Verizon FiOS-G1100 Quantum User Manual

Download

Page 1

FiOS Quantum™ Gateway

USER GUIDE

Page 2

01/

INTRODUCTION

1.0 Package 7

Contents

1.1 System 7

Requirements

1.2 Features 7

1.3 Getting to 10

Know Your Gateway

02/

CONNECTING YOUR GATEWAY

2.0 Setting Up 18

Your Gateway

2.1 Computer 24

Network Conﬁguration

2.2 Main Screen 30

03/

WIRELESS SETTINGS

3.0 Overview 35

3.1 Wireless Status 36

3.2 Basic Security 39

Settings

3.3 Advanced 42

Security Settings

3.4 Wireless MAC 49

Authentication

3.5 802.11 Mode 51

3.6 Other Advanced 53

Wireless Options

04/

CONFIGURING MY NETWORK SETTINGS

4.0 Accessing My 61

Network Settings

4.2 Using My Network 62

Settings

CONTENTS

Page 3

05/

USING NETWORK CONNECTIONS

5.0 Accessing 66

Network Connections

5.1 Network 67

(Home/Ofﬁce) Connection

5.2 Broadband 74

Connection

5.3 Wireless 78

Access Point Connection

5.4 Broadband 81

Ethernet/Coax Connection

06/

CONFIGURING SECURITY SETTINGS

6.0 Firewall 89

6.2 Access Control 93

6.3 Port Forwarding 96

6.4 Port Triggering 98

6.5 Remote 100

Administration

6.6 Static NAT 102

6.7 Security Log 104

07/

SETTING PARENTAL CONTROLS

7.0 Activating 115

Parental Controls

7.1 Rule Summary 117

TABLE OF CONTENTS

Page 4

CONTENTS

08/

CONFIGURING ADVANCED SETTINGS

8.0 Using Advanced 121

Settings

8.1 Utilities 122

8.2 DNS Settings 131

8.3 Network 134

Settings

8.4 Routing 141

8.5 Date and Time 166

8.6 Conﬁguration 170

Settings

09/

MONITORING YOUR GATEWAY

9.0 Gateway Status 179

9.1 Advanced Status 180

9.2 System Logging 181

9.3 Full Status/System 182

wide Monitoring of Connections

9.4 Trafﬁc 183

Monitoring

9.5 Bandwidth 184

Monitoring

10/

TROUBLESHOOTING

10.0 Troubleshooting 187

Tips

10.1 Frequently 193

Asked Questions

Page 5

TABLE OF CONTENTS

11/

SPECIFICATIONS

11.0 General 200

Speciﬁcations

11.1 LED Indicators 201

11.2 Environmental 201

Parameters

12/

NOTICES

12.0 Regulatory 205

Compliance Notices

Page 6

01/

INTRODUCTION

1.0

1.1

1.2

1.3

Package Contents System Requirements Features Getting to Know Your

Gateway

Page 7

The Verizon FiOS Quantum™ Gateway lets you transmit and distribute digital entertainment and information to multiple devices in your home/ofﬁce.

Your Gateway supports networking using coaxial cables, Ethernet, or Wi-Fi, making it one of the most versatile and powerful gateways available.

01 / INTRODUCTION

Page 8

PACKAGE CONTENTS, SYSTEM REQUIREMENTS AND FEATURES

1.0/ PACKAGE CONTENT

Your package contains:

• The FiOS Quantum Gateway

• Power adapter

• LAN Ethernet cable (yellow)

• WAN Ethernet cable (white)

• Quick Start Guide

1.1/ SYSTEM REQUIREMENTS

System and software requirements are:

• A computer or other network device supporting Wi-Fi or wired Ethernet

• A web browser, such as Chrome™, Firefox®, Internet Explorer 8® or higher, or Safari® 5.1 or higher

1.2/ FEATURES

Your Gateway features include:

• Support for multiple networking standards, including

– WAN – Gigabit Ethernet and MoCA 2.0 interfaces

– LAN – 802.11 b/g/n/ac, Gigabit Ethernet and MoCA 2.0

interfaces

• Integrated wired networking with 4-port Ethernet switch and Coax (MoCA)

Page 9

– Ethernet supports speeds up to 1000 Mbps

– MoCA 2.0 and 1.1 enabled to support speeds up to 700 Mbps

over coaxial cable

• Integrated wireless networking with 802.11b/g/n/ac access point featuring:

– Enabled 802.11b capable speeds (based on device)

– Enabled 802.11g capable speeds (based on device)

– Enabled 802.11n capable speeds (based on device)

– Enabled 802.11ac capable speeds (based on device)

• Enterprise-level security, including:

– Fully customizable ﬁrewall with Stateful Packet Inspection

(SPI)

– Content ﬁltering with URL-keyword based ﬁltering, parental

controls, and customizable ﬁltering policies per computer

– Intrusion detection with Denial of Service protection against

IP spooﬁng attacks, scanning attacks, IP fragment overlap exploit, ping of death, and fragmentation attacks

– Event logging

– MAC address ﬁltering

– Static NAT

01 / INTRODUCTION

Page 10

FEATURES AND GETTING TO KNOW YOUR GATEWAY

– Port forwarding

– Port triggering

– Access control

– Advanced wireless protection featuring WPA2/WPA Mixed

Mode, WEP 64/128 bit encryption, and MAC address ﬁltering

• Options, including:

– DHCP server

– WAN interface auto-detection

– Dynamic DNS

– DNS server

– LAN IP and WAN IP address selection

– MAC address cloning

– IPv6 support

– QoS support (end to end layer 2/3) featuring: Differentiated

Services (Diffserv), 802.1p/q prioritization, and passthrough of WAN-side DSCPs, Per Hop Behaviors (PHBs), and queuing to LAN-side devices

– Remote management and secured remote management using

HTTPS

– Static routing

– VPN (VPN pass through only)

Page 11

– IGMP

– Daylight savings time support

1.3/ GETTING TO KNOW YOUR GATEWAY

1.3a/ FRONT PANEL

The front panel has two lighted indicators and a WPS (Wi-Fi Protected Setup) button.

The Power/Internet light will be on and solid when your Gateway is turned on, connected to the Internet, and functioning normally.

The Wireless light will be on when your Gateway Wi-Fi is turned on.

For additional information on the front lights and error indications, refer the Troubleshooting section in this Guide.

The WPS button is used to initiate Wi-Fi Protected Setup. This is an easy way to add WPS capable devices to your wireless network.

When WPS is initiated from your Gateway, the wireless light slowly ﬂashes white for up to two minutes, allowing time to complete the WPS pairing process on your wireless device (also known as a wireless client).

When a device begins connecting to your Gateway using WPS, the wireless light rapidly ﬂashes white for a few seconds, then turns solid white as the connection completes.

01 / INTRODUCTION

Page 12

If there is an error during the WPS pairing process, the wireless light ﬂashes red rapidly for two minutes after the error occurs.

The WPS button can also be used to reboot the router. To perform a soft reboot, press and hold the WPS button for at least 10 seconds.

1.3b/ SIDE PANEL

The side panel of your Gateway has a label that contains important information about your device, including the default settings for the Gateway’s wireless network name (ESSID), wireless password (WPA2 key), local URL for accessing the Gateway’s administrative pages, and Gateway administrator password. The label also contains a QR code that you can scan with your smartphone, tablet, or other cameraequipped Wi-Fi device to allow you to automatically connect your device to your Wi-Fi network without typing in a password (requires a QR code reading app with support for Wi-Fi QR codes).

1.3c/ REAR PANEL

The rear panel of your Gateway has 8 ports; COAX, Ethernet LAN [4], Ethernet WAN, and USB [2]. The rear panel also includes a DC power jack and a reset button.

Default login credentials

Please note: password letters are all lower-case

Wireless network name (ESSID)

Wireless password (WPA2)

Administrator password

Administration URL

www.verizon.com/quickguides

Online tutorials :

To reboot, press and hold the WPS button for 10 seconds.

XXXXXXXXXXX XXXXXXXXXXXXXXXX

XXXXXXXXXX

myfiosgateway.com

GETTING TO KNOW YOUR GATEWAY

Page 13

USB (2 ports)

Reset Button

Ethernet LAN (4 ports)

HAN expansion port

Ethernet WAN

Coax WAN and LAN

Power

01 / INTRODUCTION

Page 14

• USB - provides up to 500 mA at 5 VDC for attached devices. For example, you could charge a cell phone. In the future, with a ﬁrmware upgrade, the USB host functionality may be available for other devices, such as external storage and cameras. Firmware updates are performed automatically by Verizon.

• Reset Button - allows you to reset your Gateway to the factory default settings. To reset the Gateway, press and hold the Reset button for at least three seconds.

• Ethernet LAN - connects devices to your Gateway using Ethernet cables to join the local area network (LAN). The four Ethernet LAN ports are 10/100/1000 Mbps auto-sensing and can be used with either straight-through or crossover Ethernet cables.

• HAN Expansion Port - provides for future hardware upgrades to add support for Home Area Networking capabilities.

• Ethernet WAN - connects your Gateway to the Internet using an Ethernet cable.

• Coax WAN and LAN - connects your Gateway to the Internet and/or to other MoCA devices using a coaxial cable.

Warning: The WAN Coax Port is intended for connection to Verizon FiOS

only. It must not be connected to any exterior or interior coaxial wires not designated for Verizon FiOS.

• Power - connects your Gateway to an electrical wall outlet using the supplied power adapter.

Warning: The included power adapter is for home use only, supporting

voltages from 100-240Vac. Do not use in environments with greater than 240Va c.

GETTING TO KNOW THE GATEWAY

Page 15

1.3d/ MOUNTING THE GATEWAY TO A WALL

For optimum performance, the FiOS Quantum Gateway is designed to stand in a vertical upright position. Verizon does not recommend wall mounting the FiOS Quantum Gateway. However, if you wish to mount your Gateway, you can purchase a wall mount bracket from the Verizon FiOS Accessories Store at verizon.com/ﬁosaccessories.

If you are replacing an existing Verizon wall mounted router, you do not need to remove the mounting screws from the wall. The existing mounting screws will ﬁt the new bracket.

To mount your Gateway to a wall:

1. Remove the foot by turning the Gateway upside down

and removing the single screw that holds the foot to the Gateway.

2. Slide the foot toward the front of the Gateway and pull the

foot from the holes. You may need to wiggle the foot slightly.

3. You may use the wall mount bracket as a template for

positioning the Gateway.

01 / INTRODUCTION

Page 16

GETTING TO KNOW THE GATEWAY

4. Mark the mounting holes,

then remove the wall mount bracket from the wall.

5. Drill holes for the screw

anchors.

6. Insert the screw anchors

in the holes in the wall, then insert the screws into the screw anchors and tighten the screws. Leave screws extended about 0.2 inches from the wall.

7. Verify the screws are positioned correctly by placing the wall

bracket on the screws. Remove the wall bracket from the wall.

8. Place the Gateway on the wall bracket and slide the Gateway

forward until it locks in place.

9. To secure the Gateway,

attach the bracket to the Gateway using the single screw you removed from the foot.

10. Slide the wall mount

bracket with the attached Gateway on the screws, then slide the bracket down until it locks in place.

Page 17

02/

CONNECTING YOUR GATEWAY

2.0

2.1

2.2

Setting Up Your Gateway Computer Network

Conﬁguration Main Screen

Page 18

SETTING UP YOUR GATEWAY

Connecting your Gateway and accessing its web-based Graphical User Interface (GUI) are both simple procedures.

Accessing the GUI may vary slightly, depending on your device’s operating system and web browser.

Page 19

YOUR GATEWAY

02 / CONNECTING

2.0/ SETTING UP YOUR GATEWAY

There are three basic steps to setting up your Gateway:

Step 1: Connect your Gateway to the Internet

Step 2: Connect your network device to your Gateway

Step 3: Conﬁgure your Gateway

Before you begin, if you are replacing an existing Gateway, disconnect it. Remove all old Gateway components, including the power supply. They will not work with your new Gateway.

2.0a/ STEP 1 - CONNECT YOUR GATEWAY

1. Remove your Gateway, Ethernet cables, and power adapter

from the box.

2. Locate your high-speed Internet (WAN) outlet. This would be

the wall jack installed previously by Verizon. Note the type of jack may be either Ethernet or coaxial.

3. Connect your Gateway to the Internet (WAN).

• If connecting the WAN using Ethernet, use the supplied white Ethernet cable and plug one end into the white Ethernet WAN port on the back of your Gateway. Plug the other end of the cable into the high-speed Ethernet wall jack.

Page 20

• If connecting the WAN using coaxial cable, locate a coaxial cable and connect one end to the coax port on the back of your Gateway. Connect the other end of the coaxial cable to a coax wall jack.

Tighten the coaxial cables by hand until snug. The cables should not require a wrench.

4. Plug the power cord into the power port on the back of

your Gateway and then into a power outlet. The Gateway automatically turns on as soon as power is plugged in.

Important: Wait until the Power/Internet light on

the front of the Gateway stops ﬂashing and is solid white. If the light turns red, check the troubleshooting steps in the Troubleshooting section of the user guide.

2.0b/ STEP 2 - CONNECT YOUR DEVICE TO YOUR GATEWAY

If connecting a device using wired Ethernet (preferred for initial setup):

• Plug one end of the supplied yellow Ethernet cable into one of the four yellow Ethernet ports in the back of your Gateway. Alternatively, you can use your own Ethernet cable of any color to connect from the yellow Ethernet ports on the back of your Gateway to your device with an Ethernet connector.

• Plug the other end of the yellow Ethernet cable into the Ethernet port of your network device.

SETTING UP YOUR GATEWAY

Page 21

YOUR GATEWAY

02 / CONNECTING

If connecting a wireless device:

• Access the Wi-Fi setting on your wireless device, then select your new Gateway using the wireless network name (ESSID) shown on the sticker located on the side of your Gateway.

• Enter the wireless password (WPA2 key) also shown on the sticker.

2.0c/ STEP 3 - CONFIGURE YOUR GATEWAY:

1. Open a web browser on the device connected to your

Gateway network.

2. In the browser address ﬁeld (URL), enter:

myﬁosgateway.com, then press the Enter key on your keyboard.

Alternately, you can enter: https://192.168.1.1

Default login credentials

Please note: password letters are all lower-case

Wireless network name (ESSID)

Wireless password (WPA2)

Administrator password

Administration URL

www.verizon.com/quickguides

Online tutorials :

To reboot, press and hold the WPS button for 10 seconds.

XXXXXXXXXXX XXXXXXXXXXXXXXXX

XXXXXXXXXX

myfiosgateway.com

Page 22

The ﬁrst time you access your Gateway, an Easy Setup Wizard displays to help step you through the setup process.

3. Click the Get Started button. The Gateway Login screen

displays.

SETTING UP YOUR GATEWAY

Page 23

YOUR GATEWAY

02 / CONNECTING

In the Admin Password ﬁeld, enter the password that is printed next to the Administrator Password on the label on the side of your Gateway.

5. Click Next. The Personalize your Gateway screen displays.

Default login credentials

Please note: password letters are all lower-case

Wireless network name (ESSID)

Wireless password (WPA2)

Administrator password

Administration URL

www.verizon.com/quickguides

Online tutorials :

To reboot, press and hold the WPS button for 10 seconds.

XXXXXXXXXXX XXXXXXXXXXXXXXXX

XXXXXXXXXX

myfiosgateway.com

Page 24

For your protection, your Gateway is pre-set at the factory to use WPA2/WPA mixed mode (Wi-Fi Protected Access) encryption for your wireless network. This is the best setting for most users and provides maximum security.

6. Click Next to continue and save the Admin and Wi-Fi changes

to your Gateway.

Important: If you are on a Wi-Fi device when setting up your

Gateway, you will be disconnected from the Wi-Fi network when you change the Wi-Fi name or Wi-Fi password. When this occurs, your Gateway will detect this situation and prompt you to reconnect using the new settings.

7. Print your settings. Once you have personalized your

Gateway settings, you will be prompted to print a record of these settings in case you forget them.

SETTING UP YOUR GATEWAY AND COMPUTER NETWORK CONFIGURATION

Page 25

YOUR GATEWAY

02 / CONNECTING

Click Next to continue. Your Gateway veriﬁes the ﬁnal settings and displays that it is successfully connected to the Internet and is ready for use.

Upon the successful completion of setup, the Main screen of the Gateway displays. Your Gateway is now conﬁgured. You can change any of the Gateway settings after this initial log in.

If your Gateway is subsequently reset to the factory default settings, the settings printed on the label will again be in effect.

If your Gateway fails to connect, follow the troubleshooting steps in the Troubleshooting section of this guide.

2.1/ COMPUTER NETWORK CONFIGURATION

Each network interface on your computer should either automatically obtain an IP address from the upstream Network DHCP server (default conﬁguration) or be manually conﬁgured with a statically deﬁned IP address and DNS address. We recommend leaving this setting as is.

2.1a/ CONFIGURING DYNAMIC IP ADDRESSING

To conﬁgure a computer to use dynamic IP addressing:

WINDOWS 7/8

1. In the Control Panel, locate Network and Internet, then

select View Network Status and Tasks.

Page 26

COMPUTER NETWORK CONFIGURATION

2. In the View your active networks – Connect or disconnect

section, click Local Area Connection in the Connections ﬁeld. The Local Area Connection Status window displays.

3. Click Properties. The Local Area Connection Properties

window displays.

4. Select Internet Protocol Version 4 (TCP/IPv4), then click

Properties. The Internet Protocol Version 4 (TCP/IPv4)

Properties window displays.

5. Click the Obtain an IP address automatically radio button.

6. Click the Obtain DNS server address automatically radio

button, then click OK.

7. In the Local Area Connection Properties window, click OK to

save the settings.

8. To conﬁgure Internet Protocol Version 6 (TCP/IPv6) to use

dynamic IP addressing, repeat step 1 to 7. However for step 3, select Internet Protocol Version 6 (TCP/IPv6) in the Properties option (refer to IPv6 section for Gateway conﬁguration).

MACINTOSH OS X

1. Click the Apple icon in the top left corner of the desktop. A

menu displays.

2. Select System Preferences. The System Preferences

window displays.

3. Click Network.

Page 27

YOUR GATEWAY

02 / CONNECTING

Verify that Ethernet, located in the list on the left, is highlighted and displays Connected.

5. Click Assist Me.

6. Follow the instructions in the Network Diagnostics

Assistant.

2.1b/ CONNECTING OTHER COMPUTERS & NETWORK DEVICES

You can connect your Gateway to other computers or set top boxes using an Ethernet cable, wireless connection (Wi-Fi), or coaxial cable.

ETHERNET

1. Plug one end of an Ethernet cable into one of the open yellow

Ethernet ports on the back of your Gateway.

2. Plug the other end of the Ethernet cable into an Ethernet

port on the computer.

3. Repeat these steps for each computer to be connected to

your Gateway using Ethernet. You can connect up to four.

CONNECTING A WI-FI DEVICE USING WPS

Wi-Fi Protected Setup (WPS) is an easier way for many devices to set up a secure wireless network connection. Instead of manually entering passwords or multiple keys on each wireless client, such as a laptop, printer, or external hard drive, your Gateway creates a secure wireless network.

Page 28

In most cases, this only requires the pressing of two buttons – one on your Gateway and one on the wireless client. This could be either a built-in button or one on a compatible wireless adapter/card, or a virtual button in software. Once completed, this allows wireless clients to join your wireless network.

To initialize the WPS process, you can either press and release the WPS button located on the front of your Gateway or use the GUI and press the on-screen button.

You can easily add wireless devices to your wireless network using the WPS option if your wireless device supports the WPS feature.

To access WPS using the user interface:

1. From the Main menu, select Wireless Settings, then select

Wi-Fi Protected Setup (WPS).

COMPUTER NETWORK CONFIGURATION

Page 29

YOUR GATEWAY

02 / CONNECTING

Enable the protected setup by moving the selector to On.

3. Use one of the following methods:

• If your wireless client device has a WPS button, press the WPS button on your Gateway, then click the WPS button on your wireless device (client) to start the WPS registration process.

• If your client device has a WPS PIN, locate the PIN printed on the client’s label or in the client documentation.

Enter the PIN number in the Client WPS PIN ﬁeld. The

Client WPS PIN ﬁeld is located in the section B - PIN Enrollment on the user interface.

Click Register.

• Alternatively, you can enter the Gateway’s PIN shown on this screen into the WPS user interface of your device, if this PIN mode is supported by your wireless device.

4. After pressing the WPS button on your Gateway, you have

two minutes to press the WPS button on the client device before the WPS session times out.

When the WPS button on your Gateway is pressed, the Wireless light on the front of your Gateway begins ﬂashing white. The ﬂashing continues until WPS pairing to the client device completes successfully. At this time, the Wireless light turns solid white.

Page 30

If WPS fails to establish a connection to a wireless client device within two minutes, the Wireless light on your Gateway ﬂashes red for two minutes to indicate the WPS pairing process was unsuccessful. After ﬂashing red, the light returns to solid white to indicate that Wi-Fi is on.

CONNECTING A WI-FI DEVICE USING A PASSWORD

1. Verify each device that you are connecting wirelessly (using

Wi-Fi) has a built-in wireless or external wireless adapter.

2. Open the device’s wireless settings application.

3. Select your Gateway’s wireless network name (SSID) from

the device’s list of discovered wireless networks.

4. When prompted, enter your Gateway’s wireless password

(WPA2 key) into the device’s wireless settings. Your Gateway’s default wireless network name and wireless password are located are on the sticker on the side of your Gateway.

5. Verify the changes were implemented by using the device’s

web browser to access a site on the Internet.

6. Repeat these steps for every device that you are wirelessly

connecting to your Gateway.

COAXIAL

1. Verify all coax devices are turned off.

2. Disconnect any adapter currently connected to the coaxial

wall jack in the room where your Gateway is located.

COMPUTER NETWORK CONFIGURATION AND MAIN SCREEN

Page 31

3. Connect one end of the coaxial cable to the coaxial wall jack

and the other end to the Coax port on your network device.

4. Power up the network device.

2.2/ MAIN SCREEN

When you log into your Gateway, the page displays showing the Main navigation menu at the top of the page and your Gateway’s Status, including Quick Links, My Network, and Verizon Zone display in the body of the page.

YOUR GATEWAY

02 / CONNECTING

Page 32

MAIN SCREEN

2.2a/ MENU

The Main menu links across the top of the page to the following conﬁguration options and chapters:

• Wireless Settings - Chapter 3

• My Network - Chapter 5

• Firewall - Chapter 6

• Parental Controls - Chapter 7

• Advanced - Chapter 8

• System Monitoring - Chapter 9

2.2b/ STATUS

This section displays the status of your Gateway’s local network (LAN) and Internet connection (WAN).

BROADBAND CONNECTION

Broadband Connection displays the state of the broadband connection:

• Broadband interface: Ethernet or Coax

• Connected status: Connected or No Connection

• Connection Type: DHCP or Static

• WAN IP address: Address of the broadband connection

Page 33

YOUR GATEWAY

02 / CONNECTING

QUICK LINKS

Quick Links contains frequently accessed documentation, such as User Guide and Verizon Help, and settings, such as Change Wireless Settings, Change Admin Password, and Port Forwarding as well as Logout.

MY NETWORK

My Network displays the connection type, IP address, and status of all devices that have accessed or are currently connected to the network.

The icon associated with the device displays to signify the device is active or shaded gray to indicate the device has not been active for several minutes. You can view the individual settings of each device by clicking its icon.

VERIZON ZONE

The Verizon Zone contains links to various Verizon web sites and other informational links.

Page 34

03/

WIRELESS SETTINGS

3.0

3.1

3.2

3.3

3.4

3.5

3.6

Overview Wireless Status Basic Security Settings Advanced Security Settings Wireless MAC

Authentication

802.11 Mode Other Advanced Wireless

Options

Page 35

Wireless networking enables you to free yourself from wires and plugs, making your devices more accessible and easier to use.

You can create a wireless network, including accessing and conﬁguring wireless security options.

SETTINGS

03 / WIRELESS

Page 36

OVERVIEW

3.0/ OVERVIEW

Your Gateway provides you with wireless connectivity using the

802.11b, g, n, or ac standards. These are the most common wireless standards.

802.11b has a maximum data rate of 11 Mbps, 802.11g has a maximum data rate of 54 Mbps, 802.11n has a maximum data rate of 450 Mbps, and 802.11ac has a maximum data rate of 1300 Mbps.

802.11b and g standards operate in the 2.4 GHz range. 802.11n operates in both the 2.4 GHz and 5 GHz ranges. 802.11ac operates in the 5 GHz range.

Note: 802.11 b is a legacy mode and is not recommended. Even one 802.11b

device connected to the network will slow your entire wireless network.

The wireless service and wireless security are activated by default. The level of security is preset to WPA2 encryption using a unique default WPA2 key (also referred to as a passphrase or password) preconﬁgured at the factory. This information is displayed on a sticker located on the side of your Gateway.

Default login credentials

Please note: password letters are all lower-case

Wireless network name (ESSID)

Wireless password (WPA2)

Administrator password

Administration URL

www.verizon.com/quickguides

Online tutorials :

To reboot, press and hold the WPS button for 10 seconds.

XXXXXXXXXXX XXXXXXXXXXXXXXXX

XXXXXXXXXX

myfiosgateway.com

Page 37

SETTINGS

03 / WIRELESS

Your Gateway integrates multiple layers of security. These include Wired Equivalent Privacy (WEP), Wi-Fi Protected Access (WPA/WPA2), and ﬁrewall.

3.1/ WIRELESS STATUS

Use the Wireless Status feature to view the status of your Gateway’s wireless network.

To view the status:

1. Access the Main page. You can quickly view your Gateway’s

wireless status in the My Network column. This includes all devices that have recently accessed or are currently connected to the network.

Page 38

WIRELESS STATUS

2. Select the Wireless Settings icon. The Wireless Status page

displays additional wireless details.

Page 39

SETTINGS

03 / WIRELESS

3. On the Wireless Status page for either 2.4 GHz or 5 GHz, the

following information displays:

• Radio Enabled - displays whether the wireless radio is active. When the radio is not enabled, no wireless devices will be able to connect to the home network.

• SSID - displays the SSID (Service Set Identiﬁer) shared among all devices on a wireless network. The SSID is the network name. All devices must use the same SSID.

• Channel - displays the channel the wireless connection is currently using.

• Security Enabled - displays the type of security active on the wireless connection as well as the security encryption key.

• SSID Broadcast - displays whether your Gateway is broadcasting its SSID. If activated, the SSID of your Gateway wireless network is broadcast wirelessly. If not activated, the SSID is hidden and the wireless clients must be manually conﬁgured to use the SSID.

• MAC Authentication - displays whether your Gateway is using MAC (Media Access Control) address authentication to allow wireless devices to join the network.

• Wireless Mode - displays the types of wireless device that can join the network.

• WMM - displays whether WMM is enabled on your Gateway.

Page 40

WIRELESS STATUS AND BASIC SECURITY SETTINGS

• Packets Received/Sent - displays the number of packets received and sent since the wireless capability was activated.

3.2/ BASIC SECURITY SETTINGS

You can conﬁgure the basic security settings for your Gateway’s wireless network.

Note: Your Gateway’s recommended wireless security encryption is set to

WPA2. This is the factory default.

This section explains how to activate WEP (Wired Equivalent Privacy) wireless security. WEP is a signiﬁcantly less robust security compared to WPA or WPA2 and is not recommended. To set up WPA2 wireless security, refer to the WPA2 section.

To conﬁgure basic security to WEP:

1. On the Wireless Setting page, select Basic Security Settings.

Page 41

SETTINGS

03 / WIRELESS

2. To activate the wireless radio, click the On radio button.

3. If desired, enter a new name for the wireless network in

the SSID ﬁeld or leave the default name that displays automatically.

4. Select the channel you want the wireless radio to use to

communicate or accept the default channel, then select the Keep my channel selection during power cycle check box to save your channel selection when your Gateway is rebooted.

Page 42

BASIC SECURITY SETTINGS

5. To turn on WEP (Wired Equivalent Privacy) security, click the

WEP radio button.

6. Select a WEP security level as 64/40 bit or 128/104 bit.

7. Enter the key code. If using a HEX key, each character

must be a letter from A to F or a number from 0 to 9. If the key is ASCII, each character can be either any ASCII or alphanumeric character.

If using 64/40 bit, enter 10 HEX or 5 ASCII/alphanumeric characters. If 128/104, enter 26 HEX or 13 ASCII/ alphanumeric characters.

8. Be sure to write down the wireless settings for future

use. Other wireless devices that will be connected to your

Page 43

SETTINGS

03 / WIRELESS

Gateway must be conﬁgured to use these settings to join your Gateway’s wireless network.

9. Click Apply to save changes.

3.3/ ADVANCED SECURITY SETTINGS

You can change your advanced wireless security settings, such as conﬁguring wireless encryption to help protect your network from unauthorized access or damage to your network devices; disable your SSID broadcast to secure your wireless trafﬁc; stop your Gateway from broadcasting your SSID; set Wireless MAC Authentication to limit access to speciﬁc wireless devices; and change the wireless mode to limit or allow access to your wireless network based on the type of technology as well as other advanced wireless options.

To modify the security settings for either 2.4 GHz or 5 GHz:

1. In the Wireless Settings page, select Advanced Security

Settings.

Page 44

ADVANCED SECURITY SETTINGS

3.3a/ LEVEL 1: SECURING YOUR NETWORK

In the Level 1 section, select the type of wireless security. Depending on your selection, one of the following pages displays.

WEP

If WEP was selected, the WEP Settings page displays.

Warning: WEP provides a low level of security and is not recommended.

Additionally, the WEP security setting will drop your Gateway’s wireless performance to a maximum data rate of 54 Mbps, and will disable Wi-Fi Protected Setup (WPS). WEP should only be enabled if you have wireless client

devices that don’t support WPA or WPA2.

Page 45

SETTINGS

03 / WIRELESS

To set the WEP security:

1. In the Network Authentication ﬁeld, select the

authentication level as Open System Authentication, Shared Key Authentication or Both.

Page 46

ADVANCED SECURITY SETTINGS

2. In the WEP Keys section, activate the encryption key by

entering the key name in the Encryption Key column. If HEX, the key must be hexadecimal digits. If ASCII, any characters can be used.

3. Specify the length of key 1 by selecting 64/40 bit or

128/104 bit in the Key Length ﬁeld and HEX or ASCII in the Entry Method ﬁeld.

4. Click Apply to save changes.

WPA/WPA2 Mixed Mode

If WPA/WPA2 Mixed Mode (Wi-Fi Protected Access) was selected, the WPA Key page displays. Selecting WPA/WPA2 Mixed Mode allows the security mode to be automatically set by the gateway based on the security capabilities of the client device. WPA/WPA2 mixed mode is the default wireless security protocol.

To set the WPA/WPA2 Mixed Mode security:

1. Enter the Pre-Shared Key as a wireless password.

2. To activate the group key update interval, select the Group

Key Update Interval check box and set the interval time in seconds.

Page 47

SETTINGS

03 / WIRELESS

3. Click Apply to save the changes.

WPA2

If WPA2 (Wi-Fi Protected Access II) was selected, the WPA2 page displays.

To set the WPA2 security:

1. Enter the Pre-Shared Key.

2. To activate the group key update interval, select the Group

Key Update Interval check box and set the interval time in seconds.

3. Click Apply to save the changes.

3.3b/ LEVEL 2: SSID BROADCAST

You can conﬁgure your Gateway’s SSID broadcast capabilities to allow or disallow wireless devices from automatically using a broadcast SSID name to detect your Gateway wireless network.

Page 48

ADVANCED SECURITY SETTINGS

To enable or disable SSID broadcast:

1. In the Advanced Settings page, locate the Level 2 section.

2. Click the 2.4 GHz SSID Broadcast or 5 GHz SSID Broadcast

link for the wireless network you wish to modify. The following example uses the 2.4 GHz network. The display conﬁguration looks basically the same for the 5 GHz network.

3. To enable SSID broadcasting, click the Enable radio button.

SSID broadcast is enabled by default. The SSID of the wireless network will be broadcast to all wireless devices.

Page 49

SETTINGS

03 / WIRELESS

4. To disable SSID broadcasting, click the Disable radio button.

The public SSID broadcast will be hidden from all wireless devices. You will need to manually conﬁgure additional wireless devices to join the wireless network.

5. Click Apply to save the changes.

3.3c/ LEVEL 3: LIMIT ACCESS

You can conﬁgure your Gateway to limit access to your wireless network allowing access only to those devices with speciﬁc MAC addresses or based on the type of wireless technology used.

To limit access:

1. In the Advanced Settings page, locate the Level 3 section.

2. To allow only devices with speciﬁc MAC addresses, click

the Wireless MAC Authentication link. The Wireless MAC Authentication page displays. For additional details, refer to the Wireless MAC Authentication section.

3. To limit access based on the type of technology, click the

802.11 b/g/n/ac Mode link. The 802.11 b/g/n/ac Mode page

displays. For additional details, refer to the 802.11 b/g/n/ac Mode section.

Page 50

WIRELESS MAC AUTHENTICATION

4. To access other advanced wireless options, click the Other

Advanced Wireless Options link. The Other Advanced

Wireless Options page displays. For additional details, refer to the Other Advanced Wireless Options section.

3.4/ WIRELESS MAC AUTHENTICATION

You can allow or deny access to your wireless network by specifying devices with speciﬁc MAC addresses.

To set wireless MAC authentication:

1. On the Advanced Settings page, locate the Level 3 section

and click the Wireless MAC Authentication link. The Wireless MAC Authentication page displays.

Page 51

SETTINGS

03 / WIRELESS

Page 52

802.11 MODE

2. To enable access control, select the Enable Access List check

box.

3. Select either:

• Accept all devices listed below – allows only the listed devices to access the wireless network.

Warning: This will block wireless network access for all devices

not in the list. Only devices in the list will be able to connect to the wireless network.

• Deny all devices listed below – denies access to the listed devices. All other wireless devices will be able to access the wireless network if they use the correct wireless password.

4. Enter the MAC address of a device, then click Add.

5. Repeat step 2 to add additional devices, as needed.

6. To remove a speciﬁc device’s MAC address, click the Remove

button next to the speciﬁc MAC address.

7. When all changes are complete, click Apply to save changes.

3.5/ 802.11 MODE

From the 802.11 Mode page, you can limit the wireless access to your network by selecting the 2.4 GHz and 5 GHz wireless communication standard (mode) best suited or compatible with the devices you allow access to your wireless network.

Page 53

SETTINGS

03 / WIRELESS

To select the 802.11 Mode:

1. On the Advanced Settings page, locate the Level 3 section

and click the 802.11 Mode link. The 802.11 Mode page displays.

2. Select the 2.4 GHz Wireless Mode as follows:

• Compatibility – This is the default mode setting, providing a good balance of performance and compatibility with existing wireless devices. 802.11b, g, and n devices can connect.

• Legacy – For older wireless devices. Only 802.11b and g devices can connect. 802.11b (legacy mode) will cause your wireless network to slow and is not recommended.

• Performance – For newer wireless 802.11n devices only. No other devices can be used.

Page 54

OTHER ADVANCED WIRELESS OPTIONS

3. Select the 5 GHz Wireless Mode as follows:

• N and AC Mode – This is the default setting. Both 802.11n and 802.11ac are available on the 5 GHz frequencies.

• N Only Mode – The 5 GHz frequencies are available to

802.11n devices. 802.11ac is not enabled.

• AC Only Mode – This provides maximum performance.

802.11ac devices will have exclusive use of the 5 GHz frequencies and 802.11n devices will not be able to connect at 5 GHz.

4. Click Apply to save the changes.

3.6/ OTHER ADVANCED WIRELESS OPTIONS

You can view additional wireless options.

To view the options:

1. In the Advanced Settings page, locate the Level 3 section

and click Other Advanced Wireless Options link. A warning message displays.

2. Click Yes. The Other Advanced Wireless Options page

displays.

Page 55

SETTINGS

03 / WIRELESS

View the following options:

Caution: These settings should only be conﬁgured by experienced

network technicians. Changing the settings could adversely affect the operation of your Gateway and your local network.

Page 56

• Transmission Rate – displays status as Auto

• Channel Width – Controls the bandwidth of the wireless signal

• Transmit Power – adjusts the power of the wireless signal

• CTS (Clear to Send) Protection Mode – allows mixed

802.11b/g/n/ac networks to operate at maximum efﬁciency

• CTS Protection Type – displays cts, which is only for mixed 802.11b/g/n/ac networks or rts_cts, which is for

802.11a/b/g networks

• Frame Burst – Max Number – allows packet bursting, which increases overall network speed

• Frame Burst – Burst Time – indicates the burst time of the frame bursts

• Beacon Interval – displays the time period of the beacon interval

• DTIM (Delivery Trafﬁc Indication Message) Interval – provides a countdown mechanism, informing wireless network clients of the next window for listening to broadcast and multicast messages

• Fragmentation Threshold – increases the reliability of frame transmissions on the wireless network

• RTS Threshold – controls the size of the data packet that the low level RF protocol issues to an RTS packet

OTHER ADVANCED WIRELESS OPTIONS

Page 57

SETTINGS

03 / WIRELESS

• MSDU Aggregation – enables or disables MSDU aggregation

• MPDU Aggregation – enables or disables MPDU aggregation

5. To access the WMM settings, click the WMM Settings link.

6. Click Apply to save changes.

3.6a/ WMM SETTINGS

You can prioritize the types of data transmitted over the wireless network using the advanced WMM settings.

Wireless QoS (WMM) can improve the quality of service (QoS) for voice, video, and audio streaming over Wi-Fi by prioritizing these data streams.

WMM Power Save can improve battery life on mobile Wi-Fi devices such as smart phones and tablets by ﬁne-tuning power consumption.

WMM (Wi-Fi Multimedia) QoS and Power Save require a wireless client device which also supports WMM.

To set the options:

1. In the Advanced Wireless Options page, click WMM Settings

link. A warning message displays.

2. Click Yes. The WMM Settings page displays.

Page 58

3. To enable Wireless QoS (WMM), select the Enabled check

box.

4. To enable WMM Power Save, enable Wireless QoS (WMM)

ﬁrst, then enable WMM Power Save by selecting the Enabled check box.

5. Click Apply to save changes.

OTHER ADVANCED WIRELESS OPTIONS

Page 59

SETTINGS

03 / WIRELESS

Page 60

04/

CONFIGURING MY NETWORK SETTINGS

4.0

4.1

Accessing My Network Settings

Using My Network Settings

Page 61

You can conﬁgure the basic network settings for your Gateway’s network.

MY NETWORK SETTINGS

04 / CONFIGURING

Page 62

ACCESSING MY NETWORK SETTINGS AND USING MY NETWORK SETTINGS

Caution: The settings described in this chapter should only be conﬁgured

by experienced network technicians. Changes could adversely affect the operation of your Gateway and your local network.

4.0/ ACCESSING MY NETWORK SETTINGS

My Network allows you to view and manage your network connections and devices. You can block websites and Internet services, set port forwarding, view device details, and rename devices.

To view your network connections:

1. On the Main page, select the My Network icon. The My

Network page opens with our current status displayed.

Page 63

4.1/ USING MY NETWORK SETTINGS

You can access and conﬁgure common network parameters:

• Website Blocking - To block speciﬁc websites, click Website Blocking. The Parental Controls page displays.

For additional information about blocking websites, refer to Chapter 7 Setting Parental Controls.

• Block Internet Services - Internet services blocking prevents a device on your network from accessing speciﬁc services, such as receiving email or downloading ﬁles from FTP sites. Block Internet services by locating the device, then clicking Block Internet Services. The Access Control page displays.

For additional information on blocking Internet services, refer to the Access Control section in Chapter 6 Conﬁguring Security Settings.

• Port Forwarding - Port Forwarding allows your network to be exposed to the Internet in speciﬁc limited and controlled ways. For example, you could allow speciﬁc applications, such as gaming, voice, and chat, to access servers in the local network. To access the Port Forwarding page, click Port Forwarding.

For additional information, refer to the Port Forwarding section in Chapter 6 Conﬁguring Security Settings.

• View Device Details - Click View Device Details to display the Device Information page and view the selected device’s information, such as IP Address, MAC address, Network Connection, Lease Type,

MY NETWORK SETTINGS

04 / CONFIGURING

Page 64

USING MY NETWORK SETTINGS

Port Forwarding Services, and Windows Shared Folder as well as the Ping Test option. You can also click the device’s icon in the Main page to display the Device Information page.

• Rename this Device - To change the name of a speciﬁc device, click Rename this Device. The Rename Device page displays.

If desired, enter the new device name and/or select a different icon. Click Apply to save changes. The My Network page will open with the new name and icon displayed.

Page 65

05/

USING NETWORK CONNECTIONS

5.0

5.1

5.2

5.3

5.4

Accessing Network Connections

Network (Home/Ofﬁce) Connection

Ethernet/Coax Connection Wireless Access Point

Connection Broadband Ethernet/Coax

Connection

Page 66

ACCESSING NETWORK CONNECTIONS

Your Gateway supports various local area network (LAN) and wide area network (WAN), or Internet connections using Ethernet or coaxial cables.

You can conﬁgure aspects of the network and Internet connections as well as create new connections.

Page 67

CONNECTIONS

05 / USING NETWORK

Caution: The settings described in this chapter should only be conﬁgured

by experienced network technicians. Changes could adversely affect the operation of your Gateway and your local network.

5.0/ ACCESSING NETWORK CONNECTIONS

You can access your network connections and view the connections by connection type.

To access the network connections:

1. Select My Network, then select Network Connections.

2. To display all connection entries, click the Advanced button.

Page 68

NETWORK (HOME/OFFICE) CONNECTION

3. To view and edit the details of a speciﬁc network connection,

click the hyperlinked name or the action icon. The following sections detail the types of network connections that you can view.

5.1/ NETWORK (HOME/OFFICE) CONNECTION

You can view the properties of your local network. This connection is used to combine several network interfaces under one virtual network. For example, you can create a home/ofﬁce network connection for Ethernet and other network devices.

Note: When a network connection is disabled, the formerly underlying devices

connected to it will not be able to obtain a new DHCP address from that Gateway network interface.

Page 69

CONNECTIONS

05 / USING NETWORK

To view the connection:

1. On the Network Connections page, click the Network

(Home/Ofﬁce) connection link. The Network (Home/Ofﬁce)

Properties page displays.

2. To rename a network connection, enter the new network

name in the Name ﬁeld.

3. Click Apply to save the changes.

Page 70

CONFIGURING THE HOME/OFFICE NETWORK

To conﬁgure the network connection:

1. In the Network (Home/Ofﬁce) Properties page, click

Settings. The conﬁguration page displays.

2. Conﬁgure the following sections, as needed.

GENERAL

In the General section, verify the following information:

• Status - displays the connection status of the network.

• Network – displays the type of network connection.

NETWORK (HOME/OFFICE) CONNECTION

Page 71

CONNECTIONS

05 / USING NETWORK

• Connection Type - displays the type of connection.

• Physical Address - displays the physical address of the network card used for the network

• MTU - speciﬁes the Maximum Transmission Unit (MTU) speciﬁes the largest packet size permitted for Internet transmissions:

– Automatic - sets the MTU at 1500

– Automatic by DHCP - sets the MTU according to the

DHCP connection

– Manual - allows you to manually set the MTU

• Internet Protocol - in the internet protocol section, specify one of the following

– Use the Following IP Address - the network connection

uses a permanent or static IP address and subnet mask address, provided by Verizon or experienced network technician.

BRIDGE

In the Bridge section of the Conﬁgure Network (Home/Ofﬁce), you can conﬁgure the various LAN interfaces. By default, the Ethernet, Coax, and Wireless Access Point connections are included in the ‘Network (Home/Ofﬁce)’ bridge.

Caution: Do not change these settings unless speciﬁcally instructed to by

Verizon. Changes could adversely affect the operation of your Gateway and your local network.

Page 72

Verify the following information:

• Status – displays the connection status of a speciﬁc network connection.

• Action – contains an icon that, when clicked, generates the next lower-level conﬁguration page for the speciﬁc network connection or network device.

IP ADDRESS DISTRIBUTION

The IP Address Distribution section of the Properties settings is used to conﬁgure your Gateway’s Dynamic Host Conﬁguration Protocol (DHCP) server parameters.

NETWORK (HOME/OFFICE) CONNECTION

Page 73

CONNECTIONS

05 / USING NETWORK

Once enabled and conﬁgured, the DHCP server automatically assigns IP addresses to any network devices which are set to obtain their IP address dynamically.

If DHCP Server is enabled on your Gateway, conﬁgure the network devices as DHCP Clients. There are 2 basic options in this section: Disabled and DHCP Server.

To set up the Gateway’s network bridge to function as a DHCP server:

1. In the IP Address Distribution section, select the DHCP

server. Once enabled, the DHCP server provides automatic IP assignments (also referred to as IP leases) based on the preset IP range deﬁned below.

• Start IP Address – Enter the ﬁrst IP address in the IP

range that the Gateway will automatically begin assigning IP addresses from. Since your Gateway’s IP address is

192.168.1.1, the default Start IP Address is 192.168.1.2.

Page 74

• End IP Address – Enter the last IP address in the IP range

that the Gateway will automatically stop the IP address allocation at. The maximum end IP address range that can be entered is 192.168.1.254.

2. If Windows Internet Naming Service (WINS) is being used,

enter the WINS server address.

3. In the Lease Time in Minutes ﬁeld, enter the amount of time

a network device is allowed to connect to the Gateway with its currently issued dynamic IP address.

4. Click Apply to save changes.

ROUTING

You can conﬁgure your Gateway to use static or dynamic routing.

• Static routing – speciﬁes a ﬁxed routing path to neighboring destinations based on predetermined metrics.

• Dynamic routing – automatically adjusts how packets travel on the network. The path determination is based on network/ device reachability and status of network being traveled.

To conﬁgure routing:

1. In the Routing Table section, click Add New Route to display

and modify the new route conﬁguration page.

NETWORK (HOME/OFFICE) CONNECTION

Page 75

CONNECTIONS

05 / USING NETWORK

COMPLETE NETWORK CONNECTION CONFIGURATION UPDATES

To save your changes click Apply.

5.2/ BROADBAND CONNECTION

You can view the properties of your broadband connection (your connection to the Internet). This connection may be via either Ethernet or Coaxial cable.

To view the connection settings:

1. In the Network Connections page, click the Broadband

Connection (Ethernet/Coax) link.

Page 76

ETHERNET/COAX CONNECTION

2. To rename the network connection, enter the new name in

the Name ﬁeld.

3. Click Apply to save changes.

5.2a/ CONFIGURING THE ETHERNET/COAX CONNECTION

To conﬁgure the connection:

1. In the Broadband Connection (Ethernet/Coax) Properties

page, click Settings. The conﬁguration page displays.

Page 77

CONNECTIONS

05 / USING NETWORK

Conﬁgure the following settings, as needed.

GENERAL

Verify the following information:

• Status - displays the connection status of the network.

• Network – displays the type of network connection.

• Connection Type - displays the type of connection.

• Physical Address - displays the physical address of the network card used for the network.

• MTU - speciﬁes the largest packet size permitted for Internet transmissions:

– Automatic - sets the MTU (Maximum Transmission Unit

at 1500)

Page 78

– Automatic by DHCP - sets the MTU according to the

DHCP connection

– Manual - allows you to manually set the MTU to be set.

COAX LINK

To set the Channel:

1. Select the coax link channel as 1 to 3.

2. Select the On or Off radio button in the Auto Detection ﬁeld.

3. To set privacy, select the Enabled check box. This causes

all devices connected to the coaxial cable to use the same password. This is recommended.

4. To set the password, enter the Coax Link password in the

Password ﬁeld.

5. To enable or disable the Coax link, click Disable or Enable.

6. To view the devices connected using the coaxial cable, click

the Go to WAN Coax Stats link.

COMPLETE ALL ETHERNET/COAX CONNECTION CONFIGURATION UPDATES

ETHERNET/COAX CONNECTION

Page 79

CONNECTIONS

05 / USING NETWORK

To save your changes:

1. Click Apply.

5.3/ WIRELESS ACCESS POINT CONNECTION

A Wireless Access Point network connection allows wireless devices to connect to the local area network (LAN) using the 2.4 GHz or 5 GHz Wi-Fi network.

Note: Once disabled, all wireless devices connected to that wireless network

will be disconnected from the LAN network and Internet.

To view the connection:

1. In the Network Connections page, click Advanced.

Page 80

2. Click 5 GHz Wireless Access Point 1 or 2.4 GHz Wireless

Access Point 2.

3. To disable the connection, click Disable.

4. To rename the connection, enter a name in the Name ﬁeld.

5. Click Apply to save the changes.

6. Reboot your Gateway.

5.3a/ CONFIGURING WIRELESS ACCESS POINT PROPERTIES

To conﬁgure the connection:

WIRELESS ACCESS POINT CONNECTION

Page 81

CONNECTIONS

05 / USING NETWORK

In the Wireless Access Point Properties page, click Settings. The conﬁguration page displays.

2. Verify the following information:

• Status - displays the connection status of the network.

• Network – displays the type of network connection.

• Connection Type - displays the type of connection.

• Physical Address - displays the physical address of the

network card used for the network.

• MTU - speciﬁes the largest packet size permitted for

Internet transmissions:

Page 82

– Automatic - set the MTU (Maximum Transmission

Unit) at 1500

– Automatic by DHCP - sets the MTU according to the

DHCP connection

– Manual - allows you to manually set the MTU

3. Click Apply to save changes.

5.4/ BROADBAND ETHERNET/COAX CONNECTION

A Broadband Ethernet connection connects computers to your Gateway using Ethernet cables. The connections are either direct or use network hubs and switches.

A Coax connection connects devices, such as set-top boxes, to your Gateway using a coaxial cable.

Note: If disabling the connection, you must reboot your Gateway for the

change to take effect.

To view the connection:

1. In the Network Connections page, click the Broadband

Connection (Ethernet/Coax) link.

WIRELESS ACCESS POINT CONNECTION AND BROADBAND ETHERNET/COAX CONNECTION

Page 83

CONNECTIONS

05 / USING NETWORK

To rename the network connection, enter the new name in the Name ﬁeld.

3. Click Apply to save changes.

5.4a/ CONFIGURING THE ETHERNET/COAX CONNECTION

To conﬁgure the connection:

1. In the Broadband Connection (Ethernet/Coax) Properties

page, click Settings. The conﬁguration page displays.

Page 84

2. Conﬁgure the following settings, as needed.

GENERAL

Verify the following information:

• Status - displays the connection status of the network

• Network – displays the type of network connection

• Connection Type - displays the type of connection

• Physical Address - displays the physical address of the network card used for the network

• MTU - speciﬁes the largest packet size permitted for Internet transmissions:

– Automatic - set the MTU (Maximum Transmission Unit) at

1500

BROADBAND ETHERNET/COAX CONNECTION

Page 85

CONNECTIONS

05 / USING NETWORK

– Automatic by DHCP - sets the MTU according to the

DHCP connection

– Manual - allows you to manually set the MTU

COAX LINK

1. To set the Channel, select the coax link channel as 1 to 3.

2. Select the On or Off radio button in the Auto Detection ﬁeld.

3. To set privacy, select the Enabled check box. This causes

all devices connected to the coaxial cable to use the same password. This is recommended.

4. To set the password, enter the Coax Link password in the

Password ﬁeld.

5. To enable or disable the Coax link, click Disable or Enable.

6. To view the devices connected using the coaxial cable, click

the Go to WAN Coax Stats link.

Page 86

INTERNET PROTOCOL

1. In the Internet Protocol section, specify one of the following:

• No IP Address – the connection has no IP address. This is

useful if the connection operates under a bridge.

• Obtain an IP Address Automatically – the network

connection is required by Verizon to obtain an IP address automatically. The server assigning the IP address also assigns a subnet mask address, which can be overridden by entering another subnet mask address.

• Use the Following IP Address - the network connection

uses a permanent or static IP address, then the IP address and subnet mask address.

2. To override the subnet mask, select the Override Subnet

Mask check box, then enter the new subnet mask.

BROADBAND ETHERNET/COAX CONNECTION

Page 87

CONNECTIONS

05 / USING NETWORK

ROUTING MODE

COMPLETE ALL ETHERNET/COAX CONNECTION CONFIGURATION UPDATES

To save your changes:

1. Click Apply.

Page 88

06/

CONFIGURING SECURITY SETTINGS

6.0

6.1

6.2

6.3

6.4

6.5

6.6

Firewall Access Control Port Forwarding Port Triggering Remote Administration Static NAT Security Log

Page 89

Your Gateway’s security suite includes comprehensive and robust security services, such as stateful packet inspection, ﬁrewall security, user authentication protocols, and password protection mechanisms.

These and other features help protect your computers from security threats on the Internet.

SECURITY SETTINGS

06 / CONFIGURING

Page 90

FIREWALL

This chapter covers the following security features:

• Firewall - select the security level for the ﬁrewall.

• Access Control - restrict access from the local network to the Internet.

• Port Forwarding - enable access from the Internet to speciﬁed services provided by computers on the local network.

• Port Triggering - deﬁne port triggering entries to dynamically open the ﬁrewall for some protocols or ports.

• Remote Administration - enable remote conﬁguration of your gateway from any Internet-accessible computer.

• Static NAT - allow multiple static NAT IP addresses to be designated to devices on the network.

• Security Log - view and conﬁgure the security log.

6.0/ FIREWALL

The ﬁrewall is the cornerstone of the security suite for your Gateway. It has been exclusively tailored to the needs of the residential or ofﬁce user and is pre-conﬁgured to provide optimum security.

The ﬁrewall provides both the security and ﬂexibility home and ofﬁce users seek. It provides a managed, professional level of network security while enabling the safe use of interactive applications, such as Internet gaming and video conferencing.

Additional features, including surﬁng restrictions and access control, can also be conﬁgured locally through the user interface or remotely by a service provider.

Page 91

The ﬁrewall regulates the ﬂow of data between the local network and the Internet. Both incoming and outgoing data are inspected, then either accepted and allowed to pass through your Gateway or rejected and barred from passing through your Gateway, according to a ﬂexible and conﬁgurable set of rules. These rules are designed to prevent unwanted intrusions from the outside, while allowing local network users access to Internet services.

The ﬁrewall rules specify the type of services on the Internet that are accessible from the local network and types of services in the local network that are accessible from the Internet.

Each request for a service that the ﬁrewall receives is checked against the ﬁrewall rules to determine whether the request should be allowed to pass through the ﬁrewall. If the request is permitted to pass, all subsequent data associated with this request or session is also allowed to pass, regardless of its direction.

For example, when accessing a website on the Internet, a request is sent to the Internet for this site. When the request reaches your Gateway, the ﬁrewall identiﬁes the request type and origin, such as HTTP and a speciﬁc computer in the local network. Unless your Gateway is conﬁgured to block requests of this type from this computer, the ﬁrewall allows this type of request to pass to the Internet.

When the website is returned from the web server, the ﬁrewall associates the website with this session and allows it to pass; regardless HTTP access from the Internet to the local network is blocked or permitted.

SECURITY SETTINGS

06 / CONFIGURING

Page 92

It is the origin of the request, not subsequent responses to this request, which determines whether a session can be established.

6.0a/ SETTING FIREWALL CONFIGURATION

You can select a maximum, typical, or minimum security level to block, limit, or permit all trafﬁc. The following table shows request access for each security level.

The request access is deﬁned as:

• Blocked trafﬁc - no access allowed, except as conﬁgured in Port Forwarding and Remote Access

• Limited - permits only commonly used services, such as email and web browsing

• Unrestricted - permits full access of incoming trafﬁc from the Internet and allows all outgoing trafﬁc, except as conﬁgured in Access Control

Maximum

Typical

Minimum

Blocked

Unrestricted

Limited

Unrestricted

Security Level Internet Requests

Incoming Trafﬁc

Local Network Requests

Outgoing Trafﬁc

FIREWALL

Page 93

6.0b/ SPECIFYING GENERAL SETTINGS FOR IPV4 OR IPV6

To set your ﬁrewall conﬁguration:

1. From the Firewall General settings page click on desired IPv6

option to conﬁgure IPv6 security:

SECURITY SETTINGS

06 / CONFIGURING

Page 94

ACCESS CONTROL

2. Select a security level by clicking one of the radio buttons.

Using the Minimum Security setting may expose the local network to signiﬁcant security risks, and should only be used for short periods of time to allow temporary network access.

3. Click Apply to save changes.

6.1/ ACCESS CONTROL

You can block individual computers on your local network from accessing speciﬁc services on the Internet. For example, you could block one computer from accessing the Internet, then block a second computer from transferring ﬁles using FTP as well as prohibit the computer from receiving incoming email.

Access control incorporates a list of preset services, such as applications and common port settings.

6.1a/ ALLOW OR RESTRICT SERVICES

To allow or restrict services:

1. From the Firewall page, select Access Control. The Access

Control page opens with the Allows and Blocked sections displayed. The Allowed section only displays when the ﬁrewall is set to maximum security.

Page 95

2. To block a service, click Add. The Add Access Control Rule

page displays.

3. To apply the rule to:

• All networked devices - select Any.

SECURITY SETTINGS

06 / CONFIGURING

Page 96

ACCESS CONTROL AND PORT FORWARDING

• Speciﬁc devices only - select User Deﬁned, then click Add and create a network object.

4. In the Protocol ﬁeld, select the Internet protocol to be

allowed or blocked.

If the service is not included in the list, select User Deﬁned. The Edit Service page displays. Deﬁne the service, then click

OK. The service is automatically added to the Add Access Control Rule section.

5. Specify when the rule is active as Always or User Deﬁned

and click Add to create the schedule.

6. Click Apply to save changes. The Access Control page

displays a summary of the new access control rule.

6.1b/ DISABLE ACCESS CONTROL

You can disable an access control and enable access to the service without removing the service from the Access Control table. This can make the service available temporarily and allow you to easily reinstate the restriction later.

• To disable an access control, clear the check box next to the service name.

• To reinstate the restriction, select the check box next to the service name.

• To remove an access restriction, select the service and click Remove. The service is removed from the Access Control table.

Page 97

6.2/ PORT FORWARDING

You can activate port forwarding to expose the network to the Internet in a limited and controlled manner. For example, enabling applications, such as gaming and voice, to work from the local network as well as allowing Internet access to servers within the local network.

To create port forwarding rules:

1. From the Firewall page, select Port Forwarding. The Port

Forwarding page opens with the current rules displayed.

2. To create a new rule, select the IP address in the Select IP

from Menu drop down.

SECURITY SETTINGS

06 / CONFIGURING

Page 98

3. Select the application in the Application to Forward drop

down.

4. Click Add. The rule displays in the Applied Rules section.

5. Click Apply to save changes.

6. 2a/ ADVANCED PORT FORWARDING RULES

You can conﬁgure advanced port forwarding rules.

To conﬁgure the rules:

1. In the Port Forwarding page, select Advanced.

PORT FORWARDING AND PORT TRIGGERING

Page 99

2. If needed, to select a port to forward communication to,

select an option in the Forward to Port list box.

3. If a single port or range of ports is selected, a text box

displays. Enter the port numbers.

4. To schedule the rule, select either Always or User Deﬁned in

the Schedule list box.

5. Click Add. The rule displays in the Applied Rules section.

6. Click Apply to save changes.

6.3/ PORT TRIGGERING

Port triggering can be described as dynamic port forwarding. By setting port triggering rules, inbound trafﬁc arrives at a speciﬁc network host using ports that are different than those used for outbound trafﬁc. The outbound trafﬁc triggers the ports where the inbound trafﬁc is directed.

For example, a gaming server is accessed using UDP protocol on port

2222. The gaming server then responds by connecting the user using

UDP on port 3333, when a gaming session is initiated.

In this case, port triggering must be used since it conﬂicts with the following default ﬁrewall settings:

• Firewall blocks inbound trafﬁc by default.

• Server replies to your Gateway IP, and the connection is not sent back to the host since it is not part of a session.

SECURITY SETTINGS

06 / CONFIGURING

Page 100

To resolve the conﬂict, a port triggering entry must be deﬁned, which allows inbound trafﬁc on UDP port 3333 only after a network host generated trafﬁc to UDP port 2222. This results in your Gateway accepting the inbound trafﬁc from the gaming server and sending it back to the network host which originated the outgoing trafﬁc to UDP port 2222.

To conﬁgure port triggering:

1. Select Port Triggering.

2. To add a service as an active protocol, click Add. The Edit

Port Triggering Rule page displays.

PORT TRIGGERING AND REMOTE ADMINISTRATION

Verizon FiOS-G1100 Quantum User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual