NETGEAR and the NETGEAR logo are trademarks of NETGEAR, Inc. Microsoft, Windows, and Windows NT are
registered trademarks of Microsoft Corporation. Other brand and product names are registered trademarks or trademarks
of their respective holders.
Statement of Conditions
In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to
make changes to the products described in this document without notice. NETGEAR does not assume any liability that
may occur due to the use or application of the product(s) or circuit layout(s) described herein.
FCC Warning Statement
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:
(1) this device may not cause harmful interference, and
(2) this device must accept any interference received, including interference that may cause undesired operation.
This equipment has been tested and found to comply with the limits for a class B digital device, pursuant to part 15 of the
FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential
installation.
This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with
the instructions, may cause harmful interference to radio communications. However, there is no guarantee that
interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or
television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to
correct the interference by one or more of the following measures:
•Reorient or relocate the receiving antenna.
•Increase the separation between the equipment and receiver.
•Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
•Consult the dealer or an experienced radio/TV technician for help.
CAUTION: Any changes or modifications not expressly approved by the party responsible for compliance could void
the user’s authority to operate the equipment.
Prohibition of Collocation
This device and its antenna(s) must not be collocated or operating in conjunction with any other antenna or transmitter.
Safety Information
To maintain compliance with FCC’s RF exposure guidelines, this equipment should be installed and operated with
minimum distance of 20 cm between the radiator and your body. Use the supplied antenna.
Declaration of Conformity for R&TTE directive 1999/5/EC
Essential requirements – Article 3. Protection requirements for health and safety – Article 3.1a. Testing for electric
safety according to EN 60950-1 has been conducted. These are considered relevant and sufficient. Protection
requirements for electromagnetic compatibility – Artic le 3.1b. Te sting for electromagnetic compatibility according to
EN 301 489-1 and EN 301 489-17 has been conducted. These are considered relevant and sufficient. Effective use of the
ii
v1.0, November 2006
Page 3
Wireless Cable Voice Gateway Model CVG824G Reference Manual
radio spectrum – Article 3.2. Testing for radio test suites according to EN 300 328- 2 has been conducted. These are
considered relevant and sufficient.
Bestätigung des Herstellers/Importeurs
Es wird hiermit bestätigt, daß das Wireless Cable Voice Gateway gemäß der im BMPT-AmtsblVfg 243/1991 und Vfg
46/1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte (z.B. Testsender) kan n
jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der Betriebsanleitung.
Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt
gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen.
Certificate of the Manufacturer/Importer
It is hereby certified that the Wireless Cable Voice Gateway has been suppressed in accordance with the conditions set
out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example, test
transmitters) in accordance with the regulations may, however, be subject to certain restrictions. Please refer to the notes
in the operating instructions.
Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market
and has been granted the right to test the series for compliance with the regulations.
Technical Support
Thank you for choosing Netgear product(s). Please register online and take advantage of the
technical support resources such as NETGEAR online knowledge base. Technical support is
available 24 hours a day, seven days a week; please call your Cable Internet Service Provider.
Product and Publication Details
Model Number:CVG824G
Publication Date:November 2006
Product Family:Gateway
Product Name:Wireless Cable Voice Gateway
Home or Business Product:Home
Language:English
Publication Part Number:202-10074-01
v1.0, November 2006
iii
Page 4
Wireless Cable Voice Gateway Model CVG824G Reference Manual
iv
v1.0, November 2006
Page 5
Contents
About This Manual
Conventions, Formats, and Scope ................................................................................... ix
How to Use This Manual ...................................................................................................x
How to Print this Manual ....................................................................................................x
Wireless Cable Voice Gateway Model CVG824G Reference Manual
viii
1.0, November 2006
Page 9
About This Manual
The NETGEAR® Wireless Cable Voice Gateway Model CVG824G Reference Manual describes
how to install, configure, and troubleshoot the Voice Gateway. The information in this manual is
intended for readers with intermediate computer and Internet skills.
Conventions, Formats, and Scope
The conventions, formats, and scope of this manual are described in the following paragraphs:
•Typographical Conventions. This manual uses the following typographical conventions:
ItalicsEmphasis, books, CDs, URL names
BoldUser input
Fixed
•Formats. This manual uses the following formats to highlight special messages:
Screen text, file and server names, extensions, commands, IP addresses
Note: This format is used to highlight information of importance or special interest.
Tip: This format is used to highlight a procedure that will save time or resources.
Warning: Ignoring this type of note may result in a malfunction or damage to the
equipment.
Danger: This is a safety warning. Failure to take heed of this notice may result in
personal injury or death.
v1.0, November 2006
ix
Page 10
Wireless Cable Voice Gateway Model CVG824G Reference Manual
•Scope. This manual is written for the Voice Gateway according to these specifications:
For more information about network, Internet, firewall, and VPN technologies, see the links to the
NETGEAR website in Appendix B, “Related Documents”.
Note: Product updates are available on the NETGEAR, Inc. website at
http://kbserver.netgear.com/products/CVG824G.asp.
How to Use This Manual
The HTML version of this manual includes the following:
•Buttons, and , for browsing forwards or backwards through the manual one page
at a time
•A button that displays the table of contents and an button. Double-click on a
link in the table of contents or index to navigate directly to where the topic is described in the
manual.
•A button to access the full NETGEAR, Inc. online knowledge base for the product
model.
•Links to PDF versions of the full manual and individual chapters.
How to Print this Manual
T o print this manual you can choose one of the following several options, according to your needs.
Your computer must have the free Adobe Acrobat Reader installed in order to view and print PDF
files. The Acrobat Reader is available on the Adobe website at http://www.adobe.com.
•Printing a Page in the HTML View. Each page in the HTML version of the manual is
dedicated to a major topic. Use the Print button on the browser toolbar to print the page
contents.
•Printing a Chapter. Use the PDF of This Chapter link at the top left of any page.
x
v1.0, November 2006
Page 11
Wireless Cable Voice Gateway Model CVG824G Reference Manual
–Click the PDF of This Chapter link at the top right of any page in the chapter you want to
print. The PDF version of the chapter you were viewing opens in a browser window.
–Click the print icon in the upper left of the window.
Tip: If your printer supports printing two pages on a single sheet of paper, you can
save paper and printer ink by selecting this feature.
•Printing the Full Manual. Use the Complete PDF Manual link at the top left of any page.
–Click the Complete PDF Manual link at the top left of any page in the manual. The PDF
version of the complete manual opens in a browser window.
–Click the print icon in the upper left of the window.
Tip: If your printer supports printing two pages on a single sheet of paper, you can
save paper and printer toner by selecting this feature.
v1.0, November 2006
xi
Page 12
Wireless Cable Voice Gateway Model CVG824G Reference Manual
xii
v1.0, November 2006
Page 13
Chapter 1
Installing the Gateway
This chapter describes how to set up the wireless voice gateway on your Local Area Network
(LAN), connect to the Internet, and perform basic configuration. For information about product
features and compatible NETGEAR products, please see the NETGEAR Web site at
http://www.netgear.com.
Package Contents
The product package should contain the following items:
•NETGEAR® Wireless Cable Voice Gateway
•Wireless Cable Voice Gateway Model CVG824G Quick Install Guide
•AC power adapter with separate battery
•Category 5 (CAT5) Ethernet cable
•USB cable
•NETGEAR CD, including:
–This manual
–Application Notes, Tools, and other helpful information
If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Keep the
carton, including the original packing materials, in case you need to return the product for repair.
v1.0, November 2006
1-1
Page 14
Wireless Cable Voice Gateway Model CVG824G Reference Manual
The Gateway Front Panel
The front panel of the CVG824G (Figure 1-1) contains status LEDs.
Figure 1-1
You can use some of the LEDs to verify connections. Table 1-1 lists and describes each LED on
the front panel of the Voice Gateway. These LEDs are green when lit.
Table 1-1. LED Descriptions
LabelActivityDescription
PowerGreen Solid Power is supplied to the gateway.
Green BlinkBattery is charged.
Amber SolidDischarge battery (when 110V power is shut down).
Amber BlinkBattery capacity is low (<10%)
OffPower is not supplied to the gateway.
Cable LinkAmber Slow
Blink
Amber Fast
Blink
Green SolidCable link.
Green BlinkUpstream data traffic
OffNo configuration.
Scanning downstream channel.
Synchronization
1-2Installing the Gateway
v1.0, November 2006
Page 15
Wireless Cable Voice Gateway Model CVG824G Reference Manual
Table 1-1. LED Descriptions (continued)
LabelActivityDescription
Wireless Green SolidThe wireless connection is operating normally.
Green BlinkData is being transmitted or received on the wireless interface.
OffNo wireless link is detected.
USB PortGreen SolidA USB device is connected to the USB port.
OffNo USB device is connected.
Voice Ports
(1 and 2)
LAN (Local
Area Network)
Green SolidRegistered with the Call Agent.
Green BlinkThere is an active call.
Green Slow
Blink
OffNo phones are connected to the voice port.
Green OnThe Local port has detected link with a 100 Mbps device.
Green BlinkData is being transmitted or received at 100 Mbps.
Amber OnThe Local port has detected link with a 10 Mbps device.
Amber BlinkData is being transmitted or received at 10 Mbps.
OffNo link is detected on this port.
Phone is “on-hook”; registration with Call Agent is in progress.
The Gateway Rear Panel
The label on the bottom of the gateway identifies the connections on the rear panel. The rear panel
includes the following connections, viewed from left to right, as illustrated in Figure 1-2.
•Wireless Antenna: The gateway ships with the wireless antenna already attached.
•Power: AC power adapter input.
•Reset button: Resets the gateway to its factory defaults.
•Four Ethernet LAN ports: Use these ports to connect local computers.
•USB port: If the USB driver is installed, you can connect a local computer to this port.
•Coaxial cable connector: Attach coaxial cable to the cable service provider’s connection.
•Two Voice/Phone ports: With VoIP service, connect one or two handsets to these ports.
Installing the Gateway1-3
v1.0, November 2006
Page 16
Wireless Cable Voice Gateway Model CVG824G Reference Manual
Wireless antenna
Reset button
Coaxial cable to your cable
USB port
AC power adapter input
Figure 1-2
service provider
Four Ethernet LAN ports to connect local
computers
Installing the Voice Gateway
Voice/phone ports to
connect handsets
Installation is a four-part process. Complete the installation in this order:
1. Check the Installation Requirements. See “Installation Requirements” on page 1-4.
2. Connect the Gateway. See “Connecting the Wireless Voice Gateway” on page 1-5.
3. Log in to the Gateway. See “Logging In To the Wireless Voice Gateway” on page 1-7.
4. Connect to the Internet. See
“Connecting to the Internet and VoIP” on page 1-8.
After installation, set up the wireless connection as explained in Chapter 2, “Wireless
Configuration”.
Installation Requirements
Check the requirements listed below before installing the gateway:
•Local Computer. During installation, you need a local computer to connect to the gateway via
Ethernet or USB.
–This computer should be set up to access the cable modem Internet service.
1-4Installing the Gateway
v1.0, November 2006
Page 17
Wireless Cable Voice Gateway Model CVG824G Reference Manual
–This computer must be set up to use DHCP to get its TCP/IP configuration from the
gateway. See the link “Preparing a Computer for Network Access:” in Appendix B for
help with DHCP configuration.
•Cabling. Use a Category 5 (CAT5) cable such as the one provided with your gateway for your
LAN connections.
•Cable Modem Service. There must be active Data Over Cable Internet service provided by
cable modem account.
•Internet Service Provider (ISP) Configuration. Depending on how the ISP set up the
Internet account, you will need one or more of these configuration settings to connect the
gateway to the Internet:
–Host and Domain Names
–ISP Domain Name Server (DNS) Addresses
–Fixed or Static IP Address
•Computers on the Network. Each computer that will connect to the gateway must have either
an installed Ethernet Network Interface Card (NIC), USB Host port, or 802.11b or 802.11g
wireless adapter.
Connecting the Wireless Voice Gateway
To install the gateway, connect it to a computer either via an Ethernet or a USB according to the
guidelines in the following sections.
Ethernet Connection
If you are connection a computer to the gateway with an Ethernet cable, following these
instructions.
1. Turn off your computer.
2. Use the coaxial cable provided by your cable company to connect the wireless voice gateway
cable port to your cable line splitter or outlet.
3. Connect the LAN port on the gateway to your computer with the Ethernet cable included in
the box.
4. Plug in the gateway and wait about 30 seconds for the lights to stop blinking.
5. Turn on your computer. If software usually logs you in to your Internet connection, do not run
that software or cancel it if it starts automatically.
Installing the Gateway1-5
v1.0, November 2006
Page 18
Wireless Cable Voice Gateway Model CVG824G Reference Manual
6. Verify the following:
a. The power light is lit after turning on the gateway.
b. The cable link light is solid green, indicating a link has been established to the cable
network.
c. The LAN LED is lit for the port where you connected the computer.
USB Connection
Note: The USB connection option is only available for W indows PCs. Also, W indows 95
does not support USB without special operating system upgrades and patches.
To connect a computer to the USB port on the gateway.
1. You must install the USB driver. Insert your NETGEAR CD into the CD drive of your
computer.
a. Connect the USB cable to your modem and plug in the AC power for the gateway.
b. Use the USB cable to connect your computer to the gateway.
c. The Foun d New Hardware Windows installation wizard prompts for the drivers.
d. Browse to the NETGEAR CD and install the USB driver by clicking through the
Windows wizard prompts.
1-6Installing the Gateway
v1.0, November 2006
Page 19
Wireless Cable Voice Gateway Model CVG824G Reference Manual
Figure 1-3
2. Connect your computer to the USB port on the gateway.
3. Plug in your gateway and wait about 30 seconds for the lights to stop blinking .
4. Now, turn on your computer. If software usually logs you in to your Internet connection, do
not run that software or cancel it if it starts automatically.
5. Verify the following:
a. The power light is lit after turning on the gateway.
b. The cable link light is solid green, indicating a link has been established to the
cable network.
c. The USB light is lit.
Logging In To the Wireless Voice Gateway
Note: To connect to the gateway, your computer must be configured to use DHCP. For
instructions on how to do this, see the link to “Preparing a Computer for Network
Access:” in Appendix B.
To log in to the gateway:
Installing the Gateway1-7
v1.0, November 2006
Page 20
Wireless Cable Voice Gateway Model CVG824G Reference Manual
1. Using the computer that you first used to access your cable modem Internet service, connect to
the gateway by typing http://192.168.0.1 in the address field of your Internet browser.
http://192.168.0.1
Figure 1-4
Note: You can use the parent or child user name and password to install the gateway.
If you plan to set up Parental Control or MAC Filtering, then you need to log in
as the parent.
2. When prompted to log in, enter the user name and password.
•The default parent user name and password are superuser and password, both in lower
case letters.
•The default child user name and password are admin and password, both in lower case
letters.
You are now connected to the gateway.
Connecting to the Internet and VoIP
To configure the gateway to connect to the Internet.
1. From under Setup on the main menu, select Basic Settings. The Basic Settings screen shown
below will display.
1-8Installing the Gateway
v1.0, November 2006
Page 21
Wireless Cable Voice Gateway Model CVG824G Reference Manual
:
Figure 1-5
Dynamic IP
Static IP
2. Select Dynamic or Static IP Address:
•If your service provider assigns your IP address through DHCP, select “Dynamic IP.”
•If your service provider assigned you a permanent, fixed (static) IP address for your PC,
select “Static IP.” Then enter the IP address that your ISP assigned. Also enter the Static IP
Mask (also known as netmask), Gateway IP address and Domain Name Server (DNS)
Address.
•The WAN Default Gateway is the ISP’s router to which your gateway will connect.
•A DNS server is a host on the Internet that translates Internet names (such as
http://www.netgear.com) to numeric IP addresses. Typically your ISP transfers the IP
address of one or two DNS servers to your gateway during login. If the ISP does no t
transfer an address, you must obtain it from the ISP and enter it manually here. If you enter
an address here, you should reboot your PCs after configuring the gateway.
3. Click Apply to accept these settings.
Installing the Gateway1-9
v1.0, November 2006
Page 22
Wireless Cable Voice Gateway Model CVG824G Reference Manual
4. If you have VoIP service, connect the phone to a Voice Port 1. If your service includes a
second line, you can connect that phone to Voice Port 2. To check the voice status, see “MTA
Status” on page 4-3.
To set up a wireless connection, see Chapter 2, “Wireless Configuration”.
1-10Installing the Gateway
v1.0, November 2006
Page 23
Chapter 2
Wireless Configuration
This chapter describes how to set up the wireless features of your wireless voice gateway. In
planning your wireless network, consider the level of security required. Select the location of your
wireless equipment in order to maximize the network speed.
Set up wireless features for the wireless voice gateway in this order:
1. Install the wireless voice gateway as described in Chapter 1, “Installing the Gateway”. The
wireless voice gateway should be working on your LAN before you set up the wireless
features.
2. Plan the location for the wireless voice gateway based on considerations in “Wireless
Placement and Range Guidelines” on page 2-1.
3. Use the form in section “SSID and Wireless Security Settings Form” on page 2-3 to keep track
of your settings.
4. Enter the wireless settings, and verify wireless connectivity as described in “Configuring
Wireless Settings” on page 2-4.
5. Set up wireless security as described in “Understanding Wireless Security Options” on
page 2-4 and “Configuring Wireless Settings” on page 2-4.
For more information about wireless technology, see the link to “Wireless Communications” in
Appendix B, “Related Documents”.
Wireless Placement and Range Guidelines
The range of your wireless connection can vary significantly based on the physical placement of
the wireless voice gateway. The latency, data throughput performance, and notebook power
consumption of wireless adapters also vary depending on your configuration choices.
For best results, place your wireless voice gateway:
•Near the center of the area in which your PCs will operate.
•In an elevated location such as a high shelf where the wirelessly connected PCs have line-ofsight access (even if through walls).
2-1
v1.0, November 2006
Page 24
Wireless Cable Voice Gateway Model CVG824G Reference Manual
•Away from sources of interference, such as PCs, microwave ovens, and 2.4 GHz cordless
phones.
•Away from large metal surfaces.
•Put the antenna in a vertical position to provide the best side-to-side coverage. Put the antenna
in a horizontal position to provide the best up-and-down coverage.
•If using multiple access points, it is better if adjacent access points use different radio
frequency channels to reduce interference. The recommended channel spacing between
adjacent access points is 5 channels (for example, use channels 1 and 6, or 6 and 11).
The time it takes to establish a wireless connection can vary depending on both your security
settings and placement. WEP connections can take slightly longer to establish. Also, WEP
encryption can consume more battery power on a notebook computer.
2-2Wireless Configuration
v1.0, November 2006
Page 25
Wireless Cable Voice Gateway Model CVG824G Reference Manual
SSID and Wireless Security Settings Form
For a new wireless network, print or copy this form and fill in the settings. For an existing wireless
network, the person who set up or is responsible for the network can get the settings. Be sure to set
the Regulatory Domain correctly as the first step.
•SSID. The Service Set Identification (SSID) identifies the wireless local area network.
NETGEAR is the default SSID. However, you may customize it by using up to 32
alphanumeric characters. Write your customized SSID on the line below.
____________________________________________________
The SSID in the wireless voice gateway is the SSID you configure in the wireless adapter card.
All wireless nodes in the same network must be configured with the same SSID.
•Authentication.
Circle one: Open System or Shared Key. Choose Shared Key for more security.
To use Shar ed Key, all devices in the network must be set to Shared Key and have the same
keys in the same positions as those in the CVG824G.
•WEP Encryption Keys. For all four keys, choose the Key Size. Circle one: 64, or 128 bits.
Key 1: ______________________________________________
Key 2: ______________________________________________
Key 3: ______________________________________________
Key 4: ______________________________________________
•WPA-PSK (Pre-Shared Key) and WPA2-PSK. Record the WPA-PSK or WPA2-PSK key.
Key: _____________________________________________
•WPA and WPA2 RADIUS Settings. For WPA and WPA2, record the following settings for
the primary and secondary RADIUS servers.
Server Name/IP Address: _____________________________________________
Port: _____________________________________________
Shared Key: _____________________________________________
Use the procedures described in the following sections to configure the CVG824G. Store this
information in a safe place.
Wireless Configuration2-3
v1.0, November 2006
(8-63 characters)
Page 26
Wireless Cable Voice Gateway Model CVG824G Reference Manual
Understanding Wireless Security Options
Wireless data transmissions can be received well beyond your walls by anyone with a compatible
adapter. For this reason, use the security features of your wireless equipment. For more
information about wireless security, see the link “Wireless Communications:” in Appendix B.
Deploy the security features appropriate to your needs.
There are several ways you can enhance the security of your wireless network:
•MAC access list (Wireless Card Access). You can restrict access to only trusted PCs so that
unknown PCs cannot wirelessly connect to the gateway. This adds an obstacle against
unwanted access to your network, but the data broadcast over the wireless link is fully
exposed.
•Use WEP. Wired Equivalent Privacy (WEP) data encryption provides data security. WEP
Shared Key authentication and WEP data encryption will block all but the most determined
eavesdropper.
•Use WPA, WPA-PSK or WPA2-PSK. Wi-Fi Protected Access (WPA) data encryption
provides data security. The very strong authentication along with dy namic per frame rekeying
of WPA makes it virtually impossible to compromise.
•Turn Off the Broadcast of the Wireless Network Name (SSID). If you disable broadcast of
the SSID, only devices that have the correct SSID can connect. This nullifies the wireless
network “discovery” feature of some products such as Windows XP, but the data is still fully
exposed to a determined snoop using specialized test equipment like wireless sniffers.
Configuring Wireless Settings
To configure the wireless settings:
1. Connect a computer to the wireless voice gateway using an Ethernet or USB cable as
described in “Connecting the Wireless Voice Gateway” on page 1-5.
2. Enter http://192.168.0.1 in the address field of your Internet browser.
2-4Wireless Configuration
v1.0, November 2006
Page 27
Wireless Cable Voice Gateway Model CVG824G Reference Manual
3. Under Setup on the main menu, select Wireless Settings.
Figure 2-1
4. Configure or confirm the Wireless Settings page options described below:
•Wireless Network Name (SSID): Enter an SSID up to 32 characters. The characters are
case-sensitive. The default is NETGEAR.
•Channel: Select the channel for your wireless LAN. The default is channel 6. Only
change the channel if there is interference (shown by lost connections and/or slow data
transfers).
•Enable Wireless Access Point: Normally the Wireless Ac cess Point is enabled so that
computers on the network can access the Internet. The default is enabled.
•Allow Broadcast of Name (SSID): If enabled, the gateway broadcasts the SSID to all
wireless stations. Stations with no SSID (or a “null” value) can use the SSID to connect to
this access point. The default is enabled.
•Wireless Card Access List: You can use an Access List to increase security for the
wireless network. The Access List includes the MAC addresses of PCs that are allowed to
connect. The default is disabled. If you enable this feature, see “Configuring Your
Wireless Card Access List” on page 2-11.
Wireless Configuration2-5
v1.0, November 2006
Page 28
Wireless Cable Voice Gateway Model CVG824G Reference Manual
•Security Options: Wireless security is disabled by default. Configure wireless security by
selecting one of the following options: “WEP (Wired Equivalent Privacy)” on page 2-7,
“WP A-PSK (W iFi Protected Access Pre-Shared Key)” on page 2-8, or “WP A2-PSK (W iFi
Protected Access 2 Pre-Shared Keys)” on page 2-10.
5. Click Apply to save your wireless settings.
Setting up Wireless Security
To configure the wireless security settings:
1. Type http://192/168/0/1 in the address field of your browser window.
2. When prompted, enter your User Name and Password. The management user interface will
display.
3. Under the Setup menu, select the Wireless Settings link and scroll down to Security Options.
The Security Options screen will display.
Figure 2-2
4. Select the Security Option you want to use. (The available security options are explained in the
following sections.
5. Click Apply to save your settings.
2-6Wireless Configuration
v1.0, November 2006
Page 29
Wireless Cable Voice Gateway Model CVG824G Reference Manual
WEP (Wired Equivalent Privacy)
To configure WEP data encryption:
1. From the Wireless Settings page, choose WEP (Wired Equivalent Privacy) 64-bit encryption
or WEP (Wired Equivalent Privacy) 128-bit encryption.
Figure 2-3
2. Choose the authentication “Open System or Shared Key,” or Shared Key.”
3. If you use encryption keys, enter them. These values must be identical on all computers in
your network. There are two ways to enter the keys:
•Passphrase: Enter a word or group of printable characters in the Passphrase box and click
the Generate button. The four key boxes will be automatically populated with key values.
•Manual: Enter ten hexadecimal digits (any combination of 0-9, a-f, or A-F)
Select which of the four keys will be the default.
See the link to “Wireless Communications” in Appendix B, “Related Documents” for a full
explanation of each of these options, as defined by the IEEE 802.11 wireless communication
standard.
4. Click Apply to save your settings.
Wireless Configuration2-7
v1.0, November 2006
Page 30
Wireless Cable Voice Gateway Model CVG824G Reference Manual
Note: If you use a wireless computer to configure WEP settings, you will be disconnected
when you click Apply. Reconfigure your wireless computer to match the new
settings, or access the wireless voice gateway from a wired computer to make
further changes.
WPA-PSK (WiFi Protected Access Pre-Shared Key)
Not all wireless adapters support WP A-PSK. Furthermore, client software is required on the client.
Windows XP and Windows 2000 with Service Pack 3 or above do include the client software that
supports WPA. Nevertheless, the wireless adapter hardware and driver must also support WPA.
Consult the product document for your wireless adapter and WPA client software for instructions
on configuring WPA settings.
To configure WPA-PSK:
1. From the Wireless Settings page, select WPA-PSK.
Figure 2-4
2. In the Passphrase Key field under Security Encryption (WPA-PSK), enter a word or group of
printable characters and the Key Lifetime.
The Passphrase must be 8 to 63 characters in length. The 256 Bit key used for encryption is
generated from this passphrase.
3. Click Apply to save your settings.
2-8Wireless Configuration
v1.0, November 2006
Page 31
Wireless Cable Voice Gateway Model CVG824G Reference Manual
WPA (WiFi Protected Access)
Not all wireless adapters support WPA. Furthermore, client software is required on the client.
Windows XP and Windows 2000 with Service Pack 3 or above do include the client software that
supports WPA. Nevertheless, the wireless adapter hardware and driver must also support WPA.
Consult the product document for your wireless adapter and WPA client software for instructions
on configuring WPA setting.
To configure WPA:
1. From the Wireless Settings page, select the WPA Security Option and scroll to display the
WPA Radius settings shown below.
Figure 2-5
2. Enter the WPA settings.
These settings are required for communication and authentication from a Radius server. A
Secondary Radius Server can be configured which is used if the Primary Radius Server fails.
•Primary Radius Server IP Address: The IP address of the Radius Server. The default is
0.0.0.0
•Radius Port: Port number of the Radius Server. The default is 1812.
•Radius Key: This is shared between the gateway and the Radius Server during
authentication.
3. Click Apply to save your settings.
Wireless Configuration2-9
v1.0, November 2006
Page 32
Wireless Cable Voice Gateway Model CVG824G Reference Manual
Not all wireless adapters support WPA2-PSK. Furthermore, client software is required on the
client. Windows XP and Windows 2000 with Service Pack 3 or above do include the client
software that supports WPA2. Nevertheless, the wireless adapter hardware and driver must also
support WPA2. Consult the product document for your wireless adapter and WPA client software
for instructions on configuring WPA settings.
To configure WPA2-PSK:
1. From the Wireless Settings page, select WPA2-PSK (Wi-Fi Protected Access 2 Pre-Shared
Key).
Figure 2-6
2. In the Pre-Shared Key field under Security Encryption (WP A2-PSK), enter a word or group of
printable characters.
The passphrase must be 8 to 63 characters in length. The 256 Bit key used for encryption is
generated from this passphrase.
3. Enter the Key Lifetime (in minutes).
4. Click Apply to save your settings.
WPA2 (WiFi Protected Access 2)
To configure WPA2:
1. From the Wireless Settings page, select the WPA2 Security Option.
2-10Wireless Configuration
v1.0, November 2006
Page 33
Wireless Cable Voice Gateway Model CVG824G Reference Manual
Figure 2-7
2. Enter the WPA2 settings.
These settings are required for communication and authentication from a Radius server. A
secondary Radius server can be configured, which is used if the primary Radius server fails.
•Primary Radius Server IP Address: The IP address of the Radius server. The default is
0.0.0.0
•Radius Port: Port number of the Radius Server. The default is 1812.
•Radius Key: This is shared between the gateway and the Radius Server during
authentication.
3. Click Apply to save your settings.
Configuring Your Wireless Card Access List
By default, any wireless PC that is configured with the SSID and WEP/WPA settings has access to
your wireless network. For increased security, you can restrict access to the wireless network to
only allow specific PCs based on their MAC addresses.
Wireless Configuration2-11
v1.0, November 2006
Page 34
Wireless Cable Voice Gateway Model CVG824G Reference Manual
To res t rict access based on MAC addresses:
1. Connect to the gateway and log in as described in “Configuring Wireless Settings” on
page 2-4.
Note: If your computer is connected wirelessly to the wireless voice gateway, be
careful about selecting the Turn Access Control On checkbox. If your
computer’s MAC address is not in the access control list, then you will lose
your wireless connection when you click Apply. You must then access the
wireless voice gateway from a wired computer, or from a wireless computer
that is on the access control list, to make any further changes.
2. Under Setup on the main menu, select Wireless Settings. The Wireless Settings screen will
display as shown in Figure 2-1 on page 2-5.
3. Scroll down to the Wireless Card Access List and check the Turn Access Control On radio
box.
Figure 2-8
When you turn on access control, the gateway only accepts connections from clients on the
selected access control list. This provides an additional layer of security.
4. Click Apply to confirm this setting.
To add or delete a Wireless Card from the Setup Access List:
1. Click Setup Access List. The Wireless Card Access List page will display.
The Access List displays a list of wireless clients that will have access to the wireless network
when the list is enabled.
2-12Wireless Configuration
v1.0, November 2006
Page 35
Wireless Cable Voice Gateway Model CVG824G Reference Manual
Figure 2-9
To add a device to the Access List:
1. Add a device to the Access List using either of the following methods:
a. If the computer is in the Connected Wireless Devices table, click the radio button of that
computer to capture its MAC address; or
b. Specify the MAC address of the device to be added to the Access List in the Add Access
Filter fields. The MAC address can usually be found on the bottom of the wireless device.
Note: If no Device Name appears when you enter the MAC address, you can type a
descriptive name for the computer that you are adding.
2. Click Add.
3. Repeat Steps a or b and 3 for each wireless PC that you are adding.
4. Click Apply to save these changes. Now, only devices on this list will be allowed to wirelessly
connect to the gateway.
To delete an entry from the Access List:
Check the corresponding radio button in the Access List and click Delete.
Wireless Configuration2-13
v1.0, November 2006
Page 36
Wireless Cable Voice Gateway Model CVG824G Reference Manual
2-14Wireless Configuration
v1.0, November 2006
Page 37
Chapter 3
Protecting Your Network
This chapter describes how to use the firewall features of the gateway to protect your network.
Changing the Default Password
For security reasons, the gateway has its own user name and password. After a period of inactivity
for a set length of time, the administrator login automatically disconnects. When prompted, enter
admin for the gateway user name and password for the gateway password. You can change the
password and the amount of time for the administrator login timeout.
Note: The user name and password are not the same as any user name or password your
may use to log in to your Internet connection.
NETGEAR recommends that you change this password to a more secure password. The ideal
password should contain no dictionary words from any language, and should be a mixture of both
upper and lower case letters, numbers, and symbols. Your password can be up to 30 characters.
To change the default password:
1. Log in to the gateway by entering the default LAN address of http://192.168.0.1 with its
default user name of admin, default password of password, or using whatever password and
LAN address you have chosen for the gateway.
http://192.168.0.1
Figure 3-1
Protecting Your Network3-1
BETA, November 2006
Page 38
Wireless Cable Voice Gateway Model CVG824G Reference Manual
2. From the Maintenance menu, select Set Password. The following dialog box appears:
Figure 3-2
3. To change the password, first enter the old password, and then enter the new password twice.
4. Click Apply to save your changes.
Note: After changing the password, you will be required to log in again to continue
the configuration. If you have backed up the gateway settings previously, you
should do a new backup so that the saved settings file includes the new
password.
Blocking Keywords, Sites and Services
The gateway provides a variety of options for blocking Internet content and communications to the
gateway. You can control access to Internet content by screening for keywords within Web
addresses; you also can block access to all sites except those that are explicitly allowed. Blocking
options include:
•Blocking access from your LAN to Internet locations that contain keywords that your specify.
•Blocking access to Web sites (doma ins) that you spec ify as off-limits.
•Allowing access to only Web sites (domains) that you specify as allowed.
You can also block access to the Internet by a specific computer based on the hardware MAC
address of that computer. Blocking access to the Internet based on the hardware MAC address of
the computer or wireless adapter is described in “Using MAC Filtering to Block Access” on
page 3-4.
To configure any of the parental controls, you must be logged in as a parent.
3-2Protecting Your Network
1.0, November 2006
Page 39
Wireless Cable Voice Gateway Model CVG824G Reference Manual
Blocking Keywords and Domains
You can restrict access to Internet content based on Web address keywords and domain names. A
domain name is the name of a particular Web site. For example, for the address www.netgear.com,
the domain name is NETGEAR.com.
Note: To configure Block Sites, you must be logged in as a parent.
To configure Block Sites:
1. Log in to the gateway by entering the default LAN address of http://192.168.0.1, the parent
user name of superuser, and default password of password; or use whatever password and
LAN address you have chosen for the gateway in parent mode.
2. On the Content Filtering menu, click Block Sites.
Figure 3-3
3. Enable Keyword Blocking or Domain Blocking by checking the appropriate Enable box.
4. Add keywords by entering them into the Add Keyword List. An example of some Keyword
applications are:
Protecting Your Network3-3
v1.0, November 2006
Page 40
Wireless Cable Voice Gateway Model CVG824G Reference Manual
•If the keyword “XXX” is specified, the URL “http://www.badstuff.com/xxx.html” is
blocked.
•If the keyword “.com” is specified, only Web sites with other domain suffixes (such as
.edu or .gov) can be viewed.
•If the keyword “.” is specified, all Internet browsing access is blocked.
Up to eight entries are supported in the Keyword List.
5. When you have completed your entries, click Add Keyword.
To enable Domain Blocking:
1. Check the Enable radio box adjacent to Domain Blocking.
2. Enter the Domain Name of the site name you want to block in the Add Domain List field.
If the domain “badstuff.com” is specified, the URL “http://www.badstuff.com/xxx.html” will
be blocked, along with all other URLs in the badstuff.com site.
Up to eight entries are supported in the Domain Blocking list.
3. When you have completed your entries, click Add Domain.
4. Click Apply to save your settings
To delete a an entry in either the Keyword List or Domain List field:
1. Select it from the list, and click Remove Keyword or Remove Domain.
2. Click Apply to save your settings.
Using MAC Filtering to Block Access
By default, any computer has access to the Internet through your gateway. MAC Filtering allows
you to block access to the Internet to any computer on your LAN based on the hardware MAC
address of its Ethernet or wireless adapter.
Note: To configure MAC Filtering, you must be logged in as a parent.
To implement MAC Filtering:
1. Log in to the gateway at its default LAN address by entering http://192.168.0.1, the parent
user name superuser, and default password of password; or use whatever password and LAN
address you have chosen for the gateway in parent mode.
3-4Protecting Your Network
1.0, November 2006
Page 41
Wireless Cable Voice Gateway Model CVG824G Reference Manual
2. Under Advanced on the main menu, select MAC Filtering. The MAC Filtering screen will
display . At the top of the page is a table of Trusted Devices that are currently connected to the
wireless voice gateway.
Figure 3-4
To add a device to the MAC Filtering list:
1. Select a device using one of the following methods:
a. If the desired device is in the Trusted Devices table, click the radio button of that PC to
capture is MAC address.
b. If the desired device is not in the Trusted Devices table, you can manually enter the MAC
address of the PC you wish to block. If no Device Name appears when you enter its MAC
address, you can type a descriptive name in the Device Name field.
2. Click Add. The device will appear in the MAC Filter List field.
To delete a device from the MAC Filtering list:
1. Select the MAC address of the PC from the MAC Filter List.
2. Click Delete to delete the entry.
3. Click Apply to activate the settings.
Blocking Access by Time of Day
The default blocking schedule is to block access all day. However, you can also block access
according to a daily schedule for each PC individually.
To block access for a PC:
1. In the MAC Filter List, select the PC for which the schedule will be modified.
2. In the Day(s) to Block section, click the boxes next to the days when you want access blocked.
Protecting Your Network3-5
v1.0, November 2006
Page 42
Wireless Cable Voice Gateway Model CVG824G Reference Manual
3. In the Time of Day to Block section, select either All Day, or set the hours for Internet
blocking
4. Click Apply to activate the settings.
Inbound and Outbound Rules
You can use firewall rules to block or allow specific traffic passing through from one side to the
other. Inbound rules (WAN to LAN) restrict access by outsiders to private resources, selectively
allowing only specific outside users to access specific resources. Outbound rules (LAN to WAN)
determine what outside resources local users can have access to.
A firewall has two default rules, one for inbound traffic and one for outbound. The default rules of
the gateway are:
•Inbound: Block all access from outside except responses to requests from the LAN side.
Instructions for setting up inbound rules can be found in “Port Forwarding” on page 3-8
•Outbound: Allow all access from the LAN side to the outside. Use Port Blocking to set up
outbound rules (see “Port Blocking” on page 3-7).
You may define more rules that specify exceptions to the default rules. By adding custom rules,
you can block or allow access based on the service or application, source or destination IP
addresses, and time of day.
3-6Protecting Your Network
1.0, November 2006
Page 43
Wireless Cable Voice Gateway Model CVG824G Reference Manual
Port Blocking
You can use Port Blocking to block outbound traffic on specific ports.
Figure 3-5
To configure port blocking:
1. Under Advanced on the main menu, select Port Blocking. The Port Blocking screen will
display.
2. Select the service that you want to block from the drop-down menu of Add Predefined
Services. (If the service that you want to block is not in the predefined list, you can add a
custom service.)
3. Enter the range of ports that you want to block and select whether the ports are TCP, UDP or
Both.
4. Enter the Local IP Address for the computer to which this rule will apply.
5. Click Add. The selected service will appear in the Port Filter List
To specify specific Days or Times to block a rule:.
Protecting Your Network3-7
v1.0, November 2006
Page 44
Wireless Cable Voice Gateway Model CVG824G Reference Manual
1. From the Port Filter List pull-down menu, select the rule that you added. and check the
Enable radio box.
2. Select the radio box of the Day(s) you want to apply the rule.
3. Select the time of day for the rule to be in effect by either check the All Day radio box or
specifying a Start Time and End Time from the pull-down menus.
4. Click Add. The new Port Blocking rule will appear in the Outbound Rules table.
To delete an existing rule:
1. Select the rule from the Port Filter List.
2. Click Delete.
Port Forwarding
You can use port forwarding to set up a rule that directs inbound traffic for a particular service to a
local server (for example, a Web server or game server) based on the destination port. This makes
the server visible and available to the Internet.
Unless you set up port forwarding, the gateway prevents this type of traffic.The gateway uses
Network Address Translation (NAT). NAT presents a single IP address for your network to the
Internet. Outside users cannot directly address your local computers.
Note: Some residential broadband ISP accounts do not allow you to run any server
processes (such as a Web or FTP server) from your location. Your ISP may check
for servers and may suspend your account if it discovers active services at your
location. If you are unsure, refer to the acceptable use policy of your ISP.
Before setting up Port Forwarding, consider the following:
•If the IP address of the local server PC is assigned by DHCP, it may change when the PC is
rebooted. To avoid this, you can assign a static IP address to your server outside the range that
is assigned by DHCP, but in the same subnet as the rest of your LAN. By default, the IP
addresses in the range of 192.168.0.2 through 192.168.0.9 are reserved for this.
•Local computers must access the local server using the local LAN address of the computer
(192.168.0.XXX, by default). Attempts by local computers to access the server using the
external WAN IP address will fail.
Remember that allowing inbound services opens holes in your firewall. Only enable those ports
that are necessary for your network.
3-8Protecting Your Network
1.0, November 2006
Page 45
Wireless Cable Voice Gateway Model CVG824G Reference Manual
To forward inbound traffic:
1. Select the service that you want to forward from the drop-down menu of Predefined Services.
If the service that you want to forward is not in the predefined list, you can add a custom
service. Enter the range of ports that you want to forward and select whether the ports are TCP,
UDP or Both.
2. Enter a new Start Port and End Port if you want to change the suggested port numbers.
3. From the drop-down Protocol menu, select the protocol: TCP, UDP, or Both.
4. Enter the IP address of the computer on your network to which you would like to direct the
inbound traffic in the Local IP Address field.
5. Click Add. The new Port Forwarding rule will appear in the Active Forwarding Rules table.
Figure 3-6
To delete an existing rule:
1. Check the radio button on the left side of the table adjacent to the rule you want to delete.
2. Click Delete to delete the Port Forwarding rule.
Protecting Your Network3-9
v1.0, November 2006
Page 46
Wireless Cable Voice Gateway Model CVG824G Reference Manual
Port Triggering
Port Triggering is an advanced feature that allows you to dynamical ly open inbound ports based on
outbound traffic on different ports. This feature can be used for gaming and other Internet
applications.
Note: Port Forwarding is similar to port triggering, but it is static and has some
limitations. Ports are open to traffic from the Internet until the port forwarding rule
is removed. Additionally, port forwarding does not work well for some
applications when your WAN IP address is assigned by DHCP, and is changed
frequently. Port Triggering opens an incoming port temporarily and does not
require the server on the internet to track your IP address if it is changed.
Port Triggering monitors outbo und traffic. When the gatewa y detects traffic on the specified
outbound port, it remembers the IP address of the computer that sent the data and “triggers” the
incoming port. Incoming traffic on the triggered port is then forwarded to the triggering computer.
For example, port triggering can be used for Internet Relay Chat (IRC). When you connect to an
IRC server, the server tries to connect back on the port to do an Ident lookup. Unless you have
configured Port Forwarding to open that port, the traffic will be blocked. In this example, the
initial login to the server in the range of ports is detected. This triggers the gateway to temporarily
forward the port to the PC that initiated the login.
To configure Port Triggering
1. Under Advanced on the main menu, select Port Triggering The Port Triggering screen will
display.
2. In the Trigger Range, enter the outbound ports that will be monitored for activity. This will be
the “trigger.”
3. In the Target Range, enter the inbound ports that should be forwarded when the trigger occurs.
4. Select the appropriate protocol: TCP, UDP or Both.
5. Check the Enable box
6. Click Apply.
3-10Protecting Your Network
1.0, November 2006
Page 47
Wireless Cable Voice Gateway Model CVG824G Reference Manual
Figure 3-7
To clear a Port Triggering rule:
1. Either remove the check from the Enable box to temporarily disable the rule, or
2. Select the rule and click Delete.
Setting Up A Default DMZ Host
The Default DMZ Server feature is helpful when using some online games and video conferencing
applications that are incompatible with NAT. The gateway is programmed to recognize some of
these applications and to work properly with them, but there are other applications that may not
function well. In some cases, one local PC can run the application properly if that PC’s IP address
is entered as the Default DMZ Host.
Note: For security, you should avoid using the Default DMZ Server feature. When a
computer is designated as the Default DMZ Server, it loses much of the protection
of the firewall, and is exposed to many exploits from the Internet. If compromised,
the computer can be used to attack your network.
Protecting Your Network3-11
v1.0, November 2006
Page 48
Wireless Cable Voice Gateway Model CVG824G Reference Manual
Incoming traffic from the Internet is normally discarded by the gateway unless the traffic is a
response to one of your local computers or a service that you have configured in the Port
Forwarding or Port Trigg ering page. Instead of di scarding this traf fic, you can have it forwarded to
one computer on your network. This computer is called the Default DMZ Host.
To assign a computer or server to be a DMZ Host:
1. From the Advanced menu, select DMZ Host.
Figure 3-8
2. Enter the IP address of the computer you would like to assign as a DMZ Host.
3. Click Apply.
To disable the DMZ Host, enter “0” and click Apply.
If you want the gateway to respond to a “ping” from the Internet, check the “Respond to Ping on
WAN Port” check box. This should only be used as a diagnostic tool, since it allows your gateway
to be discovered. Do not check this box unless you have a specific reason to do so.
Turning On Universal Plug and Play (UPnP)
Universal Plug and Play (UPnP) helps devices, such as Internet appliances and computers, access
the network and connect to other devices as needed. UPnP devices can automatically discover the
services from other registered UPnP devices on the network.
UPnP can be enabled or disabled for automatic device configuration. The default setting for UPnP
is disabled. If disabled, the router will not allow any device to automatically control the resources,
such as port forwarding (mapping), of the router.
Other features of UPnP:
3-12Protecting Your Network
1.0, November 2006
Page 49
Wireless Cable Voice Gateway Model CVG824G Reference Manual
•Advertisement Period. The number entered in this field (in minutes) determines how often
the router will advertise (broadcast) its UPnP information. This value can range from 1 to 1440
minutes. The default period is for 30 minutes.
–Shorter durations will ensure that control points have current device status at the expense
of additional network traffic.
–Longer durations may compromise the freshness of the device status but can significantly
reduce network traffic.
•Advertisement Time To Live. The time to live for the advertisement is measured in hops
(steps) for each UPnP packet sent. A hop is the number of steps allowed to propagate for each
UPnP advertisement before it disappears. The number of hops can range from 1 to 255. The
default value for the advertisement time to live is 4 hops, which should be fine for most home
networks. If you notice that some devices are not being updated or reached correctly, then you
may need to increase this value a little.
•UPnP Portmap T able. The UPnP Portmap Table displays the IP address of each UPnP device
that is currently accessing the router and which ports (internal and external) that device has
opened. The UPnP Portmap Table also displays what type of port is opened and if that port is
still active for each IP address.
To activate UPnP:
1. Check the Turn UPnP On radio box.
2. Click Apply.
To Save, Cancel or Refresh the Table:
•Click Apply to save the new settings to the gateway router.
•Click Cancel to disregard any unsaved changes.
•Click Refresh to update the portmap table and to show the active ports that are currently
opened by UPnP devices.
Protecting Your Network3-13
v1.0, November 2006
Page 50
Wireless Cable Voice Gateway Model CVG824G Reference Manual
Figure 3-9
Enabling or Disabling Content Filtering Services
You can use the Services page to disable or enable certain gateway features which are described as
follows:
•Firewall Features. When enabled, the gateway will perform Stateful Packet Inspection (SPI)
and protect against Denial of Service (DoS) attacks. Default is enabled.
•VPN Pass-Through. When enabled, IPSec and PPTP traffic will be forwarded. When it is
disabled, this traffic will be blocked. Default is enabled.
•Multicast. When enabled, the cable gateway has the ability to pass multicasting streams
through the firewall. Default is enabled.
•Web Features. If enabled, certain Web-oriented features such as cookies, java scripts, or pop-
up windows will be blocked by the firewall. The default is disabled. For example, if you
enable “Filter Cookies”, many Web sites will not allow you to access their site.
Note: To go to the Services page, you must be logged in as a parent.
To disable a feature:
1. Remove the check from its Enable check box.
3-14Protecting Your Network
1.0, November 2006
Page 51
Wireless Cable Voice Gateway Model CVG824G Reference Manual
2. Click Apply.
To enable a feature:
1. Check the Enable radio box adjacent to the feature.
2. Click Apply.
Figure 3-10
Protecting Your Network3-15
v1.0, November 2006
Page 52
Wireless Cable Voice Gateway Model CVG824G Reference Manual
3-16Protecting Your Network
1.0, November 2006
Page 53
Chapter 4
Managing Your Network
This chapter describes how to perform network management tasks such as Diagnostics, Restoring
Factory Default Settings and Backup, as well as monitoring the current status of your gateway.
Network Status Information
The gateway provides a variety of status and usage information, which is discussed below.
Viewing Gateway Status
Under Maintenance on the main menu, select Gateway Status. The Gateway Status page will
display.
Figure 4-1
Managing Your Network4-1
1.0, November 2006
Page 54
Wireless Cable Voice Gateway Model CVG824G Reference Manual
This Gateway Status fields are described in the following table:
Table 4-1. Gateway Status Fields
Field Description
Information
Standard Specification
Compliant
Hardware VersionThe hardware version of the gateway.
Software VersionThe software version of the gateway.
Cable MAC AddressThe MAC address used by the cable modem port of the gateway. This
Device MAC AddressThe MAC address of the gateway. This is the equivalent of your PC
Cable Modem Serial Number The serial number of the gateway hardware.
CM CertificateIf the cable modem certificate is Installed, it is possible for the service
Status
System Up TimeThis is the time since the gateway has registered with your cable service
Network AccessThis field will change to Allowed when the registration with your cable
Device IP AddressThe IP address of the gateway, as seen from the Internet.
The specification to which the gateway’s cable interface is compatible.
MAC address may need to be registered with your cable service
provider.
when connected to a cable modem. You can use the MAC cloning
feature to replace this MAC address with another address when sending
packets to the WAN.
provider to upgrade your Data Over Cable service securely.
provider.
service provider is complete.
4-2Managing Your Network
1.0, November 2006
Page 55
Wireless Cable Voice Gateway Model CVG824G Reference Manual
Viewing Connection Status
Under Maintenance on the main menu, select Connection. The Connection page will display.
Figure 4-2
This screen shows detailed information about the status of your cable service provider connection
that can be used for troubleshooting. The gateway goes through the following steps to be
provisioned:
1. Acquire and lock Downstream Channel.
2. Acquire upstream parameters and range.
3. Lock Upstream Channel.
4. Acquire IP Address through DHCP.
Current System Time
The date and time is acquired from your cable service provider as part of the registration
procedure.
MTA Status
The MTA Status shows the status of the voice ports on the gateway.
Managing Your Network4-3
1.0, November 2006
Page 56
Wireless Cable Voice Gateway Model CVG824G Reference Manual
About LAN IP Settings
The gateway is preconfigured to use private IP addresses on the LAN side, and to act as a DHCP
server. The LAN IP settings are explained below:
•LAN IP address: This is the IP address of the gateway.
Note: If you change the LAN IP address of the gateway while connected through the
browser, you will be disconnected. You must then open a new connection to
the new IP address and log in again
•Subnet mask: This is the LAN subnet mask of the gateway. The default is 255.255.255.0.
Combined with the IP address, the subnet mask allows a device to know which other addresses
are local to it, and which must be reached through a gateway or router.
These addresses are part of the IETF-designated private address range for use in private
networks, and should be suitable in most applications. If your network ha s a requirement to
use a different IP addressing scheme, you can make those changes in the LAN IP page.
•DHCP Server: By default, the gateway is a Dynamic Host Configuration Protocol (DHCP)
server. See “Using the Gateway as a DHCP Server” on page 4-5.
•Starting Address and Ending Address: Specify the pool of IP addresses to be assigned by
setting the Starting IP Address and Ending IP Address. These addresses should be part of the
same IP address subnet as the gateway’s LAN IP address. Using the default addressing
scheme, you should define a range between 192.168.0.10 and 192.168.0.253. The range of IP
addresses between 192.168.0.2 and 192.168.0.9 can be used for devices with fixed (or static)
addresses.
The default is 192.168.0.1.
•DHCP Reservation Lease Info: View information about each PC that has been assigned a
DHCP lease by the gateway. The MAC address of the PC, IP address assigned and the
expiration time of the DHCP lease are listed. You can manually revoke the DHCP leases by
clicking Clear DHCP Leases.
4-4Managing Your Network
1.0, November 2006
Page 57
Wireless Cable Voice Gateway Model CVG824G Reference Manual
Using the Gateway as a DHCP Server
By default, the gateway is a DHCP server. It can assign IP, DNS server, and default gateway
addresses to all computers connected to the LAN. The default wireless voice gateway address is its
LAN address. The wireless voice gateway assigns IP addresses to the network computers from a
pool of addresses specified in the Starting Address and Ending Address fields. Each pool address
is tested before it is assigned to avoid duplicate addresses on the LAN.
Note: If another device on your network is the DHCP server, or if you will manually
configure the network settings of all of your computers, select No for the DHCP
Server. For more information about DHCP and IP addresses, see the link to
“Preparing a Computer for Network Access:” in Appendix B.
The gateway delivers the following parameters to any LAN device that requests DHCP:
•An IP Address from the range you have defined.
•Subnet Mask.
•Gateway IP Address is the gateway’s LAN IP address.
•Primary DNS Server, if you entered a Primary DNS address in the Basic Settings page;
otherwise, the gateway’s LAN IP address.
•Secondary DNS Server, if you entered a Secondary DNS address in the Basic Settings page.
Note: The gateway implements a DNS Relay function. When it receives a DNS request
on the LAN, it passes it to the DNS server specified on the WAN. It then relays the
response back to the original requesting PC.
Configuring the LAN IP Settings
You can use the LAN IP Setup page to configure LAN IP services such as the IP address of the
gateway and DHCP.
To configure the LAN IP:
1. Under Advance on the main menu, select LAN IP. The LAN IP screen will display.
2. Enter the
•LAN IP Address you want to assign to your gateway. The default is 192.168.0.1.
•Subnet Mask for your network IP address. The default is 255.255.255.0. (Unless you are
implementing subnetting, use the default subnet mask.)
Managing Your Network4-5
1.0, November 2006
Page 58
Wireless Cable Voice Gateway Model CVG824G Reference Manual
•Enable the DHCP Server to assign IP addresses to your computers automatically; or
disable the DHCP Server and assign IP addresses to your computers manually.
Note: If you disable the DHCP server, you must assign a static IP address to your
PC in order to reconnect to the gateway and enable the DHCP server
again.
•Enter a Starting IP Address for the first of the contiguous addresses in the address pool.
The default start address is 192.168.0.10.
•Enter an Ending IP Address for the last of the contiguous addresses in the address pool.
The default end address is 192.168.0.19.
3. Click Apply to save your settings.
Figure 4-3
To configure DHCP server reservation parameters for your LAN:
1. Enter the MAC address of the PC for which you want to reserve an IP Address.
2. Enter a free IP Address for the PC.
4-6Managing Your Network
1.0, November 2006
Page 59
Wireless Cable Voice Gateway Model CVG824G Reference Manual
3. CLick Add.
To remove a reserved IP from the DHCP Reservation Lease Info table:
1. Check the radio button adjacent to the entry you want to remove from the table.
2. Click Delete.
The DHCP Client Lease details for all computers in the LAN gateway are shown in the DHCP
Client Lease Info table. To clear all DHCP Client leases, click Clear DHCP Leases.
Viewing and Emailing Event Log Information
The gateway logs security-related events such as denied incoming service requests and hacker
probes. You can enable email notification to receive these logs in an email message. Log entries
are described in Table 4-1.
Table 4-1:Security Log entry descriptions
FieldDescription
DescriptionThe type of event and what action was taken if any.
CountThis is a reference number for each event.
Last OccurrenceThe date and time the log entry was recorded.
TargetThe name or IP address of the destination device of Web site.
SourceThe IP address of the initiating device for this log entry.
To receive logs and alerts by email, you must provide your email information in the Email section
of the Logs screen, as shown below.
To enable emailing of logs:
1. In the Contact Email Address box, type the e-mail address to which the logs will be sent. Use
a full e-mail address (for example, ChrisXY@myISP.com).
2. In the SMTP Server Name box, type the outgoing SMTP mail server of your ISP (for example,
mail.myISP.com). Y ou may be able to find this information in the configuration menu of your
e-mail program. If you leave this box blank, no alerts or logs will be sent.
3. Check the E-mail Alerts Enable radio box.
4. Click E-mail Log to send the log immediately
Managing Your Network4-7
1.0, November 2006
Page 60
Wireless Cable Voice Gateway Model CVG824G Reference Manual
5. Click Apply.
.
Figure 4-4
Restoring Factory Default Configuration Settings
The configuration settings are stored in a configuration file in the gateway. You can use Erase to
restore the factory default configuration settings. The default settings are listed in “Factory Default
Settings” in Appendix A.
To erase the configuration settings and return them to the factory default settings:
1. Under Maintenance on the main menu, select Set Password.
Figure 4-5
2. Check the Yes radio box to Restore Factory Defaults for your gateway.
3. Click Apply. The gateway will then reboot.
4-8Managing Your Network
1.0, November 2006
Page 61
Wireless Cable Voice Gateway Model CVG824G Reference Manual
After an erase, the gateway user name is admin and the password is password. The LAN IP
address is 192.168.0.1, and the DHCP client is enabled.
Note: To restore the factory default configuration settings without knowing the login
password or IP address, use the reset button on the rear panel of the gateway.
Use a paper clip to press the button for at least five seconds.
Running Diagnostic Utilities
You can use Diagnostics to test connectivity to a PC with the Ping command. From the
Maintenance menu, click Diagnostics.
Figure 4-6
To perform a Ping test:
1. In the Ping Target field, enter the IP address of the PC that you want to ping.
Managing Your Network4-9
1.0, November 2006
Page 62
Wireless Cable Voice Gateway Model CVG824G Reference Manual
2. If you want to specify additional details, you can set the Ping Size, No. of Ping and Ping
Interval.
3. Click Start Test to see the results of the Ping test; click Abort Test to stop a test in progress;
or click Clear Results to clear the results of a Ping test from the Results dialog box.
4. Click REFRESH to update the results of a ping test.
Enabling Remote Management Access
You can use Remote Management to co nfigure, upgrade and check the status of your gateway
through the Internet.
To configure your wireless voice gateway for Remote Management:
1. Under Advanced on the main menu, select Remote Management.
Figure 4-7
2. Check the Allow Remote Management radio box.
3. Enter the Remote User Name and Remote Password that will be required to remotely access
your gateway.
4. Enter the Port Number that will be used for accessing the management interface.
4-10Managing Your Network
1.0, November 2006
Page 63
Wireless Cable Voice Gateway Model CVG824G Reference Manual
Web browser access normally uses the standard HTTP service port 80. For greater security,
you can specify a custom port by entering that number in the box provided. Choose a number
between 1024 and 65535, but do not use the number of any common ser vice p ort. The defau lt
is 8080, which is a common alternate for HTTP.
5. T o make sure that you can use remote management even if the wireless voice gateway is reset,
check the Allow Remote Management after Factory Default Reset radio box.
If you do not check this box, you will not be able to remotely access the gateway if you use the
Erase feature to revert to the Factory Default settings.
6. Click Apply to have your changes take effect.
When accessing your wireless voice gateway from the Internet, type the WAN IP address of your
gateway into your browser, followed by a colon (:) and the port number. For example, if your
WAN IP address is 134.177.0.123 and you use port number 8080, type the following in your
browser:
http://134.177.0.123:8080
Managing Your Network4-11
1.0, November 2006
Page 64
Wireless Cable Voice Gateway Model CVG824G Reference Manual
4-12Managing Your Network
1.0, November 2006
Page 65
Chapter 5
Troubleshooting
This chapter gives information about troubleshooting your gateway. For the common problems
listed, go to the section indicated.
•Is the gateway on?
•Have I connected the gateway correctly?
Go to “Basic Functions” on page 5-1.
•I cannot access the gateway’s configuration with my browser.
Go to “Troubleshooting the Web Configuration Interface” on page 5-2.
•I have configured the gateway but I cannot access the Internet.
Go to “Troubleshooting the ISP Connection” on page 5-3.
•I cannot remember the gateway’s password.
•I want to clear the configuration and start over again.
Go to “Restoring Factory Default Configuration Settings” on page 4-8.
Basic Functions
After you turn on power to the gateway, the following sequence of events should occur:
1. When power is first applied, verify that the Power LED is on.
2. Verify that the numbered Ethernet LEDs come on momentarily.
3. After approximately 30 seconds, verify that:
a. The LAN LEDs are lit for any local ports that are connected.
b. The Internet Link port LED is lit.
1.0, November 2006
5-1
Page 66
Wireless Cable Voice Gateway Model CVG824G Reference Manual
If any of these conditions does not occur, see the table below:
Table 5-1. Basic Troubleshooting with LEDs
ProblemAction
Power LED is off.If the Power and other LEDs are off when your gateway is turned on:
• Make sure that the power cord is properly connected to your gateway
and that the power supply adapter is properly connected to a
functioning power outlet.
• Check that you are using the 12VDC power adapter supplied by
NETGEAR for this product.
If the error persists, you have a hardware problem and should contact
technical support.
All LEDs stay on when the
gateway is turned on.
LAN LEDs are off, but ports
are connected.
• Clear the gateway’s configuration to factory defaults. This will set the
gateway’s IP address to 192.168.0.1. This procedure is explained in
“Restoring Factory Default Configuration Settings” on page 4-8.
• If the error persists, you might have a hardware problem and should
contact technical support.
Check the following:
• Make sure that the Ethernet cable connections are secure at the
gateway and at the hub or PC.
• Make sure that power is turned on to the connected computer.
• Be sure you are using the correct cable:
When connecting the gateway use the cable that was supplied.
Troubleshooting the Web Configuration Interface
If you are unable to access the gateway’s Web Configuration interface from a PC on your local
network, check the following:
•Check the Ethernet connection between the PC and the gateway as described in the previous
section.
5-2Troubleshooting
1.0, November 2006
Page 67
Wireless Cable Voice Gateway Model CVG824G Reference Manual
•Make sure that your PC’s IP address is on the same subnet as the gateway. If you are using the
recommended addressing scheme, your PC’s address should be in the range of 192.168.0.10 to
192.168.0.254. Refer to “Preparing a Computer for Network Access:” in Appendix B for more
information about IP address configuration.
Note: If your PC’s IP address is shown as 169.254.x.x:
Recent versions of Windows and Mac OS generate and assign an IP address if
the computer cannot reach a DHCP server. These auto-generated addresses are
in the range of 169.254.x.x. If your IP address is in this range, check the
connection from the PC to the gateway and reboot your PC.
•If your gateway’s IP address has been changed and you don’t know the current IP address,
clear the gateway’s configuration to factory defaults. This will set the gateway’s IP address to
192.168.0.1. This procedure is explained in “Restoring Factory Default Configuration
Settings” on page 4-8.
•Make sure that your browser has Java, JavaScript, or ActiveX enabled. If you are using
Internet Explorer, click Refresh to be sure that the Java applet is loaded.
•Try quitting the browser and launching it again.
•Make sure that you are using the correct login information. The factory default login name is
admin and the password is password. Make sure that CAPS LOCK is off when entering this
information.
If the gateway does not save changes you have made, check the following:
•When entering configuration settings, be sure to click Apply before moving to another menu
or page, or your changes are lost.
•Click the Refresh or Reload button in the Web browser. The changes may have occurred, but
the Web browser may be caching the old configuration.
Troubleshooting the ISP Connection
If your gateway is unable to access the Internet and your Cable Link LED is on, you may need to
register the Cable MAC Address and/or Device MAC Address of you gateway with your cable
service provider. This is described in “Installing the Voice Gateway” on page 1-4.
Additionally, your PC may not have the gateway configured as its TCP/IP gateway. If your PC
obtains its information from the gateway by DHCP, reboot the PC and verify the gateway address
as described in “Preparing a Computer for Network Access:” in Appendix B.
Troubleshooting5-3
1.0, November 2006
Page 68
Wireless Cable Voice Gateway Model CVG824G Reference Manual
Troubleshooting a TCP/IP Network Using a Ping Utility
Most TCP/IP terminal devices and routers contain a ping utility that sends an echo request packet
to the designated device. The device then responds with an echo reply. Troubleshooting a TCP/IP
network is made easier by using the ping utility in your PC or workstation.
Testing the LAN Path to Your Gateway
You can ping the gateway from your PC to verify that the LAN path to your gateway is set up
correctly.
To ping the gateway from a PC running Windows 95 or later:
1. From the Windows toolbar, click on the Start button and select Run.
2. In the field provided, type Ping followed by the IP address of the gateway, as in this example:
ping 192.168.0.1
3. Click OK.
•You should see a message like this one:
Pinging <IP address> with 32 bytes of data
•If the path is working, you see this message:
Reply from <IP address>: bytes=32 time=NN ms TTL=xxx
•If the path is not working, you see this message:
Request timed out
If the path is not functioning correctly, you could have one of the following problems:
•Wrong physical connections
–Make sure that the LAN port LED is on. If the LED is off, follow the instructions in
“LAN LEDs are off, but ports are connected.” on page 5-2”.
–Check that the corresponding Link LEDs are on for your network interface card and
for the hub ports (if any) that are connected to your workstation and gateway.
•Wrong network configuration
–Verify that the Ethernet card driver software and TCP/IP software are both installed
and configured on your PC or workstation.
5-4Troubleshooting
1.0, November 2006
Page 69
Wireless Cable Voice Gateway Model CVG824G Reference Manual
–Verify that the IP address for your gateway and your workstation are correct and that
the addresses are on the same subnet.
Testing the Path from Your PC to a Remote Device
After verifying that the LAN path works correctly, test the path from your PC to a remote device.
From the Windows run menu, type:
PING -n 10 <IP address>
where <IP address> is the IP address of a remote device such as your ISP’s DNS server.
If the path is working correctly, replies as in the previous section are displayed. If you do not
receive replies:
•Check that your PC has the IP address of your gateway listed as the default gateway. If the IP
configuration of your PC is assigned by DHCP, this information will not be visible in your
PC’s Network Control Panel. Verify that the IP address of the gateway is listed as the default
gateway as described in “Preparing a Computer for Network Access:” in Appendix B.
•Check to see that the network address of your PC (the portion of the IP address specified by
the netmask) is different from the network address of the remote device.
•Check that your Cable Link LED is on.
•If your ISP assigned a host name to your PC, enter that host name as the Account Name in the
Basic Settings page.
•Your ISP could be rejecting the Device MAC Address of your gateway because it does not
match the MAC Address of the PC you previously used to connect to a cable modem. In this
case you will need to clone your PCs MAC Address. Refer to “Installing the Voice Gateway”
on page 1-4.
Troubleshooting5-5
1.0, November 2006
Page 70
Wireless Cable Voice Gateway Model CVG824G Reference Manual
5-6Troubleshooting
1.0, November 2006
Page 71
Appendix A
Default Settings and Technical Specifications
Factory Default Settings
You can use the reset button located on the front of your device to reset all settings to their factory
defaults. This is called a hard reset.
•To perform a hard reset, push and hold the reset button for approximately 5 seconds (until the
TEST LED blinks rapidly). Your device will return to the factory configuration settings shown
in the table below.
•Pressing the TEST LED for a shorter period of time will simply cause your device to reboot.
WAN MAC AddressUse Default hardware address
MTU Size1500
Local Network
LAN IP Address (aka Gateway IP address) 192.168.0.1
Gateway Subnet Mask255.255.255.0
DHCP ServerEnabled
LAN IP Starting IP Address192.168.0.10
1.0, November 2006
http://192.168.0.1
A-1
Page 72
Wireless Cable Voice Gateway Model CVG824G Reference Manual
FeatureDescription
LAN IP Ending IP Address192.168.0.19
Static IP Address Pool192.168.0.2 to 192.168.0.9 inclusive
Wireless
Wireless CommunicationEnabled
Wireless network name (SSID) NETGEAR
SSID BroadcastEnabled
Turn Radio OnEnabled
Default Channel6
Operating Mode802.11g and 801.11b
Country/RegionDefault is United States in US; selectable in ROW
Wireless Card Access ListOff
SecurityDisabled
Firewall
Inbound (communications coming in from
the Internet)
Outbound (communications going out to the
Internet)
Disabled (bars all unsolicited requests except for traffic
on port 80, the http port)
Wireless Cable Voice Gateway Model CVG824G Reference Manual
Technical Specifications
The table below describes the technical specifications for the Wireless Cable Voice Gateway .
FeatureDescription
Network Protocol and Standards Compatibility
Data and Routing Protocols:TCP/IP
DHCP server and client
DNS relay
NAT (many-to-one)
TFTP client
VPN pass through (IPSec, PPTP)
Power Adapter
North America (input):120V, 60 Hz, input
All regions (output):15 V DC @ 1.2A output, 15W maximum
Physical Specifications
Dimensions:6.9 by 4.5 by 1.2 in.
(175 by 114 by 30 mm)
Weight:0.68 lb (0.31 kg)
Environmental Specifications
Operating temperature:32° το 140° F (0° to 40° C)
Operating humidity:90% maximum relative humidity, noncondensing
Electromagnetic EmissionsMeets requirements of: FCC Part 15 Class B
Interface Specifications
Local:10BASE-T or 100BASE-Tx, RJ-45
USB 1.1 Function
802.11g and 802.11b Wireless Access Point
Internet:DOCSIS 2.0. Dow nward compatible with DOCSIS 1.0 and
DOCSIS 1.1.
Default Settings and Technical SpecificationsA-3
1.0, November 2006
Page 74
Wireless Cable Voice Gateway Model CVG824G Reference Manual
A-4Default Settings and Technical Specifications
1.0, November 2006
Page 75
Appendix B
Related Documents
This appendix provides links to reference documents you can use to gain a more complete
understanding of the technologies used in your NETGEAR product.
default Subnet mask 4-4
Denial of Service attacks DoS. See Denial of Service
attacks.
DHCP
gateway install configuration 1-5
DHCP Client
reservations leases 4-7
DHCP server 4-5, 4-6
configuring reservation parameters 4-6
default use 4-5
reservation parameters 4-6
DMZ Host 3-11
DMZ Server 3-11
as Host 3-11
setting default 3-11
DNS Address 1-5
DNS Relay 4-5
DNS server 1-9
domain blocking. See web site blocking.
Domain Name 1-5
Domain Name Server Address. See DNS Address
E
Ethernet Network Interface Card 1-5
F
factory default settings
list of A-1
reset button, using 4-9
restoring 4-8
Firewall Features 3-14
firewall rules
inbound traffic 3-6
LAN to WAN 3-6
v1.0, November 2006
Index-1
Page 78
Wireless Cable Voice Gateway Model CVG824G Reference Manual
outbound traffic 3-6
WAN to LAN 3-6
Fixed IP address pool. See Static IP address pool
Fixed IP Address. See Static IP Address
forwarding inbound traffic 3-8
front panel 1-2
front panel diagram 1-2
G
gaming
port triggering 3-10
setting up DMZ Host 3-11
gateway
connection diagram 1-5
default IP address 4-4
default login 1-8
local computer, installation use 1-4
placement of 2-1, 2-4
I
Inbound Rules 3-8
inbound traffic 3-6
forwarding of 3-8
open ports 3-10
installation requirements 1-4
Internet Relay Chat
port triggering, used with 3-10
Internet Service Provider settings. See ISP
IP address pool 4-4
IP addresses
auto-generated 5-3
IPSec 3-14
IRC. See Internet Relay Chat
ISP settings 1-5
K
keyword blocking 3-3
adding keywords 3-3
L
LAN IP
address pool 4-6
configuring 4-5
default address 4-4
LEDs
description 1-2
local computer
gateway installation 1-4
M
MAC access list 2-4
MAC address 5-5
location of 2-13
restricting access 2-11
MAC filtering 3-4
Multicast 3-14
N
Network Access
about B-1
network configuration
Dynamic IP Address 1-9
Static IP Address 1-9
NIC. See Ethernet Network Interface Card