DOCSIS 2.0 Advanced Cable Gateway CGD24N v2 User Manual
NETGEAR, Inc.
350 East Plumeria Drive
San Jose, CA 95134 USA
202-10509-01
August 2009
v1.0
© 2009 by NETGEAR, Inc. All rights reserved.
Technical Support
Please refer to the support information card that shipped with your product. By registering your product at
http://www.netgear.com/register, we can provide you with faster expert technical support and timely notices of product
and software upgrades.
NETGEAR, INC. Support Information
Phone: 1-888-NETGEAR, for US & Canada only. For other countries, see your Support information card.
E-mail: support@netgear.com
North American NETGEAR website: http://www.netgear.com
Trademarks
NETGEAR, the NETGEAR logo, ProSafe, and Auto Uplink are trademarks or registered trademarks of NETGEAR, Inc.
Microsoft, Windows, Windows NT and Vista are registered trademarks of Microsoft Corporation.Other brand and
product names are registered trademarks or trademarks of their respective holders.
Statement of Conditions
In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to
make changes to the products described in this document without notice.
NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit
layout(s) described herein.
Certificate of the Manufacturer/Importer
It is hereby certified that the DOCSIS 2.0 Advanced Cable Gateway CGD24N v2 has been suppressed in accordance
with the conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for
example, test transmitters) in accordance with the regulations may, however, be subject to certain restrictions. Please
refer to the notes in the operating instructions.
The Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market
and has been granted the right to test the series for compliance with the regulations.
Bestätigung des Herstellers/Importeurs
Es wird hiermit bestätigt, daß das DOCSIS 2.0 Advanced Cable Gateway CGD24N v2 gemäß der im BMPT-AmtsblVfg
243/1991 und Vfg 46/1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte
(z.B. Testsender) kann jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der
Betriebsanleitung.
Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt
gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen.
Voluntary Control Council for Interference (VCCI) Statement
This equipment is in the Class B category (information equipment to be used in a residential area or an adjacent area
thereto) and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing
Equipment and Electronic Office Machines aimed at preventing radio interference in such residential areas. When used
near a radio or TV receiver, it may become the cause of radio interference. Read instructions for correct handling.
ii
v1.0, August 2009
Regulatory Compliance Information
This section includes user requirements for operating this product in accordance with National laws for usage of radio
spectrum and operation of radio devices. Failure of the end-user to comply with the applicable requirements may result
in unlawful operation and adverse action against the end-user by the applicable National regulatory authority.
This product's firmware limits operation to only the channels allowed in a particular Region or Country. Therefore, all
options described in this user's guide may not be available in your version of the product.
Europe – EU Declaration of Conformity
Marking by the above symbol indicates compliance with the Essential Requirements of the R&TTE Directive of the
European Union (1999/5/EC). This equipment meets the following conformance standards:
EN300 328, EN301 489-17, EN60950
Europe – Declaration of Conformity in Languages of the European Community
Cesky [Czech] NETGEAR Inc. tímto prohlašuje, že tento Radiolan je ve shode se základními
požadavky a dalšími príslušnými ustanoveními smernice 1999/5/ES.
Dansk
[Danish]
Deutsch
[German]
Eesti
[Estonian]
English Hereby, NETGEAR Inc., declares that this Radiolan is in compliance with the essential
Español
[Spanish]
Ελληνική
[Greek]
Français
[French]
Italiano [Italian] Con la presente NETGEAR Inc. dichiara che questo Radiolan è conforme ai requisiti
Latviski
[Latvian]
Undertegnede NETGEAR Inc. erklærer herved, at følgende udstyr Radiolan overholder
de væsentlige krav og øvrige relevante krav i direktiv 1999/5/EF.
Hiermit erklärt NETGEAR Inc., dass sich das Gerät Radiolan in Übereinstimmung mit
den grundlegenden Anforderungen und den übrigen einschlägigen Bestimmungen der
Richtlinie 1999/5/EG befindet.
Käesolevaga kinnitab NETGEAR Inc. seadme Radiolan vastavust direktiivi 1999/5/EÜ
põhinõuetele ja nimetatud direktiivist tulenevatele teistele asjakohastele sätetele.
requirements and other relevant provisions of Directive 1999/5/EC.
Por medio de la presente NETGEAR Inc. declara que el Radiolan cumple con los
requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la
Directiva 1999/5/CE.
ΜΕ ΤΗΝ ΠΑΡΟΥΣΑ NETGEAR Inc. ΔΗΛΩΝΕΙ ΟΤΙ Radiolan ΣΥΜΜΟΡΦΩΝΕΤΑΙ
ΠΡΟΣ ΤΙΣ ΟΥΣΙΩΔΕΙΣ ΑΠΑΙΤΗΣΕΙΣ ΚΑΙ ΤΙΣ ΛΟΙΠΕΣ ΣΧΕΤΙΚΕΣ ΔΙΑΤΑΞΕΙΣ ΤΗΣ
ΟΔΗΓΙΑΣ 1999/5/ΕΚ.
Par la présente NETGEAR Inc. déclare que l'appareil Radiolan est conforme aux
exigences essentielles et aux autres dispositions pertinentes de la directive 1999/5/CE.
essenziali ed alle altre disposizioni pertinenti stabilite dalla direttiva 1999/5/CE.
Ar šo NETGEAR Inc. deklarē, ka Radiolan atbilst Direktīvas 1999/5/EK būtiskajām
prasīb
ām un citiem ar to saistītajiem noteikumiem.
v1.0, August 2009
iii
Lietuvių
[Lithuanian]
Šiuo NETGEAR Inc. deklaruoja, kad šis Radiolan atitinka esminius reikalavimus ir kitas
1999/5/EB Direktyvos nuostatas.
Nederlands
[Dutch]
Malti [Maltese] Hawnhekk, NETGEAR Inc., jiddikjara li dan Radiolan jikkonforma mal-htigijiet
Magyar
[Hungarian]
Polski [Polish] Niniejszym NETGEAR Inc. oświadcza, że Radiolan jest zgodny z zasadniczymi
Português
[Portuguese]
Slovensko
[Slovenian]
Slovensky
[Slovak]
Suomi
[Finnish]
Svenska
[Swedish]
Íslenska
[Icelandic]
Hierbij verklaart NETGEAR Inc. dat het toestel Radiolan in overeenstemming is met de
essentiële eisen en de andere relevante bepalingen van richtlijn 1999/5/EG.
essenzjali u ma provvedimenti ohrajn relevanti li hemm fid-Dirrettiva 1999/5/EC.
Alulírott, NETGEAR Inc. nyilatkozom, hogy a Radiolan megfelel a vonatkozó alapvetõ
követelményeknek és az 1999/5/EC irányelv egyéb elõírásainak.
wymogami oraz pozostałymi stosownymi postanowieniami Dyrektywy 1999/5/EC.
NETGEAR Inc. declara que este Radiolan está conforme com os requisitos essenciais
e outras disposições da Directiva 1999/5/CE.
NETGEAR Inc. izjavlja, da je ta Radiolan v skladu z bistvenimi zahtevami in ostalimi
relevantnimi določili direktive 1999/5/ES.
NETGEAR Inc. týmto vyhlasuje, _e Radiolan spĺňa základné po_iadavky a všetky
príslušné ustanovenia Smernice 1999/5/ES.
NETGEAR Inc. vakuuttaa täten että Radiolan tyyppinen laite on direktiivin 1999/5/EY
oleellisten vaatimusten ja sitä koskevien direktiivin muiden ehtojen mukainen.
Härmed intygar NETGEAR Inc. att denna Radiolan står I överensstämmelse med de
väsentliga egenskapskrav och övriga relevanta bestämmelser som framgår av direktiv
1999/5/EG.
Hér með lýsir NETGEAR Inc. yfir því að Radiolan er í samræmi við grunnkröfur og aðrar
kröfur, sem gerðar eru í tilskipun 1999/5/EC.
Norsk
[Norwegian]
NETGEAR Inc. erklærer herved at utstyret Radiolan er i samsvar med de
grunnleggende krav og øvrige relevante krav i direktiv 1999/5/EF.
FCC Requirements for Operation in the United States
FCC Information to User
This product does not contain any user serviceable components and is to be used with approved antennas only. Any
product changes or modifications will invalidate all applicable regulatory certifications and approvals
FCC Guidelines for Human Exposure
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment
should be installed and operated with minimum distance of 20 cm between the radiator and your body. This transmitter
must not be co-located or operating in conjunction with any other antenna or transmitter.
iv
v1.0, August 2009
FCC Declaration Of Conformity
We NETGEAR, Inc., 4500 Great America Parkway, Santa Clara, CA 95054, declare under our sole responsibility that
the model DOCSIS 2.0 Advanced Cable Gateway CGD24N v2 complies with Part 15 of FCC Rules. Operation is
subject to the following two conditions:
• This device may not cause harmful interference, and
• This device must accept any interference received, including interference that may cause undesired operation.
FCC Radio Frequency Interference Warnings & Instructions
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of
the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential
installation. This equipment uses and can radiate radio frequency energy and, if not installed and used in accordance
with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that
interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or
television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to
correct the interference by one or more of the following methods:
• Reorient or relocate the receiving antenna
• Increase the separation between the equipment and the receiver
• Connect the equipment into an electrical outlet on a circuit different from that which the radio receiver is connected
• Consult the dealer or an experienced radio/TV technician for help.
Modifications made to the product, unless expressly approved by NETGEAR, Inc., could void the user's right to operate
the equipment.
Grounding
The cable distribution system should be grounded (earthed) in accordance with ANSI/NFPA 70, the National Electrical
Code (NEC), in particular Section 820.93, Grounding of Outer conductive Shield of a Coaxial Cable.
Canadian Department of Communications Radio Interference Regulations
This digital apparatus (DOCSIS 2.0 Advanced Cable Gateway CGD24N v2) does not exceed the Class B limits for
radio-noise emissions from digital apparatus as set out in the Radio Interference Regulations of the Canadian
Department of Communications.
Canada ID: 4054A-WG111
v1.0, August 2009
v
Product and Publication Details
Model Number: CGD24N v2
Publication Date: August 2009
Product Family: Gateway
Product Name: DOCSIS 2.0 Advanced Cable Gateway CGD24N v2
Home or Business Product: Business
Language: English
Publication Part Number: 202-10509-01
Publication Version Number: 1.0
vi
v1.0, August 2009
Contents
DOCSIS 2.0 Advanced Cable Gateway CGD24N v2 User Manual
About This Manual
Conventions, Formats, and Scope ................................................................................... xi
Revision History ............................................................................................................... xii
Chapter 1
Connecting the Gateway to the Internet
Package Contents ..........................................................................................................1-1
Gateway Front Panel ...............................................................................................1-1
Gateway Rear Panel ................................................................................................1-3
Side Panel ................................................................................................................1-3
Gateway Label .........................................................................................................1-4
What You Need Before You Begin .................................................................................1-4
Logging in to the Gateway ..............................................................................................1-5
Configuring the Basic Settings .......................................................................................1-6
Chapter 2
Wireless Configuration
Planning Your Wireless Network ....................................................................................2-1
Wireless Placement and Range Guidelines .............................................................2-2
Wireless Security Options ........................................................................................2-3
Manually Configuring Your Wireless Settings and Security ...........................................2-3
Configuring WEP (Wired Equivalent Privacy) Wireless Security .............................2-5
Configuring WPA or WPA2 Wireless Security .........................................................2-7
Using Push 'N' Connect (WPS) to Configure Your Wireless Network and Security .......2-9
Using a WPS Button to Add a WPS Client ...............................................................2-9
Using a PIN Entry to Add a WPS Client .................................................................2-11
Connecting Additional Wireless Client Devices ............................................................2-12
Adding Just WPS Clients .......................................................................................2-13
Adding Both WPS and Non-WPS Clients ..............................................................2-13
Guest Networks ............................................................................................................2-13
v1.0, August 2009
vii
DOCSIS 2.0 Advanced Cable Gateway CGD24N v2 User Manual
Configuring a Wireless Guest Network ..................................................................2-14
Chapter 3
Content Filtering and Firewall Rules
Configuring Logs ............................................................................................................3-1
Blocking Site ...................................................................................................................3-2
Blocking Keywords and Domains .............................................................................3-3
Blocking Services ...........................................................................................................3-4
Chapter 4
Managing Your Network
Viewing the Gateway Status ...........................................................................................4-1
Viewing the Connection Status .......................................................................................4-3
Changing the Built-In Passwords ...................................................................................4-4
Backing Up and Restoring Your Settings .......................................................................4-5
Viewing the Event Log ....................................................................................................4-6
Running Diagnostic Utilities ............................................................................................4-7
Chapter 5
Customizing Your Network
Advanced Wireless Settings ...........................................................................................5-2
Turning on Access Control to Restrict Access by MAC Address .............................5-3
Restricting Access by MAC Address ..............................................................................5-5
Configuring Port Blocking ...............................................................................................5-7
Configuring Port Forwarding ...........................................................................................5-9
Considerations for Port Forwarding .......................................................................5-11
Configuring Port Triggering ..........................................................................................5-11
Setting Up a DMZ Host .................................................................................................5-13
Using LAN IP Setup Options ........................................................................................5-14
Using the Gateway as a DHCP Server ..................................................................5-16
Using Address Reservation ....................................................................................5-17
Enabling Remote Management ....................................................................................5-17
Configuring Universal Plug and Play (UPnP) ...............................................................5-19
Chapter 6
Troubleshooting
Basic Functions ..............................................................................................................6-1
Using LEDs to Troubleshoot ....................................................................................6-2
Connecting to the Gateway’s Main Menu .......................................................................6-3
viii Contents
v1.0, August 2009
DOCSIS 2.0 Advanced Cable Gateway CGD24N v2 User Manual
Troubleshooting the ISP Connection ..............................................................................6-4
Troubleshooting a TCP/IP Network Using a Ping Utility .................................................6-4
Testing the LAN Path to Your Gateway ...................................................................6-4
Testing the Path from Your PC to a Remote Device ................................................6-5
Appendix A
Technical Specifications and Factory Default Settings
Technical Specifications ................................................................................................ A-1
Factory Default Settings ................................................................................................ A-2
Appendix B
Related Documents
Index
Contents ix
v1.0, August 2009
DOCSIS 2.0 Advanced Cable Gateway CGD24N v2 User Manual
x Contents
v1.0, August 2009
About This Manual
The NETGEAR® DOCSIS 2.0 Advanced Cable Gateway CGD24N v2 User Manual describes how
to install, configure and troubleshoot the DOCSIS 2.0 Advanced Cable Gateway CGD24N v2. The
information in this manual is intended for readers with intermediate computer and Internet skills.
Conventions, Formats, and Scope
The conventions, formats, and scope of this manual are described in the following paragraphs:
• Typographical Conventions. This manual uses the following typographical conventions::
Italic Emphasis, books, CDs, file and server names, extensions
Bold User input, IP addresses, GUI screen text
Fixed Command prompt, CLI text, code
italic URL links
• Formats. This manual uses the following formats to highlight special messages:
Note: This format is used to highlight information of importance or special interest.
Tip: This format is used to highlight a procedure that will save time or resources.
Warning: Ignoring this type of note may result in a malfunction or damage to the
equipment.
v1.0, August 2009
xi
DOCSIS 2.0 Advanced Cable Gateway CGD24N v2 User Manual
• Scope. This manual is written for the Advanced Cable Gateway according to these
specifications:
Product Version DOCSIS 2.0 Advanced Cable Gateway CGD24N v2
Manual Publication Date August 2009
For more information about network, Internet, firewall, and VPN technologies, see the links to the
NETGEAR website in Appendix B, “Related Documents.”
Note: Product updates are available on the NETGEAR, Inc. website at
http://kbserver.netgear.com/products/CGD24N v2.asp.
Revision History
Part Number
202-10046-02 1.0 August
Version
Number
Date Description
2009
Original publication.
xii About This Manual
v1.0, August 2009
Chapter 1
Connecting the Gateway to the Internet
This chapter describes how to set up the gateway on your Local Area Network (LAN), connect to
the Internet, and perform basic configuration. For help with installation, see the Quick Installation
Guide that shipped with your product
Package Contents
The product package contains the following items:
• DOCSIS 2.0 Advanced Cable Gateway CGD24N v2
• AC power adapter
• Category 5 (CAT5) Ethernet cable
• Two brackets
• Quick Installation Guide
• Resource CD
If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Keep the
carton, including the original packing materials, in case you need to return the product for repair.
Gateway Front Panel
The front panel of the gateway contains status LEDs.
Figure 1-1
1-1
v1.0, August 2009
DOCSIS 2.0 Advanced Cable Gateway CGD24N v2 User Manual
You can use the LEDs to verify connections.The following table lists and describes each LED on
the front panel of the Advanced Cable Gateway.
Table 1-1. LED Descriptions
LED Description
Power • On: Power is supplied to the gateway.
• Off: Power is not supplied to the gateway.
Downstream
Traffic
Upstream
Traffic
Cable Link • On (green): Configuration of the cable interface by your cable service provider is
Wireless • On: The wireless access point is operating normally.
LAN
(Local Area
Network)
• Blink: Data is being received from the cable interface.
• Off: The cable interface is idle.
• Blink: Data is being transmitted to the cable interface.
• Off: The cable interface is idle.
complete.
• Off: Configuration of the cable interface is still in progress.
• Blink: Data is being transmitted or received on the wireless interface.
• Fast blink: The gateway attempts to establish a connection to a wireless client through
Wi-Fi Protected Setup (WPS).
• Off: The wireless access point is disabled.
• On (green): The port has detected link with a 100 Mbps device.
• Blink (green): Data is being transmitted or received at 100 Mbps.
• On (yellow): The port has detected link with a 10 Mbps device.
• Blink (yellow): Data is being transmitted or received at 10 Mbps.
• Off: No link is detected on this port.
1-2 Connecting the Gateway to the Internet
v1.0, August 2009
DOCSIS 2.0 Advanced Cable Gateway CGD24N v2 User Manual
Gateway Rear Panel
The rear panel of the gateway contains the connections identified below:
Figure 1-2
adapter
input
Restore
Factory
Settings
CoaxialPower 4 Ethernet LAN ports
Cable
Connector
The rear panel of the gateway contains a WPS button. You can use the Wi-Fi Protected Setup
(WPS) feature with clients on the network that are Wi-Fi certified and WPA capable. See “Using
Push 'N' Connect (WPS) to Configure Your Wireless Network and Security” on page 2-8.
Side Panel
On the side panel is the Push 'N' Connect WPS button. Push 'N' Connect (WPS) automatically
implements wireless security on the gateway while, at the same time, allowing you to
automatically implement wireless security on any WPS-enabled devices (such as wireless
computers and wireless adapter cards). See
Your Wireless Network and Security” on page 2-8
Figure 1-3
“Using Push 'N' Connect (WPS) to Configure
Connecting the Gateway to the Internet 1-3
v1.0, August 2009
DOCSIS 2.0 Advanced Cable Gateway CGD24N v2 User Manual
Gateway Label
The bottom label of the gateway contains its serial number and MAC address, as well as the
gateway default login IP address, User Name and Password.
Figure 1-4
What You Need Before You Begin
Before you begin, make sure that you have the following:
• A computer with an active Ethernet port with DHCP enabled.
Note: For help with DHCP configuration, see the link to the online document “ITCP/
IP Networking Basics” in Appendix B.
• An active account with your Internet Service Provider (ISP) for data services.
• Depending on how your ISP set up the Internet account, you need one or more of these
configuration settings to connect the gateway to the Internet:
– Host and Domain Names
– ISP Domain Name Server (DNS) Addresses
– Fixed or Static IP Address
• Each computer that will connect to the gateway must have an Ethernet Network Interface Card
(NIC), USB host port, or 802.11b or 802.11g wireless adapter.
1-4 Connecting the Gateway to the Internet
v1.0, August 2009
DOCSIS 2.0 Advanced Cable Gateway CGD24N v2 User Manual
Logging in to the Gateway
Note: To connect to the gateway, your computer must be configured to obtain an IP
address automatically via DHCP. For instructions on how to do this, see the link to
the online document “Preparing Your Network” in Appendix B.
To log in to the gateway:
1. Using the computer that you first used to access your cable modem Internet service, connect to
the gateway by typing http://192.168.0.1 in the address field of your Internet browser. A login
window opens.
Figure 1-5
The gateway has two user names with passwords:
• To access all features of the gateway, log in with the user name superuser and its default
password of password, both with lower-case letters.
• To access all features of the gateway except content filtering and MAC filtering, log in
with the user name admin and its default password of password.
2. Enter a user name and password to log in to the gateway, both with lower-case letters.
Note: If you cannot connect to the gateway, see “Basic Functions” on page 6-1.
Connecting the Gateway to the Internet 1-5
v1.0, August 2009
DOCSIS 2.0 Advanced Cable Gateway CGD24N v2 User Manual
Configuring the Basic Settings
When you log in to the gateway the Basic Settings screen displays:
Figure 1-6
1. Make sure that the Cable Network Settings are correct based on the information from your
Internet Service Provider (ISP).
By default, the Dynamic IP radio button is selected, which enables the gateway to
automatically download the network configuration from your ISP. Select the Static IP radio
button only if your ISP has assigned you a permanent, fixed (static) IP address. If you select
Static IP, the screen changes as shown in the following figure:
1-6 Connecting the Gateway to the Internet
v1.0, August 2009
DOCSIS 2.0 Advanced Cable Gateway CGD24N v2 User Manual
Figure 1-7
2. For a Static IP, enter the following settings to enable the gateway to connect to the Internet:
• Static IP Address. The fixed IP address that your ISP has assigned to you.
• Static IP Mask. The network number portion of an IP address. Unless you are
implementing subnetting, use 255.255.0.0 as the subnet mask.
• Default Gateway. This is the ISP’s router to which your gateway will connect.
• Primary DNS. A DNS server is a host on the Internet that translates Internet names (such
as www.netgear.com) to numeric IP addresses. Typically your ISP transfers the IP address
of one or two DNS servers to your gateway during login. If the ISP does not transfer an
address, you must obtain it from the ISP and enter it manually here. If you enter an address
here, you should reboot your PCs after configuring the gateway.
• Secondary DNS. If applicable, enter the address of your ISP’s secondary DNS server.
3. Click Apply to save your settings. After you have connected to the Internet, the network
configuration settings on the Basic Settings screen match the cable network settings.
Connecting the Gateway to the Internet 1-7
v1.0, August 2009
DOCSIS 2.0 Advanced Cable Gateway CGD24N v2 User Manual
1-8 Connecting the Gateway to the Internet
v1.0, August 2009
Chapter 2
Wireless Configuration
For a wireless connection, the SSID, also called the wireless network name, and the wireless
security setting must be the same for
NETGEAR strongly recommends that you use wireless security. This chapter includes:
• “Planning Your Wireless Network”
• “Manually Configuring Your Wireless Settings and Security” on page 2-3
• “Using Push 'N' Connect (WPS) to Configure Your Wireless Network and Security” on
page 2-9
• “Connecting Additional Wireless Client Devices” on page 2-12
• “Guest Networks” on page 2-13
Planning Your Wireless Network
For compliance and compatibility between similar products in your area, the operating channel
and region must be set correctly.
the gateway and wireless computers or wireless adapters.
To configure the wireless network, you can either specify the wireless settings, or you can use WiFi Protected Setup (WPS) to automatically set the SSID and implement WPA/WPA2 security.
• To manually configure the wireless settings, you must know the following:
– SSID. The default SSID for the gateway is NETGEAR.
– The wireless mode (802.11g, or 802.11b) that each wireless adapter supports.
– Wireless security option. To successfully implement wireless security, check each wireless
adapter to determine which wireless security option it supports.
See “Manually Configuring Your Wireless Settings and Security” on page 2-3.
• Push 'N' Connect (WPS) automatically implements wireless security on the gateway while, at
the same time, allowing you to automatically implement wireless security on any WPSenabled devices (such as wireless computers and wireless adapter cards). You activate WPS by
pressing a WPS button on the gateway, clicking an onscreen WPS button, or entering a PIN
number. This generates a new SSID and implements WPA/WPA2 security.
2-1
v1.0, August 2009
DOCSIS 2.0 Advanced Cable Gateway CGD24N v2 User Manual
Note: NETGEAR’s Push 'N' Connect feature is based on the Wi-Fi Protected Setup
(WPS) standard (for more information, see http://www.wi-fi.org). All other Wi-
Fi-certified and WPS-capable products should be compatible with NETGEAR
products that implement Push 'N' Connect.
To set up your wireless network using the WPS feature:
– Use the WPS button on the rear panel of the gateway (there is also an onscreen WPS
button), or enter the PIN of the wireless device.
– Make sure that all wireless computers and wireless adapters on the network are
Wi-Fi
certified and WPA or WPA 2 capable, and that they support WPS configuration.
See “Using Push 'N' Connect (WPS) to Configure Your Wireless Network and Security” on
page 2-9.
Wireless Placement and Range Guidelines
The range of your wireless connection can vary significantly based on the physical placement of
the gateway. The latency, data throughput performance, and notebook power consumption of
wireless adapters also vary depending on your configuration choices.
For best results, place your gateway according to the following guidelines:
• Near the center of the area in which your PCs will operate.
• In an elevated location such as a high shelf where the wirelessly connected PCs have line-ofsight access (even if through walls).
• Away from sources of interference, such as PCs, microwave ovens, and 2.4 GHz cordless
phones.
• Away from large metal surfaces.
• Put the antenna in a vertical position to provide the best side-to-side coverage. Put the antenna
in a horizontal position to provide the best up-and-down coverage.
• If using multiple access points, it is better if adjacent access points use different radio
frequency channels to reduce interference. The recommended channel spacing between
adjacent access points is 5 channels (for example, use Channels 1 and 6, or 6 and 11).
The time it takes to establish a wireless connection can vary depending on both your security
settings and placement. WEP connections can take slightly longer to establish. Also, WEP
encryption can consume more battery power on a notebook computer.
2-2 Wireless Configuration
v1.0, August 2009
DOCSIS 2.0 Advanced Cable Gateway CGD24N v2 User Manual
Wireless Security Options
Indoors, computers can connect over 802.11g wireless networks at a maximum range of up to 300
feet. Such distances can allow for others outside your immediate area to access your network.
Unlike wired network data, your wireless data transmissions can extend beyond your walls and
can be received by anyone with a compatible adapter. For this reason, use the security features of
your wireless equipment. The Advanced Cable Gateway provides highly effective security
features which are covered in detail in this chapter. Deploy the security features appropriate to
your needs.
There are several ways you can enhance the security of your wireless network:
• WEP. Wired Equivalent Privacy (WEP) data encryption provides data security. WEP Shared
Key authentication and WEP data encryption block all but the most determined eavesdropper.
This data encryption mode has been superseded by WPA-PSK and WPA2-PSK.
• WPA-PSK (TKIP), WPA2-PSK (AES). Wi-Fi Protected Access (WPA) using a pre-shared
key to perform authentication and generate the initial data encryption keys. The very strong
authentication along with dynamic per frame re-keying of WPA makes it virtually impossible
to compromise.
For more information about wireless technology, see the link to the online document in “Wireless
Networking Basics” in Appendix B.
Manually Configuring Your Wireless Settings and Security
You can view or manually configure the wireless settings for the gateway in the Wireless Settings
screen. If you want to make changes, make sure to note the current settings first.
Note: If you use a wireless computer to change the wireless network name (SSID) or
wireless security settings, you will be disconnected when you click Apply. To
avoid this problem, use a computer with a wired connection to access the gateway.
Wireless Configuration 2-3
v1.0, August 2009
DOCSIS 2.0 Advanced Cable Gateway CGD24N v2 User Manual
To view or manually configure the wireless settings:
1. Log in to the gateway as described in “Logging in to the Gateway” on page 1-5.
2. In the main menu, under Setup, select Wireless Settings. If you make changes, you must click
Apply for them to take effect
Figure 2-1
2-4 Wireless Configuration
v1.0, August 2009
DOCSIS 2.0 Advanced Cable Gateway CGD24N v2 User Manual
Table 2-1. Wireless Settings
Settings Description
Wireless Network Name (SSID) The SSID is also known as the wireless network name.
Enter a 32-character (maximum) name in this field. The
characters are case-sensitive.
In a setting where there is more than one wireless
network, different wireless network names provide a
means for separating the traffic. Any device you want to
participate in a wireless network must use the SSID.
Region Specify the region where the gateway will operate.
Channel The wireless channel used by the gateway. The default
is channel 1.
You should not need to change the wireless channel
unless you experience interference (shown by lost
connections and/or slow data transfers). Should this
happen, you may need to experiment with different
channels to see which is the best.
802.11 Mode 802.11b/gNext
2.4 GHz, Auto, 40 MHz?
Security Options You can manually configure wireless security here.
• Disable. Wireless security is disabled by default. After the gateway is connected to
the Internet, NETGEAR strongly recommends that you implement wireless security.
• WEP (Wired Equivalent Privacy) 64-bit encryption or 128-bit encryption. WEP
provides data security with WEP Shared Key authentication and WEP data
encryption. You can select 64-bit or 128-bit encryption. See “Configuring WEP (Wired
Equivalent Privacy) Wireless Security” on page 2-5.
• WPA-PSK. WPA-PSK uses the TKIP encryption type with authentication from a
RADIUS server.
• WPA2-PSK. WPA2-PSK uses the AES encryption type with authentication from a
RADIUS server.
• WPA. Wi-Fi Protected Access (WPA) data encryption provides data security. The very
strong authentication along with dynamic per frame rekeying of WPA make it virtually
impossible to compromise. .
• See “Configuring WPA or WPA2 Wireless Security” on page 2-7.
Configuring WEP (Wired Equivalent Privacy) Wireless Security
Note: If you use a wireless computer to configure wireless security settings, you will be
disconnected when you click Apply. Reconfigure your wireless computer to match
the new settings, or access the gateway from a wired computer to make further
changes.
Wireless Configuration 2-5
v1.0, August 2009
DOCSIS 2.0 Advanced Cable Gateway CGD24N v2 User Manual
To configure WEP data encryption:
1. Log in to the gateway as described in “Logging in to the Gateway” on page 1-5.
2. In the main menu, under Setup, select Wireless Settings.
3. By default, WEP is selected in the Security Options section of the screen.
Figure 2-2
4. Depending on the encryption strength that you want, select one of these options:
• WEP (Wired Equivalent Privacy) 128-bit encryption
• WEP (Wired Equivalent Privacy) 64-bit encryption
5. Enter the WEP encryption key information:
• WEP PassPhrase: To use a passphrase to automatically generate the keys, enter a
passphrase and click Generate. Wireless stations must use the passphrase or keys to
access the gateway.
• Key 1 through Key 4: You can manually enter the four data encryption keys. These values
must be identical on all computers and access points in your network. For 64-bit WEP,
enter 10 hexadecimal digits (any combination of 0–9 or A–F). For 128-bit WEP, enter
26 hexadecimal digits.
2-6 Wireless Configuration
v1.0, August 2009
Loading...