Gateway 2701hgb Manual

							Home Network Tab
26
computer that is dedicated to a specific use (such as a Web server that hosts online games). The status of 
each device is shown in the Local Devices list in your 2Wire gateway user interface. 
Each device on your home network is represented with a computer icon. 
If the “show inactive devices” option is enabled, and the device becomes inactive 
because it is powered off or removed from your network, this icon will display as Inactive.
A symbol next to the device shows how it is connected to your home network: 
If you defined a name for your computer during System Setup or when your computer was set up, the name 
displays next to the device. However, there are two instances where the device name will not appear:
 If your computer was manually configured with a static IP address, the static IP address displays 
instead of the computer’s name. 
 If you have not named the device but it still obtains its Internet address from the system, the word 
“Unknown” displays. 
You can change the name of the device so that it will display in the system user interface by clicking the 
Change name link.
If you have configured the firewall to allow information from the Internet to pass through to the computer 
(also referred to as “hosting an application”), the name of the application(s) that you are hosting are 
displayed under the device name.
If you have defined special features for the computer (such as DMZplus mode), the feature is displayed 
under the device name.
Note: For additional information, refer to “Showing a Device as Inactive” on page 34.
Ethernet USB Wireless
Note: For additional information, refer to “Hosting an Application” on page 37. 
						

							Home Network Tab
27
Depending on the permissions you have set for devices on your network, the following links may display 
next to the device: 
 Access shared files. Accesses the shared files available from this computer. This feature only works 
with Microsoft Windows computers that have shared files and file sharing installed.
Note: If your computer is configured with a static IP address, this link will not appear.
 Edit firewall settings. Accesses the system user interface page, which allows you to edit the firewall 
pass-through settings for the computer. For example, you may need to change the pass-through settings 
for the computer if you want to play an Internet game. 
 View Internet Access Control. Accesses the Internet Access Restriction schedule for this computer.
 Edit Content Screening. Accesses the Content Screening settings page, allowing you to change the Web 
site permissions for users on your network.
 View device details. Displays the technical networking details about the device. If you are experiencing 
difficulties, this information may be helpful to a technical suppor t representative.
Understanding the Status at a Glance Panel
The Status at a Glance panel shows you a list of network 
connection types, the number of devices connected via each 
connection type, and your wireless settings. 
To change your wireless settings, click the 
EDIT SETTINGS button.
To disable a network device, click the 
DISABLE button.
A message asks you to confirm your decision. 
Monitoring Your Wireless Settings 
Your 2Wire gateway has an integrated wireless access point, which enables you to connect your wireless-
enabled computers to your home network. 
By default, the 2Wire gateway ships with WEP enabled and a preconfigured network name. The default WEP 
key is located on the bottom of the gateway, next to the serial number.
To check your current settings and configure changes:
 Open a Web browser and access the 2Wire gateway user interface by entering
http://gateway.2wire.net.
 Click the 
Home Network tab.
Note: Security of the 802.11g wireless connection associated with this 2Wire 2701HGV-W 
ADSL2+ Router is the customer’s responsibility. Telecom will take no responsibility for 
charges made to customer’s accounts due to poorly organized wireless security allowing 
unknown users to connect to the internet via this wireless router. Should this occur, do not 
complain to the Telecom Fault Service or Jetstream Helpdesk. 
						

							Home Network Tab
28
 Click the Wireless Settings link to open the Configure the Wireless Network page.
Figure 13. Configure the Wireless Network Page 
						

							Home Network Tab
29
The Current Settings panel shows the 2Wire gateway’s wireless access point settings:
Access Point. The designated name of the wireless access point.
Network Name. The name assigned to your wireless network. The default is 2WIREXXX, where XXX 
represents the last three digits of your 2Wire gateway serial number (for example, 2WIRE954).
Channel. The radio frequency band the access point uses for your wireless network (the default is 6). 
Wireless adapter cards auto-detect which channels to use. If you are having problems with your 
wireless network, it could be due to radio interference. You can change the wireless channel to see if 
interference is reduced on a different channel.
Note: For more information on wireless channels, refer to the wireless channel entr y on page 129 in the 
Glossar y.
Authentication. The security method used to ensure that users are authorized to access the wireless 
network: WEP-Open, WEP-Shared, or WPA-PSK. 
Encryption. The security setting that makes it difficult for unauthorized users to access your network. 
Customizing Security Settings
You should always enable encr yption for wireless communication. When encryption is enabled, you must 
define an encr yption key for the 2Wire gateway’s wireless access point and configure that same key on each 
wireless client that will use your 2Wire gateway wireless network.
You can customize the following wireless settings in the Wireless Security panel.
1.From the Authentication pull-down menu, select an authentication setting: WEP-Open, WEP-Shared, or 
WPA-PSK.
Note: WPA-PSK authentication is supported only on HG model gateways.
Open authentication allows users to configure their wireless adapter as either Open or Shared; in either 
case an encr yption key is required. Shared authentication allows users to configure their wireless 
adapter for Shared authentication, which requires an encryption key. WPA-PSK requires that users 
configure their wireless adapter using TKIP.
2.To use the encr yption key that came with your gateway, click the Use default encryption key radio button. 
To create a custom encr yption key, click the 
Use custom encryption key radio button.
If you select 
Use custom encr yption key, you can define a 64-bit or 128-bit encr yption key. For 64-bit 
encryption, enter a 10-digit hexadecimal number. For 128-bit encryption, enter a 26-digit hexadecimal 
number. A hexadecimal number uses the characters 0-9, a-f, or A-F.
3.Click SAVE.
Note: If encr yption is enabled, each wireless client must be configured with the encr yption key 
defined on the system before it can operate on your wireless network. 
						

							Home Network Tab
30
Configuring MAC Filtering
The Media Access Control (MAC) address is a unique number assigned to computer hardware. When setting 
up your network, you can set your Wireless Broadband Router to give access only to cer tain MAC 
addresses. By doing so, you limit access only to your computer hardware and no one elses.
1.In the MAC Filtering pane, click the EDIT MAC FILTERING button. The Wireless MAC Filtering page opens.
2.Click the Enable checkbox.
3.The MAC addresses of devices on your network appear in the ALLOWED DEVICES field. To block specific 
devices from accessing your network, highlight the device’s MAC address (or name) and use the arrows 
to move the address to the 
BLOCKED DEVICES field.
4.Click SAVE.
Configuring Additional Settings
The Additional Settings panel allows you to customize wireless settings. In general, it is recommended that 
you leave the default settings in place; however, if you are experiencing connection or performance 
difficulties, altering these settings may improve performance.
Note: Because the fields that display are dependent on the type of wireless adapter you are 
using, some of these settings may not display. 
						

							Home Network Tab
31
Wireless Mode. Allows you to force the gateway to use 802.11b/g, 802.11b-only, or 802.11g-only 
modes of operation. 
Note: This field displays only for 802.11b/g based models.
DTIM Period (seconds). Determines at which inter val the access point will send its broadcast traffic. 
The default value is 4 seconds.
Maximum Connection Rate. The maximum rate at which your wireless connection works (1, 2, 5.5, 11, 
or 22 Mbps for 802.11b-based models; 1, 2, 5.5, 11, 6, 9, 12, 24, 36, 48, or 54 Mbps for 802.11b/
g-based models). 
Power Setting. Allows you to select the power level for your wireless connection. The default list is 1 to 
4; additional options may appear based on the service provider’s configuration.
If you have customized your wireless system configuration, you can restore the wireless settings to factor y 
defaults by clicking the 
RESTORE DEFAULTS button.
Configuring Advanced Settings
The Edit Advanced Home Network Settings page displays the current IP settings in use by your system for 
your home network, and allows you to configure your home network settings. You should adjust these 
settings ONLY if you are ver y familiar with computer networking technologies.
The Current Settings panel shows the following information:
Router Address. The IP address used by your system on the private home network (the default is 
192.168.1.254). The system has two IP addresses: a private address that it uses on the home 
network, and one that is used on the public broadband connection on the Internet. You can change the 
home network IP address by changing the home network IP address range. 
Subnet Mask. The subnet mask is determined by the home network IP address range settings (the 
default is 255.255.255.0).
DHCP Range. The range of IP addresses used by your system (the default is 192.168.1.64 through 
192.168.1.253). IP addresses can be either static (permanently assigned) or dynamic (automatic and 
temporary).
Setting up a Private Network
By default, the 2Wire gateway uses the 192.168.1.0/255.255.0.0 IP address range. You can select from 
two additional IP address ranges, or configure the network settings manually. You should manually configure 
these settings ONLY if you thoroughly understand IP internetworking, because an incorrect configuration can 
cause unpredictable results.
To set up a private network:
 Open a Web browser and access the 2Wire gateway user interface by entering
http://gateway.2wire.net.
 Click the 
Home Network tab. 
						

							Home Network Tab
32
 Click the Advanced Settings link under the tab to open the Edit Advanced Home Network Settings page.
Figure 14. Advanced Home Network Settings Page 
						

							Home Network Tab
33
1.Click the radio button that corresponds to the IP address range you wish to use. 
If you select the 172.16.0.0 / 255.255.0.0 or 10.0.0.0 / 255.255.0.0 range, continue to step 5. If 
you select 
Configure manually, continue to step 2.
2.In the Router Address field, enter the IP address used by your system on the private home network.
3.In the Subnet Mask field, enter the subnet mask. The subnet mask is determined by the home network 
IP address range settings.
4.Click the Enable DHCP checkbox.
a. In the First DHCP Address field, enter the first DHCP address that you’ll be distributing over the 
private network.
b. In the Last DHCP Address field, enter the last DHCP address that you’ll be distributing over the 
private network.
c. In the Set DHCP Lease Time field, enter a value for the number of hours before the DHCP lease 
expires.
5.Click SAVE.
Setting Up a Public Routed Subinterface
The Public Routed Subinterface pane allows you to create a local network that has broadband network-
accessible IP addresses by creating a route from the Internet to the specified public network. The public 
network operates without Network Address Translation (NAT). This feature is typically used in conjunction 
with broadband ser vice that provides a range of available IP addresses. Once enabled, the public IP 
addresses can be assigned to local computers.
To set up a Public Routed Subinterface network:
1.Check the Enable checkbox.
2.In the Router Address field, enter the router address (this is typically provided by your ser vice provider).
3.In the Subnet Mask field, enter the subnet mask (this is typically provided by your ser vice provider).
4.(Optional) To open all firewall por ts, check the Auto Firewall Open checkbox. (By default, your firewall 
protection is enabled.)
5.Click SAVE.
Note: If you change the home network IP address range, you must renew the DHCP lease on 
all devices on your home network and manually reconfigure all devices configured with static IP 
addresses. If you are using the 2Wire Network Suppor t Tool, you can renew the DHCP lease by 
selecting “Refresh Network Connection” in the Network Support Tool menu.  
						

							Home Network Tab
34
Setting Up a Public Proxied Subnet
The Public Proxied Subnet pane allows you to create a local network that has broadband-accessible IP 
addresses. Public Proxied Subnet is a public network in which the local network is an extension of the 
broadband network and does not require any special routing. Computers that are assigned Public Proxied 
Subnet IP addresses operate without Network Address Translation (NAT). This feature is typically used in 
conjunction with broadband ser vice that provides a range of IP addresses. Once enabled, the Public Proxied 
Subnet IP addresses can be assigned to local computers.
To set up a public proxied subnet:
1.Check the Enable checkbox.
2.In the Subnet Mask field, enter the subnet mask (this is typically provided by your service provider, and 
defines how large your IP pool is).
3.(Optional) To open all firewall por ts, check the Auto Firewall Open checkbox. (By default, your firewall 
protection is enabled.)
4.Click SAVE.
Selecting a Default DHCP Pool
By default, all devices on the home network that use dynamic (non-static) IP addresses receive these from 
the Private Network DHCP pool. When either Public Routed Subinterface or Public Proxied Subnet is 
enabled, click the 
Default DHCP Pool radio button in the corresponding section to have devices receive their 
IP addresses from those pools.
Showing a Device as Inactive
To show a device as Inactive:
1.Open a Web browser and access the 2Wire gateway user interface.
2.Click the Home Network tab.
3.Click the Advanced Settings link under the tab.
4.In the Settings pane, select the Show inactive devices in network list checkbox.
5.Click SAVE. 
						

							35
Firewall Tab
This chapter describes the 2Wire gateway firewall features, and provides detailed instructions on how to 
modify the firewall settings.
Firewall Features
The 2Wire gateway has a professional-grade firewall to help prevent unauthorized users from accessing 
your local network. The 2Wire gateway firewall includes the following features: 
Stateful packet inspection. Blocks common Denial of Ser vice attacks (such as SYN/FIN flooding or Smurf), 
and detects and logs TCP and UDP port scans.
Stateless packet inspection. Filters specific NetBios traffic, suspicious packets and IP fragments; blocks 
packets sent from the private network to the Internet that have spoofed IP addresses.
Network Address Translation (NAT). Translates a local network’s IP address to an external address 
maintained by the 2Wire gateway, effectively “hiding” the existence of a home network to the Internet. The 
2Wire gateway then uses this external address to communicate with the Internet on behalf of devices 
connected to the local network.
Por t Address Translation (PAT). A function provided by some routers which allows hosts on a LAN to 
communicate with the rest of a network (such as the Internet) without revealing their own private IP 
address. All outbound packets have their IP address translated to the router’s external IP address. Replies 
come back to the router, which then translates them back into the private IP address of the original host for 
final delivery. During PAT, each computer on the LAN is translated to the same IP address, but with a 
different por t number assignment.
Inbound and outbound port blocking. Blocks common inbound and outbound protocol types from passing 
information to or receiving information from the Internet.