ARRIS Group NVG510 Wireless Voice Gateway, ADSL2+ User Manual Administrator s Handbook V9 0 6 NVG510 att

ARRIS Group, Inc. Wireless Voice Gateway, ADSL2+ Administrator s Handbook V9 0 6 NVG510 att

UserManual.wiki >

ARRIS Group >

NVG510 User Manual

User Manual

b Motorola ® NVG510 Voice Gateway Motorola ® Embedded Software Version 9.0.6 Administrator’s Handbook

Table of Contents Table of Contents CHAPTER 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 About Motorola ® Documentation . . . . . . . . . . . . . . . . . . . . . . . . 7 Documentation Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 General. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8Internal Web Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8Command Line Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 Organization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 A Word About Example Screens . . . . . . . . . . . . . . . . . . . . . . . . 9 CHAPTER 2 Device Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11 Important Safety Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . 12 POWER SUPPLY INSTALLATION. . . . . . . . . . . . . . . . . . . . . . . . . . . . 12TELECOMMUNICATION INSTALLATION . . . . . . . . . . . . . . . . . . . . . . 12PRODUCT VENTILATION . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 Wichtige Sicherheitshinweise . . . . . . . . . . . . . . . . . . . . . . . . . 13 NETZTEIL INSTALLIEREN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13INSTALLATION DER TELEKOMMUNIKATION . . . . . . . . . . . . . . . . . . 13 Motorola ® Gateway Status Indicator Lights . . . . . . . . . . . . . . . 14 Set up the Motorola Gateway . . . . . . . . . . . . . . . . . . . . . . . . . 16 Accessing the Web Management Interface . . . . . . . . . . . . . . . 19 Device Status page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 Device Access Code . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 Tab Bar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 Help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 Links Bar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 Device List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24System Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25Access Code . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26Restart Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27 Broadband . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 Configure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 Home Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 Configure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34Wireless . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35 Wireless Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37 WPS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39MAC Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40Subnets & DHCP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 Voice . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43 Line Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44Call Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45 Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48 Packet Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

Administrator’s Handbook Working with Packet Filters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .51 NAT/Gaming . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 Custom Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .55 IP Passthrough . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58Firewall Advanced . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60 Diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 Logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64Manual Update . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66Resets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67 CHAPTER 3 Basic Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .69 Status Indicator Lights . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70 LED Function Summary Matrix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .72 Factory Reset Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75 CHAPTER 4 Command Line Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .77 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79 Starting and Ending a CLI Session . . . . . . . . . . . . . . . . . . . . . 81 Logging In . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .81Ending a CLI Session . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .81 Using the CLI Help Facility . . . . . . . . . . . . . . . . . . . . . . . . . . . 81 About SHELL Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82 SHELL Prompt . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .82SHELL Command Shortcuts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .82 SHELL Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83 Common Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .83WAN Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .90 About CONFIG Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . 92 CONFIG Mode Prompt . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .92Navigating the CONFIG Hierarchy . . . . . . . . . . . . . . . . . . . . . . . . . . . .92Entering Commands in CONFIG Mode. . . . . . . . . . . . . . . . . . . . . . . . .92Guidelines: CONFIG Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . .93Displaying Current Gateway Settings . . . . . . . . . . . . . . . . . . . . . . . . . .93Step Mode: A CLI Configuration Technique. . . . . . . . . . . . . . . . . . . . . .93Validating Your Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .94 CONFIG Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95 Connection commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .95Filterset commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .96Queue commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .100IP Gateway commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .101IPv6 Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .101IP DNS commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .106IP IGMP commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .107NTP commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .109Application Layer Gateway (ALG) commands . . . . . . . . . . . . . . . . . .110Dynamic DNS Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .110Link commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111Management commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .113Remote access commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .115

Table of Contents Physical interfaces commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117PPPoE relay commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120NAT Pinhole commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121Security Stateful Packet Inspection (SPI) commands . . . . . . . . . . . . 121VoIP commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122System commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130 Debug Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132 Disclaimer & Warning Text . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132 CHAPTER 5 Technical Specifications and Safety Information . . . 135 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135 Power requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135Environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135Software and protocols. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135 Agency approvals . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136 Manufacturer’s Declaration of Conformance . . . . . . . . . . . . . 137 Important Safety Instructions . . . . . . . . . . . . . . . . . . . . . . . . . 139 47 CFR Part 68 Information . . . . . . . . . . . . . . . . . . . . . . . . . . 140 FCC Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 140FCC Statements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 140 Electrical Safety Advisory . . . . . . . . . . . . . . . . . . . . . . . . . . . 141 Caring for the Environment by Recycling . . . . . . . . . . . . . . . 142 Beskyttelse af miljøet med genbrug . . . . . . . . . . . . . . . . . . . . . . . . . . 142Umweltschutz durch Recycling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142Cuidar el medio ambiente mediante el reciclaje . . . . . . . . . . . . . . . . 142Recyclage pour le respect de l'environnement . . . . . . . . . . . . . . . . . 142Milieubewust recycleren. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 143Dba∏oÊç o Êrodowisko - recykling . . . . . . . . . . . . . . . . . . . . . . . . . . 143Cuidando do meio ambiente através da reciclagem . . . . . . . . . . . . . 143Var rädd om miljön genom återvinning. . . . . . . . . . . . . . . . . . . . . . . . 143 Appendix A Motorola ® Gateway Captive Portal Implementation 145 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145 Captive Portal RPC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 146 X_00D09E_GetCaptivePortalParams RPC: . . . . . . . . . . . . . . . . . . . 146X_00D09E_SetCaptivePortalParams RPC:. . . . . . . . . . . . . . . . . . . . 147 Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149

7 CHAPTER 1 Introduction About Motorola ® Documentation ☛ NOTE: This guide describes the wide variety of features and functionality of the Motorola ® Gateway, when used in Router mode. The Motorola ® Gateway may also be delivered in Bridge mode. In Bridge mode, the Gateway acts as a pass-through device and allows the workstations on your LAN to have public addresses directly on the Internet. Motorola, Inc. provides a suite of technical information for its family of intelligent enterprise and consumer Gate-ways. It consists of: ◆ Administrator’s Handbook ◆ Dedicated User Manuals ◆ Specific White PapersThe documents are available in electronic form as Portable Document Format (PDF) files. They are viewed (and printed) from Adobe Acrobat Reader, Exchange, or any other application that supports PDF files.They are downloadable from the Motorola’s website: http://www.motorola.com/support

Administrator’s Handbook 8 Documentation Conventions General This manual uses the following conventions to present information: Internal Web InterfaceCommand Line Interface Syntax conventions for the Motorola Gateway command line interface are as follows: Convention (Typeface) Description bold italic monospaced Menu commands bold sans serif Web GUI page links and button names terminal Computer display text bold terminal User-entered text Italic Italic type indicates the complete titles of manuals. Convention (Graphics) Description Denotes an “excerpt” from a Web page or the visual truncation of a Web pageDenotes an area of emphasis on a Web page Convention Description straight ([ ]) brackets in cmd line Optional command arguments curly ({ }) brackets, with values separated with vertical bars (|).Alternative values for an argument are pre-sented in curly ({ }) brackets, with values separated with vertical bars (|). bold terminal type face User-entered text italic terminal type face Variables for which you supply your own valuesblue rectangle or linesolid rounded rectangle with an arrow

9 Organization This guide consists of five chapters, an appendix, and an index. It is organized as follows: ◆ Chapter 1, Introduction — Describes the Motorola ® document suite, the purpose of, the audience for, and structure of this guide. It gives a table of conventions. ◆Chapter 2, “Device Conﬁguration” — Describes how to get up and running with your Motorola® Gateway.◆Chapter 3, “Basic Troubleshooting” — Gives some simple suggestions for troubleshooting problems with your Gateway’s initial configuration.◆Chapter 4, “Command Line Interface” — Describes all the current text-based commands for both the SHELL and CONFIG modes. A summary table and individual command examples for each mode is provided.◆Chapter 5, “Technical Speciﬁcations and Safety Information”◆“Appendix A Motorola® Gateway Captive Portal Implementation” — Describes the Motorola® Gateway Captive Portal Implementation◆IndexA Word About Example ScreensThis manual contains many example screen illustrations. Since Motorola® Gateways offer a wide variety of fea-tures and functionality, the example screens shown may not appear exactly the same for your particular Gateway or setup as they appear in this manual. The example screens are for illustrative and explanatory purposes, and should not be construed to represent your own unique environment.

11CHAPTER 2 Device ConfigurationMost users will find that the basic Quick Start configuration is all that they ever need to use. The Quick Start sec-tion may be all that you ever need to configure and use your Motorola® Gateway. For more advanced users, a rich feature set is available. The following instructions cover installation in Router Mode.This chapter covers:◆“Important Safety Instructions” on page 12◆“Motorola® Gateway Status Indicator Lights” on page 14◆“Set up the Motorola Gateway” on page 16◆“Accessing the Web Management Interface” on page 19◆“Device Status page” on page 21◆“Tab Bar” on page 23◆“Broadband” on page 28◆“Home Network” on page 31◆“Wireless” on page 35◆“Voice” on page 43◆“Firewall” on page 48◆“Diagnostics” on page 61

Administrator’s Handbook12Important Safety InstructionsPOWER SUPPLY INSTALLATIONConnect the power supply cord to the power jack on the Motorola® Gateway. Plug the power supply into an appro-priate electrical outlet. There is no power (on / off) switch to power off the device.☛ WARNING:The power supply must be connected to a mains outlet with a protective earth connection. Do not defeat the protective earth connection.CAUTION: Depending on the power supply provided with the product, either the direct plug-in power supply blades, power supply cord plug or the appliance coupler serves as the mains power disconnect. It is important that the direct plug-in power supply, socket-outlet or appliance coupler be located so it is readily accessible.(Sweden) Apparaten skall anslutas till jordat uttag när den ansluts till ett nätverk(Norway) Apparatet må kun tilkoples jordet stikkontakt.TELECOMMUNICATION INSTALLATIONWhen using your telephone equipment, basic safety precautions should always be followed to reduce the risk of fire, electric shock and injury to persons, including the following:◆Do not use this product near water, for example, near a bathtub, wash bowl, kitchen sink or laundry tub, in a wet basement or near a swimming pool.◆Avoid using a telephone (other than a cordless type) during an electrical storm. There may be a remote risk of electrical shock from lightning.◆Do not use the telephone to report a gas leak in the vicinity of the leak.◆CAUTION: The external phone should be UL Listed and the connections should be made in accordance with Article 800 of the NEC.PRODUCT VENTILATIONThe Motorola® Gateway is intended for use in a consumer's home. Ambient temperatures around this product should not exceed 104°F (40°C). It should not be used in locations exposed to outside heat radiation or trapping of its own heat. The product should have at least one inch of clearance on all sides except the bottom when prop-erly installed and should not be placed inside tightly enclosed spaces unless proper ventilation is provided.SAVE THESE INSTRUCTIONS

13Wichtige SicherheitshinweiseNETZTEIL INSTALLIERENVerbinden Sie das Kabel vom Netzteil mit dem Power-Anschluss an dem Motorola® Gateway. Stecken Sie dann das Netzteil in eine Netzsteckdose.☛ Warnung:Das Netzteil muss an eine Steckdose, die mit einem Schutzleiter verbunden ist, angeschlos-sen werden. Die Schutzleiterverbindung darf in keinem Fall unterbrochen werden.Achtung:Abhängig von dem mit dem Produkt gelieferten Netzteil, entweder die direkten Steckernetzgeräte, Stecker vom Netzkabel oder der Gerätekoppler dienen als Hauptspannungsunterbrechung. Es ist wichtig, dass das Steckernetzgerät, Steckdose oder Gerätekoppler frei zugänglich sind.(Sweden) Apparaten skall anslutas till jordat uttag när den ansluts till ett nätverk(Norway) Apparatet må kun tilkoples jordet stikkontakt.INSTALLATION DER TELEKOMMUNIKATIONWenn Ihre Telefonausrüstung verwendet wird, sollten grundlegende Sicherheitsanweisungen immer befolgt wer-den, um die Gefahr eines Feuers, eines elektrischen Schlages und die Verletzung von Personen, zu verringern. Beachten Sie diese weiteren Hinweise:◆Benutzen Sie dieses Produkt nicht in Wassernähe wie z.B. nahe einer Badewanne, Waschschüssel, Küchenspüle, in einem nassen Keller oder an einem Swimmingpool. ◆Vermeiden Sie das Telefonieren (gilt nicht für schnurlose Telefone) während eines Gewitters. Es besteht die Gefahr eines elektrischen Schlages durch einen Blitz. ◆Nicht das Telefon benutzen um eine Gasleckstelle zu Melden, wenn Sie sich in der Nähe der Leckstelle befin-den.Bewahren Sie diese Anweisungen auf

Administrator’s Handbook14Motorola® Gateway Status Indicator LightsColored LEDs on your Motorola® Gateway indicate the status of various port activity.Motorola® Gateway NVG510 status indicator lightsLED ActionPowerSolid Green = The device is powered.Flashing Green = A Power-On Self-Test (POST) is in progressFlashing Red = A POST failure (not bootable) or device malfunction occurred.* When the device encounters a POST failure, all indicator lights on the front of the device continuously flash.Off = The unit has no AC power.EthernetSolid Green = Powered device connected to the associated port (includes devices with wake-on-LAN capability where a slight voltage is supplied to the Ethernet connection).Flickering Green = Activity seen from devices associated with the port. The flickering of the light is synchronized to actual data traffic.Off = The device is not powered, no cable or no powered devices connected to the associ-ated ports.WirelessSolid Green = WIFI is powered.Flickering Green = Activity seen from devices connected via WIFI. The flickering of the light is synchronized to actual data traffic.Off = The device is not powered or no powered devices connected to the associated ports.Wi-Fi SetupFlickering Green = Indicates when WPS is broadcasting.Off = not in use, not broadcasting.BroadbandSolid Green = Good broadband connection (i.e., good DSL Sync).Flashing Green = Attempting broadband connection (i.e., DSL attempting sync).Flashing Green & Red = If the broadband connection fails to be established for more than three consecutive minutes the LED switches to Flashing Green when attempting or waiting to establish a broadband connection alternating with a five second steady Red. This pattern continues until the broadband connection is successfully established.Flashing Red = No DSL signal on the line. This is only used when there is no signal, not dur-ing times of temporary ‘no tone’ during the training sequence.Off = The device is not powered.PowerEthernetSide ViewWirelessBroadbandServicePhone 1Phone 2Wi-Fi Setup

15Motorola® Gateway NVG510 Rear ViewServiceSolid Green = IP connected (The device has a WAN IP address from DHCP or 802.1x authentication and the broadband connection is up). Flashing Green = Attempting PPP connection. Attempting IEEE 802.1X authentication or attempting to obtain DHCP information.Red = Device attempted to become IP connected and failed (no DHCP response, no PPPoE response, 802.1x authentication failed, no IP address from IPCP, etc.). The Red state times out after two minutes and the Service indicator light returns to the Off state. Off = The device is not powered or the broadband connection is not present.Phone 1, 2Solid Green = The associated VoIP line has been registered with a SIP proxy server.Flashing Green = Indicates a telephone is off-hook on the associated VoIP line.Off = VoIP not in use, line not registered or Gateway power off.LED ActionFactory Reset SwitchDC Power PortWPS PushbuttonEthernet PortsPhone Port(use splitter for2 phones)DSL Port

Administrator’s Handbook16Set up the Motorola GatewayRefer to your Quickstart Guide for instructions on how to connect your Motorola® gateway to your power source, PC or local area network, and your Internet access point, whether it is a dedicated DSL outlet or a DSL or cable modem. Different Motorola® Gateway models are supplied for any of these connections. Be sure to enable Dynamic Addressing on your PC. Perform the following:Microsoft Windows: Step 1. Navigate to the TCP/IP Properties Control Panel. a. Some Windows versions follow a path like this:Start menu -> Settings -> Control Panel -> Network (or Network and Dial-up Connections -> Local Area Connection -> Proper-ties) -> TCP/IP [your_network_card] or Internet Protocol [TCP/IP] -> Propertiesb. Some Windows versions follow a path like this:Start menu -> Control Panel -> Network and Internet Connections -> Network Connections -> Local Area Connection -> Properties -> Internet Protocol [TCP/IP] -> Properties Then go to Step 2.Step 2. Select Obtain an IP address automatically.Step 3. Select Obtain DNS server address automatically, if available.Step 4. Remove any previously configured Gateways, if available.Step 5. OK the settings. Restart if prompted.

17c. Windows Vista and Windows 7 obtain an IP address automatically by default. You may not need to configure it at all.To check, open the Networking Control Panel and select Internet Protocol Version 4 (TCP/IPv4). Click the Properties button.The Internet Protocol Version 4 (TCP/IPv4) Properties window should appear as shown.If not, select the radio buttons shown above, and click the OK button.

Administrator’s Handbook18Macintosh MacOS 8 or higher or Mac OS X: Step 1. Access the TCP/IP or Network control panel. a. MacOS follows a path like this:Apple Menu -> Control Panels -> TCP/IP Control Panel b. Mac OS X follows a path like this:Apple Menu -> System Preferences -> NetworkThen go to Step 2.Step 2. Select Built-in Ethernet Step 3. Select Configure Using DHCPStep 4. Close and Save, if prompted.Proceed to “Accessing the Web Management Interface” on page 19.

19Accessing the Web Management Interface1. Run your Web browser application, such as Firefox or Microsoft Internet Explorer, from the computer connected to the Motorola® Gateway.2. Enter http://192.168.1.254 in the Location text box.The Device Status Page appears.3. Check to make sure the Broadband and Service LEDs are lit GREEN to verify that the connection to the Internet is active.Congratulations! Your installation is complete.You can now surf to your favorite Web sites by typing an URL in your browser’s location box or by selecting one of your favorite Internet bookmarks.

Administrator’s Handbook20IP Diagnostics pageIn the event that your connection to the Internet fails, the IP Diagnostics page displays.Follow the on-screen troubleshooting suggestions.For additional troubleshooting information, see “Basic Troubleshooting” on page 69.

21Device Status pageAfter you have performed the basic Easy Login configuration, any time you log in to your Motorola® Gateway you will access the Motorola® Gateway Home Page. You access the Home Page by typing http://192.168.1.254 in your Web browser’s location box.Device Access CodeYou may be required to provide your Device Access Code in order to access the web management configuration pages. The Device Access Code is unique to your device. It is printed on a label on the side of the Gateway.Enter your Device Access Code and click the Continue button.The Device Status Page appears.

Administrator’s Handbook22The Device Status displays the following information in the center section: Some fields may or may not display, depending on your particular setup.The Diagnostics button will connect you to the Troubleshoot page. See “Diagnostics” on page 61.The right-hand frame displays some links to commonly performed tasks for easy access.◆Go to AT&T online support for troubleshooting and repair »This link will connect you to the IP Diagnostics page with help for troubleshooting and the AT&T Help Desk information. See “IP Diagnostics page” on page 20.◆Modify your Wireless security or settings »This link will connect you to the Wireless page. See “Wireless” on page 35.◆Restart your gateway »This link will connect you to the Restart Device page. See “Restart Device” on page 27.◆Find a computer on your home network »This link will connect you to the Device List page. See “Device List” on page 24.◆Adjust ﬁrewall settings for gaming and applications »This link will connect you to the NAT/Gaming page. See “NAT/Gaming” on page 53.Field DescriptionBroadbandBroadband Connection ‘Waiting for DSL’ is displayed while the Gateway is training. This should change to ‘Up’ within two minutes.‘Up’ is displayed when the ADSL line is synched and the PPPoE ses-sion is established.‘Down’ indicates inability to establish a connection; possible line fail-ure.Line State Line State connection (Internet) is either Up or DownWi-FiStatus Your wireless signal may be ‘On’ or ‘Off’.Network ID (SSID) This is the name or ID that is displayed to a client scan. The default SSID for the Gateway is attxxx where xxx is the last 3 digits of the serial number located on the side of the Gateway.Authentication Type The type of wireless encryption security in use. May be Disabled, WPA or WEP, Default Key or Manual.Network Key Wireless network encryption key in use.VoiceLine 1 Indication of VoIP or other phone connection.Line 2 Indication of VoIP or other phone connection.

23Tab BarThe tab bar is located at the top of every page, allowing you to move freely about the site.The tabs reveal a succession of pages that allow you to manage or configure several features of your Gateway. Each tab is described in its own section.HelpHelp is provided in your Gateway. Help is available in the right hand frame on every page in the Web interface.Here is an example:The page shown here is displayed when you are on the System Information page.

Administrator’s Handbook24Links BarThe links bar at the top of each page allows you to configure different aspects of the features displayed on the page. For example, on the Home Summary page, the button bar is shown below:Click the links below to be taken to each section.◆“Device Status page” on page 21◆“Device List” on page 24◆“System Information” on page 25◆“Access Code” on page 26◆“Restart Device” on page 27Link: Device ListWhen you click the Device List link, the Device List page appears.The page displays the following information:Click the Refresh button to update the Home Network summary.Home Network DevicesHome Network Devices Displays the IP Address, Network Name, and MAC Address of devices connected to this Gateway on your local area network.Device IPv4 Address Client device’s IP address or device network name.MAC Address Client device’s unique hardware address.Status May be off or on.Connection Type of connection, for example, Ethernet.Allocation Type of IP address assignment, for example, Static or DHCP.

25Link: System InformationWhen you click the System Information link, the System Information page appears.The page displays the following information:System InformationManufacturer This is the manufacturer’s identifier name.Model Number This is the manufacturer’s model number.Serial Number This is the unique serial number of your Gateway.Software Version This is the version number of the current embedded software in your Gateway.MAC Address Unique hardware address of this Gateway unit.First Use Date Date and Time when the Gateway is first used. This field changes to the cur-rent date and time after a reset to factory defaults.Time Since Last Reboot Elapsed time since last reboot of the Gateway in days:hr:min:sec.Datapump Version Underlying operating system software datapump versionLegal Disclaimer Clicking the Licenses link displays a listing of software copyright attributions.

Administrator’s Handbook26Link: Access CodeAccess to your Gateway is controlled through an account named Admin. The default Admin password for your Gateway is the unique Access Code printed on the label on the side of your Gateway. As the Admin, you can change this password to a different one of your own choosing up to 32 characters long. The new password must also include two characters from any these categories: alpha, number, and special char-acters.Example: “fru1tfl13s_likeabanana”Enter your Old Access Code, your New Access Code, and click the Use New Access Code button. The new Access Code takes effect immediately.You can always return to the original default password by clicking the Use Default Access Code button.

27Link: Restart DeviceWhen the Gateway is restarted, it will disconnect all users, initialize all its interfaces, and load the Operating Sys-tem Software.When you make configuration changes, you may be required restart for the changes to take effect.

Administrator’s Handbook28BroadbandWhen you click the Broadband tab, the Broadband Status page appears.The Broadband Status page displays information about the Gateway’s WAN connection to the Internet. Broadband StatusLine State May be Up (connected) or Down (disconnected).Broadband Connection May be Up (connected) or Down (disconnected).Downstream Sync Rate This is the rate at which your connection can download (receive) data on your DSL line, in kilobits per second.Upstream Sync Rate This is the rate at which your connection can upload (send) data on your DSL line, in kilobits per second.Modulation Method of regulating the DSL signal. DMT (Discrete MultiTone) allows connec-tions to work better when certain radio transmitters are present. Data Path Type of path used by the device's processor. Broadband IPv4 Address The public IP address of your device, whether dynamically or statically assigned.

29Gateway IPv4 Address Your ISP's gateway router IP address.MAC Address Your Gateway’s unique hardware address identifier.Primary DNS The IP Address of the Primary Domain Name Server.Secondary DNS The IP Address of the backup Domain Name Server, if available.Primary DNS Name The name of the Primary Domain Name Server.Secondary DNS Name The name of the backup Domain Name Server, if available.MTU Maximum Transmittable Unit before packets are broken into multiple packets.IPv6Status May be Enabled or Disabled.Global Unicast IPv6 AddressThe public IPv6 address of your device, whether dynamically or statically assigned.Border Relay IPv4 AddressThe public IPv4 address of your device.IPv4 StatisticsTransmit Packets IPv4 packets transmitted.Transmit Errors Errors on IPv4 packets transmitted.Transmit Discards IPv4 packets dropped.Downstream and Upstream StatisticsSN Margin (db) Signal to noise margin, in decibels. Reflects the amount of unwanted “noise” on the DSL line. Line Attenuation Amount of reduction in signal strength on the DSL line, in decibels. Output Power (dBm) Measure of power output in decibels (dB) referenced to one milliwatt (mW).Errored Seconds The number of uncorrected seconds after being down for seven consecutive seconds.Loss of Signal The absence of any signal for any reason, such as a disconnected cable or loss of power.Loss of Frame A signal is detected but cannot sync with signal caused by mismatched proto-cols, wrong ISP connection configuration, or faulty cable.FEC Errors (Forwarded Error Correction errors) Count of received errored packets that were fixed successfully with out a retry.CRC Errors Number of times data packets have had to be resent due to errors in transmis-sion or reception.

Administrator’s Handbook30Link: ConfigureWhen you click the Conﬁgure link, the Broadband Conﬁgure screen appears.The WAN connection is automatically configured. However, you can adjust the MTU (Maximum Transmittable Unit) value, if your service provider suggests it. The default 1500 is the maximum value, but some services require other values. 1492 is common.If you make any change here, click the Save button.

31Home NetworkWhen you click the Home Network tab, the Home Network Status page appears.The Home Network Status page displays information about the Gateway’s local area network.

Administrator’s Handbook32Home Network StatusDevice IPv4 Address The Gateway’s own IP address on the network.DHCP Netmask The Gateway’s own netmask on the network.DHCPv4 Start Address The starting IP address of the DHCP range served by the Gateway.DHCPv4 End Address The ending IP address of the DHCP range served by the Gateway.DHCP Leases Available The number of IP addresses of the DHCP range available to be served by the Gateway.DHCP Leases Allocated The number of IP addresses of the DHCP range currently being served by the Gateway.DHCP Primary Pool Source pool of the IP addresses served by the Gateway, Public or Private.IPv6Status May be Enabled or Disabled.Global Unicast IPv6 AddressThe public IPv6 address of your device, whether dynamically or statically assigned.Link-local Unicast IPv6 AddressThe private IPv6 address of your device, whether dynamically or statically assigned.Router Advertisement PrefixThe IPv6 prefix to include in router advertisements.Prefix Delegation range The IPv6 prefix range from which prefixes can be delegated to clients by spec-ifying an IPv6 prefixIPv4 StatisticsTransmit Packets IPv4 packets transmitted.Transmit Errors Errors on IPv4 packets transmitted.Transmit Discards IPv4 packets dropped.Wireless StatusWireless Radio Status Indicates whether the Wi-Fi radio is operational or off.Network Name (SSID) This is the name or ID that is displayed to a client scan. The default SSID for the Gateway is attxxx where xxx is the last 3 digits of the serial number located on the side of the Gateway.Hide SSID May be either On or Off. If On, your SSID will not appear in a client scan.Mode May be 802.11b only, 802.11g only, 802.11n, or 802.11 b+g+n.Bandwidth The capacity of the wireless LAN to carry traffic. May be wide or narrow.Current Radio Channel The radio channel that your Wi-Fi network is broadcasting on.Radio Channel Selection May be set to automatic or manually selected.Wireless Security The type of wireless encryption security in use. May be Disabled, WPA-PSK or WEP, Default Key or Manual.Configured Data Rate This is the rate that you have configured the wireless driver to use.Supported Data Rates These are the rates the wireless driver is actually currently advertising and using. This is a combination of the Configured Rates, plus any run-time limita-tions that the environment is incurring (for instance, the presence of legacy cli-ents in the area can limit the offering of higher rates).Current Signal Strength (dBm)This is an average measure of how strong the signals received from clients are.

33The links at the top of the Home Network page access a series of pages to allow you to conﬁgure and monitor features of your device. The following sections give brief descriptions of these pages.◆“Configure” on page 34◆“Wireless” on page 35◆“WPS” on page 39◆“MAC Filtering” on page 40◆“Subnets & DHCP” on page 41ERP-PBCC Status This tells whether or not the Gateway is honoring legacy 802.11b compatibility mode.DSSS-OFDM Status This is the wireless modulation in use. DSS if in b-only mode, OFDM other-wise.MAC Address Filtering May be either On or Off. If On, you can accept or block client devices from your WLAN based on their MAC address.Power Level May be adjusted up to 100%, lower if multiple wireless access points are in use, and might interfere with each other.Key Management Infor-mationShows the information of the security encryption key in use.LAN Wireless StatisticsBytes Transmitted Number of bytes transmitted on the Wi-Fi network.Bytes Received Number of bytes received on the Wi-Fi network.Packets Transmitted Number of packets transmitted on the Wi-Fi network.Packets Received Number of packets received on the Wi-Fi network.Error Packets Transmitted This is the number of errors on packets transmitted on the Wi-Fi network.Error Packets Received This is the number of errors on packets received on the Wi-Fi network.Discard Packets Transmit-tedThis is the number of packets transmitted on the Wi-Fi network that were dropped.Discard Packets Received This is the number of packets received on the Wi-Fi network that were dropped.LAN Ethernet StatisticsState up or downTransmit Speed This is the maximum speed of which the port is capable.Transmit Packets This is the number of packets sent out from the port.Transmit Bytes This is the number of bytes sent out from the port.Transmit Dropped This is the number of packets sent out from the port that were dropped.Transmit Errors This is the number of errors on packets sent out from the port.Receive Packets This is the number of packets received on the port.Receive Bytes This is the number of bytes received on the port.Receive Unicast This is the number of unicast packets received on the port.Receive Multicast This is the number of multicast packets received on the port.Receive Dropped This is the number of packets received on the port that were dropped.Receive Errors This is the number of errors on packets received on the port.

Administrator’s Handbook34Link: ConfigureWhen you click the Conﬁgure link, the Conﬁgure page for the Ethernet LAN appears.For each Ethernet Port, 1 through 4, you can select:◆Ethernet – auto (the default self-sensing rate), 10M full- or half-duplex, 100M full- or half-duplex, or 1G full- or half-duplex.◆MDI-X – auto (the default self-sensing crossover setting), off, or on.You can also enable or disable IPv6 if your LAN devices support or require it. Select On or Off from the pull-down menu. Click the Save button.

35Link: WirelessWhen you click the Wireless link the Wireless page appears. The Wireless page displays the status of your Wireless LAN elements.The Wireless page’s center section contains a summary of the Wireless Access Point’s conﬁguration settings and operational status.◆The Wireless Operation function is automatically enabled by default. If you uncheck the checkbox, the Wire-less Options are disabled, and the Wireless Access Point will not provide or broadcast its wireless LAN ser-vices.Summary Information Field Status and/or DescriptionGeneral InformationWireless Operation May be either On or Off.Network Name (SSID) This is the name or ID that is displayed to a client scan. The default SSID for the Gateway is attxxx where xxx is the last 3 digits of the serial number located on the side of the gateway.Hide SSID May be either Enabled or Disabled. If Enabled, your SSID will not appear in a client scan.Security The type of wireless encryption security in use. May be OFF-No Privacy, WPA-PSK or WEP, Default Key or Manual.WPA Version If WPA is selected, may be Both, WPA-1, or WPA-2,.WEP Key Length May be 10 characters for 40/64-bit, or 26 characters for 128-bit WP encryption.Key Here you can enter a manual encryption key.Mode May be 802.11b only, 802.11g only, 802.11n, or 802.11 b+g+n.Bandwidth The capacity of the wireless LAN to carry traffic. May be wide or narrow.Channel The radio channel that your Wi-Fi network is broadcasting on.Power Level May be adjusted up to 100%, lower if multiple wireless access points are in use, and might interfere with each other.Wireless Protected Setup (WPS)May be either On or Off.

Administrator’s Handbook36◆Network Name (SSID) – preset to a number unique to your unit. You can either leave it as is, or change it by entering a freeform name of up to 32 characters, for example “Hercule’s Wireless LAN”. On client PCs’ soft-ware, this might also be called the Network Name. The Wireless ID is used to identify this particular wireless LAN. Depending on their operating system or client wireless card, users must either:• select from a list of available wireless LANs that appear in a scanned list on their client• or enter this name on their clients in order to join this wireless LAN.◆Hide SSID – If enabled, this mode hides the wireless network from the scanning features of wireless client computers. Unless both the wireless clients and the Gateway share the same Network Name (SSID) in hidden mode, the Gateway’s wireless LAN will not appear as an available network when scanned for by wireless-enabled computers. Members of the hidden WLAN must log onto the Gateway’s wireless network with the identical SSID as that configured in the Gateway.Closed System mode is an ideal way to increase wireless security and to prevent casual detection by unwanted neighbors, office users, or malicious users such as hackers. If you do not enable Hide SSID, it is more convenient, but potentially less secure, for clients to access your WLAN by scanning available access points. You must decide based on your own network requirements.◆Security, WPA Version, WEP Key Length, Key – see “Wireless Security” on page 37.◆Mode – The pull-down menu allows you to select and lock the Gateway into the wireless transmission mode you want: B/G/N, B-only, B/G, G-only, or N-only.For compatibility with clients using 802.11b (up to 11 Mbps transmission), 802.11g (up to 20+ Mbps), 802.11a (up to 54 Mbit/s using the 5 GHz band), or 802.11n (from 54 Mbit/s to 600 Mbit/s with the use of four spatial streams at a channel width of 40 MHz), select B/G/N. To limit your wireless LAN to one mode or the other, select G-only, N-only, or B-only, or some combination that applies to your setup.☛ NOTE:If you choose to limit the operating mode to 802.11b or 802.11g only, clients using the mode you excluded will not be able to connect.◆Bandwidth – May only be selected if mode is some combination of 802.11n (from 54 Mbit/s to 600 Mbit/s with the use of four spatial streams at a channel width of 40 MHz). Measure of the width of a range of frequen-cies, in megahertz. ◆Channel (1 through 11, for North America) on which the network will broadcast. This is a frequency range within the 2.4Ghz band. Channel selection depends on government regulated radio frequencies that vary from region to region. Channel selection can have a significant impact on performance, depending on other wireless activity close to this Wireless Access Point. You need not select a channel at any of the computers on your wireless network. They will automatically scan available channels seeking a Gateway broadcasting on the SSID for which they are configured.The Automatic setting allows the Wireless Access Point to determine the best channel to broadcast automati-cally.◆Wireless Power Level – Sets the wireless transmit power, scaling down the Wireless Access Point’s wireless transmit coverage by lowering its radio power output. Default is 100% power. Transmit power settings are use-ful in large venues with multiple wireless routers where you want to reuse channels. Since there are only three non-overlapping channels in the 802.11 spectrum, it helps to size the Wireless Access Point’s cell to match the location. This allows you to install a router to cover a small “hole” without conflicting with other routers nearby.◆Wireless Protected Setup (WPS) is a not a new security protocol. It is simply an easier way to use existing protocols to provide greater security for your wireless network connections.By default, Privacy is set to Wireless Protected Access (WPA-PSK). WPS allows you to automatically generate a new strong WPA key for your Gateway and any client devices on your wireless network.☛ Note:Not all client wireless devices support WPS. Refer to their documentation.

37Wireless SecurityBy default, Wireless Security is set to WPA-PSK with a pre-defined WPA-Default Key (Wireless Protected Access Pre-Shared Key).Other options are available from the Security pull-down menu:◆WEP - Manual: WEP Security is a Privacy option that is based on encryption between the Router and any PCs (“clients”) you have with wireless cards. If you are not using WPA-PSK Privacy, you can use WEP encryption instead. For this encryption to work, both your Wireless Access Point and each client must share the same Wireless ID (SSID), and both must be using the same encryption keys. See “WEP-Manual” on page 37.◆WPA-PSK: allows you to enter your own key, the most secure option for your wireless network. The key can be between 8 and 63 characters, but for best security it should be at least 20 characters.If you select WPA-PSK as your privacy setting, the WPA Version pull-down menu allows you to select the WPA version(s) that will be required for client connections. Choices are: Both, for maximum interoperability,WPA-1, for backward compatibility,WPA-2, for maximum security.All clients must support the version(s) selected in order to successfully connect.Be sure that your Wi-Fi client adapter supports this option. Not all Wi-Fi clients support WPA-PSK.◆OFF - No Privacy: This mode disables privacy on your network, allowing any wireless users to connect to your wireless LAN. Use this option if you are using alternative security measures such as VPN tunnels, or if your network is for public use.Click the Save button.WEP-ManualYou can provide a level of data security by enabling WEP (Wired Equivalent Privacy) for encryption of net-work data. You can enable 40- or 128-bit WEP Encr yption (depending on the capability of your client wireless card) for IP trafﬁc on your LAN.WEP - Manual allows you to enter your own encryption keys manually. This is a difﬁcult process, but only needs to be done once. Avoid the temptation to enter all the same characters.

Administrator’s Handbook38Key Length: The pull-down menu selects the length of each encryption key. The longer the key, the stronger the encryption and the more difﬁcult it is to break the encryption.Key: You enter a key using hexadecimal digits. For 40/64-bit encryption, you need ten digits; 26 digits for 128-bit WEP. Hexadecimal characters are 0 – 9, and a – f. Examples:◆ 40 bits: 02468ACE02◆ 128 bits: 0123456789ABCDEF0123456789Any WEP-enabled client must have an identical key of the same length as the Router, in order to suc-cessfully receive and decrypt the trafﬁc. Similarly, the client also has a ‘default’ key that it uses to encrypt its transmissions. In order for the Router to receive the client’s data, it must likewise have the identical key of the same length.Click the click Save button.

39Link: WPSWireless Protected Setup (WPS) is a not a new security protocol. It is simply an easier way to use existing pro-tocols to provide greater security for your wireless network connections.By default, Privacy is set to Wireless Protected Access (WPA-PSK). WPS allows you to automatically generate a new strong WPA key for your Gateway and any client devices on your wireless network.☛ Note:Not all client wireless devices support WPS. Refer to their documentation.Adding wireless clients to your network is easier using Wireless Protected Setup (WPS). Before you begin, be sure WPS is enabled on your device. WPS clients will be "auto-configured" by pushbutton or PIN-entry. Older, non-WPS clients can still be added to the network by configuring them the standard way with WPA-PSK or WEP. The client machine(s) to be added should be powered on and their wireless cards operational. Follow any instruc-tions that came with your wireless client devices.Click the here link to proceed.

Administrator’s Handbook40Link: MAC FilteringWhen you click the MAC Filtering link the MAC Filtering page appears.MAC Filtering allows you to specify which client PCs are allowed to join the wireless LAN by unique hardware (MAC) address.◆To enable this feature, select Blacklist or Whitelist from the MAC Filtering Type menu. Blacklist means that only MAC addresses you specify will be denied access; Whitelist means that only MAC addresses you specify will be allowed access.◆You add wireless clients that you want to Whitelist or Blacklist for your wireless LAN by selecting them from the List of MACs or by entering the MAC addresses in the Manual Entry field provided.◆Click the Add button.Your entries will be added to a list of clients that will be either authorized (Whitelisted) or disallowed (Blacklisted) depending on your selection.◆Click the Save button.You can Add or Remove any of your entries later by returning to this page.

41Link: Subnets & DHCPWhen you click the Subnets & DHCP link, the Subnets & DHCP page appears.The Server configuration determines the functionality of your DHCP Settings. This functionality enables the Gate-way to assign your LAN computer(s) a “private” IP address and other parameters that allow network communica-tion. This feature simplifies network administration because the Gateway maintains a list of IP address assignments. Additional computers can be added to your LAN without the hassle of configuring an IP address. This is the default mode for your Gateway.Private LAN Subnet◆Device IP Address: The IP address of your Gateway as seen from the LAN ◆Subnet Mask: Subnet mask of your LAN ◆DHCP Start Address: First IP address in the range being served to your LAN by the Gateway's DHCP server ◆DHCP End Address: Last IP address in the range being served to your LAN by the Gateway's DHCP server Public Subnet◆Public Subnet Enable: If you select On from the pull-down menu, you can enable a second subnet to distrib-ute public addresses to DHCP clients.◆Routed Network: If Public Subnet Enable is checked, this selection permits you to specify Gateway Selec-tion by the Gateway Router IP Address or its Router Name.◆Delegated Gateway: The IP address for a router set up behind this Gateway, if one is used.◆Public IPv4 Address: The IP address of your Gateway as seen from the WAN◆Subnet Mask: Public subnet mask◆DHCPv4 Start Address: First IP address in the range being served from a DHCP public pool.◆DHCPv4 End Address: Last IP address in the range being served from a DHCP public pool.

Administrator’s Handbook42DHCP Options◆DHCP Lease Time: Specifies the default length for DHCP leases issued by the Router. Enter lease time in dd:hh:mm:ss (days/hours/minutes/seconds) format.◆Primary DHCP Pool: Choose the source of the DHCP pool IP address assignment by selecting either the Pri-vate (local to your LAN) or Public (assigned remotely) radio button.If you make any changes here, click the Save button, and if prompted, restart the Gateway.

43VoiceIf you click the Voice ink, the Voice page appears.Voice-over-IP (VoIP) refers to the ability to make voice telephone calls over the Internet. This differs from tradi-tional phone calls that use the Public Switched Telephone Network (PSTN). VoIP calls use an Internet protocol, Session Initiation Protocol (SIP), to transmit sound over a network or the Internet in the form of data packets.◆The Voice page displays information about your VoIP phone lines, if configured. Your Gateway supports two phones, Line 1 and Line 2.◆If either one or both are registered with a SIP server by your service provider or not registered, the Voice page will display their Registration Status.The links at the top of the Voice page access a series of pages to allow you to conﬁgure and monitor features of your device. The following sections give brief descriptions of these pages.◆“Line Details” on page 44◆“Call Statistics” on page 45

Administrator’s Handbook44Link: Line DetailsWhen you click the Line Details link, the Line Details page appears.◆If your service provider has enabled your VoIP phone lines, you can register them by clicking the Register Line 1 or Register Line 2 button(s).◆To test if the lines are enabled, click the Ring Line 1 or Ring Line 2 button(s). If enabled and registered, the respective phone will ring until you click the Stop Ring Line 1 or Stop Ring Line 2 buttons.◆To update the display, click the Refresh button.

45Link: Call StatisticsWhen you click Call Statistics, the Call Statistics page appears.For Line 1 and Line 2:, the two available phone lines, the Call Statistics page displays the following information:Call Statistics - Line 1 and Line 2Last Call/Cumulative – Incomin/OutgoingRTP Packet Loss Real-time Transport Protocol packets droppedTotal RTCP Packets Total Real-time Transport Control Protocol packetsAverage Inter Arrival Jitter This is calculated continuously as each data packet is received and averaged.Max Inter Arrival Jitter This is the maximum value recorded as each data packet is received.Sum of Inter Arrival Jitter This is calculated continuously as each data packet is received and totalled.Sum of Inter Arrival Jitter SquaredThis is calculated continuously as each data packet is received and the total is squared.

$Administrator’s Handbook46Sum of Franc Loss Fraction Lost: The fraction of RTP data packets lost since the previous SR or RR packet was sent. This fraction is defined to be the number of packets lost divided by the number of packets expected. This will be calculated on every RTCP SR packet. Sum of the fraction lost is calculated with all the RTCP pack-ets. Sum of Franc Loss SquaredFraction lost is squared with every RTCP SR or RR packet. Sum of all this will give the Sum of Franc Loss Squared.Max One Way Delay One Way Delay will be calculated on every RTCP SR or RR packet. This value is ( systime - lsr - dslr) / 2 lsr means last SR timestampdslr means delay since last SR.Sum of One Way Delay The sum of all the one way delays calculated on every RTCP packet is dis-played as Sum of One Way Delay.Sum of One Way Delay SquaredOne Way Delay is squared with every RTCP SR or RR packet. Sum of all this will give the Sum of One Way Delay Squared.Avg Round Trip Time Average time from this local source to destination address and back again for all logged callsMax Round Trip Time Maximum amount of time from this local source to destination address and back again for all logged callsSum of Round Trip Time Sum of time from this local source to destination address and back again for all logged callsSum of Round Trip Time SquaredSum squared of time from this local source to destination address and back again for all logged calls$

47For Line 1 and Line 2:, the two available phone lines, the Call Summary section displays the following informa-tion:Call Summary - Line 1 and Line 2Current Call/Last Completed CallCall Timestamp Date and Time of the current callType May be Incoming or OutgoingDuration Length of time of call connectionCodec in Use Audio codec used for decoding the call packet traffic.Far-End Host Information SIP server IP information: IP address and port numberFar-End Caller Information Caller ID information, if availableCumulative Since Last ResetLast Reset Timestamp Date and Time of the last callNumber of Calls Total number of calls for each VoIP lineDuration Time since the last callNumber of Incoming Calls Failed Number of Incoming calls that fail to connectNumber of Outgoing Calls Failed Number of Outgoing calls that fail to connect

Administrator’s Handbook48FirewallWhen you click the Firewall tab, the Firewall Status page appears. The Firewall page displays the status of your system firewall elements.All computer operating systems are vulnerable to attack from outside sources, typically at the operating system or Internet Protocol (IP) layers. Stateful Inspection firewalls intercept and analyze incoming data packets to deter-mine whether they should be admitted to your private LAN, based on multiple criteria, or blocked. Stateful inspec-tion improves security by tracking data packets over a period of time, examining incoming and outgoing packets. Outgoing packets that request specific types of incoming packets are tracked; only those incoming packets consti-tuting a proper response are allowed through the firewall.Stateful inspection is a security feature that prevents unsolicited inbound access when NAT is disabled. You can configure UDP and TCP “no-activity” periods that will also apply to NAT time-outs if stateful inspection is enabled on the interface. Stateful Inspection parameters are active on a WAN interface only if enabled on your system. Stateful inspection can be enabled on a WAN interface whether NAT is enabled or not.The center section displays the following:The links at the top of the Firewall page access a series of pages to allow you to configure security features of your device. The following sections give brief descriptions of these pages.◆“Packet Filter” on page 49◆“NAT/Gaming” on page 53◆“IP Passthrough” on page 58◆“Firewall Advanced” on page 60Packet Filter May be On or OffIP Passthrough May be On or OffNAT Default Server May be On or OffFirewall Advanced May be On or Off

49Link: Packet FilterWhen you click the Packet Filter link the Packet Filter screen appears.Security should be a high priority for anyone administering a network connected to the Internet. Using packet fil-ters to control network communications can greatly improve your network’s security. The Packet Filter engine allows creation of a maximum of eight Filtersets. Each Filterset can have up to eight rules configured.☛ WARNING:Before attempting to configure filters and filtersets, please read and understand this entire section thoroughly. The Motorola Gateway incorporating NAT has advanced security features built in. Improperly adding filters and filtersets increases the possibility of loss of communication with the Gateway and the Internet. Never attempt to configure filters unless you are local to the Gateway.Although using filtersets can enhance network security, there are disadvantages:• Filters are complex. Combining them in filtersets introduces subtle interactions, increasing the like-lihood of implementation errors.• Enabling a large number of filters can have a negative impact on performance. Processing of pack-ets will take longer if they have to go through many checkpoints in addition to NAT.• Too much reliance on packet filters can cause too little reliance on other security methods. Filter-sets are not a substitute for password protection, effective safeguarding of passwords, and general awareness of how your network may be vulnerable.Motorola’s packet filters are designed to provide security for the Internet connections made to and from your net-work. You can customize the Gateway’s filtersets for a variety of packet filtering applications. Typically, you use fil-ters to selectively admit or refuse TCP/IP connections from certain remote networks and specific hosts. You will also use filters to screen particular types of connections. This is commonly called firewalling your network.Before creating filtersets, you should read the next few sections to learn more about how these powerful security tools work.

Administrator’s Handbook50Parts of a filterA filter consists of criteria based on packet attributes. A typical filter can match a packet on any one of the follow-ing attributes:◆The source IP address (where the packet was sent from)◆The destination IP address (where the packet is going)◆The type of higher-layer Internet protocol the packet is carrying, such as TCP or UDPOther filter attributesThere are three other attributes to each filter:◆The filter’s order (i.e., priority) in the filterset◆Whether the filter is currently active◆Whether the filter is set to forward packets or to block (discard) packetsDesign guidelinesCareful thought must go into designing a new filterset. You should consider the following guidelines: ◆Be sure the filterset’s overall purpose is clear from the beginning. A vague purpose can lead to a faulty set, and that can actually make your network less secure.◆Be sure each individual filter’s purpose is clear.◆Determine how filter priority will affect the set’s actions. Test the set (on paper) by determining how the filters would respond to a number of different hypothetical packets.◆Consider the combined effect of the filters. If every filter in a set fails to match on a particular packet, the packet is:• Forwarded if all the filters are configured to discard (not forward)• Discarded if all the filters are configured to forward• Discarded if the set contains a combination of forward and discard filtersAn approach to using filtersThe ultimate goal of network security is to prevent unauthorized access to the network without compromising authorized access. Using filtersets is part of reaching that goal. Each filterset you design will be based on one of the following approaches:◆That which is not expressly prohibited is permitted.◆That which is not expressly permitted is prohibited.It is strongly recommended that you take the latter, and safer, approach to all of your filterset designs.

51Working with Packet FiltersTo work with filters, begin by accessing the Packet Filter pages.Packet Filter◆Enable Filter – Select On from the pull-down menu to enable this filter rule.Filter Rule Entry◆Action – Select either the drop or pass radio buttons:• drop: If you select drop, the specified packets will be blocked. • pass: If you select pass, the specified packets will be forwarded.◆Enter the Source IP Address this filter will match on.◆Enter the Destination IP Address this filter will match on.◆Select Protocol from the pull-down menu: ICMP, TCP, UDP, or None to specify any another IP transport proto-col.◆Enter the Source Port this filter will match on.◆Enter the Destination Port this filter will match on.◆If you selected ICMP, enter the ICMP Type here.When you are finished configuring the filter, click the Add button, then the Save button to save the filter.Filter Rules ListYour entries are displayed as a table.

Administrator’s Handbook52☛ NOTE:Default Forwarding FilterIf you create one or more filters that have a matching action of forward, then action on a packet matching none of the filters is to block any traffic.Therefore, if the behavior you want is to force the routing of a certain type of packet and pass all oth-ers through the normal routing mechanism, you must configure one filter to match the first type of packet and apply Force Routing. A subsequent filter is required to match and forward all other pack-ets.Management IP trafﬁcIf the Force Routing filter is applied to source IP addresses, it may inadvertently block communica-tion with the router itself. You can avoid this by preceding the Force Routing filter with a filter that matches the destination IP address of the Gateway itself.Example:To create a Packet Filter that will block telnet from one LAN client, block access to the Gateway’s web interface from one LAN client and then allow all other traffic to pass from the LAN to the Gateway, you enable LAN Packet Filter and create filters and then apply them as an inbound filter.Input Rules:Pass Source IP Address Destination IP Address ProtocolNo 192.168.1.65 0.0.0.0 TCPNo 192.168.1.64 192.168.1.254 TCPYes 0.0.0.0 0.0.0.0 Any

53Link: NAT/GamingWhen you click the NAT/Gaming button, the NAT/Gaming page appears.NAT/Gaming allows you to host internet applications when NAT is enabled. You can host different games and software on different PCs.From the Service pull-down menu, you can select any of a large number of predefined games and software. (See “List of Supported Games and Software” on page 56.)In addition to choosing from these predefined services you can also select a user defined custom service. (See “Custom Services” on page 55.)For each supported game or service, you can view the protocols and port ranges used by the game or service by clicking the Service Details button. For example:Select a hosting device from the Needed by Device pull-down menu.1. Once you choose a software service or game, click Add.2. Select a PC to host the software from the Select Host Device pull-down menu and click Save.

Administrator’s Handbook54Each time you enable a software service or game your entry will be added to the list of Service names dis-played on the NAT Configuration page.To remove a game or software from the hosted list, choose the game or software you want to remove and click the Remove button.

55Custom ServicesTo configure a Custom Service, click the Add/Edit Services button. The Custom Services page appears.Enter the following information: ◆Service Name: A unique identifier for the Custom Service. ◆Global Port Range: Range of ports on which incoming traffic will be received. ◆Base Host Port: The port number at the start of the port range your Gateway should use when forwarding traf-fic of the specified type(s) to the internal IP address. ◆Protocol: Protocol type of Internet traffic, TCP or UDP.Once you define a Custom Service it becomes available in the Application Hosting Entry Service menu as one of the services to select.Click the Add button.Each time you enable a custom service your entry will be added to the list of Service names displayed on the Custom Services page.Changes are saved immediately.

Administrator’s Handbook56List of Supported Games and SoftwareAIM Talk Act of War - Direct Action Age of Empires IIAge of Empires, v.1.0 Age of Empires: The Rise of Rome, v.1.0Age of MythologyAge of Wonders America's Army ApacheAsheron's Call Azureus Baldur's Gate I and IIBattleﬁeld 1942 Battleﬁeld Communicator Battleﬁeld VietnamBitTornado BitTorrent Black and WhiteBlazing Angels Online Brothers in Arms - Earned in BloodBrothers in Arms OnlineBuddy Phone CART Precision Racing, v 1.0 Calista IP PhoneCall of Duty Citrix Metaframe/ICA Client Close Combat III: The Russian Front, v 1.0Close Combat for Windows 1.0 Close Combat: A Bridge Too Far, v 2.0Combat Flight Sim 2: WWII Paciﬁc Thr, v 1.0Combat Flight Sim: WWII Europe Series, v 1.0Counter Strike DNS ServerDark Reign Delta Force (Client and Server) Delta Force 2Delta Force Black Hawk Down Diablo II Server DialpadDirecTV STB 1 DirecTV STB 2 DirecTV STB 3Doom 3 Dues Ex Dune 2000Empire Earth Empire Earth 2 F-16, Mig 29F-22, Lightning 3 FTP Far CryFighter Ace II GNUtella Grand Theft Auto 2 MultiplayerH.323 compliant (Netmeeting, CUSeeME)HTTP HTTPSHalf Life Half Life 2 Steam Half Life 2 Steam ServerHalf Life Steam Half Life Steam Server HaloHellbender for Windows, v 1.0 Heretic II Hexen IIHotline Server ICQ 2001b ICQ OldIMAP Client IMAP Client v.3 IPSec IKEInternet Phone Jedi Knight II: Jedi Outcast KaliKazaA Lime Wire Links LS 2000Lord of the Rings Online MSN Game Zone MSN Game Zone DXMSN Messenger Mech Warrior 3 MechWarrior 4: VengeanceMedal of Honor Allied Assault Microsoft Flight Simulator 2000 Microsoft Flight Simulator 98

57Microsoft Golf 1998 Edition, v 1.0Microsoft Golf 1999 Edition Microsoft Golf 2001 EditionMidtown Madness, v 1.0 Monster Truck Madness 2, v 2.0 Monster Truck Madness, v 1.0Motocross Madness 2, v 2.0 Motocross Madness, v 1.0 NNTPNeed for Speed 3, Hot Pursuit Need for Speed, Porsche Net2PhoneOperation FlashPoint Outlaws POP-3PPTP PlayStation Network Quake 2Quake 3 Quake 4 Rainbow SixRealAudio Return to Castle Wolfenstein Roger WilcoRogue Spear SMTP SNMPSSH server ShoutCast Server SlingBoxSoldier of Fortune StarCraft StarLancer, v 1.0Starﬂeet Command TFTP TeamSpeakTelnet Tiberian Sun: Command and Con-querTimbuktuTotal Annihilation Ultima Online Unreal Tournament ServerUrban Assault, v 1.0 VNC, Virtual Network Computing Warlords BattlecryWarrock Westwood Online, Command and ConquerWin2000 Terminal ServerWolfenstein Enemy Territory World of Warcraft X-LiteXBox 360 Media Center XBox Live 360 Yahoo Messenger ChatYahoo Messenger Phone ZNES eDonkeyeMule eMule Plus iTunesmIRC Auth-IdentD mIRC Chat mIRC DCC - IRC DCCpcAnywhere (incoming)

Administrator’s Handbook58Link: IP PassthroughWhen you click the IP Passthrough button, the IP Passthrough page appears.IP PassthroughThe IP Passthrough feature allows a single PC on the LAN to have the Router’s public address assigned to it. It also provides PAT (NAPT) via the same public IP address for all other hosts on the private LAN subnet. Using IP Passthrough:◆The public WAN IP is used to provide IP address translation for private LAN computers.◆The public WAN IP is assigned and reused on a LAN computer.◆DHCP address serving can automatically serve the WAN IP address to a LAN computer.When DHCP is used for addressing the designated passthrough PC, the acquired or configured WAN address is passed to DHCP, which will dynamically configure a single-servable-address subnet, and reserve the address for the configured PC’s MAC address. This dynamic subnet configuration is based on the local and remote WAN address and subnet mask. If the WAN interface does not have a suitable subnet mask that is usable, for example when using PPP or PPPoE, the DHCP subnet configuration will default to a class C sub-net mask.◆The Passthrough DHCP Lease – By default, the passthrough host's DHCP leases will be shortened to two minutes. This allows for timely updates of the host's IP address, which will be a private IP address before the WAN connection is established. After the WAN connection is established and has an address, the passthrough host can renew its DHCP address binding to acquire the WAN IP address. You may alter this setting.◆Click Save. Changes take effect immediately.A restrictionSince both the Router and the passthrough host will use the same IP address, new sessions that conflict with existing sessions will be rejected by the Router. For example, suppose you are a teleworker using an IPSec tunnel from the Router and from the passthrough host. Both tunnels go to the same remote endpoint, such as the VPN access concentrator at your employer’s office. In this case, the first one to start the IPSec traffic will be allowed; the second one – since, from the WAN, it's indistinguishable – will fail.

Administrator’s Handbook60Link: Firewall AdvancedWhen you click the Firewall Advanced button the Firewall Advanced screen appears.All computer operating systems are vulnerable to attack from outside sources, typically at the operating system or Internet Protocol (IP) layers. Stateful Inspection firewalls intercept and analyze incoming data packets to deter-mine whether they should be admitted to your private LAN, based on multiple criteria, or blocked. Stateful inspec-tion improves security by tracking data packets over a period of time, examining incoming and outgoing packets. Outgoing packets that request specific types of incoming packets are tracked; only those incoming packets consti-tuting a proper response are allowed through the firewall.Stateful inspection is a security feature that prevents unsolicited inbound access when NAT is disabled. You can configure UDP and TCP “no-activity” periods that will also apply to NAT time-outs if stateful inspection is enabled on the interface. Stateful Inspection parameters are active on a WAN interface only if enabled on your Gateway. Stateful inspection can be enabled on a WAN interface whether NAT is enabled or not.DoS Protection – Denial-0f-Service attacks are common on the Internet, and can render an individual PC or a whole network practically unusable by consuming all its resources. Your Gateway includes default settings to block the most common types of DoS attacks. For special requirements or circumstances, a variety of additional blocking characteristics is offered. See the following table. If you make any changes here, click the Save button.Menu item FunctionDrop packets with invalid source or destination IP addressWhether packets with invalid source or destination IP address(es) are to be droppedProtect against port scan Whether to detect and drop port scans.Drop packets with unknown ether typesWhether packets with unknown ether types are to be droppedDrop packets with invalid TCP ﬂags Whether packets with invalid TCP flag settings (NULL, FIN, Xmas, etc.) should be droppedDetect and drop packet ﬂoods Whether packet flooding should be detected and offending packets be droppedFlood limit (packets per second) Specifies the number limit of packets per second before dropping the remainder.Flood burst limit (maximum num-ber of packets in a burst)Specifies the number limit of packets in a single burst before dropping the remainder.

61DiagnosticsWhen you click the Diagnostics tab, the Troubleshoot page appears.This automated multi-layer test examines the functionality of the Router from the physical connections to the data traffic being sent by users through the Router.You can run all the tests in order by clicking the Run Full Diagnostics button.The modem will automatically test a number of components to determine any problems. You can see detailed results of the tests by clicking the Details buttons for each item.

Administrator’s Handbook62Here is an example of the Ethernet Details screen.Test Internet Access These tests send a PING from the modem to either the LAN or WAN to verify connectivity. A PING could be either an IP address (163.176.4.32) or Domain Name (www.motorola.com). You enter a web address URL or an IP address in the respective field and Select your Preferred protocol radio button, IPv4 or IPv6.Click the Ping, Trace, or Lookup button. Results will be displayed in the Progress Window as they are generated.◆Ping - tests the “reachability” of a particular network destination by sending an ICMP echo request and waiting for a reply.◆Traceroute - displays the path to a destination by showing the number of hops and the router addresses of these hops.◆NSLookup - converts a domain name to its IP address and vice versa.To use the Ping capability, type a destination address (domain name or IP address) in the text box and click the Ping, Trace, or Lookup button. The results are displayed in the Progress Window.This sequence of tests takes approximately one minute to generate results. Please wait for the test to run to com-pletion.Each test generates one of the following result codes:Result Meaning* PASS: The test was successful.* FAIL: The test was unsuccessful.* SKIPPED: The test was skipped because a test on which it depended failed.* PENDING: The test timed out without producing a result. Try running the test again.* WARNING: The test was unsuccessful. The Service Provider equipment your Modem connects to may not support this test.

63Below are some specific tests:Action If PING fails, possible causes are:From the Check Connection page:Ping the internet default gateway IP address DSL is down, DSL or ATM settings are incorrect; Gateway’s IP address or subnet mask are wrong; gateway router is down.Ping an internet site by IP address Site is down.Ping an internet site by name Servers are down; site is down.From a LAN PC:Ping the Modem’s LAN IP address IP address and subnet mask of PC are not on the same scheme as the Modem; cabling or other con-nectivity issue.Ping an internet site by IP address PC's subnet mask may be incorrect, site is down.Ping an internet site by name DNS is not properly configured on the PC, site is down.

Administrator’s Handbook64Link: LogsWhen you click Logs, the Logs page appears.The current status of the Router is displayed for all logs.◆You can clear all log entries by clicking the Clear Log button.◆You can save logs to a text (.TXT) file by clicking the Save to File button. This will download the file to your browser’s default download location on your hard drive. The file can be opened with your favorite text editor.☛ Note: Some browsers, such as Internet Explorer for Windows XP, require that you specify the Motorola® Gateway’s URL as a “Trusted site” in “Internet Options: Security”. This is necessary to allow the “download” of the log text file to the PC.

65The following is an example log portion saved as a .TXT file:P0000-00-00T00:00:08 L6 sdb[306]: log buffer size set to 8192P0000-00-00T00:00:08 L7 sdb[306]: libmotopia: Closing /dev/motopiaP0000-00-00T00:00:08 L7 sdb[306]: Loading platform module bcm_enetP0000-00-00T00:00:08 L6 sdb[306]: SSL CA-root-cert directory is ready.P0000-00-00T00:00:08 L6 sdb[306]: Hardware is 'NVG510'P0000-00-00T00:00:09 L6 sdb[306]: S/N 157978490448, SKU 64P0000-00-00T00:00:12 L5 sdb[306]: Wireless subsystem foundP0000-00-00T00:00:15 L5 sdb[306]: VOIP subsystem foundP0000-00-00T00:00:15 L7 sdb[306]: nm_add_supp1x entrypointP0000-00-00T00:00:15 L7 sdb[306]: netfilter: redirect object not found. skip prerouting rulesP0000-00-00T00:00:17 L3 sdb[306]: scheduler: no ntp objectP0000-00-00T00:00:17 L6 sdb[306]: ip6.route[1]: Setting state from 'unset' to 'down'P0000-00-00T00:00:18 L5 sdb[306]: skip authorization-delay timer. not defaultedP0000-00-00T00:00:18 L3 sdb[306]: ELAN: Error creating 'enet' 'power-save' object: Item not foundP0000-00-00T00:00:18 L7 sdb[306]: Wi-Fi: Taking down phy.wl80211 interface wl0P0000-00-00T00:00:18 L6 sdb[306]: Wi-Fi: Adding wireless port ssid-1 (wl0)P0000-00-00T00:00:18 L6 sdb[306]: Wi-Fi: Adding wireless port ssid-2 (wl0.1)P0000-00-00T00:00:18 L6 sdb[306]: Wi-Fi: Adding wireless port ssid-3 (wl0.2)P0000-00-00T00:00:18 L6 sdb[306]: Wi-Fi: Adding wireless port ssid-4 (wl0.3)P0000-00-00T00:00:18 L5 sdb[306]: DSL: EOC version 157978490448:NVG510:905012P0000-00-00T00:00:18 L7 sdb[306]: enabling vc[1]P0000-00-00T00:00:19 L5 sdb[306]: voipexe start returned ret=0 P0000-00-00T00:00:19 L5 sdb[306]: skip authorization-delay timer. not defaultedP0000-00-00T00:00:19 L4 sdb[306]: Configured for IPDSLAM modeP0000-00-00T00:00:19 L3 sdb[306]: start[8024] end[8036]P0000-00-00T00:00:19 L6 sdb[306]: validate <basic> queue(1)P0000-00-00T00:00:19 L6 sdb[306]: validate <basic> queue(2)P0000-00-00T00:00:19 L6 sdb[306]: validate <basic> queue(3)P0000-00-00T00:00:19 L6 sdb[306]: validate <basic> queue(4)P0000-00-00T00:00:19 L6 sdb[306]: validate <basic> queue(5)P0000-00-00T00:00:19 L6 sdb[306]: validate <basic> queue(6)P0000-00-00T00:00:19 L6 sdb[306]: validate <priority> queue(7)P0000-00-00T00:00:19 L6 sdb[306]: ip6_set_proc: setting </proc/sys/net/ipv6/conf/all/disable_ipv6> to '1'P0000-00-00T00:00:19 L6 sdb[306]: ip6_set_proc: setting </proc/sys/net/ipv6/conf/default/disable_ipv6> to '1'P0000-00-00T00:00:19 L6 sdb[306]: ip6_set_proc: setting </proc/sys/net/ipv6/conf/all/forwarding> to '0'P0000-00-00T00:00:23 L7 sdb[306]: Wi-Fi: First apply - apply everythingP0000-00-00T00:00:23 L7 sdb[306]: Wi-Fi: NAS daemon not found, not killingP0000-00-00T00:00:23 L7 sdb[306]: Wi-Fi: Taking down phy.wl80211 interface wl0P0000-00-00T00:00:23 L7 sdb[306]: Wi-Fi: Bringing up phy.wl80211 interface wl0P0000-00-00T00:00:23 L6 sdb[306]: Wi-Fi: Starting autochannel scan...P0000-00-00T00:00:24 L7 sdb[306]: Wi-Fi: SIOCDEVPRIVATE ioctl cmd=215 failed: Bad ArgumentP0000-00-00T00:00:26 L6 sdb[306]: Wi-Fi: Autochannel found channel 11019P0000-00-00T00:00:26 L7 sdb[306]: Wi-Fi: Taking down phy.wl80211 interface wl0P0000-00-00T00:00:26 L7 sdb[306]: Wi-Fi: Bringing up phy.wl80211 interface wl0P0000-00-00T00:00:26 L7 sdb[306]: Wi-Fi: Setting kernel ip link wl0 to upP0000-00-00T00:00:26 L7 sdb[306]: Wi-Fi: Setting kernel ip link wl0.1 to downP0000-00-00T00:00:26 L7 sdb[306]: Wi-Fi: Setting kernel ip link wl0.2 to downP0000-00-00T00:00:26 L7 sdb[306]: Wi-Fi: Setting kernel ip link wl0.3 to downP0000-00-00T00:00:26 L6 sdb[306]: Wi-Fi: EAPD daemon started (pid: 1030)P0000-00-00T00:00:26 L6 sdb[306]: Wi-Fi: NAS daemon started, bringing up phy.wl80211.ssid[1]P0000-00-00T00:00:26 L7 sdb[306]: Port ssid-1 sending UP eventP0000-00-00T00:00:26 L6 sdb[306]: DSL: Vectoring function is not supported.P0000-00-00T00:00:26 L6 sdb[306]: DSL: Warning: PTM only.P0000-00-00T00:00:27 L6 sdb[306]: DSL: set the NLNM Threshold value...

Administrator’s Handbook66Link: Manual UpdateWhen you click Manual Update, the Manual Update page appears.Operating System Software is what makes your Gateway run and occasionally it needs to be updated. Your Cur-rent version is displayed at the top of the page.To update your software from a file on your PC, you must first download the software from your Service Provider's Support Site to your PC's hard drive.◆Browse your computer for the operating system file you downloaded.◆Click the Update button.◆The installation may take a few minutes; wait for it to complete. You will be prompted to restart the Gateway.◆Restart your Gateway. A counter will countdown 3 times before returning you to home. Your new operating system will then be running.

67Link: ResetsIn some cases, you may need to clear all the configuration settings and start over again to program the Motorola® Gateway. You can perform a factory reset to do this.It might also be useful to reset your connection to the Internet without deleting all of your configuration settings.◆Click the Reset Device button to reset the Gateway back to its original factory default settings. You will be prompted to make sure you want to do this.◆Click the Reset Connection button to disconnect and reconnect all of your connections, including your VoIP phones.☛ NOTE:Exercise caution before performing a Factory Reset. This will erase any configuration changes that you may have made and allow you to reprogram your Gateway.

69CHAPTER 3 Basic TroubleshootingThis section gives some simple suggestions for troubleshooting problems with your Gateway’s initial configura-tion.Before troubleshooting, make sure you have◆read the User Manual;◆plugged in all the necessary cables; and◆set your PC’s TCP/IP controls to obtain an IP address automatically.

Administrator’s Handbook70Status Indicator LightsThe first step in troubleshooting is to check the status indicator lights (LEDs) in the order outlined below.Motorola® Gateway NVG510 status indicator lightsLED ActionPowerSolid Green = The device is powered.Flashing Green = A Power-On Self-Test (POST) is in progressFlashing Red = A POST failure (not bootable) or device malfunction occurred.* When the device encounters a POST failure, all indicator lights on the front of the device continuously flash.Off = The unit has no AC power.EthernetSolid Green = Powered device connected to the associated port (includes devices with wake-on-LAN capability where a slight voltage is supplied to the Ethernet connection).Flickering Green = Activity seen from devices associated with the port. The flickering of the light is synchronized to actual data traffic.Off = The device is not powered, no cable or no powered devices connected to the associ-ated ports.WirelessSolid Green = WIFI is powered.Flickering Green = Activity seen from devices connected via WIFI. The flickering of the light is synchronized to actual data traffic.Off = The device is not powered or no powered devices connected to the associated ports.Wi-Fi SetupFlickering Green = Indicates when WPS is broadcasting.Off = not in use, not broadcasting.BroadbandSolid Green = Good broadband connection (i.e., good DSL Sync).Flashing Green = Attempting broadband connection (i.e., DSL attempting sync).Flashing Green & Red = If the broadband connection fails to be established for more than three consecutive minutes the LED switches to Flashing Green when attempting or waiting to establish a broadband connection alternating with a five second steady Red. This pattern continues until the broadband connection is successfully established.Flashing Red = No DSL signal on the line. This is only used when there is no signal, not dur-ing times of temporary ‘no tone’ during the training sequence.Off = The device is not powered.PowerEthernetSide ViewWirelessBroadbandServicePhone 1Phone 2Wi-Fi Setup

71Motorola® Gateway NVG510 Rear ViewServiceSolid Green = IP connected (The device has a WAN IP address from DHCP or 802.1x authentication and the broadband connection is up). Flashing Green = Attempting PPP connection. Attempting IEEE 802.1X authentication or attempting to obtain DHCP information.Red = Device attempted to become IP connected and failed (no DHCP response, no PPPoE response, 802.1x authentication failed, no IP address from IPCP, etc.). The Red state times out after two minutes and the Service indicator light returns to the Off state. Off = The device is not powered or the broadband connection is not present.Phone 1, 2Solid Green = The associated VoIP line has been registered with a SIP proxy server.Flashing Green = Indicates a telephone is off-hook on the associated VoIP line.Off = VoIP not in use, line not registered or Gateway power off.LED ActionFactory Reset SwitchDC Power PortWPS PushbuttonEthernet PortsPhone Port(use splitter for2 phones)DSL Port

Administrator’s Handbook72LED Function Summary MatrixPowerSolid Green = The device is powered.Flashing Green = A Power-On Self-Test (POST) is in progressFlashing Red = A POST fail-ure (not boota-ble) or device malfunction occurred.* When the device encoun-ters a POST failure, all indi-cator lights on the front of the device continu-ously flash.Off = The unit has no AC power.EthernetSolid Green = Powered device con-nected to the associated port (includes devices with wake-on-LAN capability where a slight voltage is sup-plied to the Ethernet con-nection).Flashing Green = Activ-ity seen from devices associ-ated with the port. The flick-ering of the light is synchro-nized to actual data traffic.Off = The device is not powered, no cable or no powered devices con-nected to the associated ports.WirelessSolid Green = WIFI is pow-ered.Flashing Green = Activ-ity seen from devices con-nected via WIFI. The flick-ering of the light is synchro-nized to actual data traffic.Off = The device is not powered or no powered devices con-nected to the associated ports.Phone 1, 2Solid Green = The associated VoIP line has been regis-tered with a SIP proxy server.Flashing Green = Indi-cates a tele-phone is off-hook on the associated VoIP line.Off = VoIP not in use, line not registered or Gateway power off.WPSFlashing Green = Indi-cates when WPS is broad-casting.Off = not in use, not broad-casting.

73BroadbandSolid Green = Good broad-band connec-tion (i.e., good DSL Sync).Flashing Green = Attempting broadband con-nection (i.e., DSL attempt-ing sync).Flashing Green & Red = If the broad-band connec-tion fails to be established for more than three consecutive minutes the LED switches to Flashing Green when attempting or waiting to establish a broadband con-nection alter-nating with a five second steady Red. This pattern continues until the broadband connection is successfully established.Flashing Red = No DSL sig-nal on the line. This is only used when there is no sig-nal, not during times of tempo-rary ‘no tone’ during the train-ing sequence.Off = The device is not powered.ServiceSolid Green = IP connected (The device has a WAN IP address from DHCP or 802.1x authen-tication and the broadband con-nection is up).Flashing Green = Attempting PPP connection. Attempting IEEE 802.1X authentication or attempting to obtain DHCP information.Red = Device attempted to become IP con-nected and failed (no DHCP response, no PPPoE response, 802.1x authen-tication failed, no IP address from IPCP, etc.). The Red state times out after two min-utes and the Service indica-tor light returns to the Off state.Off = The device is not powered or the broadband con-nection is not present.

Administrator’s Handbook74If a status indicator light does not look correct, look for these possible problems: If LED is not Lit Possible problemsPower◆Make sure the power adapter is plugged into the DSL Modem properly.◆Try a known good wall outlet.◆If a power strip is used, make sure it is switched on.Broadband◆Make sure that any telephone has a microfilter installed.◆Make sure that you are using the correct cable. The DSL cable is the thinner stan-dard telephone cable and labeled “Data Cable.”◆Make sure the DSL cable is plugged into the correct wall jack.◆Make sure the DSL cable is plugged into the DSL port on the DSL Modem.◆Make sure the DSL line has been activated at the central office DSLAM.◆Make sure the DSL Modem is not plugged into a micro filter.Ethernet◆Make sure the you are using the yellow Ethernet cable, not the DSL cable. The Ethernet cable is thicker than the standard telephone cable.◆Make sure the Ethernet cable is securely plugged into the Ethernet jack on the PC.◆Make sure the Ethernet cable is securely plugged into the Ethernet port on the DSL Modem.◆Make sure you have Ethernet drivers installed on the PC.◆Make sure the PC’s TCP/IP Properties for the Ethernet Network Control Panel is set to obtain an IP address via DHCP.◆Make sure the PC has obtained an address in the 192.168.1.x range. (You may have changed the subnet addressing.)◆Make sure the PC is configured to access the Internet over a LAN.◆Disable any installed network devices (Ethernet, HomePNA, wireless) that are not being used to connect to the DSL Modem.

75Factory Reset SwitchLose your Access Code? This section shows how to reset the Motorola® Gateway so that you can access the configuration screens once again.☛ NOTE: Keep in mind that all of your settings will need to be reconfigured.If you don't have an Access Code, the only way to access the Motorola® Gateway is the following: 1. Referring to the diagram below, find the round Reset Switch opening. 2. Carefully insert the point of a pen or an unwound paperclip into the opening.◆If you press the factory reset button for less than ten (10) seconds, the device will be rebooted.The indicator lights on the device will respond immediately and start blinking red within one (1) second of the reset button being pressed. This will occur independent of the fact that the button is still being pressed or has been released. The indicator lights will flash for a minimum of five seconds, even if the reset button is released prior to five seconds after it has been depressed. If the reset button is held for more than 5 seconds, then it will continue to flash until released or until 10 seconds (see below).◆If you press the factory reset button for a longer period of time, the device will be reset to the factory default shipped settings.If the button is held for ten seconds, the Power indicator continues to flash, for an additional 5 seconds and then the indicator lights will return to their normal operating mode, independent of whether or not the reset but-ton is still depressed.Factory Reset Switch: Push to clear all settings

77CHAPTER 4 Command Line InterfaceThe Motorola Gateway operating software includes a command line interface (CLI) that lets you access your Motorola Gateway over a telnet connection. You can use the command line interface to enter and update the unit’s configuration settings, monitor its performance, and restart it.This chapter covers the following topics:◆“Overview” on page 79◆“Starting and Ending a CLI Session” on page 81◆“Using the CLI Help Facility” on page 81◆“About SHELL Commands” on page 82◆“SHELL Commands” on page 83◆“About CONFIG Commands” on page 92◆“CONFIG Commands” on page 95◆“Debug Commands” on page 132CONFIG Commands“Connection commands” on page 95“Filterset commands” on page 96“Queue commands” on page 100“IP Gateway commands” on page 101“IPv6 Commands” on page 101“IP DNS commands” on page 106“IP IGMP commands” on page 107“NTP commands” on page 109“Application Layer Gateway (ALG) commands” on page 110“Dynamic DNS Commands” on page 110“Link commands” on page 111“Management commands” on page 113“Remote access commands” on page 115“Physical interfaces commands” on page 117“PPPoE relay commands” on page 120“NAT Pinhole commands” on page 121“Security Stateful Packet Inspection (SPI) commands” on page 121

Administrator’s Handbook78“VoIP commands” on page 122“System commands” on page 130CONFIG Commands

79OverviewThe CLI has two major command modes: SHELL and CONFIG. Summary tables that list the commands are pro-vided below. Details of the entire command set follow in this section.SHELL CommandsCommand Status and/or Descriptionarp to send ARP requestatmping to send ATM OAM loopbackclear to erase all stored configuration informationclear_certificate to remove an SSL certificate that has been installedclear_log to erase all stored log info in flash memoryconfigure to configure unit's optionsdiagnose to run self-testdownload to download config fileexit to quit this shellhelp to get more: “help all” or “help help”install to download and program an image into flashlog to add a message to the diagnostic logloglevel to report or change diagnostic log levelnetstat to show IP informationnslookup to send DNS query for hostping to send ICMP Echo requestquit to quit this shellreset to reset subsystemsrestart to restart unitshow to show system informationstart to start subsystemstatus to show basic status of unittelnet to telnet to a remote hosttraceroute to send traceroute probesupload to upload config fileview to show configuration informationwho to show who is using the shell

Administrator’s Handbook80CONFIG CommandsCommand Verbs Status and/or Descriptiondelete Delete configuration list datahelp Help command optionsave Save configuration data script Print configuration dataset Set configuration datavalidate Validate configuration settingsview View configuration dataKeywordsconn Connection optionsip TCP/IP protocol optionsdns Domain Name System optionsigmp IGMP configuration optionsntp Network Time Protocol optionsgateway Gateway optionslink WAN link optionsmgmt System management optionsphy Physical interface optionsdsl DSL configuration optionsenet Ethernet optionspinhole Pinhole optionssystem Gateway’s system optionslog System activity logging optionsCommand Utilitiestop Go to top level of configuration modequit Exit from configuration mode; return to shell modeexit Exit from configuration mode; return to shell mode

81Starting and Ending a CLI SessionOpen a telnet connection from a workstation on your network.You initiate a telnet connection by issuing the following command from an IP host that supports telnet, for exam-ple, a personal computer running a telnet application such as NCSA Telnet.telnet <ip_address>You must know the IP address of the Motorola Gateway before you can make a telnet connection to it. By default, your Motorola Gateway uses 192.168.1.254 as the IP address for its LAN interface. You can use a Web browser to configure the Motorola Gateway IP address.Logging InThe command line interface log-in process emulates the log-in process for a UNIX host. To logon, enter the user-name and your password.Entering the administrator password lets you display and update all Motorola Gateway settings. When you have logged in successfully, the command line interface lists the username and the security level asso-ciated with the password you entered in the diagnostic log.Ending a CLI SessionYou end a command line interface session by typing quit from the SHELL node of the command line interface hierarchy.Using the CLI Help FacilityThe help command lets you display on-line help for SHELL and CONFIG commands. To display a list of the com-mands available to you from your current location within the command line interface hierarchy, enter help or type a question mark (?).To obtain help for a specific CLI command, type help <command>. You can truncate the help command to h or a question mark when you request help for a CLI command.

Administrator’s Handbook82About SHELL CommandsYou begin in SHELL mode when you start a CLI session. SHELL mode lets you perform the following tasks with your Motorola Gateway: ◆Monitor its performance ◆Display and reset Gateway statistics◆Issue administrative commands to restart Motorola Gateway functions SHELL PromptWhen you are in SHELL mode, the CLI prompt is the name of the Motorola Gateway followed by a right angle bracket (>). For example, if you open a CLI connection to the Motorola Gateway named “Motorola-3000/9437188,” you would see Motorola-3000/9437188> as your CLI prompt.SHELL Command ShortcutsYou can truncate most commands in the CLI to their shortest unique string. For example, you can use the trun-cated command q in place of the full quit command to exit the CLI. However, you would need to enter rese for the reset command, since the first characters of reset are common to the restart command.The only commands you cannot truncate are restart and clear. To prevent accidental interruption of communi-cations, you must enter the restart and clear commands in their entirety.You can use the Up and Down arrow keys to scroll backward and forward through recent commands you have entered. Alternatively, you can use the !! command to repeat the last command you entered.

83SHELL CommandsCommon Commandsarp nnn.nnn.nnn.nnnSends an Address Resolution Protocol (ARP) request to match the nnn.nnn.nnn.nnn IP address to an Ethernet hardware address.clear [ yes ]Clears the configuration settings in a Motorola Gateway. You are prompted to confirm the clear command by entering yes.clear_certificateRemoves an SSL certificate that has been installed.configurePuts the command line interface into Configure mode, which lets you configure your Motorola Gateway with Con-fig commands. Config commands are described starting on page 95. download [ server_address ] [ filename ] [ confirm ]This command installs a file of configuration parameters into the Motorola Gateway from a TFTP (Trivial File Transfer Protocol) server. The TFTP server must be accessible on your Ethernet network.You can include one or more of the following arguments with the download command. If you omit arguments, the console prompts you for this information.◆The server_address argument identifies the IP address of the TFTP server from which you want to copy the Motorola Gateway configuration file. ◆The filename argument identifies the path and name of the configuration file on the TFTP server. ◆If you include the optional conﬁrm keyword, the download begins as soon as all information is entered.You can also download an SSL certificate file from a trusted Certification Authority (CA), on platforms that support SSL, as follows:download [-cert] [server_address ] [filename] [confirm]install [ server_address ] [ filename ] [ confirm ]Downloads a new version of the Motorola Gateway operating software from a TFTP (Trivial File Transfer Protocol) server, validates the software image, and programs the image into the Motorola Gateway memory. After you install new operating software, you must restart the Motorola Gateway.The server_address argument identifies the IP address of the TFTP server on which your Motorola Gateway operating software is stored. The filename argument identifies the path and name of the operating software file on the TFTP server.If you include the optional keyword confirm, you will not be prompted to confirm whether or not you want to per-form the operation.

Administrator’s Handbook84log message_stringAdds the message in the message_string argument to the Motorola Gateway diagnostic log.loglevel [ level ] Displays or modifies the types of log messages you want the Motorola Gateway to record. If you enter the loglevel command without the optional level argument, the command line interface displays the current log level setting. You can enter the loglevel command with the level argument to specify the types of diagnostic messages you want to record. All messages with a level number equal to or greater than the level you specify are recorded. For example, if you specify loglevel 3, the diagnostic log will retain high-level informational messages (level 3), warnings (level 4), and failure messages (level 5).Use the following values for the level argument:◆1 or low – Low-level informational messages or greater; includes trivial status messages.◆2 or medium – Medium-level informational messages or greater; includes status messages that can help monitor network traffic.◆3 or high – High-level informational messages or greater; includes status messages that may be significant but do not constitute errors.◆4 or warning – Warnings or greater; includes recoverable error conditions and useful operator informa-tion.◆5 or failure – Failures; includes messages describing error conditions that may not be recoverable. netstat -i Displays the IP interfaces for your Motorola Gateway.netstat -r Displays the IP routes stored in your Motorola Gateway.nslookup [ hostname | ip_address ]Performs a domain name system lookup for a specified host.◆The hostname argument is the name of the host for which you want DNS information; for example, nslookup klaatu.◆The ip_address argument is the IP address, in dotted decimal notation, of the device for which you want DNS information.ping [-s size] [-c count ] [ hostname | ip_address ]Causes the Motorola Gateway to issue a series of ICMP Echo requests for the device with the specified name or IP address. ◆The hostname argument is the name of the device you want to ping; for example, ping ftp.motorola.com.◆The ip_address argument is the IP address, in dotted decimal notation, of the device you want to locate. If a host using the specified name or IP address is active, it returns one or more ICMP Echo replies, confirming that it is accessible from your network.◆The -s size argument lets you specify the size of the ICMP packet.◆The -c count argument lets you specify the number of ICMP packets generated for the ping request. Values greater than 250 are truncated to 250.

85You can use the ping command to determine whether a hostname or IP address is already in use on your net-work. You cannot use the ping command to ping the Motorola Gateway’s own IP address.quit Exits the Motorola Gateway command line interface.reset arp Clears the Address Resolution Protocol (ARP) cache on your unit.reset crash Clears crash-dump information, which identifies the contents of the Motorola Gateway registers at the point of sys-tem malfunction.reset dhcp serverClears the DHCP lease table in the Motorola Gateway.reset enet [ all ]Resets Ethernet statistics to zero. Resets individual LAN switch port statistics as well as wireless and WAN Ether-net statistics (where applicable).reset firewall-logRewinds the firewall log to the first entry.reset ipmapClears the IPMap table (NAT).reset logRewinds the diagnostic log display to the top of the existing Motorola Gateway diagnostic log. The reset log command does not clear the diagnostic log. The next show log command will display information from the beginning of the log file.reset wanThis function resets WAN interface statistics.reset wepkeysThis function allows you to force your wireless WEP key settings back to the default values, if there are default val-ues. For example, on some models, the WEP keys are based on the serial number. This allows you to get back those default settings if you have changed them without the need to reset the entire configuration of the unit.restart [ seconds ]Restarts your Motorola Gateway. If you include the optional seconds argument, your Motorola Gateway will restart when the specified number of seconds have elapsed. You must enter the complete restart command to initiate a restart.

Administrator’s Handbook86show all-infoDisplays all settings currently configured in the Motorola Gateway.show bridge interfacesDisplays bridge interfaces maintained by the Motorola Gateway.show bridge tableDisplays the bridging table maintained by the Motorola Gateway.show configDumps the Motorola Gateway’s configuration script just as the script command does in config mode.show crashDisplays the most recent crash information, if any, for your Motorola Gateway.show daylight-savingsDisplays the auto-daylight savings time settings information.show dhcp agentDisplays DHCP relay-agent leases.show dhcp server leasesDisplays the DHCP leases stored in RAM by your Motorola Gateway.show diffservDisplays the Differentiated Services and QoS values configured in the Motorola Gateway.show dslf device-associationDisplays LAN devices that conform with the TR111 Gateway requirement. It displays - IP Address, Manufacture OUI and Serial number.show enet [ all ]Displays Ethernet interface statistics maintained by the Motorola Gateway. Supports display of individual LAN switch port statistics as well as WAN Ethernet statistics (where applicable).Example:Ethernet driver full statistics - 10/100 EthernetPort Status: Link upType: 100BASET Duplex: FullGeneral: Transmit OK : 434 Receive OK : 267

87 Tx Errors : 0 Rx Errors : 0Receiver: Incompl Packet Errors : 0 No RBD's For Packet : 0 Carrier Sense Lost : 0 Deferred Replen : 0Transmitter: TX Retries : 0 Single Collisions : 0 No Buf For Packet : 0Upper Layers: Rx No Handler : 0 Rx No Message : 0 Rx Octets : 30773 Rx Unicast Pkts : 267 Rx Multicast Pkts : 0 Tx Discards : 0 Tx Octets : 31692 10/100 Ethernet phy.enet.portPort Status: Link upDuplex: Full-duplex active Speed: 100BASE-T Transmit OK : 434 Transmit unicastpkts : NA Receive OK : 267 Receive unicastpkts : 267show group-mgmtDisplays the IGMP Snooping Table. See “IP IGMP commands” on page 107 for detailed explanation.show ip arpDisplays the Ethernet address resolution table stored in your Motorola Gateway.show ip igmpDisplays the contents of the IGMP Group Address table and the IGMP Report table maintained by your Motorola Gateway.show ip interfacesDisplays the IP interfaces for your Motorola Gateway.show ip firewallDisplays firewall statistics.

Administrator’s Handbook88show ip lan-discoveryDisplays the LAN Host Discovery Table of hosts on the wired or wireless LAN, and whether or not they are cur-rently online.show ip routesDisplays the IP routes stored in your Motorola Gateway.show ipmapDisplays IPMap table (NAT).6rd-check 6rd_ip_v6_conn_nameSends out 6rd loopback packets to the 6rd BG. Verifies 6rd connectivity to the 6rd BGshow ipv6 interfacesDisplay IPv6 interfaces.show ipv6 routesDisplay IPv6 route table.show ipv6 neighborsDisplay IPv6 neighbor table.show ipv6 dhcp server leasesDisplay DHCPv6 server lease table.show ipv6 statisticsDisplay IPv6 statistics information.show logDisplays blocks of information from the Motorola Gateway diagnostic log. To see the entire log, you can repeat the show log command or you can enter show log all.show memory [ all ]Displays memory usage information for your Motorola Gateway. If you include the optional all argument, your Motorola Gateway will display a more detailed set of memory statistics.show pppoeDisplays status information for each PPPoE socket, such as the socket state, service names, and host ID values.show rootcert [ all | supplicant | openssl ]Dumps the Subject line for the list of all the trusted root certificates for the supplicant, which is currently a superset of the OpenSSL trusted root certificates.

89This syntax is for the 802.1x-supplicant-supported builds only. The openssl trust list is used in all TLS/SSL situa-tions except the 802.1X supplicant.The default, if you don't append a qualifier, is all. all will show both 802.1x supplicant and openssl trust list root certs; supplicant will show the supplicant trust list root certs; openssl will show openssl trust list root certsshow rtspDisplays RTSP ALG session activity data.show statusDisplays the current status of a Motorola Gateway, the device's hardware and software revision levels, a summary of errors encountered, and the length of time the Motorola Gateway has been running since it was last restarted. Identical to the status command.show summaryDisplays a summary of WAN, LAN, and Gateway information.show vlanDisplays detail of VLAN status and statistics.show wireless [ all ]Shows wireless status and statistics.show wireless clients [ MAC_address ]Displays details on connected clients, or more details on a particular client if the MAC address is added as an argument.telnet [ hostname | ip_address ] [ port ]Lets you open a telnet connection to the specified host through your Motorola Gateway.◆The hostname argument is the name of the device to which you want to connect; for example, telnet ftp.Motorola.com.◆The ip_address argument is the IP address, in dotted decimal notation, of the device to which you want to connect.◆The port argument is the number of t he port over which you want to open a telnet session.traceroute ( ip_address | hostname )Traces the routing path to an IP destination.upload [ server_address ] [ filename ] [ confirm ]Copies the current configuration settings of the Gateway to a TFTP (Trivial File Transfer Protocol) server. The TFTP server must be accessible on your Ethernet network. The server_address argument identifies the IP address of the TFTP server on which you want to store the Motorola Gateway settings. The filename argu-ment identifies the path and name of the configuration file on the TFTP server. If you include the optional con-firm keyword, you will not be prompted to confirm whether or not you want to perform the operation.

Administrator’s Handbook90view configDumps the Motorola Gateway’s configuration just as the view command does in config mode.who Displays the names of the current shell and PPP users. WAN Commandsatmping vccn [ segment | end-to-end ]Lets you check the ATM connection reachability and network connectivity. This command sends five Operations, Administration, and Maintenance (OAM) loopback calls to the specified vpi/vci destination. There is a five second total timeout interval.Use the segment argument to ping a neighbor switch.Use the end-to-end argument to ping a remote end node.reset dhcp client release [ vcc-id ]Releases the DHCP lease the Motorola Gateway is currently using to acquire the IP settings for the specified DSL port. The vcc-id identifier is an “index” letter in the range B-I, and does not directly map to the VCC in use. Enter the reset dhcp client release command without the variable to see the letter assigned to each virtual circuit.reset dhcp client renew [ vcc-id ]Renews the DHCP lease the Motorola Gateway is currently using to acquire the IP settings for the specified DSL port. The vcc-id identifier is an “index” letter in the range B-I, and does not directly map to the VCC in use. Enter the reset dhcp client release without the variable to see the letter assigned to each virtual circuit.reset dslResets any open DSL connection.reset ppp vccnResets the point-to-point connection over the specified virtual circuit. This command only applies to virtual circuits that use PPP framing.show atm [all]Displays ATM statistics for the Motorola Gateway. The optional all argument displays a more detailed set of ATM statistics.show dsl [ all ]Displays DSL port statistics, such as upstream and downstream connection rates and noise levels.

91show ppp [{ stats | lcp | ipcp }]Displays information about open PPP links. You can display a subset of the PPP statistics by including an optional stats, lcp, or ipcp argument for the show ppp command.start ppp vccnOpens a PPP link on the specified virtual circuit.

Administrator’s Handbook92About CONFIG CommandsYou reach the configuration mode of the command line interface by typing conﬁgure (or any truncation of con-ﬁgure, such as con or conﬁg) at the CLI SHELL prompt.CONFIG Mode PromptWhen you are in CONFIG mode, the CLI prompt consists of the name of the Motorola Gateway followed by your current node in the hierarchy and two right angle brackets (>>). For example, when you enter CONFIG mode (by typing conﬁg at the SHELL prompt), the Motorola-3000/9437188 (top)>> prompt reminds you that you are at the top of the CONFIG hierarchy. If you move to the ip node in the CONFIG hierarchy (by typing ip at the CONFIG prompt), the prompt changes to Motorola-3000/9437188 (ip)>> to identify your current location.Some CLI commands are not available until certain conditions are met. For example, you must enable IP for an interface before you can enter IP settings for that interface.Navigating the CONFIG Hierarchy◆Moving from CONFIG to SHELL — You can navigate from anywhere in the CONFIG hierarchy back to the SHELL level by entering quit at the CONFIG prompt and pressing Return. Motorola-3000/9437188 (top)>> quitMotorola-3000/9437188 >◆Moving from top to a subnode — You can navigate from the top node to a subnode by entering the node name (or the significant letters of the node name) at the CONFIG prompt and pressing RETURN. For example, you move to the IP subnode by entering ip and pressing RETURN.Motorola-3000/9437188 (top)>> ipMotorola-3000/9437188 (ip)>>As a shortcut, you can enter the significant letters of the node name in place of the full node name at the CONFIG prompt. The significant characters of a node name are the letters that uniquely identify the node. For example, since no other CONFIG node starts with b, you could enter one letter (“b”) to move to the bridge node.◆Jumping down several nodes at once — You can jump down several levels in the CONFIG hierarchy by entering the complete path to a node. ◆Moving up one node — You can move up through the CONFIG hierarchy one node at a time by entering the up command. ◆Jumping to the top node — You can jump to the top level from anywhere in the CONFIG hierarchy by enter-ing the top command. ◆Moving from one subnode to another — You can move from one subnode to another by entering a partial path that identifies how far back to climb.◆Moving from any subnode to any other subnode — You can move from any subnode to any other subnode by entering a partial path that starts with a top-level CONFIG command.◆Scrolling backward and forward through recent commands — You can use the Up and Down arrow keys to scroll backward and forward through recent commands you have entered. When the command you want appears, press Enter to execute it.Entering Commands in CONFIG ModeCONFIG commands consist of keywords and arguments. Keywords in a CONFIG command specify the action you want to take or the entity on which you want to act. Arguments in a CONFIG command specify the values appropriate to your site. For example, the CONFIG command

93set ip ethernet A ip_address consists of two keywords (ip, and ethernet A) and one argument (ip_address). When you use the com-mand to configure your Gateway, you would replace the argument with a value appropriate to your site.For example:set ip ethernet A 192.31.222.57Guidelines: CONFIG CommandsThe following table provides guidelines for entering and formatting CONFIG commands.If a command is ambiguous or miskeyed, the CLI prompts you to enter additional information. For example, you must specify which virtual circuit you are configuring when you are setting up a Motorola Gateway.Displaying Current Gateway SettingsYou can use the view command to display the current CONFIG settings for your Motorola Gateway. If you enter the view command at the top level of the CONFIG hierarchy, the CLI displays the settings for all enabled func-tions. If you enter the view command at an intermediate node, you see settings for that node and its subnodes.Step Mode: A CLI Configuration TechniqueThe Motorola Gateway command line interface includes a step mode to automate the process of entering configu-ration settings. When you use the CONFIG step mode, the command line interface prompts you for all required and optional information. You can then enter the configuration values appropriate for your site without having to enter complete CLI commands.When you are in step mode, the command line interface prompts you to enter required and optional settings. If a setting has a default value or a current setting, the command line interface displays the default value for the com-mand in parentheses. If a command has a limited number of acceptable values, those values are presented in brackets, with each value separated by a vertical line. For example, the following CLI step command indicates that the default value is off and that valid entries are limited to on and off.Command component Rules for entering CONFIG commandsCommand verbs CONFIG commands must start with a command verb (set, view, delete).You can truncate CONFIG verbs to three characters (set, vie, del).CONFIG verbs are case-insensitive. You can enter “SET,” “Set,” or “set.”Keywords Keywords are case-insensitive. You can enter “Ethernet,” “ETHERNET,” or “ethernet” as a keyword without changing its meaning.Keywords can be abbreviated to the length that they are differentiated from other key-words. Argument Text Text strings can be as many as 64 characters long, unless otherwise specified. In some cases they may be as long as 255 bytes.Special characters are represented using backslash notation.Text strings may be enclosed in double (“) or single (‘) quote marks. If the text string includes an embedded space, it must be enclosed in quotes.Special characters are represented using backslash notation.Numbers Enter numbers as integers, or in hexadecimal, where so noted.IP addresses Enter IP addresses in dotted decimal notation (0 to 255).

Administrator’s Handbook94option (off) [on | off]: onYou can accept the default value for a field by pressing the Return key. To use a different value, enter it and press Return.You can enter the CONFIG step mode by entering set from the top node of the CONFIG hierarchy. You can enter step mode for a particular service by entering set service_name. In stepping set mode (press Control-X <Return/Enter> to exit. For example:Motorola-3000/9437188 (top)>> set system...system name (“Motorola-3000/9437188”): Mycroft Diagnostic Level (High): mediumStepping mode ended.Validating Your ConfigurationYou can use the validate CONFIG command to make sure that your configuration settings have been entered correctly. If you use the validate command, the Motorola Gateway verifies that all required settings for all services are present and that settings are consistent.Motorola-3000/9437188 (top)>> validateError: Subnet mask is incorrectGlobal Validation did not pass inspection!You can use the validate command to verify your configuration settings at any time. Your Motorola Gateway automatically validates your configuration any time you save a modified configuration.

95CONFIG CommandsThis section describes the keywords and arguments for the various CONFIG commands.Connection commandsconns are used to create connections, for example, a WAN or LAN conn. There may be more than one of each depending on your model. names correspond to the system object IDs (OIDs) but you can name them yourself.set conn name name link-oid valueSets the connection named name to point to an associated link specified by the link-oid value.set conn name name type [ static | dhcpc ]Specifies whether the type of the connection named name is static or dhcpc.set conn name name side [ lan | wan ]Specifies whether this conn is LAN- or WAN-side. A conn can be either lan or wan.set conn name name dhcp-server-enable [ on | off ]Turns the DHCP server for this connection on or off. The DHCP server can be enabled per connection. The default is on.set conn name name mcast-forwarding [ off | on ]Turns IP IGMP multicast forwarding for this connection off or on. The default is off.set conn name name static ipaddr ipaddrSpecifies a static IP address when the connection type has been set to static. The default is 192.168.1.254set conn name name static netmask netmaskSpecifies a static netmask when the connection type has been set to static. The default is 255.255.255.0.set conn name name dhcp-server start-addr ipaddrIf dhcp-server-enable is set to on, specifies the first address in the DHCP address range. The Motorola Gateway can reserve a sequence of up to 253 IP addresses within a subnet, beginning with the specified address for dynamic assignment. The default is 192.168.1.64set conn name name dhcp-server end-addr ipaddrIf dhcp-server-enable is set to on, specifies the last address in the DHCP address range. The default is 192.168.1.253set conn name name dhcp-server lease-time secondsIf dhcp-server-enable is set to on, specifies the default length for DHCP leases issued by the Motorola Gateway. Lease time is in seconds. Default is 3600.

Administrator’s Handbook96set conn name name nat-enable [ on | off ]Specifies whether you want the Motorola Gateway to use network address translation (NAT) when communicating with remote Gateways. NAT lets you conceal details of your network from remote Gateways. It also permits all LAN devices to share a single IP address. By default, address NAT is turned on.set conn name name dhcp-client discover-time secondsThe DHCP client parameters appear when the connection type has been set to dhcpc. discover-time is in sec-onds; the default is 30.set conn name name dhcp-client dns-enable [ on | off ]This allows you to enable or disable the default behavior of acting as a DNS proxy. The default is on.set conn name name dhcp-client dns-override [ off | on ]This allows you to enable or disable overriding default DNS behavior. The default is off.set conn name name dhcp-client vendor-class stringThe vendor-class default information varies by model and components. This is information that identifies the unit.set conn name name fs-egress filterset_nameAttaches a user filterset to a conn which is applied to transmitted packets. See “Filterset commands” on page 96.set conn name name fs-ingress filterset_nameAttaches a user filterset to a conn which is applied to received packets. See “Filterset commands” on page 96.Filterset commandsFiltersets provide packet filtering and QoS configuration. Packets are identified by characteristics that allow QoS and forwarding decisions to be made. These characteristics can be at the MAC layer, IP layer, TCP | UDP | ICMP layer(s), or (in applicable circumstances) 802.1q/p (VLAN-tagging) layer.A maximum of 8 filtersets are supported. Each filterset can have up to 8 rules configured. A maximum 8 egress queues are supported. Each queue can have up to 8 entries.A filterset rule identifies packet attributes to match with its match parameters. It acts on these packets using its default action parameters.set filterset name filterset_name rule number order numberDetermines order of execution of filterset rules (1 before 2, etc).set filterset name filterset_name rule number match-eth-proto number Matches ethernet protocol field to the supplied value.set filterset name filterset_name rule number match-eth-length numberMatches ethernet length field to the supplied value.

$97set filterset name filterset_name rule number match-eth-p-bits numberMatches VLAN priority bits.set filterset name filterset_name rule number match-eth-vid numberMatches VLAN id number.set filterset name filterset_name rule number match-eth-src-mac-addr mac_addressMatches supplied source MAC address field.set filterset name filterset_name rule number match-eth-dst-mac-addr mac_addressMatches supplied destination MAC address field.set filterset name filterset_name rule number match-src-ip-addr ip_address_rangeMatches supplied value with packet's source ip address field.set filterset name filterset_name rule number match-dst-ip-addr ip_address_rangeMatches supplied value with packet's destination ip address field.set filterset name filterset_name rule number match-protocol protocol_stringMatches supplied value with packet's protocol field.set filterset name filterset_name rule number match-tos [ number | descriptive_value ]Matches tos field from numeric value 0-255; or one of the following descriptive values:Minimize-Delay (0x10)Maximize-Throughput (0x08)Maximize-Reliability (0x04)Minimize-Cost (0x02)Normal-Service (0x00)set filterset name filterset_name rule number match-dscp [ number | diffserv_class_string ]Matches diffserv class with supplied numerical value, which can be in decimal(ex: 32) or in Hex(ex: 0x20);Or match the supplied diffserv class. This value may be any of the BE, EF, AFxx or CSx classes. A full list is:{ "CS0", 0x00 }{ "CS1", 0x08 }{ "CS2", 0x10 }{ "CS3", 0x18 }{ "CS4", 0x20 }{ "CS5", 0x28 }{ "CS6", 0x30 }$

$Administrator’s Handbook98{ "CS7", 0x38 }{ "BE", 0x00 }{ "AF11", 0x0a }{ "AF12", 0x0c }{ "AF13", 0x0e }{ "AF21", 0x12 }{ "AF22", 0x14 }{ "AF23", 0x16 }{ "AF31", 0x1a }{ "AF32", 0x1c }{ "AF33", 0x1e }{ "AF41", 0x22 }{ "AF42", 0x24 }{ "AF43", 0x26 }{ "EF", 0x2e }set filterset name filterset_name rule number match-src-port number [ number ]Matches TCP|UDP source port field or port range.set filterset name filterset_name rule number match-dst-port number [ number ]Matches TCP|UDP destination port field or port range.set filterset name filterset_name rule number match-tcp-flags tcp_flag_stringMatches TCP flags in a packet. The flag string is comma-delimited.set filterset name filterset_name rule number match-pkt-length number [ number ]Matches packet length against value or range.set filterset name filterset_name rule number action forward [ pass | drop | reject ]Executes the named filterset’s default action: pass, drop, or reject.set filterset name filterset_name rule number action set-qos-marker qos_marker_stringTags the packet according to the queue marker name. See “Queue commands” on page 100.set filterset name filterset_name rule number action set-tos numberSets the packet tos field to the supplied value.set filterset name filterset_name rule number action set-dscp [ number | diffserv_class_string ]Sets the dscp field to the supplied value.set filterset name filterset_name rule number action set-eth-p-bits numberSets vlan priority bits to the supplied value.$