Protecting Your Network

3-1

v1.0, February 2008

Chapter 3

Protecting Your Network

This chapter describes how to control access to your gateway and how to use the firewall features

of the gateway to protect your network.

Changing Passwords

For security reasons, the gateway has its own user names and passwords. The login user name is

admin

, with the default password of

password

. The Numericable user name is

MSO

with the

default password of

changeme

. After a period of inactivity for a set length of time, the

administrator login automatically disconnects. You can change the password, and you can change

the amount of time for the administrator login timeout.

NETGEAR recommends that you change these passwords to more secure passwords. The ideal

passwords should contain no dictionary words from any language, and should be a mixture of both

upper and lower case letters, numbers, and symbols. Your passwords can be up to 30 characters.

To change a password:

1.

Log in to the gateway by entering the default LAN address of

with a default

user name, or using whatever password and LAN address you have chosen for the gateway.

2.

Under the Maintenance heading, select Set Password. The Set Password screen displays:

Note:

The user names and passwords are not the same as any user name or password your

may use to log in to your Internet connection.

Figure 3-1

Wireless Cable Voice Gateway Model CBVG834G Adminstrators User Manual

3-2

Protecting Your Network

v1.0, February 2008

3.

To change the password, first enter the old password, and then enter the new password twice.

4.

Click

Apply

to save your changes.

Logs

A log is a detailed record of the denial of service (DoS) attacks directed at your network. You can

view the logs here, or you can use e-mail notification to view the logs (see

“Viewing and Emailing

Event Logs” on page 4-4

).

From the main menu, select Logs. The Logs screen displays:

Note:

After changing the password, you will be required to log in again to continue

the configuration. If you have backed up the gateway settings previously, you

should do a new backup so that the saved settings file includes the new

password.

Note:

You must be logged in with the user name

MSO

to view the Logs screen.

Figure 3-2

Wireless Cable Voice Gateway Model CBVG834G Adminstrators User Manual

Protecting Your Network

3-3

v1.0, February 2008

Blocking Keywords, Sites and Services

The gateway provides a variety of options for blocking Internet content and communications to the

gateway. You can control access to Internet content by screening for keywords within Web

addresses; you also can block access to all sites except those that are explicitly allowed. Blocking

options include:

•

Blocking access from your LAN to Internet locations that contain keywords that your specify.

•

Blocking access to websites (domains) that you specify as off-limits.

•

Allowing access to only websites (domains) that you specify as allowed.

You can block access to the Internet by a specific computer based on the hardware MAC address

of that computer. See

“Using MAC Filtering to Block Access” on page 3-7

.

Blocking Keywords and Domains

You can restrict access to Internet content based on Web address keywords and domain names. A

domain name is the name of a particular website. For example, for the address www.netgear.com,

the domain name is NETGEAR.com.

To configure Block Sites:

1.

Log in to the gateway by entering the default LAN address of

the parent

user name of

MSO

, and default password of

changeme

or use whatever password and LAN

address you have chosen for the gateway in parent mode.

Note:

To configure Block Sites, you must be logged in as

MSO

.

Wireless Cable Voice Gateway Model CBVG834G Adminstrators User Manual

3-4

Protecting Your Network

v1.0, February 2008

2.

Click Block Sites under the Content Filtering heading on the main menu.

Keywords

To enable keyword blocking:

1.

On the Block Sites screen, select the

Enable

check box in the Keyword section.

2.

Add keywords by entering them into the Add Keyword List. An example of some Keyword

applications are:

•

If the keyword “XXX” is specified, the URL “http://www.badstuff.com/xxx.html” is

blocked.

•

If the keyword “.com” is specified, only Web sites with other domain suffixes (such as

.edu or .gov) can be viewed.

•

If the keyword “.” is specified, all Internet browsing access is blocked.

Up to eight entries are supported in the Keyword List.

3.

When you have completed your entries, click

Add Keyword

.

Figure 3-3

Wireless Cable Voice Gateway Model CBVG834G Adminstrators User Manual

Protecting Your Network

3-5

v1.0, February 2008

Domain Blocking

To enable domain blocking:

1.

Select the

Enable

radio box adjacent to Domain Blocking.

2.

Enter the Domain Name of the site name you want to block in the

Domain List

field.

If the domain “badstuff.com” is specified, the URL “http://www.badstuff.com/xxx.html” will

be blocked, along with all other URLs in the badstuff.com site.

Up to eight entries are supported in the

Domain List

.

3.

When you have completed your entries, click

Add Domain

.

4.

Click

Apply

to save your settings

To delete a an entry in either the Keyword List or Domain List field:

1.

Select it from the list, and click

Remove Keyword

or click

Remove Domain

.

2.

Click

Apply

to save your settings.

Blocking Access by Time of Day

The default blocking schedule is to block access all day. However, you can also block access

according to a daily schedule for each PC individually.

To block access for a PC:

1.

In the MAC Filtering screen, select the PC for which the schedule will be modified.

2.

In the Day(s) to Block section, select the check boxes next to the days when you want access

blocked.

3.

In the Time of Day to Block section, select either

All Day

, or set the hours for Internet

blocking

4.

Click

Apply

to activate the settings.