asizearris.

dot | 595328-001 Rev A

This document is the property of ARRIS Group, Inc. This document may only be distributed to: (i) an ARRIS party having a legitimate
business need for the information contained herein, or (ii) a non-ARRIS party having a legitimate business need for the information
contained herein. No license, expressed or implied, under any patent, copyright or trade secret right is granted or implied by the
conveyance of this document. No part of this document may be reproduced, transmitted, transcribed, stored in a retrieval system,
translated into any language or computer language, in any form or by any means, electronic, mechanical, magnetic, optical, chemical,
manual, or otherwise without the prior written permission of ARRIS Group, Inc. (See Document Security Standard, 320190-000 for
details.)
The ARRIS Logo and all other trademarks indicated as such herein are trademarks of ARRIS Group, Inc. All other product or service
names are the property of their respective owners.
Copyright ARRIS Group Inc. 2015 All rights reserved.
Distribution of this document must adhere to the guidelines contained in the Document Control Process (365-095-0273).

Document Title

SBG901-2.12.2.0-GA-06-750 Customer Release Update

Number

365-095-27673

Revision

X.1

Revision Date

01/05/2015

Revision Author(s)

Richard DiBenedetto, William Armbruster

Public
Level 1

ARRIS Group, Inc.

6450 Sequence Drive, San Diego, CA 92121 T: 858-455-1500

Sheet 1 of 15

SBG901-2.12.2.0-GA-06-750 Customer Release Update

Revision History see Workflow History for approvers and approval dates, and Notice for release dates
Rev

Notice # Description

X.1

ARRIS
Sheet 2 of 15

Author

SBG901-2.12.2.0-GA-06-750 Customer Release Update

Printed Copies of this Document are Not Controlled

Revision
Date

DiBenedetto /
Armbruster

1/5/2015

365-095-27673
Revision X.1

SBG901-2.12.2.0-GA-06-750 Customer Release Update

1.

INTRODUCTION

This firmware release is based on the SBG901-2.12.2.0-GA-03-728 GA Release of firmware.

2.

PRODUCT(S)

SBG901 DOCSIS

3.

RELEASE DATE

January 5, 2015 -- SBG901-2.12.2.0-GA-06-750

4.

RELEASE TYPE

General Release builds are designated with the GA-xx-xx format. Engineering and Lab Trials are designated with the
ENG-xx-xx / LAB-xx-xx format and are not considered GA (General Availability) Releases. SH builds refer to images
which have a shell capability for diagnostic and monitoring purposes. NOSH builds have this capability removed.

5.

HARDWARE

SBG901 (DOCSIS Variant)

This hardware version incorporates support for:
Upstream 5-42 MHz
Downstream 88 - 860 MHz

6.

FIRMWARE RELEASE NAMES

SBG901 SBG901-2.12.2.0-GA-06-750-NOSH-NNDMN.p7

7.

OPERATIONAL CONSIDERATIONS
7.1.

SNMP CPE Access Control

The SBG901 now supports (and requires) the following per the CM-SP-MULPIv3.0 specification:

ARRIS
Sheet 3 of 15

TLV55 SNMP CPE Access Control

If the value of this field is a 1, the CM MUST allow SNMP access from any CPE attached to it. If the
value of this field is a 0, the CM MUST NOT allow SNMP Access from any CPE attached to it.
Type
Length Value
55
1
0 (Disable)
1 (Enable)
The CM MUST disable SNMP access from CPEs connected to the cable modem unless this TLV is
present in the config file with value equal to 1.

) Refer to SURFboard Technical Bulletin 08-009 for SNMP CPE Access Control
requirements utilizing TLV55.

) Refer to SURFboard Technical Bulletin 08-008 for SNMP NmAccess Control

requirements.

Printed Copies of this Document are Not Controlled

365-095-27673
Revision X.1

SBG901-2.12.2.0-GA-06-750 Customer Release Update

7.2.

Multicast Configuration
When a 5Mbps multicast stream is joined by a user connected via a wired connection, and a wireless
connection is also being utilized by other CPE devices, the wireless users may have issues with unicast
traffic. This issue is caused by the wireless multicast data rate setting being set to AUTO which defaults to
1Mbps. Since the user is streaming his multicast stream at a 5Mbps data rate, this causes a bottleneck in the
wireless interface. A GUI option is available to adjust the multicast wireless rate by accessing
Wireless_>Advanced->Multicast Data Rate from the SBG901 Internal HTML page.

7.3.

SURFboard MIB Package

It is recommended that you always run the latest Motorola SURFboard MIB Package (available on
DigitalCM) to ensure you have access to the latest MIBs and documented support features. The current GA
Release of the SURFboard MIB Package, SURFboard MIBs Version 1.48, supports all features/functions
contained in this firmware release unless otherwise noted.

8.

UPDATES IN THIS RELEASE

8.1. SBG901-2.12.2.0-GA-06-750
8.1.1. Features

No new features added

8.1.2. Defects Fixed

ARRIS
Sheet 4 of 15

CSRF attack vulnerability has been addressed. (SBG-3480)

TKIP Only has been added to the WPA/WPA2 Encryption Options. (SBG-3529)
The Country field has been removed from the Wireless Basic page to be consistent across
all products. (SBG-3297)
Web-sites previously blocked after a redirect, will no longer be blocked when in NAPT mode.
(SBG-3876)
SNMP Object sysName values were not retained across a reboot. Also added an update where the
SNMP Objects; sysName, sysLocation, and sysContact revert to their default values after setting
the SVG1202 to Factory Defaults via the cmResetToDefaults MIB Object. (SBG-3290)
A Restore Wireless Defaults initiated from the GUI or SNMP, will enable WPS. (SBG-3169)
Resolved an issue where the SBG901 would re-init the MAC after the TFTP download of the CM
config file. This issue was caused by the SVG sending a REG_REQ_MP message instead of a
REG_REQ. Earlier, REG_REQ messages were sent directly instead of priority service flow
information and now the SVG will allow for REG_REQ_MP messages also to be sent directly.
(SB-2908)
Resolved an issue where the following MIB Objects may not return values. (SBG-3237)
) cmGwBaseMib
) cmGwDhcpBase
) cmGwDhcpServer
) cmGwLanAddrEntry
) cmGwNatBase
) cmGwNatMappingEntry
) cmGwNatPassthroughEntry
) cmGwDevEvent
Clicking the Release / Renew WAN Lease button(s) on the Basic Setup GUI page now
sends out the DHCPv6 Release / Renew IPv6 for the WAN address in eRouter dual-stack and
IPv6 only modes. (SBG-1631, SBG-1739, and SBG-2242)
Updates have been made when sending the block-size option in the TFTP request. When using
TFTP over IPv4, the block size is set to 1448 octets and when using TFTP over IPv6, the block
size is set to 1428 octets. (SBG-2905)

Printed Copies of this Document are Not Controlled

365-095-27673
Revision X.1

SBG901-2.12.2.0-GA-06-750 Customer Release Update

9.

The NAPT Enable/Disable option (Basic Setup GUI Tab) is now displayed when eRouter is
in ipv6 only mode also. (SBG-3153)

KNOWN ISSUES AND/OR LIMITATIONS

End users may lose their Wi-Fi Connection on the Primary network when the HotSpot Guest SSID is
disabled. Primary Wi-Fi Client Connections can be reestablished by the end-user by reconnecting their
client to the SBG901 Primary Wi-Fi Network. (SBG-2467)

WPS connection takes a long time (+/- 80 sec.) to establish using the push-button method. (SBG-2469)

Primary Network still shows as Enabled when Wi-Fi interface is disabled. (cqvds00013891)

A blank SSID can be saved for the Guest network. (cqvds0012283)

All the Wireless parameters are not resetting to Factory default when the SBG901 is reset to default.
(cqvds00015091)
) The Wireless/Basic GUI parameters such as Output Power and Channel values are not resetting to
factory default.

The GUI Login Password is not resetting to default password when the CM is reset to default through
SNMP. (cqvds00015093)

When configuring the Firewall Web Features page to block Java or Fragmented IP packets, Java and
Fragmented IP packets are still allowed to pass. (cqvds00014381)

Image links randomly appear broken when using Firefox. (cqvds00014594)

A situation has been reported that when the Firewall is enabled with default settings, certain web pages
are blocked. When the Firewall is disabled, the pages appear normally. It has been found that these
web sites being blocked by the firewall have an irregularity in the TCP header. Since this is considered
an invalid TCP header, the packet is dropped, which effectively leads to the web site being blocked.
(cqvds00014144)

10. OLDER RELEASES

10.1. SBG901-2.12.2.0-GA-03-728
10.1.1. Features

TLV202.3 [eRouter Initialization Mode Override] is now supported. (SBG-3140)

A new MIB object (cmGwIPv6FirewallProtectEnable) was added to allow the MSO to
Enable/Disable the IPv6 Firewall feature of the SBG901. (SBG-2792)

10.1.2. Defects Fixed

ARRIS
Sheet 5 of 15

Only one root level user will be allowed to log in at any one time. A new message; "Warning
- root user is already connected" will be displayed for a second user trying to log in as root.
(SVG-2781)
After setting the WAN Connection Type to Static, the Release / Renew buttons, IPv6
WAN, and DNS information shall be displayed in the GUI when operating in eRouter Dual
mode. (SVG-3569)
A wireless CPE client is now able to access the internet when the SBG901 is operating in
Bridged or Docsis mode and provisioned in IPv6. (SVG-3569)
In an environment where the PHY type for the upstream channel is tdma, an SBG901 will now
register after downloading a DOCSIS 1.0 configuration file. (SVG-3629)
The SBG will no longer drop IP ping packets when a "ping" is initiated from the CMTS. In
previous releases of the Reference Code Base(s) BFC4.x, an "enhancement" was included to
add an IP Flood Detection / Denial of Service (DoS) Snoop of ICMP Traffic. This DoS
prevention mechanism is activated when the number of pings that the CM interface receives
exceeds 10 pings/sec and drops every 11th packet. This feature has now been removed.
(SBG-3010)

Printed Copies of this Document are Not Controlled

365-095-27673
Revision X.1

SBG901-2.12.2.0-GA-06-750 Customer Release Update

A change was incorporated to ensure that after a firmware upgrade, TKIP+AES will be set as
the wireless encryption on units previously configured to use TKIP only (which is no longer
available). (SBG-2886)
An end-user is now able to clear the diagnostic results using the "Clear Results" button on the
Status Diagnostics HTML page. (SBG-1538)
Error message is now displayed if a user tries to start the Trace route utility found on the
Status Diagnostics HTML page without entering any IP Address in the Target field.
(SBG-1547)

10.2. SBG901-2.12.2.0-GA-00-692
10.2.1. Reference Code Merge

This newest firmware release includes all fixes and enhancements available in the Broadcom
Reference Code merge BFC4.4.10.mp3. (SVG-3544)

10.2.2. Features

The previously released Motorola Private MIB cmConfigWaitBeforeCpeMacReplace is now

supported. When a new CPE is connected to the SBG901 and the MaxCPE limit of the
DOCSIS forwarding table has been reached, an existing MAC entry will be selected to be
replaced by the new CPE MAC if the MIB cmConfigCPEMacAddrAging has been set. Before
replacing the selected entry, the time the CPE has been connected to the SBG901 will be
compared against the cmConfigWaitBeforeCpeMacReplace setting. If the selected entry has
been connected for a time longer than cmConfigWaitBeforeCpeMacReplace, it will be replaced
by the new MAC entry. (SBG-2720)

10.2.3. Defects Fixed

Port Forwarding parameters are now properly displayed when set via SNMP. (SBG-2705)
Help text has been updated to display the correct product type. (SBG-2468)
IPv6 addresses longer than 40 bytes are now displayed on the Basic HTML page.
(SVG-3477)
USB-MIB information will no longer be returned on an SNMP query of a unit that does not
have a USB interface. (SVG-3517)

10.3. SBG901-2.12.1.0-GA-00-666
10.3.1. Reference Code Merge

This newest firmware release includes all fixes and enhancements available in the Broadcom
Reference Code merge BFC4.4.10.mp1. (SBG-2059)

10.3.2. Features

A new Wi-Fi HotSpot Feature has been added per request of specific customers. The Motorola
Wi-Fi HotSpot implementation is a proprietary implementation that utilizes changes in the
DHCP Option 60 variables passed to the provisioning system to manage HotSpot
connections and authorization methods. Wi-Fi HotSpot allows the MSO to configure the Guest
Networks for Wi-Fi HotSpot. (SBG-1523, SBG-1974)
Added a new Error Message to be displayed when the Port Forwarding Local/External Start
port is configured greater than Local/External End port. (SBG-1869)
The SBG901 provides an Auto Channel Scanning option on the GUI. When the Control
Channel is set to Auto the SBG901 will Automatically Scan the Wi-Fi Spectrum and select the
optimal channel. (SBG-1359)
) The default option for the Control Channel is Auto.
Added a Cancel Button on the Port Triggers GUI page. (SBG-2177)

10.3.3. Defects Fixed

ARRIS
Sheet 6 of 15

Corrected misspelling and incorrect product ID textual strings in the SBG901 Helps Screens.
(SBG-2321)

Printed Copies of this Document are Not Controlled

365-095-27673
Revision X.1

SBG901-2.12.2.0-GA-06-750 Customer Release Update

Resolved an issue where the SBG901 fails to fully convert to Gateway Mode upon enabling
the HotSpot feature while the unit is in docsis mode, even though the GUI and MIB status
show Gateway Mode enabled. (SBG-2322)
Resolved an issue where the sysDescr Boot ROM Version does not match the DHCP Option
43 Boot-ROM Version. (SBG-2295, SBG-2278, SBG-2296, and SBG-2025)
Copyright information has been updated to 2012 Motorola Mobility, Inc. All rights reserved.
(SBG-2179)
When HotSpot is enabled, the maximum number of CPEs that can connect to the HotSpot
network is controlled by the value of the MaxCPE entry in the DOCSIS configuration file.
(SBG-1969)
Fixed an issue where the end-user could not SURF to any WEB site that has an IP Address that
ends in 255, when firewall is enabled. (SBG-1912)
Fixed an issue where the modem will not boot when the Service Class Name in the DOCSIS
configuration file is longer than 14 Characters. (SBG-1818)
Per RFC-6204 G-5, the eRouter (LAN side) should immediately send an RA with the lifetime
equal to zero. Although the SBG901 sets a correct value in the LAN side RA lifetime (which is
equal to zero) it doesn't immediately send out the RA as per the RFC; instead the RA is sent
with the regular RA interval. (SBG-1395)
The SBG901 required a reboot for PPTP Passthrough and IPSec Passthrough to work when
modified through SNMP. (SBG-1872)
IPv6 Prefix is displayed in the GUI Basic page, for the guest networks that were disabled
via 'Reset to defaults'. (SBG-1826)
HotSpot client connections were getting displayed in the Wireless Access Control
Connected Clients Table with Host Name and IP Address displayed as ERROR. Another
table was added to display the HotSpot clients. (SBG-2029)
Multiple areas of the SBG901 GUI previously had inconsistent or incorrectly displayed text
strings. Changes were made so that the GUI has consistent and correct text strings displayed.
(SBG-1444)

10.4. SBG901-2.11.0.0-GA-07-624
10.4.1. Features

The SBG901 full hex image now boots up normally and the device becomes operational at the
factory. This change is for manufacturing purposes only and has no operational impact on
MSO field deployments. (SBG-1536)

10.4.2. Defects Fixed

None

10.5. SBG901-2.11.0.0-GA-06-622
10.5.1. Reference Code Merge

This newest firmware release includes all fixes and enhancements available in the Broadcom
Reference Code merge BFC4.4.8.mp4. (cqvds00026941, SB-2606)

10.5.2. Features

ARRIS
Sheet 7 of 15

Full support has been added to the docsIf3CmMdCfgTable MIB by adding the following IPv6
MIBs. (cqvds00027168, SB-2639)
) docsIf3CmMdCfgIpProvModeResetOnChange - This attribute determines if the CM is to
automatically reset upon a change of the docsIf3CmMdCfgIpProvMode attribute.
) docsIf3CmMdCfgIpProvModeResetOnChangeHoldOffTimer - This attribute determines
how long a CM will wait to reset upon a set to true to the MIB
docsIf3CmMdCfgIpProvModeResetOnChange.
) docsIf3CmMdCfgIpProvModeStorageType - This attribute determines if the value of
docsIf3CmMdCfgIpProvMode is persistent across a single reset or across all resets.

Printed Copies of this Document are Not Controlled

365-095-27673
Revision X.1

SBG901-2.12.2.0-GA-06-750 Customer Release Update

The SBG901 now has additional/updated drop-down options to change the username and
password. Actions to change the username and/or password are no longer grouped into one
section. (cqvds00023780, SVG-2775)

10.5.3. Defects Fixed

The value represented in the SBG901 Basic -> Setup GUI tab (NAPT Enable/Disable) is
inconsistent with the cmConfigGatewayDeviceOperMode MIB. (SBG-1771)
Non-Readable characters were shown on the logs page following a reset to default. (SB-2722)
Added a link at the bottom of home screen to the OSS (Open Source Software) attributes page
as well as updated the OSS Attribute Link text on SBG901. (SB-2734)
Fixed an issue where the GUI does not display all the passthrough entries on the passthrough
table. (SBG-1532)
The SBG901 will now continue to attempt to provision in IPv6 mode, as directed by the
docsIf3CmMdCfgIpProvMode[2] = 1 setting, if previous attempts failed due to the DHCPv6
server being unavailable. (SB-2726)
The SBG901 now attempts to re-provision in IPv6 mode if a modem MAC re-initialization
takes place after the SBG901 was last successfully provisioned in IPv6 mode initiated by a
docsIf3CmMdCfgIpProvMode[2] = 1 set. (SB-2675, SB-2676)
IP Flood Detection should be disabled by default. (SBG-1330)
The SBG901, when configured in Auto for Wi-Fi channel selection does not actually select a
less congested channel and always seems to stay on channel one (1) upon reset. (SBG-1356)
Support for the MIB Object cmSnmpHFCPort is not working correctly. (cqvds00012238,
cqvds00027269, SB-942, and SB-2662)
Unable to perform SNMP query after the CM reboot with a new value set to
docsIf3CmMdCfgIpProvMode. (cqvds00027234, SB-2654)
RIP messages are now sent from the CM DOCSIS stack (CM/HFC IP Address) rather than the
WAN-MAN stack (Gateway Public IP Address). (cqvds00026735, SBG-1126)
NAT DHCP is now enabled in GUI when RIP DHCP is disabled. (cqvds00027121, SBG1257)
An issue has been resolved to ensure a multicast stream is now properly passed to attached
CPE devices. (cqvds00027275, SB-2664)

10.6. SBG901-2.10.1.1-GA-00-581
10.6.1. Features

Added support for the Motorola Proprietary MIBs cmGwAdvCfgIpsecPassThroughEnable and

cmGwAdvCfgPptpPassThroughEnable for control of the IPSec Passthrough and PPTP
Passthrough settings found on the Advanced -> Options internal HTML page.
(cqvds00026632)
Note: These MIB objects will be available in the <cmGateway.mib> file included with the
currently unreleased SURFboard_MIB v1.36 MIB package.
A SIP ALG Enable checkbox has been added to the Advanced -> Options internal HTML
page. (cqvds00026717)

10.6.2. Defects Fixed

ARRIS
Sheet 8 of 15

Multiple Xbox game consoles are now able to connect to Xbox LIVE with full capability with
the SBG901 in NAPT/DHCP mode. (cqvds00026718)
Setting the cmGwAlgPredefinedEnable.16 MIB object to false via an SNMP browser will
not cause the unit to hang and the feature works as expected. (cqvds00026742)
Similar names can now be added in the Parental Control ToD Filter Policies. (cqvds00026784)
The following GUI fixes have been incorporated into this release: (cqvds00026764)
) The Diagnostics utility has been reinstated to the internal HTML Status page.
) The WINS Addresses table is now available on the Basic -> DHCP internal HTML
page.
Printed Copies of this Document are Not Controlled

365-095-27673
Revision X.1

SBG901-2.12.2.0-GA-06-750 Customer Release Update

Host Name and Domain Name are now available on the Basic -> Setup internal
HTML page.
) Copyright information has been updated to 2011 Motorola Mobility, Inc. All rights
reserved.
The Advanced -> RIP internal HTML page now includes a Routed Subnet Configuration
table to enable/disable DHCP and Routing for a RIP network. (cqvds00026889)

10.7. SBG901-2.10.1.0-GA-02-569
10.7.1. Reference Code Merge

This newest firmware release includes all fixes and enhancements available in the Broadcom
Reference Code merge BFC4.4.6mp1. (cqvds00025228, cqvds00019487)
) Key new feature in BFC4.4.6 code is eRouter support.

10.7.2. Features

Added support for cmdot11plusMgmtv2 MIBs while the cmConfigGatewayDeviceOperMode is

set to docsis(3) mode. While in docsis mode, only the Primary SSID is configurable.
(cqvds00023770)
A Motorola Proprietary MIB cmConfigGuiRootLanAccessEnable is implemented to disable
LAN access to the SBG901 GUI for the "root" user. For a specific Customer ID, by default,
this setting is false(2). For all other units, by default, this object is set to true(1).
(cqvds00026475).
In order to prevent interoperability issues with the newest CableLabs MIB Object
docsIf3CmMdCfgIpProvMode in the <DOCS-IF3-MIB-110210.mib>, support for the Motorola
Private MIB cmMotVendorMDDHonorIp has been removed (Deprecated). (cqvds00025641)

10.7.3. Defects Fixed

ARRIS
Sheet 9 of 15

A firmware change has been implemented to ensure that Router Advertisement (RA) multicast
packets are now forwarded by the SBG901 (when cmConfigGatewayDeviceOperMode is set to
docsis(3) mode) to attached CPEs in a Cisco CMTS environment. The IPv6 Gateway
address is now properly populated on attached CPEs. (cqvds00026148)
The HFC MAC Address and Known CPE MAC Addresses are now displayed properly in
the internal HTML Addresses page. (cqvds00026714)
If the SW Upgrade IPv6 TFTP Server (TLV58) is configured to be all zeros (all 128-bit
settings are zeros) in the modem configuration file, the SBG901 will use the same TFTP server
that was designated for the configuration file download (obtained from the DHCP Offer) for
the firmware download process. (cqvds00025242)
Fixed the DHCP Option 43 message creation to properly include SubOption 2 (Device Type)
and SubOption 3 (eSAFE Types) strings according to CableLabs' eDOCSIS Specification and
DHCP Options Registry Specification. (cqvds00025710)
An issue has been resolved, in which the SBG901 was not forwarding IPv6 Router
Advertisements (RA) sent by the CMTS to its LAN interfaces (when
cmConfigGatewayDeviceOperMode is set to docsis(3) mode). (cqvds00026035)
Corrected the implementation of the docsDevSTPControl MIB Object and its ability to filter
Spanning Tree Protocol traffic. Previously, with docsDevSTPControl set to 2
(NOSTFILTERBPDU) the modem discarded all non-Ethernet II packets including CDP
packets. This MIB setting now discards only STP packets (identified by DSAP = SSAP =
0x42). (cqvds00025882)
A reporting issue has been resolved in which additional MAC addresses displayed on the
modems internal HTML Addresses page in the Known CPE MAC Address box with a
self status. The page will now show the HFC self MAC address and Ethernet learned
CPEs only. (cqvds00025975)
If the LAN DHCP address settings are changed via the SNMP interface or the modem
configuration file, the SBG901will reboot automatically to apply the settings.
(cqvds00025258)

Printed Copies of this Document are Not Controlled

365-095-27673
Revision X.1

SBG901-2.12.2.0-GA-06-750 Customer Release Update

Parental Control settings will not be lost when upgrading from previous versions of SBG901
firmware. (cqvds00026180, cqvds00026181)
The HFC DHCP Discover message will now have option 43.2 with a value of "ECM" and the
WAN MAN DHCP Discover message will have option 43.2 with a value of "EROUTER".
(cqvds00026823, cqvds00026679, and cqvds00026553)
The SES option has been removed from the Automatic Security Configuration pull-down
on the Wireless -> Primary Network HTML page. (cqvds00025711)
The Afterburner Technology and Rate options from the Wireless -> Advanced HTML
page are now grayed out and cannot be changed by the end-user. (cqvds00025771)

10.8. 2.8.5.0-GA-03-501
10.8.1. Features

No new features added in this release.

10.8.2. Defects Fixed

An issue identified in the SBG901-2.8.5.0-GA-02-501 release of firmware causing the modem

to reject any DCC Upstream frequency change has now been resolved. (cqvds00025284)

10.9. SBG901-2.8.5.0-GA-02-501
10.9.1. Features

A GUI Web Page Hiding feature providing a method to hide designated pages, show only a
predefined Splash Page or to let the GUI behave as usual has been implemented. Each GUI
page has been assigned a unique page ID and two new MIB objects cmConfigGuiAdminList
and cmConfigGuiRootList have been added in order to control this feature. The
cmConfigGuiAdminList and cmConfigGuiRootList MIB objects control the exposure of GUI
pages for the admin and root user logins respectively. These MIB objects can be
configured to display all pages, hide all pages, or hide a list of pages. (cqvds00015955)

10.9.2. Defects Fixed

ARRIS
Sheet 10 of 15

After upgrading to SBG901-2.8.5.0-GA-02, any values that are stored in Dynamic Non-Vol for
cmConfigGuiWanManAccessEnable, cmConfigGuiLanAccessEnable and
cmConfigGuiHfcAccessEnable will be acted upon as originally designed. (cqvds00024427)
An issue has been resolved when using IPv6 APM (Alternate Provisioning Mode) on the
SBG901. The Gateway now registers correctly with an IPv6 address when
cmMotVendorMDDHonorIp is set to vendorMDDIpUseAPM(3). (cqvds00023977)
The Parental Control feature was modified in order to return the correct page when "white list
access only" option was enabled. (cqvds00022970)
Improved Parental Control stability when a domain is blocked by adding a keyword to the
keyword list. Previously, the SBG901 may crash when loading a website with a blocked
keyword configured through Parental Control. (cqvds00022969)
The correct event log will display "SW upgrade Failed after download - SW File corruption"
when the SBG901 attempts to download a corrupted image. (cqvds00022743)
The SBG901 will no longer attempt to move on a DCC (Dynamic Channel Change) to a
downstream frequency greater than 857MHz (center frequency), 860MHz (end frequency). A
log entry for this condition will also be reported:
) Log event level = Error (4), Text = "DCC Rejected, DS Frequency out-of-range".
This fix will also prevent the SBG901 from acting on any value set in the cmFreqCustomList
MIB Objects greater than 857MHz(center frequency), 860MHz (end frequency). A log entry
for this case will also be reported:
) Log event level = Error (4), Text = "DS Frequency Rejected, out-of-range 88-860MHz".
If multiple frequencies are set in the cmFreqCustomList, only the out-of-range values are
rejected. Valid entries are added. (cqvds00022173)

Printed Copies of this Document are Not Controlled

365-095-27673
Revision X.1

SBG901-2.12.2.0-GA-06-750 Customer Release Update

"Primary Mode, NAPT configuration" can now be hidden from the end user in the GUI, as a
factory setting, using the cmConfigGuiAdmin, and cmConfigGuiRoot MIB objects.
(cqvds00021621)
An issue has been resolved in which the SBG901 may intermittently lose layer 3 connectivity
after a DCC is initiated. (cqvds00021410)
The default downstream channel scanning algorithm has been modified so that 256QAM
channels are scanned prior to 64QAM downstream channels. (cqvds00019700)
Updated the Wi-Fi Activity and Pairing LED behavior to be compliant with documentation for
normal operation and automatic pairing modes. In addition, the Activity LED has been made
easier to see during various pairing operations. (cqvds00018142)
The Motorola Private MIB object cmConfigEtherOperStatus now returns the actual value of
the interface status instead of unknown. (cqvds00012236)
The first Wireless Guest Network page will always be shown for the admin user.
(cqvds00017353)
When attempting to download a different type image (for example a EuroDOCSIS NNEMN
image), the SBG901 will now report "CVC Validation Failure" instead of "SW File
Corruption". (cqvds00018427)
The SBG901 now has the ability to disable UDC processing based upon a specific Co-signed
CVC in the configuration file downloaded during the modem registration process, or through
the setting of the Motorola Private MIB cmConfigUdcCapable. (cqvds00019507)
If the SBG901 is Reset-To-Default using the GUI, SNMP, or the Hardware Reset Button,
the default factory values for the following MIBs will be retained (cqvds00019703):
) cmFreqCustomList
) cmFreqCustomListBank2
) cmFreqCustomListBank3
) cmFreqCustomListBank4
The SBG901 will no longer reject a configuration file when setting the
cmGwNatPassthroughMACAddr object via a TLV11 statement. (cqvds00021032)
The Help information for the SBG901 RIP functionality has been updated. (cqvds00021801)
The BOOTR will now report consistently when querying the sysDescr object.
(cqvds00021839)
Changes to the cmGwProvDeviceProvisioningMode will remain persistent when the unit is
power-on reset. (cqvds00021872)
Fixed an issue on the SBG901 where the unit blocked IGMP joins for groups within the same
Multicast MAC Address Range (01:00:5e:00:00:01). Thirty-One (31) multicast groups are
affected; including the customer reported 225.0.0.1 Multicast IP Address. (cqvds00022385)
A Reset-To-Default no longer changes the factory setting of
cmConfigEnableAllEventLogPriorities. (cqvds00022653)
Modified the code to make sure that permanent non-volatile values are initialized first before
they are used by dynamic non-vol. (cqvds00023274)

10.10. SBG901-2.1.7.0-GA-00-386
10.10.1. Features

The SBG901 will now accept a TLV21 setting of 0.0.0.0 in the modems configuration file.
When the cable modem receives this TLV21 value, the SBG901 will use the same TFTP server
address used for the initial configuration file download (obtained from the modems DHCP
offer) to download the software upgrade file designated in the files corresponding TLV9
statement. (cqvds00020100)

10.10.2. Defects Fixed

ARRIS
Sheet 11 of 15

Fixed an issue in the NAT ALG (Application Level Gateway) for MSN Messenger could cause
the SBG901 to get into a lock up condition (infinite loop). (cqvds00016349)

Printed Copies of this Document are Not Controlled

365-095-27673
Revision X.1

SBG901-2.12.2.0-GA-06-750 Customer Release Update

10.11. SBG901-2.1.6.0-GA-00-381
10.11.1. Features

Support for the Motorola Private MIB Object cmMotVendorMDDHonorIp has been added.
(cqvds00020041)
) A new MIB object, cmMotVendorMDDHonorIp, has been implemented. The possible
values of the object are:

0 indicates that the device MUST honor the IP Mode MDD TLV transmitted by the
CMTS on the access network.

1 indicates that the device MUST only attempt initialization IPv4 mode.

2 indicates that the device MUST only attempt initialization in IPv6 mode.

3 indicates that the device MUST attempt initialization using APM.

4 indicates that the device MUST attempt initialization using DPM.

) Note(s):

The object is saved in the Non-Vol which means the setting will be retained across a
unit reboot. Reset to Factory Defaults does not affect this item.
The following Motorola Private MIB objects are now supported: (cqvds00019261)
) cmConfigEtherAutoNegotiation
) cmConfigEtherStatsDuplex
) cmConfigEtherSpeed
A new MIB object cmdot11ResetToDefaults was added to the cmdot11plus MIB. When this
MIB object is set to true, all wireless settings are reset to factory defaults. (cqvds 00015143)

10.11.2. Defects Fixed

The SBG901 now supports the ability to configure the UDP port used by SNMP as configured
with the cmSnmpHFCPort Motorola Private MIB object. (cqvds00012238)
A change has been implemented so that World-Wide Mode can no longer be improperly set on
DOCSIS devices using the cmFreqPlanType OID. (cqvds00017291)
An issue with new wireless settings supplied in the cmdot11Plus MIB not being written to
flash when cmdot11ApplySettings was set to 1 has now been resolved. (cqvds00016911)
Resolved an issue where the SBG901 may reset due to a T4 timeout when the "rate-adapt"
feature is enabled on Cisco CMTS. (cqvds00016903)
A fix has been implemented resolving duplicate MAC entries seen in the cmGwLanAddrTable.
(cqvds00016218)
Previously an SBG901 crash could occur on an SBG901 running with the MAC-14 image
when the Status/Software GUI was accessed. (cqvds00014341)

10.12. SBG901-2.1.5.0-GA-00-357
10.12.1. Features

ARRIS
Sheet 12 of 15

A new MIB object, cmGwVirtualServerProtocol was added to the Gateway MIB

(cmGwPortTriggerMib) as a part of the solution addressed in cqvds00013455.
(cqvds00020090)
Allow fixed IP addresses to be assigned on the LAN. A pair of IP-to-MAC addresses can be
reserved and/or deleted through the GUI (Basic->DHCP web page). The reserved entries will
be granted by the DHCP Server to a DHCP Client running on the LAN. (cqvds00020093)
Added support for SNMP/MIB control for GUI access via the HFC interface, WAN interface,
or LAN IP address. (cqvds00019170)
) Support was added for the following Private MIB objects:

cmConfigGuiWanManAccessEnable

cmConfigGuiHfcAccessEnable

cmConfigGuiLanAccessEnable

Printed Copies of this Document are Not Controlled

365-095-27673
Revision X.1

SBG901-2.12.2.0-GA-06-750 Customer Release Update

) TLV43 sub-options S130 and S211 are also supported on Gateway products.
Added support for L2TP and PPTP. (cqvds00019135)
Implemented a change to the firmware to allow the SBG901 to quickly process UCDs for
upstreams which are not physically available. This implementation will decrease the upstream
acquisition time for initial installations. (cqvds00019128)
Added positive feedback to the user if they use the wrong username or password on the GUI.
(cqvds00020075)
A new Private MIB object, cmdot11MulticastRate, has been added to allow customers to
control the speed requirements for Multicast Data Streams. (cqvds00019040)

10.12.2. Defects Fixed

An IPv6 fix has been added to ensure the modem waits for a proper length of time for the IPv6
MDD messages. (cqvds00019093)
An issue has been resolved in which the Wireless Guest Network did not properly restore to
default when Reset-to-Defaults was applied. (cqvds00020250)
The SBG901 could hang when executing script files doing multiple snmpsets.
(cqvds00020253)
If an RF interruption occurred during software download the SBG901 may wait an extended
period of time prior to a T4 and reboot occurring. An adjustment has been made to the way of
calculating the TFTP Retry backoff value so that SBG901 recovers quicker. (cqvds00019096)
Reading the cmSuperUserPassword MIB object now returns the password as a null string
instead of clear text. (cqvds00019161)
An HTML GUI Access configuration now remains enabled after a Factory Reset to Defaults.
(cqvds00019090)
Fixed an issue where the Logs were getting truncated in the Status --> Event Log GUI page.
(cqvds00020087)
Fixed an issue where applying the Reset to Factory Defaults via the HTML Security page
caused the wireless settings to not be reset properly. (cqvds00019071)

10.13. SBG901-2.1.3.1-GA-00-256
10.13.1. Features

No new features added in this release.

10.13.2. Defects Fixed

The SBG901 will not advertise support for the Upstream Drop Classifier (UDC) feature,
allowing the normal processing of DOCSIS IP Filters by the cable modem. (cqvds00019737)

10.14. SBG901-2.1.3.0-GA-00-256
10.14.1. Features

Added the ability for a Service Provider to hide or show the entire User Interface. A provider
can hide all the internal HTML pages except for only a Splash page when cmConfigGuiAdmin
and cmConfigGuiRoot MIB Objects are set to 0x02 values. Under these settings, the GUI
always serves the Splash page on any users HTTP request and no user logon capability is
provided. (cqvds00015886)

10.14.2. Defects Fixed

ARRIS
Sheet 13 of 15

Added the ability to reset the Wireless Guest SSID when a Reset to Defaults is performed.
Previously the Guest SSID was defaulted to be "Guest", giving the user the ability to change
the SSID. However, Reset To Defaults did not reset the Guest SSID back to its default
setting. (cqvds00015950)
The SBG901 Wireless HTML page has been changed so that only one Guest SSID (wireless
network 2) is available to be configured when logged in as the admin user. All other Guest
networks may be configured when logged in as a root user. (cqvds00016165)

Printed Copies of this Document are Not Controlled

365-095-27673
Revision X.1

SBG901-2.12.2.0-GA-06-750 Customer Release Update

ARRIS
Sheet 14 of 15

The SBG901 now has the ability to support a configuration file entry with a RowStatus
"Create&Go" for the creation of rows in cmGwLanAddrTable and
cmGwNatPassthroughTable. (cqvds00015725)
Support for the following Motorola Private Gateway MIB objects has been added to the
cmGateway MIB: (cqvds00015125)
) cmGwFiltersIpFilter
) cmGwFiltersMacFilter
) cmGwFiltersPortFilter
Support for a new MIB group cmGwPortTriggerMib, and the ability to configure all MIB
objects under cmGwVirtualServerMib and cmGwPortTriggerMib via the configuration file has
been added. (cqvds00013455)
Note: With this implementation, cmGwAlgMib and objects under it are no longer supported.
Support for the cmdot11BssAccessTable has now been added. (cqvds00015817)
Clicking on the "Restore Factory Defaults" Button from the internal HTML page will no
longer cause the Gateway device to reboot. The unit will reset the configuration to its factory
defaults; however, the user needs to reset the device for those settings to take affect.
(cqvds00014799)
The SNR value as reported on the Status/Connection HTML page is now posted as dB.
(cqvds00015249)
The GUI will now report a correct error message with an invalid DHCP IP address range
change. (cqvds00012578)
A user can now see the entered username text on the HTML login page. Previously the text
was hidden. The password will remain hidden. (cqvds00014800).
Fixed and verified that setting the RowStatus to Destroy for one row in the SNMP tables
cmGwLanAddrTable and cmGwNatPassthroughTable deletes only the particular entry.
(cqvds00015637)
Implemented the following MIB objects under the cmGwFirewallMib group in Motorola CM
Gateway MIB. All the objects can be set from either SNMP or using the CM configuration file.
The permitted values are TRUE or FALSE: (cqvds00015371)
) cmGwFirewallProtectEnable
) cmGwFirewallIpFloodDetectEnable
) cmGwFirewallPortScanDetectEnable
) cmGwFirewallBlockFragIpEnable
An issue has been resolved in which setting cmGwNatPassthroughTable entries for a MAC
address which already exists in the cmGwNatPassthroughTable, would cause the SBG901 to
reject the configuration file and not complete the modem registration process. (cqvds00016219)
Updated the SBG901 RIP implementation to use the Wan-Man address to advertise the RIP
Routed Subnet when the Wan-Man address is statically configured. Previously this was only
done when the Wan-Man address was configured for DHCP. (cqvds00016633)
The SBG901 now supports validation checks when configuring RIP using the Advanced/RIP
HTML page. (cqvds00015656)
Fixed an issue in which Wi-Fi security modes; WPA, WPA2, WPA-PSK and WPA-PSK2
could be enabled at the same time. The GUI has been changed so that this invalid
configuration can no longer be entered. (cqvds00015660)
A Ping WAN capability has been added to the SBG901 Internal Diagnostic HTML page.
(cqvds00015669)
A DDNS issue has been resolved in which a WAN IP address change caused the SBG901 to
be unable to resolve the hostname for an attached CPE. (cqvds00015671)
A user is now able to add a secondary DNS IP address in the Basic Internal HTML page.
(cqvds00015674)

Printed Copies of this Document are Not Controlled

365-095-27673
Revision X.1

SBG901-2.12.2.0-GA-06-750 Customer Release Update

The Reset Wireless Defaults function on the Wireless Basic page has been fixed to not
change the existing country setting. (cqvds00015206)
Changing the username and/or password from the Internal HTML page will no longer cause
the SBG901 to Reset to Default when the Apply button is clicked. (cqvds00015682)
The cmdot11BssWep64BitKeyTable and cmdot11BssWep128BitKeyTable MIB(s) can now be
accessed using SNMP. In addition, the number of Wi-Fi instances is shown correctly when
using a snmpwalk command to query the cmdot11BssWepTable,
cmdot11BssWep64BitKeyTable, cmdot11BssWep128BitKeyTable, cmdot11BssWpaTable and
cmdot11BssRadiusTable. (cqvds00015691)
When adding a cmGwNatPassthroughMACAddr to the SBG901 configuration file, an entry
may block the modem registration in those cases where the index number designated in the
configuration file might already exist in the SBG901 cmGwNatPassthroughTable .To resolve
this (cqvds00015691):
All entries in cmGwNatPassthroughTable will be made volatile (after re-init MAC or full
reset).
cmGwNatPassthroughRowStatus with Active(1) is not allowed to be added to a modem
configuration file. Any new cmGwNatPassthroughMACAddr entry will go to Active status
by default.
The following Wireless MIB objects have been added to the Motorola private cmdot11plus
MIB and are now supported. (cqvds00015679, cqvds00015688)
) cmdot11OperMode
) cmdot11CurrentChannel
) cmdot11ChannelSetting
) cmdot1154gNetMode

10.15. SBG901-2.1.2.0-GA-01-161
10.15.1. Features

802.11 Country Code support was added for Singapore. (cqvds00014247)

Initial DOCSIS Registration times have been improved by 5-6 seconds by reducing the MDD
timers for non-bonding modems. (cqvds00012490)

10.15.2. Defects Fixed

The Web Domain anonymiser.com won't be loaded by default in the Keyword List or the
Blocked Domain List on Web Page for Parental Control. (cqvds00014293)
When restoring Guest Network Defaults on one of the configured Guest Networks, the defaults
are applied to all three of the available Guest Networks. (cqvds00012490)
Applying the Wi-Fi factory defaults on the Wi-Fi GUI page changed the Wi-Fi country to
USA or Europe depending on model. (cqvds00014653)
Multicast stops working if Parental Control is enabled. (cqvds00014378)
Multicast traffic is now forwarded regardless the Parental Control Mode (enabled/disabled).
The Guest Network options did not have the Show Key Check Box available for WPAPSK/WPA2-PSK. (cqvds00012502)
When viewing a Windows XP based systems (Windows Network Device Properties) page, the
page will now display Motorolas URL, when successfully connected to a Motorola Gateway
configured to support UPnP. (cqvds00014441)

10.16. 2.1.1.0-GA-01-120
10.16.1. Features

Initial General Availability Release for the SBG901 SURFboard Wireless Cable Modem
Gateway product.

10.16.2. Defects Fixed

ARRIS
Sheet 15 of 15

None initial release

Printed Copies of this Document are Not Controlled

365-095-27673
Revision X.1