Post on 24-Apr-2015
transcript
ZXV10 H11XHome Gateway User’s Manual
Version 1.0
ZTE CORPORATION ZTE Plaza, Keji Road South, Hi-Tech Industrial Park, Nanshan District, Shenzhen, P. R. China 518057 Tel: (86) 755 26771900 800-9830-9830 Fax: (86) 755 26772236 URL: http://support.zte.com.cn E-mail: doc@zte.com.cn
LEGAL INFORMATION Copyright © 2005 ZTE CORPORATION. The contents of this document are protected by copyright laws and international treaties. Any reproduction or distribution of this document or any portion of this document, in any form by any means, without the prior written consent of ZTE CORPORATION is prohibited. Additionally, the contents of this document are protected by contractual confidentiality obligations. All company, brand and product names are trade or service marks, or registered trade or service marks, of ZTE CORPORATION or of their respective owners. This document is provided “as is”, and all express, implied, or statutory warranties, representations or conditions are disclaimed, including without limitation any implied warranty of merchantability, fitness for a particular purpose, title or non-infringement. ZTE CORPORATION and its licensors shall not be liable for damages resulting from the use of or reliance on the information contained herein. ZTE CORPORATION or its licensors may have current or pending intellectual property rights or applications covering the subject matter of this document. Except as expressly provided in any written license between ZTE CORPORATION and its licensee, the user of this document shall not acquire any license to the subject matter herein. The contents of this document and all policies of ZTE CORPORATION, including without limitation policies related to support or training are subject to change without notice.
Revision History
Date Revision No. Serial No. Description
2006/07/03 R1.0 Sjzl20060704
ZTE CORPORATION Values Your Comments & Suggestions!
Your opinion is of great value and will help us improve the quality of our product documentation and offer better services to our customers.
Please fill out the following questionnaire and fax to:
(86) 755-26772236;
Or mail to:
Publications R&D Department, ZTE CORPORATION, ZTE Plaza, A Wing, Keji Road South, Hi-Tech Industrial Park, Shenzhen, P. R. China 518057.
Thank you for your cooperation!
4 Confidential and Proprietary Information of ZTE CORPORATION
Your Comments & Suggestions Document Name ZXV10 H11X (V1.0) Home Gateway User’s Manual
Product Version V1.0 Document
Revision Number R1.0
Equipment Installation Date
Presentation:
(Introductions, Procedures, Illustrations, Completeness, Level of Detail, Organization, Appearance)
Good Fair Average Poor Bad N/A
Accessibility:
(Contents, Index, Headings, Numbering, Glossary)
Good Fair Average Poor Bad N/A
Your evaluation of this document
Intelligibility:
(Language, Vocabulary, Readability & Clarity, Technical Accuracy, Content)
Good Fair Average Poor Bad N/A
Your suggestions for improvement of this document
Please check the suggestions which you feel can improve this documentation:
Improve the overview/introduction Make it more concise/brief
Improve the Contents Add more step-by-step procedures
Improve the organization Add more troubleshooting information
Include more figures Make it less technical
Add more examples Add more/better quick reference aids
Add more detail Improve the index
Other suggestions
____________________________________________________________________
____________________________________________________________________
____________________________________________________________________
____________________________________________________________________
____________________________________________________________________
# Please feel free to write any comments on an attached sheet.
If you wish to be contacted regarding your comments, please complete the following:
Name Company
Postcode Address
Telephone E-mail
Contents
About this User’s Manual...................................................... xi
Typographical Conventions ...............................................................xi
Mouse Operation Conventions.......................................................... xii
Safety Signs.................................................................................. xiii
How to Get in Touch....................................................................... xiv
Customer Support ......................................................................................xiv
Documentation Support ..............................................................................xiv
Chapter 1..........................................................................15
Product Profile .....................................................................15
Product Overview............................................................................15
Packing List ....................................................................................15
Product Features.............................................................................16
Product Appearance ........................................................................17
System Requirements .....................................................................20
Chapter 2..........................................................................21
System Connections ............................................................21
System Application Environment ......................................................21
Hardware Connection......................................................................21
Connecting LAN Network Interface ...............................................21
Connecting WAN (Ethernet) Network Interface ..............................23
6 Confidential and Proprietary Information of ZTE CORPORATION
Connecting Telephone .................................................................23
Connection Power Adapter ...........................................................23
Chapter 3.......................................................................... 25
Preparations for Configuration ........................................... 25
Installing TCP/IP .............................................................................25
Configuring TCP/IP..........................................................................27
Checking Configuration....................................................................29
Login .............................................................................................30
General Functions ...........................................................................31
Chapter 4.......................................................................... 35
Basic Configuration ............................................................. 35
LAN Interface Configuration .............................................................35
LanGroup Configuration...............................................................................36
DHCP Client List ..........................................................................................38
DHCP Binding Configuration.........................................................................39
WLAN Interface Configuration......................................................................40
Wireless Network Configuration........................................................40
Basic Configuration of Wireless Network .......................................................40
Wireless Network Sub-interface Configuration...............................................41
WAN Connection Configuration.........................................................47
Configuring Bridge Connection.....................................................................49
Configuring PPPoE Connection......................................................................51
Configuring Static Connection ......................................................................53
Configuring DHCP Connection......................................................................55
Confidential and Proprietary Information of ZTE CORPORATION 7
Chapter 5..........................................................................57
Advanced Configuration ......................................................57
UPnP Configuration .........................................................................57
Static Route and Dynamic Route Configuration..................................58
Static Route................................................................................................ 58
RIP Dynamic Route..................................................................................... 60
SNTP Client Configuration................................................................60
DDNS Configuration ........................................................................61
DNS Server Configuration................................................................64
IGMP Configuration .........................................................................64
Setting IGMP Proxy..................................................................................... 65
Setting IGMP Snooping ............................................................................... 65
Bluetooth Configuration...................................................................66
IPQoS Configuration........................................................................67
Ingress Rate Limit Configuration.......................................................70
SNMP Configuration ........................................................................71
TR069 Configuration .......................................................................73
Chapter 6..........................................................................75
Security Configuration.........................................................75
Firewall By-level Control and SPI ......................................................75
Port Forwarding ..............................................................................77
Port Trigger ....................................................................................78
Remote Access Control....................................................................81
DMZ ..............................................................................................83
Filter..............................................................................................84
Setting Bridge Filter .................................................................................... 84
8 Confidential and Proprietary Information of ZTE CORPORATION
Setting IP Filter ...........................................................................................85
Setting URL and WEB Filter..........................................................................87
IPSec Configuration.........................................................................92
Setting RSA Key..........................................................................................92
Adding New Connection...............................................................................93
Modifying/Deleting Connection.....................................................................99
Chapter 7........................................................................101
VOIP Configuration ...........................................................101
General Configuration....................................................................101
Voice Configuration .......................................................................103
SIP Configuration..........................................................................105
Protocol Configuration ...............................................................................105
Media Configuration...................................................................................107
MGCP Configuration ......................................................................109
Protocol Configuration ...............................................................................109
Authentication Configuration......................................................................111
Route Select Configuration.............................................................112
Service Configuration ....................................................................114
Service Configuration Display.........................................................115
Bluetooth MAC Address Configuration.............................................116
Chapter 8........................................................................117
Other Operation Tools.......................................................117
System Commands.......................................................................117
Network Continuity Test Tool: PING................................................118
User Management.........................................................................119
Update Gateway...........................................................................120
Confidential and Proprietary Information of ZTE CORPORATION 9
System Log..................................................................................120
System Log Parameter Configuration..........................................................120
Showing System Logs................................................................................121
Chapter 9........................................................................123
Device Status Check ..........................................................123
PPPoE Status Information ..............................................................123
System Statistics ..........................................................................124
IPQoS Statistics ............................................................................124
Network Statistics .........................................................................125
Ethernet Interface Statistics .......................................................................125
WLAN Interface Statistics ...........................................................................126
Bluetooth Interface Statistics......................................................................126
USB Interface Statistics..............................................................................127
Chapter 10..................................................................129
Voice Typical Configurations.............................................129
SIP Typical Configuration...............................................................129
Step1 Select Protocol Type.........................................................................129
Step2 SIP Protocol Configuration ................................................................130
Step 3 Check Port Status............................................................................131
Step 4 Save Configuration..........................................................................131
MGCP Typical Configuration ...........................................................132
Step1 Select Protocol Type.........................................................................132
Step 2 Configure MGCP Protocol .................................................................133
Step 3 Check Port Status............................................................................134
Step 4 Save Configuration..........................................................................134
10 Confidential and Proprietary Information of ZTE CORPORATION
Appendix A.....................................................................135
Solutions to Common Problems........................................135
Appendix B.....................................................................139
Terms.................................................................................139
Tables.................................................................................147
Confidential and Proprietary Information of ZTE CORPORATION xi
About this User’s Manual
Typographical Conventions ZTE documents employ the following typographical conventions.
TAB L E 1 TY P O G R AP H I C AL C O N V E N T I O N S
Typeface Meaning
Italics References to other guides and documents; parameter values
“Quotes” Links on screens
Bold Menus, menu options, input fields, radio button names, check boxes, drop-down lists, dialog box names, window names
CAPS Keys on the keyboard and buttons on screens and company name
Constant width
Text that you type, program code, files and directory names, and function names
[ ] Optional parameters
{ } Mandatory parameters
| Select one of the parameters that are delimited by it
Note: Provides additional information about a certain topic
Checkpoint: Indicates that a particular step needs to be checked before proceeding further
Tip: Indicates a suggestion or hint to make things easier or more productive for the reader
ZXV10 H11X (V1.0)Home Gateway User’s Manual
xii Confidential and Proprietary Information of ZTE CORPORATION
Mouse Operation Conventions TAB L E 2 M O U S E OP E R AT I O N C O N V E N T I O N S
Typeface Meaning
Click Refers to clicking the primary mouse button (usually the left mouse button) once.
Double-click Refers to quickly clicking the primary mouse button (usually the left mouse button) twice.
Right-click Refers to clicking the secondary mouse button (usually the right mouse button) once.
Drag Refers to pressing and holding a mouse button and moving the mouse.
Confidential and Proprietary Information of ZTE CORPORATION xiii
Safety Signs TAB L E 3 S AF E T Y S I G N S
Safety Signs Meaning
Danger: Indicates an imminently hazardous situation, which if not avoided, will result in death or serious injury. This signal word should be limited to only extreme situations.
Warning: Indicates a potentially hazardous situation, which if not avoided, could result in death or serious injury.
Caution: Indicates a potentially hazardous situation, which if not avoided, could result in minor or moderate injury. It may also be used to alert against unsafe practices.
Erosion: Beware of erosion.
Electric shock: There is a risk of electric shock.
Electrostatic: The device may be sensitive to static electricity.
Microwave: Beware of strong electromagnetic field.
Laser: Beware of strong laser beam.
No flammables: No flammables can be stored.
No touching: Do not touch.
No smoking: Smoking is forbidden.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
xiv Confidential and Proprietary Information of ZTE CORPORATION
How to Get in Touch The following sections provide information on how to obtain support for the documentation and the software.
Customer Support If you have problems, questions, comments, or suggestions regarding your product, contact us by e-mail at support@zte.com.cn. You can also call our customer support center at (86) 755 26771900 and (86) 800-9830-9830.
Documentation Support ZTE welcomes your comments and suggestions on the quality and usefulness of this document. For further questions, comments, or suggestions on the documentation, you can contact us by e-mail at doc@zte.com.cn; or you can fax your comments and suggestions to (86) 755 26772236. You can also explore our website at http://support.zte.com.cn, which contains various interesting subjects like documentation, knowledge base, forum and service request.
Confidential and Proprietary Information of ZTE CORPORATION 15
C h a p t e r 1
Product Profile
Product Overview Thank you for choosing the ZXV10 H11X home gateway product of ZTE CORPORATION. The ZXV10 H11X home gateway is a modular access gateway in the center of a home network. It links multiple devices through Internet connections and provides users with safe communication, entertainment and storage functions.
Note: H11X are series products of the Home Gateway that include H110 and H111. This guide provides the description of the H110 according to it configurations. The difference between H111 and H110 is that it doesn’t provide correlation function of Bluetooth and Cardbus, which should be identified in the installation and operation.
Packing List The package of the H11X home gateway products should contain the following components:
H110/H111 host
AC-DC power adapter
RJ-45 10/100BaseT Ethernet cable
ZXV10 H11X (V1.0)Home Gateway User’s Manual
16 Confidential and Proprietary Information of ZTE CORPORATION
RJ-11 telephone cable
USB connection cable
Manual and Toolkit CD
Home Gateway Installation Guide
Please contact your dealer if any of the above components is wrong, missing or damaged, and properly keep the package and existing components of the product for replacement requirements.
Product Features 1. Interface features
i. WAN interface
Fast Ethernet interfaces: 1, RJ-45, 10/100Mbps, compliant with standards IEEE802.3 and IEEE802.3u
FXO interface: 1 RJ-11 interface for the access to the PSTN network. Users can receive calls coming from the FXO interface and make calls via the interface. Telephone sets connected to the PHONE interface can access the PSTN network directly when the power is down
ii. LAN interfaces
Fast Ethernet interfaces: 4, RJ-45, 10/100Mbps, compliant with standards IEEE802.3 and IEEE802.3u
WLAN interface: Compliant with IEEE 802.11g/b, with built-in antenna
Bluetooth interface: Support Core V1.2, with built-in antenna
FXS interface: 2 RJ-11 interfaces for general telephone sets. Users can receive calls coming from the VOIP and FXO interfaces and make calls via the interfaces
USB interface: 1 Master (V2.0) & 1 Slave (V1.1)
Expansion interface: One CardBus interface, supporting 16-bit PCMCIA and 32-bit CARDBUS card
Chapter 1 - Product Profile
Confidential and Proprietary Information of ZTE CORPORATION 17
2. Technical features
The product implements two functions: data access and IP voice.
The data access function is used to exchange and forward data at layers 2 and 3.
The IP voice function is implemented by the related network devices based on the specific signaling protocol adopted.
In addition to providing the above functions, the product gives much consideration to security, QoS and network management, such as multi-level authentication based on devices, users and services, encryption of data channels, implementation of QoS requirements matching the local devices and network according to services with different requirements, network management based on multiple management modes.
Product Appearance Front panel
The front panel contains five indicators, whose meanings are described in the following table.
Indicator Status Description
Fault indicator
Red indicator always on Power-on self-test failure
Green indicator always on The device is powered on and the version is being loaded/upgraded
RUN indicator Off Power off
ZXV10 H11X (V1.0)Home Gateway User’s Manual
18 Confidential and Proprietary Information of ZTE CORPORATION
Indicator Status Description
Green flashing The equipment is in normal operation.
Green indicator always on Physics link connection are normal
Off The device is powered off/the network cable is unconnected.
WAN indicator Green indicator flashing Flashing according to the network traffic
Green indicator always on Working (switched on with the WLAN button)
Off Not working (switched off with the WLAN button)
WLAN indicator
Green flashing Flashing according to the network traffic
Green indicator always on Working (switched on with the Bluetooth button)
Bluetooth indicator
Off Not working (switched off with the Bluetooth button)
Back panel
The back panel provides two RJ-45 LAN network interfaces, one RJ-45 WAN network interfaces, two RJ-11(FXS)telephone interfaces, one RJ-11(FXO) interfaces, one RST reset button, one WLAN button, Bluetooth button, one power socket and four LAN indicators.
Meanings of the LAN indicators on the back panel are defined in the table below:
Chapter 1 - Product Profile
Confidential and Proprietary Information of ZTE CORPORATION 19
Indicator Status Description
Green indicator always on The physical link connection is normal
Off The device is powered off/the network cable is not connected
LAN 1 2 3 4
Green flashing Flashing according to the network traffic
The following table describes the buttons on the back panel in details.
Button Function Description
WLAN button Press this button for more than 1 s to start or close
Wi-Fi.
Bluetooth button
Press this button for more than 1 s to start or close Bluetooth.
RST Resetting button
Holding on the key for more than five seconds allows you to reset the current configuration to the factory default settings, and the system will then restart automatically (all the four indicators of the LAN port will be lit after restart).
Side panel
The side panel provides two RJ-45 LAN network interfaces, one USB Slave interface, USB Host interface and one CardBus interface.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
20 Confidential and Proprietary Information of ZTE CORPORATION
System Requirements Support of ISP is required. You should be able to get the service
from an ISP via WAN access.
If necessary, an Ethernet hub and some Ethernet cables can be added to construct a small/medium-sized Intranet.
One PC equipped with the 10 Mbps, 100 Mbps or 10/100 Mbps Ethernet adapter
For wireless access, PC need to configure or have a built-in 802.11g/b wireless network adapter.
Each PC to access the network should operate in at least one operating system out of Windows 98/ME/2000/NT/XP or Linux, be correctly equipped with the network adapter driver and TCP/IP protocol, and have correct network settings.
This product is set to use the fixed IP address (Static IP) or the IP address allocated in PPPoE/DCHP dial-up. You also need to set the gateway server address and the DNS server address provided by your ISP.
One PC of the LAN should be equipped with the WEB explorer (Microsoft Internet Explorer 6.0 or above, or Netscape Communicator 4.0 or above should be installed in).
Confidential and Proprietary Information of ZTE CORPORATION 21
C h a p t e r 2
System Connections
System Application Environment The main application scenario of the ZXV10 H11X home gateway is shown below:
ZXV10 H11XWAN
Hardware Connection Connecting LAN Network Interface Connect the LAN network interface of the H110 to the network adapter of the PC or another network device through a crossover or
ZXV10 H11X (V1.0)Home Gateway User’s Manual
22 Confidential and Proprietary Information of ZTE CORPORATION
straight-through Ethernet cable. You can also connect the H110 or the PC through the WLAN radio frequency signal line or USB cable.
Connect the local network via an Ethernet cable.
The four LAN interfaces of the H110 can auto-negotiate the connection speed of the 10 Mbps/100 Mbps Ethernet and the half-duplex/full-duplex transmission mode.
Use a cross-over or straight-through Ethernet cable to connect any LAN interface of the H110 to your PC.
You can also connect an LAN interface of the H110 to the Ethernet hub or the Ethernet switch, and then connect your PC or another network device to the hub or the Ethernet switch.
Connect the local network through WLAN.
Install a wireless network adapter on your PC and then connect the local network through the IEEE 802.11g/b-based WLAN. Try to place the H110 in the center of the wireless center to achieve the optimal coverage. Make sure that you have placed the H110 in the idealist location in the whole office or house.
When connecting the local network via WLAN, make sure that the WLAN button on the rear panel of the H110 is switched on.
Connect your local network through USB cables.
Connect your PC and the USB Slave interface of the H110 through the USB connection line and install the driver of the USB network adapter on the PC. In this way, you can access the local network through USB just as the way you use a wired Ethernet.
Warning: Be sure not to insert the telephone line into any RJ-45 network interface. Otherwise, the H110 will be damaged. Use Ethernet cables with RJ-45 connectors in compliance with the CE standard.
Chapter 2 - System Connections
Confidential and Proprietary Information of ZTE CORPORATION 23
Connecting WAN (Ethernet) Network Interface Insert an Ethernet twist-pair cable with RJ-45 connector into the Ethernet WAN interface of the H110, another end connect to the carrier network.
Connecting Telephone Connect a telephone to the telephone interface of the H110 through the twisted pair with an RJ-11 connector.
Connection Power Adapter Use the power adapter to connect the power supply to the H110 and ensure that the running indicator on the front panel of the H110 is on.
Warning: Please use the power adapter provided by ZTE. Using of the wrong power adapter may cause damages to the device.
Confidential and Proprietary Information of ZTE CORPORATION 25
C h a p t e r 3
Preparations for Configuration
Normally, your ISP has already configured the H110, so you can directly connect and use it. However, you may need to configure it in some special cases. Now, you need to take the following configuration steps:
Use one crossover or straight-through Ethernet cable to connect a PC directly to the Ethernet port of the H110.
Confirm that the TCP/IP settings of the PC are correct.
Disable any running firewall or security software.
Disable the proxy server setting of the explorer.
Get some data from your service provider. You can consult your service provider for details.
Installing TCP/IP If your PC has not yet been installed with TCP/IP, just install it in the following steps.
Let us take the Ethernet interface under Local Connection in the Windows 2000 system for an example.
Click Start, select Settings, and then click Network and Dial-up Connections.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
26 Confidential and Proprietary Information of ZTE CORPORATION
Double click the Local Connections icon and then click the Properties button in the Local Area Connection Properties window.
Click the Install button and then double click the Protocol icon.
Select Internet protocol (TCP/IP) and then click OK to finish the protocol installation.
Chapter 3 - Preparations for Configuration
Confidential and Proprietary Information of ZTE CORPORATION 27
Configuring TCP/IP For access to the Internet through the H110, you must configure the subnet of the PC in the LAN to be the same as that of the H110. The default network setting for H110: IP address: 192.168.1.1; subnet mask: 255.255.255.0; default gateway: 192.168.1.1.
If your PC is not configured with TCP/IP previously, use “Use the following IP address” option to configure it. Follow the steps below:
Double click the Local Connections icon, and then select Internet protocol (TCP/IP) from the Local Area Connection Properties window.
Then, click the Properties button.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
28 Confidential and Proprietary Information of ZTE CORPORATION
In the Internet Protocol (TCP/IP) Properties dialog box, click the Use the following IP address check box, specify the local IP address in the same network segment with the LAN interface address of the H110, that is, 192.168.1.x (x is in the range of 2~254). For example, IP address is 192.168.1.2, subnet mask is 255.255.255.0, and the default gateway setting is 192.168.1.1.
Click the OK button to save the setting.
Note: The settings are subject to your network requirements. Be sure to perform the above configurations for the first access to the WEB configuration page of the H110.
Chapter 3 - Preparations for Configuration
Confidential and Proprietary Information of ZTE CORPORATION 29
Checking Configuration After the above preparations, switch on the H110. You will see that the power indicator is on. At the same time, the H110 executes the device start-up process and detects all the connected devices. From the indicators, you can see the devices of which network interfaces are successfully connected with the H110. The indicator corresponding to the network interface with successful device connection will be always on.
In addition, you can use the Ping command to check the network connection between the PC and the H110 by taking the following steps:
Click the Start button, and select Run.
Key in cmd in the pop-up Run dialog box and then press Enter.
Key in ping 192.168.1.1 at the cursor position in the pop-up interface and then press Enter. If the following information appears:
Pinging 192.168.1.1 with 32 bytes of data:
Reply from 192.168.1.1: bytes=32 time=2ms
TTL=64
It indicates that the PC has been successfully connected to the H110.
If the following information occurs:
Pinging 192.168.1.1 with 32 bytes of data:
Request timed out.
It indicates an error occurs in the installation. Please check the following items in turn:
ZXV10 H11X (V1.0)Home Gateway User’s Manual
30 Confidential and Proprietary Information of ZTE CORPORATION
Whether the Ethernet cable between the H110 and your PC has been correctly connected
Whether the network adapter driver on your PC is correctly installed
Whether the indicators of the LAN interfaces on the H110 and the network adapter in your PC are all on
Whether the TCP/IP in your PC is correctly configured
If the default IP address of the H110 is 192.168.1.1, the IP address of your PC must be within the range from 192.168.1.2 to 192.168.1.254, the subnet mask should be 255.255.255.0, the default gateway should be 192.168.1.1 and the DNS server address should be 192.168.1.1.
Login The H110 provides configuration tools based on the WEB interface to facilitate configuration and management through the WEB explorer. Open the IE, enter https://192.168.1.1 (the default IP address of the LAN interface of the H110) in the address bar and then press Enter to display the following login page.
Chapter 3 - Preparations for Configuration
Confidential and Proprietary Information of ZTE CORPORATION 31
Input the username and password (which are both defaulted as admin), and click the Login button to enter the general function interface for device, and learn description of each configuration and device information.
Note: The H110 supports WEB configuration in the HTTPS encryption mode, so you should enter https://192.168.1.1 in the address bar. Then the system will prompt you to confirm whether the certificate provided by the WEB server is correct. If yes, you will enter the WEB configuration page. If
you cannot open the device configuration web page, check the proxy server setting of the browser. Select to disable the proxy server or do not use proxy server for device IP address.
General Functions The general function interface displays description of all the configuration contents, including Setup, Advanced, Security, VOIP, Tools and Status tab pages. It also displays the basic status information of the device, including the system software version number, version date, system uptime, registration status of VOIP account, ext. number, Bluetooth number and WAN link status.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
32 Confidential and Proprietary Information of ZTE CORPORATION
Click the Log Out button at the right upper corner on the interface to exit user login and return to the login page.
Chapter 3 - Preparations for Configuration
Confidential and Proprietary Information of ZTE CORPORATION 33
This page is intentionally blank.
Confidential and Proprietary Information of ZTE CORPORATION 35
C h a p t e r 4
Basic Configuration
Click Setup on the WEB page to enter the basic configuration of the H110. The basic configuration covers LAN interface configuration, Wireless (IEEE 802.11g/b) configuration and WAN connection configuration.
LAN Interface Configuration Click the LAN Configuration link on the left part of the page to enter the LAN interface configuration page, where you can configure the related information of four LAN interfaces of the H110.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
36 Confidential and Proprietary Information of ZTE CORPORATION
Note: You can click the Save button at the right upper corner on the page to save the current configuration information. To ensure all the configuration information will not be lost after powering off, it must be saved. Click Log Out button at the right upper corner on the interface to exit user login and return to the login page.
LanGroup Configuration Click the LanGroup1 link in the LAN Configuration table to enter the LanGroup1 Configuration page, where you can set the protocol and network layer related information in the basic LAN Group.
IP Address
IP address of the LAN group (interface subnet)
NetMask
Chapter 4 - Basic Configuration
Confidential and Proprietary Information of ZTE CORPORATION 37
Subnet mask of the LAN group
Enable STP
Enabling STP (Spanning Tree Protocol); STP can provide path redundancy. Even if abnormal loop is caused by multiple effective paths in the network and the network gets faulty, STP can be used to ensure one effective path in two terminals.
Enable DHCP
Enabling/disabling DHCP
Using DHCP Server
Enabling the device as DHCP server function; IP address can be allocated to the client.
Start IP
Start IP address allocated by the DHCP Server
End IP
End IP address allocated by the DHCP Server
NetMask
IP subnet mask allocated by the DHCP Server
Gateway
Gateway IP address used by the DHCP client
Domain
Domain name used for DHCP management
DNS
Domain name server address
NTP Server
Address of the NTP server
Lease Time
ZXV10 H11X (V1.0)Home Gateway User’s Manual
38 Confidential and Proprietary Information of ZTE CORPORATION
Lease time (Unit: day), which is the time during which the DHCP server leases the IP address
Using DHCP Relay
Enabling/disabling the DHCP relay service
Server IP
IP address of the DHCP Server
WAN
Uplink interface connection
DHCP Client List Click the DHCP Clients link to enter the page for listing DHCP clients, that is, showing the related information of the IP addresses leased.
MAC Address
MAC address of DHCP client
IP Address
IP address allocated to DHCP client
Chapter 4 - Basic Configuration
Confidential and Proprietary Information of ZTE CORPORATION 39
Expires in
If this IP address is of static binding in the residual lease time, then the following content is displayed: Infinity.
DHCP Binding Configuration Click the DHCP Binding link to enter the DHCP binging configuration page. You can configure MAC and IP address binding, set up a DHCP binding table, and map the client MAC address and IP address. The DHCP Server will allocate an IP address to your PC according to the configured binding relation between MAC and IP addresses, and it will never expire.
For example: you can configure the MAC address as 00-11-85-04-25-e4 and the IP address as 192.168.1.100, indicating that the DHCP Server will allocate the IP address 192.168.1.100 to the host corresponding to this MAC address.
Note: The IP address must belong to the address pool provided by the DHCP Server of this LAN group.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
40 Confidential and Proprietary Information of ZTE CORPORATION
WLAN Interface Configuration For WLAN interface configuration, refer to the Basic Configuration of Wireless Network in Basic Configuration of Wireless Network.
Wireless Network Configuration Basic Configuration of Wireless Network Click the Wireless link on the left part of the interface to enter the basic WLAN configuration interface, where you can configure the following parameters:
Enable Wireless RF
Enabling or disable WLAN sub-interface.
Mode
Selecting the wireless communication mode; You can select 802.11b or 802.11g.
Channel
Wireless channel number; you can select a proper channel according to the country code.
Chapter 4 - Basic Configuration
Confidential and Proprietary Information of ZTE CORPORATION 41
Zone
The used country or region
Beacon Interval
Beacon interval (ms)
Tx Rate
Configuring the data transmission power of the device; Select a lower data transmission rate to achieve the maximum value of the wireless communication range. The default value is Auto.
Tx Power
Transmitting power grade
Enable WLANx
Enable or disable a WLAN sub-interface (up to 4 WLAN sub-interface can be enabled at the same time).
ESSID
Wireless network service area ID, consisting of up to 32 characters with case sensitivity and used to control wireless network access; This value must match SSID of any access point for communication. Otherwise, the system cannot be accessed (the system supports enabling of four wireless network sub-interfaces at most).
Wireless Network Sub-interface Configuration Click the LAN Configuration link on the left side of the page to enter the LAN Configuration page. Click the wireless interface name link to enter the related configuration page of wireless network sub-interface.
1. Basic information display of wireless network sub-interface
After entering the configuration page of wireless network sub-interface, click the Basic link at the upper part of the
ZXV10 H11X (V1.0)Home Gateway User’s Manual
42 Confidential and Proprietary Information of ZTE CORPORATION
page to enter the basic information page of wireless network sub-interface, which displays the ESSID and status information of the corresponding wireless network sub-interface.
2. Security setting for wireless network sub-interface
After entering the configuration page of wireless network sub-interface, click the Security link at the upper part of the page to enter the security configuration page of wireless network sub-interface.
Chapter 4 - Basic Configuration
Confidential and Proprietary Information of ZTE CORPORATION 43
Hide ESSID
Enabling/disabling ESSID broadcast
None
Encryption not enabled
WEP
There are three kinds of WEP key lengths: 64/128/152 bit. In the majority of applications, the 64-bit WEP key is sufficient. To strengthen security, you can select the 128-bit or 152-bit key length.
Select the format (Hexadecimal or alphanumeric) corresponding to the key, and configure key values (Key1~Key4) for WEP encryption, and select one for configuration.
Select the authentication mode between wireless devices: Shared Key or Open System.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
44 Confidential and Proprietary Information of ZTE CORPORATION
WPA encryption
You can select the encryption algorithm: TKIP, AES or Auto.
You can set the multicast key update interval: Group Key Interval.
Select the PSK mode encryption (without authentications) or 802.1x authentication encryption. For the PSK mode, just add the corresponding password. For 802.1x authentication encryption, add the IP address and keyword of the authentication server.
Jump Start
You can also select the encryption mode JumpStart that can be used simply. Just simply submit this function to connect our home gateway with the Station with JumpStart function.
Chapter 4 - Basic Configuration
Confidential and Proprietary Information of ZTE CORPORATION 45
3. User management for wireless network sub-interface
After entering the configuration page of wireless network sub-interface, click the Management link at the upper part of the page to enter the user management page of wireless network sub-interface, where you can configure the WLAN Station MAC address filtering rule and check the information of all the WLAN Stations associated with this wireless network sub-interface.
Configuring MAC address filtering rule
You can set the MAC address-based access mode to control the connected Station.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
46 Confidential and Proprietary Information of ZTE CORPORATION
Allow: Allowing the following MAC address associations
Ban: Banning the following MAC address associations
Disable Access List: Not enabling this function
MAC Address: MAC address to be controlled
Note: It only functions for the unassociated Station, but not the associated Station.
Checking the currently associated Stations
Check the information of all the WLAN Stations associated with this wireless network sub-interface.
Chapter 4 - Basic Configuration
Confidential and Proprietary Information of ZTE CORPORATION 47
WAN Connection Configuration To configure WAN connections, including Bridge, PPPoE, Static and DHCP, click the “WAN Connection” link on the web page. This product provides the support for multiple WAN connections in one physical link besides the support for a single WAN connection. When the support for multiple WAN connections is enabled, the uplink message will contain VLAN label and priority field to identify different services and priorities.
The following examples of PPPoE connection describe the WAN connection configuration pages when the support for single connection or multi-connection is enabled.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
48 Confidential and Proprietary Information of ZTE CORPORATION
A
B
C
A
B
C
The WAN Connection page includes areas A, B and C. Area A is used to configure the global parameters for the WAN connection. Area B configures the compulsory parameters for any type of WAN connection. Area C configures specific parameters for different types of WANs. The following
Chapter 4 - Basic Configuration
Confidential and Proprietary Information of ZTE CORPORATION 49
sections introduce the settings in Area A and then other settings in Areas B and C as per the type of WAN connection.
Settings in Area A may affect every WAN connection in the current system. These parameters have the following meanings:
Enable multiple WAN connections
Whether to support enabling multiple WAN connections.
Link Speed/Duplex Mode:
Working mode of the WAN Ethernet interface
Current Link Status:
Current link status on the WAN Ethernet interface
Caution: You’d use the Enable multiple WAN connections option in Area A with caution. If you change the option setting (change between enable and disable) and click the Apply button, all the WAN
connections you configured will be cleared directly and an alert will appear on the page.
Configuring Bridge Connection Click the WAN Connection link on the left part of the WEB page and select Bridge in the Type box to configure the bridge connection. The configuration window when the multiple WAN connections or single connection is enabled is as shown below.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
50 Confidential and Proprietary Information of ZTE CORPORATION
Name
Connection name
Type
Connection type
VLAN ID
VLAN label in the Ethernet packets on the WAN interface, used only for multiple WAN connections.
Chapter 4 - Basic Configuration
Confidential and Proprietary Information of ZTE CORPORATION 51
Priority
Processing priority, used only for multiple WAN connections.
LAN group
Associated LAN group
Configuring PPPoE Connection Click the WAN Connection link on the left part of the WEB page and select PPPoE in the Type box to configure the PPPoE connection. The configuration window when the multiple WAN connections or single connection is enabled is as shown below.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
52 Confidential and Proprietary Information of ZTE CORPORATION
Name
Connection name
Type
Connection type
NAT
Enabling/disabling NAT
VLAN ID
VLAN label in the Ethernet packets on the WAN interface, used only for multiple WAN connections. Range: 1~4094.
Priority
Priority of processing, used only for multiple WAN connections. Range: 0~7.
Username
Authenticated user name
Password
Authenticated password
Authentication type
Chapter 4 - Basic Configuration
Confidential and Proprietary Information of ZTE CORPORATION 53
Authentication protocol type
Mode
Dialing mode, which can be Always on, OnDemand or Manual.
Idle Timeout
Idle time
Default Gateway
Whether to add the peer IP of PPP dialing as default gateway
Configuring Static Connection Click the WAN Connection link on the left part of the WEB page and select Static in the Type box to configure the Static connection. The configuration window when the multiple WAN connections or single connection is enabled is as shown below.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
54 Confidential and Proprietary Information of ZTE CORPORATION
Name
Connection name
Type
Connection type
NAT
Enabling/disabling NAT
VLAN ID
VLAN label in the Ethernet packets on the WAN interface, used only for multiple WAN connections.
Priority
Priority of processing, used only for multiple WAN connections.
IP Address
Interface IP address
Mask
Subnet mask
Default Gateway
Chapter 4 - Basic Configuration
Confidential and Proprietary Information of ZTE CORPORATION 55
Default IP address of gateway
DNS
DNS server IP address
Configuring DHCP Connection Click the WAN Connection link on the left part of the WEB page and select DHCP in the Type box to configure the DHCP connection. The configuration window when the multiple WAN connections or single connection is enabled is as shown below.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
56 Confidential and Proprietary Information of ZTE CORPORATION
Name
Connection name
Type
Connection type
NAT
Enabling/disabling NAT
VLAN ID
VLAN label in the Ethernet packets on the WAN interface, used only for multiple WAN connections.
Priority
Priority of processing, used only for multiple WAN connections.
Confidential and Proprietary Information of ZTE CORPORATION 57
C h a p t e r 5
Advanced Configuration
Click the Advanced button on the WEB page to enter the advanced configuration for the H110, including UPnP (Plug and Play) configuration, route configuration, SNTP client configuration, DDNS (Dynamic Domain Name System) configurations, DNS Service configuration, IGMP Snooping and proxy configuration, Bluetooth configuration, IPQoS configuration, ingress rate limit configuration, SNMP configuration and TR069 configuration.
UPnP Configuration Click the UPnP link on the left part of the WEB page to enter the UPnP page, where you can select whether to enable the UPnP function of the H110 and designate the user side interface (LAN Connection) and the network side interface (WAN Connection) of the UPnP function.
The UPnP function is used to support zero configurations, “invisible” networking and auto discovery of various device types of numerous vendors. This means that one device can dynamically join a certain network, obtain an IP address, report its own functions and learn the existence and functions of the other devices.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
58 Confidential and Proprietary Information of ZTE CORPORATION
Enable UPnP
Enabling switch the UPnP function
WAN Connection
Selecting the WAN side connection interface
LAN Connection
Selecting the LAN side interface
Static Route and Dynamic Route Configuration Click the Route link at the left side of the page to enter the route configuration page of the H110, which is used to configure static route and RIP dynamic route.
Static Route Click the Static Route link to enter the Static Route page, which displays the static route information list of the H110. You can configure a new route entry, or modify and delete the existing route entry.
Chapter 5 - Advanced Configuration
Confidential and Proprietary Information of ZTE CORPORATION 59
Destination Network Address
Destination network IP address
Destination NetMask
Destination subnet mask
Next Hop IP
Next hop IP address
If you need to add a new route, designate the destination network ID, subnet mask and next hop IP, and then click the Add button. Once a route is added, the route list will be refreshed.
If you need to modify an existing route, select its check box from the route list. Its configuration is shown in the setting box. You can modify the next hop IP address and click the Modify button.
To delete an existing route entry, select it from the displayed route list, and then click the Delete button. The route is deleted, and the route list is refreshed again.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
60 Confidential and Proprietary Information of ZTE CORPORATION
RIP Dynamic Route Click the RIP link in the Routing Setup page to enter the configuration page of the dynamic routing protocol RIP, where the route table information of the system is shown.
To enable the RIP function of the H110, select Enable RIP. Then, you can configure the Version and Interface parameters.
Version
RIP protocol version
Interface
The network interface for RIP enabling; for the WAN side interface, RIP only configured at the interface without NAT enabled.
SNTP Client Configuration Click the SNTP link on the left part of the page to enter the SNTP function configuration page, where you can configure the related information of the SNTP client on the H110 to implement time synchronization with the time server.
Chapter 5 - Advanced Configuration
Confidential and Proprietary Information of ZTE CORPORATION 61
Enable SNTP
Enabling the SNTP client function
Time Zone
Setting a time zone
Primary Server Address
IP address or domain name of the SNTP server
Secondary SNTP Server
IP address or domain name of the SNTP standby server
Poll Time
Poll time interval, in seconds, indicating the interval of server time synchronization, with the setting range from 3600 s (1 hour) to 86400 s (24 hours)
DDNS Configuration Click the DDNS link on the left part of the WEB page to enter the DDNS Setup page, where the user can select whether to enable DDNS service.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
62 Confidential and Proprietary Information of ZTE CORPORATION
The DDNS (Dynamic Domain Name System) can be used to enable the host with a dynamic IP address to provide the domain name service. For example, suppose the host dynamically obtains an IP address via xdsl dialup or via the DHCP server and externally provides the domain name service. After the DDNS is applied to this host, the IP address change of this host will not affect users’ access to the domain name and users will not feel such IP address change of this host.
This product supports two types of DDNS domain name protocols:
GNUDIP (http://gnudip2.sourceforge.net/)
DDNS3 (http://www.ddns.nu)
The two protocols can be used at the same time and selected from the drop-down box.
DDNS Protocol
Switching to display the two DDNS protocols
Enable DDNS
Whether to enable the DDNS function of this protocol
Server
Server address to be used
Chapter 5 - Advanced Configuration
Confidential and Proprietary Information of ZTE CORPORATION 63
If DDNS3 protocol is used, this server is a domain name, defaulted as ns.ddns.nu.
If HTTP protocol of GNUDIP is used, this server address is a URL, defaulted as http://ns.eagleeyes.com.cn/cgi-bin/gdipupdt.cgi.
Username
Username
Password
Password
Handle
Binding any configured character string with the corresponding IP address, valid only when the DDNS3 protocol is used
Domain
Domain name corresponding to this user, valid only when the GNUDIP protocol is used
WAN Connection
Selecting the WAN side connection interface
Note: Username and password are obtained through the registered DDNS server, and different protocols use different modes:
The DDNS3 protocol configures a Handle in the DDNS server through them, and it is bound with an IP address and also corresponds to a domain name (can be set). To configure this item, you should log in to http://www.ddns.nu to register and get the username, password and Handle.
The GNUDIP HTTP protocol is bound with an IP address through them, and it corresponds to a domain name at the same time.
Both of the above protocols should apply for a registration account from its own service provider to get such information as the username and password.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
64 Confidential and Proprietary Information of ZTE CORPORATION
DNS Server Configuration Click the DNS Service link on the left part of the WEB page to enter the DNS Configuration page, where you can configure static DNS record.
Domain Name
Domain name
Host Name
Host name
IP Address
IP address of the host
IGMP Configuration Click the IGMP link on the left part of the WEB page to enter the IGMP Proxy configuration page, where you can select whether to enable IGMP Proxy and IGMP Snooping services.
Chapter 5 - Advanced Configuration
Confidential and Proprietary Information of ZTE CORPORATION 65
Setting IGMP Proxy The IGMP Proxy function monitors and filters to control multicast data forwarding at L3 of the network. The user can select whether to enable the IGMP Proxy service and specify the network-side interface (WAN Connection) of the IGMP Proxy function.
Enable IGMP Proxy
Enabling the IGMP Proxy function
WAN Connection
Selecting the WAN side connection interface
Setting IGMP Snooping The IGMP Snooping function monitors and filters to control multicast data forwarding at L2 of the network.
Enable IGMP Snooping
Enabling the IGMP Snooping function
ZXV10 H11X (V1.0)Home Gateway User’s Manual
66 Confidential and Proprietary Information of ZTE CORPORATION
Bluetooth Configuration Click the Bluetooth link on the left part of the page to enter the Bluetooth configuration page. In this page, you can configure the Identity of the H110 Bluetooth interface and decide whether to enable the Personal Area Network (PAN) service of the Bluetooth interface.
Identity
Indicating the identity of the Bluetooth interface.
PIN
Personal Identification Number, verification code of Bluetooth module
Authentication
Whether to enable authentication function of PIN code.
Service
PAN: Indicating the switch of the Personal Area Network service.
CTP: Cordless Telephone
Chapter 5 - Advanced Configuration
Confidential and Proprietary Information of ZTE CORPORATION 67
IPQoS Configuration Click the IPQoS link on the left part of the page to enter the IPQoS configuration page. Select to enable the IPQoS function at a WAN side interface, and configure the relevant IPQoS policy. Configure the IPQoS rule and relevant parameters of the queue dispatching algorithm based on priority and weight. You can define different priorities for the data flows of different applications to send the data at a higher priority first, and limit bandwidth for the specified data flow to ensure the bandwidth of other data flows.
WAN Connection
Selecting a WAN connection as the egress interface bound with the IPQoS
Enable IPQoS
Enabling switch for IPQoS
Link Speed
Uplink bandwidth of the WAN connection in the unit of kbps
Borrow
ZXV10 H11X (V1.0)Home Gateway User’s Manual
68 Confidential and Proprietary Information of ZTE CORPORATION
Whether to allow borrowing bandwidth from other idle queues; Yes/No: allowing borrowing/barring borrowing
RED
Whether to enable the RED (Random Early Detection) algorithm; Yes/No: Enable/disable
Default/Low/Medium/High/Critical/Realtime/Premium/ Urgent
They correspond to eight different priority queues. Default is the lowest priority, and Urgent is the highest priority. The Urgent queue is directly allocated to VOIP, not allowing the user to configure it. For the other seven queues, the drop-down list boxes behind specify the weight proportion corresponding to each priority, and the sum of seven weight values should be 100%.
Note: When there is VOIP voice flow at a moment, then the available maximum bandwidth for the seven queues Default ~ Premium = total bandwidth – the bandwidth occupied by VOIP.
IPQoS is disabled unless the firewall security level is set to Medium or High.
Click the Add button to enter the IPQoS Rule page, where you can define the data flows based on the source/destination IP address, source/destination port number and protocol type, and put them into a certain priority queue.
Chapter 5 - Advanced Configuration
Confidential and Proprietary Information of ZTE CORPORATION 69
Protocol
Configuring an internally designated protocol, in the range of TCP, UDP and ICMP
Source IP Address
Source IP address of the data flow
Destination IP Address
Destination IP address of the data flow
Source Port
Source port of data flow; the configuration format of this item can be xx or xx: xx.
Destination Port
Destination port of data flow; the configuration format of this item can be xx or xx: xx.
Interface
In-interface of the data flow
ZXV10 H11X (V1.0)Home Gateway User’s Manual
70 Confidential and Proprietary Information of ZTE CORPORATION
Outer face
Out-interface of the data flow
DSCP
DSCP value of data flow, in the range of 0~69
Set Mark
Whether to set mark for the data flow
Priority
Priority of the data flow
Ingress Rate Limit Configuration Click the Ingress Rate Limit link on the left part of the page to enter the Ingress Rate Limit configuration page. Ingress rate limit can limit the incoming data flow rates of all the interfaces. You can enable ingress rate limit at an interface, configure the incoming data flow protocol, source address/port and destination address/port, and control the rate of this data flow.
Interface
Network interface, on which ingress rate limit is enabled
Chapter 5 - Advanced Configuration
Confidential and Proprietary Information of ZTE CORPORATION 71
Protocol
Protocol type of incoming data flow, in the range of ANY, TCP, UDP and ICMP
Source IP Address
Source IP address of the incoming data flow
Source Netmask
Source address mask of the incoming data flow
Destination IP Address
Destination IP address of the incoming data flow
Destination Netmask
Destination address mask of the incoming data flow
Source Port
Destination port of the incoming data flow
Destination Port
Destination port of the incoming data flow
Rate
Controlling rate of this data flow, in the unit of kbps(kbit/s)
Note: As configuring the ingress rate limit rule, if you select ICMP for Protocol, then Source Port and Destination Port cannot be configured.
SNMP Configuration As the Simple Network Management Protocol widely adopted on Internet, SNMP is set up over the UDP in TCP/IP protocol cluster to manage the network through the highly efficient NMS, provide wireless connection service, and timely report and handle network
ZXV10 H11X (V1.0)Home Gateway User’s Manual
72 Confidential and Proprietary Information of ZTE CORPORATION
faults. Click the SNMP link on the left of the WEB page to enter the SNMP Configuration page, where you can set the SNMP read/write community string, enable or disable the SNMP Agent of the H110 and set the information such as Trap address.
Enable SNMP Agent
Enabling SNMP agent function
Enable SNMP Trap
Enabling SNMP alarm sending function
Name
Device name
Location
Name of the device administrator; the default address is Nanjing, P.R.China.
Contact
Chapter 5 - Advanced Configuration
Confidential and Proprietary Information of ZTE CORPORATION 73
Contact mode of the device administrator; the default contact person is ZTE Corporation.
Community Name
Read/write community string name of SNMP
Access Right
Access right of the SNMP read/write community string
Destination IP
Destination IP address for receiving the SNMP alarm
Trap Community
Community string name of SNMP alarm
Version
Version number of SNMP
TR069 Configuration Click the TR069 link on the left part of the Web page to enter the TR069 Configurations page, where you can configure URL and account for connection of CPE and ACS.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
74 Confidential and Proprietary Information of ZTE CORPORATION
ACS URL
ACS URL address
Username
ACS username
Password
ASC password
CPE URL
CPE URL address
Username
CPE username
Password
CPE password
Default WAN
Default WAN connection
Confidential and Proprietary Information of ZTE CORPORATION 75
C h a p t e r 6
Security Configuration
Click the Security button on the WEB page to enter the H110 security configuration, including basic control of firewall, port forwarding, port trigger, service control, DMZ, IP/bridge filter, WEB and URL filter and IPSec connection.
Firewall By-level Control and SPI Click the General link on the left part of the interface to enter the firewall by-level control and SPI setting page, where the user can configure the firewall security level and whether to enable the status packet check accelerating function.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
76 Confidential and Proprietary Information of ZTE CORPORATION
High
The firewall level is high. In this case, only the external access defined by the port mapping rule and access control rule can pass, the inner network is allowed to access the outer network, and the anti-attack function is also enabled.
Medium
The firewall level is medium. In this case, bilateral access of the inner network and outer network is allowed, but the set IP filtering rule that takes effect will restrict the corresponding access.
Low
The firewall level is low. In this case, all the access of the inner network and outer network is allowed. Note that all the filtering rules and IPQoS are disabled unless the firewall security level is set to Medium or High.
SPI
Chapter 6 - Security Configuration
Confidential and Proprietary Information of ZTE CORPORATION 77
Selecting Enable or Disable to enable or disable the status packet check function; it can be enabled to speed up the packet passing the H110.
Port Forwarding Click the Port Forwarding link at the left part on the page to enter the Port Forwarding page, where you can configure a port access redirection policy with the WAN side IP address as the source and the LAN side IP address as the destination. You can configure at most 16 port forwarding entries. Port forwarding is used for the host of the WAN to access the server of the LAN as the client.
Enable Port Forwarding
Enabling the port forwarding function
Name
Name of port forwarding
Protocol
Selecting the protocol name; The options are TCP and UDP.
WAN Connection
ZXV10 H11X (V1.0)Home Gateway User’s Manual
78 Confidential and Proprietary Information of ZTE CORPORATION
Corresponding to the established WAN connection
WAN Port Range
Destination port range of the WAN side
LAN IP Address
IP address of the LAN side
LAN Port
Corresponding port of the LAN side
For example, you can configure a port forwarding entry with PPPOE used as the WAN connection, the destination port range of the WAN side being 2030 to 2050, the host IP address of the LAN being 192.168.1.2 and the port number being 23. In this way, the host of the WAN can redirect to the Telnet service of the host of the LAN whose IP address is 192.168.1.2 by accessing a port whose port number ranges from 2030 to 2050.
On the Port Forwarding page, you can enable the default configuration, set the host IP address of the LAN and specify the network-side interface so as to redirect access requests of the ports at the WAN side to a specified LAN host.
Click Edit to edit the default number, enable Port Forwarding, specify the WAN connection to pppoe and set the IP address to of LAN host.
Port Trigger The port trigger function enables the PC in LAN to open the specific port number of this device, so the application server on Internet can access the server in LAN through the specific opened port. Click the Port Trigger link on the left part of the WEB page to enter the Port Trigger page, which includes some default port information of Port Trigger. This function can configure up to 100 Port Trigger entries and validate up to Port Trigger entries at the same time.
Chapter 6 - Security Configuration
Confidential and Proprietary Information of ZTE CORPORATION 79
Application Name
Name of the application using the port trigger function
Trigger Protocol
Displaying the protocol of trigger connection
Trigger Start
Displaying the port where trigger connection starts
Trigger End
Displaying the port where trigger connection ends
Open Protocol
Displaying the protocol of forwarding connection
Open Start
Displaying the port where forwarding connection starts
Open End
Displaying the port where forwarding connection ends
Status
Displaying the status of the current trigger application
ZXV10 H11X (V1.0)Home Gateway User’s Manual
80 Confidential and Proprietary Information of ZTE CORPORATION
Action
Configuration button used to validate or cancel the current application
Add
Adding a group of trigger application configurations
Modify
Modifying the current trigger application configuration
Delete
Deleting the current trigger application configuration
Reset
Restoring the current trigger connection to the ex-factory status
The user can click the Add or Modify button to enter the property setting interface for port trigger.
Name
Configuring the name of the current trigger application
Trigger
Chapter 6 - Security Configuration
Confidential and Proprietary Information of ZTE CORPORATION 81
Trigger connection parameter; selecting the protocol type
Opened
Forwarding connection parameter; selecting the protocol type
Start Port
Setting the start port
End Port
Setting the end port
Submit
Submitting to validate the current configuration
Back
Canceling the current configuration
Remote Access Control Click the Service Control link on the left part of the WEB page to enter the Service Control page, where you can configure a policy to control use of the specified IP address to access the specific service of the H110. Services of the H110 refer to TELNET, FTP, SNMP, HTTPS and HTTP. The control does not act on the ping operation. At most 16 IP address entries can be configured for access control.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
82 Confidential and Proprietary Information of ZTE CORPORATION
Enable WAN Access
Enabling the host of the WAN to access the services of the H110
Mode
Selecting black list or white list
IP
IP address of the host subject to access control
The default setting only allows hosts at the LAN side to access services of the H110. If Enable WAN Access is set, then hosts of the WAN side can also access the services. The parameter Mode is only effective for the configured IP address. If it is set to white list, only the configured IP address will be allowed to access services of the H110. If it is set to black list, the configured IP address will not be allowed to access services of the H110.
For example, configure a policy that allows the IP address 192.168.1.2 to access services of the H110.
Chapter 6 - Security Configuration
Confidential and Proprietary Information of ZTE CORPORATION 83
DMZ Click the DMZ link on the left part of the WEB page to enter the DMZ page, where you can set a network segment or a host as the DMZ zone. The host in the DMZ zone cannot access the LAN hosts not in the DMZ zone and the WAN network, but the hosts in the DMZ zone can act as servers for the other zones. It is recommended that the host in the DMZ zone can be set to the FTP or WEB server to ensure security of the LAN side hosts not in the DMZ zone. Then the specific policy can be set in the Port Forwarding interface to redirect the request of the WAN side host for the FTP service of the H110 to the FTP or WEB server in the DMZ zone.
Enable DMZ
Enabling DMZ host selection
LAN
LAN side access connection
IP
IP address setting of the DMZ host
Mask
ZXV10 H11X (V1.0)Home Gateway User’s Manual
84 Confidential and Proprietary Information of ZTE CORPORATION
If you have set the IP address of a certain network segment of the LAN to the DMZ zone, you must set the corresponding subnet mask here.
For example, you can set host 192.168.1.5 as a host of the DMZ zone.
Filter Setting Bridge Filter Click the Bridge Filter link on the left part of the WEB page to enter the Bridge Filter page, where you can configure an access filter rule based on the source MAC address and the destination MAC address. You can set up to 12 bridge filter entries.
Enable Bridge Filter
Enabling the bridge filter function
Name
Name of the bridge filter
Protocol
Chapter 6 - Security Configuration
Confidential and Proprietary Information of ZTE CORPORATION 85
Selecting name of the protocol; The options include ANY (which indicates any protocol), IP, ARP, PPPoE SESSION, PPPoE DISCOVERY and RARP.
Source Mac
Source MAC address setting
Destination Mac
Destination MAC address setting
For example: configure the source MAC address as 00:d3:c4:17:08:ba, destination MAC address as 00:2d:30:51:11:23, and protocol as ANY, and then click Add to add an entry. You can also select an entry to be edited or deleted, and then click Submit to edit or delete it.
On the Bridge Filter page, you may choose to only configure the source MAC address for the filter.
Setting IP Filter Click the IP Filter link on the left part of the WEB page to enter the IP Filter page, where you can define a port access filter policy by using the IP address of the ingress interface of the H110 as the source and the IP address of the egress interface as the destination. At most 16 IP filter entries can be configured.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
86 Confidential and Proprietary Information of ZTE CORPORATION
Enable IP Filter
Enabling the IP filter function
Name
Name of the IP filter
Protocol
Selecting name of the protocol; The options are ANY (which indicates any protocol), TCP, UDP and ICMP.
Source IP Address
Source IP address
Source Netmask
Source address subnet mask
Destination IP Address
Destination IP address
Destination Netmask
Destination address subnet mask
Chapter 6 - Security Configuration
Confidential and Proprietary Information of ZTE CORPORATION 87
Destination Port Start
Start port no. of the destination address
Destination Port End
End port no. of the destination address
Interface In
Ingress interface of the source address
Interface Out
Egress interface of the destination address
For example, we can configure a policy that prohibits FTP access by using the host IP address of 192.168.1.2 on langroup1 as the source and the IP address of 192.168.2.13 on langroup2 as the destination. Then, set Source IP Address as 192.168.1.2 and Destination IP Address as 192.168.2.13, select TCP for Protocol, fill in 21 for both the start port and end port, select langroup1 for Interface In and langroup2 for Interface Out, name this rule, select the Enable IP Filter option, and then click the Add button.
Setting URL and WEB Filter Click the Web Filter link on the left part of the WEB page to enter the Web Filter page, which consists of the Filtering Rule and Filtering Policy parts used to set rule (validation condition) and policy (filter condition) respectively and filter HTTP request for the Web server by any client. At most 100 rule/policy entries can be configured.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
88 Confidential and Proprietary Information of ZTE CORPORATION
Filtering Policy
Used to configure policy, so the user can decide policy validation condition
Filtering Rule
Used to configure rule, so the user can set Web filter condition
Add
Adding policy or project
Modify
Modifying the current selected policy or project
Delete
Deleting the current selected policy or project
Policy Name
Name of the current project
LAN Content
Displaying the LAN side terminal affected by the current project
Chapter 6 - Security Configuration
Confidential and Proprietary Information of ZTE CORPORATION 89
Rule Name
Displaying the name of rule to be used by the current policy
Status
Showing the running status of the current project
Action
Button for running and stopping the project
1. The user can click the Add or Modify button of Filtering Rule to enter the policy property interface.
Rule Name
Name of the current policy
Description
Description of the current policy
URL Key
Specifying a list of URL keywords separated by spaces, For example: EDU MOVIE
ZXV10 H11X (V1.0)Home Gateway User’s Manual
90 Confidential and Proprietary Information of ZTE CORPORATION
Data Key
Specifying a list of Data keywords separated by spaces, For example: EDU MOVIE
Submit
Completing the current modifying or adding operation
Back
Canceling the current modifying operation
2. After configuring the policy, the user can return to the main interface and click the Add or Modify button of Filtering Policy to enter the project property interface.
Policy Name
Name of the current project
Client
The type of the client where the project takes effect; three options are available: langroup (indicating the filter unit is langroup), IP (filtering by setting IP address) and LAN (all the LAN PCs are filtered).
Chapter 6 - Security Configuration
Confidential and Proprietary Information of ZTE CORPORATION 91
Filter Rule
Used to select the type of filter rule
Schedule
Used to configure the project schedule; This option is enabled only when Advanced SNTP is validated (for the →SNTP client configuration, refer to SNTP Client Configuration).
3. After the user’s configured Advanced SNTP function →takes effect, contents of the Schedule option will appear automatically.
Please select a date
Setting the validating time for the current project, for example: Mon, Tue or Wed
Start
Selecting the project start time
End
Selecting the project end time
ZXV10 H11X (V1.0)Home Gateway User’s Manual
92 Confidential and Proprietary Information of ZTE CORPORATION
IPSec Configuration Setting RSA Key Click the IPSec link on the left part of the WEB page to enter the IPSec page, where you can check and update the RSA key adopted at IPSec security negotiation.
Re-generate RSA keys
Updating RSA keys; This product supports PSK shared secret and RSA digit signature as the negotiation authentication mode. If you select the RSA digit signature authentication mode, correctly fill in the RSA authentication key of the peer party. The user can update the RSA key as required, and send it to other users to set up IPSec security connections with him.
Note: The default condition for updating RSA key is that the system has no security connection, or else the button will be automatically disabled. To reset the RSA key, delete the existing security
connection, and then enter the IPSec page to update the RSA key.
Chapter 6 - Security Configuration
Confidential and Proprietary Information of ZTE CORPORATION 93
In addition, this RSA signature key is used for ID authentication only, so it can be open to anybody, without affecting the system security.
Adding New Connection Click the New IPSec Connection link on the left part of the WEB page to enter the Configure VPN IPSec page, where you can configure and add a new IPSec security connection. IPSec security connection parameters fall into three categories: general configuration (General), security property configuration (IPSec)
and negotiation property configuration (IPSec Automatic/IPSec
Manual).
ZXV10 H11X (V1.0)Home Gateway User’s Manual
94 Confidential and Proprietary Information of ZTE CORPORATION
1. General (general configuration)
Connection Name
IPSec security connection name; Please use A-Z/a-z/0-9 and underline _ with a length limited within 20 characters, and try to select a name related with its actual meaning.
Interface
Name of the uplink port; Select the correct interface name according to the connection mode and interface of the H110 and external network.
2. IPSec (security property configuration)
Remote Endpoint Address
Protected endpoint address of the peer party
Security Association Mode
IPSec security protection mode; The Tunneling and Transport modes are optional. Tunneling is used to protect security of external sent data of the inner network host of the H110 or the H110, and Transport is only used to protect security of external sent data of the H110. Therefore, when Transport is selected, the following four items will be automatically screened.
Local Subnet IP Address (tunnel mode only)
Local protected subnet IP address
Local Subnet Mask (tunnel mode only)
Local protected subnet IP mask
Remote Subnet IP Address (tunnel mode only)
Protected subnet IP address of the peer party
Remote Subnet Mask (tunnel mode only)
Protected subnet IP mask of the peer party
Compress
Chapter 6 - Security Configuration
Confidential and Proprietary Information of ZTE CORPORATION 95
Compressing the IP layer packet; When this option is selected, this end will attempt to use IP data compression. If the peer end also supports IP data compression, the IP data compression will be enabled.
Key Exchange Mode
Key exchanging mode; You can select Automatic (both parties automatically authenticate IDs and complete key exchanging, and periodically update keys), or select Manual (all the key parameters are set and updated by the user himself). The IKE negotiation mode is recommended.
3. Negotiation property configuration
IPSec Automatic (negotiation connection configuration)
IKE Mode
Negotiation mode; Main Mode (recommended mode) and Aggressive Mode are optional.
Life Time in Seconds (1-28800)
Life time of security negotiation parameter; to ensure data transmission security, such key parameters generated by negotiation as key will be automatically stopped in a period, and parameters are also renegotiated automatically. The recommended value is 8 (hour).
Rekey Margin (1-540)
The advance time margin for renegotiation; To prevent key renegotiation from interrupting normal data transmission, it is allowed to renegotiate with the peer party about key before the key expires. The recommended value is 9 (s).
Rekey Fuzz Percent (1-200)
The maximum percentage of advance time margin for renegotiation; the total advance time ≤ Rekey Fuzz Percent *Rekey Margin
ZXV10 H11X (V1.0)Home Gateway User’s Manual
96 Confidential and Proprietary Information of ZTE CORPORATION
Peer Authentication
Adopted key negotiation mode; This product supports two key negotiation modes: Shared Secret and RSA Signature (select Main Mode for IKE Mode). The RSA Signature (for main mode) is recommended.
Peer Key
Key, a character string at a certain length consisting of number and English letter; When Shared Secret is selected from Peer Authentication, you must select a field (note to keep this field secret carefully) for Shared Secret completely consistent with that of the peer party. When RSA is selected for Peer Authentication, both parties should fill in the peer RSA key. For specific configuration, refer to the relevant introduction in Setting RSA Key. Fill in it as actually required.
Use Perfect Forward Secrecy (PFS)
Whether to select Use Perfect Forward Secrecy, and select whether to adopt Perfect Forward Secrecy at the second sub-phase of key negotiation or future key update; to ensure there is no statistic law feature between the new key and the key to expire, this option is selected preferentially.
IPSec Manual (manual connection configuration)
Note: The ordinary user is not recommended to adopt manual configuration, unless this user is an information security specialist or has special requirements.
Security Parameter Index: Local
Local security index No.; The IPSec security protection policy is composed of several independent SAs. Each
Chapter 6 - Security Configuration
Confidential and Proprietary Information of ZTE CORPORATION 97
SA only restricts the unidirectional data security policy and has its own independent SPI security index number. Here, the SPI number from the local to the peer is filled in.
Security Parameter Index: remote
SPI number from the local to the peer; Fill it in with reference to Security Parameter Index: Local.
IPSec Protocol
Security protocol; IPSec allows two security protocol types: ESP (perform encryption and authenticate data completeness at the same time) and AH (only authenticating data completeness). ESP is recommended.
Encryption Algorithm (ESP only)
Data encryption algorithm; This product supports the following algorithms, encryption types and key lengths: 3DES-CBC, AES-CBC (128), AES-CBC (192) and AES256-CBC (256). AES-CBC (192) algorithm is recommended.
Local Encryption Key (ESP only)
Encryption algorithm key of outgoing data; Make a selection based on the algorithm type and key length selected in Encryption Algorithm. For example, if AES-CBC (192) is selected, it is necessary to submit a 48-length hexadecimal string as encryption key (48=192/4).
Remote Encryption Key (ESP only)
Encryption algorithm key of incoming data; Fill it in with reference to Local Encryption Key.
Authentication Algorithm
Authentication algorithm of data completeness; This product supports the following algorithms, hash types
ZXV10 H11X (V1.0)Home Gateway User’s Manual
98 Confidential and Proprietary Information of ZTE CORPORATION
and key lengths: HMAC-SHA1 (160) (which is recommended) and HMAC-MD5 (128).
Local Authentication Key
Authentication algorithm of outgoing data completeness; Make a selection based on the algorithm type and key length selected in Authentication Algorithm. For example, if HMAC-SHA1 (160) is selected, it is necessary to submit a 40-length hexadecimal string as authentication key (48=192/4).
Remote Authentication Key
Encryption algorithm key of incoming data; Fill it in with reference to Local Authentication Key.
Submit
Confirming and submitting the new connection
Cancel
Canceling all the configurations of this connection
Examples:
1. User A can create a connection with Connection Name as Myserv, Remote Endpoint address as 10.40.40.151 (B public network address), Interface as Wizard Conn, Security Association Mode as Tunnel, Local subnet IP Address as 192.168.13.0, Localsubnet Mask as 255.255.255.0, Remote subnet IP Address as 192.168.12.0, Remote Subnet Mask as 255.255.255.0, Key Exchange Mode as Automatic, IKE mode as Main Mode, Lifetime as 3600, Rekey Margin as 540, Rekey fuzz Percent as 100, Peer Authentication Mode as Shared Secret and Peer Key as abcdefg1234567.
2. While, peer user B can create a connection with Connection Name as Myserv, Interface as Wizard Conn, Remote Endpoint address as 10.40.40.11 (A public network address), Security Association Mode as Tunnel,
Chapter 6 - Security Configuration
Confidential and Proprietary Information of ZTE CORPORATION 99
Local subnet IP Address as 192.168.12.0, Localsubnet Mask as 255.255.255.0, Remote subnet IP Address as 192.168.13.0, Remote Subnet Mask as 255.255.255.0, Key Exchange Mode as Automatic, IKE mode as Main Mode, Lifetime as 7200, Rekey Margin as 550, Rekey fuzz Percent as 80, Peer Authentication Mode as Shared Secret and Peer Key as abcdefg1234567.
3. After both parties submit their own connections, the upper part of this page will display the Connected prompt.
Modifying/Deleting Connection After an IPSec security connection is correctly created, an option will be automatically added under the New IPSec Connection submenu, named as the new connection name. Select it to enter the modifying page for this connection.
Except the connection name cannot be modified, the security connection modifying method is consistent with its adding method. After modifying, the user can click the Submit button to submit the modification or click the Cancel button to cancel the modification.
Confidential and Proprietary Information of ZTE CORPORATION 100
This page is intentionally blank.
Confidential and Proprietary Information of ZTE CORPORATION 101
C h a p t e r 7
VOIP Configuration
Click the VOIP button on the WEB page to enter the VOIP related configuration of the H110, including VOIP signaling related configuration, voice related configuration, routing related configuration, service related configuration and number related configuration.
General Configuration Click the General link on the left part of the page to enter the General configuration page, where you can select the signaling protocol used for VOIP, display the registration status of each subscriber line, and set the length and prefix of the internal phone number, the dial twice flag.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
102 Confidential and Proprietary Information of ZTE CORPORATION
Signaling
Selecting the signaling protocol used for VOIP, such as SIP/MGCP; you can also click the Apply button to re-register the VOIP module to SS.
VOIP Status
Displaying the registration status of each subscriber line; When In Service is displayed, it indicates the VOIP module has been normally registered to SS, and the user can dial the VOIP phone number. If Out of Service is displayed, it indicates it is not registered successfully, when VOIP phone number cannot be dialed.
Ext. number setup
Configuring length and prefix of the internal line phone number; Length is the internal line number length (Cannot be changed by the user), and Prefix is the internal line number prefix (Changeable). The default internal line number prefix is *#, so the extension number connected to PHONE1 is *#00 and the one to PHONE2 is *#01.
Two-stage dialing flag
Dial twice flag
After modifying the related configuration, click the Apply button to submit modification.
Note: Upon submission of the modification, the menu bar on the left will change along with the call protocol type selected by the user.
Chapter 7 - VOIP Configuration
Confidential and Proprietary Information of ZTE CORPORATION 103
Voice Configuration Click the Voice link on the left part of the page to enter the Voice page, where you can configure each parameter related with VOIP voice.
Voice Activity Detector (VAD)
Disable VAD: No detection
Enable using default scheme: Using the default scheme
Enable using PT13 scheme: Using PT=13 scheme (not supported temporarily)
Enable VAD but no silence information sent: Able to make silence detection but not send silence packet (not supported temporarily)
ZXV10 H11X (V1.0)Home Gateway User’s Manual
104 Confidential and Proprietary Information of ZTE CORPORATION
DTMF Options
DTMF Payload Use Redundancy: DTMF out-band redundancy mode (not supported temporarily)
DTMF Payload Use 2833: 2833 mode adopted for DTMF
DTMF in voice coding enable: DTMF in-band voice transparent transmission
No DTMF payloads generated: No transmission (not supported temporarily)
Packet to PCM Digital Gain
Digital gain from packet to PCM, with the range -14db ~ 6db
PCM to Packet Digital Gain
Digital gain from PCM to packet, with the range -14db ~ 6db
Master Echo
Enabling/disabling the master echo canceller
Silence Handling (PCM)
Whether to generate the comfortable nose for the PCM direction during the silence period (not supported temporarily)
Fax Configuration
T.38 (not supported temporarily)
Pass Through (transparent transmission mode); provided configuraiton options: No Control, RTCP negotiated mode (RTCP negotiation mode) and Controlled by SS (controled by the SS)
RTP Start Port
Start port of RTP, range: even number of 1026~65434.
Click the Apply button to submit the service type change.
Chapter 7 - VOIP Configuration
Confidential and Proprietary Information of ZTE CORPORATION 105
SIP Configuration As a network communication protocol, SIP (Session Initiation Protocol) is gradually applied to control Voice over IP, SIP support voice, video, data, E-mail, chat and games.
1. Click the VOIP button on the WEB page to enter the VOIP configuration page.
2. Click the General link on the left part of the page to enter the General configuration page for VOIP.
3. Select SIP from the Signaling protocol box.
4. Click the Apply button to finish the SIP protocol selection.
5. Click the SIP Protocol link on the left side of the page to enter the Protocol configuration page.
Protocol Configuration Click the Protocol link to enter the Protocol configuration page, where you can configure relevant parameters of the SIP.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
106 Confidential and Proprietary Information of ZTE CORPORATION
Host Information
Interface: Local interface used by VOIP
Port: Local port used by VOIP
First Proxy
IP Address: IP address or domain name of the first Proxy server
Port: Port of the first Proxy server
Second Proxy
IP Address: IP address or domain name of the second Proxy server
Port: Port of the second Proxy server
Test Link Flag
Test link flag
Peer Call Flag
Peer-to-peer call flag
Phone Number
User phone number
Password
User registration password
Enable
Enabling VOIP account; if the corresponding account is not ticked, it will be suspended.
Note: The password entry box does not display the set password. During password change, please enter the new password with care. Or leave the password entry box null if you do not need to change the password.
Chapter 7 - VOIP Configuration
Confidential and Proprietary Information of ZTE CORPORATION 107
Media Configuration Click the Media link to enter the Media Setting page, which is used to declare one’s media capability in network communication. Currently, talk media and fax media can be configured.
1. Talk media
Enable
Enabling flag, whether to enable/disable this media configuration item
Type
ZXV10 H11X (V1.0)Home Gateway User’s Manual
108 Confidential and Proprietary Information of ZTE CORPORATION
Media type, indicating the type of media is voice/video/data
Codec
Codec type, indicating the codec mode of the media type is G711U/G711A/G729/rfc2833
Payloadvalue
Payload value, indicating the packet payload value of this media type; It is fixed for some codec types. For example, the payload value of G711A is 8, that of G711U is 0, that of G729 is 18 and that of rfc2833 is 97.
Packet_time
Packet assembly interval, indicating the media information in how long a period will be assembled in one UDP to be transmitted
Clockrate
Sampling rate, indicating the sampling rate when this media is generated
2. Fax media
Enable
Enabling flag, whether to enable/disable this media configuration item
Type
Media type, indicating the basic type of this media is voice or fax
Codec
Codec type, indicating the codec mode of the media type is G711A/G711U
Payloadvalue
Payload value, indicating the packet payload value of this media type; It is fixed for some codec types. For example, the payload value of G711A is 8, that of G711U is 0.
Chapter 7 - VOIP Configuration
Confidential and Proprietary Information of ZTE CORPORATION 109
Packet_time
Packet assembly interval, indicating the media information in how long a period will be assembled in one UDP to be transmitted; T.38 does not involve this item.
Clockrate
Sampling rate, indicating the sampling rate when this media is generated
After modifying the related configuration, click the Apply button to submit the modification.
MGCP Configuration The MGCP (Media Gateway Control Protocol) is an interface protocol used in the next generation network for the control interface generated after separation of media processing from signaling control, that is, the interface between the MG (Media Gateway) and the CA (Call Agent).
1. Click the VOIP button on the WEB page to enter the VOIP configuration page.
2. Click the General link on the left part of the page to enter the General configuration page for VOIP.
3. Select MGCP from the Signaling protocol box.
4. Click the Apply button to finish the MGCP protocol selection.
Protocol Configuration Click the MGCP Basic link on the left side of the page to enter the MGCP configuration page, where you can configure basic parameters related with the MGCP.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
110 Confidential and Proprietary Information of ZTE CORPORATION
Host Information
Interface: Local interface used by MGCP protocol
Port: Port of local interface used by MGCP protocol
First CA
Domain Name: Domain name of the first CA (Call Agent)
IP Address: IP address of the first CA (Call Agent)
Port: Port of IP address of the first CA (Call Agent)
Second CA
Domain Name: Domain name of the second CA (Call Agent)
IP Address: IP address of the second CA (Call Agent)
Port: Port of IP address of the second CA (Call Agent)
End Point
Chapter 7 - VOIP Configuration
Confidential and Proprietary Information of ZTE CORPORATION 111
Domain Name: Domain name of the MG, allocated configuration according to the CA, default as iad.zte.com.cn
Register Mode: You can select Wildcard register or Individual register.
Name Prefix: Prefix of the MG subscriber line name; defaulted as aaln/
VOIP:VOIP account Index of the MG subscriber
Sequence Number: Serial number of the MG subscriber line name
Enable: Enabling VOIP account; if the corresponding account is not ticked, it will be suspended
Click the Apply button to submit the service type change.
Authentication Configuration Click the MGCP Auth link on the left side of the page to enter the Authentication configuration page, where you can configure authentication parameters related with the MGCP.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
112 Confidential and Proprietary Information of ZTE CORPORATION
EAID
Encryption authentication algorithm ID: 0 (not authenticated) or 1 (authenticated, with the algorithm No. as1)
MGID
MG ID, defaulted as iad.zte.com.cn
KI
Initial key, defaulted as 0123456789ABCDEF
P
DH algorithm index: 1 (96 bytes) or 2 (128 bytes), defaulted as 1
G
DH algorithm base number, defaulted as 2
Click the Apply button to submit the service type change.
Route Select Configuration Click the Route Select link on the left side of the page to enter the Route select configuration page, where you can define routes of two office directions (VOIP/PSTN), PSTN internet telephony access code, dial plan and the default office direction route.
Chapter 7 - VOIP Configuration
Confidential and Proprietary Information of ZTE CORPORATION 113
Route Select
Office: Selecting office direction, including VOIP/PSTN
Office prefix: Office direction prefix
Office dial plan: Office direction dial plan
PSTN setup
IP Code: Internet telephony access code
Prefix Dial Plan: PSTN dial plan
Default office
Setting the default office or route for each inner line
ZXV10 H11X (V1.0)Home Gateway User’s Manual
114 Confidential and Proprietary Information of ZTE CORPORATION
Service Configuration Click the Service Setup link on the left side of the page to enter the Service Setup page, where you can configure the forwarding service, hotline, ring at all Ext., call waiting, CID, CID restriction and polarity reversal billing services.
Phone line to assign service
Selecting the number for the assigned service
Forwarding
Forwarding services, including Unconditional Forwarding, Forwarding when busy, Forwarding when unreachable and Forwarding when no reply
Chapter 7 - VOIP Configuration
Confidential and Proprietary Information of ZTE CORPORATION 115
Hot line
Hotline services, including Instant hot line and Delayed hot line
Others
Other services, including One number (Ring all Ext.) flag, Call waiting flag, CID flag, Call reverse flag and CID restrict flag
Click the Submit button to submit the service type change.
Note: The service setup column contains some disabled items, indicating the current signaling protocol version does not support these services temporarily. Some services are disabled in gray when the user selects a different line, indicating these services cannot be configured at the current line.
Service Configuration Display Click the Service Show link on the left side of the page to enter the Service show page, which displays the service collection of each subscriber line of the device, including PN: the VOIP service number.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
116 Confidential and Proprietary Information of ZTE CORPORATION
Bluetooth MAC Address Configuration Click the Bluetooth MAC Setup link on the left side of the page to enter the Bluetooth MAC Setup page. In this page, you can set the MAC address of the Bluetooth extension number.
Confidential and Proprietary Information of ZTE CORPORATION 117
C h a p t e r 8
Other Operation Tools
Click the Tools button on the WEB page to enter the system tool page for the H110, including operation tools for configuration saving, device restart, default value restoring, PING, user management, version upgrade, configuration export, system log check and configuration.
System Commands Click the System Commands link on the left part of the page to enter the System Commands page, where you can save the current setting, restart the H110 and restore the default configuration.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
118 Confidential and Proprietary Information of ZTE CORPORATION
Click the Save All button to save all your current settings. Once the Restart button is clicked, response of the WEB page will pause for a while because the device restart process requires a certain delay. You must wait for the process to be completed. Click the Restore Defaults button. The system will replace the your current configuration with the default configuration.
Network Continuity Test Tool: PING Click the Ping link on the left part of the page to enter the Ping page, where you can use the Ping command to test the network continuity.
IP Address
IP address
For example: To make Ping test for the host with IP address as 192.168.1.2, click the Submit button. The Ping result will be displayed in the text box at the lower part.
Chapter 8 - Other Operation Tools
Confidential and Proprietary Information of ZTE CORPORATION 119
User Management Click the User Management link on the left part of the WEB page to enter the User Management page, including modification of user right, administrator’s password and ordinary user’s password.
User Right
Selecting the user right Administrator or User
Username
User name, which is admin for super user and public for ordinary user, not modifiable
New Password
New password
Repeat New Password
Confirming the new password
Note: The user with the Administrator rights can completely configure the H110 while the user with the User rights can only perform partial configuration and management of the H110.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
120 Confidential and Proprietary Information of ZTE CORPORATION
Update Gateway Click the Update Gateway link on the left part of the WEB page to enter the Update Gateway page, where you can click the Browse button to select the local stored version and configuration file, click the Update Gateway button to complete uploading of the version and configuration file, or click the Get Configuration button to download the configuration file of the H110 to a local location.
System Log Click the System Log link on the left part of the WEB page to enter the Syslog Configurations page, which provides the system log configuring, displaying, clearing, saving and downloading functions.
System Log Parameter Configuration Click the System Log Settings link to enter the system log parameter configuration page, where you can configure the log level, IP address of the log server and timed saving of log to enable the system to record this level of logs and logs above this level, and select whether to output log to the log server.
Chapter 8 - Other Operation Tools
Confidential and Proprietary Information of ZTE CORPORATION 121
Log Level
Log levels; which are info, notice, warning, error, crit, alert and emerg in the ascending order; After the level is selected, the system will only record this level of logs and logs above this level.
Enable Server
Whether to enable the log server
Server IP
Configuring its IP address if the log server is enabled
Auto Save
Timed saving; after this function is enabled, the current log will be saved to flash every two hours. After the system is powered down, the log record before powering down can be still obtained.
Showing System Logs Click the Logs link on the page to enter the log showing page.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
122 Confidential and Proprietary Information of ZTE CORPORATION
This page provides four buttons. You can click them to implement the following functions:
Refresh
Showing the current latest 20 log records
Save
Saving the current log record to flash
Clear
Clearing the current log record, that is, there is 0 log now
Download
Downloading the current log records to the specified local path
Confidential and Proprietary Information of ZTE CORPORATION 123
C h a p t e r 9
Device Status Check
Click the Status button on the WEB page to enter the device status page for the H110, where you can check PPP connection status, system running time, system CPU/memory usage, IPQoS statistics and statistics of each network interface.
PPPoE Status Information Click the PPPoE Status link on the left part of the WEB page to enter the PPP Connections Status page, where you can view the PPP connection status information: the IP address and online time of the PPP connection.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
124 Confidential and Proprietary Information of ZTE CORPORATION
System Statistics Click the System Status link on the left part of the page to enter the System Information page, where you can view the basic status when the system runs: uptime, memory and CPU usage.
IPQoS Statistics Click the IPQoS Statistics link on the left part of the page to enter the List of IPQoS Statistics page, where you can view the numbers of sent packets/bytes and the numbers of dropped data packets/bytes of different queues under TC dispatching at each interface.
Chapter 9 - Device Status Check
Confidential and Proprietary Information of ZTE CORPORATION 125
Network Statistics Click the Network Statistics link on the left part of the page to enter the network statistics page, where you can see the network statistics of four interface types.
Ethernet Interface Statistics Click the Ethernet link to display the statistics of received/sent packets on the Ethernet interface.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
126 Confidential and Proprietary Information of ZTE CORPORATION
WLAN Interface Statistics Click the WLAN link on the page to display the statistics of received/sent packets on the WLAN interface.
Bluetooth Interface Statistics Click the Bluetooth link on the page to display the statistics of received/sent packets on the Bluetooth interface.
Chapter 9 - Device Status Check
Confidential and Proprietary Information of ZTE CORPORATION 127
USB Interface Statistics Click the USB link on the page to display the statistics of received/sent packets on the USB interface.
Confidential and Proprietary Information of ZTE CORPORATION 129
C h a p t e r 10
Voice Typical Configurations
SIP Typical Configuration Step 1 Select Protocol Type 1. Click the VOIP button on the WEB page to enter the VOIP
configuration page.
2. Click the General link on the left part of the page to enter the General configuration page for VOIP.
3. Select SIP from the Signaling protocol box.
4. Set the Length and Prefix of the internal phone number from Ext. number setup.
5. Whether enabling Two-stage dialing flag.
6. Click the Apply button to finish the SIP protocol selection.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
130 Confidential and Proprietary Information of ZTE CORPORATION
Step 2 SIP Protocol Configuration 1. Click the SIP Protocol link on the left part to enter the
SIP configuration page.
2. Select the uplink interface and port from the Host Information field.
3. Fill in the IP address (or domain name) and port for the first proxy server in the First Proxy field. The IP address (or domain name) and port are provided by the service provider.
4. For the IP address and port in the Second Proxy field, you can use the default values unless the service provider has special requirements.
5. For the phone numbers, passwords and enabling flags configured for the two phone interfaces, the service provider should provide the corresponding values.
6. Click the Apply button to finish the basic SIP protocol configuration.
Chapter 10 - Voice Typical Configurations
Confidential and Proprietary Information of ZTE CORPORATION 131
Step 3 Check Port Status Click the General link on the left part of the page to query the port status. If the both ports are displayed In Service, you can make a call.
Step 4 Save Configuration 1. After successful configuration, click the Tool button on the
WEB page.
2. Click the System Commands link on the left part of the WEB page to enter the System Commands page.
3. Click the Save All button to save all the configuration modifications.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
132 Confidential and Proprietary Information of ZTE CORPORATION
MGCP Typical Configuration Step 1 Select Protocol Type 1. Click the VOIP button on the WEB page to enter the VOIP
configuration page.
2. Click the General link on the left part of the page to enter the General configuration page for VOIP.
3. Select MGCP from the Signaling protocol box.
4. Set the Length and Prefix of the internal phone number from Ext. number setup.
5. Whether enabling Two-stage dialing flag.
6. Click the Apply button to finish the MGCP protocol selection.
Chapter 10 - Voice Typical Configurations
Confidential and Proprietary Information of ZTE CORPORATION 133
Step 2 Configure MGCP Protocol 1. Click the MGCP Basic link on the left part to enter the
MGCP basic configuration page.
2. Select the uplink interface and port in the Host Information field.
3. Fill in the domain name, IP address and port of the first CA server, which are provided by the service provider, in the First CA filed. If the service provider does not provide the domain name, use the default value.
4. Fill in the Domain Name, IP address and port in the Second CA field, you can use the default values unless the service provider has special requirements.
5. Configure the domain name (which is provided by the service provider) for the end port (End Point).
6. Configure the register mode and the name prefix (which are provided by the service provider) for the port (End Point). If the service provider does not provide them, use the default value.
7. Click Apply to finish the basic MGCP configuration.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
134 Confidential and Proprietary Information of ZTE CORPORATION
Step 3 Check Port Status Click the General link on the left part of the page to query the port status. If the both ports are displayed In Service, you can make a call.
Step 4 Save Configuration 1. After successful configuration, click the Tool button on the
WEB page.
2. Click the System Commands link on the left part of the WEB page to enter the System Commands page.
3. Click the Save All button to save all the configuration modifications.
Confidential and Proprietary Information of ZTE CORPORATION 135
A p p e n d i x A
Solutions to Common Problems
Some problems may occur when you install or use the H110 home gateway. Refer to the following suggestions to solve them. If the problem cannot be solved yet, seek support from the service provider.
Problem Recommended Solution
Indicators
The power indicator is still off after the product power is switched on.
Check that the power adapter that accompanies the product is used and that it is connected properly to the H110 and a power source outlet on the wall.
WAN indicator is not lit when the Ethernet cable is connected on the WAN side.
Make sure you are using standard Ethernet twist-pair cable and check if the Ethernet cable connector is connected properly. The Home Gateway WAN interface should be connected to the host using cross cable, and to the router, switch or hub using straight-through cable. Make sure proper cables are used and check if the connectors are secured.
The LAN indicator is off after you connect the Ethernet cable.
Check that the Ethernet cable is properly connected to the PC/HUB and H110, and the power supply to the PC/HUB is turned on.
Network access failure
ZXV10 H11X (V1.0)Home Gateway User’s Manual
136 Confidential and Proprietary Information of ZTE CORPORATION
Problem Recommended Solution
WLAN connection cannot be established.
Check if the RF switch of the WLAN is turned on and if the WLAN indicator is on.
My PC cannot access the Internet.
Use the ping command to check if the LAN-side interface IP address (the default IP address of LANGROUP1 is 192.168.1.1) can be pinged successfully from the computer.
If it can be pinged successfully, check the Ethernet connection and see if the indicator status is normal. If the computer uses a static IP address, check if the default gateway IP address is the IP address of the LAN-side interface connected to the PC, or set the computer to obtain IP address automatically.
Confirm with the carrier that the DNS server allocated to your computer is valid, and confirm if the DNS server address is configured properly, or the computer is set to obtain DNS server address automatically.
Confirm that you have enabled the NAT option in the current WAN connection.
Disable the proxy server setting in the web browser.
A problem may occur on the office-end device of the carrier.
The user cannot log in to the home page of the family gateway.
Disable the proxy server setting in the web browser, or add the LAN address of the home gateway to the list in which addresses are not allowed to use proxy.
My PC cannot browse Internet web page.
Check that the DNS server specified for the PC is correct. You can test if the PC is connected to the DNS server of the provider by using the ping application.
Other application problems
Appendix A - Solutions to Common Problems
Confidential and Proprietary Information of ZTE CORPORATION 137
Problem Recommended Solution
I cannot make a call.
Check firstly if the phone set connected to the PHONE1 or PHONE2 interface of the H110 beeps normally. If yes, it means the phone set is connected properly.
Enter the WEB interface of the H110. Click the VOIP button and check the VOIP Status filed on the General page. Ensure that the phone port is registered, that is, it is in service. If it is not registered, please check the SIP or MGCP configuration by referring to VOIP configuration in Chapter 7.
If the port status is in service, it means the connection is proper. Contact the service provider if you still cannot make a call.
Configuration made at Web page is lost after restart.
Make sure you click the Submit button for confirmation after every modification. After completing corresponding setting, you should click the Save button or enter the Tools page to click the Save All button to save it. Only in this way, can your configured parameters take effect after the H110 is powered on next time.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
138 Confidential and Proprietary Information of ZTE CORPORATION
This page is intentionally blank.
Confidential and Proprietary Information of ZTE CORPORATION 139
A p p e n d i x B
Terms
10Base-T/100Base-TX
Adaptive version of Ethernet standard; 10Base-T employs a twisted pair at the longest length of 100 m, with the highest transmission rate as 10M bps. 100Base-TX is similar to it, but it uses two high-quality twisted pairs, with the highest data transmission rate as 100Mbps.
Adapter
The device connected to a network segment, such as Ethernet, modem card or adapter
Bandwidth
The quantity of data can be transmitted in a fixed length of time
Broadband
Broadcast technology supporting voice, image and data transmission via multiple channels.
DDNS
Network server providing IP setup binding relation of fixed domain name and dynamic change
DHCP
ZXV10 H11X (V1.0)Home Gateway User’s Manual
140 Confidential and Proprietary Information of ZTE CORPORATION
DHCP (Dynamic Host Configuration Protocol) can allocate dynamic IP address to the device on network. Dynamic address means the device can get a different IP address when it connects the network each time.
DNS
DNS (Domain Name Server) translates the name of network node in Internet into the network address.
Domain Name
Domain name identifies one or multiple host names in Internet. For example, the domain name www.yahoo.com represents lots of IP addresses. As one part in the URL, domain name is sued to identify the address of the specific web page. For example, the domain name in http://www.zte.com.cn/index.jsp is www.zte.com.cn.
DoS
DoS (Denial of Service) will be triggered when the PC or network fails to work normally. For example, a hacker may use a false IP address to accumulate quantities of connections and attack the target server.
Ethernet
As one of the most common LAN protocols, it supports bus technology, with the transmission rate range as 10Mbps ~ 1000Mbs.
Explorer
It is an application used to find and display web page, such as Netscape Navigator and Microsoft Internet Explorer.
Firewall
Firewall is the secure barrier between the internal network and external network. Specifically, firewall refers to the combination of a series of components set between different networks or network security domains. By monitoring, limiting and changing data flows of different domains, firewall can screen the information, structure and
Appendix B - Terms
Confidential and Proprietary Information of ZTE CORPORATION 141
running status of the customer network to protect the customer network.
FTP
FTP (File Transfer Protocol) is a protocol widely used on the Internet. It’s a service protocol for transmitting files between hosts on computer networks. FTP supports multiple file types and formats, e.g. text and binary file.
HTTP
HTTP (HyperText Transfer Protocol) defines how information is formatted and transmitted, and the responses of servers and browsers when different commands are used. All the URLs input in the browser address bar start with “http://”.
Hub
Hub is a shared network connection device providing multiple network interfaces. It connects multiple computers in a network and allows data exchange between computers. Sharing means all the ports of a hub share the fixed bandwidth, so the average data transmission rate and efficiency per user (port) is restricted by the number of users.
IEEE
IEEE (Institute of Electrical and Electronic Engineers) is the most famous organization form formulating standards for the electronic and electrical industries.
Internet
As a global network, Internet is used by millions of computers to exchange data, news and viewpoints.
IP Address
IP address is the 32-bit address in TCP/IP used to identity the host. There are five categories of IP addresses (A, B, C, D and E), which are in the 8-bit data format with 4 separations, such as 2.1.1.2.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
142 Confidential and Proprietary Information of ZTE CORPORATION
Each address covers the network address, optional subnet address and host address. Network address and subnet address are combined for routing, host address is used to identify the independent host in the network or subnet, subnet mask is used to get network and subnet information from the IP address. CIDR provides a new approach for resolving IP address and subnet mask, which is also called Internet address.
IPSec
IPSec is a virtual private network protocol widely supported in the industry. The user can set up IPSec VPN to strengthen security and reliability in data transmission.
ISP
ISP (Internet Service Provider) provides Internet access services for the individual and company.
LAN
LAN is a networking environment connecting some communication devices (computers, terminals and printers) in such limited areas as the room and campus.
MAC Address
MAC (Media Access Control) address is the L2 address parameter of network node. Each network device (like the network adapter, hub and switch) has its specific MAC address ID, and L2 switch sends data to the correct destination node by judging the destination MAC address of the packet.
NAT
NAT (Network Address Translation) should be used to translate the private network address into the public network address of WAN port when multiple computers in the LAN share an IP address to access Internet.
Appendix B - Terms
Confidential and Proprietary Information of ZTE CORPORATION 143
PPP
PPP (Point-to-Point Protocol) provides a standard mode for transmitting data message over the point-to-point link (like telephone line).
PPPoE
The PPPoE (Point-to-Point Protocol over Ethernet) of PPP provides point-to-point connection in Ethernet (user authentication required) and sets up the user-oriented session channel.
PPTP
As a virtual private network protocol, PPTP ensures reliable transmission of the PPP encapsulated packet at the IP layer.
Protocol
It specifically refers to communication protocol, which is a set of rules defining the data formats observed between network devices, so they can communicate with each other, transmits, sends and receives data between them.
Router
Router implements connection of different types of networks through the remote WAN. Generally, the ISP line and the peer router of WAN or other network devices are interconnected to realize long-haul data transmission. During data transmission, the path to the destination is selected according to the address information in the packet, and this process is called “routing”.
SPI
SPI (Stateful Packet Inspection) inspects both the packet header and the packet content. It can specify the packet source and destination address and other more information. In addition, the state inspection firewall also closes the port, till the specific port request comes.
ZXV10 H11X (V1.0)Home Gateway User’s Manual
144 Confidential and Proprietary Information of ZTE CORPORATION
TCP/IP
TCP/IP (Transmission Control Protocol/Internet Protocol) is the basic communication protocol cluster of network communication, but it actually defines a group of protocols, not limited to TCP and IP.
TR069
TR069 (CPE WAN Management Technical Report 069) is one of the MAN user terminal management protocols. Based on the TR069 technology standard, the service provider and the home gateway perform security interaction to implement initial configuration and automatic upgrade for the home gateway deice, improve efficiency, and reduce expenses and risks.
UDP
UDP (User Datagram Protocol) defines the computer communications in which packets are exchanged in interconnected networks. This protocol regards the network protocol (IP) as a lower protocol by default. It provides the simplest protocol mechanism for sending information to another user program. This protocol is operation oriented and does not provide submission and duplication protections.
URL
URL (Uniform Resource Locator) means a web address in general. URL indicates a specified information location on a www service program on the Internet. It specifies Internet protocols including HTTP or FTP. It is the unique name convention that identifies specific computers, directories and file locations on the Internet. For example, the URL of ZTE Corporation is http://www.zte.com.cn.
VPN
VPN (Virtual Private Network) provides a mode for securely transmitting data in Internet through access control and encryption. Its actual effect reaches or keeps close to the data transmission security level of private network.
Appendix B - Terms
Confidential and Proprietary Information of ZTE CORPORATION 145
WAN
Although some WANs are private, they are usually deemed as a network for public access.
WEP
WEP (Wired Equivalent Privacy) is a data encryption mode based on 64bit shared key coding, and it is described in the IEEE 802.11b standard.
Confidential and Proprietary Information of ZTE CORPORATION 147
Tables
Table 1 Typographical Conventions ............................................xi Table 2 Mouse Operation Conventions .......................................xii Table 3 Safety Signs .............................................................. xiii