SBG6782 (v8.4.x): DMZ Host Setup

How do I setup a DMZ Host in the SBG6782 Cable Gateway? 

The DMZ Host feature allows the Gateway to forward all externally initiated IP traffic (TCP and UDP protocols only) to a default host on the LAN.

This document contains the following sections:

• Enabling the DMZ Host
• Disabling the DMZ Host

NOTE: If the DMZ Host feature has been enabled, and now it is desired to disable it, skip down to the Disabling the DMZ Host section. The following are a couple of scenarios in which DMZ Host is useful:

• When the port number or protocol in an in-bound application cannot be anticipated. For example, some network games select arbitrary port numbers when a connection is opened.
• When all unsolicited traffic needs to be forwarded to a specific LAN host.
• When an application does not work well with port triggering.

NOTE 1: It is recommended to manually configure the TCP / IP settings on the server that will be the DMZ host.  If this is done, then it is mandatory to configure the following settings:

• IP address
• Subnet mask
• Default gateway
• At least one DNS address

If these settings are configured without the default gateway, remote access to the server will not be available, as it will only be accessible from the local network.

NOTE 2: When manually configuring the TCP / IP settings on a device, make sure that the DHCP pool in the SBG6782 doesn't include the IP address of the DMZ host.  To verify or to adjust the DHCP pool, please refer to Answer # 22425 - SBG6782 (v8.4.x): LAN Subnet Setup.

 

Enabling the DMZ Host

1. Launch a Firefox or Safari browser.  Enter http://192.168.0.1 into the address box, and press the Enter key.  
   
   NOTE: A browser message on Chrome, Edge, Firefox, and Opera, may appear when accessing the Web Manager.  The message includes 192.168.01 uses an unsupported protocol and ERR_SSL_VERSION_OR_CIPHER_MISMATCH.  The Web Manager uses an earlier version of the TLS protocol and does not match the version allowed by the web browser.  Safari browsers on Apple PC and mobile devices are not impacted.  The workaround to access the Web Manager with a PC is to use the Firefox browser and set the TLS version to 1.  For workaround instructions refer to article # 19435 - 192.168.0.1 uses an unsupported protocol.
    
2. A security or private risk alert may appear on the web browser advising users to proceed with caution when accessing the Web Manager.  There is no risk in proceeding to the Web Manager.  For instructions to bypass the alert screen, refer to article # 18181 - Alert Message for Web Manager Access.
    
3. On the Login page, enter admin or a customized username in the Username field.
    
4. Enter motorola or a customized password in the Password field.
   
   NOTE 1: On later versions of the SBG6782-AC, the Wi-Fi Security Key is used as the default admin password printed on the bottom white label.  For assistance with Web Manager Access, refer to article # 18755 – SBG6782-AC: Web Manager Access.
   
   
    
   NOTE 2:  For units that have been leased or purchased by Shaw Communications, the username is cusadmin, and the password is the Customer S/N (Serial Number), located on a white sticker on the bottom of the unit.
   
   NOTE 3:  If the unit has been leased or purchased by Time Warner Cable, and the admin username and motorola password does not allow access to the GUI, please contact Time Warner Cable for assistance.
    
5. Click the Login button.  The Home page will appear.
   
   
    
6. Move the mouse cursor over Advanced on the top menu, and select DMZ Host.  The Advanced - DMZ Host page will appear.
   
   
    
7. On the Advanced - DMZ Host page:
   a.   DMZ Host -  Enter the IP Address of the DMZ Host. For example: if the IP address of the server is 192.168.0.2, then enter 2.
   b.  Click the Apply button.
   
        
    

The SBG6782 Cable Gateway is now configured to enable a specific device on the LAN to be the DMZ host.
 

Disabling the DMZ Host

1. Launch a Firefox or Safari browser.  Enter http://192.168.0.1 into the address box, and press the Enter key.  
   
   NOTE: A browser message on Chrome, Edge, Firefox, and Opera, may appear when accessing the Web Manager.  The message includes 192.168.01 uses an unsupported protocol and ERR_SSL_VERSION_OR_CIPHER_MISMATCH.  The Web Manager uses an earlier version of the TLS protocol and does not match the version allowed by the web browser.  Safari browsers on Apple PC and mobile devices are not impacted.  The workaround to access the Web Manager with a PC is to use the Firefox browser and set the TLS version to 1.  For workaround instructions refer to article # 19435 - 192.168.0.1 uses an unsupported protocol.
    
2. A security or private risk alert may appear on the web browser advising users to proceed with caution when accessing the Web Manager.  There is no risk in proceeding to the Web Manager.  For instructions to bypass the alert screen, refer to article # 18181 - Alert Message for Web Manager Access.
    
3. On the Login page, enter admin or a customized username in the Username field.
    
4. Enter motorola or a customized password in the Password field.
   
   NOTE 1: On later versions of the SBG6782-AC, the Wi-Fi Security Key is used as the default admin password printed on the bottom white label.  For assistance with Web Manager Access, refer to article # 18755 – SBG6782-AC: Web Manager Access.
   
   
    
   NOTE 2:  For units that have been leased or purchased by Shaw Communications, the username is cusadmin, and the password is the Customer S/N (Serial Number), located on a white sticker on the bottom of the unit.
   
   NOTE 3:  If the unit has been leased or purchased by Time Warner Cable, and the admin username and motorola password does not allow access to the GUI, please contact Time Warner Cable for assistance.
    
5. Click the Login button.  The Home page will appear.
   
   
    
6. Move the mouse cursor over Advanced, and select DMZ Host.  The Advanced - DMZ Host page will appear.
   
   
    
7. On the Advanced - DMZ Host page:
   a.   DMZ Host - Enter 0.
   b.   Click the Apply button.
   
   

The DMZ Host feature in SBG6782 has now been disabled.