background image

 

 
 

 
3/6/2018 

Proprietary and Confidential - Technicolor 

80 

 

  IDENT  protocol  (TCP 

port 113) 

  ICMP request 

  Peer-to-Peer 

applications 

  Kazaa  (TCP/UDP  port 

1214) 

  BitTorrent  (TCP  ports 

6881-6999)  

  Gnutella  (TCP/UDP  port 

6346) 

  Vuze  (TCP  ports  49152-

65534) 

Intrusion Detection is 
enabled in the Medium 
operating level. All other 
inbound traffic is allowed by 
the firewall. Please note 
that unsolicited inbound 
traffic will not be forwarded 
to devices on home 
network unless they match 
a port forwarding / 
triggering rule, or a DMZ 
host has been configured. 

service  or  port(s)  being 
used for the connection. 

Low 

Inbound traffic is blocked for 
the following services: 

  IDENT  protocol  (TCP 

port 113) 

Intrusion Detection is 
enabled in the Low 
operating level. All other 
inbound traffic is allowed by 
the firewall. Please note 
that unsolicited inbound 
traffic will not be forwarded 
to devices on home 
network unless they match 
a port forwarding / 
triggering rule, or a DMZ 
host has been configured. 

No  restrictions  -  outbound 
connections are allowed by 
the firewall regardless of the 
service  or  port(s)  being 
used for the connection. 

 

Off 

No restrictions. Can be 
enabled through port 
forward/ port trigger/DMZ 
rule 

No restrictions 

Firewall  configuration  is 
disabled. 

 

 

Summary of Contents for CGA4131

Page 1: ...1 BUSINESS GATEWAY OPERATIONS GUIDE Version 0 2 Copyright 2018 Technicolor Systems All Rights Reserved No portions of this material may be reproduced in any form without the written permission of Technicolor ...

Page 2: ...and Confidential Technicolor ii Revision History Revision Date Description 0 1 3 2 2018 Initial draft 0 2 3 6 2018 Updated the baseline configuration file added details for spectrum analyzer and MTA based on review comments ...

Page 3: ...4 Wireless 19 5 5 DOCSIS Status 21 5 6 DOCSIS Signal 24 5 7 DOCSIS Log 27 5 8 Spectrum Analyzer 27 5 8 1 SNMP provisioning for Spectrum Analyzer 29 5 9 System 29 6 Connection 33 6 1 Devices 33 6 2 LAN 33 6 2 1 SNMP provisioning for LAN 35 6 3 WAN 36 6 3 1 User provisioning for WAN 36 6 3 2 SNMP provisioning for WAN 40 6 3 3 Dual Stack Router 41 6 3 4 eSAFE 41 6 4 Routing 42 6 4 1 Enable Disable IG...

Page 4: ...7 3 2 SNMP provisioning for Advanced Wireless Setting 60 7 4 Guest Network 61 7 4 1 User provisioning for Guest Network 63 7 4 2 SNMP provisioning for Guest Network 65 7 5 MAC Control 68 7 5 1 User provisioning for MAC Control 69 7 5 2 SNMP provisioning for MAC Control 69 7 6 WPS 70 7 6 1 User provisioning for WPS 71 7 7 QoS 72 7 7 1 User provisioning for QOS 73 7 7 2 SNMP provisioning for QoS 74 ...

Page 5: ...ngs 89 8 6 1 User provisioning for VPN 91 8 7 Email settings 93 8 7 1 User provisioning for Email 94 8 7 2 SNMP provisioning for Email 94 8 8 Report 95 9 Applications 97 9 1 Port Forward 97 9 1 1 User provisioning for Port Forward 97 9 2 Port Trigger 98 9 2 1 User provisioning for Port Triggering 98 9 2 2 SNMP provisioning for Port Forwarding and Port Triggering 99 9 3 Port Filter 99 9 3 1 User pr...

Page 6: ...me Password 113 10 5 Troubleshooting 113 10 6 Remote Log 114 11 Diagnostics 116 11 1 System 116 11 2 Interface 117 11 3 Network 122 11 4 Wireless 123 11 5 Clients 126 11 6 Internet 127 12 Mixed mode 128 12 1 Procedure to configure Mixed mode 128 12 2 SNMP provisioning for Mixed mode 128 13 Isolation 129 13 1 SNMP provisioning for APIsolation 129 14 TR 069 131 14 1 User provisioning forTR 069 131 1...

Page 7: ...page user interface accessible by the user or remotely by the MSO by SNMP TR 069 The Technicolor CGA4131 offers the following features Compliance with DOCSIS 3 0 and 3 1 standards to deliver high end performance and reliability High performance Broadband Internet Connectivity Eight line embedded digital voice adapter for wired telephony service Two 802 11 Wi Fi radios for dual band concurrent oper...

Page 8: ...r 2 Front Panel View and LED Operations The following images represent the front panel view of the CGA4131 TCH2 GA TBR Figure 1 1 Figure 1 2 Ethernet LED Item A State Description Solid on Ethernet is enabled with AC power Off Ethernet is not enabled ...

Page 9: ... The port is not connected Blinking Data is being transferred Internet LED Item J State Description Solid on Internet Service is active Off There is no Internet Service Wi Fi LED Item K State Description Blinking Data 2 4GHz or 5GHz is active over the wireless connection Off Wi Fi access point is not enabled Online LED Item L State Description Solid on Connected to the service provider s network E...

Page 10: ...13 seconds to restore to factory settings Telephone Line LED Item V State Description Solid on MTA Voice interface is operational Off MTA Voice interface is not operational WPS Item W Battery LED Item X State Description Solid on Telephone line is registered successfully with the call manager Blinking Telephone line has either gone off hook or is in active call Off Telephone line is not registered...

Page 11: ...3 6 2018 Proprietary and Confidential Technicolor 5 Top View The following image depicts the top view of the CGA4131 TCH2 GA TBR Figure 1 3 ...

Page 12: ...thernet ports each can transfer up to 1 Gbps data while the ports 5 to 8 can have a combined data transfer speed of 1 Gbps Each Ethernet port has two LEDs LED LED Status Description Left LED Green Solid on Connected to a Gigabit Ethernet device Blinking Connected to a Gigabit Ethernet device and sending receiving data Off Not connected to a Gigabit Ethernet device Right LED Amber Solid on Connecte...

Page 13: ...nce and reliability USB port Item D USB port is used to connect USB devices Power inlet Item E The power inlet Power allows connecting the power cord Bottom panel The following images depict the bottom panel view of the CGA4131 TCH2 GA TBR Figure 1 5 shows Bottom panel with Battery Compartment with door on Item A Battery Slot Item A Accommodates devices backup battery optional Figure 1 5 ...

Page 14: ... 1 6 shows Bottom panel with labeling Figure 1 6 2 4GHz SSID Item A Network Name SSID is the network name of the 2 4GHz access point SSID is derived from the Wi Fi MAC address Passphrase of Device for2 4GHz Item B PRE SHARED KEY Passphrase of Device for 2 4GHz ...

Page 15: ...E SHARED KEY Passphrase of Device for 5GHz HW Rev Item E This specifies the hardware revision of the device Factory ID Item F This defines the factory ID of the device MTA MAC address Item G This defines the MTA MAC address WAN MAC address Item H This defines the WAN MAC address CM MAC address Item I This defines the Cable Modem s MAC address Serial Number of Device Item J This defines the device ...

Page 16: ... Home user to login show only System Page 3 192 168 0 1 on LAN PC Allow Home user to login show only System Page 100 192 168 0 1 on LAN PC Allow Home user to login show all pages with bitmasking tchCmWebAccessHomeWriteBitmask tchCmWebAcc essUserIfLevel home user rf cm Home User not permitted to login with CM IP on WAN PC Home User is not permitted to login with CM IP on WAN PC tchCmWebAcc essUserI...

Page 17: ... user to login show only System Page 100 eRouter IP on WAN PC Allow Advanced user to login show all pages with bitmasking tchCmWebAccessAdvancedWriteBitmask The Web UI pages available for home user and the advanced user access levels can be different They are defined by the access Level MIB and bit masking MIBs tchCmWebAccessHomeWriteBitmaskand tchCmWebAccessAdvancedWriteBitmask The bit masking in...

Page 18: ... Web UI 3 1 Accessing the Web UI CGA4131 Web UI can be accessed through the various interfaces LAN IP CM IP or the eRouter IP as explained in the previous section The gateway prompts the user to enter the username and password Figure 3 1 The various pages on the Web UI would be accessible once the credentials are accepted ...

Page 19: ...access levels configured as per the previous section Top Tab Sub tab Status Overview Gateway Local Network Wireless DOCSIS Status DOCSIS Signal DOCSIS Log Spectrum Analyzer WAN CM Side details for login work System Connection Devices LAN WAN Routing Modem MTA Network Time Wireless Radio Security Advanced Guest Network MAC Control WPS QoS Hotspot Security Firewall IP Filter Device Filter ...

Page 20: ...ice Filter VPN Email Settings Report Application Port Forward Port Trigger Port Filter DDNS DMZ UPnP IP Passthrough SIP ALG Administration User Remote Access Backup Restore Reboot Reset Troubleshooting Remote Log Diagnostic System Interface Network Wireless Clients Internet ...

Page 21: ...e high level view of the Business Gateway It displays the connections on the Wi Fi LAN and Guest Wi Fi networks Main Wi Fi Displays the connected Wi Fi WLAN Clients with their Host Name and IP address Network Displays the connected Wired LAN Clients with their Host Name and IP address Guest Wi Fi Displays the clients connected to Guest Wi Fi Figure 5 1 ...

Page 22: ...mation The Gateway Information section shows the Software Version Vendor Name eRouter MAC address Device Mode Router Provision Mode and Local Time set in the device as shown below Figure 5 2 The IP connectivity information provided in the page includes eRouterIP Address Subnet Mask DNS and default Gateway Information for the IPv4 and IPv6 connections The details are displayed as given below ...

Page 23: ...k on Local Network The Local Network page will display the LAN information seen by the user LAN Information This section displays the configuration of DHCP addresses for the home user on the LAN side Information such as the Gateway Address Subnet Mask MAC Address DHCP Server DHCP Beginning Address and DHCP Ending Address are displayed here ...

Page 24: ...tic IP the static option will be shown as Yes SLAAC Table Information Stateless Auto Configuration SLAAC is a feature offered by the IPv6 protocol It allows the various devices attached to an IPv6 network to connect to the Internet using the Stateless Auto Configuration without requiring any intermediate IP support in the form of a DHCP server The SLAAC Table section displays details about IPv6 Ad...

Page 25: ...ludes IPv6 related status and type information 5 4 Wireless Status Tab Wireless Click on the Status tab then click on the Wireless tab The page provides wireless network information including the Network Name SSID MAC Address Security Mode Network Mode Channel Channel Width SSID Broadcast and Network Status for 2 4GHzand 5GHz ...

Page 26: ...3 6 2018 Proprietary and Confidential Technicolor 20 Figure 5 6 ...

Page 27: ...ersAcquired rangingComplete ipComplete todEstablished securityEstablished paramTransferComplete registrationComplete operational andaccessDenied Active time The time since the network management portion of the system was last re initialized Ethernet List This section displays information about the Ethernet ports and any devices connected to them and show Interface Name Link Status Link Speed and L...

Page 28: ...3 6 2018 Proprietary and Confidential Technicolor 22 Figure 5 7 ...

Page 29: ...3 6 2018 Proprietary and Confidential Technicolor 23 Figure 5 8 Figure 5 9 ...

Page 30: ...ally 1 6MHz 3 2Mhz or 6 4MHz Upstream Modulation Displays the modulation used on upstream ATDMA TDMA SCDMA or MTDMA Upstream Power Level Transmit power level at which the cable modem is transmitting on the respective channel Downstream Bonding This section displays information about the RF downstream bonding with downstream channel ID Downstream Lock status Downstream Bond Status Downstream Channe...

Page 31: ...type associated with this downstream channel If the interface is down it displays unknown else it will be either QAM64 or QAM256 based on CMTS configuration Figure 5 10 Error Codewords This section displays Error Codewords the information about the Channel ID Unerrored Correcteds and Uncorrectables ...

Page 32: ...3 6 2018 Proprietary and Confidential Technicolor 26 Figure 5 11 ...

Page 33: ...CGA4131 Business Gateway supports the Spectrum Analyzer feature which can monitor a cable plant in real time This feature can provide details on the spectrum either via the Web UI or via SNMP MIBs There are 3 main features that the spectrum analyzer supports Run Hold and Preset A user can click the RUN button and would see real time measurements being sent by the tuner to the HTTP server and being...

Page 34: ...ions Frequency show 3 options to set the X axis starting Point START Ending point STOP and Middle point CENTER Span The duration of Frequency can be varied For ex 100 MHz the scale of X axis is 10 units AMPLITUDE To set the Y axis dBm upper limit values The graph will adjust accordingly BW Bandwidth option shows 2 options Vid Avg and Peak Hold for bandwidth Either one of them can be ON at any time...

Page 35: ...nterFrequency tchCmSpectrumAnalysisSegmentFrequencySpan tchCmSpectrumAnalysisBinsPerSegment tchCmSpectrumAnalysisWindowFunction tchCmSpectrumAnalysisEquivalentNoiseBandwidth 5 9 System Status Tab System This page displays further information on the DOCSIS connection system software and hardware configuration Click on the Status tab then click on System DOCSIS State This section displays informatio...

Page 36: ...3 6 2018 Proprietary and Confidential Technicolor 30 Figure 5 14 ...

Page 37: ...3 6 2018 Proprietary and Confidential Technicolor 31 The System Software information is provided as shown below Figure 5 15 ...

Page 38: ...3 6 2018 Proprietary and Confidential Technicolor 32 The System Hardware information is provided as shown below Figure 5 16 ...

Page 39: ...provides an option to configure the gateway in router or bridged mode 6 1 Devices Connection Tab Devices The Connection Device page displays all clients that are connected to the private and the public guest network The page also displays the details of the connected device like Interface type connection type device name and the IP Address Click on Connection tab then click on Devices in the Web U...

Page 40: ...ne how many clients can be connected to the gateway or the number of valid IP addresses that can be assigned The gateway address of 192 168 0 1 is the default IP address it is user configurable The user can modify the LAN configuration including the number of IP addresses If a client needs to be assigned with a static address the user must select the static IP option and enter the MAC address of t...

Page 41: ...LAN The following table depicts the LAN Configuration MIBs supported No MIB Description 1 rdkbRgIpMgmtLanTable LAN configuration Table 2 rdkbRgIpMgmtLanDhcpServerTabl e DHCP Server Details 3 rdkbRgIpMgmtDnsServerTable DNS Server Details 4 rdkbRgIpMgmtApplySettings Set the changes to LAN entry ...

Page 42: ...The page also allows the setting of WAN configuration Working Mode Router Mode Bridged Mode Connection Mode DHCP Static IP Host Name and Domain Name Figure 6 3 When the gateway WAN provisioning is enabled with DHCP IPv4 and IPv6 DHCP client on the gateway will initiate DHCP request to get the eRouter WAN IP for the gateway In case of DHCP v6 the eRouter IP is got from the MSO network through IP Pr...

Page 43: ...ties are similarly disabled All LAN clients receive public IPs from the MSO The Wi Fi network is not enabled in Bridge mode Router Mode The default option is Router Mode Routing functionality is enabled with Wi Fi and LAN set to active The management IP address will change LAN configuration such as from x x x x to y y y y For instance it may change from 10 0 0 1 to 192 168 0 1 Figure 6 4 Bridge Mo...

Page 44: ...terface instance of rdkbRgIpMgmtLanMode 32 to bridge 1 6 3 1 3 Connection Mode There are 2 connection modes possible DHCP or Static IP When DHCP is selected the WAN IP eRouter IP is configured automatically by the MSO DHCP Server In case of static IP the details IP address Subnet Mask Default Gateway DNS configuration MTU etc needs to be obtained from the MSO and entered through the Web UI Figure ...

Page 45: ...dress as per the rules specified in the DHCP configuration of the MSO ISP Provisioning with Static IP The Static IP for WAN interface is provided by the Service Provider Figure 6 6 While configuring the Connection Mode as Static IP the user needs to configure the following Internet IP Address The gateway s IP address as seen from the Internet Subnet Mask The gateway s Subnet Mask Default Gateway ...

Page 46: ... is required Host Name Optional The Host Name field is optional but may be required by some Internet Service Providers The default host name is the model number of the device Domain Name Optional Enter the local domain name for the Network Figure 6 7 Setting the values of different parameters Working mode Connection Mode Host name Domain name Click on the corresponding drop down menu and select th...

Page 47: ...ModeControl The other possible values for esafeErouterInitModeControl are ipDisabled 1 ipv4Only 2 ipv6Only 3 and ipv4AndIpv6 4 esafeErouterSoftReset Setting esafeErouterSoftReset to true 1 causes the eRouter to perform a soft reset An SNMP GET GETNEXT of this object always returns a value of false 2 esafeErouterOperMode This object provides visibility to the current mode of operation of the DOCSIS...

Page 48: ...om this view Connection Tab Routing Click on the Connection tab then click on Routing This page displays Routing setup information for RIP Here IGMP Proxy can be displayed and set Figure 6 8 6 4 1 Enable Disable IGMP Proxy IGMP Proxy is used to enable multicast feature support Users can enable or disable the IGMP Proxy using by selecting the button on the page ...

Page 49: ...ger autonomous system network e g a single enterprise s network that may be comprised of many separate local area networks LANs linked through routers To configure the RIP feature the user needs to provide the following information RIP enable disable Send Version Version 2 recommended Receive Version Version 2 recommended Update Interval duration between route updates default 30 seconds Default Me...

Page 50: ...eive version can be either 1 or 2 If no version is selected version 1 would be sent however both version 1 and 2 can be received Update interval configures the time interval between route updates default value is 30 seconds Metric is a parameter used by RIP in case there are multiple routes were identified to the same destination The protocol uses the shortest path to route the packets to such des...

Page 51: ...ck to the IP backbone network static configuration 6 5 Modem Connection Tab Modem Click on the Connection tab then click on the Modem tab The gateway will display the various modem parameters The Downstream Frequency is the frequency at which the modem is locked with the CMTS during channel scan Scan Start Frequency is the frequency at which the modem tries to lock first as this will be the freque...

Page 52: ... on the MTA The gateway will display the line status for the 8 MTA line the status could be shown as onhook offhook if the MTA is provisioned on the device Figure 6 12 The logs will show the details of log generated during MTA operation that includes call status error message that would be helpful for debugging ...

Page 53: ...k Time Connection Tab Network Time Click on the Connection tab then click on the Network Time tab The network time page will display the various parameters related to current time NTP server etc Options to configure Auto Daylight Saving and Time Zone are provided in this view ...

Page 54: ...3 6 2018 Proprietary and Confidential Technicolor 48 Figure 6 14 The user can change the configurations and press the Save button in the page to change these parameters ...

Page 55: ...ess tab in the Web UI This section contains the essential configuration items for a wireless network 7 1 Radio Wireless Tab Radio Click on the Wireless tab then click on the Radio tab The page displays Radio setup information at 2 4GHz and 5GHz Here a user can set and display Wireless Network 2 4GHz and 5GHz information as for Wireless Interface Network Name Network Mode Channel Width Channel MAC ...

Page 56: ...adcast by selecting the hide option Network Mode The Network Mode determines which 802 11 wireless protocols will be used The Network Mode has different options available according to the wireless interface 1 For 2 4GHz 802 11b only 802 11g only 802 11n only Mixed 802 11b and 802 11g Mixed 802 11g and 802 11n Mixed 802 11b 802 11g and 802 11n 2 For 5GHz 802 11a only 802 11n only 802 11ac only Mixe...

Page 57: ...he wireless network must broadcast on the same channel to communicate MAC Address The wireless MAC Address is displayed in this field Scan Nearby AP The Scan button provides a mechanism for the AP to scan for neighboring APs and provides various statistics on neighbors 7 1 1 User provisioning for Radio Various fields can be configured in the Web UI for provisioning the Radio parameters Wireless In...

Page 58: ...sly scan and use channels with less interference MAC Address The wireless MAC address is displayed in this field Scan Nearby AP The Scan button provides a mechanism for the AP to scan neighboring APs and provides various statistics on neighbors 7 1 2 SNMP provisioning for Radio S No MIBs Description 1 rdkbRgdot11nExtMode rdkbRgdot11nExtMode selects the Network Mode 2 rdkbRgdot11nExtBandWidth rdkbR...

Page 59: ...3 6 2018 Proprietary and Confidential Technicolor 53 ...

Page 60: ...r 5GHz listed in the SNMP reference guide Step 2 Set the MIB rdkbRgDot11ApplySettings to 1 7 2 Wireless Security Wireless Tab Security The page displays radio setup information at 2 4GHz and 5GHz Click on the Wireless tab then click on Security tab Here the user can set and display Wireless Network 2 4GHz and 5GHz information including the Network Name Security Mode Encryption Network Password and...

Page 61: ...e default setting is WPA or WPA2 Personal Encryption For ease of use the encryption mode changes according to the selected security mode For example If the security mode is selected to be WPA2 Personal the selected encryption mode will be AES Similarly if the security mode being used is WPA or WPA2 Personal the encryption mode will be AES and TKIP Network Password The user must select a password t...

Page 62: ...ect 3 rdkbRgDot11WpaPreShare dKey rdkbRgDot11WpaPreSharedKeysets the passphrase or PSK for WPA This is a read write object 4 rdkbRgDot11WpaGroupRe keyInterval rdkbRgDot11WpaGroupRekeyInterval sets the rekeying interval for WPA This is a read write object 7 3 Advanced Wireless Settings Wireless Tab Advanced The page displays Advanced setup information of the 2 4GHz and 5GHz wireless networks includ...

Page 63: ...3 6 2018 Proprietary and Confidential Technicolor 57 Figure 7 5 ...

Page 64: ...ication Message DTIM A DTIM field is a countdown field informing a client of the next window for listening to broadcast and multicast messages When the gateway has buffered broadcast or multicast messages for associated clients it sends the next DTIM with a DTIM Interval value Its clients hear the beacons and receive the broadcast and multicast messages The default value is 1 user can select any o...

Page 65: ...c types such as audio video voice and background traffic This is done using QOS WMM feature which in turn increases throughput The user has option available to disable it through toggle button but again will impact throughput rates WMM Power Save This feature helps client devices to conserve battery life By default it is enabled and it s recommended to leave it enabled 7 3 1 1 Band Steering Settin...

Page 66: ... 5GHz primary SSIDs User can configure the same in Wireless Radio Tab The security parameters for the 2 4GHz and 5GHz for this network should also be same User can set the same in Wireless Security Tab Note Do not forget to hit the Save button after all changes are made 7 3 2 SNMP provisioning for Advanced Wireless Setting S No MIBs Description 1 rdkbRgdot11nExtPhyRate rdkbRgdot11nExtPhyRatesets t...

Page 67: ...orks for both 2 4GHz and 5GHz radios Users can set their own guest network SSID Passphrase and DHCP address as well Up to 7 guest SSIDs can be configured per radio Wireless Tab Guest Network Click on the Wireless tab then click on the Guest Networks tab The page displays Guest Networks and Guest LAN Settings Guest Networks view shows names of all the guest networks configured MAC address Enable Di...

Page 68: ...provides the configuration of a guest network The network name security mode number of guests allowed in the network IP address and DHCP configurations User can select the specific network name to view the configuration of that network The figure below provides Guest LAN Settings view ...

Page 69: ... configure the properties of a guest network Network Name SSID Broadcast status and enabling and disabling of the guest network and the LAN configuration for each of the guest networks 7 4 1 1 Guest Network Wireless Interface This tab allows the user to select the wireless interface of the guest network 2 4GHz or 5GHz ...

Page 70: ...SSID Broadcast User can enable or disable this feature by the toggle button provided under SSID Broadcast this is similar to Network Name Hide feature on the Radio tab in that it prevents the SSID from being broadcast Enable The user can enable or disable the Guest SSID by this toggle button 7 4 1 2 Guest LAN Settings Network Name SSIDs corresponding to the Wireless Interface selection are shown h...

Page 71: ...e Do not forget to hit the Save button after all changes are made 7 4 2 SNMP provisioning for Guest Network The following MIBs are used for provisioning the Guest Network S No MIBs Description 1 rdkbRgDot11BssId Returns the BSSID 2 rdkbRgDot11BssEnable Controls the BSS state 3 rdkbRgDot11BssSsid Controls and reflects the service set identifier 4 rdkbRgDot11BssSecurityMode Security for BSS ...

Page 72: ...S Id Web UI or Wireless ON OFF if exist status that is set by the user 10 rdkbRgDot11BssHotSpot Determines Sets whether this BSS is a Hotspot BSS This allows the MSO to specify which BSS is configured for Hotspot Operation 11 rdkbRgDot11BssApIsolation AP Isolation Access Point Isolation allows isolating traffic between CPEs on the same Wi Fi SSID The following MIBS determine how many user controll...

Page 73: ...3 6 2018 Proprietary and Confidential Technicolor 67 ...

Page 74: ...nnected to Wi Fi Wireless Tab MAC Control Click on the Wireless tab then click on MAC Control tab The page displays MAC Control setup information Here the user can set and display Network Name Wi Fi MAC Control Access Restriction MAC Control List Device Name MAC Address Delete Auto Learned Device Device Name MAC Address IP Address Status Add Figure 7 12 ...

Page 75: ... Add the required details in the entries and click Save to add them into the control list 7 5 1 5 Auto Learned Device Auto learned devices are the Wi Fi clients that are discovered by the gateway The user can add them to the MAC control list by selecting the add option in the screen 7 5 2 SNMP provisioning for MAC Control rdkbRgDot11BssAccessModeenables disables MAC Filter and specifies the access...

Page 76: ...by simply pushing a button or entering a PIN code WPS permits home users to easily connect to a secure network without any complex configuration and eliminates the need to remember or store their security information in an unsafe way There are 3 ways to use WPS 1 Push Button Configuration PBC method In this the user has to push a button either an actual or a virtual one on both the access point an...

Page 77: ...s input the client device will not be connected 3 External Registrar ER method If the client device software supports the ER method enter the gateway s SSID and PIN number in the client device software and then press the start button In this method no action is required and the WPS LED on the front panel will start to blink automatically When the gateway detects an attempt with an invalid PIN it d...

Page 78: ...dropped Implementing QoS in wireless LAN makes network performance more predictable and bandwidth utilization more effective Note When QoS is enabled the device uses Wi Fi Multimedia WMM mode by default Wireless Tab QoS Click on the Wireless tab then click on the QOS tab The page displays QoS setup information Here the user can set and display SSID Index Radio Band Network Name Wi Fi Multimedia WM...

Page 79: ...assigned to the Guest SSIDs if applicable Radio Band This tab only displays which Wireless band is selected dependent on the selection of SSID Index Network Name The network name of the selected SSID index is shown Wi Fi Multimedia and WMM Power Save Please refer to section 7 3 1for definitions Note It s recommended not to change anything under this tab any incorrect settings can lead to degradati...

Page 80: ...acknowledgement feature for WMM 7 8 Hotspot CGA4131 supports Wi Fi hotspot functionality where secondary SSIDs can be configured as public access points CGA4131 must establish a connection to a remote endpoint over GRE Traffic is routed to the GRE endpoint over routes established in the route table When a data packet is received by the GRE endpoint it is de encapsulated and routed to its destinati...

Page 81: ...3 6 2018 Proprietary and Confidential Technicolor 75 Figure 7 16 ...

Page 82: ...f 7 Integer 7 wifi1 6 SnmpMibObject rdkbRgL2ogreSourceIf 15 Integer 15 wifi2 6 SnmpMibObject rdkbRgL2ogreSourceIfEnabled 7 Integer 1 true SnmpMibObject rdkbRgL2ogreSourceIfEnabled 15 Integer 1 true SnmpMibObject rdkbRgL2ogreSourceIfVlanTag 7 Integer 300 SnmpMibObject rdkbRgL2ogreSourceIfVlanTag 15 Integer 300 SnmpMibObject rdkbRgL2ogreSourceIfMplsHeader 7 Integer 0 SnmpMibObject rdkbRgL2ogreSource...

Page 83: ...mpMibObject rdkbRgDot11BssHotSpot 10008 Integer 1 true SnmpMibObject rdkbRgDot11BssHotSpot 10108 Integer 1 true SnmpMibObject rdkbRgDot11BssEntry 16 10008 Integer 1 SnmpMibObject rdkbRgDot11BssEntry 16 10108 Integer 1 After the unit comes online with Opt in hotspot configuration client devices can be connected to the hotspot SSID and can access the internet Clients will be assigned IP address by t...

Page 84: ... Detection detects and blocks port scan activity originating on both the LAN and WAN IP Flood Detection detects and blocks packet floods originating on both the LAN and WAN Click the Apply button to activate any of the checkbox items These settings can be activated without a device reboot 8 1 Firewall Security Tab Firewall Use the Firewall screen to configure a firewall that can filter out various...

Page 85: ...l unsolicited inbound traffic is blocked and Intrusion Detection is enabled All traffic except the following are restricted HTTP and HTTPS TCP ports 80 443 DNS TCP UDP port 53 NTP UDP ports 119 123 Email TCP ports 25 110 143 465 587 993 995 VPN GRE UDP port 500 TCP port 1723 iTunes TCP port 3689 Both inbound and outbound traffic are restricted Medium Inbound traffic is blocked for the following se...

Page 86: ...has been configured service or port s being used for the connection Low Inbound traffic is blocked for the following services IDENT protocol TCP port 113 Intrusion Detection is enabled in the Low operating level All other inbound traffic is allowed by the firewall Please note that unsolicited inbound traffic will not be forwarded to devices on home network unless they match a port forwarding trigg...

Page 87: ...8 Proprietary and Confidential Technicolor 81 8 1 1 User provisioning for Firewall The following screens provide a view on the various configurations for IPv4 and IPv6 firewalls supported Figure 8 2 Figure 8 3 ...

Page 88: ...lt the firewall configuration is set to Off 8 1 2 SNMP provisioning for Firewall SNMP provisioning is done by the following MIBs for Firewall Basic settings S No MIBs Description 1 rdkbRgFirewallProtection Controls the firewall This parameter is stored in non vol and is enabled after factory reset Options are Disable Low Medium High and Custom ...

Page 89: ...ddress filter provide the IP address range click Enable and then click Save Settings Security Tab IP Filter This page displays IP Filter Table information Here user can set and display Start Address End Address Enable and Delete for IP Filtering Figure 8 5 8 3 Device Filter The Device Filter page is used to allow or block devices connecting to the router for both LAN and Wi Fi clients The devices ...

Page 90: ...led Disabled Access Type Allow All Block All Blocked Devices List Computer Name MAC Address When Block and Delete Devices List List of auto learnt devices Computer Name MAC Address Status and Operation Figure 8 6 8 3 1 User provisioning of Device Filter User provisioning involves enabling or disabling the feature using Device Filter option selecting the filter type Allow all or Deny All and adding...

Page 91: ... MIBs for Device Filter S No MIBs Description 1 rdkbRgFirewallMacFilterEna ble True Enable the Mac address filtering feature False disable This Value is written to non vol and set to false after a factory reset 2 rdkbRgFirewallMacFilterMod e Block 0 Macs listed in the rdkbRgFirewallMacFilterEntryTable will be blocked Permit 1 Macs listed in the rdkbRgFirewallMacFilterEntryTable will be permitted T...

Page 92: ...ress Trusted information Figure 8 7 8 4 1 User provisioning for Access Control User provisioning involves enabling or disabling the Access control feature using Site Filter option Blocked Sites The user needs to create the Blocked Sites by adding the URL details type and time of the day for the filter to be enabled to the list There is an option to delete the URLs from the Blocked Sites list Trust...

Page 93: ... Hour format HH MM to set the start time to block 7 rdkbRgFirewallUrlKeywordFi lterBlockEndTime 24 Hour format HH MM to set the end time to block 8 rdkbRgFirewallUrlKeywordFi lterBlockDays BITMAP to indicate which days to block 8 5 Service Filter The Service Filter page is used to block certain service requests coming from the LAN to WAN devices connected through the router User can block the desi...

Page 94: ...s to configure the time of the day configurations option When the time when the filter should be enabled for the enabled devices Trusted Devices The user needs to enable or disable the feature for the specific devices this can be done by enabling the Trusted button in the Trusted Devices list If the Trusted button is enabled the service filter is applied as per the service filter definitions Proto...

Page 95: ... gateway and security parameters for IPSEC Key Exchange Method Encryption Authentication Pre shared key etc Obtain these details from the network administrator of the enterprise connecting to before setting up the VPN tunnel Security Tab VPN Click on Security tab then click on VPN tab The page displays VPN setup information Here the user can set and display VPN information Figure 8 9 The user can ...

Page 96: ...3 6 2018 Proprietary and Confidential Technicolor 90 Algorithm Pre Shared Key Key Life Time Figure 8 10 Figure 8 11 ...

Page 97: ...l X Button Click this button to delete all settings for the selected tunnel Enable To Enable VPN Tunnel Tunnel Name Enter a name for this tunnel such as London Office Local Secure Group Select the local LAN user s that can use this VPN tunnel This may be a single IP address or sub network Note that the Local Secure Group must match the remote gateway s Remote Secure Group IP Address Enter the IP a...

Page 98: ...d no key negotiation is needed Manual key management is used in small static environments or for troubleshooting purposes Note that both sides must use the same key management method Encryption Algorithm The Encryption method determines the length of the key used to Encrypt decrypt ESP packets Note that both sides must use the Same method Available Options are DES 3DES AES 128 AES 129 AES 256 Auth...

Page 99: ...ve parameters and press Save button on the Web UI page to save them 8 7 Email settings Security Tab Email Settings Click on Security tab then click on Email settings tab The page displays Email settings information which can be viewed and modified by the user The following information will be displayed Recipient Email Notification Types Firewall Breach Access Control Breach Alerts or Warnings Send...

Page 100: ...lt all notifications are disabled The email notifications would be sent to the mail server configured SMTP server address email address user name and password should to be configured 8 7 2 SNMP provisioning for Email The following MIBs implement this feature S No MIBs Description 1 rdkbRgFirewallReportEmailEnable Enables sending logs via email Email is sent when an event happens ...

Page 101: ...ated by firewall rules For example if the firewall breach attempt was registered the same would be logged as a firewall breach attempt and shown under firewall logs Similarly if there were incidents for Device filter Service filter or Site filter restrictions they would be shown in the respective logs Each line item in the report display would have the timestamp of the last such occurrence with nu...

Page 102: ...3 6 2018 Proprietary and Confidential Technicolor 96 Figure 8 14 ...

Page 103: ...lick on the Application tab then click on the Port Forward settings tab This page displays Port Forward information Start Port End Port Type Service IP Service IPv6 Enable and Delete Figure 9 1 9 1 1 User provisioning for Port Forward The user can select the range of ports and the types of traffic to be forwarded to an IP address The range information can be configured in Start Port and End Port f...

Page 104: ...ractive gaming file transfer in chat programs etc because they are dynamically triggered and not held open constantly or erroneously left open via the router administrator and exposed for potential hackers to discover Application Tab Port Trigger Click on the Application tab then click on Port Trigger settings tab This page displays Port Trigger setup information Trigger Port Target Port Type Enab...

Page 105: ...se to Disable Default is False 3 rdkbRgFirewallPortTriggerEnable rdkbRgFirewallPortTriggerEnablesetsTr ue to enable False to Disable Default is False 9 3 Port Filter The Port Filter page is used to block certain port requests coming from the LAN to WAN devices connected through the router User can block the range of ports to be blocked by configuring them for a particular traffic Application Tab P...

Page 106: ... 4 DDNS Dynamic DNS DDNS allows a dynamic IP address to be aliased to a static predefined host name so that the host can be easily contacted by other hosts on the internet even if its IP address changes TheCGA4131 supports a dynamic DNS client compatible with the Dynamic DNS service http www dyndns com Application Tab DDNS Click on the Application tab then click on DDNS tab This page displays DDNS...

Page 107: ...e Port Forwarding feature is more secure because it only opens the ports the user want to have opened while DMZ hosting opens all the ports of one computer exposing the computer to the Internet This is generally used if PCs are running specific applications that use random unknown port numbers and do not function correctly with specific port triggers or port forwarding setups It is advisable not t...

Page 108: ...tion Figure 9 5 Here a user can enable the DMZ feature enter the host address both IPv4 and IPv6 and save the configuration 9 5 1 SNMP provisioning for DMZ S No MIBs Description 1 rdkbRgFirewallDmzAddress For DMZ Host IP address set the following MIB 2 rdkbRgFirewallApplySettings For all firewall MIBS set the rdkbRgFirewallApplySettings to 1 to take effect ...

Page 109: ...nt Period The advertisement period is how often the device advertises broadcasts its UPnP information This value can range from 1 to 1440 minutes The default period is 30 minutes Shorter durations ensure that control points have current device status at the expense of additional network traffic 3 Advertisement TTL The time to live for the advertisement is measured in hops steps for each UPnP packe...

Page 110: ...ser needs to select the required values and options for the above parameters and press Save button to save them Figure 9 7 9 6 2 SNMP provisioning for UPnP The UPnP feature is controlled via rdkbRgIpMgmtLanUpnp S No MIBs Description 1 rdkbRgIpMgmtLanUpnp Enable Disable the UPnP agent Since the MIB is a table for different SSID UPnP configuration is supported on all primary as well as secondary SSI...

Page 111: ...address to a device connected to CGA4131 on the LAN side effectively bypassing the internal router IP Application Tab IP Passthrough Click on the Application tab and then click on IP Passthrough tab The page displays setting up information IP Passthrough Here the user can set and display IP Passthrough and CPE List MAC Address ...

Page 112: ...ned on in the gateway gateway will re write information within the SIP messages SIP headers and SDP body making signaling and audio traffic between the client behind NAT and the SIP endpoint possible This page provides an option to enable or disable the SIP ALG support Application Tab SIP ALG Click on the Application tab and then click on SIP ALG tab The page displays an option to enable or disabl...

Page 113: ...3 6 2018 Proprietary and Confidential Technicolor 107 Figure 9 9 ...

Page 114: ...o the various fields and changed Figure 10 1 10 2 Remote Management Remote Management feature enables access to Web UI using eRouter IP address from the WAN side Administration Remote Access Click on the Administration tab and then the Remote Access tab The options selected under Remote Management can be applied to a single computer range of computers or any computer by selecting the corresponding...

Page 115: ...3 6 2018 Proprietary and Confidential Technicolor 109 Figure 10 2 Figure 10 3 ...

Page 116: ...gement in Web UI the MIB value is automatically set to 0 and no access through eRouter IP is available When tchCmWebAccessUserIfLevel adv user rg wan is set to 100 remote access through eRouter IP address is allowed with the advanced user credentials and the Remote Management option shows Enabled On disabling the remote management in Web UI the MIB value is automatically set to 0 and no access thr...

Page 117: ...ackup and follow the prompts To restore a previous configuration click Browse and use the navigation window to locate the file The default file name is filename_YY_MM_DD_HOUR_MINUTES gwc Note that this file is encrypted When the file has been located click Restore to restore the settings When the settings are restored the device will reboot to the restored settings 10 3 1 User provisioning for Bac...

Page 118: ...n rare cases it may be necessary to restore the factory default settings This can be done from the Administration Page which can be accessed from the Reboot Reset tab To restore factory defaults select the Restore Factory Defaults button and click Apply This will cause the device to reset After factory reset is done the user has to login to the Web UI default username and password The user is prom...

Page 119: ...sername and password will be reset to default values Once the username and password are reset on the next login the user would be asked to change the default password S No MIBs Description 1 tchCmWebAccessHomeUse rClearPassword Clears home user passwords if set to true Always returns false when read 10 5 Troubleshooting Ping and Trace route are available in the Troubleshooting options This can be ...

Page 120: ...roubleshooting Administration Remote Log Click on the Administration tab then click on the Remote Log tab The current logging configurations module log levels would be displayed The User can modify the modules System Event and Firewall for logging and the log levels Critical Major Minor Warning and Inform to be logged and save the configuration for future logging The logging server details also ne...

Page 121: ...3 6 2018 Proprietary and Confidential Technicolor 115 Figure 10 8 ...

Page 122: ...16 11 Diagnostics This section provides details about the various diagnostic features built in CGA4131 TCH2 GA TBR 11 1 System This page displays the system status The details shown are system uptime and resource usage such as CPU and memory Figure 11 1 ...

Page 123: ... 11 2 Interface This page displays the up down status various configurations data traffic and error information for various interfaces in the system WAN LAN and Wi Fi The figure below provides WAN interface status and traffic error statistics Figure 11 2 ...

Page 124: ...3 6 2018 Proprietary and Confidential Technicolor 118 The figure below provides LAN interface status and traffic error statistics Figure 11 3 ...

Page 125: ...3 6 2018 Proprietary and Confidential Technicolor 119 The figure below provides status and traffic error statistics for each of the Ethernet ports Figure 11 4 ...

Page 126: ...3 6 2018 Proprietary and Confidential Technicolor 120 The figures below provides status and traffic error statistics for 2 4GHz network Figure 11 5 ...

Page 127: ...3 6 2018 Proprietary and Confidential Technicolor 121 The figures below provides status and traffic error statistics for 5GHz network Figure 11 6 ...

Page 128: ...ction provides the configuration status for LAN side configurations The figure below displays the Gateway configuration Operational status Router Bridge mode support for IPv4 or IPv6 or both protocols Figure 11 7 This figure displays the IPv4 configuration status Figure 11 8 ...

Page 129: ...ays the IPv6 configuration status Figure 11 9 11 4 Wireless This section shows Wi Fi configuration for 2 4GHz and 5GHz networks including Network Name Wi Fi MAC address network mode channel bandwidth channel numbers security mode and SSID broadcast status enabled disabled ...

Page 130: ...l Technicolor 124 The figure below shows the 2 4GHz network configuration and the list of devices connected to the 2 4GHz network For each of the devices the network configuration traffic statistics errors and signal strength Figure 11 10 ...

Page 131: ...ial Technicolor 125 The figure below shows the 5GHz network configuration and the list of devices connected to the 5GHz network For each of the devices the network configuration traffic statistics errors and signal strength Figure 11 11 ...

Page 132: ...the connected clients The SLAAC Table section in page displays details about IPv6 Address the corresponding MAC Address and Reachability States information Stateless Auto Configuration SLAAC is a feature offered by the IPv6 protocol It allows the various devices attached to an IPv6 network to connect to the Internet using the Stateless Auto Configuration without requiring any intermediate IP suppo...

Page 133: ...fidential Technicolor 127 11 6 Internet This page provides the internet traffic information at IP address level for the various clients to remote internet addresses including the protocol specific traffic information Figure 11 13 ...

Page 134: ...ode 12 1 Procedure to configure Mixed mode 1 Set the rdkbRgIpMgmtLanMode 32 to Mixed mode i e option 4 2 There will 8 instances available for rdkbRgIpMgmtLanPortMode dedicated to 8 Ethernet ports By default all the port will be in router mode 3 Set the rdkbRgIpMgmtLanPortMode x x means the Ethernet port i e 1 2 8 to bridge mode as per need 4 Connect a LAN PC to that port and check for the IP It sh...

Page 135: ... Isolation for BSSID traffic Isolation for WLAN WLAN traffic is controlled via therdkbRgDot11BssApIsolation MIB object S No MIBs Description 1 rdkbRgDot11BssApIsolation This MIB is written to non vol and set to disable 0 after a factory reset disable 0 No AP Isolation enable 1 Enable AP Isolation feature This is an interface specific MIB which must be appended with the appropriate interface index ...

Page 136: ...tting up a secondary BSSID for Guest Hotspot services that has isolation enabled The default setting for this MIB is integer 0 disabled for all SSIDs To enable WLAN WLAN traffic isolation set this MIB to 1 enabled This setting is effective in the device configuration file as well as when set via SNMP If set via SNMP the setting will persist across device reboots If SNMP is used setting rdkbRgDot11...

Page 137: ...http myacs acs lab sa rdkbTR069ClientAllowDocsisConfig must be set to enable 1 to reconfigure any TR 069 parameters including the ACS URL above During the initial device check the server will populate the rdkbTR069ClientAcsControlPanelUrl rdkbTR069ClientCrUsername andrdkbTR069ClientCrPassword fields The client device identifier can also be set as either MAC or serial number when registering to the...

Page 138: ... for ACS association 4 rdkbTR069ClientAcsPas sword rdkbTR069ClientAcsPassword set password for ACS association 5 rdkbTR069ClientPeriodi cInform rdkbTR069ClientPeriodicInformto enable inform messages to be sent back to the ACS periodically refreshing the device data this MIB is enabled by default 6 rdkbTR069ClientPeriodi cInformInterval rdkbTR069ClientPeriodicInformIntervalto set the time interval ...

Page 139: ...gnostics NumberOfConnections uint 3 dmcli eRT setv Device IP Diagnostics DownloadDiagnostics TimeBasedTestDuration uint 5 dmcli eRT setv Device IP Diagnostics DownloadDiagnostics TimeBasedTestMeasurementInterval uint 6 dmcli eRT setv Device IP Diagnostics DownloadDiagnostics DiagnosticsState string Requested To get response dmcli eRT getv Device IP Diagnostics DownloadDiagnostics dmcli eRT setv De...

Page 140: ...ID 1 3 6 1 2 1 69 1 2 1 4 16 SnmpMibObject iso 3 6 1 2 1 69 1 2 1 5 16 Integer 3 OID 1 3 6 1 2 1 69 1 2 1 5 16 SnmpMibObject iso 3 6 1 2 1 69 1 2 1 7 16 Integer 4 OID 1 3 6 1 2 1 69 1 2 1 7 16 SnmpMibObject iso 3 6 1 2 1 69 1 2 1 6 16 HexString 0x4000 OID 1 3 6 1 2 1 69 1 2 1 6 16 SnmpMibObject iso 3 6 1 2 1 69 1 2 1 2 18 IPAddress 97 0 0 0 OID 1 3 6 1 2 1 69 1 2 1 2 18 SnmpMibObject iso 3 6 1 2 1...

Page 141: ...ibObject iso 3 6 1 2 1 69 1 6 4 1 2 68 Integer 4 OID 1 3 6 1 2 1 69 1 6 4 1 2 68 SnmpMibObject iso 3 6 1 2 1 69 1 6 4 1 4 68 Integer 2 OID 1 3 6 1 2 1 69 1 6 4 1 4 68 SnmpMibObject iso 3 6 1 2 1 69 1 6 4 1 11 68 Integer 6 OID 1 3 6 1 2 1 69 1 6 4 1 11 68 SnmpMibObject iso 3 6 1 2 1 69 1 6 4 1 14 68 Integer 23 OID 1 3 6 1 2 1 69 1 6 4 1 14 68 SnmpMibObject iso 3 6 1 2 1 69 1 6 4 1 15 68 Integer 23 ...

Page 142: ...ceFlow DsServiceFlowRef 120 QosParamSetType 7 TrafficPriority 1 MaxRateSustained 1200000000 MaxTrafficBurst 24480 MinReservedRate 0 MinResPacketSize 64 ActQosParamsTimeout 0 AdmQosParamsTimeout 200 MaxDsLatency 0 UsServiceFlow UsServiceFlowRef 20 QosParamSetType 7 TrafficPriority 1 MaxRateSustained 150000000 MaxTrafficBurst 10000000 MinReservedRate 0 MinResPacketSize 64 ActQosParamsTimeout 0 AdmQo...

Page 143: ... MaxTrafficBurst 1522 MinReservedRate 12000 MinResPacketSize 64 SnmpMibObject iso 3 6 1 4 1 1429 79 2 2 1 1 0 Integer 0 OID 1 3 6 1 4 1 1429 79 2 2 1 1 0 SnmpMibObject iso 3 6 1 4 1 1429 79 2 3 2 1 1 32 Integer 1 OID 1 3 6 1 4 1 1429 79 2 3 2 1 1 32 SnmpMibObject iso 3 6 1 4 1 1429 79 2 2 6 1 1 1 32 Integer 0 OID 1 3 6 1 4 1 1429 79 2 2 6 1 1 1 32 SnmpMibObject iso 3 6 1 4 1 1429 79 2 2 6 1 1 1 11...

Page 144: ...ct iso 3 6 1 4 1 4413 2 2 2 1 1 1 4 0 Integer 1 OID 1 3 6 1 4 1 4413 2 2 2 1 1 1 4 0 SnmpMibObject iso 3 6 1 4 1 2863 205 200 1 10 5 0 Integer 2 OID 1 3 6 1 4 1 2863 205 200 1 10 5 0 SnmpMibObject iso 3 6 1 4 1 2863 205 200 1 10 1 0 Integer 1 OID 1 3 6 1 4 1 2863 205 200 1 10 1 0 SnmpMibObject iso 3 6 1 4 1 46366 4292 79 2 1 1 1 0 Integer 0 OID 1 3 6 1 4 1 46366 4292 79 2 1 1 1 0 CoSignerCVCData 0...

Page 145: ...624F46D13E64173B8A1AB4762DC33E1697E495CEC6344F6572D483DD754819C857F2459067E7F FB41ECA188000743D4D34FEF0BFD6628A45ED20DA8FFE924E79322E9629761804376706ED2DD2BC16 687626E498CAD9531F6F60E7 CoSignerCVCData 0x4EE047760CF11415A578444A773AA45324255428EAC19EFD818560 CmMic 0x64F7AC57DBC68D67D00BCA24DEF7B043 CmtsMic 0xEB5928417405FB1BA3E56DD0281A1EC9 ...

Page 146: ...ll users by tchCmWebAccessReadPages 0 So this MIB acts as an override to disable read access to sections of the Web UI specifically for the Home user Each Bit in the MIB corresponds to a bit in the tchCmWebAccessReadPages MIB An AND function compares each bit of tchCmWebAccessHomeReadBitmask with tchCmWebAccessReadPages to determine which Web UI Section will have read access rights disabled 4 tchC...

Page 147: ...value fffffffffffffffffffff enables all menu items 0 bridgeRouterMode 0 section administration 1 1 1 docsisSignal 1 0 1 2 docsisStatus 2 page docsis status 0 1 3 docsisLog 3 page docsis log 0 1 4 timeUseNtp 4 section lan setup 1 1 5 timeZone 5 section lan setup 1 1 6 timeDst 6 section lan setup 1 1 7 timeServer 7 section lan setup 1 1 8 lanIp 8 section lan setup 1 1 9 lanDhcpEnable 9 section lan s...

Page 148: ...allFilterCookies 38 1 1 39 firewallFilterJavaApplets 39 1 1 40 firewallFilterActiveX 40 1 1 41 firewallFilterPopupWindows 41 1 1 42 firewallBlockFragmentedPackets 42 1 1 43 portScanDetection 43 1 1 44 ipFloodDetection 44 1 1 45 firewallProtection 45 1 1 46 firewallEventLogging 46 1 1 47 parentalControl 47 menu access restrictions 0 1 48 wireless2p4Enable 48 section radio settings 1 1 49 wireless2p...

Page 149: ...tion advanced setings 1 1 70 wireless5AccessControl 70 group MAC filter 1 1 71 wireless5Bridging 71 1 1 72 wireless5Wmm 72 section QoS 1 1 73 wireless5AckEnable 73 section QoS 1 1 74 ping 74 page diagnostics 0 1 75 igmpProxy 75 section administration 1 1 76 wanConnectionMode 76 section administration 1 1 77 docsisWanAbout 77 section docsis wan 1 1 78 docsisWanCmState 78 section docsis wan 1 1 79 d...

Page 150: ...ion AP Access Point CTS Clear To Send protection mode DTIM Interval Delivery Traffic Indication Message PMIP Proxy Mobile Internet Protocol RTS Request to Send Threshold SNMP Simple Network Management Protocol softGRE Soft Generic Routing Encapsulation STA Station A wireless Station WDS Wireless Distribution System POTD Password Of The Day ...

Page 151: ...neaux France T 33 0 1 41 86 50 00 F 33 0 1 41 86 56 15 technicolor com Copyright 2018 Technicolor All rights reserved All tradenames referenced are service marks trademarks or registered trademarks of their respective companies Specifications subject to change without notice ...

Reviews: