Protecting & Monitoring Your Wireless Network

SURFboard® SBG6700-AC Wireless Cable Modem Gateway

•

User Guide

35

365-095-25781 x.1

Figure 33 – Firewall Parental Control Screen

5.

Enter a name for the user profile that you want to create in the Description field.

6.

Enter the 12-digit (hexadecimal) MAC address of the device for which you are creating Parental

Controls in the MAC Address field.

7.

Enter the web address of the Internet site that you want to block or access.

8.

Enter the Starting port number of the in the Start Port field.

9.

Enter the Ending port number of the in the End Port field.

10.

Select

TCP

,

UDP

, or

BOTH

from the Internet Protocol drop-down list.

11.

Select the days of the week that you want to allow the selected user to access the Internet.

12.

Select the time range that you want to allow the selected user to access the Internet.

13.

Select to

Allow

or

Block

Internet access for the time and days you set previously.

14.

Select

On

or

Off

in the Enabled field to enable or disable this Parental Control restriction.

15.

Click

Apply

, when done.

Protecting & Monitoring Your Wireless Network

SURFboard® SBG6700-AC Wireless Cable Modem Gateway

•

User Guide

36

365-095-25781 x.1

Set Up Port Triggers

You can use Port Triggers to configure dynamic triggers to specific devices on the LAN. This allows

special applications that require specific port numbers with bi-directional traffic to function properly.

Applications such as video conferencing, voice, gaming, and some messaging program features may

require these special settings.

Note

: If you enable the firewall and set up custom port triggers, then you must configure the firewall to allow

traffic through those custom ports. See

Set Up Firewall Protection

for more information.

To configure Port Triggers:

1.

Click

Advanced

on the SBG6700-AC Main Menu bar.

2.

Click

Port Triggers

from the Advanced submenu options.

Figure 34 – Advanced Port Triggers Screen

3.

Click

Create Port Triggers

button to open the Add Port Triggering Entry window.

Figure 35 – Create Port Triggers Screen

4.

Enter the starting port number for the port to be triggered in the Trigger Start Port field.

5.

Enter the ending port number for the port to be triggered in the Trigger End Port field.

6.

Enter the starting port number of the Port Trigger range in the Target Start Port field.

7.

Enter the ending port number of the Port Trigger range in the Target End Port field.

8.

Select

TCP

,

UDP

, or

BOTH

from the Internet Protocol drop-down list.

9.

Enter a unique name in the Description field.

10.

Select

On

to enable IP port triggers or

Off

to disable them.

Protecting & Monitoring Your Wireless Network

SURFboard® SBG6700-AC Wireless Cable Modem Gateway

•

User Guide

37

365-095-25781 x.1

11.

Click

Apply

to create your port triggers.

12.

Repeat steps 3 thru 11 for each additional port trigger that you want to create.

Set Up Port Forwarding

You can use Port Forwarding to set up a computer or other network device on your home network

(LAN) to be accessible to computers or other remote network devices on the Internet. This allows you to

open specific ports behind the firewall on your LAN to set up dedicated connections between your

computer and other remote computers for online gaming or other online services. Some allowable

services are predefined under the Commonly Forwarded Ports. See Figure 37 for a list of commonly

used port numbers.

Note

: It is recommended that you manually configure the TCP/IP settings listed below on the computer you

are setting up for remote access. Otherwise, remote access to your computer will not be available on the

Internet.

•

IP address

•

Subnet mask

•

Default gateway

•

DNS address (at least one)

To set up Port Forwarding:

1.

Click

Advanced

on the SBG6700-AC Main Menu bar.

2.

Click

Port Forwarding

from the Advanced submenu options.

Note

: To map a port, you would enter the range of port numbers that you want forwarded locally and

the IP address for sending traffic to those ports. If you only want a single port specification, enter the

same port number in the start and end locations for that IP address.

Figure 36 – Advanced Port Forwarding Screen

3.

Do either of the following to set up the External IP Address:

ο

Keep the IP Address set at

0.0.0.0

in the External IP Address field and then enter the port

number in the Start Port field. Repeat the same port number in the End Port field (select a

specific port from the Commonly Forwarded Ports drop-down list or see Figure 37 for the list).

This allows incoming data traffic on the specified ports from

any

remote IP address.

Protecting & Monitoring Your Wireless Network

SURFboard® SBG6700-AC Wireless Cable Modem Gateway

•

User Guide

38

365-095-25781 x.1

ο

Enter a specific remote IP address of your choice in the External IP Address field and then enter

the specific port numbers in the Start and End Port fields (select a specific port from the

Commonly Forwarded Ports drop-down list or see Figure 37 for the list).

This allows incoming data traffic on the specified ports from only

one

remote IP address.

Note

: To forward a range of ports, enter the first number of the port range in the Start Port field and

the last number of the port range in the End Port field.

4.

Do the following to set up your Local IP Address:

a.

Enter the IP address of your local computer that you are setting up for port forwarding.

b.

Enter the port number of your choice in the Start Port field. Repeat the same port number in

the End Port field (select a specific port from the Commonly Forwarded Ports drop-down list or

see Figure 37 for the list).

Note

: To forward a range of ports, enter the first number of the port range in the Local Start Port

field and the last number of the port range in the Local End Port field.

5.

Enter a description to name the forwarded port you are creating.

6.

Select

TCP

,

UDP

, or

BOTH

from the Internet Protocol drop-down list.

7.

Select

On

to enable port forwarding or

Off

to disable it.

8.

Click

Apply

.

Figure 37 – Commonly Used Forwarded Ports List

Protecting & Monitoring Your Wireless Network

SURFboard® SBG6700-AC Wireless Cable Modem Gateway

•

User Guide

39

365-095-25781 x.1

Set Up the DMZ Host

WARNING!

The gaming DMZ host is not protected by the SBG6700-AC gateway firewall.

It is exposed to the Internet and thus vulnerable to attacks or hacking from any computer

on the Internet. Consider carefully before configuring a device to be in the DMZ.

You can configure one computer on your home network to be the DMZ Host. That computer will

operate outside of the SBG6700-AC firewall and allow remote access from the Internet to your

computer, gaming device, or other IP-enabled device. The DMZ Host feature will only allow outside

users to have direct access to the designated DMZ Host device and not your home network. See

DMZ

Host

for more information.

To create the DMZ Host:

1.

Click

Advanced

on the SBG6700-AC Main Menu bar.

2.

Click

DMZ Host

from the Advanced submenu options.

Figure 38 – Advanced DMZ Host Screen

3.

Enter the last one to three digits (from

2

to

254

) of the IP address of the computer or gaming device

that you are setting up as the DMZ host.

4.

Click

Apply

.

Note

: Remember to reset the IP address back to

0

(zero) to close all the ports when you are finished with the

needed application. If you do not reset the IP address, that computer will be exposed to the public Internet.

Store Remote Firewall Logs

You can store firewall attack reports or logs on a computer in your home, so that multiple instances can

be logged over a period of time. You can select individual attack or configuration items to send to the

SysLog server, so that only the items of interest will be monitored.

Note

: The SysLog server must be on the same network as the Private LAN behind the Configuration Manager

(typically

192.168.0.x

).

To store remote Firewall logs:

1.

Click the

Firewall-Remote Log

menu link or click the Firewall menu button on the SBG6700-AC

Main Menu and then select

Remote Log

.