WARNING: TO PREVENT FIRE OR SHOCK HAZARD, DO NOT EXPOSE THIS PRODUCT TO RAIN OR
MOISTURE. THE UNIT MUST NOT BE EXPOSED TO DRIPPING OR SPLASHING. DO NOT PLACE OBJECTS
FILLED WITH LIQUIDS, SUCH AS VASES, ON THE UNIT.
CAUTION: TO ENSURE REGULATORY AND SAFETY COMPLIANCE, USE ONLY THE PROVIDED POWER
AND INTERFACE CABLES. DO NOT CONNECT THE PLUG INTO AN EXTENSION CORD, RECEPTACLE, OR
OTHER OUTLET UNLESS THE PLUG CAN BE FULLY INSERTED WITH NO PART OF THE BLADES
EXPOSED.
CAUTION: DO NOT OPEN THE UNIT. DO NOT PERFORM ANY SERVICING OTHER THAN THAT CONTAINED
IN THE INSTALLATION AND TROUBLESHOOTING INSTRUCTIONS. REFER ALL SERVICING TO QUALIFIED
SERVICE PERSONNEL.
CAUTION: CHANGES AND MODIFICATIONS NOT EXPRESSLY APPROVED BY MOTOROLA FOR
COMPLIANCE COULD VOID USER’S AUTHORITY TO OPERATE THE EQUIPMENT.
CAUTION: Exposure to Radio Frequency Radiation. To comply with the FCC RF exposure compliance
requirements, the separation distance between the antenna and any person’s body (including hands, wrists, feet
and ankles) must be at least 8 inches (20 cm).
This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This
device may not cause harmful interference, and (2) this device must accept any interference received, including
interference that may cause undesired operation.
Note: This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to
part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference
in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not
installed and used in accordance with the instructions, may cause harmful interference to radio communications.
However, there is no guarantee that interference will not occur in a particular installation. If this equipment does
cause harmful interference to radio or television reception, which can be determined by turning the equipment off
and on, the user is encouraged to try to correct the interference by one or more of the following measures:
•Reorient or relocate the receiving antenna.
•Increase the separation between the equipment and receiver.
•Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
•Consult the dealer or an experienced radio/TV technician for help.
This device must be installed and used in strict accordance with the manufacturer’s instructions as described in
the user documentation that comes with the product.
Postpone cable modem installation until there is no risk of thunderstorm or lightning activity in the area.
Do not overload outlets or extension cords, as this can result in a risk of fire or electric shock. Overloaded AC
outlets, extension cords, frayed power cords, damaged or cracked wire insulation, and broken plugs are
dangerous. They may result in a shock or fire hazard.
Route power supply cords so that they are not likely to be walked on or pinched by items placed upon or against
them. Pay particular attention to cords where they are attached to plugs and convenience receptacles, and
examine the point where they exit from the product.
Place this equipment in a location that is close enough to an electrical outlet to accommodate the length of the
power cord.
Be sure that the outside cable system is grounded, so as to provide some protection against voltage surges and
built-up static charges. Article 820-20 of the NEC (Section 54, Part I of the Canadian Electrical Code) provides
guidelines for proper grounding and, in particular, specifies the CATV cable ground shall be connected in the
grounding system of the building, as close to the point of cable entry as practical.
When using this device, basic safety precautions should always be followed to reduce the risk of fire, electric
shock and injury to persons, including the following
:
•Read all of the instructions {listed here and/or in the user manual} before you operate this equipment. Give
particular attention to all safety precautions. Retain the instructions for future reference.
•Comply with all warning and caution statements in the instructions. Observe all warning and caution symbols
that are affixed to this equipment.
•Comply with all instructions that accompany this equipment.
•
Avoid using this product during an electrical storm.
added protection for this product during a lightning storm, or when it is left unattended and unused for long
periods of time, unplug it from the wall outlet, and disconnect the cable system. This will prevent damage to
the product due to lightning and power surges.
There may be a risk of electric shock from lightning. For
•Avoid damaging the cable modem with static by touching the coaxial cable when it is attached to the earth
grounded coaxial cable TV wall outlet.
•Always first touch the coaxial cable connector on the cable modem when disconnecting or re-connecting USB
or Ethernet cable from the cable modem or the user’s PC.
•Operate this product only from the type of power source indicated on the product’s marking label. If you are
not sure of the type of power supplied to your home, consult your dealer or local power company.
•Upon completion of any service or repairs to this product, ask the service technician to perform safety checks
to determine that the product is in safe operating condition.
It is recommended that the customer install an AC surge protector in the AC outlet to which this device is
connected. This is to avoid damaging the equipment by local lightning strikes and other electrical surges.
Different types of cord sets may be used for connections to the main supply circuit. Use only a main line cord that
complies with all applicable product safety requirements of the country of use.
Installation of this product must be in accordance with national wiring codes.
Place unit to allow for easy access when disconnecting the power cord/adapter of the device from the AC wall
outlet.
Wipe the unit with a clean, dry cloth. Never use cleaning fluid or similar chemicals. Do not spray cleaners directly
on the unit or use forced air to remove dust.
This product was qualified under test conditions that included the use of the supplied cables between system
components. To be in compliance with regulations, the user must use these cables and install them properly.
Connect the unit to a grounding type AC wall outlet using the power adapter supplied with the unit.
Do not cover the device, or block the airflow to the device with any other objects. Keep the device away from
excessive heat and humidity and keep the device free from vibration and dust.
Installation must at all times conform to local regulations.
All rights reserved. No part of this publication may be reproduced in any form or by any means or used to make any derivative work (such as
translation, transformation or adaptation) without written permission from Motorola, Inc.
Motorola reserves the right to revise this publication and to make changes in content from time to time without obligation on the part of Motorola
to provide notification of such revision or change. Motorola provides this guide without warranty of any kind, either implied or expressed,
including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. Motorola may make improvements or
changes in the product(s) described in this manual at any time.
MOTOROLA and the Stylized M Logo are registered in the US Patent & Trademark Office. Microsoft, Windows, Windows Me, and Windows NT are
registered trademarks and
Microsoft Corporation.
Corporation. Linux is a registered trademark of Linus Torvalds. Acrobat Reader is a registered trademark of Adobe Systems, Inc. Netscape and
Navigator are registered trademarks of
States and other countries. All other
Thank you for purchasing a Motorola® SURFboard® Wireless Cable Modem Gateway SBG900 for your home,
home office, or small business/enterprise. Applications where the SURFboard Gateway (SBG) is especially useful
include:
•Households having multiple computers requiring connection to the Internet and each other
•Small businesses or home offices requiring fast, affordable, and secure Internet access
•Internet gamers desiring easier setup for:
®
— Programs such as DirectX
— Sites such as MSN Games by Zone.com or Battle.net
•Video conferencing
7 or DirectX® 8
®
The features and physical appearance of your SBG900 may differ slightly from the picture.
Home networking enables you to access and move information between two or more computers in your home or
business. Your home network connects to the cable TV system and enables you to connect to the Internet or other
networks connected to the Internet. The SBG900 acts as the
and the Internet. It directs (routes) computer data to the Internet and between your computers. A SURFboard
cable modem in the SBG passes information between your home network computers and the Internet. An
SBG900:
central connection point
between your computers
•Combines a SURFboard cable modem, IEEE 802.11g wireless access point, Ethernet 10/100Base-T
connection, and an advanced firewall into one compact product
•Eliminates the need for four or five separate products, enabling you to maximize the potential of your existing
resources
•Enables you to create a custom network sharing a single broadband connection, files, and other peripherals
like scanners, with or without wires
•Offers enhanced network security for wired and wireless users
•Provides easy setup
•Enables cable operators to add future value-added services
This product is subject to change. Not all features described in this guide are available on all SBG900 models.
For the most recent documentation, visit the Product Documentation page on the Motorola Broadband website
http://broadband.motorola.com/.
Easy Setup
It is much easier to configure a local area network (LAN) using an SBG900 than it is using typical networking
equipment:
•The Installation Assistant application on the
enables easy connection to the cable network.
Motorola SURFboard Wireless Cable Modem Gateway
CD-ROM
•For basic operation, most default settings require no modification.
•The Setup Program provides a graphical user interface (GUI) for easy configuration of necessary wireless,
Ethernet, router, DHCP, and security settings. For a list of issues, see “Basic Configuration”.
Network Connection Types
The SBG900 provides different network connection types for your computers to exchange data. The connection
between your computers and the SBG900 may be with a wireless or a wired connection or a combination of the
two. Your network can use one or any combination of all the following network connections:
•Ethernet local area network (LAN)
•Wireless LAN (IEEE 802.11g that also supports IEEE 802.11b devices)
An SBG900 combines high-speed Internet access, networking, and computer security for a home or small-office
LAN. An SBG900 provides:
•An integrated high-speed SURFboard cable modem for continuous broadband access to the Internet and
other online services, with much faster data transfer than traditional dial-up or ISDN modems
•A single broadband connection for up to 253 computers to surf the web; all computers on the LAN
communicate as if they were connected to the same physical network
•An IEEE 802.11g wireless access pointto enable laptop users to remain connected while moving around the
home or small office or to connect desktop computers without installing network wiring. Depending on
distance, wireless connection speeds can match that of Ethernet.
•A USB connection for a single PC
•A dual-purpose 10/100Base-T Ethernet uplink port supporting half- or full-duplex connections and Auto-MDIX
•Routing for a wireless LAN or a wired Ethernet LAN connected using a hub or switch
•A built-in DHCP server to easily configure a combined wired and/or wireless Class C private LAN
While any IEEE 802.11g or IEEE 802.11b compliant client product will work with the SBG900, Motorola has
wireless adapters available for use with the SBG900.
You can use the Motorola PCC11b wireless card or the USB11b wireless adapter, which comply with the
IEEE 802.11b wireless standard, to connect a PC to the wireless LAN:
USB11b Wireless
Adapter
PCC11b Wireless CardA credit-card sized adapter that connects a laptop to the wireless LAN. You can roam in, or
Connects a desktop, laptop, printer, or other peripheral device to the wireless LAN. It has a
built-in antenna and a six feet (two meter) long cable that connects to the PC USB port.
Its light indicates:
• Off — Not connected to a USB port or not receiving power from the PC
• Yellow — Not installed or initializing
• Green — Installed and operational
• Flashing Green — Receiving data from another wireless LAN device
• Flashing Yellow — Transmitting data to another wireless LAN device
around, the home or small office and remain connected. It fits in a
standard slot on the laptop supporting 3.3 Volt PC card. The PCC11b has also has a
built-in antenna.
PCMCIA Type II
Motorola USB11b Wireless Adapter (left) and PCC11b Wireless Card
For installation instructions, see the documentation provided with each product.
The rear panel provides cabling connectors, status lights, and the power receptacle:
1
2
3
4
5
KeyItemDescription
1
2Use the
3For Windows
4The
5The +12
•
If you experience a problem, you can push this recessed button to restart the SBG900 (see
“Troubleshooting”). To reset all values to their defaults, hold down the button for more than five
seconds
appropriate communications channels.
Ethernet-equipped computer, hub, bridge, or switch.
SBG900 USB port to a Macintosh or UNIX computer.
. Resetting may take 5 to 30 minutes because the SBG900 must find and lock on the
ETHERNET port to connect an Ethernet LAN cable with RJ-45 connectors to an
CABLE port provides a connection to the coaxial cable outlet.
VDCpower connector to the external power supply.
only
, use the USB port for Connecting a PC to the USB Port. You cannot connect the
To receive data service, you need to provide the MAC address marked HFC MAC ID
provider
:
HFC MAC ID
SBG900 LAN Choices
The SBG900 enables connection of up to 253 client computers on a combination of:
•Wireless LAN
•Wired Ethernet LAN
•USB Connection
to your cable service
Each computer needs appropriate network adapter hardware and driver software. The clients on the Ethernet,
wireless, or USB interfaces can share:
•Internet access with a single cable service provider account, subject to cable provider terms and conditions
•Files, printers, storage devices, multi-user software applications, games, and video conferencing
Wireless and wired network connections use Windows networking to share files and peripheral devices such as
printers, CD-ROM drives, floppy disk drives, and Iomega
Wireless communication occurs over radio waves rather than a wire. Like a cordless telephone, a wireless LAN
uses radio signals instead of wires to exchange data. A wireless network eliminates the need for expensive and
intrusive wiring to connect computers throughout the home or office. Mobile users can remain connected to the
network even when carrying their laptop to different locations in the home or office.
Each computer on a wireless LAN requires an adapter described in “Optional Accessories”:
Laptop PCsUse a Motorola PCC11b Wireless Card in the PCMCIA slot.
Desktop PCs Use a Motorola USB11b Wireless Adapter to connect the USB port.
Sample wireless network connections
To set up the SBG900, on a computer wired to the SBG900 over Ethernet or USB, perform the procedures in
“Setting Up the Wireless LAN
To set up each wireless client (station):
1Insert the
PCC11b and USB11b Wireless Adapter
”. Do not attempt to configure the SBG900 over a wireless connection.
CD-ROM in the CD-ROM drive on the client.
2Install the device software from the CD.
3Connect the Motorola PCC11b wireless card or USB11b wireless adapter following the instructions supplied
Each computer on the 10/100Base-T Ethernet LAN requires an Ethernet network interface card (NIC) and driver
software installed. Because the SBG900 Ethernet port supports auto-MDIX, you can use straight-through or
cross-over cable to connect a hub, switch, or computer. Use category 5 cabling for all Ethernet connections.
The physical wiring arrangement has no connection to the logical network allocation of IP addresses.
Sample Ethernet to computer connection
Coaxial
cable
Category 5 Ethernet cable
A wired Ethernet LAN with more than one computer requires one or more hubs or switches. You can connect a
hub or switch to the Ethernet port on the SBG900.
The following illustration is an example of an Ethernet LAN you can set up using the SBG900. Cable the LAN in an
appropriate manner for the site. A complete discussion of Ethernet cabling is beyond the scope of this document.
You can connect a single PC running Windows®98, Windows XP™, Windows Me®, or Windows®2000 to the
SBG900 USB V1.1 port. For cabling instructions, see “Connecting a PC to the USB Port”.
Caution!
Before plugging in the USB cable, be sure the Motorola SURFboard Wireless Cable Modem Gateway
CD-ROM is inserted in the PC CD-ROM drive.
•A firewall to protect the SBG900 LAN from undesired attacks over the Internet
•Security measures to prevent eavesdropping of wireless data
Network Address Translation (NAT) provides some security because the IP addresses of SBG900 LAN computers
are not visible on the Internet.
The logical network diagram does not necessarily correspond to the network cabling. A full discussion of network
security is beyond the scope of this document.
SBG900 security measures shown in a logical network diagram
Internet
SBG900
DMZ computer
Firewall
ComputerComputer
Wired Ethernet LANWireless LAN
Wireless Security:
WEP shared key encryption
MAC access control list
Disable ESSID Broadcast
LaptopComputerPDA
Firewall
The SBG900 firewall protects the SBG900 LAN from undesired attacks and other intrusions from the Internet. It
provides an advanced integrated stateful-inspection firewall supporting intrusion detection, session tracking, and
denial-of-service attack prevention. The firewall:
•Maintains state data for every TCP/IP session on the OSI network and transport layers
•Monitors all incoming and outgoing packets, applies the firewall policy to each one, and screens for improper
packets and intrusion attempts
•Provides comprehensive logging for all:
— User authentications
— Rejected internal and external connection requests
— Session creation and termination
— Outside attacks (intrusion detection)
You can configure the firewall filters to set rules for port usage. For information about choosing a predefined
firewall policy template, see “Setting the Firewall Policy”.
A de-militarized zone (DMZ) is one or more computers logically located outside the firewall between an SBG900
LAN and the Internet. A DMZ prevents direct access by outside users to private data.
For example, you can set up a web serveron a DMZ computer to enable outside users to access your website
without exposing confidential data on your network.
A DMZ can also be useful to play interactive games that may have a problem running through a firewall. You can
leave a computer used for gaming
information, see Gaming Configuration Guidelines.
only
exposed to the Internet while protecting the rest of your network. For more
Port Triggering
When you run a PC application that accesses the Internet, it typically initiates communications with a computer on
the Internet. In some applications, especially gaming, the computer on the Internet also initiates communications
with your PC. Because NAT does not normally allow these incoming connections to occur, the SBG900 supports
port triggering.
The SBG900 is preconfigured with port triggering for common applications. You can also configure additional port
triggers if needed on the Gateway > PORT TRIGGERS — custom Page.
Wireless Security
Because wireless LAN signals are transmitted using radio signals, it may be possible for your neighbor or
someone else you do not want accessing your wireless LAN. You need to limit access to only the intended
persons. To prevent unauthorized eavesdropping of data transmitted over the wireless LAN, you must enable
wireless security.
The default SBG900 settings provide no security for transmitted data.
The SBG900 enables you to use the following wireless security measures:
•Restrict access to computers having the same unique network name as the SBG900
•Encrypt data transmitted over the wireless interface by configuring a Wired Equivalency Privacy (WEP) key
on the SBG900 and wireless LAN clients (stations)
•Define a MAC access control list to restrict wireless LAN access to clients based on the MAC address.
If you disable ESSID broadcasting to enable closed network operation, the SBG900 does not transmit the network
name (ESSID). This provides additional protection because only wireless stations configured with your network
name can communicate with the SBG900. Closed network operation is an enhancement of the IEEE 802.11b
standard.
For information about configuring a wireless security, see “Setting Up the Wireless LAN”.
Port forwarding is the configuration of SBG logical data ports for applications having special network
requirements.
The SBG900 opens logical data ports when a computer on its LAN sends data, such as e-mail messages or web
data, to the Internet. A logical data port is different from a physical port, such as an Ethernet port. Data from a
protocol must go through certain data ports. Here are the data ports used by some protocols:
ProtocolPort
FTP20, 21
HTTP80
NTP123
Secure Shell22
SMTP e-mail25
Teln et23
Some applications, such as games and videoconferencing, require multiple data ports. If you enable NAT, this can
cause problems because NAT assumes that data sent through one port will return to the same port. You may need
to configure port forwarding to run applications with special requirements.
To configure port forwarding, you must specify an inbound (source) port or range of ports. The inbound port opens
only when data is sent to the inbound port and closes again after a specified time elapses with no data sent to it.
You can configure up to 32 port forwarding entries using the Gateway > PORT FORWARDING — config Page.
Virtual Private Net work s
The SBG900 allows multiple tunnel VPN pass-through operation to securely connect remote computers over the
Internet through the SBG900. The SBG900:
•Is compatible with Point to Point Tunneling Protocol (PPTP) and Layer 2 Tunneling Protocol (L2TP)
•Is fully interoperable with any IPSec client or gateway and ANX certified IPSec stacks
Relate d Documentation
The following documents also provide information you can use with the SBG900:
The following subsections provide information about installing the SBG900 hardware:
•Before You Begin
•Precautions
•Signing Up for Service
•Computer System Requirements
•Connecting the SBG900 to the Cable System
•Cabling the LAN
•Obtaining an IP Address for Ethernet
•Connecting a PC to the USB Port
For information about wireless LAN setup, see “Setting Up the Wireless LAN”.
Before You Begin
Before you begin the installation, check that you received the following items with your SBG900:
ItemDescription
Power adapter
cord
10/100Base-T
Ethernet cable
USB cableConnects to the USB port
Motorola SURFboard
Wireless Cable Modem
Gateway
You will need 75-ohm coaxial cable with F-type connectors to connect the SBG900 to the nearest cable outlet. If a
TV is connected to the cable outlet, you may need a 5 to 900 MHz RF splitter and two additional coaxial cables to
use both the TV and the SBG900.
Determine the connection types you will make to the SBG900. Check that you have the required cables, adapters,
and adapter software. You may need:
Wireless LANW
Wired Ethernet LAN Ethernet cables and network interface cards (NICs) with accompanying installation software
CD-ROM
ireless adapter and driver software for each computer having a wireless connection (see
“Optional Accessories”)
To connect more than one computer to the SBG900, one or more Ethernet hubs or switches
Connects the SBG 900 to the external AC power supply
Connects to the Ethernet port
Contains this
User Guide
and USB drivers
USBA USB cable and the
containing the software for USB installation
Coaxial cable, RF splitters, hubs, and switches are available at consumer electronic stores.
You can connect Microsoft Windows, Macintosh, UNIX, or Linux computers equipped as follows to the
SBG900 LAN:
•
One
of the following:
Ethernet10Base-T or 10/100Base-T Ethernet adapter with proper NIC driver software installed
Wireless
Any IEEE 802.11g or IEEE 802.11b device
For information about the Motorola PCC11b Wireless Card (
USB11b Wireless Adapter, see “Optional Accessories
”.
PCMCIA type II 3.3 V slot) or
•PC with Pentium class or better processor
•Windows
or Linux operating system with operating system CD-ROM available
®
98, Windows® 98 SE, Windows Me®, Windows® 2000, Windows XPTM, Windows NT®, Macintosh,
•Minimum 16 MB RAM recommended
•10 MB available hard disk space
You can use any web browser such as Microsoft® Internet Explorer or Netscape Navigator® with the SBG900.
You can use the USB connection with any PC running Windows 98, Windows 2000, Windows Me, or Windows XP
that has a USB interface. The USB connection requires special USB driver software that is supplied on the
Motorola SURFboard Wireless Cable Modem Gateway
Downloads page http://broadband.motorola.com/noflash/usb_drivers.asp on the Motorola Broadband website.
1Be sure the computer is on and the SBG900 is unplugged.
2Connect one end of the coaxial cable to the cable outlet or splitter.
3Connect the other end of the coaxial cable to the cable connector on the SBG900.
Hand-tighten the connectors to avoid damaging them.
4Insert the
Motorola SURFboard Wireless Cable Modem Gateway
CD-ROM into the CD-ROM drive.
5Plug the power cord into the power connector on the SBG900.
6Connect the external power supply.
7Plug the power cord into the electrical outlet.
not in use. The first time you plug in the SBG900, allow 5 to 30 minutes to find and lock on the appropriate
communications channels.
Step 3
This turns the SBG900 on. You do not need to unplug it when
Step 2
Steps 5 to 7
8Check that the lights on the front panel cycle through this sequence:
POWERTurns on when AC power is connected to the SBG900. Indicates that the power supply is working
properly.
RECEIVEFlashes while scanning for the receive channel. Changes to solid green when the receive channel is
locked.
SENDFlashes while scanning for the send channel. Changes to solid green when the send channel is
locked.
ONLINEFlashes during SBG900 registration and configuration. Changes to solid green when the SBG900 is
registered.
PC/ACTIVITY Flashes when the SBG900 is transmitting or receiving data.
Cabling the LAN
After connecting to the cable system, you can connect your wired Ethernet LAN. Some samples are shown in
“Wired Ethernet LAN”. On each networked computer, you must install proper drivers for the Ethernet NIC.
Detailed information about network cabling is beyond the scope of this document.
5Click Log In to display the SBG900 user configuration and status windows:
ClickTo Perform
CableConfigure and monitor the cable system connection.
GatewayConfigure and monitor the gateway preferences (see Configuring the Gateway).
WirelessConfigure and monitor the wireless interface (see “Setting Up the Wireless LAN”).
FirewallConfigure and monitor the firewall (see “Setting the Firewall Policy”).
AdminChanging the Default Password.
InfoDisplay information about the
RebootRestart the SBG900. It is the same as pressing the reset button on the rear panel for less than five
seconds.
Log OutLog out of the SBG900.
If you have difficulty starting the SBG900 Setup Program, see “Troubleshooting” for information.
Router is a configuration option that may appear on your window but may not be supported.
For some settings, after you edit the field and click Apply, you are warned that you must reboot for your change
to take effect. Rebooting takes 10 to 15 seconds. After rebooting, you must log-in again.