Protecting & Monitoring Your Wireless Network

SURFboard® SBG6580 Wireless Cable Modem Gateway

•

User Guide

30

365-095-25397-x.1

Set Up Parental Controls

You can set up the following Parental Controls on your home network:

•

Allow or block access to specific Internet sites.

•

Allow or block access to specific MAC addresses.

•

Set time limitations for computer usage or Internet access

Note

: Any Parental Control filters that do not include assigned ports, will apply to all ports. This also applies

to MAC addresses as well.

You can also link each user on your network to specified rules for login, time-access, and content

filtering. See

Parental Control

for more information.

To set Parental Controls:

1.

From any screen, click the

Firewall-Parental Control

menu link or click the Firewall menu button

on the SBG6580 Main Menu and then select

Parental Control

.

Figure 28 – Parental Control-Change Time Zone Screen

2.

Click

Current Time Zone

drop-down button to select your time zone.

3.

Select

Yes

or

No

to automatically adjust the time for Daylight Saving Time.

4.

Click

Create

to continue setting up Parental Controls.

Protecting & Monitoring Your Wireless Network

SURFboard® SBG6580 Wireless Cable Modem Gateway

•

User Guide

31

365-095-25397-x.1

Figure 29 – Firewall Parental Control Screen

5.

Enter a name for the user profile that you want to create in the Description field.

6.

Enter the 12-digit (hexadecimal) MAC address of the device for which you are creating Parental

Controls in the MAC Address field.

7.

Enter the web address of the Internet site that you want to block or access.

8.

Enter the Starting port number of the in the Start Port field.

9.

Enter the Ending port number of the in the End Port field.

10.

Select the days of the week that you want to allow the selected user to access the Internet.

11.

Select the time range that you want to allow the selected user to access the Internet.

12.

Select to

Allow

or

Block

Internet access for the time and days you set previously.

13.

Select

On

or

Off

in the Enabled field to enable or disable this Parental Control restriction.

14.

Click

Apply

, when done.

Set Up Port Triggers

You can use Port Triggers to configure dynamic triggers to specific devices on the LAN. This allows

special applications that require specific port numbers with bi-directional traffic to function properly.

Applications such as video conferencing, voice, gaming, and some messaging program features may

require these special settings.

Note

: If you enable the firewall and set up custom port triggers, then you must configure the firewall to allow

traffic through those custom ports.

Protecting & Monitoring Your Wireless Network

SURFboard® SBG6580 Wireless Cable Modem Gateway

•

User Guide

32

365-095-25397-x.1

To configure Port Triggers:

1.

Click

Advanced

on the SBG6580 Main Menu bar.

2.

Click

Port Triggers

from the Advanced submenu options.

Figure 30 – Advanced Port Triggers Screen

3.

Click

Create Port Triggers

button to open the Add Port Triggering Entry window.

4.

Enter the starting port number for the port to be triggered in the Trigger Start Port field.

5.

Enter the ending port number for the port to be triggered in the Trigger End Port field.

6.

Enter the starting port number of the Port Trigger range in the Target Start Port field.

7.

Enter the ending port number of the Port Trigger range in the Target End Port field.

8.

Select

TCP

,

UDP

, or

BOTH

from the Protocol drop-down list.

9.

Enter a unique name in the Description field.

10.

Select

On

to enable IP port triggers or

Off

to disable them.

11.

Click

Apply

to create your port triggers.

Figure 31 – Create Port Triggers Screen

12.

Repeat steps 3 thru 11 for each additional port trigger that you want to create.

Protecting & Monitoring Your Wireless Network

SURFboard® SBG6580 Wireless Cable Modem Gateway

•

User Guide

33

365-095-25397-x.1

Set Up the DMZ Host

WARNING!

The gaming DMZ host is not protected by the SBG6580 gateway firewall. It is

exposed to the Internet and thus vulnerable to attacks or hacking from any computer on

the Internet. Consider carefully before configuring a device to be in the DMZ.

You can configure one computer on your home network to be the DMZ Host. That computer will

operate outside of the SBG6580 firewall and allow remote access from the Internet to your computer,

gaming device, or other IP-enabled device. The DMZ Host feature will only allow outside users to have

direct access to the designated DMZ Host device and not your home network. See

DMZ Host

for more

information.

To create the DMZ Host:

1.

Click

Advanced

on the SBG6580 Main Menu bar.

2.

Click

DMZ Host

from the Advanced submenu options.

Figure 32 – Advanced DMZ Host Screen

3.

Enter the last one to three digits (from

2

to

254

) of the IP address of the computer or gaming device

that you are setting up as the DMZ host.

4.

Click

Apply

.

Note

: Remember to reset the IP address back to

0

(zero) to close all the ports when you are finished with the

needed application. If you do not reset the IP address, that computer will be exposed to the public Internet.

Store Remote Firewall Logs

You can store firewall attack reports or logs on a computer in your home, so that multiple instances can

be logged over a period of time. You can select individual attack or configuration items to send to the

SysLog server, so that only the items of interest will be monitored.

Note

: The SysLog server must be on the same network as the Private LAN behind the Configuration Manager

(typically

192.168.0.x

).

To store remote Firewall logs:

1.

Click the

Firewall-Remote Log

menu link or click the Firewall menu button on the SBG6580 Main

Menu and then select

Remote Log

.

Protecting & Monitoring Your Wireless Network

SURFboard® SBG6580 Wireless Cable Modem Gateway

•

User Guide

34

365-095-25397-x.1

Figure 33 – Firewall Remote Log Screen

2.

Select all desired event types that you want to monitor. This will activate the SysLog monitoring

feature.

3.

Enter the last digits from

10

to

254

of the SysLog server’s IP address.

Note

: Normally, the IP address of this SysLog server is hard-coded so that the address always agrees with

the entry on this page.

4.

Click

Apply

.