Motorola 3342, 7000, 3352N, 2200 Stateful Inspection Firewall, SSL Certificate Support, VLANs, 358

Administrator’s Handbook

Stateful Inspection Firewall

Stateful inspection is a security feature that prevents unsolicited inbound access when NAT is disabled. You can configure UDP and TCP “no-activity” periods that will also apply to NAT time-outs if stateful inspection is enabled on the interface.

Technical details are discussed in “Expert Mode” on page 39.

SSL Certificate Support

On selected models, you can also install a Secure Sockets Layer (SSL V3.0) certificate from a trusted Cer- tification Authority (CA) for authentication purposes. If this feature is available on your Gateway, an addi- tional link will appear in the Install page.

Netopia Embedded Software Version 7.7.4 uses SSL certificates for TR-069 support.

See “Install Certificate” on page 190.

VLANs

Motorola Netopia®'s VGx technology allows a single Motorola Netopia® VGx-enabled broadband gate- way to act as separate virtual gateways, treating each individual service as a single service "channel." The VGx-enabled gateway applies specific policies, routing, and prioritization parameters to each service chan- nel, ensuring delivery of that service to the appropriate peripheral device with the requisite level of QoS and correct feature sets — making it ideal for delivery of triple play voice, video, and data services.

VGx was developed to ensure that subscribers receive the quality of voice, video, and data services they expect — to prevent a large data download from causing jittery video or poor voice quality. VGx achieves this goal by providing superior service segmentation and QoS features obtained by mapping multiple local virtual local area networks (VLANs) to one or more specific permanent virtual circuits (PVCs) for DSL, or wide area network VLANs for a fiber network.

Traffic prioritization is determined through the Institute of Electrical Engineering (IEEE) standard 802.1p, which specifies QoS algorithms to prioritize traffic based on protocol and source. This insures that each service receives the QoS treatment it requires; for example,

•video is free from latency,

•VoIP service is prioritized to insure aural quality, and

•data is securely and efficiently routed.

358