SURFboard® SBG8300 DOCSIS 3.1 Wi-Fi Cable Modem with McAfee® Secure Home Internet User Guide July 2018 Copyright 2018, ARRIS Enterprises, LLC. All rights reserved.
ARRIS copyrights and trademarks © 2018 ARRIS Enterprises, LLC. All rights reserved. No part of this publication may be reproduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without written permission from ARRIS Enterprises, LLC (“ARRIS”). ARRIS reserves the right to revise this publication and to make changes in content from time to time without obligation on the part of ARRIS to provide notification of such revision or change.
Table of Contents 1. Safety and regulatory information ............................................................................ 5 Important safety instructions ............................................................................................ 5 FCC statements .................................................................................................................. 7 Wireless LAN information................................................................................................
IPv4 security ............................................................................................................ 46 IPv6 security ............................................................................................................ 47 Set up parental control .................................................................................................... 48 Set up port forwarding ....................................................................................................
Chapter 1 Safety and regulatory information Read all safety and regulatory information before installing your Wi-Fi cable modem and setting up your home network connection. Important safety instructions Read This Before You Begin — When using your equipment, basic safety precautions should always be followed to reduce the risk of fire, electric shock, and injury to persons, including the following: Read all the instructions listed here and/or in the user manual before you operate this device.
Chapter 1: Safety and regulatory information Place this device in a location that is close enough to an electrical outlet to accommodate the length of the power cord. Place the device to allow for easy access when disconnecting the power cord of the device from the AC wall outlet. Do not connect the plug into an extension cord, receptacle, or other outlet unless the plug can be fully inserted with no part of the blades exposed. Place this device on a stable surface.
Chapter 1: Safety and regulatory information FCC statements FCC interference statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential environment.
Chapter 1: Safety and regulatory information This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter except those already approved in this filing. The availability of some specific channels and/or operational frequency bands are country dependent and are firmware programmed at the factory to match the intended destinations. The firmware setting is not accessible by the end user.
Chapter 1: Safety and regulatory information Security Warning: This device allows you to create a wireless network. Wireless network connections may be accessible by unauthorized users. For more information on how to protect your network, see Protecting & monitoring your Wi-Fi network (page 44) in this guide for more information or visit the ARRIS Support website at www.arris.com/selfhelp.
Chapter 2 Getting started Welcome to the next generation of SURFboard® ultra-high-speed DOCSIS 3.1® Wi-Fi cable modems with the new McAfee Secure Home Internet protection. The ARRIS SURFboard SBG8300 is a combination DOCSIS 3.1® cable modem and four-port Ethernet router with Wi-Fi. It uses DOCSIS 3.1 technology to provide ultra-high-speed Internet access on your home or small business network.
Chapter 2: Getting started Item Description Wall Wart Power Supply Power supply for an electrical wall outlet connection Ethernet Cable Standard Category 5e (CAT5e) or higher network cable Software License & Warranty Card Contains safety and regulatory information, software license, and warranty for the Wi-Fi cable modem. Support Information Card Provides contact information for obtaining technical support assistance with any issues you may have with your SURFboard device.
Chapter 2: Getting started Contact information For technical support and additional ARRIS product information: Visit the ARRIS Support website: www.arris.com/selfhelp Call ARRIS Technical Support: 1-877-466-8646 PN 365-095-32542 x.1 Copyright 2018, ARRIS Enterprises, LLC. All rights reserved.
Chapter 3 Product overview Front panel Figure 1: Table 2. LED Icon SBG8300 front view SBG8300 front panel LED icons Status Description Blue (On) Blue (Slow Blink) Blue (Fast Blink) Green (On) Blue/Green Power is connected. Acquiring downstream channel connection. Acquiring upstream channel connection. IP Link/Online Firmware downloads in progress. Green (Slow Blink) Green (On) Green (Fast Blink) Blue (Slow Blink) Blue (On) Blue (Fast Blink) No clients found (5 GHz or dual-band).
Chapter 3: Product overview Rear panel Figure 2: Table 3. SBG8300 rear view SBG8300 rear panel ports & connectors Port Name Reset Button Description Recessed button located on the back of your SBG8300 to either reboot your Wi-Fi cable modem or reset the Wi-Fi cable modem configuration settings. To reboot (or restart) your SBG8300: 1. Insert the end of a paper clip or other small object with a narrow tip into the Reset opening on the back of your SBG8300. 2.
Chapter 3: Product overview Port Name Description Reset Button (Continued) WARNING! Resetting the Wi-Fi cable modem configuration settings to the factory defaults will delete your previous configuration settings; e.g., login password, custom Wi-Fi cable modem configuration, Wi-Fi network name (SSID), and other configuration settings.
Chapter 3: Product overview To receive Internet service, contact your service provider for assistance. You may have to provide the following information listed on the Wi-Fi cable modem label: Wi-Fi cable modem Model name (SBG8300) Wi-Fi cable modem Serial number (SN) Wi-Fi cable modem MAC address (HFC MAC) PN 365-095-32542 x.1 Copyright 2018, ARRIS Enterprises, LLC. All rights reserved.
Chapter 4 Installing the Wi-Fi cable modem Caution: This product is for indoor use only. Do not route the Ethernet cable(s) outside of the building. Exposure of the cables to lightning could create a safety hazard and damage the product. Connect the SBG8300 to your computer Before installing your SBG8300: Check with your service provider (or local cable company) to ensure broadband cable service is available in your area.
Chapter 4: Installing the Wi-Fi cable modem 1. Check that a coaxial cable is already connected to a cable wall outlet or RF splitter (not included). 2. Connect the other end of the coaxial cable to the Cable connector on the rear of your SBG8300. Use your hand to tighten the connectors to avoid damaging them. 3. Connect the Ethernet cable to an available Ethernet port on the rear of your SBG8300. 4. Connect the other end of the Ethernet cable to the Ethernet port on your computer.
Chapter 5 Setting up a Wi-Fi network connection ARRIS recommends that you first verify that your computer (or laptop) can access the Internet using a wired Ethernet connection before configuring your Wi-Fi home network. For Internet connections in your home, you must have access to an Internet service in your home before you can set up a Wi-Fi network connection. If you do not have Internet service already set up in your home, contact a broadband service provider of your choice for assistance.
Chapter 5: Setting up a Wi-Fi network connection Figure 6: ARRIS SURFboard Manager mobile app download screen 3. Tap INSTALL to download the SURFboard Manager mobile app on your mobile device. The ARRIS SURFboard® Manager will be installed on your device soon message displays. 4. Tap OK. The following ARRIS SURFboard Manager window displays.
Chapter 5: Setting up a Wi-Fi network connection Figure 8: ARRIS SURFboard Manager mobile app opening screens 6. Continue to follow the mobile app prompts to configure your Wi-Fi home network connection. For additional information or instructions for using the mobile app, see the ARRIS SURFboard Manager Mobile App User Guide available online at ARRIS SURFboard Manager.
Chapter 5: Setting up a Wi-Fi network connection Your device will automatically start searching and then display a list of available Wi-Fi networks. 3. Select your Wi-Fi network name (SSID) from the list. 4. If prompted, type your Wi-Fi Security Key (network password). Please note that your network password may be case-sensitive. 5. Select Connect. If your Wi-Fi network connection is successful, “Connected” will display under your network name. Apple computer From any screen on your client device: 1.
Chapter 5: Setting up a Wi-Fi network connection Figure 10: Sample available Wi-Fi networks window 2. Locate and left-click on the SBG8300 Wi-Fi network name or SSID (for example, SBG8300-####) for your SBG8300 from the list of available Wi-Fi networks. The default SSID is located on the Wi-Fi cable modem label on the bottom of your SBG8300. Note: You must use the default SSID listed on the Wi-Fi cable modem label when installing the Wi-Fi cable modem and setting up your first Wi-Fi network connection.
Chapter 5: Setting up a Wi-Fi network connection 3. Select Connect automatically to set up your Wi-Fi devices to automatically connect to your Wi-Fi network without having to log on using a user password. 4. Click Connect to open the Connect to a Network window and set up your new network password. Figure 12: Network connection window 5. Enter the Network Security Key (your Wi-Fi network password) in the Security key field.
Chapter 5: Setting up a Wi-Fi network connection Connect using the windows control panel 1. From the Windows taskbar on your computer, click Start button and then click Control Panel. 2. Click Network and Sharing Center to open the Network and Sharing Center window. Figure 14: Control panel-network and sharing center window 3. Click Manage wireless networks under Control Panel Home side panel to open the Manage Wireless Networks window. 4.
Chapter 5: Setting up a Wi-Fi network connection Figure 16: Manually connect to a wireless network window 6. Enter the SBG8300 Wi-Fi network name or SSID (SBG8300-####) for your SBG8300 in the Network name field. The default SSID is listed on the Wi-Fi cable modem label on the bottom of your SBG8300. Note: You have the option to change your Wi-Fi network name or SSID after setting up your Wi-Fi network connection.
Chapter 5: Setting up a Wi-Fi network connection 10. Select Hide characters checkbox to prevent your Security Key (network password) from displaying in the field. 11. Select Start this connection automatically so that your Wi-Fi devices will automatically connect to your Wi-Fi network when they are powered on. 12. Click Next to complete the Wi-Fi network setup. The Successfully added message for your new Wi-Fi network should appear. 13. Click Close to exit.
Chapter 6 Using the Wi-Fi cable modem web manager Use the SBG8300 Web Manager to view and monitor the network configuration settings and operational status of your SBG8300. You can also configure your network connections and Wi-Fi security settings, see Protecting & monitoring your Wi-Fi network (page 44) for more information.
Chapter 6: Using the Wi-Fi cable modem web manager Figure 17: SBG8300 home network wizard-step 1 screen 6. Enter the four-digit CAPTCHA code in the Type CAPTCHA Here entry box. 7. Click NEXT STEP to continue. The SBG8300 Home Network Wizard – Step 2 screen displays. Figure 18: SBG8300 home network wizard-step 2 screen PN 365-095-32542 x.1 Copyright 2018, ARRIS Enterprises, LLC. All rights reserved.
Chapter 6: Using the Wi-Fi cable modem web manager 8. Keep or change the current default Wi-Fi network name in the WI-FI Network Name (2.4 GHz) field. To change the Wi-Fi network name, enter a new name of your choice. The network name can consist of any combination of up to 32 alphanumeric characters. 9. Select one of the following Wi-Fi network security options for your SBG8300 Wi-Fi home network from the Encryption Method (2.
Chapter 6: Using the Wi-Fi cable modem web manager Start the SBG8300 web manager Do the following to open the SBG8300 Web Manager: 1. Open a web browser (such as Internet Explorer, Google Chrome, Firefox, or Safari) on the computer or laptop connected to your SBG8300. 2. Type the XFINITY default LAN IP address, 192.168.0.1, in the Address bar and then press Enter to log onto the SBG8300 and open the SBG8300 Web Manager Login screen. Figure 20: SBG8300 web manager login screen 3.
Chapter 6: Using the Wi-Fi cable modem web manager Figure 22: SBG8300 product registration screen 6. Click Register, Ask me later, or Stop asking to proceed. Figure 23: SBG8300 opening screen Note: See Set up your Wi-Fi network (page 35) to configure your home network. SBG8300 web manager menu links The SBG8300 main menu links and related submenu option links are displayed along the left side of the SBG8300 Web Manager screen. Click on the main menu link to expand the list of submenu options.
Chapter 6: Using the Wi-Fi cable modem web manager Figure 24: SBG8300 web manager menu links Table 4. SBG8300 web manager menu links Menu Link Function Gateway Displays a summary of your network connections and a list of the connected devices on your home network. Summary Displays the WI-Fi status for your home network and network-connected devices. Connection Displays the network connection and status information for the XFINITY network, Local IP network, and your private Wi-Fi network.
Chapter 6: Using the Wi-Fi cable modem web manager Menu Link Function Parental Control Provides information for you to download and use the McAfee Secure Home Internet mobile app to set up Parental Control on your SBG8300 home network. Advanced Allows you to set up Port Forwarding, Port Triggering, Remote Management for troubleshooting or maintenance purposes, the DMZ Host, and manage the UPnP network on your home network.
Chapter 7 Configuring your Wi-Fi network You have the option to either use the default network settings which are unique to your SBG8300 for security purposes or you can configure different network settings. The SBG8300 supports a secure method for setting up multiple Wi-Fi networks on your SBG8300. Set up your Wi-Fi network 1. If you are not logged on to the Internet, open a web browser and log on to the SBG8300 to open the SBG8300 Web Manager.
Chapter 7: Configuring your Wi-Fi network 4. Click the Wi-Fi Radio (2.4 GHz) Enable or Disable button to turn ON or OFF the 2.4 GHz Wi-Fi frequency range that you are setting up for your Wi-Fi home network. 5. Click the Wi-Fi Radio (5 GHz) Enable or Disable button to turn ON or OFF the 5 GHz Wi-Fi frequency range that you are setting up for your Wi-Fi home network. 6. Click the Home Wi-Fi Network 2.4 GHz EDIT button to set up the Network Security mode for your Wi-Fi home network. 7.
Chapter 7: Configuring your Wi-Fi network • 5 GHz ▪ 802.11 ac ▪ 802.11 n/ac ▪ 802.11 a/n/ac ▪ 802.11 n 11. Select one of the following Wi-Fi network security options for your SBG8300 from the Security Mode drop-down list: • • WPA2-PSK (AES): Wi-Fi Protected Access version 2 with Pre-Shared Key WPAWPA2-PSK (TKIP/AES) (Recommended): Wi-Fi Protected Access version 2 with Pre-Shared Key (most compatible). This is the default network security option for your SBG8300.
Chapter 7: Configuring your Wi-Fi network 16. Select the AP Isolation checkbox to enable separate virtual networks for your Wi-Fi clients. - or – Deselect the AP Isolation checkbox to disable separate virtual networks for your Wi-Fi clients. Note: When AP Isolation is enabled, each of your Wi-Fi clients will be in its own virtual network and will not be able to communicate with the other Wi-Fi clients. This may be useful if several guests are using your Wi-Fi network. 17.
Chapter 7: Configuring your Wi-Fi network Figure 29: SBG8300 Wi-Fi connection screen (2 of 2) Change your Wi-Fi network name (SSID) The SSID (Service Set Identification) is the Wi-Fi network name assigned to your SBG8300 Wi-Fi network. The default SSID (listed on the Wi-Fi cable modem label) is automatically populated in the network configuration screens.
Chapter 7: Configuring your Wi-Fi network Note: When you change the SSID, any Wi-Fi devices that are connected to your Wi-Fi network will be disconnected. The Wi-Fi devices must be reconnected to your Wi-Fi network using the new SSID. Do the following to change your Wi-Fi network name (SSID): 1. Open a web browser and log on to the SBG8300 to open the SBG8300 Web Manager. See Start the SBG8300 web manager (page 31) for more information, if necessary. 2.
Chapter 7: Configuring your Wi-Fi network Figure 31: Sample SBG8300 Wi-Fi network setup screen 5. Check that Enable is selected in the Wireless Network field. 6. Click in the Network Name (SSID) field to enter a new network name. The Wi-Fi network name cannot be the same name as any other SSID on your home network. You can use any combination of lowercase and uppercase letters, numbers, and/or special characters (symbols) up to a maximum of 32 characters. 7.
Chapter 7: Configuring your Wi-Fi network 2. Click the Gateway menu link and then click the Connection submenu options link. 3. Click Wi-Fi under the Connection submenu options to open the Gateway Connection Wi-Fi screen. Figure 32: SBG8300 WPS device connection screen 4. Click ADD WI-FI PROTECTED SETUP (WPS) CLIENT button to open the Add Wi-Fi Client (WPS) screen. Figure 33: SBG8300 WPS-add Wi-Fi device screen 5.
Chapter 7: Configuring your Wi-Fi network Enter the WPS Pin number listed in the AP PIN field when you are prompted on your WPS device screen. 8. Click the PAIR button on the SBG8300 to connect your WPS-enabled device. 9. Repeat steps 6 through 8 for each additional WPS-enabled device that you want to connect to your Wi-Fi home network. 7. PN 365-095-32542 x.1 Copyright 2018, ARRIS Enterprises, LLC. All rights reserved.
Chapter 8 Protecting & monitoring your Wi-Fi network After you have successfully connected the SBG8300 and your Wi-Fi devices, you should configure the SBG8300 to protect your Wi-Fi network from unwanted and unauthorized access by any Wi-Fi devices that are within range of your Wi-Fi network. Although network security for the SBG8300 is already configured, you can use the SBG8300 Web Manager to set the level of security and network access that you want to allow on your Wi-Fi network.
Chapter 8: Protecting & monitoring your Wi-Fi network 3. 4. 5. 6. Type admin for the default user name (case-sensitive) in the Username field. Type password for the default admin password (case-sensitive) in the Password field. Click LOGIN to open the SBG8300 Web Manager. Click the Troubleshooting main menu link and then click Change Password. Figure 35: SBG8300 change login password screen 7. Enter the default or current admin password in the Current Password field. 8.
Chapter 8: Protecting & monitoring your Wi-Fi network To set the firewall protection level on your SBG8300: 1. From any SBG8300 Web Manager screen, click the Gateway menu link on the SBG8300 Web Manager screen. 2. Click the Firewall submenu link and then click IPv4 or IPv6 to display the Gateway Firewall Security Level screens. 3. Select the security level that you want to set for your SBG8300 firewall. 4. When done, click SAVE SETTINGS.
Chapter 8: Protecting & monitoring your Wi-Fi network • Medium – Safer configuration, medium security level Figure 38: Firewall IPv4 medium security level screen • Low – Common security, low security level, higher risk Figure 39: Firewall IPv4 low security level screen IPv6 security Figure 40: Firewall IPv6 available security levels screen PN 365-095-32542 x.1 Copyright 2018, ARRIS Enterprises, LLC. All rights reserved.
Chapter 8: Protecting & monitoring your Wi-Fi network Set up parental control Note: The McAfee Secure Home Internet mobile app is now available for you to set up Parental Controls on your Wi-Fi home network using your iOS or Android mobile device. It is available online as a free download from the App store and Google Play. For more information, refer to the McAfee Secure Home Internet User Guide; available online at www.arris.com/selfhelp.
Chapter 8: Protecting & monitoring your Wi-Fi network Figure 42: SBG8300 advanced port forwarding screen 3. Click the Port Forwarding Enable button. 4. Click the +ADD SERVICE button to open the Add Port Forward screen. Figure 43: Add port forward screen 5. Select FTP, AIM, HTTP, PPTP, HTTPs, Telnet, SSH, or Other for the Internet data transfer protocol from the Common Service drop-down list. Note: When Other is selected, the Service Name field will display.
Chapter 8: Protecting & monitoring your Wi-Fi network 9. Enter the ending port number of the website or online application in the End Port field. 10. Click CONNECTED DEVICE button to display the list of connected devices on your Wi-Fi home network. Figure 44: SBG8300 connected device list screen 11. Select the Add selection box for the device or website you want to connect to. 12. Click Add to exit. 13. Click SAVE.
Chapter 8: Protecting & monitoring your Wi-Fi network 4. Click the +ADD PORT TRIGGER button to open the Add Port Trigger screen. Figure 46: Advanced add port trigger screen 5. 6. 7. 8. 9. 10. 11. 12. Enter a name or description for the Port Trigger in the Service Name field. Select TCP/UDP, TCP, or UDP from the Service Type drop-down list. Enter the starting port number in the Trigger Port From field. Enter the ending port number in the Trigger Port To field.
Chapter 8: Protecting & monitoring your Wi-Fi network Figure 47: Advanced DMZ host screen 3. Click the DMZ Enable button to set up the DMZ Host on your home network. 4. Enter the last one to three digits (from 2 to 254) of the IP address of the computer or gaming device that you are setting up as the DMZ host 5. Click SAVE, when you are finished. Note: To disable the DMZ Host, click the DMZ Disable button and then click SAVE.
Chapter 9 Managing your Wi-Fi cable modem and connected networks You can also use the SBG8300 Web Manager to view and monitor the network configuration settings and operational status of your SBG8300. View the SBG8300 hardware information The Gateway Hardware screen displays system hardware information for your SBG8300. This information may be helpful if you contact ARRIS, Comcast, or Cox for technical assistance. To open the SBG8300 Hardware screen: 1.
Chapter 9: Managing your Wi-Fi cable modem and connected networks View the SBG8300 software version The Gateway Software Version screen displays device software related information for your SBG8300. This information may be helpful if you contact ARRIS or Comcast for technical assistance. To open the SBG8300 Software screen: 1. From any SBG8300 Web Manager screen, click the Gateway menu link. 2. Click Software from the Gateway submenu links to display the Gateway Software screen.
Chapter 9: Managing your Wi-Fi cable modem and connected networks Figure 50: SBG8300 reset button 2. Press and hold the small object in place for three to four seconds. WARNING! Do not press the Reset button for more than five seconds. If you do, your SBG8300 will automatically reset and your custom gateway configuration settings (e.g., admin password, network name (SSID) and password, Parental Controls, etc.) will be deleted and replaced with the factory default configuration. 3.
Chapter 9: Managing your Wi-Fi cable modem and connected networks 3. Click RESET located in the Reset / Restore Gateway table. The following message will display: Figure 52: Reboot gateway message box 4. Click OK to reboot the SBG8300 and then log back in. Restore the SBG8300 default configuration settings WARNING! This action will delete your current SBG8300 configuration settings and allow you to restore the default (original) SBG8300 configuration.
Chapter 9: Managing your Wi-Fi cable modem and connected networks 3. Click RESTORE WI-FI SETTINGS to reset your SBG8300 Wi-Fi settings. Figure 54: SBG8300 restore settings screen 4. Click OK to restore the Wi-Fi factory defaults. The Operation in Progress for restarting the Wi-Fi radios message displays. Exit the SBG8300 web manager To log out and close the SBG8300 Web Manager: Click the Logout link located in the upper right corner of the SBG8300 Web Manager screen.
Chapter 10 Troubleshooting tips If the solutions listed in the Troubleshooting Solutions table below do not solve your problem, please contact your service provider for assistance. Your service provider may ask for the status of the SBG8300 front panel LEDs, see Front panel LED icons and error conditions (page 59) for more information. You may have to reset the SBG8300 Wi-Fi cable modem configuration to its original factory settings if the SBG8300 is not functioning properly.
Chapter 10: Troubleshooting tips Front panel LED icons and error conditions The SBG8300 front panel LED icons provide status information for the following error conditions: Table 6. Led Icon Front panel LED icons and error conditions Status If, During Startup OFF Wi-Fi cable modem is not properly Wi-Fi cable modem is plugged into the electrical wall unplugged. outlet. IP registration is unsuccessful. IP registration is lost.
Chapter 11 Warranty information SURFboard SBG8300 Wi-Fi Cable Modem ARRIS Enterprises, LLC ("ARRIS") Retail Purchasers: If you purchased this Product directly from ARRIS or from an authorized ARRIS retail reseller, ARRIS warrants to you, the original end user customer, that (A) the Product, excluding Software, will be free from defects in materials and workmanship under normal use, and (B) with respect to Software, (i) the media on which the Software is provided will be free from defects in material and wo
Chapter 11: Warranty information ARRIS IS NOT RESPONSIBLE FOR, AND PROVIDES "AS IS" ANY SOFTWARE SUPPLIED BY 3RD PARTIES. EXCEPT AS EXPRESSLY STATED IN THIS SECTION ("WARRANTY INFORMATION"), THERE ARE NO WARRANTIES OF ANY KIND RELATING TO THE PRODUCT, EXPRESS, IMPLIED OR STATUTORY, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR THE WARRANTY AGAINST INFRINGEMENT PROVIDED IN THE UNIFORM COMMERCIAL CODE.
Corporate Headquarters ARRIS · Suwanee · Georgia · 30024 · USA www.arris.
