1. Home
    2. /
  2. Manuals
    3. /
  3. Arris
    4. /
  4. SBG6900-AC
    5. /
  5. 13
Page 61 / 80 Scroll up to view Page 56 - 60
Protecting & Monitoring Your Wireless Network
SURFboard® SBG6900-AC Wireless Cable Modem & Router
•
User Guide
49
365-095-27293 x.1
Copyright 2015 ARRIS Enterprises, Inc. All Rights Reserved.
11.
Click Apply to create your port triggers.
12.
Repeat steps 3 thru 11 for each additional port trigger you want to create.
Set Up Port Forwarding
You can use Port Forwarding to
set up a computer or other network device on your home
network (LAN) to be accessible to computers or other remote network devices on the Internet.
Port forwarding allows you to open specific ports behind the firewall on your home network to
set up dedicated connections between your computer and other remote computers for online
gaming or other online services. Some allowable services are predefined under the Commonly
Forwarded Ports. See Figure 51 for a list of commonly used port numbers.
Note
: It is recommended that you manually configure the TCP/IP settings listed below on the computer
you are setting up for remote access. Otherwise, remote access to your computer will not be available
on the Internet.
•
IP address
•
Subnet mask
•
Default gateway
•
DNS address (at least one)
To set up Port Forwarding:
1.
Log in to the SBG6900-AC Web Manager.
2.
Click Advanced on the SBG6900-AC Main Menu bar.
3.
Click Port Forwarding from the Advanced submenu options.
Figure 49 – Create Forwarded Ports Screen
4.
Click Create IPv4 button to open the Port Forwarding IPv4 Entry window.
Note
: To map a port, you would enter the range of port numbers that you want forwarded locally
and the IP address for sending traffic to those ports. If you only want a single port specification,
enter the same port number in the start and end locations for that IP address.
Page 62 / 80
Protecting & Monitoring Your Wireless Network
SURFboard® SBG6900-AC Wireless Cable Modem & Router
•
User Guide
50
365-095-27293 x.1
Copyright 2015 ARRIS Enterprises, Inc. All Rights Reserved.
Figure 50 – Create Forwarded Ports Screen
or
Advanced Port Forwarding Screen
5.
Do either of the following to set up the External IP Address:
ο
Keep the IP Address set at
0.0.0.0
in the External IP Address field and then enter the port
number in the Start Port field. Repeat the same port number in the End Port field (select
a specific port from the Commonly Forwarded Ports drop-down list or see Figure 51 for
the list).
This allows incoming data traffic on the specified ports from
any
remote IP address.
ο
Enter a specific remote IP address of your choice in the External IP Address field and
then enter the specific port numbers in the Start and End Port fields (select a specific
port from the Commonly Forwarded Ports drop-down list or see Figure 51 for the list).
This allows incoming data traffic on the specified ports from only
one
remote IP address.
Note
: To forward a range of ports, enter the first number of the port range in the Start Port field and
the last number of the port range in the End Port field.
6.
Do the following to set up your Local IP Address:
a.
Enter the IP address of your local computer that you are setting up for port forwarding.
b.
Enter the port number of your choice in the Start Port field. Repeat the same port
number in the End Port field (select a specific port from the Commonly Forwarded Ports
drop-down list or see Figure 51 for the list).
Note
: To forward a range of ports, enter the first number of the port range in the
Local
Start Port
field and the last number of the port range in the
Local
End Port field.
7.
Enter a description to name the forwarded port you are creating.
8.
Select TCP, UDP, or BOTH from the Internet Protocol drop-down list.
9.
Select On to enable port forwarding or Off to disable it.
10.
Click
Apply
.
11.
Click Add to insert the service in the Port Forwarding table.
Page 63 / 80
Protecting & Monitoring Your Wireless Network
SURFboard® SBG6900-AC Wireless Cable Modem & Router
•
User Guide
51
365-095-27293 x.1
Copyright 2015 ARRIS Enterprises, Inc. All Rights Reserved.
Figure 51 – Commonly Used Forwarded Ports List
Note
: To map a port, you would enter the range of port numbers that you want forwarded locally
and the IP address for sending traffic to those ports. If you only want a single port specification,
enter the same port number in the start and end locations for that IP address.
Figure 52 – Forwarded Ports Screen
12.
Select or deselect the Enable checkbox to turn on or off port forwarding for the selected
service on that port.
13.
Optional step: Enter a new name in the Description field to change the name for the server
you are creating.
Page 64 / 80
Protecting & Monitoring Your Wireless Network
SURFboard® SBG6900-AC Wireless Cable Modem & Router
•
User Guide
52
365-095-27293 x.1
Copyright 2015 ARRIS Enterprises, Inc. All Rights Reserved.
14.
Select BOTH, UDP, or TCP from the Internet protocol Type drop-down list.
15.
Do either of the following to set up the Private IP address:
•
Enter a specific remote IP address of your choice in the Private IP address field.
•
Enter the specific port numbers in the Private port field.
•
This allows incoming data traffic on the specified ports from only one remote IP address.
•
Note: To forward a range of ports, enter the first and last numbers of the port range in
the Private port field.
16.
Repeat steps 3 through 8 for each additional port.
17.
Click Apply when done.
Set Up the DMZ Host
WARNING!
The gaming DMZ host is not protected by the SBG6900-AC gateway firewall. It
is exposed to the Internet and thus vulnerable to attacks or hacking from any computer
on the Internet. Consider carefully before configuring a device to be in the DMZ.
You can configure one computer on your home network to be the DMZ. That computer will
operate outside of the SBG6900-AC firewall and allow remote access from the Internet to your
computer, gaming device, or other IP-enabled device. The DMZ feature will only allow outside
users to have direct access to the designated DMZ device and not your home network.
To create the DMZ Host:
1.
Log in to the SBG6900-AC Web Manager.
2.
Click Advanced on the SBG6900-AC Main Menu bar.
3.
Click DMZ Host from the Advanced submenu options.
Figure 53 –DMZ Host Settings Screen
4.
Enter the last one to three digits (from 2 to 254) of the IP address of the computer or
gaming device that you are setting up as the DMZ host.
5.
Click Apply.
Note
: Remember to reset the IP address back to
0
(zero) to close all the ports when you are finished
with the needed application. If you do not reset the IP address, that computer will be exposed to the
public Internet.
Page 65 / 80
Protecting & Monitoring Your Wireless Network
SURFboard® SBG6900-AC Wireless Cable Modem & Router
•
User Guide
53
365-095-27293 x.1
Copyright 2015 ARRIS Enterprises, Inc. All Rights Reserved.
Set Up Firewall Event Log Notifications
When a firewall attack is detected on your home network, a separate email alert notification is
generated and a local log or report of the event is created. You can set up automatic email alert
notifications for whenever a firewall attack is detected on the SBG6900-AC. See
Local Log
for
more information.
To set up Firewall Event Log notifications:
1.
Log in to the SBG6900-AC Web Manager.
2.
Click Firewall on the SBG6900-AC Main Menu bar.
3.
Click Local Log from the Firewall submenu options.
Figure 54 – Set Up Firewall Local Log Screen
4.
Enter your email address in the Contact Email Address field.
5.
Enter the name of the email server in the SMTP Server Name field. Check with your service
or email provider.
6.
Enter the user name for your email account in the SMTP Username field.
7.
Enter the password for your email account in the SMTP Password field.
8.
Select Enable checkbox in the E-mail Alerts field to allow for automatic Email alerts.
9.
Click Apply.
Store Remote Firewall Logs
You can store firewall attack reports or logs on a computer in your home, so that multiple
instances can be logged over a period of time. You can select individual attack or configuration
items to send to the SysLog server, so that only the items of interest will be monitored.
Note
: The SysLog server must be on the same network as the Private LAN behind the Configuration
Manager (typically
192.168.0.x
).

Rate

4 / 5 based on 1 vote.

Popular Arris Models

Famous Router IPs
Famous Router Companies
Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top