msr configuration

H3C MSR Series Routers Web-Based Configuration Guide

Hangzhou H3C Technologies Co., Ltd. http://www.h3c.com Software version: MSR-CMW520-R2207 Document version: 20110819-C-1.05

Copyright 2008-2011, Hangzhou H3C Technologies Co., Ltd. and its licensors

All rights reserved

No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Hangzhou H3C Technologies Co., Ltd.

Trademarks

H3C, , Aolynk, , H3Care,

, TOP G, , IRF, NetPilot, Neocean, NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware, Storware, NQA, VVG, V2G, VnG, PSPT, XGbus, N-Bus, TiGem, InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd.

All other trademarks that may be mentioned in this manual are the property of their respective owners

Notice

The information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute the warranty of any kind, express or implied.

Preface

This document is the Web-based configuration guide for the H3C MSR series routers, and describes how to visually manage and maintain the H3C MSR series routers through a Web-based interface.

This preface includes:

Audience Conventions About the H3C MSR documentation set Obtaining documentation Technical support Documentation feedback

Audience This documentation is intended for:

Network planners Field technical support and servicing engineers Network administrators working with the MSR series

Conventions This section describes the conventions used in this documentation set.

GUI conventions

Convention Description

Boldface Window names, button names, field names, and menu items are in Boldface. For example, the New User window appears; click OK.

> Multi-level menus are separated by angle brackets. For example, File > Create > Folder.

Symbols

Convention Description

WARNING An alert that calls attention to important information that if not understood or followed can result in personal injury.

CAUTION An alert that calls attention to important information that if not understood or followed can result in data loss, data corruption, or damage to hardware or software.

IMPORTANT An alert that calls attention to essential information.

NOTE An alert that contains additional or supplementary information.

TIP An alert that provides helpful information.

Network topology icons

Represents a generic network device, such as a router.

Represents a routing-capable device, such as a router.

Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features.

Port numbering in examples

The port numbers in this document are for illustration only and might be unavailable on your device.

About the H3C MSR documentation set The H3C MSR documentation set includes:

Chapter Contents

1 Web Overview How to log in to the Web interface, the layout and basic functions of the Web interface.

2 Device Informatio The device summary information and how to use the function.

3 Basic Services Configuration How to use the basic configuration wizard.

4 WAN Interface Configuration

How to configure the WAN interface parameters such as the connection mode and MTU.

5 VLAN Interface Configuration

How to configure a VLAN and its VLAN interface, and how to configure WLAN parameters.

6 Wireless Configuration How to configure a WLAN.

7 3G Management How to configure 3G Management.

8 NAT Configuration How to configure NAT, a NAT server, and application layer protocol check.

9 Security Configuration How to configuring access control, URL filter and attack protection.

10 Redirection Configuration How to configure Web Page Redirection.

11 Route Configuration How to add and delete IPv4 routes.

12 User-Based Load Sharing How to configure user-based load sharing.

13 Traffic Ordering Configuration How to configure traffic ordering.

14 DNS Configuration How to configure DNS and DDNS.

15 DHCP Configuration How to configure a DHCP address pool.

16 QoS Configuration How to configure QoS, line rate and IPv4 ACL.

17 SNMP How to configure SNMP-related parameters.

18 Bridging Configuration How to configure basic bridging functionalities.

19 Group Management How to configure user groups.

20 MSTP Configuration How to configure CWMP-related parameters.

21 RADIUS Configuration How to configure RADIUS parameters.

22 Login Control Configuration How to configure Login-Control-related parameters.

23 ARP Configuration How to configure ARP parameters.

24 IPsec VPN Configuration How to configure IPsec and IKE parameters.

25 L2TP Configuration How to configure L2TP parameters.

26 GRE Configuration How to configuring PKI parameters.

27 Certificate Management How to configuring Certificate parameters.

28. System Management How to configure System Management.

29 SNMP (Lite Version) How to configure SNMP (Lite Version) parameters.

30. Syslog How to configure Syslog related parameters.

31 Diagnostic Tools How to use ping and trace route to locate network faults.

32 WiNet Configuration How to configure WiNet parameters.

33 Voice Management-Configuration Wizard

How to use the VoIP basic configuration wizard.

34 Voice Management-Local Number and Call Route

How to configure the VoIP basic parameters, local number, call route, fax, modem, voice services, and related advanced parameters.

35 Voice Management-Dial Plan Configuration

How to configure the VoIP dial policy.

36 Voice Management-Call Connection Configuration

How to configure SIP connection of the registration server and proxy server, and SIP calls parameters.

37 Voice Management-SIP Trunk Management

How to configure SIP trunk,call route for outbound calls related parameters.

38 Voice Management-Digital Link Management

How to configure VE1, VT1, and BSV links related parameters.

39 Voice Management-Line Management

How to configure FXS, FXO, E&M, and ISDN lines related parameters.

40 Voice Management-SIP Local Survival

How to configure SIP local survival related parameters.

41 Voice Management-IVR

How to configure global key policy,IVR nodes,access number management related parameters.

42 Voice How to configure the advanced parameters for local number, call route, and link

Management-Advanced Configuration

management.

43 Voice Management-Statistics How to read the summary information of calls and connections.

Obtaining documentation You can access the most up-to-date H3C product documentation on the World Wide Web at http://www.h3c.com.

Click the links on the top navigation bar to obtain different categories of product documentation:

[Technical Support & Documents > Technical Documents] Provides hardware installation, software upgrading, and software feature configuration and maintenance documentation.

[Products & Solutions] Provides information about products and technologies, as well as solutions. [Technical Support & Documents > Software Download] Provides the documentation released with the software version.

Technical support [email protected]

http://www.h3c.com

Documentation feedback You can e-mail your comments about product documentation to [email protected].

We appreciate your comments.

i

Contents

Web overview 1 Logging in to the web interface1 Logging out of the web interface2 Introduction to the web interface2 User level4 Introduction to the web-based NM functions 4 Common web interface elements 17 Managing web-based NM through CLI 21

Enabling/disabling web-based NM 21 Managing the current web user 21

Configuration guidelines 22 Troubleshooting web browser 22

Failure to access the device through the web interface 22

Device information 26 Displaying device information 26

Device information 28 Broadband connection information 28 3G wireless card state 28 LAN information 30 WLAN information 30 Service information 31 Recent system logs 31

Integrated service management 31

Basic services configuration 32 Basic service overview 32 Configuring basic services 32

Starting the basic configuration wizard 32 Setting WAN interface parameters 33 Setting WLAN interface parameters 39 Setting LAN interface parameters 41 Validating the basic services configuration 42

WAN interface configuration 44 Configuring an Ethernet interface 44

Overview 44 Configuring an Ethernet interface 44

Configuring an SA interface 47 SA interface overview 47 Configuration procedure 47

Configuring an ADSL/G.SHDSL interface 48 ADSL/G.SHDSL interface overview 48 Configuration Procedure 49

Configuring a CE1/PRI interface 52 CE1/PRI interface overview 52 Configuration procedure 53

Configuring a CT1/PRI interface 55 CT1/PRI interface overview 55 Configuration procedure 55

ii

Viewing the general information and statistics of an interface 56

VLAN configuration 58 Overview 58 Configuring a VLAN and its VLAN interface 58

Configuration task lists 58 Creating a VLAN and its VLAN interface 59 Configuring VLAN member ports 60 Configuring parameters for a VLAN interface 60

Configuration guidelines 62

Wireless configuration overview 63 Overview 63 Configuration task list 63

Wireless service configuration 65 Configuring wireless access service 65

Creating a wireless access service 65 Configuring clear type wireless service 66 Configuring crypto type wireless service 74 Security parameter dependencies 80

Displaying wireless access service 82 Displaying wireless service 82 Displaying client 84 Displaying RF ping information 88

Wireless access configuration examples 89 Wireless service configuration example 89 Access service-based VLAN configuration example 90 PSK authentication configuration example 92 Local MAC authentication configuration example 96 Remote MAC authentication configuration example 99 Remote 802.1x authentication configuration example 105 802.11n configuration example 115

Client mode 118 Enabling the client mode118

Connecting the wireless service119 Displaying statistics 120

Client mode configuration example121

Radio configuration 124 Configuring data transmit rates127

Configuring 802.11b/802.11g rates127 Configuring 802.11n MCS128

Displaying radio130 Displaying wireless services bound to a radio130 Displaying detailed radio information 130

WLAN security configuration 133 Blacklist and white list133 Configuring the blacklist and white list functions 133

Configuring dynamic blacklist 133 Configuring static blacklist 134 Configuring white list 135

User isolation136 Configuring user isolation 136

iii

WLAN QoS configuration 138 Configuring wireless QoS138

Enabling wireless QoS138 Setting the SVP service139 Setting CAC admission policy 139 Setting radio EDCA parameters for APs 140 Setting EDCA parameters for wireless clients 141 Display radio statistics 142 Displaying client statistics 144 Setting rate limiting 146

Wireless QoS configuration example147 CAC service configuration example 147 Static rate limiting configuration example 148 Dynamic rate limiting configuration example 149

Advanced configuration 151 District code 151 Setting a district code 151 Channel busy test 151

Configuring a channel busy test 152

3G management 154 Overview154 Managing the 3G modem 154

Displaying the 3G information 154 Managing the pin code155

NAT configuration 158 Overview158 Configuring NAT158

Configuration overview 158 Configuring dynamic NAT 159 Configuring a DMZ host160 Configuring an internal server 161 Enabling application layer protocol check163 Configuring connection limit 163

NAT configuration examples 164 NAT configuration example I164 Internal server configuration example166

Access control 170 Access control overview170 Configuring access control 170 Access control configuration example 172

URL filtering 174 URL filtering overview 174 Configuring URL filtering 174 URL filtering configuration example 176

MAC address filtering 178 MAC address filtering overview178 Configuring MAC address filtering178

Configuring the MAC address filtering type 178 Configuring the MAC addresses to be filtered 179 MAC address filtering configuration example 180

iv

Attack protection 182 Attack protection overview182

Blacklist function 182 Intrusion detection function182

Configuring the blacklist function 184 Configuration task list 184 Enabling the blacklist function185 Adding a blacklist entry manually 185 Viewing blacklist entries 186

Configuring intrusion detection 187 Attack protection configuration examples 189

Attack protection configuration example for the MSR 900/20-1X series routers189 For MSR 20/30/50 series routers 192

Application control 196 Application control overview196 Configuring application control 196

Configuration task list 196 Loading applications196 Configuring a custom application 197 Enabling application control 198

Application control configuration example 199

Web page redirection configuration 202 Overview202 Configuring web page redirection202

Route configuration 204 Overview204 Route configuration 204

Creating an IPv4 static route204 Displaying the active route table 206

Static route configuration example 207 IPv4 static route configuration example 207

Precautions209

User-based load sharing 211 Overview211 Configuring user-based load sharing 211

Traffic ordering 213 Overview213 Configuring traffic ordering 213

Configuration overview 213 Setting the traffic ordering interval 214 Specifying the traffic ordering mode214 Displaying internal interface traffic ordering statistics214 Displaying external interface traffic ordering statistics215

DNS configuration 216 DNS overview 216 Configuring DNS 216

Configuration overview 216 Enabling dynamic domain name resolution 217 Enabling DNS proxy218 Clearing the dynamic domain name cache 218 Specifying a DNS server 218

v

Configuring a domain name suffix219 Domain name resolution configuration example219

DDNS configuration 225 DDNS overview225 Configuration prerequisites226 Configuration procedure 226 DDNS configuration example227

DHCP configuration 230 Introduction to DHCP 230 Configuring DHCP 231

Configuration overview 231 Enabling DHCP233 Configuring DHCP interface setup 233 Configuring a static address pool for the DHCP server 234 Configuring a dynamic address pool for the DHCP server 236 Configuring IP addresses excluded from dynamic allocation 238 Configuring a DHCP server group 239

DHCP configuration examples240 DHCP configuration example without DHCP relay agent241 DHCP relay agent configuration example248


ACL configuration 255 ACL overview 255 Configuring an ACL256

Configuration task list 256 Creating an IPv4 ACL 256 Configuring a rule for a basic IPv4 ACL257 Configuring a rule for an advanced IPv4 ACL259 Configuring a rule for an Ethernet frame header ACL 262


QoS configuration 265 Overview265

QoS overview265 Subnet limit265 Advanced limit265 Advanced queue 266

Configuring QoS266 Configuring subnet limit266 Configuring advanced limit268 Configuring advanced queue 271

QoS configuration examples 275 Subnet limit configuration example 275 Advanced queue configuration example277

Appendix Packet Priorities 280

SNMP 283 SNMP overview283 SNMP agent configuration 284

Configuration task list 284 Enabling the SNMP agent function 285 Configuring an SNMP view 287 Configuring an SNMP community289 Configuring an SNMP group290

vi

Configuring an SNMP user 292 Configuring SNMP trap function 294 Displaying SNMP packet statistics 296

SNMP configuration example297 SNMPv1 or SNMPv2c configuration example 297 SNMPv3 configuration example301

Bridging 307 Overview307

Bridging overview 307 Configuring bridging307

Configuration task list 307 Enabling a bridge set307 Adding an interface to a bridge set 308

Bridging configuration example 309

User group configuration 313 Overview313 Configuring user groups313

Configuration task list 313 Configuring a user group 314 Configuring a user 315 Configuring access control316 Configuring application control317 Configuring bandwidth control317 Configuring packet filtering318 Synchronizing user group configuration for wan interfaces320

User group configuration example320

MSTP configuration 328 Overview328

Introduction to STP328 Introduction to RSTP335 Introduction to MSTP 335 Protocols and standards 340

Configuring MSTP 341 Configuration task list 341 Configuring an MST region 341 Configuring MSTP globally 342 Configuring MSTP on a port 345

MSTP configuration example 347 Configuration guidelines 352

RADIUS configuration 354 Introduction to RADIUS 354 Configuring a RADIUS scheme354 RADIUS configuration example 359 Configuration guidelines 366

Login control configuration 368 Login control overview368 Configuring login control 368 Login control configuration example369

ARP configuration 371 Gratuitous ARP overview371 Displaying ARP entries371

vii

Creating a static ARP entry 372 Removing ARP entries 372 Enabling learning of dynamic ARP entries 373 Configuring gratuitous ARP374 Static ARP configuration example 374

ARP attack defense configuration 380 Overview380 Configuring periodic sending of gratuitous ARP packets 380 Configuring ARP automatic scanning 381 Configuring fixed ARP 382

IPsec VPN configuration 384 Overview384 Configuring IPsec VPN 385

Configuration task list 385 Configuring an IPsec connection 385 Displaying IPsec VPN monitoring information 392

IPsec VPN configuration example 393 Configuration guidelines 395

L2TP configuration 397 L2TP overview397 Configuring L2TP398

L2TP configuration task list 398 Enabling L2TP 398 Adding an L2TP group399 Displaying L2TP tunnel information 406

L2TP configuration example406 Client-initiated VPN configuration example 406

GRE configuration 411 GRE overview 411

Introduction to GRE 411 Configuring a GRE over IPv4 tunnel 411

Configuration prerequisites 411 Configuration task list 411 Creating a GRE tunnel 412

GRE over IPv4 tunnel configuration example413

Certificate management 421 Introduction to PKI 421

Operation of PKI422 Configuring PKI 422

Configuration task list 422 Creating a PKI entity 424 Creating a PKI domain 426 Generating an RSA key pair428 Destroying the RSA key pair 429 Retrieving and displaying a certificate 429 Requesting a local certificate 431 Retrieving and displaying a CRL432

PKI configuration examples433 Configuring a PKI entity to request a certificate from a CA (method I) 433 Configuring a PKI entity to request a certificate from a CA (method II) 437 Applying RSA digital signature in IKE negotiation 442


viii

System management 449 Configuration management 449

Save 449 Initialize 450 Backing up configuration 450 Restoring configuration 451 Backing up and restoring device files through the USB port 452

Reboot 453 Service management 453

Overview453 Configuring service management454

User management 456 Creating a user456 Setting the super password for switching to the management level 457 Switching the user access level to the management level458

System time 458 Setting the system time459 Setting the time zone of the system 460

TR-069 configuration 460 TR-069 network framework 461 Basic functions of TR-069 461 TR-069 configuration462 Configuration guidelines 463

Software upgrade (for the MSR 900/MSR 20-1X series)464 Upgrading software 464

Software upgrade (for the MSR 20/30/50 series) 465 Upgrading software 465

SNMP (lite version) 466 SNMP overview466 SNMP agent configuration 466 SNMP configuration example468

SNMPv1/SNMPv2c configuration example 468 SNMPv3 configuration example470

Syslog 473 Configuring syslog 473

Displaying syslogs473 Setting the loghost 475 Setting buffer capacity and refresh interval476

Diagnostic tools 477 Overview477

Trace route 477 Ping 477

Tools operations 478 Trace route operation478 Ping operation 478

WiNet configuration 480 Overview480 Configuring WiNet 481

Enabling WiNet 481 Setting the background image for the WiNet topology diagram482 Managing WiNet482 Configuring a RADIUS user485

ix

WiNet configuration example486 WiNet establishment configuration example 486 WiNet-based RADIUS authentication configuration example 491

Configuration wizard 495 Overview495 Basic service setup 495

Entering the configuration wizard homepage495 Selecting a country495 Configuring local numbers 496 Configuring connection properties 497 Finishing configuration wizard 497

Local number and call route 498 Basic settings 498 Fax and Modem498 Call services498 Advanced settings498

Basic settings 499 Introduction to basic settings499

Local number499 Call route499

Basic settings 500 Configuring a local number 500 Configuring a call route501

Configuration examples of local number and call route 503 Configuring direct calling for SIP UAs through the SIP protocol (configuring static IP address)503 Configuring direct calling for SIP UAs through the SIP protocol (configuring domain name) 507 Configuring proxy server involved calling for SIP UAs 511 Configuring trunking mode calling518

Fax and Modem 522 FoIP overview 522

Protocols and standards for FoIP 522 Fax flow522 Introduction to fax methods 523

SIP Modem pass-through function 524 Configuring fax and Modem524

Configuring fax and Modem parameters of a local number 524 Configuring fax and Modem parameters of a call route527

Call services 529 Introduction to call services 529

Call waiting529 Call hold529 Call forwarding 530 Call transfer530 Call backup530 Hunt group 530 Call barring531 Message waiting indication 531 Three-party conference 531 Silent monitor and barge in services531 Calling party control 531 Door opening control532 CID on the FXS voice subscriber line 532

x

CID on the FXO voice subscriber line 532 Support for SIP voice service of the VCX 533

Configuring call services of a local number533 Configuring call forwarding, call waiting, call hold, call transfer, and three-party conference533 Configuring other voice functions534

Configuring call services of a call route 536 Call services configuration examples538

Configuring call waiting 538 Configuring call forwarding539 Configuring call transfer 541 Configuring hunt group 542 Configuring three-party conference545 Configuring silent monitor and barge in 547

Advanced settings 553 Introduction to advanced settings553

Coding parameters 553 Other parameters 557

Configuring advanced settings of a local number 557 Configuring coding parameters of a local number 557 Configuring other parameters of a local number 559

Configuring advanced settings of a call route560 Configuring coding parameters of a call route560 Configuring other parameters for a call route 561

Advanced settings configuration example 562 Configuring out-of-band DTMF transmission mode for SIP 562

SIP2SIP call settings 564 Configuring codec transparent transmission564

Dial plan 565 Dial plan overview565

Dial plan process565 Regular expression 566

Introduction to dial plan functions 568 Number match568 Call control569 Number substitution 569

Configuring dial plan 570 Configuring number match570 Configuring call control 571 Configuring number substitution 574

Dial plan configuration examples 577 Configuring number match mode577 Configuring the match order of number selection rules 579 Configuring entity type selection priority rules582 Configuring call authority control 586 Configuring number substitution 589

Call connection 597 Introduction to SIP 597

Terminology 597 Functions and features of SIP 598 SIP messages599 SIP fundamentals 599

Support for transport layer protocols 602

xi

SIP security 602 Signaling encryption 602 Media flow encryption603 TLS-SRTP combinations604

Support for SIP extensions604

SIP connection configuration 605 Configuring connection properties605

Configuring registrar605 Configuring proxy server607

Configuring session properties 607 Configuring source address binding607 Configuring SIP listening 609 Configuring media security 610 Configuring caller identity and privacy 611 Configuring SIP session refresh612 Configuring compatibility 612

Configuring advanced settings614 Configuring registration parameters 614 Configuring voice mailbox server 616 Configuring signaling security 617

Configuring call release cause code mapping618 Configuring PSTN call release cause code mappings 618 Configuring SIP status code mappings 619

SIP connection configuration examples 620 Configuring basic SIP calling features 620 Configuring caller ID blocking620 Configuring SRTP for SIP calls622 Configuring TCP to carry outgoing SIP calls 623 Configuring TLS to carry outgoing SIP calls 624

SIP server group management 626 Configuring a SIP server group 626

SIP trunk configuration 628 Overview628

Background628 Features 629 Typical applications 629 Protocols and standards 630

Configuring SIP trunk 630 Configuration task list 630 Enabling the SIP trunk function631 Configuring a SIP server group 631 Configuring a SIP trunk account 632

Configuring a call route for outbound calls 633 Configuring a call route for a SIP trunk account633 Configuring fax and Modem parameters of the call route of a SIP trunk account635 Configuring advanced settings of the call route of a SIP trunk account635 Configuring codec transparent transmission 637

Configuring a call route for inbound calls 637 SIP trunk configuration examples 637

Configuring a SIP server group with only one member server637 Configuring a SIP server group with multiple member servers644 Configuring call match rules 647

xii

Data link management 650 Introduction to data link management 650

Overview650 E1 and T1 interfaces 651 Features of E1 and T1652 Introduction to BSV interface653

Configuring digital link management 653 Configuring VE1 line653 Configuring VT1 line658 Configuring BSV line661 Displaying ISDN link state666

E1 and T1 voice configuration example 666 Configuring E1 voice DSS1 signaling 666

Line management 669 Line management overview 669

FXS voice subscriber line 669 FXO voice subscriber line669 E&M subscriber line 669 One-to-one binding between FXS and FXO voice subscriber lines670

Echo adjustment function671 Adjusting echo duration 671 Adjusting echo cancellation parameters671 Enabling the nonlinear function of echo cancellation 672

Line management configuration 672 Configuring an FXS voice subscriber line672 Configuring an FXO voice subscriber line675 Configuring an E&M subscriber line 678 Configuring an ISDN line681 Configuring a paging line683 Configuring an MoH line 684

Line management configuration examples 685 Configuring an FXO voice subscriber line685 Configuring one-to-one binding between FXS and FXO686

SIP local survival 694 Introduction 694 Configuring SIP local survival 695

Service configuration 695 User management 696 Trusted nodes697 Call-out route697 Area prefix 698 Call authority control699

SIP local survival configuration examples 700 Configuring local SIP server to operate in alone mode 700 Configuring local SIP server to operate in alive mode703 Configuring call authority control 705 Configuring an area prefix 710 Configuring a call-out route713

IVR 716 Overview716 Advantages716

Customizable voice prompts 716 Various codecs 716

xiii

Flexible node configuration716 Customizable process 716 Successive jumping 717 Error processing methods 717 Timeout processing methods 717 Various types of secondary calls 717

Configuring IVR 717 Uploading media resource files717 Importing a media resource through an MOH audio input port718

Configuring the global key policy719 Configuring IVR nodes720

Configuring a call node720 Configure a jump node 723 Configure a service node 725

Configuring access number management726 Configuring an access number 726 Configuring advanced settings for the access number 727

IVR configuration examples 728 Configure a secondary call on a call node (match the terminator of numbers) 728 Configure a secondary call on a call node (match the number length) 732 Configure a secondary call on a call node (match a number) 735 Configure an extension secondary call on a call node 737 Configure a jump node 739 Configure an immediate secondary call on a service node741 Configure a secondary call on a service node743 Configure a call node, jump node, and service node 745

Customizing IVR services751 Create a menu 752 Bind an access number757 Customize IVR services 758 Custom IVR service configuration examples759

Advanced configuration 771 Global configuration771 Batch configuration772

Local number772 Call route779 Line management 782 SIP local survival services 786

States and statistics 788 Line states788

Displaying detailed information about analog voice subscriber lines789 Displaying detailed information about digital voice subscriber lines789

Call statistics 790 Displaying active call summary 791 Displaying history call summary 791

SIP UA states792 Displaying TCP connection information 792 Displaying TLS connection information 792 Displaying number register status793 Displaying number subscription status 793

Local survival service states794 SIP trunk account states 795 Server group information 795

xiv

IVR information 796 Displaying IVR call states796 Displaying IVR play states 797

Index 798

1

Web overview

The device provides the web-based network management function to facilitate the operations and maintenance of network devices. Through this function, the administrator can visually manage and maintain network devices through the web interfaces.

Figure 1 Web-based network management operating environment

Logging in to the web interface The device is provided with the default web login information. You can use the default information to log in to the web interface. The default web login information is:

Username: admin Password: admin IP address of the device: 192.168.1.1. You can follow the steps below to log in to the device through the web interface.

1. Connect the device and PC

Connect the Ethernet interface Ethernet 0/0 of the device to the PC using a crossover Ethernet cable.

2. Configure an IP address for the PC and ensure that the PC and device can communicate with each other properly.

Modify the IP address of the PC to one that within the network segment 192.168.1.0/24 (except for 192.168.1.1), for example, 192.168.1.2.

3. Open the browser, and input the login information.

On the PC, open the browser, type the IP address http://192.168.1.1 in the address bar, press Enter and you can enter the login page of the web interface, as shown in Figure 2. Input the username and password admin, and the verification code, select the language (English and Chinese are supported at present), and click Login.

Figure 2 Login page of the web interface

2

CAUTION:

The PC in Figure 1 is the one where you configure the device, but not necessarily the web-based networkmanagement terminal. The web-based network management terminal is a PC (or another terminal) used to log in to the web interface and is required to be reachable to the device.

After logging in to the web interface, you can create a new user and configure the IP address of the interface connecting the user and the device.

If you click the verification code displayed on the web login page, you can get a new verification code. Up to 24 users can concurrently log in to the device through the web interface.

Logging out of the web interface Click Logout in the upper-right corner of the web interface to quit web-based network management.

The system will not save the current configuration before you log out of the web interface. Save the current configuration before logout.

CAUTION:

A logged-in user cannot automatically log out by directly closing the browser.

Introduction to the web interface The web-based interface is composed of three parts: navigation area, title area, and body area, as shown in Figure 3.

3

Figure 3 Initial page of the web interface

(1) Navigation area (2) Title area (3) Body area

Navigation area: Organizes the web function menus in the form of a navigation tree, where you can select function menus as needed. The result is displayed in the body area.

4

Title area: On the left, displays the path of the current configuration interface in the navigation area; on the right, provides the Save button to quickly save the current configuration, the Help button to display the web related help information, and the Logout button to log out of the web interface.

Body area: The area where you can configure and display a function.

User level Web user levels, ranging from low to high, are visitor, monitor, configure, and management.

Visitor: Users of this level can perform the ping and traceroute operations, but can neither access the device data nor configure the device.

Monitor: Users of this level can only access the device data but cannot configure the device. Configure: Users of this level can access data from the device and configure the device, but they

cannot upgrade the host software, add/delete/modify users, or back up/restore the application file.

Management: Users of this level can perform any operations for the device.

Introduction to the web-based NM functions

NOTE:

User level in Table 1 indicates that users of this level or users of a higher level can perform the corresponding operations.

Table 1 Description of web-based NM functions

Function menu Description User level

Device Information

View and refresh device information, broadband connection information, 3G wireless card state, LAN information, WLAN information, services information, and recent system logs.

Monitor

View the URL address on a card. Monitor

Device Information

Integrated Service Management Change the URL address of a

card, and log in to the web interface of the card.

Configure

Wizard Basic Configuration Wizard Perform the basic service configuration of routers. Configure

View the configuration information of a WAN interface, and interface statistics.

Monitor Interface Setup

WAN Interface Setup WAN Interface Setup

Modify WAN interface configuration, and clear the statistics of a WAN interface.

Configure

5


View the configuration information of a VLAN. Monitor VLAN Setup

Configure a VLAN. Configure

View the configuration information of a VLAN interface.

Monitor

LAN Interface Setup

VLAN Interface Setup

Configure a VLAN interface. Configure

View wireless service, radio and client information. Monitor

Summary View wireless service, radio and client information; clear radio statistics; clear client statistics, disconnect a connection, and add a client to a blacklist.

Configure

View configuration information about an access service. Monitor

Access Service Create and configure an access service. Configure

View radio parameters and radio rate settings. Monitor

Radio Set radio parameters, 802.11a/b/g rates, and 803.11n MCS.

Configure

View configuration information of blacklist, whitelist, and user isolation.

Monitor

Security

Configure blacklist, whitelist, and user isolation. Configure

View wireless QoS and rate limiting settings, and radio and client information.

Monitor

Wireless QoS Configure wireless QoS and rate limiting, and clear radio and client information.

Configure

View configuration information of the country code. Monitor

Wireless Configuration

Country Code

Set the country code. Configure

3G Information View 3G modem information, UIM card information, and 3G network information.

Monitor

View UIM card status. Monitor 3G

PIN Code Management Manage PIN codes. Configure

6


View information about the NAT configurations. Monitor Dynamic NAT

Configure NAT. Configure

Create a DMZ host. Monitor

DMZ HOST Enable DMZ host on an interface. Configure

View configurations of the internal server. Monitor NAT Server Setup

Configure the internal server. Configure

View configurations of the application layer protocol check function.

Monitor

ALG

Configure the application layer protocol check function. Configure

View configuration information about the number of connections displayed.

Monitor

NAT Configuration

NAT Configuration

Nat Outbound Setup

Configure connection limit. Configure

View the access control configuration information. Monitor Access

Configure access control. Configure

View information about URL filtering conditions. Monitor

URL Filter Add or delete URL filtering conditions. Configure

View information about MAC address filtering conditions. Monitor

MAC Address Filtering Set MAC address filtering types, add or delete MAC addresses to be filtered.

Configure

View and refresh the blacklist information and whether the blacklist filtering is enabled or not.

Monitor

Blacklist Add, modify, delete and clear blacklist entries, and set whether to enable or disable blacklist filtering.

Configure

View intrusion detection configuration information. Monitor

Attack Defend

Intrusion Detection Configure the intrusion detection function. Configure

Security Setup

Application Control

Application Control View application control configuration information. Monitor

7


Configure application control. Configure

Load Application Load an application and view the loaded application. Configure

View custom application information. Monitor

Custom Application Add, modify, and delete a custom application. Configure

View the configuration information of redirection. Monitor

Redirection Add, modify, or remove the redirection configuration on an interface.

Configure

Summary View IPv4 route summary information. Monitor

Create Create IPv4 static routes. Configure Route Setup

Remove Delete IPv4 static routes. Configure

View the IP address, mask, and load sharing information of an interface.

Monitor

User-based-sharing Modify the load sharing status and shared bandwidth of an interface.

Configure

View IP addresses, traffic ordering mode and traffic ordering interval for interfaces.

Monitor

Config

Configure the traffic ordering mode and interval. Configure

Statistics of Inbound Interfaces

View inbound interface traffic ordering statistics. Monitor

Traffic Ordering

Statistics of Outbound Interfaces

View outbound interface traffic ordering statistics. Monitor

View DNS configurations. Monitor DNS Configuration

Configure DNS. Configure

View DDNS configurations. Monitor DNS Setup

DDNS Configuration Add, modify, and delete a DDNS entry. Configure

View whether DHCP is globally enabled or disabled. Monitor

Advance

DHCP Setup DHCP Enable

Enable or disable DHCP. Configure

8


View DHCP server, relay, or client configurations on an interface.

Monitor DHCP Interface Setup

Enable the DHCP server, relay, or client on an interface. Configure

Summary View summary IPv4 ACL information. Monitor

Create Create an IPv4 ACL. Configure

Basic Config Configure a basic rule for an IPv4 ACL. Configure

Advanced Config Configure an advanced rule for an IPv4 ACL. Configure

Link Config Configure a link layer rule for an IPv4 ACL. Configure

ACL IPv4

Remove Remove an IPv4 ACL. Configure

View the subnet limit configuration information. Monitor

Subnet Limit add, modify or delete subnet limit rules. Configure

View the advanced limit configuration information. Monitor

Advanced Limit Add, modify, or delete advanced limit rules. Configure

View advanced queue configuration information. Monitor

Advanced Queue Configure interface bandwidth, add, modify, or delete bandwidth guarantee policies.

Configure

Summary View classifier information. Monitor

Create Create a classifier. Configure

Setup Configure classification rules for a classifier. Configure

Classifier

Remove Remove a classifier. Configure

Summary View behavior information. Monitor

Create Create a behavior. Configure

Setup Configure actions for a behavior. Configure

Behavior

Remove Remove a behavior. Configure

Summary View QoS policy information. Monitor

Policy

Create Create a QoS policy. Configure

9


Setup Configure classifier-behavior associations. Configure

Remove Remove a QoS policy. Configure

Summary View QoS policy application information of a port. Monitor

Setup Apply a QoS policy to a port. Configure Port Policy

Remove Remove a QoS policy from a port. Configure

View and refresh SNMP configuration information and statistics.

Monitor Setup

Configure SNMP. Configure

View the brief information of SNMP communities. Monitor

Community Create, modify and remove an SNMP community. Configure

View the brief information of SNMP groups. Monitor

Group Create, modify, and remove an SNMP group. Configure

View the brief information of SNMP users. Monitor

User Create, modify, and remove an SNMP user. Configure

View the status (enabled or disabled) of the SNMP trap function and target host information.

Monitor

Trap

Enable or disable the SNMP trap function; create, modify, and remove a target host.

Configure

View the brief information of SNMP views. Monitor

SNMP (supported on the MSR 20, MSR 30, and MSR 50)

View Create, modify, and remove an SNMP view. Configure

Global Config View and set global bridging information. Configure

Bridge

Config Interface View and set interface bridging information. Configure

View user group configuration. Monitor Group

Configure user groups. Configure

View user configuration. Monitor

Security UserGroup

User View users. Configure

10


WAN Synchronization

Synchronize the user group configuration to a WAN interface.

Configure

View configuration of access control. Monitor

Connection Control Configure time range-based access control. Configure

View custom application configuration. Monitor

Application Control

Customize applications. Configure

View bandwidth management configuration. Monitor Bandwidth

Configure bandwidth control. Configure

View packet filtering rules. Monitor Packet Filter

Configure packet filtering rules. Configure

Configure the MST region-related parameters and VLAN-to-MSTI mappings.

Monitor

Region Modify the MST region-related parameters and VLAN-to-MSTI mappings.

Configure

View MSTP port parameters. Monitor Port

Modify MSTP port parameters. Configure

MSTP

Global View MSTP parameters globally. Configure

RADIUS View and add, modify, and delete a RADIUS scheme.

Management

View information about login control rules. Monitor

Access Add and delete a login control rule. Configure

View information of an ARP table. Monitor

ARP Table Add, modify, and delete ARP entries. Configure

View gratuitous ARP configuration information. Monitor

ARP Management

Gratuitous ARP

Configure gratuitous ARP. Configure

11


View the number of dynamic ARP entries that an interface can learn.

Monitor

Dynamic Entry Enable or disable an interface to or from learning dynamic ARP entries, and change the number of dynamic ARP entries that an interface can learn.

Configure

Specify the interface performing ARP automatic scanning.

Monitor Scan

Start or stop ARP scanning. Configure

View all static and dynamic ARP entries. Monitor

ARP Anti-Attack

Fix Convert all dynamic ARP entries to static ones or delete all static ARP entries.

Configure

View IPsec connection configuration. Monitor

IPsec Connection Add, modify, delete, enable, or disable an IPsec connection. Configure

View configuration and status information of IPsec connections, and tunnel information of IPsec connections.

Monitor IPsec VPN

Monitoring Information Delete tunnels that are set up with configuration of an IPsec connection, and delete all ISAKMP SAs of an IPsec connection.

Configure

View the L2TP status and L2TP group configuration information.

Monitor

L2TP Configuration Configure the L2TP status, add, modify or delete an L2TP group.

Configure L2TP

Tunnel Info View L2TP tunnel information. Monitor

View GRE tunnel information. Monitor

VPN

GRE Add, modify, or delete a GRE tunnel. Configure

View PKI entity information. Monitor

Entity Add, change, and delete PKI entities. Configure

Certificate Management

Domain View PKI domain information. Monitor

12


Add, change, and delete PKI domains. Configure

View PKI certificates and details of the certificate. Monitor

Certificate Create keys, retrieve certificates, apply for certificates, and delete certificates.

Configure

View CRLs. Monitor CRL

Retrieve CRLs. Configure

Save the current configuration to the configuration file to be used at the next startup.

Configure

Save Save the current configuration as the factory default configuration.

Management

Initialize Restore all configurations on the device to the factory default configuration.

Configure

Backup Configuration Upload the current startup configuration file of the device to the TFTP server for backup.

Management

Restore Configuration

Download the configuration file saved on the TFTP server to the current configuration file of the device.

Management

View device files. Monitor

Configuration

Backup and Restore

Back up files on the device to the destination device through a universal serial bus (USB) port; transfer files from the device where the files are backed up to the local device through a USB port.

Configure

Reboot Reboot the device. Configure

View related configuration of system services. Configure

Service Management Set whether to enable different services and set related parameters.

Management

User Summary View the brief information of users. Monitor

System Management

Users

Super Password Set the supper password for switching to the management level.

Management

13


Create User Create a user. Management

Modify User Modify user account. Management

Remove User Remove a user. Management

Switch To Management Switch the user access level to the management level. Visitor

View SNMP configuration information. Monitor SNMP (supported on the MSR 900 series and

MSR20-1X series) Configure SNMP. Configure

View the current system time and its configurations. Monitor System Time System Time

Set the system time. Configure

View TR-069 configurations. Monitor TR-069

Set TR-069. Configure

Software Upgrade Upgrade software of the device.

Management

View detailed information of system logs. Monitor Loglist

Clear the log buffer. Configure

View configurations of the specified loghost. Monitor

Loghost Set the IP address of the loghost. Configure

View the number of logs that can be stored in the log buffer; set the refresh period on the log information displayed on the web interface.

Monitor

Syslog

Logset

Set the number of logs that can be stored in the log buffer. Configure

Ping Execute the ping command and view the result. Visitor

Other

Diagnostic Tools

Trace Route Execute the trace route command and view the result. Visitor

WiNet WiNet Management View and refresh the WiNet topology diagram and view the detailed device information.

Monitor

14


Manually trigger the collection of topology information, save the current WiNet topology as the baseline topology, restore the configuration to factory defaults and restart the member.

Configure

Setup Configure WiNet. Configure

View RADIUS user information. Monitor

User Management Add, modify, and delete a RADIUS user. Configure

View configuration information about the configuration wizard.

Monitor

Configuration Wizard Configure voice basic parameters through the configuration wizard.

Configure

View local number configuration information. Monitor

Local Number Create, set, and delete a local number. Configure

View call route configuration information. Monitor

Call Route Create, set, and delete a call route. Configure

View number match configuration information. Monitor

Number Match Configure number match parameters. Configure

View call number groups, and the maximum number of call connections in a set.

Monitor

Call Authority Control Configure a call number group, and the maximum number of call connections in a set.

Configure

View number substitution configuration information. Monitor

Dial Plan

Number Substitution

Configure number substitution. Configure

View connection properties, session properties, advanced settings, and call release cause code mappings.

Monitor

Voice Management

Call Connection

SIP Connection Configure connection properties, session properties, advanced settings, and call release cause code mappings.

Configure

15


View SIP server group configuration. Monitor SIP Server Group

Management Configure a SIP server group. Configure

View VE1, VT1, and BSV line configuration information, and line state.

Monitor

Digital Link Management

View and configure a VE1, VT1, and BSV line. Configure

View FXS, FXO, E&M, and ISDN configuration information and state.

Monitor

Line Management Configure an FXS, FXO, E&M, and ISDN line, and query their state.

Configure

View SIP trunk status. Monitor Service Configuration

Enable the SIP trunk function. Configure

View SIP account configuration. Monitor

Account Management Add, modify, and delete a SIP account. Configure

View call route configuration. Monitor

SIP Trunk Management

Call Route Add, modify, and delete a call route. Configure

View SIP local survival configuration. Monitor Service Configuration

Configure SIP local survival. Configure

View registered user configuration. Monitor

User Management Add, modify, and delete a registered user. Configure

View trust node configuration. Monitor

Trust Nodes Add, modify, and delete a trust node. Configure

View call-out route configuration. Monitor

Call-Out Route Add, modify, and delete a call-out route. Configure

View area prefix configuration. Monitor Area Prefix

Add and delete an area prefix. Configure

SIP Local Survival

Call Authority Control View call authority control configuration and application. Monitor

16


Add and delete a call rule set and apply the call rule set globally or to registered users.

Configure

View media resources configuration. Monitor

Media Resources Management Upload media resource files or

configure an MOH audio input port.

Configure

View access number configuration. Monitor Access Number

Management Add, modify, and delete an access number. Configure

View processing methods customization configuration. Monitor Processing Methods

Customization Configure processing methods customization configuration. Configure

View service node and global key policy configuration. Monitor

IVR Services

Advanced Settings Configure service node and global key policy configuration.

Configure

View global configuration information. Monitor Global Configuration

Perform global configurations. Configure

View batch configuration information. Monitor

Advanced Configuration

Batch Configuration Create local numbers, call routes, manage lines, and configure SIP local survival in batches.

Configure

Line States View information about all voice subscriber lines. Monitor

View and refresh active and history call statistics. Monitor

Call Statistics View and refresh active and history call statistics and clear history call statistics.

Configure

States and Statistics

SIP UA States

View information about all TCP-based call connections, TLS-based call connections, number register information, and subscription status information.

Monitor

17


View information about all TCP-based call connections, TLS-based call connections, number register information, and subscription status information, and terminate specified TCP and TLS connections.

Configure

Local Survival Service States

View and refresh registration and subscription status. Monitor

Common web interface elements Common buttons and icons

Table 2 Common buttons and icons

Button and icon Description

Validates the configuration.

Cancels the configuration, and goes to the corresponding display page or device information page.

Refreshes the current page.

Clears all statistics or items in a list.

Adds an item.

Deletes entries on a list.

Selects all the entries on a list or all ports on a device panel.

Clears all the entries on a list or all ports on a device panel.

Typically locating at the Operation column of a display page, it allows you to enter the modify page of a corresponding entry to display or modify the configurations of the entry.

Typically locating at the Operation column of a display page, it allows you to remove an entry.

Content display by pages

The web interface can display contents by pages, as shown in Figure 4. You can set the number of entries displayed per page, and view the contents on the first, previous, next, and last pages, or go to any page that you want to check.

18

Figure 4 Content display by pages

Searching function

The web interface provides you with the basic and advanced searching functions to display only the entries that match specific searching criteria.

Basic search: As shown in Figure 4, input the keyword in the text box above the list, select a search item from the drop-down list and click the Search button to display the entries that match the criteria. Figure 5 shows an example of searching for entries with VLAN ID being 2.

Figure 5 Basic search function example

Advanced search: Advanced search function: As shown in Figure 4, you can click the Advanced Search link to open the advanced search page, as shown in Figure 6. Specify the search criteria, and click Apply to display the entries that match the criteria.

19

Figure 6 Advanced search

Take the ARP table shown in Figure 4 as an example. If you want to search for the ARP entries with interface being Ethernet 0/4, and IP address range being 192.168.1.50 to 192.168.1.59, follow these steps:

1. Click the Advanced Search link, specify the search criteria on the advanced search page as shown in Figure 7, and click Apply. The ARP entries with interface being Ethernet 0/4 are displayed.

Figure 7 Advanced search function example (I)

2. Click the Advanced Search link, specify the search criteria on the advanced search page as shown in Figure 8, and click Apply. The ARP entries with interface being Ethernet 0/4 and IP address range being 192.168.1.50 to 192.168.1.59 are displayed as shown in Figure 9.

20

Figure 8 Advanced searching function example (II)

Figure 9 Advanced searching function example (III)

Sorting function

The web interface provides you with the basic sorting function to display entries in certain orders.

Basic sorting function: On a list page, you can click the blue heading item of each column to sort the entries based on the heading item you selected. After your clicking, the heading item is displayed with an arrow beside it as shown in Figure 10. The upward arrow indicates the ascending order, and the downward arrow indicates the descending order.

21

Figure 10 Basic sorting function example (based on IP address in the descending order)

Managing web-based NM through CLI

Enabling/disabling web-based NM Table 3 Enable/disable the web-based NM service

To do Use the command

Enable the web-based NM service ip http enable

Disable the web-based NM service undo ip http enable

Managing the current web user Table 4 Manage the current web user

To do Use the command

Display the current login users display web users

Log out the specified user or all users free web-users { all | user-id userid | user-name username }

22

Configuration guidelines The web-based configuration interface supports the operating systems of Windows XP, Windows

2000, Windows Server 2003 Enterprise Edition, Windows Server 2003 Standard Edition, Windows Vista, Linux and MAC OS.

The web-based configuration interface supports the browsers of Microsoft Internet Explorer 6.0 SP2 and higher, Mozilla Firefox 3.0 and higher, and Google Chrome 2.0.174.0 and higher.

The web-based configuration interface does not support the Back, Next, Refresh buttons provided by the browser. Using these buttons may result in abnormal display of web pages.

The Windows firewall limits the number of TCP connections, when you use IE to log in to the web interface, sometimes you may be unable to open the web interface. To avoid this problem, turn off the Windows firewall before login.

If the software version of the device changes, clear the cache data on the browser before logging in to the device through the web interface; otherwise, the web page content may not be displayed correctly.

You can display at most 20,000 entries that support content display by pages.

Troubleshooting web browser

Failure to access the device through the web interface Symptom

You can ping the device successfully, and log in to the device through telnet. HTTP is enabled and the operating system and browser version meet the web interface requirements. However, you cannot access the web interface of the device.

Analysis

If you use the Microsoft Internet Explorer, you can access the web interface only when the following functions are enabled: Run ActiveX controls and plug-ins, script ActiveX controls marked safe for scripting and active scripting.

If you use the Mozilla Firefox, you can access the web interface only when JavaScript is enabled. Configuring the Internet Explorer settings

1. Open the Internet Explorer, and then select Tools > Internet Options.

2. Click the Security tab, and then select a web content zone to specify its security settings, as shown in Figure 11.

23

Figure 11 Internet Explorer setting (I)

3. Click Custom Level, and a dialog box Security Settings appears.

4. As shown in Figure 12, enable these functions: Run ActiveX controls and plug-ins, script ActiveX controls marked safe for scripting and active scripting.

24

Figure 12 Internet Explorer Setting (II)

5. Click OK in the Security Settings dialog box.

Configuring Firefox Web browser settings

1. Open the Firefox web browser, and then select Tools > Options.

2. Click the Content tab, select the Enable JavaScript check box, and click OK, as shown in Figure 13.

25

Figure 13 Firefox web browser setting

26

Device information

Displaying device information You can view the following information on the Device Info menu:

Device information Broadband connection information 3G wireless card state LAN information WLAN information Services information Recent system logs (Recent five system logs are displayed) After logging in to the web interface, you will enter the Device Info page, as shown in Figure 14.

NOTE:

The Device Info page contains five parts, which correspond to the five tabs below the figure on the pageexcept the Services Information and Recent System Logs tabs. When you put your cursor on a part of thefigure, the system prompts you for the tab of the corresponding information, and you can jump to the tabby clicking this part.

27

Figure 14 Device information

28

Select the refresh mode in the Refresh Period drop-down box.

If you select a specific period, the system periodically refreshes the Device Info page; If you select Manual, you need to click Refresh to refresh the page.

Device information Table 5 Device information fields

Field Description

Device Model Device name

Device ID Device ID

Software Version Software version of the device

Firmware Version Firmware version of the device

Hardware Version Hardware version of the device

Running Time Running time after the latest boot of the device

CPU Usage Real-time CPU usage

Memory Usage Real-time memory usage

Broadband connection information Table 6 Broadband connection information fields

Field Description

Interface Interface name

Session Type Connection type of the interface

Network-Side Connection State Connection state at the network side of the interface

IP Address/Mask IP address and mask of the interface

DNS Server IP address of the DNS server

Uplink Rate (Kbits/Second) Average rate in the outgoing direction on the interface in recent 300 seconds

Downlink Rate (Kbits/Second) Average rate in the incoming direction on the interface in recent 300 seconds

Work Mode Rate and duplex mode of the interface

3G wireless card state To display the detailed information about the 3G wireless card state, click the More link in the 3G Wireless Card State area. The information includes 3G modem information, UIM card information, and 3G network information, as shown in Figure 15.

29

Figure 15 3G wireless card state

Table 7 Fields for 3G wireless card state

Field Description

3G Modem Information Connection state of the 3G network

3G Modem State

State of the 3G modem, which can be: Normal: A 3G modem is connected to the router. Absent or unrecognized modem: No 3G modem is connected to the router

or the modem cannot be recognized.

Model Model of the 3G modem

Manufacturer Manufacturer of the 3G modem

CMII ID CMII ID of the 3G modem

Serial Number Serial number of the 3G modem

Hardware Version Hardware version of the 3G modem

Firmware Version Firmware version of the 3G modem

PRL Version Preferred roaming list (PRL) version of the 3G modem

30

Field Description

UIM Card State

State of the UIM card, which can be: Absent Being initialized Fault Destructed PIN code protection is disabled. PIN code protection is enabled. Enter the PIN code for authentication. PIN code protection is enabled, and the PIN code has passed the

authentication. The PIN code has been blocked. Enter the PUK code to unblock it.

IMSI International Mobile Subscriber Identity (IMSI) of the UIM card

Voltage Power voltage of the UIM card

Mobile Network 3G network where the UIM card resides

Network Type

State of the 3G network where the UIM card resides, which can be: No Service CDMA HDR CDMA/HDR HYBRID Unknown

RSSI Received signal strength indication (RSSI) of the 3G network

LAN information Table 8 Fields for LAN information

Field Description

Interface Interface name

Link State Link state of the interface

Work Mode Rate and duplex mode of the interface

WLAN information Table 9 Fields for WLAN information

Field Description

SSID (WLAN Name) Name of the WLAN service

Service Status Whether the service is enabled or not

Number of PCs Connected Number of PCs connected to the WLAN service

31

Service information Table 10 Fields for service information

Field Description

Service Name of the service

Status Status of the service

Recent system logs Table 11 Recent system log fields

Field Description

Time Time when the system logs are generated

Level Level of the system logs

Description Contents of the system logs

Integrated service management For devices with a card installed, if the card provides the web interface access function, after specifying the URL address of the card on the integrated service management page, you can log in from the integrated service management page to the web interface of the card to manage the card.

After logging in to the web interface of the device, you enter the Device Info page by default. Click the Integrated Service Management tab to enter the page displaying card information of the device, as shown in Figure 16.

Figure 16 Integrated service management

To change the URL address of the card, click of the target card, as shown in Figure 17. Type the URL address in the text box and click to apply the configuration or click to cancel the modification.

Properly set the URL address of the card, and then connect the card to the LAN to which the administrator belongs. On the page as shown in Figure 16, click the Manage button, a page linked to the specified URL address pops up, and then you can log in to the web interface of this card to manage it.

Figure 17 Change card URL address

32

Basic services configuration

You can do the following to configure basic services on the web interface:

Setting WAN interface parameters Setting WLAN interface parameters Setting LAN interface parameters

Basic service overview This document guides you through quick configuration of basic services of routers, including configuring WAN interface parameters, WLAN interface parameters, and LAN interface parameters.

NOTE:

For more information about WAN interfaces, the chapter WAN interface configuration. For more information about WLAN interfaces, see the chapter Wireless configuration. For more information about LAN interfaces, see the chapter VLAN interface configuration.

Configuring basic services

Starting the basic configuration wizard From the navigation tree, select Wizard > Basic Configuration Wizard to enter the basic configuration wizard page, as shown in Figure 18.

Figure 18 Basic configuration wizard

33

Setting WAN interface parameters On the basic configuration wizard page, click Next to enter the page for configuring WAN interface parameters.

The page for configuring WAN interface parameters varies with the interface type. You are allowed to set Ethernet, SA, ADSL/G.SHDSL, CE1/PR1, and CT1/PR1 interface parameters. To do so, see the following.

Ethernet interface

Figure 19 Set Ethernet interface parameters

Table 12 Configuration items of Ethernet interface parameters (in auto mode)

Item Description

WAN Interface Select the Ethernet interface to be configured.

Connect Mode: Auto Select the Auto connect mode to automatically obtain an IP address.

MAC Address

Specify the MAC address of the Ethernet interface in Either of the two ways: Use the MAC address of the device: Use the default MAC address of the

Ethernet interface, which is displayed in the brackets. Use the customized MAC address: Assign a MAC address in the field to the

Ethernet interface.

Table 13 Configuration items of Ethernet interface parameters (in manual mode)

Item Description


Connect Mode: Manual Select the Manual connect mode to configure an IP address.

TCP-MSS Set the maximum TCP segment length of an interface

MTU Set the MTU of an interface

34

Item Description

IP Address Specify the IP address of the Ethernet interface.

Subnet Mask Select a subnet mask for the Ethernet interface.

Gateway Address Configure the next hop of a static route.

DNS1

DNS2

Specify a DNS server IP address for the interface. Note that DNS server 1 is used before DNS server 2.

To configure the global DNS server on the page you enter, select Advanced > DNS Setup > DNS Configuration. The global DNS server is prior to the DNS servers of the interfaces. In other words, the DNS query is sent to the global DNS server first. If the query fails, the DNS query is sent to the DNS server of the interface until the query succeeds.

MAC Address

Specify the MAC address of the Ethernet interface in either of the two ways: Use the MAC address of the device: Use the default MAC address of the


Ethernet interface.

Table 14 Configuration items of Ethernet interface parameters (in PPPoE mode)

Item Description


Connect Mode: PPPoE

Select the PPPoE connect mode.

In PPPoE mode, a user name and password should be provided by the local Internet Service Provider (ISP).When the device connects to the ISP server, the ISP server initiates PPPoE authentication. When the device passes the authentication, the ISP server will send the IP address, subnet mask, gateway IP address, and DNS server IP address to the device.

User Name Specify the user name for identity authentication.

Password Specify the password for identity authentication.



Online for all time

Online according to the Idle Timeout value

Idle timeout

Select an idle timeout interval, and you have two choices: Online for all time: The device is always online. Online according to the idle timeout value: The device disconnects from the

server if no data exchange occurs between it and the server within the specified time. Then, it automatically establishes the connection upon receiving a request for accessing the Internet from the LAN.

When Online according to the Idle Timeout value is enabled, you need to specify an idle timeout value.

MAC Address

Specify the MAC address of the Ethernet interface in either of the two ways: Use the MAC address of the device: Use the default MAC address of the


Ethernet interface.

35

SA interface

Figure 20 Set SA parameters

Table 15 Configuration items of SA interface parameters

Item Description

WAN Interface Select the SA interface to be configured.





IP Address Specify the IP address of the SA interface.

Subnet Mask Select a subnet mask for the SA interface.

ADSL/G.SHDSL interface

Figure 21 Set ADSL/G.SHDSL parameters

36

Table 16 Configuration items of ADSL/G.SHDSL interface parameters (in IPoA mode)

Item Description

WAN Interface Select the ADSL/G.SHDSL interface to be configured.

Connect Mode: IPoA Select the IPoA connect mode.

PVC Specify the VPI/VCI value for PVC.



IP Address Specify the IP address of the ADSL/G.SHDSL interface.

Subnet Mask Select a subnet mask for the ADSL/G.SHDSL interface.

Map IP Specify the peer destination IP address of the mapped PVC.

Table 17 Configuration items of ADSL/G.SHDSL interface parameters (in IPoEoA mode)

Item Description


Connect Mode: IPoEoA Select the IPoEoA connect mode.




IP Address Specify the IP address of the ADSL/G.SHDSL interface.

Subnet Mask Select a subnet mask for the ADSL/G.SHDSL interface.

Table 18 Configuration items of ADSL/G.SHDSL interface parameters (in PPPoA mode)

Item Description


Connect Mode: PPPoA Select the PPPoA connect mode.




TCP-MSS Set the maximum TCP segment length of an interface.

MTU Set the MTU of an interface.

Table 19 Configuration items of ADSL/G.SHDSL interface parameters (in PPPoEoA mode)

Item Description


Connect Mode: PPPoEoA Select the PPPoEoA connect mode.



37

Item Description




Online for all time

Online according to the Idle Timeout value

Idle timeout

Select an idle timeout value from either of the following: Online for all time: The device is always online. Online according to the idle timeout value: The device disconnects from the

server if no data exchange occurs between it and the server within the specified time. After that, it automatically establishes the connection upon receiving a request for accessing the Internet from the LAN.

When Online according to the Idle Timeout value is enabled, you need to specify an idle timeout value.

CE1/PR1 interface

The CE1/PR1 interface works in two modes: E1 mode and CE1 mode.

1. In E1 mode

Figure 22 Set CE1/PR1 interface parameters (in E1 mode)

Table 20 Configuration items of CE1/PR1 interface parameters (in E1 mode)

Item Description

WAN Interface Select the CE1/PR1 interface to be configured.

Work Mode: E1 Select the E1 work mode.





2. In CE1 mode

38

Figure 23 Set CE1/PR1 interface parameters (in CE1 mode)

Table 21 Configuration items of CE1/PR1 interface parameters (in CE1 mode)

Item Description

WAN Interface Select the CE1/PR1 interface to be configured.

Work Mode: CE1 Select the CE1 work mode.

Operation Select one of the following two operation actions: Create: Binds timeslots. Remove: Unbinds timeslots.

Serial Select a number for the created Serial interface.

Timeslot-List Specify the timeslot(s) to be bound or unbound.





39

CT1/PR1 interface

Figure 24 Set CT1/PR1 parameters

Table 22 Configuration items of CT1/PR1 interface parameters

Item Description

WAN Interface Select the CT1/PR1 interface to be configured.

Work Mode: E1 Select the CT1 work mode.

Operation Select one of the following two operation actions: Create: Binds timeslots. Remove: Unbind timeslots.

Serial Select the number for the created serial interface.

Timeslot-List Specify the timeslot (s) to be bound or unbound.





Setting WLAN interface parameters After finishing the previous configuration, click Next to enter the page for configuring WLAN interface parameters, as shown in Figure 25.

40

Figure 25 Set WLAN parameters

Table 23 Configuration items of WLAN parameters

Item Description

WLAN Setting Select whether to make WLAN settings.

Network Name (SSID) Specify a wireless network name.

Network Hide Select whether to hide the network name.

Radio Unit Select a radio unit supported by the AP, which can be 1 or 2.

Which value is supported varies with device models.

Enable Encrypt Select whether to enable data encryption.

With data encryption enabled, data transmission between wireless client and wireless device can be secured.

Encrypt Act Select an encryption mode for the wireless network, WEP40 or WEP104.

Key Mode

Select a key format. When you select WEP40, the key can be a 5-character string or 10-digit hexadecimal

number. When you select WEP104, the key can be a 13-character string or a 26-digit

hexadecimal number.

Key Seed

Key 1

Key 2

You can either use a key seed to generate keys or type keys manually. Then, you can choose one of the configured keys. When you select WEP40 and ASCII, the generated or input key is a 5-character

string. When you select WEP40 and HEX, the generated or input key is a 10-digit

41

Item Description

Key 3

Key 4

hexadecimal number. When you select WEP104 and ASCII, the generated or input key is a 13-character

string. When you select WEP104 and HEX, the generated or input key is a 26-digit

hexadecimal number.

Setting LAN interface parameters After finishing the previous configuration, click Next to enter the page for configuring LAN interface parameters, as shown in Figure 26.

Figure 26 Set LAN parameters

Table 24 Configuration items of LAN interface parameters

Item Description

VLAN Interface

Displays the ID of the VLAN interface to be configured.

IMPORTANT:

By default, the VLAN interface on the device that has the smallest number is displayed. If no VLAN interface is available on the device, the system automatically creates an interface numbered 1 and displays it.

IP Address

Subnet Mask Specify the IP address and a subnet mask for the VLAN interface.

DHCP Server Select whether to enable DHCP server.

If you enable DHCP server, the configuration items of the DHCP server will be displayed.

Start IP Address Specify the IP address range for dynamic allocation in an extended address pool.

42

Item Description

End IP Address

IMPORTANT:

If the extended address pool is configured on an interface, when a DHCP client's request arrives at the interface, the server assigns an IP address from this extended address pool only. Thus, the client cannot obtain an IP address if no IP address is available in the extended address pool.

Gateway IP Address

Specify a gateway IP address in the DHCP address pool for DHCP clients.

When accessing a server or host that is not in its network segment, a DHCP client needs the gateway to forward data for it. When you specify a gateway IP address in the address pool, the DHCP server sends an IP address as well as the gateway IP address to a requesting client.

DNS Server 1

DNS Server 2

Specify a DNS server IP address in the DHCP address pool for DHCP clients. Note that DNS server 1 is used before DNS server 2.

To allow DHCP clients to access the Internet through domain names, the DHCP server needs to send an IP address as well as a DNS server IP address to clients.

Validating the basic services configuration After finishing basic services configuration, click Next to enter the page shown in Figure 27 to validate your configuration.

Figure 27 Check the basic service configuration

This page shows the configurations that you have made through the previous steps. Check the configurations, and click Finish to validate them. To make any modification, click Back to go to previous pages and edit the settings.

43

The page also provides an option Save Current Configuration for you to save the configurations to the configuration file (both the .cfg file and the .xml file) to be used at the next startup of the device. If the option is selected, the configurations you make survive a device reboot.

44

WAN interface configuration

The WAN interfaces that you can configure on the Web interface include Ethernet interfaces, SA interfaces, ADSL/G.SHDSL interfaces, CE1/PRI interfaces, and CT1/PRI interfaces.

Configuring an Ethernet interface

Overview An Ethernet interface supports the following connection modes:

Auto: The interface acts as a DHCP client to obtain an IP address through DHCP. Manual: The IP address and subnet mask are configured manually for the interface. PPPoE: The interface acts as a PPPoE (Point-to-Point Protocol) client. PPPoE provides access to the

Internet for hosts in an Ethernet through remote access devices. It also implements access control and accounting on a per-host basis. Because it is cost-effective, PPPoE gains popularity in various applications, such as residential networks.`

Configuring an Ethernet interface Select Interface Setup > WAN Interface Setup from the navigation tree to enter the WAN interface configuration page, which displays the name, connection type, IP address, mask, status, and operation icon ( ) of each interface, as shown in Figure 28.

Figure 28 WAN Interface Setup

Click the icon corresponding to an Ethernet interface to enter the page for configuring the Ethernet interface, as shown in Figure 29.

45

Figure 29 Configure an Ethernet interface

Table 25 Ethernet interface configuration items (auto mode)

Item Description

WAN Interface Displays the name of the Ethernet interface to be configured.

Interface Status

Display and set the interface status: If this item shows as Connected, indicating that the current interface is up and

connected, you can click the Disable button to shut down the interface. If this item shows as Not connected, indicating that the current interface is up but

not connected, you can click the Disable button to shut down the interface. If this item shows as Administratively Down, indicating that the current interface

is shut down by a network administrator, you can click the Enable button to bring up the interface.

Connect Mode: Auto Select Auto as the connection mode. The interface will obtain an IP address automatically.

MAC Address

Set the MAC address of the Ethernet interface using one of these available options: Use the MAC address of the device: Use the default MAC address of the Ethernet

interface, which is displayed in the following brackets. Use the customized MAC address: Manually set the MAC address of the Ethernet

interface. When this option is selected, you need to type a MAC address in the text box below.

46

Table 26 Ethernet interface configuration items (manual mode)

Item Description

WAN Interface Displays the name of the Ethernet interface to be configured.

Interface Status

Display and set the interface status: If this item shows as Connected, indicating that the current interface is up and

connected, you can click the Disable button to shut down the interface. If this item shows as Not connected, indicating that the current interface is up but

not connected, you can click the Disable button to shut down the interface. If this item shows as Administratively Down, indicating that the current interface

is shut down by a network administrator, you can click the Enable button to bring up the interface.

Connect Mode: Manual Select Manual as the connection mode. In this mode, you must assign an IP address and subnet mask for the interface manually.

TCP-MSS Configure the TCP maximum segment size (MSS) on the interface.

MTU Configure the maximum transmission unit (MTU) on the interface.

IP Address Configure an IP address for the interface.

IP Mask Configure the subnet mask for t