Home

DDW2600 Wireless Router (U10CC037) and DDC2700 Commercial

1. 73 4 5 3 Parental Control Tod Filter 74 4 5 4 Parental Control Event Log 75 Firewall Men acu o ris cirea Be Bia ie Balad UR Ro os aos Don e oor ce c oa ed tees 76 4 6 1 Firewall Content Filter 76 4 6 2 Firewall EventLog 78 4 6 3 Firewall Remote Log 78 uie Mirum rpm 80 Mtl MOOS RING 2ct ae cei cat TEILT eke eee eas eee eee 80 417 2 Tools Trace ROU ceri ERR ex ae Se boos coe Sere eee sean 81 ATS Tools S GlIenb AA KA ETUR DRE Rte aes 82 4 7 4 Tools Scanning Plan 0 0 0 6 ees 83 4 7 5 Tools Password Subscriber 84 4 7 6 Tools UserDefaultis 85 DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 1 Safety and Regulatory Information The following information provides safety and regulatory standards for anyone installing maintaining and using the DDW2600 wireless or the DDM2700 commercial cable modem router 1 1 Safety WARNING The following information provides safety guidelines for anyone A N installing and maintaining the DDW2600 or DDM2700 router Read all safety instructions in this guide before attempting to unpack install operate or connect power to this product Follow all instructio
2. 00 00 00 00 00 00 OO 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 OO Hn u nu uou nun uu 00 00 00 00 00 O OU 00 00 00 1001 00 View Additional Rules 1 1 to 20 Label Description Index The Index number of the rule MAC Address Enter the MAC address to block Clear Select Clear to delete the filtering rule View Additional Rules Select from the pull down to display the remaining 10 rules if they exist 20 rules total are supported Apply Click Apply to save all screen changes 4 2 9 Advanced Gateway Setup IP Filtering The IP Filtering option allows you to filter IP addresses in order to block internet traffic to specific network devices on the LAN Any host listed on this list will not be accessible to internet traffic 1 Access the web interface Refer to page 14 if needed 2 Click the Gateway link from the top of the screen DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 4 2 10 Advanced Gateway Setup Port Filtering 3 Click IP Filtering from the left side of the screen The IP Filtering fields are explained following this screen example Advanced Gateway IP Filtering IP Filtering Start Address End Address Enabled 192 168 0 0 192 168 0 0 192 168 0 0 192 168 0 0 192 168 0 0 192 168 0 0 192 168 0 0 192 16
3. 41 4 2 12 Additional Information Forwarding 43 4 2 13 Advanced Gateway Setup Port Triggering 44 4 2 14 Additional Information Port Triggering 46 4 2 15 Advanced Gateway Setup Pass Through 4T 4 2 16 Advanced Gateway Setup DMZ Host 48 Wireless Menu iubeseie dorERESGUPEREROGEEREXG GRO Rex Eb be Sed ies 49 4 3L Wireless BASIC xen ced EN SERRE DS GUN pce duos a aes ad 49 4 3 2 Wireless Security 51 4 3 3 Wireless Access Control 55 4 3 4 Wireless Guest Network 57 VPN MenU C L 61 aad MPN ENADE oeaan bed a weak SSA tie ed e de Owe eue d ears 61 44 2 VPN Summary 000 cc eee es 62 44 3 OMENS SONIOQUEG oi nc dore ds og our ae teen ee eal deve ex eee Ss 63 4 4 4 VPN Configure Advanced Settings 67 AAS MWPNSCZIP PPV tox82t co eee ee ee Ua ds Pat ee DES feb dE 68 4 4 6 Additional information VPN Overview 69 AA NPN EVE Logic ecce geet dete ete beh tse TI E Hes 70 Parental Control Menu 71 4 5 1 Parental Control User Setup 71 4 5 2 Parental Control Basic Settings
4. C Blocked Connections F Known Internet Attacks Product Configuration Events to Syslog server at 192 168 0 DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive Label Permitted Connections Blocked Connections Known Internet Attacks Product Configuration Events SysLog server Apply 4 6 3 Firewall Remote Log Description Select to log all access attempts that are allowed by firewall Select to log all access attempts that are blocked by firewall Select to log all known attacks from Internet Select to log whenever the DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router is configured modified by a user or admin Enter the IP address of the Syslog server Click to save the remote log configuration DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 79 4 7 Tools Menu 4 7 80 Tools Menu Ubee Interactive This chapter contains instructions for using a variety of tools to evaluate diagnose and configure the operation of DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router 1 Access the web interface Refer to page 14 if needed 2 Click the Tools link from the top of the screen 4 7 1 Tools Ping The Ping option is a utility to test connectivity to a specific device by its IP address 1 2 Access the web interface Refer to page 14 if needed Clic
5. DM Address 1202 168 0 0 Label Description DMZ Address Enter the DMZ host IP address Apply Click to save DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 4 3 4 3 Wireless Menu Wireless Menu This chapter contains instructions for all wireless configuration settings Important The Wireless menu functions are available on the DDW2600 Wireless Cable Modem Router only 1 Access the web interface Refer to page 14 if needed 2 Click the Wireless link from the top of the screen 4 3 1 Wireless Basic The Basic option allows you to configure key wireless operations including channel selection bandwidth control and the primary broadcast SSID 1 Access the web interface Refer to page 14 if needed 2 Click the Wireless link from the top of the screen 3 Click Basic from the left side of the screen The Basic fields are explained following this screen example MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS Wireless Wireless 802 11b g Basic eBasic 3 Wireless MAC Address 00 1E 4C 03 0E CA Security Network Name SSID 9414 Access Control s Advanced Broadcast SSID Enable Bridging Country USA Wifi Multimedia Channel Current 1 Guest Network Interface Enabled w Restore Wireless Defaults Label Description Wireless MAC Address Displays the MAC address of wireless rout
6. example CABLE MODEM Information Status Downstream Upstream Upstream Burst MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS Cable Modem Upstream Burst Req Init Maint Per Maint Short Data Long Data 1 Modulation Type QPSK Differential Encoding Off 3 4 5 6 QPSK QPSK 16QAM 16QAM Off Off Off Operation Config sEvent Log Preamble Length Preamble Value Offset FEC Error Correction T 64 640 ci 168 652 a amp FEC Codeword Information Bytes k 16 34 3 78 Scrambler Seed Maximum Burst Size Guard Time Size Last Codeword Length Scrambler on off Label Modulation Type Differential Encoding Preamble Length Preamble Value Offset FEC Error Correction T FEC Codeword Information Bytes k Scrambler Seed Maximum Burst Size Guard Time Size Last Codeword Length Scrambler on off 338 338 8 48 Fixed On On Description QPSK 16QAM On Off 0 1024 bits 0 1022 bits 0 to 10 0 implies no FEC The number of codeword parity bytes is 2 T Fixed 16 to 253 assuming FEC on Shortened 16 to 253 assuming FEC on 15 bits Not used if scrambler is off 0 255 mini slots 4 255 symbols Fixed shortened On Off DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 23 4 1 6 Modem Operation Config Ubee Interactive 4 1 6 Modem Operation Config This secti
7. 12 DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 3 1 Install the Device This chapter explains how to install the DDW2600 wireless cable modem router or the DDM2700 commercial cable modem router Connect the Device and Access the Web Interface Use the instructions in this section to connect the device and access the web user interface to configure initial settings 3 1 1 Connect the Device Complete the following steps to connect the DDW2600 wireless cable modem router or the DDM2700 commercial cable modem router 1 Important Subscribers must contact their service provider to enable internet access Typically the service provider initially connects and configures the device These steps are also provided below If you wish to confirm the setup or add devices to your network refer to Confirm Installation and Connect Devices to the Network on page 16 Remove all contents from the device packaging Place the DDW2600 or DDM2700 in an optimal location for connection to other devices such as PCs or gaming consoles Keep the following in mind Q For the DDW2600 Wireless Cable Modem Only Keep the wireless cable modem and wireless clients in open areas or far away from transformers heavy duty motors microwave ovens refrigerators fluorescent lights and other manufacturing equipment These items can impact wireless signals A wireless signal may become weaker after it has passed t
8. 9 11 12 24 36 48 amp 54 Mbps LJ Frequency Range 11 channels 2 412 to 2 462GHz LJ Antenna External detachable Security Q Firewall Stateful Packet Inspection SPI Q MAC IP Port Filtering Q TACACS RADUIS Authentication LI DoS Denial of Services Detection Prevention LJ Parental Control Add Remove Users Time Access Rules Network LY NAT DMZ RIP DHCP Client Server Static IP Network Assignment Multiple Subnet Support Q Dynamic DNS Q VPN Pass Through and VPN End Point Support IPSec L2TP PPTP LJ Port Forwarding Port Filtering Port Triggering U RIP v1 v2 LJ Ethernet 10 100 BaseT Full Duplex Auto Negotiate Functionality IPv4 Support Device Management Q Power Saving Features Management Q DOCSIS and Web Interface Configuration Local and Remote L Telnet Remote Management Q Firmware Upgrade via TFTP Q SNMP v1 v2 v2c Agent Built In Physical and Environmental Q DDC2700 196 x 137 x 32 W x D x H mm Q DDC2600 Same dimensions as DDC2700 includes detachable antenna Q Power Consumption Maximum 8W Q Power Supply 12V 1 0A LJ Input Power 100 240VAC 50 60Hz LJ Operating Temp O C to 40 C 32 F to 104 F Q Humidity 5 95 non condensing DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 2 4 2 4 Default Values Device Logins Default Values Device Logins This device is pre configured with the following parameters Local Port Address 192 168 0
9. DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 4 7 6 Tools User Defaults 4 7 6 Tools User Defaults The User Defaults option allows you to restore some factory defaults to the system including Firewall and Parental Control settings 1 Access the web interface Refer to page 14 if needed 2 Click the Tools link from the top of the screen 3 Click User Default from the left side of the screen The User Default options are explained following this screen example MODEM GATEWAY WIRELESS VPN PARENTAL CONTROL FIREWALL TOOLS TOOLS Tools User Factory Defaults Ping Trace Route Allows you to restore factory defaults to the Firewall and Parental Client List Control Password Restore Defaults Oves No siete Allows you to reset the system Reset The System Q Yes 9 No Label Description Restore Defaults Select Yes to restore the device to default settings for the Firewall and Parental Control settings This operation does not require a reset of the system Reset The system Select Yes to power cycle and reset the device Apply Click Apply to complete the options selected in this screen DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 85
10. DOS attacks The IPSec receiver can detect and reject old or duplicate packets to protect against replay attacks DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 4 4 4 VPN Configure Advanced Settings NetBIOS Broadcast Select Enabled or Disabled for sending NetBIOS packets through Forwarding the VPN connection NetBIOS Network Basic Input Output System are TCP or UDP packets that enable a computer to find other computers It may sometimes be necessary to allow NetBIOS packets to pass through VPN tunnels in order to allow local computers to find computers on the remote network and vice versa Dead Peer Select Enabled or Disabled to force the cable modem if enabled is Detection selected to periodically detect if the remote IPSec gateway is available or not Apply Click to save all changes 4 4 4 VPN Configure Advanced Settings The following screen is displayed when the Show Advanced Settings button is clicked from the VPN Configure screen previous section Hide Advanced Settings Key management Auto IKE F IKE negotiation mode Main Perfect forward secrecy PFS Disabled Phase 2 DH group Group 1 768 bits 4 Replay detection Disabled NetBIOS broadcast forwarding Disabled Dead peer detection Disabled il Apply DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 67 4 4
11. May 2010 Ubee Interactive 4 2 7 Advanced Gateway Setup Options 4 2 7 Advanced Gateway Setup Options The Options selection allows you to define what networking protocols are enabled or disabled on the device 1 Access the web interface Refer to page 14 if needed 2 Click the Gateway link from the top of the screen 3 Click Options from the left side of the screen The Options fields are explained following this screen example MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS Basic Gateway Setup Advanced Gateway Options Information Setup WAN Blocking Fj Enable DHCP Ipsec PassThrough Enable Static Lease DONS Time Multicast Enable UPnP Enable Advanced Gateway Setup Options MAC Filtering IP Filtering Port Filtering Forwarding Port Triggering Pass Through Label WAN Blocking Ipsec PassThrough Enabled by default PPTP PassThrough Enabled by default Multicast Enable UPnP Enable Apply PPTP PassThrough v Enable FI Enable Enable Description Select Enable to block connection requests initialized from Internet users If Internet users initialize an IPSec VPN request to a host located behind the router NAT makes this attempt fail Select Enable to force the router to redirect the IPSec request to the local host If Internet users initialize a PPTP VPN request to a host located behind the router
12. VPN Refer to page 68 for more information PPTP Server Select Disabled or Enabled to enable a Point to Point Tunneling Protocol PPTP VPN Refer to page 68 for more information Configure Click Configure to activate the VPN Refer to page 68 for more information IPSec End Point Select to Enable or Disable the IPSec VPN service ID of the IPSec VPN tunnel Name Displays the name of IPSec VPN tunnels Status Once an IPSec VPN connects successfully the Status is Connected Otherwise it is Not Connected Control Displays when the user manually triggers an IPSec VPN connection request to the remote VPN gateway Configure Click Edit to modify IPSec VPN parameters of this tunnel Add New Tunnel Click Delete to delete this IPSec VPN tunnel Click to quickly create a new IPSec VPN tunnel and then to modify its parameters 62 DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 4 4 3 VPN Configure 4 4 3 VPN Configure The Configure option allows you to configure a complete VPN 1 Access the web interface Refer to page 14 if needed 2 Click the VPN link from the top of the screen 3 Click Configure from the left side of the screen The Configure fields are explained following this screen example 4 For an overview of how VPNs are structured and the security protocols used refer to page 69 VPN eEnable e Summary e Configure eL2TP P
13. 1 Web Interface http 192 168 0 1 Operation Mode NAT Mode WAN setting Subnet Mask 255 255 255 0 Web Device Interface Logins Subscriber LJ Username user LJ Password user 2 4 1 Wireless Defaults for DDW2600 only When initially connecting a wireless client to the wireless device for example a PC the following default values are used Q SSID System Set Identifier The SSID is what the wireless device uses to advertise itself The SSID is equal to the last 4 characters of the Cable RF MAC address Example If MAC Address is 00028A1A345 SSID is A345 Note Refer to page 8 to find the MAC address of the device LJ Encryption Key The device uses 128 bit WEP encryption by default The WEP key is a 26 digit HEX value This value is equal to the device MAC address plus 14 zero s all lower case without the colons Example 00028A1A345600000000000000 MAC address 14 Zero s LJ Broadcast Channel The default broadcast channel is 1 DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 7 2 4 2 How to Find the MAC Address of the Device Ubee Interactive 2 5 2 4 2 How to Find the MAC Address of the Device Use one of the following options to find the MAC address of the device LJ Option 1 Look on the bottom of the device for the Cable RF MAC Address LI Option 2 Access the device web interface and find the MAC address in the opening screen the Cable Modem Information s
14. 1 Modem Cable Modem Information 19 4 1 2 Modem StAtUs es cde ce C o t os cd aad ES aa 20 4 1 3 Modem Downstream 21 4 1 4 Modem Upstream 22 4 1 5 Modem UpstreamBurst 23 4 1 6 Modem Operation Config 24 ANT JEVENULOO inate s ce eon on Ban ces bo ta beeen ah Bake ea Sen eek ae 24 4 2 Gateway Menus creset rp ds Ber nec e obo oe eee S de pesa ases deis 26 4 2 1 Gateway Information 26 422 Gateway Sep ci PAA WAA NANA MAMAA ANI MA TEES ELS 28 42 9 GaleWway DHGCP a uc Het PERE eR REY tee Pe eed eee Teas 30 DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 4 3 4 4 4 5 4 6 4 7 4 2 4 Gateway DHCP StaticLease 32 425 Gateway s DDNS 24222342648 sieve ee e e e 33 420 Ssaleway TIME d ss suse HO sat be wheres es be ew ke oe dee eee 34 4 2 7 Advanced Gateway Setup Options 37 4 2 8 Advanced Gateway Setup Mac Filtering 38 4 2 9 Advanced Gateway Setup IP Filtering 38 4 2 10 Advanced Gateway Setup Port Filtering 39 4 2 11 Advanced Gateway Setup Forwarding
15. 255 255 0 Enabled Enabled Enabled NAT mode 192 168 0 10 through 192 168 0 15 Public IP DHCP Server Range Public IP Total Range System Up Time 0 0 0 0 through 0 0 0 0 0 0 0 0 through 0 0 0 0 13 Minutes 51 Seconds Label Description Gateway MAC Address Internet IP Address Subnet Mask Default Gateway DNS DHCP Remaining Time Internet Settings Displays the Media Access Control MAC address of the cable modem Displays the Internet IP address obtained from the service provider Displays the subnet mask of the Internet IP address Displays the default gateway IP address Displays the DNS server IP address Displays the remaining DHCP lease time before expiration DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive Label Refresh Gateway IP Address Subnet Mask DHCP Server NAT Wireless Status Operating Mode Private IP Range Public IP DHCP Server Range Public IP Total Range System Up Time 4 2 1 Gateway Information Description Click to refresh the information Local Settings Displays the local IP address of the LAN interface Displays the subnet mask value Displays the status of the DHCP sever feature Enabled Disabled Displays the status of the NAT feature Enabled Disabled Displays the status of the wireless feature Enabled Disabled Displays what mode the router is workin
16. 5 VPN L2TP PPTP Ubee Interactive 44 5 VPN L2TP PPTP The L2TP PPTP option allows you to configure the L2TP PPTP parameters if this VPN mode is enabled Layer 2 Tunneling Protocol L2TP is a tunneling protocol used to support virtual private networks VPNs PPTP Point to Point Tunneling Protocol is a Microsoft proprietary protocol to tunnel PPP frames which is very similar to L2TP 1 Access the web interface Refer to page 14 if needed 2 Click the VPN link from the top of the screen 3 Click L2TP PPTP from the left side of the screen The L2TP PPTP fields are explained following this screen example MODEM GATEWAY WIRELESS VPN ROUTING FIREWALL PARENTAL CONTROL TOOLS a s r VPN L2TP PPTP Enable PPP Address Range eSummary Start Configure eL2TP PPTP Event Log End PPP Security MPPE Encryption Enabled 139 Apply Users Username Password Confirm Password Add User List User list Is empty L2TP Server Preshared Phrase Apply 68 Label PPP Address Range Start End MPPE Encryption Apply Username Password Description Select the specific IP range to be used for the VPN tunnels Select Disabled or Enabled to enable MPPE Encryption MPPE uses the RSA RC4 encryption algorithm Click to save the above configuration Enter a Username and a Password required by that user to Confirm access the VPN Reenter the password
17. AH and ESP protocols The primary function of key management is to establish and maintain the SA between systems Once the SA is established the transport of data may commence LY AH Authentication Header Protocol AH protocol RFC 2402 was designed for integrity authentication sequence integrity replay resistance and non repudiation but not for confidentiality for which the ESP was designed In applications where confidentiality is not required or not sanctioned by government encryption restrictions an AH can be employed to ensure integrity This type of implementation does not protect the information from dissemination but will allow for verification of the integrity of the information and authentication of the originator Q ESP Encapsulating Security Payload Protocol The ESP protocol RFC 2406 provides encryption as well as the services offered by AH ESP authenticating properties are limited compared to the AH due to the non inclusion of the IP header information during the authentication process However ESP is sufficient if only the upper layer protocols need to be authenticated An added feature of the ESP is payload padding which further protects communications by concealing the size of the packet being transmitted DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 69 4 4 7 VPN Event Log 70 Ubee Interactive 4 4 7 VPN Event Log The Event Log option allows you to
18. CPE that can connect to the network via the cable modem This number determines the end of the public IP address range started above DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive Label Lease Time DHCP Clients Apply Force Available 4 2 3 Gateway DHCP Description Enter the time in minutes between 1 and 71582788 This field defines the DHCP lease time duration A DHCP user s PC gets an IP address with a lease time When the lease time expires the PC must connect to the DHCP server and be reissued another unused IP address This list to shows all DHCP clients currently connected to the cable modem either via Ethernet link or via wireless connection DDW2600 only Each client is also listed with the following information MAC Address IP Address Subnet Mask Duration Expires Duration displays the accumulated time since the client acquired the IP address Expires is the time until the IP expires and must be recycled If the IP address is reserved to a certain host it will show STATIC IP ADDRESS Select Click the Select radio button to reserve the current private IP address to be assigned to this host statically Click Apply to save all changes Click Force Available to activate a selected rule in the DHCP Clients List and assign the displayed private IP address statically to the connected network client Note The Select che
19. Click Apply to save all screen changes 40 DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 4 2 11 Advanced Gateway Setup Forwarding 4 2 11 Advanced Gateway Setup Forwarding The Forwarding option allows you to configure incoming requests on specific port numbers to reach your internal servers such as web servers FTP servers mail servers gaming consoles and others so they can be accessible from the public internet Note If your host system s do not have communications issues with the internet Forwarding is not typically needed 4 2 11 1 Overview Recommendations Examples When setting up forwarding you are recommended to assign a static IP lease to the client host for which you are setting up forwarding This way the IP does not change and disrupt your forwarding rules For example if you are hosting a telnet server in your internal network and you wish to setup a forwarding rule for it you should assign a Static IP lease to that system to keep the IP from renewing and disrupting the forwarding rule The following tasks are recommended to support the setup of forwarding rules LI Tools Client List on page 82 Use this option to obtain the MAC and IP address of the internal host for which you are setting up a forwarding rule You will need these for the following step LI Gateway DHCP Static Lease on page 32 Use this option to setup the Static leas
20. Ethernet port on the cable modem as explained in the previous section 2 n the internet browser enter the following address and press lt Enter Return gt http 192 168 0 1 3 The Cable Modem Information window is displayed Click the Login link on the left side of the window D Login Factory default username password Is user Cable Modem Information Cable Modem DOCSIS 1 0 1 1 2 0 Compliant MAC Address 00 22 69 02 94 14 Serial Number 87H1612000052 Boot Code Version 5 1 ib Software Version 5 100 1002 Hardware Version 4 25 CA Key Installed 14 DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 3 1 2 Access the Web Interface 4 Enter the login credentials as shown below The server 192 158 0 1 at Broadcom requires a username and password Warning This server is requesting that your username and password be sent in an insecure manner basic authentication without a secure connection CL Remember my password Subscriber Login GL Username user L Password user 5 Accessing the web interface is an initial way to validate the installation No extra steps are required at this point for a basic LAN and or wireless network DDW2600 only 6 Proceed to page 16 to test network connectivity and or to add both Ethernet LAN devices and wireless devices DDW260
21. Status screen of the web interface This is a read only screen and it displays the device s general connection information 1 Access the web interface Refer to page 14 if needed 2 Click the Modem link from the top menu and then the Status link from the left side of the screen Field explanations are listed below the following screen example MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS CABLE MODEM Cable Modem Status eInformation Item e Status Status Comments eDownstream Acquire a Downstream Channel 621000000 Hz Locked eUpstream Connectivity State OK Operational eUpstream Burst Boot State Operation Config 1 eEvent Log Label Acquire Downstream Channel Connectivity State Boot State Security OK Operational Enabled BPI Description Displays a Downstream channel that the cable modem is trying to lock to and the progress After initialization the cable modem is configured by a DHCP server to obtain an IP address Once successful the cable modem is Online The Status column shows the progress and status Online Offline The Comments column displays the reason why cable modem s connectivity state is not Online Shows the registration status of the device If BPI is enabled the status will displays Enabled 20 DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 4 1 3 Modem Dow
22. TET TETTE T TT TTL TIT eae ae dee ee 4 2 3 Physical Specifications Standards Firmware Operations 5 2 4 Default Values Device LOGINS 7 2 4 1 Wireless Defaults for DDW2600 0nly 7 2 4 2 How to Find the MAC Address of the Device 8 2 0 Device Package Components 8 2 6 Device Back Panel Description 9 2 6 1 DDW2600 and DDC2700 Back Panel Images sls 9 2 7 Device Front Panel amp LED Behavior 10 2 7 1 DDW2600 and DDC2700 Front Panel Images 10 24 2 LED Behavior Tapes cis uos Sande wees AE a OW eee dw at bcd 11 3 Mistall the DEVICE 23 3 eae a O0 RA EUIS a A Mob eae 13 3 1 Connect the Device and Access the Web Interface 13 32 1 ls Connect ING DEVICE 23 4 uod apuro diea Arde E Ee dup deh eae o det 13 3 1 2 Access the Web Interface 14 3 2 Confirm Installation and Connect Devices to the Network 16 3 2 1 DDW2600 Wireless Cable Modem Router Only 16 3 2 2 Additional Troubleshooting Information 17 4 WebUserinterfaceInstructionsS 19 4 1 Modem MU ss dis ares n ada PR ro Rd ee de Rx oe Pa EG equ 19 4 1
23. User Guide May 2010 Label Shared Key Authentication 802 1x Authentication Network Key 1 4 Current Network Key Passphrase Generate WEP Keys Apply WiFi Protected Setup WPS Config Button Mode Device Name STA PIN Apply 4 3 2 Wireless Security Description Shared Key is an authentication method used by wireless LANs which follow the IEEE 802 11 standard Wireless devices authenticate each other by using a secret key that is kept by both devices Select Optional or Required Enable to have the wireless router authenticate wireless clients You can pre define up to 4 keys for 64 bit or 128 bit 64 bit keys require 10 hexadecimal digits 128 bit key require 26 hexadecimal digits You can select one of the four pre defined keys as the current network key You can set WEP encryption key by entering a word or group of printable characters in the Passphrase box and click Generate WEP keys These characters are case sensitive Force the wireless router to generate 4 WEP keys automatically Click to save all values changes in this screen Use this feature to setup WPS Wifi Protected Setup for devices connecting to the wireless network Wifi protected setup is an efficient way to setup authenticated and encrypted communications between wireless clients and the wireless network Instead of configuring all the security settings as described above WPS enabled clients can connect to the network b
24. VPN Enable 1 Access the web interface Refer to page 14 if needed 2 Click the VPN link from the top of the screen 3 Click Enable from the left side of the screen 4 Select the button to either Enable or Disable VPN The device must be rebooted for the change to take effect MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS VPN VPN Enable Setup Enable This page allows user to Enable or Disable VPN and Cable Modem will reset after Summary pressing Apply button Configure L2TP PPTP VPN Enable Event Log VPN Disable DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 61 4 4 2 VPN Summary Ubee Interactive 4 4 2 VPN Summary The Summary option allows you to configure VPN tunnels with a centralized view 1 Access the web interface Refer to page 14 if needed 2 Click the VPN link from the top of the screen 3 Click Summary from the left side of the screen The Summary fields are explained following this screen example MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS VPN VPN Summary Enable Summary L2TP PPTP Configure LZTP Server L2TP f PPTP PPTF Server Disabled IPsec IPsec Endpoint Disabled _ Name Control Configure Add Mew Tunnel Label Description L2TP Server Select Disabled or Enabled to enable a Layer 2 Tunneling Protocol L2TP
25. a 160 bit digest to authenticate packet data Define the length of time before an IKE SA automatically renegotiates a key It may range from 120 to 86400 seconds A short SA lifetime increases security by forcing the two VPN gateways to update the encryption and authentication keys However every time the VPN tunnel renegotiates the keys all users accessing remote resources are temporarily disconnected DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 65 4 4 3 VPN Configure Phase 2 Encryption Phase 2 Authentication Phase 2 SA Lifetime Show Advanced Settings Apply Key Management IKE Negotiation Mode Perfect Forward Secrecy PFS Phase 2 DH Group Replay Detection Ubee Interactive Select which key size and encryption algorithm to use for data communications Choices are Null No data encryption in IPSec SA Not suggested DES a 56 bit key with the DES encryption algorithm 3DES a 168 bit key with the DES encryption algorithm the cable modem and the remote IPSec router must use the same algorithms and key which can be used to encrypt and decrypt the message or to generate and verify a message authentication code Longer keys require more processing power resulting in increased latency and decreased throughput AES Advanced Encryption Standard is a newer method of data encryption that also uses a secret key This implementation of
26. device LEDs to confirm operations The WLAN LED must be solidly lit The PWR SYNC and Ready LEDs must also be solidly lit in normal operations Refer to LED Behavior Table on page 11 for more detailed information Connect a wireless device to the DDW2600 for example a laptop computer Use the following steps LI Access the wireless networking feature on your wireless device On a Windows computer for example double click the Wireless Networking icon in the system tray lower right side of the Windows desktop LI Click View Wireless Networks The DDW2600 is shipped with a default SSID The SSID is the name of the wireless network broadcast from the DDW2600 so that wireless clients can connect to it LJ Double click your SSID in the wireless networks window The SSID is equal to the last 4 characters of the Cable RF MAC address which is printed on the bottom of the DDW2600 Example If MAC Address is 00028A12345 SSID is 2345 Q Enter the Network Key This value is equal to the device MAC address plus 14 zero s all lower case without the colons Example 00028A12345600000000000000 MAC address 14 Zero s DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 3 2 2 Additional Troubleshooting Information 3 Confirm connectivity by opening a web browser and going to any web site for example http www wikipedia org 4 The SSIDs and Network Keys used to access
27. displayed log entries DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 75 4 6 Firewall Menu 4 6 76 Ubee Interactive Firewall Menu This chapter provides instructions for configuring the DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router firewall to control what types of traffic are allowed on your network The firewall can block certain Web oriented cookies java scripts and pop up windows It is highly recommended that the Firewall is left enabled at all times for protection against Denial of Service attacks Refer to Parental Control Menu on page 71 to block internet access to specific sites Note Firewall menu options are not available when the device is in Bridge mode Firewall options are available only when the device is in NAT NATRoute or Route modes 1 Access the web interface Refer to page 14 if needed 2 Click the Firewall link from the top of the screen 4 6 1 Firewall Content Filter The Content Filter option allows you to configure the blocking of certain Web oriented cookies java scripts and pop up windows It also has options that protect against network attacks questionable data and undesired connections 1 Access the web interface Refer to page 14 if needed 2 Click the Firewall link from the top of the screen 3 Click Content Filter from the left side of the screen The Content Filter fields are explained following this screen ex
28. displayed ping results Results Refresh The Results area of the screen displays the ping results Click Refresh to update the screen with on going ping tests 4 7 2 Tools Trace Route The Trace Route option is a utility to test the route that data is taking to and from the DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router 1 Access the web interface Refer to page 14 if needed 2 Click the Tools link from the top of the screen 3 Click Trace Route from the left side of the screen The Trace Route fields are explained following this screen example MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS TOOLS Tools Trace Route Ping e Trace Route Tracert Test Parameters e Client List Tracert Target ePort Configuration MAX Hops 30 Hops 1 50 eUI Authentication Time out 500 ms 100 10000 eScanning Plan ePassword Start Test Abort Test Clear Results eFactory Default Results eOperation Mode Refresh To get an update of the results you must select the REFRESH button above Label Description Tracert Target Enter the specific IP address or domain e g yahoo com to which you want to trace a route MAX Hops Define the MAX hops Hops is the number routers that the trace route traverses DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 81 4 7 3 Tools Client List 82 Tim
29. in the Confirm Password field User List All added users are displayed L2TP Preshared Enter a Preshared Phrase Phrase Apply Click to save the configuration DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 4 4 6 Additional information VPN Overview 4 4 6 Additional information VPN Overview Internet protocol Security IPSec is a standard based VPN that offers flexible solutions for secure data communications across a public network like the Internet IPSec is built around a number of standardized cryptographic techniques to provide confidentiality data integrity and authentication at the IP layer A VPN tunnel is usually established in two phases Each phase establishes a security association SA a contract indicating what security parameters the cable modem and the remote IPSec router will use LI The first phase establishes an Internet Key Exchange IKE SA between the cable modem and the remote IPSec router Q The second phase uses the IKE SA to securely establish an IPSec SA through which the cable modem and the remote IPSec router can send data between computers on the local and remote network Before IPSec VPN configuration you may need to understand the following terms LI IPSec Algorithms The ESP and AH protocols are necessary to create a Security Association SA the foundation of an IPSec VPN An SA is built from the authentication provided by the
30. manually enter the IP address for the WAN interface PPTP DHCP For Point to Point Tunneling Protocol PPTP you must enter a username password and the PPTP server s hostname or IP address PPTP Static For Point to Point Tunneling Protocol Static PPTP you must enter the static IP address IP mask default gateway username password and the PPTP server s hostname or IP address Enter the host name for the router This may be required by some service providers Enter the domain for the router This may be required by some service providers Enter the Maximum Transmission Unit size which defines the largest size of the packet or frame that the device can transfer 256 1500 If this is not given by the Service Provider leave it as is using O for the default Click to save all changes made in the screen DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 29 4 2 3 Gateway DHCP 4 2 3 Ubee Interactive Gateway DHCP The DHCP option allows you to configure DHCP server specific behavior on the device 1 2 30 Access the web interface Refer to page 14 if needed Click the Gateway link from the top of the screen Click DHCP from the left side of the screen The DHCP fields are explained following this screen example Basic Gateway Setup eInformation Setup DHCP Static Lease DONS Time Adwanced Gateway Setup Options M
31. on a connected computer s hard drive Some web servers use them to track usage and provide service based on an ID found in the Cookies Enable this filter to stop Java applets from being launched on connected computers Java is a programming language and development environment for building downloadable Web components or Internet and intranet business applications Enable this filter to stop ActiveX applications from being launched on connected computers ActiveX is a tool for building dynamic and active web pages and distributed object applications When you visit an ActiveX web site ActiveX controls are downloaded to your browser where they remain in case you visit the site again Enable this filter to stop popup windows when visiting some websites Click the Enable button to enable a firewall setting Deselecting a checkbox disables the feature Enable this feature to have the firewall detect fragmented IP packets and block them Enable this feature to have the firewall detect port scan attacks Enable this feature to have the firewall to detect IP flood attacks Enable this feature to activate the firewall function Enable this feature to have the firewall to protect all of the routed subnets connected to the cable modem Click to save the configuration DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 77 4 6 2 Firewall Event Log 78 Ubee Interactive 4 6 2 Fir
32. view the VPN Event Log 1 2 Access the web interface Refer to page 14 if needed Click the VPN link from the top of the screen Click Event Log from the left side of the screen The Event Log fields are explained following this screen example MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS VPN VPN Event Log Enable Summary Time Description j i 3 Event log is empty Configure L2TP PPTP sEvent Log Label Description Time Displays the local time of a certain log event Description Displays detailed information of a log Refresh Click to refresh the current page to view new log events Clear Click to clear all of the logs DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 4 5 4 5 Parental Control Menu Parental Control Menu This chapter provides instructions for controlling the internet access of users on the DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router network These parental control features include defining user password access defining the what times users are allowed to access the internet blocking certain web sites and blocking certain sites by keywords 1 Access the web interface Refer to page 14 if needed 2 Click the Parental Control link from the top of the screen 4 5 1 Parental Control User Setup The User Setup option allows the configuration of user accounts
33. 0 only to the network Note The web interface allows you to customize the configurations and capabilities the device For full explanation of all web interface functions refer to page 19 DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 15 3 2 Confirm Installation and Connect Devices to the Network Ubee Interactive 3 2 16 Confirm Installation and Connect Devices to the Network To confirm network internet operations or to connect an Ethernet device to the network for example a computer do the following 1 Make sure the Ethernet device is connected to the cable modem Refer to page 13 Use the device LEDs to confirm operations The PWR SYNC and Ready LEDs are solidly lit in normal operations as are the Ethernet LEDs that have devices connected to their associated ports Refer to LED Behavior Table on page 11 for more detailed information Open a web browser and go to any web site to validate network connectivity for example http www wikipedia org If the connected device is a gaming console perform any online task supported by the console for example log into gaming server play online game download content etc Refer to page 17 for troubleshooting information if needed 3 2 1 DDW2600 Wireless Cable Modem Router Only To confirm operations or to connect wireless devices to the network for example a laptop computer do the following 1 Use the
34. 8 0 0 d 192 168 0 0 192 168 0 0 192 168 0 0 192 168 0 0 d 192 168 0 0 192 168 0 0 192 168 0 0 192 168 0 0 192 168 0 0 192 168 0 0 192 168 0 0 192 168 0 0 d Label Description Start Address Enter the start IP address End Address Enter the end IP address Enabled Select Enabled to activate the rule Apply Click Apply to save all screen changes 4 2 10 Advanced Gateway Setup Port Filtering The Port Filtering option allows you to configure port filters in order to block specific internet services on specific ports to all devices on the LAN 1 Access the web interface Refer to page 14 if needed 2 Click the Gateway link from the top of the screen 3 Click Port Filtering from the left side of the screen The Port Filtering fields are DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 39 4 2 10 Advanced Gateway Setup Port Filtering Ubee Interactive explained following this screen example Advanced Gateway Port Filtering Port Filtering Start Port End Part Protocol Enabled 65535 O 65535 Both E 65535 1 65535 1 65535 a 65535 d 65535 1 65535 O 65535 1 65535 O Bo p Label Description Start Port Enter the start port End Port Enter the end port Protocol Select the protocol type or select Both for UDP and TCP Enabled Select Enabled to activate the rule and filter out all traffic on the specified ports Apply
35. AC Filtering eIP Filtering Port Filtering sForwarding Port Triggering Pass Through DMZ Host IP Mapping Label DHCP Server MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS Gateway DHCP DHCP Server ves O He Starting Address Set Private Starting Address 192 168 0 10 1 253 Number of CPEs ls Public Starting Address 0 0 0 0 1 2854 Number of CPEs lo Lease Time 3600 Apply DHCP Clients MAC Address IP Address Subnet Mask Duration Expires Select 0025b3b9c4d6 192 168 000 010 255 255 255 000 sia ICED ipi PS Current System Time Force Available Description Select Yes to enable or No to disable the DHCP server on the device If No is selected all of the static DHCP rules in this screen are ignored Private Starting Address Define the starting private IP address for the pool of IP addresses that may be used by connecting clients Private addresses are translated to public IPs in order to be used on the network Number of CPEs Define the maximum number of Customer Premises equipment CPE that can connect to the network via the cable modem using private IP addresses This number determines the end of the private IP address range started above Public Starting Address Define the starting public IP address Public addresses can be recognized on the network Number of CPEs Define the maximum number of Customer Premises equipment
36. AES applies a 128 bit key to 128 bit blocks of data AES is faster than 3DES Here you can have the choice AES 128 AES 192 AES 256 Select which hash algorithm to use to authenticate packet data in the IKE SA Choices are Null SHA1 and MD5 SHA is generally considered stronger than MD5 but it is also slower Define the length of time before an IPSec SA automatically renegotiates keys It may range from 120 to 86400 seconds Click this button to specify advanced parameters for the VPN The defaults are typically acceptable Refer to page 67 for a screen example Click to save all changes Select Auto IKE or select Manual key configuration in order to set up a VPN Determines how the Security Association SA will be established for each connection through IKE negotiations The choices are Main Mode which ensures the highest level of security when the communicating parties are negotiating authentication phase 1 Aggressive Mode which is quicker than Main Mode because it eliminates several steps when the communicating parties are negotiating authentication phase 1 Perfect Forward Secret PFS is Disabled by default in phase 2 IPSec SA setup This allows faster IPSec setup but is not so secure Select DH1 DH2 or DH5 to enable PFS After enabling PFS you must select a DH Group Select Enabled or Disabled for replay detection As VPN setup is processing intensive the system can be vulnerable to Denial of Service
37. Control Tod Filter The Tod Filter option allows the configuration of time based access policies to block all internet traffic at specified times 1 2 74 Access the web interface Refer to page 14 if needed Click the Parental Control link from the top of the screen Click Tod Filter from the left side of the screen The Tod Filter fields are explained following this screen example Parental Control User Setup Basic Tod Filter Event Log Label Add New Policy MODEM GATEWAY WIRELESS VEN ROUTING PARENTAL CONTROL FIREWALL TOOLS Parental Control Time Access Policy Time Access Policy Configuration Create a new policy by giving it a descriptive name such as Weekend or Working Hours Add Ren Policy Time Access Policy List Ma filters entered Fi Enabled Days to Block C everyday sunday O monday C Tuesday C wednesday Thursday I Friday Saturday Time to Block Jal day Start Hx aw oo himin am ij End i2 heur 00 min Description Enter a policy name and click the Add New Policy button Time Access Policy List Select a policy to edit from the drop down list DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive Enable Remove Days to Block Time to Block All Day Apply 4 5 4 Parental Control Event Log Select the Enabled checkbox to activate this policy If the checkbox
38. DC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 4 3 3 Wireless Access Control 4 3 3 Wireless Access Control The Access Control option allows you to configure what clients can access your wireless network 1 Access the web interface Refer to page 14 if needed 2 Click the Wireless link from the top of the screen 3 Click Access Control from the left side of the screen The Access Control fields are explained following this screen example MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS Wireless Wireless Access Control e Basic Security MAC Restrict Mode Disabled M eAccess Control MAC Addresses Advanced eBridging e Wifi Multimedia eGuest Network Connected Client MEE NER IRSE IEEE IEEE No wireless clients are connected Label Description MAC Restrict Mode Use this feature to control wireless access to your network by MAC address Select Disable to turn off MAC Restrictions and allow any wireless client to connect to this wireless router Note however if you use other security mechanisms for access to the wireless network clients must still adhere to those restrictions Select Allow to create a list of wireless clients that can connect to the wireless network Enter the MAC Addresses of these clients in the MAC Addresses fields All MAC addresses not on the list will not be allowed
39. DDW2600 Wireless Router U10CC037 and DDC2700 Commercial Router U10C038 Subscriber User Guide DDW2600 Wireless Cable Modem Router DDC2700 Commercial Cable Modem Router Notices and Copyrights Copyright 2010 Ubee All Rights Reserved This document contains proprietary information of Ubee and is not to be disclosed or used except in accordance with applicable agreements This material 1s protected by the copyright laws of the United States and other countries It may not be reproduced distributed or altered in any fashion by any entity either internal or external to Ubee except in accordance with applicable agreements contracts or licensing without the express written consent of Ubee and the business management owner of the material Contents 1 SafetyandRegulatoryInformation 1 1 1 Stes Satta oh ee ce he ee ee ee oe te dc Mur a ee ee ee 1 1 2 Eco Environmental Statements 2 1 2 1 Packaging Collection and Recovery Requirements 2 1 3 Regulatory Statements 2 1 3 1 Industry North America Statement 2 1 3 2 Radiation Exposure Statement 2 2 Introductio uds chao ac aedes ON qd d karte date eae bow d diode vi eal 3 2 1 Applicaton Diagrams oer adire erac aao CR Renee ue 3b OD eR e ar RU RR Rs 4 2 2 SUDO O EE ERE
40. DW2600 only LED Sync Ready WLAN Eth 3 Label CM driver init On Flash then Flash then Flash then Off Flash then Off Flash then Off Flash then Off Flash then Off Initialization Off Off Off DS On Slow Flash Off On scanning m US Ranging On Slow Flash m US Ranged Slow Flash ue IP Init and Fast Flash Registration Depends on Depends on Depends on Depends on m m Ethernet Ethernet Ethernet Ethernet CM l l On Status On if Status On if Status On if Status On if l u um Connected Connected Connected Connected 2 2 Depends on Ethernet Status On if Connected 2 2 2 2 Normal Operation Operations Cable Interface Traffic Network Access Enabled USB WLAN Ethernet Connected USB WLAN Ethernet Traffic On if On if On if On if On if Connected Connected at Connected at Connected at Connected at 100Mbps 100Mbps 100Mbps 100Mbps Orange if Orange if Orange if Orange if Connected at Connected at Connected at Connected at 10Mbps 10Mbps 10Mbps 10Mbps Slow Flash if Slow Flash Slow Flash Slow Flash Slow Flash Traffic On if Connected 2 Slow Flash 2 On Off On n On if Slow Flash O On Slow On if On if On if On if Connected Flash if Connected Connected Connected Connected Traffic DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 11 2 7 2 LED Behavior Table Ubee Interactive
41. Gateway Setup Pass Through 4 2 15 Advanced Gateway Setup Pass Through The Pass Through option allows you to configure a pass through table Devices in the pass through table are treated as bridge devices storing and forwarding data between LAN interconnections 1 Access the web interface Refer to page 14 if needed 2 Click the Gateway link from the top of the screen 3 Click Pass Through from the left side of the screen The Pass Through fields are explained following this screen example Advanced Gateway Pass Through Index Label Index MAC Address Clear Apply MAC Address Description Index number of the pass through rule Input the host s MAC address Select the box to delete this rule Click to save DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 47 4 2 16 Advanced Gateway Setup DMZ Host Ubee Interactive 48 4 2 16 Advanced Gateway Setup DMZ Host The DMZ Host option allows you to configure a host IP address to be exposed or visible to the WAN public internet This may be used when applications do not work with port triggers or for other networking strategies 1 2 3 Access the web interface Refer to page 14 if needed Click the Gateway link from the top of the screen Click DMZ Host from the left side of the screen The DMZ Host fields are explained following this screen example Advanced Gateway DMZ Host Exposed Host
42. NAT will make this attempt fail Select Enable to force the router to redirect the PPTP request to the local host Multicast optimizes the bandwidth utilization compared with unicast especially video streaming applications Select Enable to enable multicast Select Enable to activate Universal Plug and Play UPnP A UPnP device can dynamically join a network obtain an IP address convey its capabilities and learn about other devices on the network In turn a device can leave a network smoothly and automatically when it is no longer in use Click Apply to save all screen changes DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 37 4 2 8 Advanced Gateway Setup Mac Filtering Ubee Interactive 38 4 2 8 Advanced Gateway Setup Mac Filtering The MAC Filtering option allows you to filter MAC addresses in order to block internet traffic from specific network devices on the LAN This filtering establishes a black list Any host listed on this list will not be able to access the network internet through the cable modem 1 Access the web interface Refer to page 14 if needed 2 Click the Gateway link from the top of the screen 3 Click MAC Filtering from the left side of the screen The MAC Filtering fields are explained following this screen example Advanced Gateway MAC Filtering Index MAC Address Q 8 001 00 00 00 O00 00 00 00 00 00 001 1001 00
43. PTP eEvent Log Label Tunnel Name Delete Tunnel MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS VPN Configure Tunnel Tunnel list is EMPTY V Delete Tunnel Name null Add New Tunnel Local endpoint settings Address group type IP subnet Disabled Subnet vi 0 0 0 Mask 0 0 0 Identity type IP address Identity null Remote endpoint settings Address group type IP subnet bd Subnet 0 0 0 Mask 0 0 0 Identity type IP address Identity Network address type Remote Address IPsec settings Pre shared key Phase 1 DH group Phase 1 encryption Phase 1 authentication Phase 1 SA lifetime Phase 2 encryption Phase 2 authentication Phase 2 SA lifetime null IP address 0 0 0 0 null Group 1 768 bits v seconds Show Advanced Settings Description Select the specific VPN tunnel to configure edit unless there are no tunnels in the system Enter edit the name for the tunnel Click this button to delete the selected VPN tunnel DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 63 4 4 3 VPN Configure Add New Tunnel Apply Address Group Type S
44. Port Triggering fields are explained following this screen example Advanced Gateway Port Triggering Port Triggering Trigger Range Target Range Protocol Enable Label Trigger Range Start Port End Port Target Range Start Port DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Description The trigger port is a port or a range of ports that triggers the router to record the IP address of the LAN computer that sent the traffic to a server on the WAN Enter a port number or the starting port number in a range of port numbers Enter a port number or the ending port number in a range of port numbers Target Range is a port or a range of ports that a server on the WAN uses when it responds to service requests The router forwards the traffic with this port or range of ports to the client computer on the LAN that requested the service Enter a port number or the starting port number in a range of port numbers Ubee Interactive 4 2 13 Advanced Gateway Setup Port Triggering End Port Enter a port number or the ending port number in a range of port numbers Protocol Define the protocol type for this rule UDP TCP or Both Enable Click to activate this rule Apply Click to save DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 45 4 2 14 Additional Information Port Triggering Ubee Interactive 4 2 14 Ad
45. Upstream Symbol Rate 2560 Ksym sec Upstream transmit Power Level 32 2 dBmv Upstream Mini Slot Size 4 Label Upstream Lock Upstream Channel ID Upstream Frequency Upstream Modulation Upstream Symbol Rate Upstream Transmit Power Level Upstream Mini Slot Size Refresh Description Current cable modem upstream lock status Locked Not Locked Displays the current cable modem upstream channel ID Displays the current cable modem upstream frequency Hz Displays the current cable modem upstream modulation type QPSK QAM8 QAM16 QAM32 QAM64 QAM128 QAM256 Displays the symbol rate Ksym sec Displays the current cable modem upstream transmit power dBmV Displays the current cable modem upstream mini slot size in Timebase Ticks of 6 25 Click this button to refresh the active screen data 22 DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 4 1 5 Modem Upstream Burst 4 1 5 Modem Upstream Burst This section explains how to use the Upstream Burst screen of the web interface The Upstream Burst screen displays detailed information on the device s upstream data flow to the service provider 1 2 Access the web interface Refer to page 14 if needed Click the Modem link from the top menu and then the Upstream Burst link from the left side of the screen Field explanations are listed below the following screen
46. access to your wireless network Select Deny to create a list of wireless clients that you do not want to have access to your wireless network Enter the MAC Addresses of these clients in the MAC Addresses fields MAC Addresses Input the MAC addresses You may consider cutting and pasting MAC addresses from the connected clients list at the bottom of the screen Apply Click to save DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 55 4 3 3 Wireless Access Control Ubee Interactive 56 Connected Clients List of current connected Wireless client listed by MAC address Fields definitions are Age s The duration since the wireless client connected to wireless router RSSI dBm Received signal strength in the wireless environment IP Addr The IP address assigned to this wireless client Host Name The host name of the wireless client DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 4 3 4 Wireless Guest Network 4 3 4 Wireless Guest Network The wireless cable modem supports Multiple Service Set IDentifiers which allows you to use one access point to advertise multiple networks These separate networks can have varying levels of security and be used to segregate traffic A maximum of four SSIDs are allowed on one AP simultaneously 1 for Admin access 3 for Guest Networks Note You must use different WEP keys for diff
47. ample MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS Firewall Firewall Content Filter Content Filter Content Filter Settings eEvent Log Remote Log mee ley LJ Enable Filter Cookies F Enable Filter Java Applets Enable Filter ActiveX C enable Filter Popup Windows Enable Firewall Settings Block Fragmented IP Packets Fi Enable Fort Scan Detection Enable IF Flood Detection Lad Enable Firewall Protection C Enable Protection against incoming connection requests on routed subnet Enable DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Label Content Filter Settings Filter Proxy Filter Cookies Filter Java Applets Filter ActiveX Filter Popup Windows Firewall Settings Block Fragmented IP Packets Port Scan Detection IP Flood Detection Firewall Protection Protection against incoming connection requests on routed subnet Apply 4 6 1 Firewall Content Filter Description Click the Enable button to enable a filter Deselecting a checkbox disables the feature An enabled filter proxy server acts as an intermediary between a user and the Internet to provide security administrative control and caching service When a proxy server is located on the WAN it is possible for LAN users to circumvent content filtering by pointing to this proxy server Enable this filter to stop Cookies from being stored
48. and wireless client As long as the passwords match a client will be granted access to the wireless LAN Switch to enable or disable WPA WPA2 encryption The encryption mechanisms used for WPA and WPA PSK are the same The only difference between the two is that WPA PSK uses a simple common password instead of user specific credentials Refer to page 7 for the default value of the shared key Input the IP address of RADIUS server if used Enter a RADIUS port number when WPA or 802 1x network authentication is selected Enter the RADIUS Key when WPA or 802 1x network authentication is selected Allows the wireless router to generate the best possible random group key and update all the key management capable stations periodically DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Label WPA WPA2 Re auth Interval WEP Encryption Shared Key Authentication 802 1x Authentication Network Key 1 4 Current Network Key Passphrase Generate WEP Keys Apply DHCP Server IP Address Subnet Mask Lease Pool Start Lease Pool End 4 3 4 Wireless Guest Network Description Wireless router if using WPA PSK key management or RADIUS server if using WPA key management sends a new group key out to all clients The re keying process is the WPA equivalent of automatically changing the WEP key for a wireless access point and all stations in the WLAN on a periodic basis Se
49. ckbox must be clicked DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 31 4 2 4 Gateway DHCP Static Lease 4 2 4 Ubee Interactive Gateway DHCP Static Lease The Static Lease option allows you to assign static IP addresses to clients on your network using the IP addresses acquired through the DHCP server on the cable modem 1 2 32 Basic Gateway Setup Information Setup DHCP Static Lease DDNS Time Adwanced Gateway Setup Options MAC Filtering eIP Filtering Port Filtering Forwarding Port Triggering Pass Through DMZ Host IP Mapping Label Index MAC Address IP Address Enabled Clear Apply Access the web interface Refer to page 14 if needed Click the Gateway link from the top of the screen Click Static Lease from the left side of the screen The Static Lease fields are explained following this screen example MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS Gateway DHCP Static Lease Note If some IP addresses turn to red color you should check the DHCP pools Current DHCP Server IP Ranges information Private Range 192 163 0 10 192 168 0 15 Public DHCP Server Range 0 0 0 0 0 0 0 0 Index MAC Address IP Address Enabled Clear i eb cd kle 00 koo j o 192 168 0 10 ce ce ce ce c ce m e e e e e ea e e e e ea e e e e e e ea e ea Description Index
50. creen To access the web interface refer to page 13 Device Package Components The package for the DDW2600 wireless cable modem router or the DDM2700 commercial cable modem router contains the following items Item Description DDW2600 DDW2600 wireless cable modem router or the DDM2700 commercial cable modem router DDM2700 RJ 45 RJ 45 Cable Length 6 0 ft ROHS amp UL compliant AC Adapter Vin 230V 50Hz Vout 12V 1 5A Example Actual appearance subject to change USB Cable and Driver CD not shown Drivers are also available at www ubeeinteractive com DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 2 6 Device Back Panel Description 2 6 Device Back Panel Description Review the images below and the descriptions that follow for an explanation of the device back panel 2 6 1 DDW2600 and DDC2700 Back Panel Images DDW2600 H FP o GALE 4 ethernet 1 2 3 ethernet m c ble DDC2700 g o UJE JEE power 4 Back Panel ltem Number Description power adapter to the device WARNING Use only the power adapter shipped with this device Failure to do so may cause damage to the device 1 Power Inlet The power inlet is used for connecting the device s 2 Reset The reset switch restores the default settings of the device including wireless DDW2600 only and custom gateway settings Use a po
51. ctor Female LJ LAN 4 10 100Mbps Based T RJ 45 Ports LJ USB USB 1 0 Port provides an alternate network connection Q 32MB DDR Ram Standards Certifications Q DOCSIS Euro DOCSIS 1 0 1 1 2 0 Certified Q CE FCC Class B UL 60950 Q RoHS WEEE Q IPv4 Q Wireless IEEE 802 11 802 11b g DSSS Downstream Q Frequency Range 88 MHz 860MHZ Modulation 64 256 QAM Maximum Data Rate 30Mbits sec 64QAM 42 8Mbits sec 256QAM Symbol Rate 5 057 5 361 Msymbols sec RF Input Output Power 17 to 15dBmV 64 QAM 15 to 17dBmV 256 QAM Input Impedance 75 O LJ Channel Bandwidth 6 or 8 MHz DDDLDULDZLCU Upstream Q Frequency Range 5 MHz 42 MHz Q Modulation A TDMA QPSK 8 16 32 64QAM S CMDA QPSK 8 16 32 64 128QAM O Maximum Data Rate 0 32 10 24Mbits QPSK 0 64 20 48Mbits 16QAM 0 96 30 72Mbits 64QAM O RF Output Power A TDMA 8dBmV 58dBmV QPSk 8dBmV 55dBmV QAM 8dBmV 54dBmV 32 64 Actual speeds can vary based on factors including network configuration service tier and network conditions Wireless DDW2600 Only LY WiFi Multimedia Support Q WPA WPS WEP Encryption Q 4 SSIDs 1 SSID is Reserved for Service Provider LJ Transmit Power 18dBm DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 5 2 3 Physical Specifications Standards Firmware Operations Ubee Interactive Q Operating Frequency 2400 2497MHz ISM band LI Data Rate 1 2 5 5 6
52. damage to it DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 1 1 2 Eco Environmental Statements Ubee Interactive 1 2 1 3 Eco Environmental Statements The following eco environmental statements apply to the DDW2600 or DDM2700 router 1 2 1 Packaging Collection and Recovery Requirements Countries states localities or other jurisdictions may require that systems be established for the return and or collection of packaging waste from the consumer or other end user or from the waste stream Additionally reuse recovery and or recycling targets for the return and or collection of the packaging waste may be established For more information regarding collection and recovery of packaging and packaging waste within specific jurisdictions contact Ubee Interactive at www ubeeinteractive com Regulatory Statements The following regulatory statements applies to the DDW2600 or DDM2700 router 1 3 1 Industry North America Statement This device complies with RSS 210 of the Industry North America Rules Operation is subject to the following two conditions 1 This device may not cause harmful interference and 2 this device must accept any interference received including interference that may cause undesired operation 1 3 2 Radiation Exposure Statement This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment This equipment should be ins
53. ditional Information Port Triggering Some services use a dedicated range of ports on the client side and a dedicated range of ports on the server side With regular port forwarding you set a forwarding rule to forward a service to the IP address of a LAN side host The problem is that port forwarding forwards a service to a single LAN IP address With port triggering we define 2 kinds of ports Trigger Port and Target Port Trigger port is defined as the service request with a specific destination port number sent from a LAN side host Target Port is defined as the ports this specific application requires a LAN host to listen to Thus the server returns responses to these ports Example 1 John requests a file from the Real Audio server port 7070 Port 7070 is a trigger port and causes the cable modem to record John s computer IP address The cable modem associates John s computer IP address with the target port range of 6970 7170 2 he Real Audio server responds to a port number ranging between 6970 7170 3 The cable modem forwards the traffic to John s computer IP address 4 Only John can connect to the Real Audio server until the connection is closed or times out Host Mandy Me Listen Port 6970 7170 d Real Audio Server Listen Port 7070 Host John Listen Port 6970 7170 46 DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 4 2 15 Advanced
54. e Out Start Test Abort Test Clear Results Results Refresh Ubee Interactive Enter the expiration time for this trace route operation Click Start to start the trace route test Click Abort Test to cancel the test Click Clear Results to clear the displayed trace route results This Results area of the screen displays the trace route results Click Refresh to update the screen with on going trace route tests 4 7 3 Tools Client List The Client List option displays connected computers to the DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router 1 Access the web interface Refer to page 14 if needed 2 Click the Tools link from the top of the screen 3 Click Client List from the left side of the screen The Client List fields are explained following this screen example MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS TOOLS Tools Client List Ping Host Name IP Address MAC Address Interface Trace Route Client List Refresh Port Configuration eUI Authentication Scanning Plan Password Factory Default Operation Mode Label Hostname IP Address MAC Address Interface Refresh Description DHCP Clients currently connected to the DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router are displayed in this list and are identified by the hostname IP address and MAC address of the connected devices The method that clients a
55. e for the internal network host LJ Refer to page 43 for more detailed information on Forwarding To setup forwarding use the following procedure 1 Access the web interface Refer to page 14 if needed 2 Click the Gateway link from the top of the screen 3 Click Forwarding from the left side of the screen Example The following screen example shows how to setup an XBOX running Modern Warfare 2 Since multiple ports are used for XBOX separate forwarding rules are setup for each port The XBOX IP is entered in the Local IP field The ports used by the XBOX are defined in the Internal Port field The ports used by XBOX are also defined in the External Port Start and End fields This configuration now allows the XBOX to receive data from the internet Q For detailed information on port forwarding including how to set it up for specific applications using specific network devices for example cable modems refer to http portforward com DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 41 4 2 11 Advanced Gateway Setup Forwarding Ubee Interactive Q For additional information consult your host device s or specific application s user manual Advanced Gateway Forwarding Port Farwardin g Ext j f Internal ee iicstass dp exeo EE Port Port Protocol Enabled Index Local IP Fort Is s s View Additional Rules m A e i BN i Label Descriptio
56. ecific credentials If WPA2 PSK is enabled enter a preshared key Refer to page for the default value of the shared key Connecting clients will need to enter this shared key to access the network Input the IP address of RADIUS server if used Enter a RADIUS port number when WPA or 802 1x network authentication is selected Enter the RADIUS Key when WPA or 802 1x network authentication is selected Allows the wireless router to generate the best possible random group key and update all the key management capable stations periodically Wireless router if using WPA PSK key management or RADIUS server if using WPA key management sends a new group key out to all clients The re keying process is the WPA equivalent of automatically changing the WEP key for a wireless access point and all stations in the WLAN on a periodic basis Setting of the WPA Group Key Update Timer is also supported in WPA PSK mode If you don t have WPA 2 aware wireless clients then use WEP key encrypting A higher bit key offers better security WEP encryption scrambles the data transmitted between the wireless stations and the wireless router to keep network communications private It encrypts unicast and multicast communications in a network Both the wireless stations and the wireless router must use the same WEP key Data Encryption can be set to WEP 128 bit 64 bit or Disable 52 DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber
57. ed Network WPA WPA PSK WPA2 WPA2 PSK WPA WPA2 Encryption WPA Pre Shared Key RADIUS Server RADIUS Port RADIUS Key Group Key Rotation Interval Ubee Interactive Description Select which guest network to configure Select to enable or disable the guest network selected Enter a new guest network name if desired This SSID name is broadcast from the device and is used to connect to the wireless network If Enable is selected this will hide the SSID name When nearby wireless clients try to scan the SSID it will not discover this hidden SSID name unless the user manually adds the SSID to the wireless client Wi Fi Protected Access WPA is a subset of the IEEE 802 11i standard Key differences between WPA and WEP are user authentication and improved data encryption If you don t have an external RADIUS server you should use WPA PSK WPA Pre Shared Key that only requires a single identical password entered into wireless gateway and wireless client As long as the passwords match a client will be granted access to the wireless LAN Advanced protocol certified through Wi Fi Alliance s WPA2 program implements the mandatory elements of 802 111 In particular it introduces a new AES based algorithm CCMP that is considered fully secure If you don t have an external RADIUS server you should use WPA2 PSK WPA Pre Shared Key that only requires a single identical password entered into wireless gateway
58. ed by some ISPs Port Triggering Pass Through MTU Size 256 1500 octets 0 use default DMZ Host IP Mapping Label Description LAN IP Address Defines the local IP address which will be the default gateway address for all wired LAN hosts that connect to the cable modem MAC Address Displays the LAN interface s hardware address WAN IP Address Displays the current WAN public IP address that is obtained from the service provider WAN MAC Address Displays the WAN interface s hardware address Duration Displays the accumulated time since successfully acquiring a WAN public IP address Expires Displays the remaining time before the expiration of the WAN IP address if applicable Release WAN Lease Click to release the WAN public IP address Renew WAN Lease Click to renew the WAN IP address Refresh Click to refresh the status of this page 28 DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive Label WAN Connection Type Host Name Domain Name MTU Size Apply 4 2 2 Gateway Setup Description Select the WAN connection type For each type different data entry is required as explained below 1 Ix DHCP The WAN interface is set to be a DHCP client and the IP address is assigned by the service provider s DHCP server For more detailed configuration of the DHCP server on the device refer to page 30 Static IP For Static IP you must
59. elect the service provider used for your DDNS Service or Disabled www DyDNS org www no ip com Input your DDNS account username as subscribed to the service provider Enter your password for the above account Input the host name as specified by the DDNS service provider These fields are automatically populated once the User Name and Password are entered Click Apply to save all screen changes Click to refresh the page DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 33 4 2 6 Gateway Time Ubee Interactive 4 2 6 Gateway Time The Time option allows you to configure the system time obtained from network servers via Simple Network Time Protocol SNTP The device must be reset for any changes to take effect 1 Access the web interface Refer to page 14 if needed 2 Click the Gateway link from the top of the screen 3 Click Time from the left side of the screen The Time fields are explained following this screen example MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS Basic Gateway Setup Gateway TIME Information Setup Enable SNTP Q ves 9 no DHCP Current Time Thu Jan 01 01 22 41 1970 System Start Time Thu Jan 01 00 00 00 1970 Static Lease DDNS Time Server 1 clock via net Time Time Server 2 ntp nasa gowv Advanced Gateway Time Server 3 tick ucla edu Setu E Timezone Offset Hours Minutes vi Apply Re
60. er s wireless module Network Name SSID Use this field to use the existing or enter a new Service Set Identifier SSID Wireless clients connecting to the wireless router use this SSID as the address to establish the wireless network connection Refer to page 7 for more information on the device s default SSID Broadcast SSID Click Enable to allow broadcast of SSID Country When set to USA channels 1 to 11 is available If selecting worldwide 13 channels are available DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 49 4 3 1 Wireless Basic 50 Channel Interface Apply Restore Wireless Defaults Ubee Interactive Select a specific channel 1 11 to deploy the wireless network This allows you to set the operating frequency channel depending on your particular region Select Enabled Disabled to turn on or off the wireless radio interface Off makes the wireless access point unavailable for use Click to save Click to restore the factory default settings for wireless configurations DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 4 3 2 Wireless Security 4 3 2 Wireless Security The Security option allows you to configure a variety of wireless security settings for the primary wireless network Keep in mind that the device also supports guest networks that can have different SSIDs and secur
61. erent SSIDs if you use WEP for security 1 Access the web interface Refer to page 14 if needed 2 Click the Wireless link from the top of the screen 3 Click Guest Network from the left side of the screen The Guest Network fields are explained following this screen example Wireless 802 11b g Guest Network Guest Network GUEST WLAM OQ XX AXI AA NAINA W Guest WiFi Security Settings Guest LAN Settings Guest Network Disabled DHCP Disabled Server GUEST WLAN 0 IP Address Closed Network Disabled Subnet 255 255 255 0 Mask Guest Network Name SSID 192 166 1 1 WPA Disabled 4 Lease WPA PSK Disabled Pool 192 168 1 10 Start WPAZ Disabled rmm 192 168 1 99 WPAZ PSK Disabled esse 86400 ime WPA WPA2 Encryption L Apply WPA Pre Restore Defaults Shared Key RADIUS Server 3 0 0 0 RADIUS Port ji RADIUS Key Group Key Rotation f Interval WPA WPA2 Re E S auth Interval WEP Encryption Disabled t Shared Key s Authentication L B02 1x E Authentication Network Key 1 Network Key 2 Network Key 3 Network Key 4 Current Network Key PassPhrase Generate WEP Keys DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 57 4 3 4 Wireless Guest Network 58 Label Guest Network Select Guest Network Enable Disable Guest Network Name Clos
62. es a Telnet connection request to this router s public IP address the router recognizes that this is a Telnet connection request to a station According to existing forwarding rules the router first translates the packet s destination port to be 64623 and then forward this request to John s Telnet host In summary when you have port forwarding rules set up your router takes the data off of the external IP address port number and sends that data to an internal IP address port number Port Forwarding rules are created per port So a rule set up for port 53 will only work for port 53 A port can only be used by one program at a time DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 43 4 2 13 Advanced Gateway Setup Port Triggering 44 Ubee Interactive 4 2 13 Advanced Gateway Setup Port Triggering The Port Triggering option allows you to configure dynamic triggers to specific devices on the LAN This allows for special applications that require specific port numbers with bi directional traffic to function properly Applications such as video conferencing voice gaming and some messaging program features may require these special settings Refer to page 46 for more information on how to setup Port Triggering 1 Access the web interface Refer to page 14 if needed 2 Click the Gateway link from the top of the screen 3 Click Port Triggering from the left side of the screen The
63. ettings pop up menu Or enter a new user name and click the Add button To activate the user click the Enable button To remove a user select a user from the pop up menu and click the Remove button Enter the password for this user It is required when this user tries to access the Internet via the cable modem Re enter the password as required Click the Enable checkbox to allow the selected user to be trusted user That means the user is now limited to timing and content when visiting Internet as defined in the following fields Select from the pop up menu an existing content rule that defines what kind of websites the user can visit or not If you have created a content rule which defines a black list and white list then you can select the White List Access Only checkbox to force the cable modem to execute the policy for the selected user Select a defined time access rule to apply to the selected user Enter a time in minutes for the user s session expiration Upon expiration the user can log back in for the same session duration Enter the time out value when a user has no activity on the Internet When the time expires the user interface to the internet cancelled Click to save all changes Define the trusted hosts that will bypass the Parental Control Process Enter the trusted hosts MAC address and click the Add button to save To remove a trusted computer highlight it from the list and click the Remove but
64. ewall Event Log The Event Log option allows you to configure firewall event log reporting via email alerts and report on possible attacks on the system 1 2 4 Access the web interface Refer to page 14 if needed Click the Firewall link from the top of the screen Click Event Log from the left side of the screen The Event Log fields are explained following this screen example MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS Firewall Firewall Event Log Content Filter Remote Log Email Address Password E mail Alerts Enable Apply Description Count Last Occurence Target Source E mail Log Clear Log Enter the appropriate email address and password information enter the SMTP server then click the Enable button Click Apply to complete the setup The entered email address will begin to receive firewall events 4 6 3 Firewall Remote Log The Remote Log option allows you to configure events to be sent to a local SysLog server 1 2 Access the web interface Refer to page 14 if needed Click the Firewall link from the top of the screen Click Remote Log from the left side of the screen The Remote Log fields are explained following this screen example MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS Firewall Firewall Remote Event Log Content Filter Event Log Send selected events Remote Log Permitted Connections
65. g in Bridge NAT Router or NAT Router Note Firewall menu options are not available when the device is in Bridge mode Firewall options are available only when the device is in NAT NATRoute or Route modes Displays the private IP address assigned to DHCP client Displays the Public IP DHCP Server Range Displays the Public IP total range Displays the accumulated time since the last power cycle DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 27 4 2 2 Gateway Setup Ubee Interactive 4 2 2 Gateway Setup The Setup option allows you to make key network configurations to the device 1 Access the web interface Refer to page 14 if needed 2 Click the Gateway link from the top of the screen 3 Click Setup from the left side of the screen The Setup fields are explained following this screen example MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS Basic Gateway Setup Gateway Basic Setup Information Setup Network Configuration DHCP Static Lease N IP Address 192 18 oo E DONS MAC Address 00 22 69 02 94 18 Time IF Address a a ee MAC Address 00 22 698 02 94 16 Advanced Gateway Duration D H M S Setup Expires Sa SSeS Options Release WAN Lease Renew WAN Lease MAC Filtering IP Filtering WAN Connection Type visa minim Host Name ea by some ISPs Forwarding Domain Name jReauir
66. hrough metal concrete brick walls or floors Q For the DDW2600 and DDM2700 Place the device in a location that has an operating temperature of 0 C to 40 C 32 F to 104 F Refer to page 1 for more safety information Have a PC available and powered on The PC must have an Ethernet network adapter Ethernet port The PC must also have an internet browser installed for example Netscape or Internet Explorer The following are supported LJ For Windows 2000 XP Vista Firefox 1 07 and higher Internet Explorer v7 and above Netscape Q For MAC OS X 10 2 and higher Firefox 1 07 and higher Safari 1 x and higher Connect the power adapter that is included with the product package to the cable modem and to the power outlet Connect one end of a network cable supplied in the product package to your computer s Ethernet port Connect the other end to one of the Ethernet ports for example Ethernet 1 on the cable modem Connect a coaxial cable from the Cable port on the device to the cable wall outlet DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 13 3 1 2 Access the Web Interface Ubee Interactive 7 Continue to the following section 3 1 2 Access the Web Interface Use the following procedure to access the web interface 1 From the computer launch an internet browser for example Internet Explorer Netscape Safari Firefox Note The computer must be connected to an
67. ins p 7 Device Package Components p 8 Device Back Panel Description p 9 Device Front Panel amp LED Behavior p 10 D D D ULDIZL DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 3 2 1 Application Diagram Ubee Interactive 2 1 Application Diagram The diagram below illustrates the general connection topology and uses of the device Customer Premises Network Residential or Small Office Home Office SOHO Ubee DDW2600 Wireless Laptops Other Wireless Devices p e Cable RF Coax K 2 KF Clients Telephone Ubee or off the shelf products can be connected to expand the network for example router wireless router hub To DDC2700 or to DDW2600 above RJ45 ys Cable RF Coax l n LAN Jma T Ethernet Ubee DDC2700 Commercial Ethernet Enabled Devices Cable Modem Router PCs Gaming Consoles etc 2 2 Support Subscribers must contact their service provider for direct support Device documentation support may be available at http www ubeeinteractive com 4 DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 2 3 2 3 Physical Specifications Standards Firmware Operations Physical Specifications Standards Firmware Operations The following list provides the features and specifications of the DDW2600 or DDC2700 cable modem router Interfaces LI Cable F Conne
68. inted object to push down on the reset button for 5 seconds until power LED turns off After the power LED turns off release the button 3 Ethernet 1 to 4 Ports These four RJ45 Ethernet ports are used to connect Ethernet devices such as computers and gaming consoles to the internet 4 USB Port Using the USB cable included in the product package subscribers can connect a device to the network using this port as long as the device also has a USB port This may be useful for devices that do not have an ethernet network adapter port 5 Cable Port The Cable port is where the device connects to the cable wall outlet or a cable splitter connected to the wall outlet DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 9 2 7 Device Front Panel amp LED Behavior Ubee Interactive 2 7 Device Front Panel 4 LED Behavior This section describes what the device LEDS indicate on the front panel of the DDW2600 wireless cable modem router or the DDM2700 commercial cable modem router Review the device images below and the LED table on the following page 2 7 1 DDW2600 and DDC2700 Front Panel Images DDW2600 DDC2700 10 DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 2 7 2 LED Behavior Table 2 1 2 LED Behavior Table The following table describes what the device LEDs indicate Note The WLAN LED is available on the D
69. is unselected the policy is not active To remove a policy select the policy from the drop down list and click the Remove button Select the days to block Internet access The internet access times for the days selected to block are defined in the following fields Select All Day to eliminate all access during the days selected to block Or enter a specific time range in the Start and End fields Click to save all changes 4 5 4 Parental Control Event Log The Event Log option displays Parental Control event log reporting 1 Access the web interface Refer to page 14 if needed 2 Click the Parental Control link from the top of the screen 3 Click Event Log from the left side of the screen The Event Log fields are explained following this screen example MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS Parental Control eUser Setup Basic e Tod Filter eEvent Log Label Last Occurrence Action Target User Source Refresh Clear Log Parental Control Event Log Description Displays the time when the last event occurred Displays what is done by parental control including dropping or permitting access requests Displays the destination IP address of a certain access request Displays the user who triggered this event log Displays the source IP address of this event Click Refresh to update the log with the most currently recorded events Click Clear to empty the
70. ity settings Refer to page 57 for more information on guest networks 1 Access the web interface Refer to page 14 if needed 2 Click the Wireless link from the top of the screen 3 Click Security from the left side of the screen The Security fields are explained following this screen example Wireless Basic Security Access Control Advanced Bridging Wifi Multimedia Guest Network Label Wireless Privacy WPA Disabled WPA PSK Disabled WPA Disabled WPA2 PSK Disabled WPA WPA ER Encryption L WPA Pre Shared Key RADIUS m Server RADIUS Port jab i RADIUS Key Group Key Rotation Interval WPA WPAZ R e auth S60 Interval WEP Encryption Shared Key Authentication 802 1 Authentication WEP 128 bit 9 Optional Disabled Network Key 1 s is es ci ci ici ci ch fe cie ci cf fe es ob of ese ok H Network Key 2 eee eee ee ee ee ee ES E Network Key 3 eee eee ee AAA AAA PAPA FAFEAFAA Network Key 4 444444eee4444444 Current 1 w Network Key PassPhrase Generate WEP Keys Description WiFi Protected Setup WPS e 5 bd Config Disable Button 1 hol mm Device ambitAP Name i WPS Method Push Button M Start WPS WPS Status WPA Wi Fi Protected Access WPA is a subset of the IEEE 802 11i standard Key differences between WPA and WEP are user authentication and improved data encryp
71. k the Tools link from the top of the screen Click Ping from the left side of the screen The Ping fields are explained following TOOLS Ping Trace Route Client List Port Configuration UI Authentication Scanning Plan Password Factory Default Operation Mode Label Ping Target Ping Size No of Pings this screen example MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS Tools Ping Ping Test Parameters Ping Target Ping Size bytes 64 1518 Mo of Pings 1 5 Ping Interval 1000 ms 100 10000 Start Test Abort Test Clear Results Res ults Refresh To get an update of the results you must select the REFRESH button above Description Enter the IP address to which you want to send a ping A ping tests the network connectivity between devices by sending a test message to a specific device You can also confirm the size of data sent is the same as received Enter the packet size to send for the ping operation Enter the number of ping commands to send to the ping target DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 4 7 2 Tools Trace Route Ping Interval Define the interval between ping operations in milliseconds Start Test Abort Test Clear Results Click Start to start the ping test Click Abort Test to cancel the ping test Click Clear Results to clear the
72. le The ID type and content act as an extra level of identification for incoming SAs Enter the value corresponding to the selected Identity type Select the address group type IP Subnet to protect the whole subnet Single IP address to protect a single PC P address range to protect several PCs Enter the subnet Enter the subnet mask Select the identity type to identify this cable modem by WAN IP remote end point address IP address FQDN Email address Enter the value corresponding to the selected Identity Type 64 DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive Network Address Type Remote address IPSec Settings Pre shared Key Phase 1 DH Group Phase 1 Encryption Phase 1 Authentication Phase 1 SA Lifetime 4 4 3 VPN Configure Enter the network address type P address usually suitable for static public IP address Fully Qualified Domain Name FQDN usually suitable for dynamic public IP address Input the IP address value when choosing an IP address in Network Address Type Input the FQDN if FQDN is selected This field is used to identify the specific remote IPSec VPN gateway to which your cable modem will initiate IPSec VPN connection Configure the IPSec protocol related parameters in the following fields Enter your pre shared key in this field A pre shared key identifies a communicating par
73. mation link from the left side of the screen Field explanations are listed below the following screen example MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS CABLE MODEM Cable Modem Information eInformation Cable Modem DOCSIS 1 0 1 1 2 0 Compliant eStatus Downstream MAC Address 00 22 69 02 94 14 Upstream Upstream Burst Serial Number 87H1612000092 Operation Config Boot Code Version 5 1 1b eEvent Log Software Version 5 100 1002 Hardware Version 4 25 CA Key Installed Label Description Cable Modem The current DOCSIS standard of the device MAC Address The unique Media Access Control MAC hardware address of cable modem Serial Number The unique manufacturer serial number of the device DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 19 4 1 2 Modem Status Label Boot Code Version Software Version Hardware Version CA Key Ubee Interactive Description The boot software code version of the device The general software version of the device The internal version number that identifies the hardware design The device installs a Certificate Authority CA key that is transferred from the service provider s server after the cable modem is authenticated The key is used to secure communication between the service provider and the cable modem 4 1 2 Modem Status This section explains how to use the
74. n Click the Enable checkbox to activate the Parental Control feature Click to save all changes in the screen and activate Parental Control if enabled This part of the screen allows you to configure the internet content access policy Enter a policy name and click Add New Policy to create a new policy Select from the list an existing policy to edit or remove If removing a policy select it from the list and click the Remove Policy button DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 73 4 5 3 Parental Control Tod Filter Keyword List Add Keyword Ubee Interactive Enter keywords to use in order to filter out web site addresses 4 5 3 URLs containing those words Enter a keyword and click the Remove Keyword Add Keyword button To remove a keyword select it from the list and click Remove Keyword Blocked Domain List Enter web domains for example unwanted com to use in Add Domain order to filter out access to those domains Enter a domain Remove Domain and click the Add Domain button To remove a domain select it from the list and click Remove Domain Allowed Domain List This list allows users to visit specific sites This list restricts users to these sites only Add Allowed Domain Enter a domain name and click Add Allowed Domain Remove Allowed To remove a domain highlight it from the list and click Remove Domain Allowed Domain Parental
75. n Index Displays the Index number of the rule Local IP Enter the last digits of the IP address of the server for which to setup the forwarding rule Internal Port Enter the port number listened to by the server host located in your LAN Public Interface IP Normally this field is not modified unless you wish to designate another router on the network to forward data through Ext Start Port Define the port number to start the range of ports to publish to the Internet Ext End Port Define the port number to end the range of ports published to Internet Note Be very careful with ranges Ports within a range will not be usable by other applications that may require them It is common and safer to enter the same port number as the start and end of the range Protocol Select the protocol type UDP TCPIP or Both Enabled Select to enable this rule Apply Click to save Port Map Click to show a list of common applications and their ports 42 DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 4 2 12 Additional Information Forwarding 4 2 12 Additional Information Forwarding Internal Ports are the ports that local servers listen to External Ports are the ports that the cable modem listens to For example a local user on your network e g John is running a Telnet Daemon on port 64623 the internal port is 64623 the external port is 23 If an internet user initializ
76. n labels on the device itself Comply with the following safety guidelines for proper operation of the device shock and injury To prevent fire or shock hazard do not expose the unit to rain moisture or install this product near water Never spill any form of liquid on or into this product Do not use liquid cleaners or aerosol cleaners on or close to the product Use a soft dry cloth for cleaning Always follow basic safety precautions to reduce the risk of fire electrical Do not insert any sharp object into the product s module openings or empty slots Doing so may accidentally damage its parts and or cause electric shock Electrostatic discharge ESD can permanently damage semiconductor devices Always follow ESD prevention guidelines for equipment handling and storage Use only the power adapter supplied with the device Do not attach the power supply cable on building surfaces or floorings LI Do not place heavy objects on top of the device Q Rest the power cable freely without any obstacle or heavy items piled on top of it Refrain from abusing stepping or walking on the cable Do not place the device on an unstable stand or table the device may drop and become damaged LI To protect the equipment from overheating do not block the slots and openings in the module housing that provides ventilation Do not expose this device to direct sunlight Do not place any hot devices close to this device as it may degrade or cause
77. nel spacing is set for the width of the frequency spectrum to scan whenever the cable modem scans If it is 6000000 for example when scanning from 9300000 the cable modem will scan from 93000000 to 99000000 then from 99000000 to 105000000 and so on until the Highest Center Frequency is reached DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 83 4 7 5 Tools Password Subscriber Ubee Interactive 84 4 7 5 Tools Password Subscriber The Password option allows you to change the subscriber level password for the logins on the DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router This login is used to access this web interface For information on default logins refer to page 1 Access the web interface Refer to page 14 if needed 2 Click the Tools link from the top of the screen 3 Click Password from the left side of the screen The Password fields are explained following this screen example MODEM GATEWAY WIRELESS VPN PARENTAL CONTROL FIREWALL TOOLS TOOLS Tools Password Ping Trace Route User Name fuser sd Sea Confirm Password 4 Password User Defaults Apply Label Description User Name New To change the user name enter a new name in User Name Password Confirm field Otherwise leave as is To change the password enter Password the new password and re enter the new password in the Confirm password field Click Apply
78. network Define the subnet mask value Define the start IP address of this DHCP address pool Define the last IP address of this DHCP address pool DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 59 4 3 4 Wireless Guest Network Ubee Interactive Label Description Define the lease time for DHCP client Before expiration DHCP client will resend DHCP request Max value is Lease Time 86400 seconds Apply Click Apply to save all DHCP settings Click to reset to factory default values for the wireless Restore Defaults settings only 60 DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 4 4 VPN Menu 4 4 VPN Menu This chapter contains instructions for all VPN configuration settings A virtual private network VPN is a computer network in which some of the links between nodes are carried by open connections over the internet or virtual circuits instead of by physical wires One common application of VPN is secure communications between trusted nodes using the public Internet VPNs for example can be used to separate the traffic of different user communities over an underlying network with strong security features For an overview of how VPNs are structured and the security protocols used refer to page 69 1 Access the web interface Refer to page 14 if needed 2 Click the VPN link from the top of the screen 4 4 1
79. nstream 4 1 3 Modem Downstream This section explains how to use the Downstream screen of the web interface The Downstream screen displays detailed information on the device s connection to downstream channels from the service provider 1 Access the web interface Refer to page 14 if needed 2 Click the Modem link from the top menu and then the Downstream link from the left side of the screen Field explanations are listed below the following screen example MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS CABLE MODEM Cable Modem Downstream Information a Status Downstream Lock Locked Downstream Downstream Channel Id 4 Upstream Upstream Burst Downstream Frequency 621000000 Hz Downstream Modulation QAM256 Operation Config Event Log Downstream Symbol Rate 5360 537 Ksym sec Downstream Interleave Depth tapss2Incrementa Downstream Receive Power Level 4 0 dBmV Downstream SNR Label Downstream Lock Downstream Channel ID Downstream Frequency Downstream Modulation Downstream Symbol Rate Downstream Interleave Depth Downstream Power Level Downstream SNR Refresh 35 7 dB Description Displays if the cable modem succeeded in locking to a downstream channel Locked Not Locked Displays the downstream channel ID Displays the downstream channel frequency on which the cable modem is scanning Displays the modula
80. number of the each client that connects to your network This field is populated with the MAC address of the client that you may want to assign a static IP address to Enter a specific IP address to assign to the specific client host Click Enabled to activate this rule Click Clear to delete the rule Click Apply to save all screen changes DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 4 2 5 Gateway DDNS 4 2 5 Gateway DDNS The Dynamic Domain Name Service DDNS option allows you to configure your registered Domain Name with a dynamic IP address 1 Access the web interface Refer to page 14 if needed 2 Click the Gateway link from the top of the screen 3 Click DDNS from the left side of the screen The DDNS fields are explained following this screen example MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS Basic Gateway Setup Gateway DDNS eInformation Setup DDNS Service Disabled e DHCP User Name Static Lease e Time Host Name IP Address Advanced Gateway Status Setup Options eMAC Filtering eIP Filtering Port Filtering Forwarding ePort Triggering ePass Through DMZ Host eIP Mapping Label DDNS Service User Name Password Host Name IP address Status Apply Refresh Password 0 0 0 0 DDNS service is not enabled Description S
81. on explains how to use the Operation Config screen of the web interface The Operation Config screen displays general information on the device s active operational capabilities 1 Access the web interface Refer to page 14 if needed 2 Click the Modem link from the top menu and then the Operation Config link from the left side of the screen Field explanations are listed below the following screen example MODEM GATEWAY WIRELESS VPN PARENTAL CONTROL FIREWALL TOOLS CABLE MODEM Cable Modem Operation Configuration Information Status Downstream Maximum Downstream Data Rate Network Access Allowed Upstream Maximum Upstream Data Rate Upstream Burst Maximum Upstream Channel Burst 0 Operation Config Event Log Maximum Number of CPEs i Modem Capability Concatenation Enabled Fragametation Enabled PHS Enabled Label Description Network Access Displays the status of cable modem Denied means no connectivity is established Allowed means connectivity is established to Internet Maximum Downstream Data Displays the maximum downstream data rate Rate Maximum Upstream Data Displays the maximum upstream data rate Rate Maximum Upstream Displays the maximum upstream Channel burst Channel Burst Maximum Number of CPEs Displays the maximum number of Ethernet devices that can be connected LAN side to access the network internet at the same time Modem Capability Display
82. re connected to the device is displayed for example Ethernet LAN Wireless Click to refresh the client list This may be useful when testing network connectivity between connecting clients and the DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 4 7 4 Tools Scanning Plan 4 7 4 Tools Scanning Plan The Scanning Plan option allows you to define a specific range of frequency for the cable modem to scan and use 1 Access the web interface Refer to page 14 if needed 2 Click the Tools link from the top of the screen 3 Click Scanning Plan from the left side of the screen The Scanning Plan fields are explained following this screen example TOOLS Ping Trace Route Client List Port Configuration UI Authentication Scanning Plan Password Factory Default Operation Mode Label Lowest Center Frequency Highest Center Frequency MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS Frequency Scanning Plan Lowest Center Frequency s3000000 Hz Highest Center Frequency 858000000 Hz Channel Spacing Hz Description Lowest and Highest Center Frequency are used to define a scope for the frequencies used by the cable modem Enter the low end of the frequency range Enter the high end of the frequency range Channel Spacing Chan
83. s device attributes that indicate aspects of its throughput and latency 4 1 7 Event Log This section explains how to use the Event Log screen of the web interface The Event Log screen displays log information that may be useful to diagnose operational issues with the device 1 Access the web interface Refer to page 14 if needed 2 Click the Event Log link from the left side of the screen Field explanations are 24 DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive listed below the following screen example CABLE MODEM Information Status Downstream Upstream Upstream Burst Operation Config eEvent Log Label First Time Last Time Priority Description 4 1 7 Event Log MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS Cable Modem Event Log Thu Apr 17 14 02 51 2008 Time NGE Established Time Nat Established Timea Hot Established Refresh Clear Log Refresh Clear Log Thy Apr 17 14 02 51 2008 Time net Established Time Not Established Time Hot Established Error 4 Critical 3 Critical 3 Critical 3 Description Configuration Fila CVC validation Failure Ne Ranging Response received T3 time out SYNC Timing Synchronization failure Failed to acquire QAM Q Resetting tha cable modam dua to eonzale command Displays the time of the event Displays the last
84. set Values Options MAC Filtering eIP Filtering Port Filtering Forwarding Port Triggering Pass Through DMZ Host IP Mapping Label Enable SNTP Current Time System Start Time Time Server 1 Time Server 2 Time Server 3 Description Click Yes to enable SNTP Network Time Protocol Click No to disable the feature SNTP is a protocol for synchronizing the clocks of computing devices over networks Displays the current system time Displays the accumulated time since system was started Defines the Time server IP address or Domain name Use the one provided or enter an alternative choice Defines the Time server IP address or Domain name Use the one provided or enter an alternative choice Defines the Time server IP address or Domain name Use the one provided or enter an alternative choice 34 DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 4 2 6 Gateway Time Time Zone Offset If needed define the time zone offset in Hours and Minutes For example 8 means GMT 08 1 means GMT 01 Apply Click Apply to save all screen changes Reset Values Click Reset Values to reset the screen to factory defaults DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 35 4 2 6 Gateway Time Ubee Interactive 36 DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide
85. t on the cable modem Q If you are using a cable splitter try removing the splitter and connect the cable modem directly to the cable wall outlet Wait several minutes for the cable modem to re establish communications with the cable service provider LI The Ethernet cable may be damaged Try another cable LI If none of these suggestions work contact your cable service provider for further assistance DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 17 3 2 2 Additional Troubleshooting Information Ubee Interactive 18 DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 4 Web User Interface Instructions This chapter explains how to use the web interface to configure monitor or troubleshoot the DDW2600 wireless cable modem router or the DDM2700 commercial cable modem router LJ Access the web interface Refer to Access the Web Interface on page 14 LJ Each web interface option is discussed in the following sections 4 1 Modem Menu This section explains all options under the Modem menu of the device web user interface 4 1 1 Modem Cable Modem Information This section explains how to use the Cable Modem Information screen This is a read only screen and it displays the device s basic software hardware configuration 1 Access the web interface Refer to page 14 if needed 2 Click the Modem link from the top menu and then the Infor
86. talled and operated with minimum distance 20cm between the radiator amp your body This device has been designed to operate with an antenna having a maximum gain of 2 dBi Antenna having a higher gain is Strictly prohibited per regulations of Industry North America The required antenna impedance is 50 ohms DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 2 2 Introduction Introduction Welcome to the Ubee family of data networking products This document provides instructions for anyone who installs configures maintains and uses the Ubee DDW2600 wireless cable modem router or the DDM2700 commercial cable modem router The following topics are also provided LI To define all relevant device compliance standards and physical specifications LI To provide device installation user level instructions and basic troubleshooting Important This document can be used for two different Ubee products the DDW2600 wireless cable modem router and the DDC2700 commercial cable modem router Any instructional differences between the two are noted throughout this document Ubee recommends that you review this chapter before installing and using the device To go directly to installing the device go to page 13 The following topics are provided Q Application Diagram p 4 Support p 4 Physical Specifications Standards Firmware Operations p 5 Default Values Device Log
87. that can or cannot connect to your wireless or wired network and the parameters of the connection 1 Access the web interface Refer to page 14 if needed 2 Click the Parental Control link from the top of the screen 3 Click User Setup from the left side of the screen The User Setup fields are explained following this screen example Note To enable Parental Control refer to page 73 MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS Parental Control Parental Control User Setup User Setup Basic User Configuration e Tod Filter User Settings Password Re Enter Password Trusted User Enable Content Rule White List Access Only Time Access Rule Session Duration Inactivity time Trusted Computers Optionally the user profile displayed above can be assigned to a computer to bypass the Parental Control login on that computer oo oo oo oo oo oo Add No Trusted Computers Remove DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 71 4 5 1 Parental Control User Setup Label User Configuration Add User Remove User Enable Password Re Enter Password Trusted User Content Rule White List Access Only Time Access Rule Session Duration Inactivity Time Apply Trusted Computers Add Remove Ubee Interactive Description Select an existing user account to edit from the User S
88. the wireless network can be changed Refer to page 49 3 2 2 Additional Troubleshooting Information Use the following tips for troubleshooting the installation LJ None of the LEDs are on when power on the Wireless LAN Cable Modem L Check the connection between the power adapter and the cable modem Power off cable modem and wait for 5 seconds and power on the modem again If the problem still exists there may have a hardware problem Q The Ethernet 1 2 3 or 4 LED on the cable modem is not lit LI Try restarting the computer so that is could re establish a connection with the cable modem LJ Check for a resource conflict Windows users only To do this 1 Right click on the My Computer icon on your desktop and choose Properties 2 Click the Device Manager tab and look for a yellow exclamation point or red X over the NIC in the Network Adapters field If you see either one you may have an IRQ conflict Refer to the manufacturers documentation or you cable service provider for further assistance Q Verify that TCP IP is the default protocol for your network interface card NIC Q Power cycle the cable modem by removing the power adapter from the electrical outlet and plugging it back in Wait several minutes for the cable modem to re establish communications with your cable service provider LI General Connectivity Issues LI If your PC is connected to a hub or gateway try connecting the PC directly into an Ethernet por
89. time of the event Displays the event log severity Displays a detailed description of the event log Refreshes the event log record Click Clear Log to clear the screen DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 25 4 2 Gateway Menu 4 2 26 Gateway Menu Ubee Interactive This chapter explains how to use the Gateway functions of the web interface The Gateway functions provide the majority of configuration for the device including WAN IP addresses LAN IP addresses DHCP and DDNS Also advanced setting like DMZ MAC filtering and port forwarding are provided 4 2 1 1 2 Gateway Information Access the web interface Refer to page 14 if needed Click the Gateway link from the top of the screen Then select Information The Information fields are defined following this screen example Basic Gateway Setup Information eSetup e DHCP Static Lease DDNS e Time Advanced Gateway Setup e Options MAC Filtering eIP Filtering Port Filtering Forwarding Port Triggering NAT ePass Through eDMZ Host eIP Mapping Gateway MAC Address Internet IP Address Subnet Mask Default Gateway DNS DHCP Remaining Time Gateway IP Address Subnet Mask DHCP Server Wireless Status Operating Mode Private IP Range Gateway Information INTERNET SETTINGS 00 22 69 02 94 16 0 0 0 0 0 days 00 00 00 LOCAL SETTINGS 192 168 0 1 255
90. tion Select to Enable or Disable DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 51 4 3 2 Wireless Security Label WPA PSK WPA2 WPA2 PSK WPA WPA2 Encryption WPA Pre Shared Key RADIUS Server RADIUS Port RADIUS Key Group Key Rotation Interval WPA WPA2 Re auth Interval WEP Encryption Ubee Interactive Description If you don t have an external RADIUS server you should use WPA PSK WPA Pre Shared Key that only requires a single identical password entered into the wireless gateway and wireless client As long as the passwords match a client will be granted access to the wireless LAN Select to Enable or Disable Advanced protocol certified through Wi Fi Alliance s WPA2 program implements the mandatory elements of 802 11i In particular it introduces a new AES based algorithm CCMP that is considered fully secure Select to Enable or Disable If you don t have an external RADIUS server you should use WPA2 PSK WPA Pre Shared Key that only requires a single identical password entered into wireless gateway and wireless client As long as the passwords match a client will be granted access to the wireless LAN Select to Enable or Disable Switch to enable or disable WPA WPA2 encryption The encryption mechanisms used for WPA and WPA PSK are the same The only difference between the two is that WPA PSK uses a simple common password instead of user sp
91. tion method that s required for the downstream channel to lock on to by the cable modem This method is determined by the service provider Displays the symbol rate The current cable modem downstream symbol rates are QAM64 is 5056941 sym sec QAM256 is 5360537 sym sec Displays the current cable modem downstream Interleave depth 4 8 16 32 64 128 other Displays the receiver power level after ranging process Display the SNR of this downstream channel Click this button to refresh the active screen data DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 21 4 1 4 Modem Upstream Ubee Interactive 4 1 4 Modem Upstream This section explains how to use the Upstream screen of the web interface The Upstream screen displays detailed information on the device s connection to upstream channels to the service provider 1 Access the web interface Refer to page 14 if needed 2 Click the Modem link from the top menu and then the Upstream link from the left side of the screen Field explanations are listed below the following screen example MODEM GATEWAY WIRELESS VEN ROUTING PARENTAL CONTROL FIREWALL TOOLS CABLE MODEM Cable Modem Upstream Information Upstream Lock Status P Locked Downstream Upstream Channel ID Upstream Upstream Burst Upstream Frequency 30800000 Hz Operation Config Upstream Modulation QAM16 eEvent Log
92. ton DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 Ubee Interactive 4 5 2 Parental Control Basic Settings 4 5 2 Parental Control Basic Settings The Basic option allows basic selection of rules which block certain Internet content and certain Web sites When you change your Parental Control settings you must click on the appropriate Apply Add or Remove button for your new settings to take effect Refresh your browser s display to see the currently active settings 1 Access the web interface Refer to page 14 if needed 2 Click the Parental Control link from the top of the screen 3 Click Basic from the left side of the screen The Basic fields are explained following this screen example MODEM GATEWAY WIRELESS VPN ROUTING PARENTAL CONTROL FIREWALL TOOLS Parental Control Parental Control Activation User Setup This box must be checked to turn on Parental Control Basic Tod Filter Ewent Log F Enable Parental Control Content Policy Configuration PIL Ade New Policy Content Policy List 1 Default Remove Policy Keyword List Blocked Domain List m nonymizer com Add Keyword Add Domain Allowed Domain List NENNEN Add Allowed Domain Remove Allowed Domain Label Enable Parental Control Apply Content Policy Configuration Add New Policy Content Policy List Remove Policy Descriptio
93. tting of the WPA Group Key Update Timer is also supported in WPA PSK mode If you don t have WPA 2 aware wireless clients then use WEP key encrypting A higher bit key offers better security WEP encryption scrambles the data transmitted between the wireless stations and the wireless router to keep network communications private It encrypts unicast and multicast communications in a network Both the wireless stations and the wireless router must use the same WEP key Data Encryption can be set to WEP 128 bit 64 bit or Disable Shared Key is an authentication method used by wireless LANs which follow the IEEE 802 11 standard Wireless devices authenticate each other by using a secret key that is kept by both devices Enable to have the wireless router authenticate wireless clients You can pre define up to 4 keys for 64 bit or 128 bit 64 bit keys require 10 hexadecimal digits 128 bit key require 26 hexadecimal digits You can select one of the four pre defined keys as the current network key You can set WEP encryption key by entering a word or group of printable characters in the Passphrase box and click Generate WEP keys These characters are case sensitive Force the wireless router to generate 4 WEP keys automatically Click to save all screen changes Select Enable to allow users to deploy a DHCP server for this guest SSID This IP address will be the default gateway address for clients connected to this guest
94. ty during a phase 1 IKE negotiation It is called pre shared because you have to share it with another party before you can communicate with them over a secure connection Select which Diffie Hellman key group DHx you want to use for encryption keys DH1 use a 768 bit random number DH2 use a 1024 bit random number DH5 user a 1536 bit random number Select which key size and encryption algorithm to use for data communications DES a 56 bit key with the DES encryption algorithm 3DES a 168 bit key with the DES encryption algorithm The DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router and the remote IPSec router must use the same algorithms and key which can be used to encrypt and decrypt the messages or to generate and verify a message authentication code Longer keys require more processing power resulting in increased latency and decreased throughput AES Advanced Encryption Standard is a newer method of data encryption that also uses a secret key This implementation of AES applies a 128 bit key to 128 bit blocks of data AES is faster than 3DES Here you have the choice AES 128 AES 192 AES 256 Select which hash algorithm to use to authenticate packet data in the IKE SA Choices are SHA1 and MD5 SHA is generally considered stronger than MD5 but it is also slower MD5 Message Digest 5 produces a 128 bit digest to authenticate packet data SHA1 Secure Hash Algorithm produces
95. ubnet Mask Identity Type Identity Address Group Type Subnet Mask Identity Type Identity Ubee Interactive Once a tunnel Name is entered click this button to add the tunnel Select to either Enable or Disable the tunnel Click Apply to save your changes Configure the local network that will be protected by the IPSec VPN located in your cable modem router s LAN side Choose the local address type IP Subnet to protect the whole subnet Single IP address to protect a single PC IP address range to protect several PCs Enter the subnet Enter the subnet mask Select the identity type to identify this cable modem by WAN IP remote endpoint address IP address FQDN Email address In Aggressive mode the VPN concentrator identifies incoming SAs by ID type and content since this identifying information is not encrypted to distinguish between multiple rules for SAs that connect from remote IPSec routers that have dynamic WAN IP addresses In Main mode the ID type and content are encrypted to provide identity protection In this case VPN concentrator can only distinguish between up to 30 different incoming SAs that connect from remote IPSec routers that have dynamic WAN IP addresses Because you can select between five encryption algorithms DES 3DES AES 128 AES 192 and AES 256 two authentication algorithms MD5 and SHA and three key groups DH1 and DH2 DH5 when you configure a VPN ru
96. y entering a PIN or by pressing a WPS button on the device or in software on the device Select WPS or Disabled SES lets you configure the SSID and encryption keys on both the router and the client with the press of a button WPS is a protocol to simplify the process of configuring security on wireless networks Use the default device name or change as needed This name identifies this wireless router in the WPS network Personal Identification Number of your PC or game machine When a WPS supported device tries to connect to this wireless router the user has to input the PIN as specified in this STA PIN field Click to save all values changes for WPS DDW2600 Wireless amp DDC2700 Commercial Cable Modem Router Subscriber User Guide May 2010 53 4 3 2 Wireless Security Ubee Interactive Label Description WPS Method Start WPS WPS Select which method to have connecting wireless clients Status connect to the wireless network Push Button or PIN If PIN is selected clients are required to enter the PIN in order to access the wireless network For Push Button a client pushes a button either on the device or in software on the device Within two minutes access this Web GUI page 14 and click the Start WPS button on this screen to trigger the negotiation between the wireless client and the wireless router WPS Status displays the connection status between the device and wireless clients 54 DDW2600 Wireless amp D

DDW2600 Wireless Router (U10CC037) and DDC2700 Commercial

Contents

Download Pdf Manuals

Related Search

Related Contents