User manual MOTOROLA SVG2500 SURFBOARD DIGITAL VOICE WIRELESS GATEWAY

[. . . ] U S ER GU IDE SVG2500 SURFboard® Wireless Voice Gateway SAFETY AND REGULATORY INFORMATION IMPORTANT SAFETY INSTRUCTIONS -- when using your telephone equipment, basic safety precautions should always be followed to reduce the risk of fire, electric shock, and injury to persons, including the following: · Read all of the instructions listed here and/or in the user manual before you operate this device. This device must be installed and used in strict accordance with manufacturer's instructions as described in the user documentation that is included with the device. Observe all warning and caution symbols that are affixed to this device. To prevent fire or shock hazard, do not expose this device to rain or moisture. [. . . ] Note that you only need to enter the LSB (Least-significant byte) of the IP address; the upper bytes of the IP address are set automatically from the SVG2500 Configuration Manager's IP address. The Enabled option allows you to store filter settings commonly used but not have them active. Field Start Address Description Enter the starting IP address range of the computers for which you want to deny access to the SVG2500 WAN. Enter the ending IP address range of the computers you want to deny access to the SVG2500 WAN. Checkmark Enabled for each range of IP addresses you want to deny access to the SVG2500 WAN. End Address Enabled When done, click Apply to activate and save your settings. 76 6 SVG2500 ADVANCED PAGES Advanced MAC Filtering Page This page allows you to define Media Access Control (MAC) address filters to prevent PCs from sending outgoing TCP/UDP traffic to the WAN via their MAC addresses. This is useful because the MAC address of a specific NIC card never changes, unlike its IP address, which can be assigned via the DHCP server or hardcoded to various addresses over time. Field MAC xx Description Media Access Control address -- a unique set of 12 hexadecimal digits assigned to a PC during manufacturing Setting a MAC Address Filter 1. Enter the MAC address in the MAC xx field for each PC you want to block. When done, click Apply. 77 6 SVG2500 ADVANCED PAGES Advanced Port Filtering Page This page allows you to define port filters to prevent all devices from sending outgoing TCP/UDP traffic to the WAN on specific IP port numbers. By specifying a starting and ending port range, you can determine what TCP/UDP traffic is allowed out to the WAN on a per-port basis. Note: The specified port ranges are blocked for ALL PCs, and this setting is not IP address or MAC address specific. For example, if you wanted to block all PCs on the private LAN from accessing HTTP sites (or "web surfing"), you would set the "Start Port" to 80, "End Port" to 80, "Protocol" to TCP checkmark Enabled, and then click , Apply. Field Start Port End Port Protocol Enabled Description Enter the starting port number. Select TCP, UDP, or Both Checkmark for each port that you want to activate the IP port filters. 78 6 SVG2500 ADVANCED PAGES Advanced Port Forwarding Page This page allows you to run a publicly accessible server on the LAN by specifying the mapping of TCP/UDP ports to a local PC. This enables incoming requests on specific port numbers to reach web servers, FTP servers, mail servers, etc. so that they can be accessible from the public Internet. A table of commonly used Port numbers is also displayed on the page for your convenience. To map a port, you must enter the range of port numbers that should be forwarded locally and the IP address to which traffic to those ports should be sent. If only a single port specification is desired, enter the same port number in the "start" and "end" locations for that IP address. The ports used by some common applications are: · · · · · · FTP: 20, 21 HTTP: 80 NTP: 123 Secure Shell: 22 SMTP e-mail: 25 Telnet: 23 79 6 SVG2500 ADVANCED PAGES Advanced Port Triggers Page This page allows you to configure dynamic triggers to specific devices on the LAN. This allows for special applications that require specific port numbers with bi-directional traffic to function properly. Applications such as video conferencing, voice, gaming, and some messaging program features may require these special settings. The Advanced Port Triggers are similar to Port Forwarding except that they are not static ports held open all the time. When the Configuration Manager detects outgoing data on a specific IP port number set in the "Trigger Range, " the resulting ports set in the "Target Range" are opened for incoming (sometimes referred to as bi-directional ports) data. If no outgoing traffic is detected on the "Trigger Range" ports for 10 minutes, the "Target Range" ports will close. This is a safer method for opening specific ports for special applications (e. g. [. . . ] Layer of the OSI concerned with protocols for error recognition and recovery. Electronic path over which data is transmitted. TCP/IP TFTP TKIP Transparent bridging transport layer trunk 157 17 GLOSSARY TERM TTL DEFINITION The time to live is the number of routers (or hops) a packet can traverse before being discarded. The protocol of the enclosing packet is understood by each endpoint, or tunnel interface, where the packet enters and exits on the network. Tunneling requires the following protocol types: · · · A carrier protocol, such as TCP used by the network that , the data travels over An encapsulating protocol, such as IPSec, L2F L2TP or , , PPTP that is wrapped around the original data , A passenger protocol, such as IP for the original data , tunnel two-way A cable system that can transmit signals in both directions to and from the headend and the subscriber. U-Z TERM UDP unicast DEFINITION User Datagram Protocol A point-to-point data transmission sent from one sender to one receiver. [. . . ]