background image

 

 

 

 

VPN (Virtual Private Network)   

Virtual Private Networks (VPNs) provide protected connections across 

the Internet. Some companies and other organizations provide remote 

access to their internal networks via a VPN. Employees are typically 

provided with software that makes the VPN connection from a 

computer.   

 

When a computer provisioned for this type of VPN connection is 

connected behind the MG8702, the MG8702 must pass through the 

VPN traffic. The MG8702 is configured by default for VPN pass-through. 

(The IPsec and PPTP Pass-through settings on the Advanced 

 

Options page respectively enable IPsec and PPTP VPN pass-

through. IPsec and PPTP are protocols used in different VPN 

implementations. The pass-through settings for both are enabled by 

default). 

 

The most common type of VPN connection that MG8702 users will 

encounter is the type of VPN described above, that simply needs to 

pass through the MG8702. The VPN pages support features that allow 

you to terminate VPN connections on the MG8702 itself.   

 

The MG8702 can terminate PPTP, L2TP and IPsec connections in 

specific scenarios. It can act as a VPN server to terminate PPTP and 

L2TP connections, for example from remote client computers. It can act 

as a VPN endpoint for IPsec connections, for example from a remote 

office to a central office (“site-to-site”). It cannot act as a VPN server to 

terminate IPsec connections from remote client computers. 

 

Summary of Contents for MG8702

Page 1: ...DOCSIS 3 1 cable modem plus AC3200 WiFi router Model MG8702 User Manual ...

Page 2: ...work properly in all environments and applications and makes no warranty or representation either expressed or implied with respect to the quality performance merchantability or fitness for a particular purpose of the software or documentation The manufacturer reserves the right to make changes to the hardware software and documentation without obligation to notify any person or organization of th...

Page 3: ...02 should normally be installed indoors If you use it outdoors protect it from moisture and be careful about temperature Your MG8702 should be operated in an environment that s between 32 and 104 Fahrenheit 0 to 40 Centigrade Your MG8702 should not be in a confined space There should be room for air flow around the top front and sides of the MG8702 Make sure to use your MG8702 s power cube and a c...

Page 4: ...ng your MG8702 to support devices and applications with special requirements 33 FOR GAMES PLAYED ON GAME CONSOLES AND PCS AND SECURITY CAMERAS 33 TO CREATE A PORT FORWARDING RULE 36 Changing wireless settings 40 TO CHANGE THE NETWORK NAME AND PASSWORD 41 WIRELESS GUEST NETWORKS 45 Changing firewall settings 48 Tuning wireless performance 50 WIFI MULTIMEDIA WMM 55 Parental Control 57 SETTING UP TIM...

Page 5: ...TION 73 WHAT IF MY MG8702 HAS BEEN WORKING THEN STOPS WORKING 73 WHAT IF I M GETTING INTERNET SERVICE BUT MY SPEED IS DISAPPOINTING 74 WHAT IF I M TOLD THAT MY MG8702 ISN T APPROVED BY MY CABLE SERVICE PROVIDER 74 WHAT IF I AM CONNECTED WIRELESSLY BUT MY CONNECTION SEEMS SLOW OR KEEPS DROPPING 74 WHAT IF I DON T KNOW MY MG8702 S WIRELESS NETWORK NAMES SSIDS OR SECURITY KEY PASSWORD 75 WHAT IF I TH...

Page 6: ... MG8702 has a Configuration Manager that provides a lot of technical information about Model MG8702 and that tells you how to do some useful things as summarized below Please note that some users will never need to use the Configuration Manager Chapter 3 Alternate Ways to Connect Your Coax Cable Chapter 4 Connecting Devices to Your Cable Modem Router Chapter 5 Setting up a Smart TV Streaming Media...

Page 7: ...ick Start Packaged with your MG8702 modem router Power Adapter Coax Wrench Ethernet Cable Velcro Cable Organizer Para una Guía de Inicio Rápido en español por favor vaya a www motorolanetwork com MG8702ir ...

Page 8: ...use your smartphone to take a photo of the label on the bottom of your cable modem You ll need the information on the label later It will help to print the photo so you can scan a QR code on the label later 3 Disconnect existing modems and routers if any Now connect your MG8702 as shown on the next page Connecting to a coax cable See the connection photo on the next panel Connect your MG8702 to a ...

Page 9: ...nnect a computer smart TV game station or other Ethernet capable device to any of these 4 LAN ports COAX Connect a live coax cable not included to the modem s COAX connector as discussed above Use the wrench to tighten the nut finger tight Do not overtighten ON OFF button POWER Connect the supplied power adapter between the power jack and an electrical outlet ...

Page 10: ...puter is plugged into one of the MG8702 s Ethernet ports but connecting with WiFi also works as discussed below Once you ve opened the browser go to your service provider s web page This should bring you directly to the service provider s activation page Follow the onscreen instructions If you don t have a computer you can use the Web browser of a WiFi device such as a smartphone or tablet for act...

Page 11: ... numbers for some major cable service providers Note that this list is subject to change Comcast Xfinity 1 800 934 6489 Cox 1 877 206 4210 Bright House Spectrum 1 855 222 0102 Sparklight Cable One 1 855 310 0898 Charter Spectrum 1 855 757 7328 MediaCom RCN 1 844 987 3260 1 800 746 4726 Altice Suddenlink 1 877 694 9474 Time Warner Spectrum WOW 1 855 707 7328 1 800 343 2076 ...

Page 12: ...our MotoManage app When your MG8702 is activated either online or by phone your service provider will provision your MG8702 service This usually takes less than five minutes but sometimes takes 30 minutes or longer Once the MG8702 is fully activated try to browse the Web using a device connected via Ethernet or WiFi to the MG8702 See the section Wireless Router below for information on connecting ...

Page 13: ... first month After that you will be able to decide whether you d like to just keep the free basic features or whether you d like to also keep the advanced features for a small monthly fee 1 Download the MotoManage app on your smartphone or tablet 2 Open the app and create an account 3 Scan the QR code on the bottom of your MG8702 or scan it from the photo you printed to join your device s WiFi net...

Page 14: ... b Plus you can easily monitor your Internet usage and WiFi signal strength get security alerts that help protect your network control Internet access by devices or set up some basic parental controls Note that your MG8702 must be online for the app to communicate with it ...

Page 15: ...elpful in diagnosing DOCSIS performance issues and optimizing wireless performance You want to set up a Virtual Private Network VPN You want to change the wireless network name and password without using the App See WiFi setup page Note that these WiFi settings can be changed in the app without having to log in to the Configuration Manager If you need to access the MG8702 Configuration Manager ope...

Page 16: ...reduce the risk of unauthorized access your MG8702 is designed to accept access via secure http https only To support secure access your MG8702 includes a self signed certificate Unfortunately web browsers flag self signed certificates as insecure This means that if you open the MG8702 Configuration Manager your browser will display warnings that the site is insecure The MG8702 Configuration Manag...

Page 17: ...y using your smartphone or another WiFi device that has a Web browser 1 Now write down the wireless network name and password for your original network Most WiFi devices work on either the 2 4 GHz band or both the 2 4 GHz and the 5 GHz band You may have a wireless network name and password for just the 2 4 GHz band or you may have a wireless network name and password for both the 2 4 GHz and 5 GHz...

Page 18: ...ed for your original network 4 Press Save You will see a screen confirming your settings If you need to you can correct the settings and press Save again If you encounter a problem you can restore the factory modem router network name and password by pressing the Reset button on the back of the modem router for 10 seconds a paperclip helps Those names and passwords are printed on the bottom label ...

Page 19: ...to these interfering devices Sometimes it helps to change the MG8702 wireless channel frequency to reduce interference with neighbors wireless networks This is discussed in the Troubleshooting section of this Quick Start Wireless range can be limited by issues like weak wireless clients and challenging building configurations Some devices that connect to the MG8702 may not have a powerful wireless...

Page 20: ... USB port 3 In Windows Make sure you have Network Discovery and File Sharing enabled in Network Sharing on your computer Open File Explorer Windows Explorer and type 192 168 0 1 in the address bar Press Enter This will open your USB flash drive directory Then you will have read write access to its content In MacOS On the Finder menu navigate to Go Connect to Server In the address bar type smb 192 ...

Page 21: ...rogress Green ON Connected on 1 channel Blue Blinking Negotiating bonded channel s Blue ON Bonded with 2 or more channels OFF Upstream not connected Online Green or Blue Blinking Trying to go online Green Blue Online with DOCSIS 3 0 Online with DOCSIS 3 1 OFF Offline 2 4 GHz WLAN Green Blinking Data is flowing ON WiFi is enabled OFF WiFi is not enabled 5 GHz WLAN Green Blinking Data is flowing ON ...

Page 22: ...Amber Connected at 10 or 100 Mbps OFF No connection If a blue light blinks continuously this indicates partial service which means that at least one designated channel has not completed bonding You should still get high Internet speeds but your service provider may want to know so they can adjust their network ...

Page 23: ... cable modem router In some cases this may be impossible because of the location of the devices In those cases or if the device doesn t have an Ethernet connector you will need to create a wireless connection as described below Connecting a device via Ethernet To make the connection at the Ethernet capable device simply plug in one end of the Ethernet cable to an Ethernet jack on the device At the...

Page 24: ... you want to assign separate SSIDs and passwords for the two bands See Chapter 8 if you want to change your wireless settings If you want to connect devices to a Guest Network use the SSID and Password for that network See Chapter 8 if you want to set up a Guest Network Wireless devices vary but they all have a Wireless Settings area There you should first select the wireless network you want name...

Page 25: ... an Input or Setup section Within that section there s normally a Network section In that section you may need to specify that you have an Ethernet connection if that s how you connect to the MG8702 If you want to connect wirelessly to the MG8702 you ll need to select its wireless SSID and then enter its wireless password ...

Page 26: ...Manager You can access the Configuration Manager from a computer or any other device that has a browser and that is connected via Ethernet or wirelessly to your cable modem router If you will be changing wireless settings it s much better to use a device that connects via Ethernet while you make these changes To access the Configuration Manager do the following 1 Open your web browser 2 Type 192 1...

Page 27: ......

Page 28: ...3 You should see this page Type admin in the Username field 4 Type the unique password printed on your device s bottom label in the Password field ...

Page 29: ...etwork name and password and if you haven t used the app to do that NOTE To reduce the risk of unauthorized access your MG8702 is designed to accept access via secure http https only To support secure access your MG8702 includes a self signed certificate Unfortunately web browsers flag self signed certificates as insecure This means that if you open the MG8702 Configuration Manager your browser wi...

Page 30: ...out your Internet connection lets you view and modify your WiFi privacy settings and shows you basic information about your cable modem s addresses and software version The logout link lets you end your session with the Configuration Manager The Advanced button at the top of the page takes you to pages with more extensive information and options to configure your cable modem router ...

Page 31: ... the right of the page You can click the icons for descriptions of entries The information icons appear on every page including Advanced pages The Advanced pages include more detailed status information as well as exhaustive configuration options for the WiFi Router and Firewall functions of your device In addition there is a Parental Control page and pages to set up Virtual Private Networks VPNs ...

Page 32: ... and submenu items corresponding to the selected menu item are indented below The currently selected submenu item is highlighted in blue In this screenshot the menu item Status and submenu item Software are selected The following sections in this guide will walk you through the features that users most often want to configure ...

Page 33: ...nvolve connecting to another player or computer over the Internet Typically you will have to open ports on your router to support these devices There may be other settings that you need to change To open ports first log into the Configuration Manager as described in chapter 4 In summary you type 192 168 0 1 in the address bar of your browser go to that address enter the Username admin and your dev...

Page 34: ...how data flows from the address to specified LAN addresses and ports In this document we will describe how to create a rule for an IPv4 network The steps are similar for IPv6 To create an IPv4 Forwarding Rule first click the Add_IPv4 button You can now enter your port forwarding information ...

Page 35: ...nd this information You can create Port Forwarding Rules to support the requirements of your game or device Your game or device may need more than one port to be forwarded In some cases the ports will be numbered sequentially in a range These can be specified in a single Port Forwarding rule In other cases the ports may be separated In this case you will have to set up a separate forwarding rule f...

Page 36: ...0 Otherwise if there is only one number just leave the single port number you entered in step 2 4 Unless instructed otherwise in your game or device documentation leave the External entries blank They will fill in automatically the user has to enter the External ports as well the GUI doesn t accept empty entries 5 Select the protocol TCP UDP or Both indicated in your documentation 6 Select Enable ...

Page 37: ...For games and game consoles you may also need to enable UPnP and to set the Firewall to OFF ...

Page 38: ...Select Options under Advanced Router in the left pane Then click the UPnP Enable box and click Save at the top of the Router Selections box ...

Page 39: ...Select Firewall Basic under Protection Parental Control in the left pane Then select Off in the IPv4 Firewall Protection pulldown and click Save ...

Page 40: ...ur network You may want to change the wireless settings on the Primary Network The most common reason is that you re replacing a cable modem router and you want to use the same wireless network names and passwords that you ve had If you change the wireless settings on your MG8702 to match your previous settings you won t have to change the settings of wireless devices that worked with your previou...

Page 41: ...i Privacy Settings In band steering mode the default mode for both bands 1 First click the Show Key box to display the characters for the Password 2 Select and delete the old Network Name then type in the new Network Name 3 Next select and delete the old Password then type in the new Password ...

Page 42: ...characters long You can use upper and lower case letters a z and A Z numbers 0 9 and special characters e g _ etc except the single quote Be sure to write down and save the new wireless network names and passwords in a place where you can easily find it One approach is to write them on a small piece of paper and tape it on the bottom of your cable modem Some people like to take a picture of the se...

Page 43: ...ering is disabled each band has its own SSID For the 5 GHz band 1 First click the Show Key box to display the characters for the Password 2 Select and delete the old Network Name then type in the new Network Name ...

Page 44: ...an use the upper and lower case letters a z and A Z numbers 0 9 and special characters e g _ etc except the single quote Password can be from 8 63 characters long You can use upper and lower case letters a z and A Z numbers 0 9 and special characters e g _ etc except the single quote Be sure to write down and save the new wireless network names and passwords in a place where you can easily find it...

Page 45: ...tion Manager as described in chapter 4 In summary you type 192 168 0 1 in the address bar of your browser go to that address enter the Username admin and your MG8702 s unique password then click the Login button This will bring you to the Basic Status and Settings page Click the Advanced button in the upper right This will bring you to the Status Software page Hover over the Wireless menu item and...

Page 46: ...he following steps are optional Follow them if you want to change the default Guest Network Name and Password 2 Select and delete the old Guest Network Name then type in the new Guest Network Name and click Save 3 You can click the Show Key box to check your typing for Password 4 Select and delete the old Password then type in the new Password 5 Click the Save button ...

Page 47: ...Name can be from 6 32 characters long You can use the upper and lower case letters a z and A Z numbers 0 9 and special characters e g _ etc except the single quote Password can be from 8 63 characters long You can use upper and lower case letters a z and A Z numbers 0 9 and special characters e g _ etc except the single quote ...

Page 48: ...to change them you go to the Protection Firewall section of the Configuration Manager First log into the Configuration Manager as described in chapter 6 In summary you type 192 168 0 1 in the address bar of your browser go to that address enter the Username admin and your MG8702 s unique password then click the Login button This will bring you to the Basic Status and Settings page Click the Advanc...

Page 49: ... protection level and click Save The higher protection levels will make it harder for attackers to penetrate your network You may find that if you select one of these levels that some Internet activities may fail If that is the case you may need to use a lower level of protection during those activities Note that in order to play some games you may need to turn protection off When enabled Port Sca...

Page 50: ...iguration Manager as described in chapter 4 In summary you type 192 168 0 1 in the address bar of your browser go to that address enter the Username admin and your MG8702 s unique password then click the Login button This will bring you to the Basic Status and Settings page When the Basic Status and Settings page comes up click the Advanced button at the top right Remember that you can go back to ...

Page 51: ...Select the Wireless Scan Bridge page Select the Wireless menu item to bring the Wireless submenu options into view then click the Scan submenu option This brings you to the Wireless Scan page ...

Page 52: ...reless Scan Results table Note that you may need to scroll down to see all neighboring networks For the 2 4 GHz band Look at the Channel column This shows the channels that your neighboring networks use Available channels are 1 through 11 Many installations use only channels 1 6 or 11 because ideally wireless devices should be separated by 5 channels ...

Page 53: ...date channels to use for your network Then navigate to the Wireless Basic page For the 5 GHz band Look at the Channel column This shows the channels that your neighboring networks use Available channels include 36 48 and 149 165 Some channels from 52 144 may also be available however these channels may be allocated to uses including weather RADAR and other government sanctioned applications As of ...

Page 54: ...hen select the desired channel from the Channel pulldown and click Save Wait for a minute or so for client devices to resynchronize to the new channel Check to see whether wireless performance has improved If not you can try another channel selection ...

Page 55: ...WiFi Multimedia WMM Another possible way to improve performance is to change WiFi Multimedia WMM settings From the Wireless menu click the WMM submenu ...

Page 56: ...s packet throughput with the trade off of higher error rates In many cases this can result in an overall improvement in performance Power Save Support is designed to support client devices with the Power Save feature The Power Save feature extends battery life by reducing power consumption However sometimes this feature results in suboptimal wireless performance You can turn Power Save Support Off...

Page 57: ...section of the Configuration Manager First log into the Configuration Manager as described in chapter 6 In summary you type 192 168 0 1 in the address bar of your browser go to that address enter the Username admin and your MG8702 s unique password then click the Login button This will bring you to the Basic Status and Settings page Click the Advanced button in the upper right This will bring you ...

Page 58: ...lect Device pulldown to select this device The pulldown will show the MAC Addresses of devices connected to your MG8702 You may find the MAC Address of the device you want to control from the device itself Follow instructions for the device and operating system to do this You may also find the device s MAC Address by looking at the client list on your MG8702 Click Basic Router DHCP and look at the...

Page 59: ... that we enter the blocked time starting at 10 00 pm overnight to the time access is allowed at 5 00 pm the next day We have named the sample entry Ann s Laptop Make sure to click the Apply button Since the blocked time period extends overnight and includes two calendar days the Parental Control feature generates two separate segments of blocked time from 10 00 pm to 11 59 pm and from 12 00 am to ...

Page 60: ......

Page 61: ...nd PPTP VPN pass through IPsec and PPTP are protocols used in different VPN implementations The pass through settings for both are enabled by default The most common type of VPN connection that MG8702 users will encounter is the type of VPN described above that simply needs to pass through the MG8702 The VPN pages support features that allow you to terminate VPN connections on the MG8702 itself Th...

Page 62: ...To summarize the MG8702 supports VPN Pass through for clients connected behind the device that need to access for example a corporate network ...

Page 63: ...u to configure server and security settings The L2TP Layer 2 Tunneling Protocol and PPTP Point to Point Tunneling Protocol both allow PPP frames to be tunneled through the network PPTP is a Microsoft proprietary protocol which is very similar to L2TP To configure an L2TP or PPTP tunnel navigate to the L2TP PPTP page VPNà L2TP PPTP Then select to enable either an L2TP or a PPTP tunnel and enter the...

Page 64: ...Make sure to click Save as you complete each field ...

Page 65: ...nel is usually established in two phases Each phase establishes a security association SA a contract indicating what security parameters the cable modem router and the remote IPSec Router will use The first phase establishes an Internet Key Exchange IKE SA between the cable modem router and the remote IPSec Router The second phase uses the IKE SA to securely establish an IPSec SA through which the...

Page 66: ...l navigate to the IPSec page VPNàIPSec and click the Create a New Tunnel button Then enter the required information following the descriptions in the Info Text i fields Make sure to click Save when you have completed the entries ...

Page 67: ...2TP page to set up a server for a set of remote clients that connect via PPTP or L2TP You may find the Event Log useful to determine what has gone wrong if you have trouble setting up a VPN For details on how to configure a VPN on the MG8702 follow the help available through the information icons on the configuration manager pages When the MG8702 is configured as a VPN endpoint devices that connec...

Page 68: ... browser go to that address enter the Username admin and your MG8702 s unique password then click the Login button This will bring you to the Basic Status and Settings page Select Advanced at the top of the screen and then Status and Security You will need to enter the Current Username and Password and then the new Username and Password Your new Password will have to be entered twice Both Username...

Page 69: ...ccasions when you need to reset your cable modem router to factory defaults for example if you have changed the Username and Password and lost the new values Note that if you reset your device to its factory defaults you will lose any changes you have made to settings in the device To reset to factory defaults 1 Make sure the cable modem router is powered on 2 Find the reset button on the rear of ...

Page 70: ... your MG8702 s unique password then click the Login button This will bring you to the Basic Status and Settings page Click the Advanced button in the upper right This will bring you to the Status Software page Select the Wireless menu item and select the WPS_RADIUS submenu To enable WPA PSK follow these steps 1 Under 802 11n Mode Enable Disable select Disable from the pulldown 2 Find the WPA2 PSK ...

Page 71: ...vely though sometimes they re just called WPA and WPA2 You can enable either WPA PSK or WPA2 PSK alone or you can enable both WPA PSK and WPA2 PSK together By default your Cable Modem Router has WPA2 PSK with AES encryption enabled You will only need to change the security mode if you have a device in your wireless network that only supports WEP or WPA PSK with TKIP encryption If you want an unsec...

Page 72: ...Security Settings tab If WPA PSK is Enabled select Disabled from the WPA PSK pulldown and click Save Note that WPA PSK is Disabled by default 3 If WPA2 PSK is Enabled select Disabled from the WPA2 PSK pulldown and click Save Note that WPA2 PSK is Enabled by default 4 Select Enabled for WPA2 Do not click Save yet 5 Enter the RADIUS Server Address and click Save 6 Enter the RADIUS Port and click Sav...

Page 73: ...curely Make sure that your coax cable is live You can check that by using it with a TV Check that you provided the correct setup information to your cable service provider Contact your cable service provider to make sure they ve turned on your Internet service What if my MG8702 has been working then stops working First turn your MG8702 off for at least 8 seconds then on to see if that fixes the pr...

Page 74: ...dinner See whether you have the speed problem at less busy times Try connecting your MG8702 nearer to where the coaxial cable comes into your home This lets you see whether your home s cabling is a problem If you re using a splitter with your MG8702 try the MG8702 without the splitter to see if that helps If it does you may need to get a better splitter one with a top frequency of at least 1 675 M...

Page 75: ...ter 1 Where possible put the MG8702 as far away as possible from interfering devices such as Bluetooth transmitters and neighbors WiFi routers 2 To try to pick a less used wireless channel for your MG8702 First go in to your MG8702 s Configuration Manager 3 Click the Advanced button at the top of the page then click the Wireless and Scan Bridge menu items at the top of the page 4 Select the band y...

Page 76: ...etwork com support Email support motorolanetwork com Phone 800 753 0797 or 617 753 0562 Limited Warranty MTRLC LLC warrants this product against defects in material and workmanship for a warranty period of 2 years To read the full warranty please go to www motorolanetwork com warranty Label Symbols SYMBOL INDICATES DC voltage AC voltage For indoor use only Class II equipment Energy Efficiency Mark...

Page 77: ...d receiver connect the equipment into an outlet on a circuit different from that to which the receiver is connected and or consult the dealer or an experienced radio TV technician for help FCC Radiation Exposure Statement This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment and it also complies with Part 15 of the FCC RF Rules This equipment must be ...

Page 78: ...cable shield shall be connected to the grounding system of the building as close to the point of cable entry as practical DC input connector is center pin positive polarity WEEE is a directive in the EU that designates safe and responsible collection recycling and recovery procedures for electronic waste MTRLC LLC PO Box 121147 Boston MA 02112 1147 MTRLC LLC 2020 MOTOROLA and the Stylized M Logo a...

Reviews: