Technicolor CGA4131 User manual

CGA4131 BUSINESS GATEWAY
OPERATIONS GUIDE
Version – 0.2
Copyright © 2018
Technicolor
Systems All Rights Reserved
No portions of this material may be reproduced in any form without the written
permission of Technicolor.

3/6/2018 Proprietary and Confidential - Technicolor ii
Revision History
Revision
Date
Description
0.1
3/2/2018
Initial draft
0.2
3/6/2018
Updated the baseline configuration file; added details for
spectrum analyzer and MTA based on review
comments.

3/6/2018 Proprietary and Confidential - Technicolor iii
Table of Contents
1!Introduction ............................................................................................................................ 1!
1.1!Technicolor CGA4131 Business Gateway ...................................................................... 1!
2!WebUI Access Overview ..................................................................................................... 10!
3!Initial Configuration and Setup ............................................................................................ 12!
3.1!Accessing the Web UI ................................................................................................... 12!
4!Web UI Guide ...................................................................................................................... 13!
5!Status Pages ....................................................................................................................... 15!
5.1!Overview ....................................................................................................................... 15!
5.2!Gateway ........................................................................................................................ 16!
5.3!Local Network ............................................................................................................... 17!
5.4!Wireless ........................................................................................................................ 19!
5.5!DOCSIS Status ............................................................................................................. 21!
5.6!DOCSIS Signal ............................................................................................................. 24!
5.7!DOCSIS Log ................................................................................................................. 27!
5.8!Spectrum Analyzer ........................................................................................................ 27!
5.8.1!SNMP provisioning for Spectrum Analyzer ............................................................ 29!
5.9!System .......................................................................................................................... 29!
6!Connection .......................................................................................................................... 33!
6.1!Devices ......................................................................................................................... 33!
6.2!LAN ............................................................................................................................... 33!
6.2.1!SNMP provisioning for LAN ................................................................................... 35!
6.3!WAN .............................................................................................................................. 36!
6.3.1!User provisioning for WAN..................................................................................... 36!
6.3.2!SNMP provisioning for WAN .................................................................................. 40!
6.3.3!Dual Stack Router .................................................................................................. 41!
6.3.4!eSAFE .................................................................................................................... 41!
6.4!Routing .......................................................................................................................... 42!
6.4.1!Enable / Disable IGMP Proxy ................................................................................ 42!
6.4.2!RIP ......................................................................................................................... 43!
6.4.3!User provisioning for RIP ....................................................................................... 44!
6.4.4!SNMP provisioning for Advanced Routing Feature ............................................... 45!

3/6/2018 Proprietary and Confidential - Technicolor iv
6.5!Modem .......................................................................................................................... 45!
6.6!MTA ............................................................................................................................... 45!
6.7!Network Time ................................................................................................................ 47!
7!Wireless ............................................................................................................................... 49!
7.1!Radio ............................................................................................................................. 49!
7.1.1!User provisioning for Radio ................................................................................... 51!
7.1.2!SNMP provisioning for Radio ................................................................................. 52!
7.1.3!Procedure to set SNMP Wireless Settings ............................................................ 54!
7.2!Wireless Security .......................................................................................................... 54!
7.2.1!User provisioning for Security ................................................................................ 55!
7.2.2!SNMP provisioning for Security ............................................................................. 56!
7.3!Advanced Wireless Settings ......................................................................................... 56!
7.3.1!User provisioning for Advanced Wireless settings ................................................. 58!
7.3.2!SNMP provisioning for Advanced Wireless Setting ............................................... 60!
7.4!Guest Network .............................................................................................................. 61!
7.4.1!User provisioning for Guest Network ..................................................................... 63!
7.4.2!SNMP provisioning for Guest Network .................................................................. 65!
7.5!MAC Control .................................................................................................................. 68!
7.5.1!User provisioning for MAC Control ........................................................................ 69!
7.5.2!SNMP provisioning for MAC Control ..................................................................... 69!
7.6!WPS .............................................................................................................................. 70!
7.6.1!User provisioning for WPS ..................................................................................... 71!
7.7!QoS ............................................................................................................................... 72!
7.7.1!User provisioning for QOS ..................................................................................... 73!
7.7.2!SNMP provisioning for QoS ................................................................................... 74!
7.8!Hotspot .......................................................................................................................... 74!
7.8.1!Enabling GRE hotspot with cable modem configuration file .................................. 76!
7.8.2!SNMP provisioning for Hotspot .............................................................................. 77!
8!Security ................................................................................................................................ 78!
8.1!Firewall .......................................................................................................................... 78!
8.1.1!User provisioning for Firewall ................................................................................ 81!
8.1.2!SNMP provisioning for Firewall .............................................................................. 82!
8.2!IP Filter .......................................................................................................................... 83!

3/6/2018 Proprietary and Confidential - Technicolor v
8.2.1!User provisioning for IP Filter ................................................................................ 83!
8.3!Device Filter .................................................................................................................. 83!
8.3.1!User provisioning of Device Filter .......................................................................... 84!
8.3.2!SNMP provisioning for Device Filter ...................................................................... 85!
8.4!Access Control .............................................................................................................. 85!
8.4.1!User provisioning for Access Control ..................................................................... 86!
8.4.2!SNMP provisioning for Access Control .................................................................. 87!
8.5!Service Filter ................................................................................................................. 87!
8.5.1!User provisioning for Service Filter ........................................................................ 88!
8.5.2!SNMP provisioning for Service Filter ..................................................................... 88!
8.6!VPN Tunnel Settings ..................................................................................................... 89!
8.6.1!User provisioning for VPN ..................................................................................... 91!
8.7!Email settings ................................................................................................................ 93!
8.7.1!User provisioning for Email .................................................................................... 94!
8.7.2!SNMP provisioning for Email ................................................................................. 94!
8.8!Report ........................................................................................................................... 95!
9!Applications ......................................................................................................................... 97!
9.1!Port Forward ................................................................................................................. 97!
9.1.1!User provisioning for Port Forward ........................................................................ 97!
9.2!Port Trigger ................................................................................................................... 98!
9.2.1!User provisioning for Port Triggering ..................................................................... 98!
9.2.2!SNMP provisioning for Port Forwarding and Port Triggering ................................. 99!
9.3!Port Filter ....................................................................................................................... 99!
9.3.1!User provisioning for Port Filter ........................................................................... 100!
9.4!DDNS .......................................................................................................................... 100!
9.4.1!User provisioning for DDNS ................................................................................. 101!
9.5!DMZ ............................................................................................................................ 101!
9.5.1!SNMP provisioning for DMZ ................................................................................ 102!
9.6!UPnP ........................................................................................................................... 103!
9.6.1!User provisioning of UPnP ................................................................................... 103!
9.6.2!SNMP provisioning for UPnP ............................................................................... 104!
9.7!IP Passthrough ........................................................................................................... 105!
9.8!SIP ALG ...................................................................................................................... 106!

3/6/2018 Proprietary and Confidential - Technicolor vi
10!Administration .................................................................................................................... 108!
10.1!User ......................................................................................................................... 108!
10.2!Remote Management .............................................................................................. 108!
10.2.1!SNMP provisioning for Remote Management ..................................................... 110!
10.2.2!Telnet / SSH access ............................................................................................ 110!
10.3!Backup & Restore ................................................................................................... 111!
10.3.1!User provisioning for Backup & Restore .............................................................. 111!
10.4!Reboot & Reset ....................................................................................................... 112!
10.4.1!Factory Reset ....................................................................................................... 112!
10.4.2!SNMP provisioning for Reset & Reboot ............................................................... 113!
10.4.3!Reset Username & Password .............................................................................. 113!
10.5!Troubleshooting ....................................................................................................... 113!
10.6!Remote Log ............................................................................................................. 114!
11!Diagnostics ........................................................................................................................ 116!
11.1!System ..................................................................................................................... 116!
11.2!Interface .................................................................................................................. 117!
11.3!Network ................................................................................................................... 122!
11.4!Wireless ................................................................................................................... 123!
11.5!Clients ...................................................................................................................... 126!
11.6!Internet .................................................................................................................... 127!
12!Mixed mode ....................................................................................................................... 128!
12.1!Procedure to configure Mixed mode ....................................................................... 128!
12.2!SNMP provisioning for Mixed mode ........................................................................ 128!
13!Isolation ............................................................................................................................. 129!
13.1!SNMP provisioning for APIsolation ......................................................................... 129!
14!TR-069 ............................................................................................................................... 131!
14.1!User provisioning forTR-069 ................................................................................... 131!
14.2!SNMP provisioning for TR-069 ................................................................................ 132!
15!TR-143 ............................................................................................................................... 133!
16!Appendix 1: Sample CM Config file ................................................................................... 134!
17!Appendix 2: Sample bitmask configuration for Web UI ..................................................... 140!
18!Abbreviations and Acronyms ............................................................................................. 144!

1 Introduction
This document provides information on the Technicolor CGA4131 Business Gateway to
Technicolor’s service provider customers. The audience for this document includes those
personnel who are tasked with deploying, maintaining, and servicing this device as well as
those who provide answers to questions from end users.
1.1 Technicolor CGA4131 Business Gateway
The CGA4131 Business Gateway allows cable MSOs to respond to small and medium
businesses with a business-centric set of data, voice, and wireless features. The CGA4131
is a DOCSIS® 3.1 broadband gateway offering triple-play services: up to Gigabit speeds,
business VoIP and next generation 802.11ac Wi-Fi. The device can be configured using a
web page user interface accessible by the user or remotely by the MSO by SNMP/TR-069.
The Technicolor CGA4131 offers the following features:
• Compliance with DOCSIS 3.0 and 3.1 standards to deliver high-end performance
and reliability
• High performance Broadband Internet Connectivity
• Eight-line embedded digital voice adapter for wired telephony service
• Two 802.11 Wi-Fi radios for dual-band concurrent operation, with up to eight SSIDs
per radio
• Wi-Fi Protected Setup™ (WPS) support with hardware push button for simplified and
secure wireless setup
• User configurable Access Control and firewall settings
• Compact design allows for horizontal or wall-mounted operation
• Color coded interface ports and corresponding cables to simplify installation and
setup
• Front panel LEDs show operational status for the user
• Automatic software upgrade capability for the service provider
• TR-069 Compliant Remote Management Capabilities

3/6/2018 Proprietary and Confidential - Technicolor 2
Front Panel View and LED Operations
The following images represent the front panel view of the CGA4131 TCH2-GA-TBR.
Figure 1.1
Figure 1.2
Ethernet LED (Item A)
State
Description
Solid on
Ethernet is enabled with AC power
Off
Ethernet is not enabled

3/6/2018 Proprietary and Confidential - Technicolor 3
Ethernet Ports 1-8LEDs (Items B - I)
The CGA4131 has 8 Ethernet ports. The status of each port is shown by its LED state:
Port 1
LED B
Port 2
LED C
Port 3
LED D
Port 4
LED E
Port 5
LED F
Port 6
LED G
Port 7
LED H
Port 8
LED I
State
Description
Solid on
The port is connected.
Off
The port is not connected
Blinking
Data is being transferred
Internet LED (Item J)
State
Description
Solid on
Internet Service is active
Off
There is no Internet Service
Wi-Fi LED (Item K)
State
Description
Blinking
Data (2.4GHz or 5GHz) is active over the wireless connection
Off
Wi-Fi access point is not enabled
Online LED (Item L)
State
Description
Solid on
Connected to the service provider’s network. Even when internet is
not active, LED is on. Data traffic can be used.
Blinking
Trying to acquire Upstream, Downstream frequencies

3/6/2018 Proprietary and Confidential - Technicolor 4
Telephone Lines 1-8 LEDs (Items M - T)
The CGA4131 has 8 telephone lines. The status of each telephone lines shown by its LED
state:
Telephone
Line 1
LED M
Telephone
Line 2
LED N
Telephone
Line 3
LED O
Telephone
Line4
LED P
Telephone
Line5
LED Q
Telephone
Line6
LED R
Telephone
Line7
LED S
Telephone
Line8
LED T
Reset Button (Item U)
Press the Reset button to reset the box.
Press the Reset button approximately 12-13 seconds to restore to factory settings.!
Telephone Line LED (Item V)
State
Description
Solid on
MTA Voice interface is operational
Off
MTA Voice interface is not operational
WPS (Item W)
Battery LED (Item X)
State
Description
Solid on
Telephone line is registered successfully with the call manager
Blinking
Telephone line has either gone off-hook or is in active call
Off
Telephone line is not registered with the call manager
State
Description
Blinking
WPS Process initialized and lasts for 2 minutes
Off
No WPS activity
State
Description
Off
Device is off, or AC power is on or Battery is not installed
Solid on
On Battery Power
Blinking
Battery needs replacement

3/6/2018 Proprietary and Confidential - Technicolor 5
Top View
The following image depicts the top view of the CGA4131 TCH2-GA-TBR.
Figure 1.3

3/6/2018 Proprietary and Confidential - Technicolor 6
Back Panel
The following image depicts the back panel view of the CGA4131 TCH2-GA-TBR.
Figure 1.4
Telephone port (Item A)
Eight-line embedded digital voice adapter for wired telephony service.
Ethernet switch (Item B)
Eight 1000/100/10BASE-T Ethernet ports provide wired connectivity. The first 4 Ethernet
ports each can transfer up to 1 Gbps data, while the ports 5 to 8 can have a combined data
transfer speed of 1 Gbps. Each Ethernet port has two LEDs:
LED
LED Status
Description
Left LED
(Green)
Solid on
Connected to a Gigabit Ethernet device
Blinking
Connected to a Gigabit Ethernet device and
sending/receiving data
Off
Not connected to a Gigabit Ethernet device
Right LED
(Amber)
Solid on
Connected to a100Mbps/10Mbps device
Blinking
Connected to a 100Mbps/10Mbps device and
sending/receiving data
Off
Not connected to a 100Mbps/10Mbps device

3/6/2018 Proprietary and Confidential - Technicolor 7
Cable port (Item C)
The CGA4131 complies with DOCSIS 3.0, 3.1 standards along with Packet Cable™
specifications to deliver high-end performance and reliability.
USB port (Item D)
USB port is used to connect USB devices.
Power inlet (Item E)
The power inlet (Power) allows connecting the power cord.
Bottom panel
The following images depict the bottom panel view of the CGA4131 TCH2-GA-TBR.
Figure 1.5 shows Bottom panel with Battery Compartment with door on (Item A).
Battery Slot (Item A)
Accommodates devices’ backup battery (optional)
Figure 1.5

3/6/2018 Proprietary and Confidential - Technicolor 8
Figure 1.6 shows Bottom panel with labeling.
Figure 1.6
2.4GHz SSID (Item A)
Network Name (SSID) is the network name of the 2.4GHz access point. SSID is derived
from the Wi-Fi MAC address.
Passphrase of Device for2.4GHz (Item B)
PRE-SHARED KEY-Passphrase of Device for 2.4GHz.

3/6/2018 Proprietary and Confidential - Technicolor 9
5GHz SSID (Item C)
Network Name (SSID) is the network name of the 5GHz access point. SSID is derived
from the Wi-Fi MAC address.
Passphrase of Device for5GHz (Item D)
PRE-SHARED KEY - Passphrase of Device for 5GHz
HW Rev (Item E)
This specifies the hardware revision of the device.
Factory ID (Item F)
This defines the factory ID of the device.
MTA MAC address (Item G)
This defines the MTA MAC address.
WAN MAC address (Item H)
This defines the WAN MAC address.
CM MAC address (Item I)
This defines the Cable Modem’s MAC address.
Serial Number of Device (Item J)
This defines the device’s serial number.

3/6/2018 Proprietary and Confidential - Technicolor 10
2 WebUI Access Overview
This section explains the various access interfaces and access levels to CGA4131 Web UI.
There are 3 interfaces for the user/operator to connect to on the CGA4131 TCH2-GA-TBR:
• LAN (Default URL 192.168.0.1 on LAN side)
• Cable Modem (CM IP on the WAN side)
• eRouter (eRouter IP on the WAN side)
Apart from these 3 interfaces, there are 2 user levels – Home User and Advanced User.
The access to the various Web UI pages from various interfaces are determined by the
configuration of specific MIBs and the bit masking MIB to enable or disable a specific Web
UI page. The following table explains the Web UI pages accessible in these combinations:
MIB
MIB
value
Interface
Web UI pages accessible
tchCmWebAcc
essUserIfLevel.
home-user.lan
0
192.168.0.1 on
LAN PC
Allow Home user to login, show only System Page
1
192.168.0.1 on
LAN PC
Allow Home user to login, show only System Page
2
192.168.0.1 on
LAN PC
Allow Home user to login, show only System Page
3
192.168.0.1 on
LAN PC
Allow Home user to login, show only System Page
100
192.168.0.1 on
LAN PC
Allow Home user to login, show all pages with
bitmasking (tchCmWebAccessHomeWriteBitmask)
tchCmWebAcc
essUserIfLevel.
home-user.rf-
cm
-
Home User not
permitted to login
with CM IP on
WAN PC
Home User is not permitted to login with CM IP on WAN
PC
tchCmWebAcc
essUserIfLevel.
home-
user.wan-rg
0
eRouter IP on
WAN PC
Allow Home user to login, show only System Page
1
eRouter IP on
WAN PC
Allow Home user to login, show only System Page
2
eRouter IP on
WAN PC
Allow Home user to login, show only System Page
3
eRouter IP on
WAN PC
Allow Home user to login, show only System Page
100
eRouter IP on
WAN PC
Allow Home user to login, show all pages with
bitmasking (tchCmWebAccessHomeWriteBitmask)
tchCmWebAcc
essUserIfLevel.
adv-user.lan
0
192.168.0.1 on
LAN PC
Advanced user is not permitted to login from LAN side
1
192.168.0.1 on
LAN PC
Advanced user is not permitted to login from LAN side
2
192.168.0.1 on
LAN PC
Advanced user is not permitted to login from LAN side
3
192.168.0.1 on
LAN PC
Advanced user is not permitted to login from LAN side

3/6/2018 Proprietary and Confidential - Technicolor 11
100
192.168.0.1 on
LAN PC
Advanced user is not permitted to login from LAN side
tchCmWebAcc
essUserIfLevel.
adv-user.rf-cm
0
CM IP on WAN
PC
Allow Advanced user to login, show only System Page
1
CM IP on WAN
PC
Allow Advanced user to login, show only System Page
2
CM IP on WAN
PC
Allow Advanced user to login, show only System Page
3
CM IP on WAN
PC
Allow Advanced user to login, show only System Page
100
CM IP on WAN
PC
Allow Advanced user to login, show all pages with bit
masking (tchCmWebAccessAdvancedWriteBitmask)
tchCmWebAcc
essUserIfLevel.
adv-user.wan-
rg
0
eRouter IP on
WAN PC
Allow Advanced user to login, show only System Page
1
eRouter IP on
WAN PC
Allow Advanced user to login, show only System Page
2
eRouter IP on
WAN PC
Allow Advanced user to login, show only System Page
3
eRouter IP on
WAN PC
Allow Advanced user to login, show only System Page
100
eRouter IP on
WAN PC
Allow Advanced user to login, show all pages with
bitmasking (tchCmWebAccessAdvancedWriteBitmask)
The Web UI pages available for home user and the advanced user access levels can be
different. They are defined by the access Level MIB and bit masking MIBs
(tchCmWebAccessHomeWriteBitmaskand tchCmWebAccessAdvancedWriteBitmask).The
bit masking information is also stored in the config file. They can also be modified by the
SNMP MIBs. Please see Appendix 2 for examples of configuring these bitmask MIB
elements.
The user is directed to login page to login with default system credentials (admin /
password). For the advanced user, the user name is admin and the password would be the
generated password of the day (POTD).
CM Config file snippet for POTD configuration
SnmpMibObject tchCmWebAccessAdvancedType.0 Integer 2; /* potd */
SnmpMibObject tchCmWebAccessAdvancedPassword.0 HexString 0x272a73bdb4945eddc88f6a66198c1056;
The Web UI has an idle timeout of 15 minutes. The user needs to re-login to access the
Web UI after the timeout.

3/6/2018 Proprietary and Confidential - Technicolor 12
3 Initial Configuration and Setup
The CGA4131 is configured using the Web UI.
3.1 Accessing the Web UI
CGA4131 Web UI can be accessed through the various interfaces (LAN IP, CM IP or the
eRouter IP) as explained in the previous section. The gateway prompts the user to enter the
username and password.
Figure 3.1
The various pages on the Web UI would be accessible once the credentials are accepted.

3/6/2018 Proprietary and Confidential - Technicolor 13
4 Web UI Guide
The following table describes the web pages available to the users. Availability of these
pages is defined by the Web UI access levels configured as per the previous section.
Top Tab
Sub-tab
Status
Overview
Gateway
Local Network
Wireless
DOCSIS Status
DOCSIS Signal
DOCSIS Log
Spectrum Analyzer (WAN:- CM Side details for login
work )
System
Connection
Devices
LAN
WAN
Routing
Modem
MTA
Network Time
Wireless
Radio
Security
Advanced
Guest Network
MAC Control
WPS
QoS
Hotspot
Security
Firewall
IP Filter
Device Filter

3/6/2018 Proprietary and Confidential - Technicolor 14
Access Control
Service Filter
VPN
Email Settings
Report
Application
Port Forward
Port Trigger
Port Filter
DDNS
DMZ
UPnP
IP Passthrough
SIP ALG
Administration
User
Remote Access
Backup & Restore
Reboot & Reset
Troubleshooting
Remote Log
Diagnostic
System
Interface
Network
Wireless
Clients
Internet
!