Motorola Netopia 7000, Administrator'S Handbook

Page: 358 / 368

Administrator’s Handbook
358
Stateful Inspection Firewall
Stateful inspection is a security feature that prevents unsolicited inbound access when NAT is disabled. You
can configure UDP and TCP “no-activity” periods that will also apply to NAT time-outs if stateful inspection is
enabled on the inter face.
Technical details are discussed in “Exper t Mode” on page 39 .
SSL Certificate Support
On selected models, you can also install a Secure Sockets Layer (SSL V3.0) cer tificate from a trusted Cer-
tification Authority (CA) for authentication purposes. If this feature is available on your Gateway, an addi-
tional link will appear in the Install page.
Netopia Embedded Software Version 7.7.4 uses SSL cer tificates for TR-069 suppor t.
See “Install Cer tificate” on page 190 .
VLANs
Motorola Netopia®'s VGx technology allows a single Motorola Netopia® VGx-enabled broadband gate-
way to act as separate vir tual gateways, treating each individual ser vice as a single ser vice "channel." The
VGx-enabled gateway applies specific policies, routing, and prioritization parameters to each ser vice chan-
nel, ensuring deliver y of that ser vice to the appropriate peripheral device with the requisite level of QoS and
correct feature sets — making it ideal for deliver y of triple play voice, video, and data ser vices.
VGx was developed to ensure that subscribers receive the quality of voice, video, and data ser vices they
expect — to prevent a large data download from causing jitter y video or poor voice quality. VGx achieves
this goal by providing superior ser vice segmentation and QoS features obtained by mapping multiple local
vir tual local area networks (
VLANs
) to one or more specific permanent vir tual circuits (PVCs) for DSL, or
wide area network VLANs for a fiber network.
Traffic prioritization is determined through the Institute of Electrical Engineering (IEEE) standard 802.1p ,
which specifies QoS algorithms to prioritize traffic based on protocol and source. This insures that each
ser vice receives the QoS treatment it requires; for example,
• video is free from latency,
• VoIP ser vice is prioritized to insure aural quality, and
• data is securely and efficiently routed.