test: Click Abort Test. To clear the results from the display: Click Clear Results.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway Traceroute Utility To display the route and measure transit delays of packets across an IP, run the traceroute utility. To run a traceroute test: 1. Log in to the gateway. For more information, see Log In to Your Gateway on page 9. 2. In the main menu, under Maintenance, select Diagnostics. 3. In the Utility list, select Traceroute. 4. Specify the following parameters for the traceroute utility. • Target.
5. 5 Advanced Settings This chapter describes how to customize your network through the advanced settings on your gateway. When you log in to the gateway (see Log In to Your Gateway on page 9), these tasks are grouped under Advanced.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway Advanced Wireless Settings To configure the wireless radio settings, and other advanced settings, use the Advanced Wireless Settings screen. To configure advanced wireless settings: 1. In the main menu, under Advanced, select Wireless Settings: The Advanced Wireless Settings screen displays. 2. Configure the settings described in the following table.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway Advanced Wireless Settings Description WPS Settings Disable router’s PIN Selecting this check box disables the PIN that WPS clients use to connect to the gateway with the PIN method. Normally this check box is cleared, which is the default setting. Keep Existing Settings If a WPS client is added, the gateway automatically selects this check box.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway • Time of Day to Block. You can specify the time of day to block the computer. The default is All Day. Be sure that you clear the All Day check box if you want to enter specific times. The selected period applies to each day that you selected. 5. Click Apply. 6. Repeat these steps for all computers that you want to block. To stop blocking a computer: 1. In the MAC Filter List, select the computer. 2. Clear its Enable check box.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway IP Filtering By default, any computer is allowed access to the Internet through your gateway. You can use IP filtering to block specific computers based on their IP addresses from access to the Internet on selected days and times. To set up IP filtering: 1. In the main menu, under Advanced, select IP Filtering. The Trusted Devices table shows computers that are allowed access to the Internet through your gateway. 2.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway Port Blocking You can use port blocking to block outbound traffic on specific ports. Outbound traffic rules control access to outside resources from local users. The default rule is to allow all access from the LAN side to the outside. You can use port blocking to add predefined or custom rules to specify exceptions to the default rule. Note: The default rule allows any outbound traffic not blocked by rules that you create. To configure port blocking: 1.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway the gateway blocks access from outside except for responses to requests from the LAN side. You can use port forwarding to add rules to specify exceptions to the default rule. Because the gateway uses Network Address Translation (NAT), your network presents only one IP address to the Internet, and outside users cannot directly address any of your local computers.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway • To delete a service, select the radio button in the Active Forwarding Rules table for the service that you want to delete, and click Delete. • To reset the selection in the Service list and to clear all the fields in the Add Custom Rules, click Reset. Port Triggering Port triggering is an advanced feature that you can use to allow gaming and other Internet applications that the firewall would otherwise block.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway 2. For each port trigger, enter the settings in the Port Triggering List: • Trigger Range. To specify the range of outgoing ports that are monitored to trigger the incoming port forwarding rule, enter the start port and end port. • Target Range. To specify the range of incoming ports that are opened when triggered, enter the start port and end port. • Protocol. Select the protocol for the ports: - TCP. Select TCP only. - UDP. Select UDP only. - Both.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway For example, some systems tracking the performance of the broadband connections in terms of latency and packet loss need the gateway to reply to ping requests. 3. Type the last digits of the IP address in the DMZ Address field. The DMZ host feature is disabled when the last digit is zero. 4. Click Apply. LAN IP Setup The LAN IP screen allows you to configure LAN services such as the IP address of the gateway and DHCP.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway • DHCP Lease. For more information, see Reserve an IP Address for DHCP Use on page 42. 3. Click Apply. Reserve an IP Address for DHCP Use To reserve an IP address for DHCP use, enter the DHCP server reservation settings for the private LAN under DHCP Reservation Lease Info in the LAN Setup screen. To reserve an IP address for DHCP: 1. In the main menu, under Advanced, select LAN IP. 2.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway To configure the switch ports: 1. In the main menu, under Advanced, select Lan Switch. 2. For each port, select the appropriate speed and duplex. 3. Click Apply. To disable a Lan port: 1. In the main menu, under Advanced, select Lan Switch. 2. From the Auto column corresponding to the port you want to disable, clear the checkbox. 3. Click Apply.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway By default, this check box is cleared. This prevents the gateway from allowing any device to automatically control the resources, such as port forwarding, of the gateway. 3. Complete the Advertisement Period and Advertisement Time to Live fields. The UPnP Portmap Table displays the IP address of each UPnP device that is accessing the gateway and which internal and external ports of the gateway that device opened.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway Enable Network Address Translation Network Address Translation (NAT) provides one-to-many translation of IP addresses between devices. This means that your network presents only one IP address to the Internet, and outside users cannot directly address any of your local computers. Enable NAT to allow multiple computers on your network to access the Internet using a single public IP address. NAT is enabled by default. To disable NAT: 1.
6. 6 Troubleshooting This chapter gives information about troubleshooting your NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway. For the common problems listed, see the section indicated. • Have I connected the gateway correctly? See Basic Functions on page 47. • I cannot access the gateway configuration with my browser. See Connect to the Gateway’s Main Menu on page 47. • I have configured the gateway but I cannot access the Internet. See Troubleshoot the ISP Connection on page 48.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway Basic Functions After you have turned on power to the gateway, do the following: 1. Check to see that the Power LED is lit. 2. Check that the numbered Ethernet LEDs light momentarily. 3. After a few seconds, check that the LEDs are lit for any local ports that are connected. The following table provides help when you are using the LEDs for troubleshooting. Table 2. LED behavior LED Behavior Action All LEDS are off when the gateway • is plugged in.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway • Make sure that your computer’s IP address is on the same subnet as the gateway. If you are using the recommended addressing scheme, your computer’s address should be in the range of 192.168.0.10 to 192.168.0.254. Note: If your computer’s IP address is shown as 169.254.x.x: Recent versions of Windows and Mac OS generate and assign an IP address if the computer cannot reach a DHCP server. These auto generated addresses are in the range of 169.254.x.x.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway easily troubleshoot a TCP/IP network by using the ping utility in your computer or workstation. Test the LAN Path to Your Gateway You can use ping to verify that the LAN path to your gateway is set up correctly. To ping the gateway from a computer running Windows 95 or later: 1. From the Windows toolbar, click the Start button and select Run. 2. In the field provided, type ping followed by the IP address of the gateway, as in this example: ping 192.168.0.1 3.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway If the path is functioning correctly, replies as in the previous section are displayed. If you do not receive replies: • Check that your computer has the IP address of your gateway listed as the default gateway. If the IP configuration of your computer is assigned by DHCP, this information will not be visible in your computer’s Network Control Panel. Verify that the IP address of the gateway is listed as the default gateway.
A.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway Factory Default Settings You can return the gateway to its factory settings. On the bottom of the gateway, press and hold the Reset button for over 7 seconds. The gateway resets and returns to the factory configuration settings shown in the following table. Table 3. Factory default settings Gateway login Local network (LAN) Firewall Internet connection Parameter Default User login URL http://192.168.0.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway Wireless Parameter Default Wireless communication Enabled SSID name Appears on the label of the gateway. Security WPA/WPA2 The default WPA/WPA2 password appears on the label of the gateway.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway Component Specification Interface Local: 10BASE-T, 100/1000BASE-Tx, RJ-45 USB 2.0/1.1 function 802.11n/g/b Internet: DOCSIS 3.0. Downward compatible with DOCSIS 2.0, 1.1 and 1.
B. Notification of Compliance B Regulatory Compliance Information This section includes user requirements for operating this product in accordance with National laws for usage of radio spectrum and operation of radio devices. Failure of the end user to comply with the applicable requirements may result in unlawful operation and adverse action against the end-user by the applicable National regulatory authority.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway FCC Radio Frequency Interference Warnings & Instructions This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
NETGEAR DOCSIS 3.0 N450 Wi-Fi Data Gateway Avertissement: Le dispositif fonctionnant dans la bande 5150-5250 MHz est réservé uniquement pour une utili-sation à l'intérieur afin de réduire les risques de brouillage préjudiciable aux systèmes de satellites mobiles utilisant les mêmes canaux. Les utilisateurs de radars de haute puissance sont désignés utilisateurs principaux (c.-à-d.
