Cisco Router DPC/EPC2425 DOCSIS User Manual

							
4028315 Rev A    81  
  How Do I Configure My DOCSIS Residential Gateway?
   
Field Name  Description 
Network 
Authentication  Network Authentication allows only authorized users to 
gain access to your wireless network. Only users with an 
authorized user name, password, or pre-shared key are 
allowed access to the wireless network. 
Select from the following Network Authentication 
protocols:  
ƒ
 Primary Network 
ƒ WPA 
ƒ WPA-PSK 
ƒ WPA2 
ƒ WPA2-PSK 
Note:  Network Authentication restricts access to your 
wireless network to only authorized computers or users. 
Authentication does not protect the data you send over 
the wireless network connection. You must enable 
encryption to protect data that is transmitted over your 
wireless network. 
WPA/WPA2 
Encryption  Allows you to select a WPA/WPA2 security method. The 
factory default security is WPA-PSK. 
ƒ
 TKIP (Temporal Key Integrity Protocol) data 
encryption is automatically enabled when WPA and 
WPA-PSK network authentication is enabled. (factory 
default) 
ƒ AES (Advanced Encryption Standard) 
ƒ TKIP-AES 
Note:  Select TKIP-AES only if your client adapter 
supports this mode. Contact your service provider for 
assistance.  
						

							
82    4028315 Rev A  
How Do I Configure My DOCSIS Residential Gateway?   
Field Name  Description 
WPA Pre-Shared Key  Allows you to set a WPA Pre-Shared key. Enter a text  string in this field. The text string or phrase is used to 
generate a unique set of encryption keys for your 
network. Use this string to se t up wireless devices in your 
network. 
The factory default security key is the 9-digit serial 
number of the gateway. For example: 20167792. See How 
Do I Set Up My High-Speed Internet Access Account? for 
the location of the serial number on the label. 
ƒ  The PSK can be either a text string or a 64 character 
hexadecimal number. 
ƒ The text string must be an ASCII character string with 
a minimum of 8 characters but no more than 63. 
Note:  Not all wireless adapter devices support PSK. For 
these devices, you must enter the encryption keys exactly 
as they appear in the in wireless gateway fields in the 
preceding illustration of the  Setup Wireless Security page. 
RADIUS Server  Allows you to enter the IP address of the RADIUS server 
used for authentication and encryption key derivation. 
ƒ This field is used with 802.1x and WPA Network 
Authentication. 
ƒ The factory default for this field is 0.0.0.0. 
RADIUS Port  Determines the port number of the RADIUS server. The 
port number is usually 1812 (factory default) or 1645, 
depending on the server used. 
This field is used with 802.1x and WPA Network 
Authentication. 
RADIUS Key  Allows you to set the Shared Secret key for your RADIUS connection. 
ƒ The factory default for  this field is empty. 
ƒ This field is used with 802.1x and WPA Network 
Authentication. 
Group Key Rotation 
Interval  Allows you to set the WPA Group Key Rotation Interval 
in seconds. This only applies when WPA or WPA2 
Network Authentication is enabled. 
Set this value to 0 (factory default) to disable periodic 
rekeying. The valid range is 
1 to 4,294,967,295 seconds.  
						

							
4028315 Rev A    83  
  How Do I Configure My DOCSIS Residential Gateway?
   
Field Name  Description 
WPA/WPA2 Re-auth 
Interval  Allows you to set the WPA/WPA2 Re-authorization 
Interval in seconds. This only applies when WPA/WPA2 
Network Authentication is enabled. 
Set this value to 0 (factory default) to disable periodic 
rekeying. The valid range is 
1 to 4,294,967,295 seconds. 
WEP Encryption  Allows you to enable data encryption to help secure the 
data that is sent over your wireless network. 
WEP 128-bit 
ƒ 128-bit or-64 bit static key data encryption can be 
selected when the network is  configured to have no 
authentication. 
ƒ  128-bit static key data encryption is automatically 
selected when 802.1x network authentication is 
enabled. 
Notes:  
ƒ  Static key authentication uses one of the four 
encryption keys, as defined below, to encrypt your 
data. You must manually change keys. The keys do 
not change or rotate automatically as they do with 
TKIP. 
ƒ 64-bit and 40-bit encryption are two different names 
for the same encryption 
ƒ 128-bit and 104-bit encryption are two different 
names for the same encryption 
Shared Key 
Authentication  Allows you to determine is Shared Key Authentication is 
used in the network. Shared Key Authentication can be 
used when there is no other network authentication in the 
network. 
ƒ
 Optional - (factory default) 
Wireless clients can associat e with the wireless access 
point without authentication. 
ƒ  Required - Only wireless clients with a valid network 
key are allowed to associate with the access point. 
802.1x Authentication  Allows you to  use 802.1x authentication with WEP 
encryption (similar to when WPA or WPA2 is enabled)  
						

							
84    4028315 Rev A  
How Do I Configure My DOCSIS Residential Gateway?   
Field Name  Description 
Network Keys 
1 through 4 
64 bit keys 
 
 
 
 
 
 
 
 
 
 
 
 
 
or  Select these keys for use with Encryption Mode set to 64-
bit encryption. Enter 5-byte values for a Key. You do not 
have to set all four Keys. Only one Key is used for a home 
network. Each value is represented in hexadecimal. Use 
only these numbers or letters: 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, a, b, 
c, d, e, and f to set up your encryption keys. 
Note:
 It is generally a good practice to use only lowercase 
letters when entering WEP encryption keys. Uppercase 
letters can sometimes be confused with numbers. For 
example, the uppercase letter “B” is often mistaken for the 
number “8.” Using lowercase characters minimizes the 
risk of confusing characters  when copying keys from one 
device to another. Uppercase characters will 
automatically be converted to lowercase when the key or 
keys are applied and saved to memory. 
Use two numbers or letters in each box. Record your Key 
values. You will need these Key values when you set up 
your client wireless adapter. The Key values in each 
wireless network device must match. 
 
Network Keys 
1 through 4 
128 bit keys  Select these keys for use with Encryption Mode set to 128-
bit encryption. Enter 13-byte values for a Key. You do not 
have to set all four Keys. Usually only one is needed for a 
home network. Each value is represented in hexadecimal. 
Use only these numbers or letters: 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 
a, b, c, d, e, and f to set up your encryption keys. 
It is generally a good practice to use only lowercase letters 
when entering WEP encryption keys. Uppercase letters 
can sometimes be confused with numbers. For example, 
the uppercase letter “B” is often mistaken for the number 
“8.” Using lowercase characters minimizes the risk of 
confusing characters when copying keys from one device 
to another. Uppercase characters will automatically be 
converted to lowercase when the key or keys are applied 
and saved to memory. 
Use two numbers or letters in each box. Record your Key 
values. You will need these Key values when you set up 
your client wireless adapter. The Key values in each 
wireless network device 
must match.  
						

							
4028315 Rev A    85  
  How Do I Configure My DOCSIS Residential Gateway?
   
Field Name  Description 
Current Network Key  Allows you to select which of the four 64-bit or 128-bit  keys to use to encrypt your data when you are using 
encryption that requires the manual entry of an 
encryption key. Only one WEP key is in use at a time. You 
must manually change keys. They do not change 
automatically. 
Notes: 
ƒ 64-bit and 40-bit encryption are two different names 
for the same encryption 
ƒ 128-bit and 104-bit encryption are two different 
names for the same encryption 
PassPhrase Automatically generate s WEP encryption keys required 
to communicate with the network. 
Although not required for WEP operation, use of a 
PassPhrase can simplify the  configuration and setup of 
each of your client wireless adapters. 
Using a PassPhrase eliminates the need to manual enter 
lengthy encryption keys and reduces the chance of error 
associated with entering entry of large numbers. 
Important:  Click Generate WEP Keys  when complete. 
WiFi Protected Setup (WPS) Section 
The selections available in this se ction allow you to configure WPS. 
Field Name  Description 
WPS Config  Allows you to enable or disable WPS 
Device Name  Allows you to enter your device name 
PIN  The personal identification number (PIN) of a device 
trying to connect 
Apply  Saves all additions, edits, and changes 
WPS Method  Allows you to select your WPS method 
WPS Status  Displays WPS status  
						

							
86    4028315 Rev A  
How Do I Configure My DOCSIS Residential Gateway?   
Function Keys 
Keys Description 
Generate WEP Keys  Automatically gene rates four WEP keys based on the 
PassPhrase entry. 
Notes:  
ƒ For 64-bit WEP, four unique 64-bit WEP keys will be 
generated 
ƒ For 128-bit WEP, only one 128-bit WEP key will be 
generated. The same key will be entered into all four 
key locations. 
Apply  Saves all additions, edits, and changes 
Start WPS  Starts WPS after you select your WPS Method  
Configuring Wireless Data  Rates and WiFi Thresholds 
Use the Setup Wireless - Advanced page to configure your WAP data rates and 
wireless fidelity (WiFi) thresholds. 
Note: If you are not familiar with the advanc ed settings detailed in this section, 
contact your service provider before you  attempt to change any of the residential 
gateway default wireless advanced settings. 
Click  Advanced  in the Wireless section of the Setup page to access the Setup 
Wireless - Advanced page. 
  
						

							
4028315 Rev A    87  
  How Do I Configure My DOCSIS Residential Gateway?
   
Setup Wireless - Advanced Page Example 
The following illustration is an example of the Setup Wireless - Advanced page. 
Note:  We recommend that you do not change the default wireless settings that are 
shown in the preceding illustration unless you are instructed to do so by your 
service provider. 
  
Setup Wireless - Adv anced Page Description 
This section describes the section headings and fields descriptions of the Setup 
Wireless - Advanced page. 
Note: If you make changes in the Setup Wi reless - Advanced page, click Apply to 
apply and save your wireless advanced settings.  
						

							
88    4028315 Rev A  
How Do I Configure My DOCSIS Residential Gateway?   
Field Name  Description 
54g Network Mode  Allows you to optimize the performance of your  wireless network using one of the following options: 
ƒ Max compatibility (factory default) 
Allows the access point to interoperate with both 
802.11b and 802.11g wireless client devices and 
minimizes interference with nearby 802.11b 
wireless networks.  
ƒ 54g Only 
The wireless access point will only accept 802.11g 
wireless clients. 
ƒ Max Performance 
Maximum throughput. In th is mode, the wireless 
access point accepts only 802.11g wireless clients. 
Setting the device in this mode may degrade the 
operation of near by 802.11b wireless networks. 
Basic Rate Set  Allows you to select the Basic Rate Set 
54g Protection  Allows you to prio ritize 802.11g communication when 
there is a mix of 802.11b and 802.11g devices in the 
wireless network using one of the following options: 
ƒ  Auto (factory default) 
Maximize 802.11g performance in networks with a 
mix of 802.11b and 802.11g wireless client devices. 
ƒ Off 
Maximum performance. Ne tworks with 802.11g-
only wireless client devices. 
Xpress Technology  Allows you to en able or disable Xpress Technology 
Afterburner 
Technology Allows you to enable or disable Afterburner 
Technology 
Rate  Allows you to fix the data rate for wireless connections. 
The following data rates are available: 
Auto (factory default), 1  Mbps, 2 Mbps, 5.5 Mbps,  
6 Mbps, 9 Mbps, 11 Mbps, 12 Mbps, 18 Mbps,  
24 Mbps, 36 Mbps, 48 Mbps, 54 Mbps 
Note:  In the automatic mode, data rate is a function of 
signal strength an d signal quality. 
Output Power  Allows you to adjust  the relative output power of your 
gateway wireless transmitter. The following settings 
are available: 
100% (factory default), 75%, 50%, and 25%  
						

							
4028315 Rev A    89  
  How Do I Configure My DOCSIS Residential Gateway?
   
Field Name  Description 
Beacon Interval  Displays the time interval that the WAP uses to  announce itself to remote devices. The Beacon Interval 
should be left at 100ms for compliance with most client 
cards. The Beacon Interval specifies how often packets 
are sent by the Access Point (AP) to synchronize a 
wireless network and its clients 
DTIM Interval  Displays the time interval between Broadcasts/Multicast transmissions. The DTIM 
(Delivery Traffic Indication  Message) Interval is a 
countdown informing the wireless clients of the next 
window for listening to broadcast and multicast 
messages. When the AP has buffered broadcast or 
multicast messages for associated clients, it sends the 
next DTIM with a DTIM Interval value. AP clients hear 
the beacons and awaken to receive the broadcast and 
multicast messages. The DTIM Interval should be left 
at 3 ms for compliance wi th most client cards 
Fragmentation 
Threshold Allows you to set the fragmentation threshold. This 
threshold should be set equivalent to the maximum 
Ethernet frame size allowable on the link including 
overhead (1536 bytes). Lesser settings can damage data 
throughput as large frames could be fragmented or 
collisions could occur. The factory default is 2346 
RTS Threshold  Determines at what
 packet size beyond which the 
ready to send/clear to send (RTS/CTS) mechanism is 
invoked. The factory default is 2347 
Short Retry Limit  The number of times the gateway transmits an  unacknowledged unicast frame that is shorter than the 
RTS threshold before discarding the fram. The factory 
default is 7 
Short Retry Limit  The number of times the gateway transmits an unacknowledged unicast frame that is longer than the 
RTS threshold before discar ing the frame. The factory 
default is 4 
 
Configuring Wireless Access  Point Access Control 
Use the Setup Wireless - Access Control page to configure your configure your 
wireless access point access control. 
Note: If you are not familiar with the advanc ed settings detailed in this section, 
contact your service provider before you  attempt to change any of the residential 
gateway default wireless advanced settings. 
Click  Access Control  in the Wireless section of the Setup page to access the Setup 
Wireless - Access Control page. 
  
						

							
90    4028315 Rev A  
How Do I Configure My DOCSIS Residential Gateway?   
Setup Wireless Access Control Page 
The following illustration is an example of the Setup Wireless - Access Control page. 
  
Setup Wireless - Access  Control Page Description 
This section describes the section headin gs and field descriptions of the Setup 
Wireless - Access Control page. 
Field Name  Description 
Access restriction  When encryption is enabled, this selection allows  you to choose one of the following options from the 
drop-down list: 
ƒ Disable (factory default)–No access restrictions 
based on MAC address of wireless access 
devices 
ƒ Allow–Allows wireless access to only the MAC 
addresses listed in the Access List 
ƒ Deny–Denies wireless access to only the MAC 
address listed in the Access List 
Closed Network  Allows you to disable or enable the network to 
access by wireless clients. When ON is selected, the 
access point does not broadcast the SSID. The client 
device must be configured manually with the SSID 
and the MAC address of the access point in order to 
access with wireless network. 
Access List  Displays the MAC address of the clients that are subject to wireless access control