ZXV10 H11X User Manual

ZXV10 H11XHome Gateway User’s Manual

Version 1.0

ZTE CORPORATION ZTE Plaza, Keji Road South, Hi-Tech Industrial Park, Nanshan District, Shenzhen, P. R. China 518057 Tel: (86) 755 26771900 800-9830-9830 Fax: (86) 755 26772236 URL: http://support.zte.com.cn E-mail: [email protected]

LEGAL INFORMATION Copyright © 2005 ZTE CORPORATION. The contents of this document are protected by copyright laws and international treaties. Any reproduction or distribution of this document or any portion of this document, in any form by any means, without the prior written consent of ZTE CORPORATION is prohibited. Additionally, the contents of this document are protected by contractual confidentiality obligations. All company, brand and product names are trade or service marks, or registered trade or service marks, of ZTE CORPORATION or of their respective owners. This document is provided “as is”, and all express, implied, or statutory warranties, representations or conditions are disclaimed, including without limitation any implied warranty of merchantability, fitness for a particular purpose, title or non-infringement. ZTE CORPORATION and its licensors shall not be liable for damages resulting from the use of or reliance on the information contained herein. ZTE CORPORATION or its licensors may have current or pending intellectual property rights or applications covering the subject matter of this document. Except as expressly provided in any written license between ZTE CORPORATION and its licensee, the user of this document shall not acquire any license to the subject matter herein. The contents of this document and all policies of ZTE CORPORATION, including without limitation policies related to support or training are subject to change without notice.

Revision History

Date Revision No. Serial No. Description

2006/07/03 R1.0 Sjzl20060704

ZTE CORPORATION Values Your Comments & Suggestions!

Your opinion is of great value and will help us improve the quality of our product documentation and offer better services to our customers.

Please fill out the following questionnaire and fax to:

(86) 755-26772236;

Or mail to:

Publications R&D Department, ZTE CORPORATION, ZTE Plaza, A Wing, Keji Road South, Hi-Tech Industrial Park, Shenzhen, P. R. China 518057.

Thank you for your cooperation!

4 Confidential and Proprietary Information of ZTE CORPORATION

Your Comments & Suggestions Document Name ZXV10 H11X (V1.0) Home Gateway User’s Manual

Product Version V1.0 Document

Revision Number R1.0

Equipment Installation Date

Presentation:

(Introductions, Procedures, Illustrations, Completeness, Level of Detail, Organization, Appearance)

Good Fair Average Poor Bad N/A

Accessibility:

(Contents, Index, Headings, Numbering, Glossary)


Your evaluation of this document

Intelligibility:

(Language, Vocabulary, Readability & Clarity, Technical Accuracy, Content)


Your suggestions for improvement of this document

Please check the suggestions which you feel can improve this documentation:

Improve the overview/introduction Make it more concise/brief

Improve the Contents Add more step-by-step procedures

Improve the organization Add more troubleshooting information

Include more figures Make it less technical

Add more examples Add more/better quick reference aids

Add more detail Improve the index

Other suggestions

____________________________________________________________________

____________________________________________________________________

____________________________________________________________________

____________________________________________________________________

____________________________________________________________________

# Please feel free to write any comments on an attached sheet.

If you wish to be contacted regarding your comments, please complete the following:

Name Company

Postcode Address

Telephone E-mail

Contents

About this User’s Manual...................................................... xi

Typographical Conventions ...............................................................xi

Mouse Operation Conventions.......................................................... xii

Safety Signs.................................................................................. xiii

How to Get in Touch....................................................................... xiv

Customer Support ......................................................................................xiv

Documentation Support ..............................................................................xiv

Chapter 1..........................................................................15

Product Profile .....................................................................15

Product Overview............................................................................15

Packing List ....................................................................................15

Product Features.............................................................................16

Product Appearance ........................................................................17

System Requirements .....................................................................20

Chapter 2..........................................................................21

System Connections ............................................................21

System Application Environment ......................................................21

Hardware Connection......................................................................21

Connecting LAN Network Interface ...............................................21

Connecting WAN (Ethernet) Network Interface ..............................23


Connecting Telephone .................................................................23

Connection Power Adapter ...........................................................23

Chapter 3.......................................................................... 25

Preparations for Configuration ........................................... 25

Installing TCP/IP .............................................................................25

Configuring TCP/IP..........................................................................27

Checking Configuration....................................................................29

Login .............................................................................................30

General Functions ...........................................................................31

Chapter 4.......................................................................... 35

Basic Configuration ............................................................. 35

LAN Interface Configuration .............................................................35

LanGroup Configuration...............................................................................36

DHCP Client List ..........................................................................................38

DHCP Binding Configuration.........................................................................39

WLAN Interface Configuration......................................................................40

Wireless Network Configuration........................................................40

Basic Configuration of Wireless Network .......................................................40

Wireless Network Sub-interface Configuration...............................................41

WAN Connection Configuration.........................................................47

Configuring Bridge Connection.....................................................................49

Configuring PPPoE Connection......................................................................51

Configuring Static Connection ......................................................................53

Configuring DHCP Connection......................................................................55

Confidential and Proprietary Information of ZTE CORPORATION 7

Chapter 5..........................................................................57

Advanced Configuration ......................................................57

UPnP Configuration .........................................................................57

Static Route and Dynamic Route Configuration..................................58

Static Route................................................................................................ 58

RIP Dynamic Route..................................................................................... 60

SNTP Client Configuration................................................................60

DDNS Configuration ........................................................................61

DNS Server Configuration................................................................64

IGMP Configuration .........................................................................64

Setting IGMP Proxy..................................................................................... 65

Setting IGMP Snooping ............................................................................... 65

Bluetooth Configuration...................................................................66

IPQoS Configuration........................................................................67

Ingress Rate Limit Configuration.......................................................70

SNMP Configuration ........................................................................71

TR069 Configuration .......................................................................73

Chapter 6..........................................................................75

Security Configuration.........................................................75

Firewall By-level Control and SPI ......................................................75

Port Forwarding ..............................................................................77

Port Trigger ....................................................................................78

Remote Access Control....................................................................81

DMZ ..............................................................................................83

Filter..............................................................................................84

Setting Bridge Filter .................................................................................... 84


Setting IP Filter ...........................................................................................85

Setting URL and WEB Filter..........................................................................87

IPSec Configuration.........................................................................92

Setting RSA Key..........................................................................................92

Adding New Connection...............................................................................93

Modifying/Deleting Connection.....................................................................99

Chapter 7........................................................................101

VOIP Configuration ...........................................................101

General Configuration....................................................................101

Voice Configuration .......................................................................103

SIP Configuration..........................................................................105

Protocol Configuration ...............................................................................105

Media Configuration...................................................................................107

MGCP Configuration ......................................................................109

Protocol Configuration ...............................................................................109

Authentication Configuration......................................................................111

Route Select Configuration.............................................................112

Service Configuration ....................................................................114

Service Configuration Display.........................................................115

Bluetooth MAC Address Configuration.............................................116

Chapter 8........................................................................117

Other Operation Tools.......................................................117

System Commands.......................................................................117

Network Continuity Test Tool: PING................................................118

User Management.........................................................................119

Update Gateway...........................................................................120


System Log..................................................................................120

System Log Parameter Configuration..........................................................120

Showing System Logs................................................................................121

Chapter 9........................................................................123

Device Status Check ..........................................................123

PPPoE Status Information ..............................................................123

System Statistics ..........................................................................124

IPQoS Statistics ............................................................................124

Network Statistics .........................................................................125

Ethernet Interface Statistics .......................................................................125

WLAN Interface Statistics ...........................................................................126

Bluetooth Interface Statistics......................................................................126

USB Interface Statistics..............................................................................127

Chapter 10..................................................................129

Voice Typical Configurations.............................................129

SIP Typical Configuration...............................................................129

Step1 Select Protocol Type.........................................................................129

Step2 SIP Protocol Configuration ................................................................130

Step 3 Check Port Status............................................................................131

Step 4 Save Configuration..........................................................................131

MGCP Typical Configuration ...........................................................132

Step1 Select Protocol Type.........................................................................132

Step 2 Configure MGCP Protocol .................................................................133

Step 3 Check Port Status............................................................................134

Step 4 Save Configuration..........................................................................134


Appendix A.....................................................................135

Solutions to Common Problems........................................135

Appendix B.....................................................................139

Terms.................................................................................139

Tables.................................................................................147

Confidential and Proprietary Information of ZTE CORPORATION xi

About this User’s Manual

Typographical Conventions ZTE documents employ the following typographical conventions.

TAB L E 1 TY P O G R AP H I C AL C O N V E N T I O N S

Typeface Meaning

Italics References to other guides and documents; parameter values

“Quotes” Links on screens

Bold Menus, menu options, input fields, radio button names, check boxes, drop-down lists, dialog box names, window names

CAPS Keys on the keyboard and buttons on screens and company name

Constant width

Text that you type, program code, files and directory names, and function names

[ ] Optional parameters

{ } Mandatory parameters

| Select one of the parameters that are delimited by it

Note: Provides additional information about a certain topic

Checkpoint: Indicates that a particular step needs to be checked before proceeding further

Tip: Indicates a suggestion or hint to make things easier or more productive for the reader

ZXV10 H11X (V1.0)Home Gateway User’s Manual

xii Confidential and Proprietary Information of ZTE CORPORATION

Mouse Operation Conventions TAB L E 2 M O U S E OP E R AT I O N C O N V E N T I O N S

Typeface Meaning

Click Refers to clicking the primary mouse button (usually the left mouse button) once.

Double-click Refers to quickly clicking the primary mouse button (usually the left mouse button) twice.

Right-click Refers to clicking the secondary mouse button (usually the right mouse button) once.

Drag Refers to pressing and holding a mouse button and moving the mouse.

Confidential and Proprietary Information of ZTE CORPORATION xiii

Safety Signs TAB L E 3 S AF E T Y S I G N S

Safety Signs Meaning

Danger: Indicates an imminently hazardous situation, which if not avoided, will result in death or serious injury. This signal word should be limited to only extreme situations.

Warning: Indicates a potentially hazardous situation, which if not avoided, could result in death or serious injury.

Caution: Indicates a potentially hazardous situation, which if not avoided, could result in minor or moderate injury. It may also be used to alert against unsafe practices.

Erosion: Beware of erosion.

Electric shock: There is a risk of electric shock.

Electrostatic: The device may be sensitive to static electricity.

Microwave: Beware of strong electromagnetic field.

Laser: Beware of strong laser beam.

No flammables: No flammables can be stored.

No touching: Do not touch.

No smoking: Smoking is forbidden.


xiv Confidential and Proprietary Information of ZTE CORPORATION

How to Get in Touch The following sections provide information on how to obtain support for the documentation and the software.

Customer Support If you have problems, questions, comments, or suggestions regarding your product, contact us by e-mail at [email protected]. You can also call our customer support center at (86) 755 26771900 and (86) 800-9830-9830.

Documentation Support ZTE welcomes your comments and suggestions on the quality and usefulness of this document. For further questions, comments, or suggestions on the documentation, you can contact us by e-mail at [email protected]; or you can fax your comments and suggestions to (86) 755 26772236. You can also explore our website at http://support.zte.com.cn, which contains various interesting subjects like documentation, knowledge base, forum and service request.


C h a p t e r 1

Product Profile

Product Overview Thank you for choosing the ZXV10 H11X home gateway product of ZTE CORPORATION. The ZXV10 H11X home gateway is a modular access gateway in the center of a home network. It links multiple devices through Internet connections and provides users with safe communication, entertainment and storage functions.

Note: H11X are series products of the Home Gateway that include H110 and H111. This guide provides the description of the H110 according to it configurations. The difference between H111 and H110 is that it doesn’t provide correlation function of Bluetooth and Cardbus, which should be identified in the installation and operation.

Packing List The package of the H11X home gateway products should contain the following components:

H110/H111 host

AC-DC power adapter

RJ-45 10/100BaseT Ethernet cable



RJ-11 telephone cable

USB connection cable

Manual and Toolkit CD

Home Gateway Installation Guide

Please contact your dealer if any of the above components is wrong, missing or damaged, and properly keep the package and existing components of the product for replacement requirements.

Product Features 1. Interface features

i. WAN interface

Fast Ethernet interfaces: 1, RJ-45, 10/100Mbps, compliant with standards IEEE802.3 and IEEE802.3u

FXO interface: 1 RJ-11 interface for the access to the PSTN network. Users can receive calls coming from the FXO interface and make calls via the interface. Telephone sets connected to the PHONE interface can access the PSTN network directly when the power is down

ii. LAN interfaces

Fast Ethernet interfaces: 4, RJ-45, 10/100Mbps, compliant with standards IEEE802.3 and IEEE802.3u

WLAN interface: Compliant with IEEE 802.11g/b, with built-in antenna

Bluetooth interface: Support Core V1.2, with built-in antenna

FXS interface: 2 RJ-11 interfaces for general telephone sets. Users can receive calls coming from the VOIP and FXO interfaces and make calls via the interfaces

USB interface: 1 Master (V2.0) & 1 Slave (V1.1)

Expansion interface: One CardBus interface, supporting 16-bit PCMCIA and 32-bit CARDBUS card

Chapter 1 - Product Profile


2. Technical features

The product implements two functions: data access and IP voice.

The data access function is used to exchange and forward data at layers 2 and 3.

The IP voice function is implemented by the related network devices based on the specific signaling protocol adopted.

In addition to providing the above functions, the product gives much consideration to security, QoS and network management, such as multi-level authentication based on devices, users and services, encryption of data channels, implementation of QoS requirements matching the local devices and network according to services with different requirements, network management based on multiple management modes.

Product Appearance Front panel

The front panel contains five indicators, whose meanings are described in the following table.

Indicator Status Description

Fault indicator

Red indicator always on Power-on self-test failure

Green indicator always on The device is powered on and the version is being loaded/upgraded

RUN indicator Off Power off




Green flashing The equipment is in normal operation.

Green indicator always on Physics link connection are normal

Off The device is powered off/the network cable is unconnected.

WAN indicator Green indicator flashing Flashing according to the network traffic

Green indicator always on Working (switched on with the WLAN button)

Off Not working (switched off with the WLAN button)

WLAN indicator

Green flashing Flashing according to the network traffic

Green indicator always on Working (switched on with the Bluetooth button)

Bluetooth indicator

Off Not working (switched off with the Bluetooth button)

Back panel

The back panel provides two RJ-45 LAN network interfaces, one RJ-45 WAN network interfaces, two RJ-11(FXS)telephone interfaces, one RJ-11(FXO) interfaces, one RST reset button, one WLAN button, Bluetooth button, one power socket and four LAN indicators.

Meanings of the LAN indicators on the back panel are defined in the table below:

Chapter 1 - Product Profile



Green indicator always on The physical link connection is normal

Off The device is powered off/the network cable is not connected

LAN 1 2 3 4

Green flashing Flashing according to the network traffic

The following table describes the buttons on the back panel in details.

Button Function Description

WLAN button Press this button for more than 1 s to start or close

Wi-Fi.

Bluetooth button

Press this button for more than 1 s to start or close Bluetooth.

RST Resetting button

Holding on the key for more than five seconds allows you to reset the current configuration to the factory default settings, and the system will then restart automatically (all the four indicators of the LAN port will be lit after restart).

Side panel

The side panel provides two RJ-45 LAN network interfaces, one USB Slave interface, USB Host interface and one CardBus interface.



System Requirements Support of ISP is required. You should be able to get the service

from an ISP via WAN access.

If necessary, an Ethernet hub and some Ethernet cables can be added to construct a small/medium-sized Intranet.

One PC equipped with the 10 Mbps, 100 Mbps or 10/100 Mbps Ethernet adapter

For wireless access, PC need to configure or have a built-in 802.11g/b wireless network adapter.

Each PC to access the network should operate in at least one operating system out of Windows 98/ME/2000/NT/XP or Linux, be correctly equipped with the network adapter driver and TCP/IP protocol, and have correct network settings.

This product is set to use the fixed IP address (Static IP) or the IP address allocated in PPPoE/DCHP dial-up. You also need to set the gateway server address and the DNS server address provided by your ISP.

One PC of the LAN should be equipped with the WEB explorer (Microsoft Internet Explorer 6.0 or above, or Netscape Communicator 4.0 or above should be installed in).


C h a p t e r 2

System Connections

System Application Environment The main application scenario of the ZXV10 H11X home gateway is shown below:

ZXV10 H11XWAN

Hardware Connection Connecting LAN Network Interface Connect the LAN network interface of the H110 to the network adapter of the PC or another network device through a crossover or



straight-through Ethernet cable. You can also connect the H110 or the PC through the WLAN radio frequency signal line or USB cable.

Connect the local network via an Ethernet cable.

The four LAN interfaces of the H110 can auto-negotiate the connection speed of the 10 Mbps/100 Mbps Ethernet and the half-duplex/full-duplex transmission mode.

Use a cross-over or straight-through Ethernet cable to connect any LAN interface of the H110 to your PC.

You can also connect an LAN interface of the H110 to the Ethernet hub or the Ethernet switch, and then connect your PC or another network device to the hub or the Ethernet switch.

Connect the local network through WLAN.

Install a wireless network adapter on your PC and then connect the local network through the IEEE 802.11g/b-based WLAN. Try to place the H110 in the center of the wireless center to achieve the optimal coverage. Make sure that you have placed the H110 in the idealist location in the whole office or house.

When connecting the local network via WLAN, make sure that the WLAN button on the rear panel of the H110 is switched on.

Connect your local network through USB cables.

Connect your PC and the USB Slave interface of the H110 through the USB connection line and install the driver of the USB network adapter on the PC. In this way, you can access the local network through USB just as the way you use a wired Ethernet.

Warning: Be sure not to insert the telephone line into any RJ-45 network interface. Otherwise, the H110 will be damaged. Use Ethernet cables with RJ-45 connectors in compliance with the CE standard.

Chapter 2 - System Connections


Connecting WAN (Ethernet) Network Interface Insert an Ethernet twist-pair cable with RJ-45 connector into the Ethernet WAN interface of the H110, another end connect to the carrier network.

Connecting Telephone Connect a telephone to the telephone interface of the H110 through the twisted pair with an RJ-11 connector.

Connection Power Adapter Use the power adapter to connect the power supply to the H110 and ensure that the running indicator on the front panel of the H110 is on.

Warning: Please use the power adapter provided by ZTE. Using of the wrong power adapter may cause damages to the device.


C h a p t e r 3

Preparations for Configuration

Normally, your ISP has already configured the H110, so you can directly connect and use it. However, you may need to configure it in some special cases. Now, you need to take the following configuration steps:

Use one crossover or straight-through Ethernet cable to connect a PC directly to the Ethernet port of the H110.

Confirm that the TCP/IP settings of the PC are correct.

Disable any running firewall or security software.

Disable the proxy server setting of the explorer.

Get some data from your service provider. You can consult your service provider for details.

Installing TCP/IP If your PC has not yet been installed with TCP/IP, just install it in the following steps.

Let us take the Ethernet interface under Local Connection in the Windows 2000 system for an example.

Click Start, select Settings, and then click Network and Dial-up Connections.



Double click the Local Connections icon and then click the Properties button in the Local Area Connection Properties window.

Click the Install button and then double click the Protocol icon.

Select Internet protocol (TCP/IP) and then click OK to finish the protocol installation.

Chapter 3 - Preparations for Configuration


Configuring TCP/IP For access to the Internet through the H110, you must configure the subnet of the PC in the LAN to be the same as that of the H110. The default network setting for H110: IP address: 192.168.1.1; subnet mask: 255.255.255.0; default gateway: 192.168.1.1.

If your PC is not configured with TCP/IP previously, use “Use the following IP address” option to configure it. Follow the steps below:

Double click the Local Connections icon, and then select Internet protocol (TCP/IP) from the Local Area Connection Properties window.

Then, click the Properties button.



In the Internet Protocol (TCP/IP) Properties dialog box, click the Use the following IP address check box, specify the local IP address in the same network segment with the LAN interface address of the H110, that is, 192.168.1.x (x is in the range of 2~254). For example, IP address is 192.168.1.2, subnet mask is 255.255.255.0, and the default gateway setting is 192.168.1.1.

Click the OK button to save the setting.

Note: The settings are subject to your network requirements. Be sure to perform the above configurations for the first access to the WEB configuration page of the H110.



Checking Configuration After the above preparations, switch on the H110. You will see that the power indicator is on. At the same time, the H110 executes the device start-up process and detects all the connected devices. From the indicators, you can see the devices of which network interfaces are successfully connected with the H110. The indicator corresponding to the network interface with successful device connection will be always on.

In addition, you can use the Ping command to check the network connection between the PC and the H110 by taking the following steps:

Click the Start button, and select Run.

Key in cmd in the pop-up Run dialog box and then press Enter.

Key in ping 192.168.1.1 at the cursor position in the pop-up interface and then press Enter. If the following information appears:

Pinging 192.168.1.1 with 32 bytes of data:

Reply from 192.168.1.1: bytes=32 time=2ms

TTL=64

It indicates that the PC has been successfully connected to the H110.

If the following information occurs:

Pinging 192.168.1.1 with 32 bytes of data:

Request timed out.

It indicates an error occurs in the installation. Please check the following items in turn:



Whether the Ethernet cable between the H110 and your PC has been correctly connected

Whether the network adapter driver on your PC is correctly installed

Whether the indicators of the LAN interfaces on the H110 and the network adapter in your PC are all on

Whether the TCP/IP in your PC is correctly configured

If the default IP address of the H110 is 192.168.1.1, the IP address of your PC must be within the range from 192.168.1.2 to 192.168.1.254, the subnet mask should be 255.255.255.0, the default gateway should be 192.168.1.1 and the DNS server address should be 192.168.1.1.

Login The H110 provides configuration tools based on the WEB interface to facilitate configuration and management through the WEB explorer. Open the IE, enter https://192.168.1.1 (the default IP address of the LAN interface of the H110) in the address bar and then press Enter to display the following login page.



Input the username and password (which are both defaulted as admin), and click the Login button to enter the general function interface for device, and learn description of each configuration and device information.

Note: The H110 supports WEB configuration in the HTTPS encryption mode, so you should enter https://192.168.1.1 in the address bar. Then the system will prompt you to confirm whether the certificate provided by the WEB server is correct. If yes, you will enter the WEB configuration page. If

you cannot open the device configuration web page, check the proxy server setting of the browser. Select to disable the proxy server or do not use proxy server for device IP address.

General Functions The general function interface displays description of all the configuration contents, including Setup, Advanced, Security, VOIP, Tools and Status tab pages. It also displays the basic status information of the device, including the system software version number, version date, system uptime, registration status of VOIP account, ext. number, Bluetooth number and WAN link status.



Click the Log Out button at the right upper corner on the interface to exit user login and return to the login page.



This page is intentionally blank.


C h a p t e r 4

Basic Configuration

Click Setup on the WEB page to enter the basic configuration of the H110. The basic configuration covers LAN interface configuration, Wireless (IEEE 802.11g/b) configuration and WAN connection configuration.

LAN Interface Configuration Click the LAN Configuration link on the left part of the page to enter the LAN interface configuration page, where you can configure the related information of four LAN interfaces of the H110.



Note: You can click the Save button at the right upper corner on the page to save the current configuration information. To ensure all the configuration information will not be lost after powering off, it must be saved. Click Log Out button at the right upper corner on the interface to exit user login and return to the login page.

LanGroup Configuration Click the LanGroup1 link in the LAN Configuration table to enter the LanGroup1 Configuration page, where you can set the protocol and network layer related information in the basic LAN Group.

IP Address

IP address of the LAN group (interface subnet)

NetMask

Chapter 4 - Basic Configuration


Subnet mask of the LAN group

Enable STP

Enabling STP (Spanning Tree Protocol); STP can provide path redundancy. Even if abnormal loop is caused by multiple effective paths in the network and the network gets faulty, STP can be used to ensure one effective path in two terminals.

Enable DHCP

Enabling/disabling DHCP

Using DHCP Server

Enabling the device as DHCP server function; IP address can be allocated to the client.

Start IP

Start IP address allocated by the DHCP Server

End IP

End IP address allocated by the DHCP Server

NetMask

IP subnet mask allocated by the DHCP Server

Gateway

Gateway IP address used by the DHCP client

Domain

Domain name used for DHCP management

DNS

Domain name server address

NTP Server

Address of the NTP server

Lease Time



Lease time (Unit: day), which is the time during which the DHCP server leases the IP address

Using DHCP Relay

Enabling/disabling the DHCP relay service

Server IP

IP address of the DHCP Server

WAN

Uplink interface connection

DHCP Client List Click the DHCP Clients link to enter the page for listing DHCP clients, that is, showing the related information of the IP addresses leased.

MAC Address

MAC address of DHCP client

IP Address

IP address allocated to DHCP client



Expires in

If this IP address is of static binding in the residual lease time, then the following content is displayed: Infinity.

DHCP Binding Configuration Click the DHCP Binding link to enter the DHCP binging configuration page. You can configure MAC and IP address binding, set up a DHCP binding table, and map the client MAC address and IP address. The DHCP Server will allocate an IP address to your PC according to the configured binding relation between MAC and IP addresses, and it will never expire.

For example: you can configure the MAC address as 00-11-85-04-25-e4 and the IP address as 192.168.1.100, indicating that the DHCP Server will allocate the IP address 192.168.1.100 to the host corresponding to this MAC address.

Note: The IP address must belong to the address pool provided by the DHCP Server of this LAN group.



WLAN Interface Configuration For WLAN interface configuration, refer to the Basic Configuration of Wireless Network in Basic Configuration of Wireless Network.

Wireless Network Configuration Basic Configuration of Wireless Network Click the Wireless link on the left part of the interface to enter the basic WLAN configuration interface, where you can configure the following parameters:

Enable Wireless RF

Enabling or disable WLAN sub-interface.

Mode

Selecting the wireless communication mode; You can select 802.11b or 802.11g.

Channel

Wireless channel number; you can select a proper channel according to the country code.



Zone

The used country or region

Beacon Interval

Beacon interval (ms)

Tx Rate

Configuring the data transmission power of the device; Select a lower data transmission rate to achieve the maximum value of the wireless communication range. The default value is Auto.

Tx Power

Transmitting power grade

Enable WLANx

Enable or disable a WLAN sub-interface (up to 4 WLAN sub-interface can be enabled at the same time).

ESSID

Wireless network service area ID, consisting of up to 32 characters with case sensitivity and used to control wireless network access; This value must match SSID of any access point for communication. Otherwise, the system cannot be accessed (the system supports enabling of four wireless network sub-interfaces at most).

Wireless Network Sub-interface Configuration Click the LAN Configuration link on the left side of the page to enter the LAN Configuration page. Click the wireless interface name link to enter the related configuration page of wireless network sub-interface.

1. Basic information display of wireless network sub-interface

After entering the configuration page of wireless network sub-interface, click the Basic link at the upper part of the



page to enter the basic information page of wireless network sub-interface, which displays the ESSID and status information of the corresponding wireless network sub-interface.

2. Security setting for wireless network sub-interface

After entering the configuration page of wireless network sub-interface, click the Security link at the upper part of the page to enter the security configuration page of wireless network sub-interface.



Hide ESSID

Enabling/disabling ESSID broadcast

None

Encryption not enabled

WEP

There are three kinds of WEP key lengths: 64/128/152 bit. In the majority of applications, the 64-bit WEP key is sufficient. To strengthen security, you can select the 128-bit or 152-bit key length.

Select the format (Hexadecimal or alphanumeric) corresponding to the key, and configure key values (Key1~Key4) for WEP encryption, and select one for configuration.

Select the authentication mode between wireless devices: Shared Key or Open System.



WPA encryption

You can select the encryption algorithm: TKIP, AES or Auto.

You can set the multicast key update interval: Group Key Interval.

Select the PSK mode encryption (without authentications) or 802.1x authentication encryption. For the PSK mode, just add the corresponding password. For 802.1x authentication encryption, add the IP address and keyword of the authentication server.

Jump Start

You can also select the encryption mode JumpStart that can be used simply. Just simply submit this function to connect our home gateway with the Station with JumpStart function.



3. User management for wireless network sub-interface

After entering the configuration page of wireless network sub-interface, click the Management link at the upper part of the page to enter the user management page of wireless network sub-interface, where you can configure the WLAN Station MAC address filtering rule and check the information of all the WLAN Stations associated with this wireless network sub-interface.

Configuring MAC address filtering rule

You can set the MAC address-based access mode to control the connected Station.



Allow: Allowing the following MAC address associations

Ban: Banning the following MAC address associations

Disable Access List: Not enabling this function

MAC Address: MAC address to be controlled

Note: It only functions for the unassociated Station, but not the associated Station.

Checking the currently associated Stations

Check the information of all the WLAN Stations associated with this wireless network sub-interface.



WAN Connection Configuration To configure WAN connections, including Bridge, PPPoE, Static and DHCP, click the “WAN Connection” link on the web page. This product provides the support for multiple WAN connections in one physical link besides the support for a single WAN connection. When the support for multiple WAN connections is enabled, the uplink message will contain VLAN label and priority field to identify different services and priorities.

The following examples of PPPoE connection describe the WAN connection configuration pages when the support for single connection or multi-connection is enabled.



A

B

C

A

B

C

The WAN Connection page includes areas A, B and C. Area A is used to configure the global parameters for the WAN connection. Area B configures the compulsory parameters for any type of WAN connection. Area C configures specific parameters for different types of WANs. The following



sections introduce the settings in Area A and then other settings in Areas B and C as per the type of WAN connection.

Settings in Area A may affect every WAN connection in the current system. These parameters have the following meanings:

Enable multiple WAN connections

Whether to support enabling multiple WAN connections.

Link Speed/Duplex Mode:

Working mode of the WAN Ethernet interface

Current Link Status:

Current link status on the WAN Ethernet interface

Caution: You’d use the Enable multiple WAN connections option in Area A with caution. If you change the option setting (change between enable and disable) and click the Apply button, all the WAN

connections you configured will be cleared directly and an alert will appear on the page.

Configuring Bridge Connection Click the WAN Connection link on the left part of the WEB page and select Bridge in the Type box to configure the bridge connection. The configuration window when the multiple WAN connections or single connection is enabled is as shown below.



Name

Connection name

Type

Connection type

VLAN ID

VLAN label in the Ethernet packets on the WAN interface, used only for multiple WAN connections.



Priority

Processing priority, used only for multiple WAN connections.

LAN group

Associated LAN group

Configuring PPPoE Connection Click the WAN Connection link on the left part of the WEB page and select PPPoE in the Type box to configure the PPPoE connection. The configuration window when the multiple WAN connections or single connection is enabled is as shown below.



Name

Connection name

Type

Connection type

NAT

Enabling/disabling NAT

VLAN ID

VLAN label in the Ethernet packets on the WAN interface, used only for multiple WAN connections. Range: 1~4094.

Priority

Priority of processing, used only for multiple WAN connections. Range: 0~7.

Username

Authenticated user name

Password

Authenticated password

Authentication type



Authentication protocol type

Mode

Dialing mode, which can be Always on, OnDemand or Manual.

Idle Timeout

Idle time

Default Gateway

Whether to add the peer IP of PPP dialing as default gateway

Configuring Static Connection Click the WAN Connection link on the left part of the WEB page and select Static in the Type box to configure the Static connection. The configuration window when the multiple WAN connections or single connection is enabled is as shown below.



Name

Connection name

Type

Connection type

NAT


VLAN ID


Priority

Priority of processing, used only for multiple WAN connections.

IP Address

Interface IP address

Mask

Subnet mask

Default Gateway



Default IP address of gateway

DNS

DNS server IP address

Configuring DHCP Connection Click the WAN Connection link on the left part of the WEB page and select DHCP in the Type box to configure the DHCP connection. The configuration window when the multiple WAN connections or single connection is enabled is as shown below.



Name

Connection name

Type

Connection type

NAT


VLAN ID


Priority

Priority of processing, used only for multiple WAN connections.


C h a p t e r 5

Advanced Configuration

Click the Advanced button on the WEB page to enter the advanced configuration for the H110, including UPnP (Plug and Play) configuration, route configuration, SNTP client configuration, DDNS (Dynamic Domain Name System) configurations, DNS Service configuration, IGMP Snooping and proxy configuration, Bluetooth configuration, IPQoS configuration, ingress rate limit configuration, SNMP configuration and TR069 configuration.

UPnP Configuration Click the UPnP link on the left part of the WEB page to enter the UPnP page, where you can select whether to enable the UPnP function of the H110 and designate the user side interface (LAN Connection) and the network side interface (WAN Connection) of the UPnP function.

The UPnP function is used to support zero configurations, “invisible” networking and auto discovery of various device types of numerous vendors. This means that one device can dynamically join a certain network, obtain an IP address, report its own functions and learn the existence and functions of the other devices.



Enable UPnP

Enabling switch the UPnP function

WAN Connection

Selecting the WAN side connection interface

LAN Connection

Selecting the LAN side interface

Static Route and Dynamic Route Configuration Click the Route link at the left side of the page to enter the route configuration page of the H110, which is used to configure static route and RIP dynamic route.

Static Route Click the Static Route link to enter the Static Route page, which displays the static route information list of the H110. You can configure a new route entry, or modify and delete the existing route entry.

Chapter 5 - Advanced Configuration


Destination Network Address

Destination network IP address

Destination NetMask

Destination subnet mask

Next Hop IP

Next hop IP address

If you need to add a new route, designate the destination network ID, subnet mask and next hop IP, and then click the Add button. Once a route is added, the route list will be refreshed.

If you need to modify an existing route, select its check box from the route list. Its configuration is shown in the setting box. You can modify the next hop IP address and click the Modify button.

To delete an existing route entry, select it from the displayed route list, and then click the Delete button. The route is deleted, and the route list is refreshed again.



RIP Dynamic Route Click the RIP link in the Routing Setup page to enter the configuration page of the dynamic routing protocol RIP, where the route table information of the system is shown.

To enable the RIP function of the H110, select Enable RIP. Then, you can configure the Version and Interface parameters.

Version

RIP protocol version

Interface

The network interface for RIP enabling; for the WAN side interface, RIP only configured at the interface without NAT enabled.

SNTP Client Configuration Click the SNTP link on the left part of the page to enter the SNTP function configuration page, where you can configure the related information of the SNTP client on the H110 to implement time synchronization with the time server.



Enable SNTP

Enabling the SNTP client function

Time Zone

Setting a time zone

Primary Server Address

IP address or domain name of the SNTP server

Secondary SNTP Server

IP address or domain name of the SNTP standby server

Poll Time

Poll time interval, in seconds, indicating the interval of server time synchronization, with the setting range from 3600 s (1 hour) to 86400 s (24 hours)

DDNS Configuration Click the DDNS link on the left part of the WEB page to enter the DDNS Setup page, where the user can select whether to enable DDNS service.



The DDNS (Dynamic Domain Name System) can be used to enable the host with a dynamic IP address to provide the domain name service. For example, suppose the host dynamically obtains an IP address via xdsl dialup or via the DHCP server and externally provides the domain name service. After the DDNS is applied to this host, the IP address change of this host will not affect users’ access to the domain name and users will not feel such IP address change of this host.

This product supports two types of DDNS domain name protocols:

GNUDIP (http://gnudip2.sourceforge.net/)

DDNS3 (http://www.ddns.nu)

The two protocols can be used at the same time and selected from the drop-down box.

DDNS Protocol

Switching to display the two DDNS protocols

Enable DDNS

Whether to enable the DDNS function of this protocol

Server

Server address to be used



If DDNS3 protocol is used, this server is a domain name, defaulted as ns.ddns.nu.

If HTTP protocol of GNUDIP is used, this server address is a URL, defaulted as http://ns.eagleeyes.com.cn/cgi-bin/gdipupdt.cgi.

Username

Username

Password

Password

Handle

Binding any configured character string with the corresponding IP address, valid only when the DDNS3 protocol is used

Domain

Domain name corresponding to this user, valid only when the GNUDIP protocol is used

WAN Connection


Note: Username and password are obtained through the registered DDNS server, and different protocols use different modes:

The DDNS3 protocol configures a Handle in the DDNS server through them, and it is bound with an IP address and also corresponds to a domain name (can be set). To configure this item, you should log in to http://www.ddns.nu to register and get the username, password and Handle.

The GNUDIP HTTP protocol is bound with an IP address through them, and it corresponds to a domain name at the same time.

Both of the above protocols should apply for a registration account from its own service provider to get such information as the username and password.



DNS Server Configuration Click the DNS Service link on the left part of the WEB page to enter the DNS Configuration page, where you can configure static DNS record.

Domain Name

Domain name

Host Name

Host name

IP Address

IP address of the host

IGMP Configuration Click the IGMP link on the left part of the WEB page to enter the IGMP Proxy configuration page, where you can select whether to enable IGMP Proxy and IGMP Snooping services.



Setting IGMP Proxy The IGMP Proxy function monitors and filters to control multicast data forwarding at L3 of the network. The user can select whether to enable the IGMP Proxy service and specify the network-side interface (WAN Connection) of the IGMP Proxy function.

Enable IGMP Proxy

Enabling the IGMP Proxy function

WAN Connection


Setting IGMP Snooping The IGMP Snooping function monitors and filters to control multicast data forwarding at L2 of the network.

Enable IGMP Snooping

Enabling the IGMP Snooping function



Bluetooth Configuration Click the Bluetooth link on the left part of the page to enter the Bluetooth configuration page. In this page, you can configure the Identity of the H110 Bluetooth interface and decide whether to enable the Personal Area Network (PAN) service of the Bluetooth interface.

Identity

Indicating the identity of the Bluetooth interface.

PIN

Personal Identification Number, verification code of Bluetooth module

Authentication

Whether to enable authentication function of PIN code.

Service

PAN: Indicating the switch of the Personal Area Network service.

CTP: Cordless Telephone



IPQoS Configuration Click the IPQoS link on the left part of the page to enter the IPQoS configuration page. Select to enable the IPQoS function at a WAN side interface, and configure the relevant IPQoS policy. Configure the IPQoS rule and relevant parameters of the queue dispatching algorithm based on priority and weight. You can define different priorities for the data flows of different applications to send the data at a higher priority first, and limit bandwidth for the specified data flow to ensure the bandwidth of other data flows.

WAN Connection

Selecting a WAN connection as the egress interface bound with the IPQoS

Enable IPQoS

Enabling switch for IPQoS

Link Speed

Uplink bandwidth of the WAN connection in the unit of kbps

Borrow



Whether to allow borrowing bandwidth from other idle queues; Yes/No: allowing borrowing/barring borrowing

RED

Whether to enable the RED (Random Early Detection) algorithm; Yes/No: Enable/disable

Default/Low/Medium/High/Critical/Realtime/Premium/ Urgent

They correspond to eight different priority queues. Default is the lowest priority, and Urgent is the highest priority. The Urgent queue is directly allocated to VOIP, not allowing the user to configure it. For the other seven queues, the drop-down list boxes behind specify the weight proportion corresponding to each priority, and the sum of seven weight values should be 100%.

Note: When there is VOIP voice flow at a moment, then the available maximum bandwidth for the seven queues Default ~ Premium = total bandwidth – the bandwidth occupied by VOIP.

IPQoS is disabled unless the firewall security level is set to Medium or High.

Click the Add button to enter the IPQoS Rule page, where you can define the data flows based on the source/destination IP address, source/destination port number and protocol type, and put them into a certain priority queue.



Protocol

Configuring an internally designated protocol, in the range of TCP, UDP and ICMP

Source IP Address

Source IP address of the data flow

Destination IP Address

Destination IP address of the data flow

Source Port

Source port of data flow; the configuration format of this item can be xx or xx: xx.

Destination Port

Destination port of data flow; the configuration format of this item can be xx or xx: xx.

Interface

In-interface of the data flow



Outer face

Out-interface of the data flow

DSCP

DSCP value of data flow, in the range of 0~69

Set Mark

Whether to set mark for the data flow

Priority

Priority of the data flow

Ingress Rate Limit Configuration Click the Ingress Rate Limit link on the left part of the page to enter the Ingress Rate Limit configuration page. Ingress rate limit can limit the incoming data flow rates of all the interfaces. You can enable ingress rate limit at an interface, configure the incoming data flow protocol, source address/port and destination address/port, and control the rate of this data flow.

Interface

Network interface, on which ingress rate limit is enabled



Protocol

Protocol type of incoming data flow, in the range of ANY, TCP, UDP and ICMP

Source IP Address

Source IP address of the incoming data flow

Source Netmask

Source address mask of the incoming data flow


Destination IP address of the incoming data flow

Destination Netmask

Destination address mask of the incoming data flow

Source Port

Destination port of the incoming data flow

Destination Port

Destination port of the incoming data flow

Rate

Controlling rate of this data flow, in the unit of kbps(kbit/s)

Note: As configuring the ingress rate limit rule, if you select ICMP for Protocol, then Source Port and Destination Port cannot be configured.

SNMP Configuration As the Simple Network Management Protocol widely adopted on Internet, SNMP is set up over the UDP in TCP/IP protocol cluster to manage the network through the highly efficient NMS, provide wireless connection service, and timely report and handle network



faults. Click the SNMP link on the left of the WEB page to enter the SNMP Configuration page, where you can set the SNMP read/write community string, enable or disable the SNMP Agent of the H110 and set the information such as Trap address.

Enable SNMP Agent

Enabling SNMP agent function

Enable SNMP Trap

Enabling SNMP alarm sending function

Name

Device name

Location

Name of the device administrator; the default address is Nanjing, P.R.China.

Contact



Contact mode of the device administrator; the default contact person is ZTE Corporation.

Community Name

Read/write community string name of SNMP

Access Right

Access right of the SNMP read/write community string

Destination IP

Destination IP address for receiving the SNMP alarm

Trap Community

Community string name of SNMP alarm

Version

Version number of SNMP

TR069 Configuration Click the TR069 link on the left part of the Web page to enter the TR069 Configurations page, where you can configure URL and account for connection of CPE and ACS.



ACS URL

ACS URL address

Username

ACS username

Password

ASC password

CPE URL

CPE URL address

Username

CPE username

Password

CPE password

Default WAN

Default WAN connection


C h a p t e r 6

Security Configuration

Click the Security button on the WEB page to enter the H110 security configuration, including basic control of firewall, port forwarding, port trigger, service control, DMZ, IP/bridge filter, WEB and URL filter and IPSec connection.

Firewall By-level Control and SPI Click the General link on the left part of the interface to enter the firewall by-level control and SPI setting page, where the user can configure the firewall security level and whether to enable the status packet check accelerating function.



High

The firewall level is high. In this case, only the external access defined by the port mapping rule and access control rule can pass, the inner network is allowed to access the outer network, and the anti-attack function is also enabled.

Medium

The firewall level is medium. In this case, bilateral access of the inner network and outer network is allowed, but the set IP filtering rule that takes effect will restrict the corresponding access.

Low

The firewall level is low. In this case, all the access of the inner network and outer network is allowed. Note that all the filtering rules and IPQoS are disabled unless the firewall security level is set to Medium or High.

SPI

Chapter 6 - Security Configuration


Selecting Enable or Disable to enable or disable the status packet check function; it can be enabled to speed up the packet passing the H110.

Port Forwarding Click the Port Forwarding link at the left part on the page to enter the Port Forwarding page, where you can configure a port access redirection policy with the WAN side IP address as the source and the LAN side IP address as the destination. You can configure at most 16 port forwarding entries. Port forwarding is used for the host of the WAN to access the server of the LAN as the client.

Enable Port Forwarding

Enabling the port forwarding function

Name

Name of port forwarding

Protocol

Selecting the protocol name; The options are TCP and UDP.

WAN Connection



Corresponding to the established WAN connection

WAN Port Range

Destination port range of the WAN side

LAN IP Address

IP address of the LAN side

LAN Port

Corresponding port of the LAN side

For example, you can configure a port forwarding entry with PPPOE used as the WAN connection, the destination port range of the WAN side being 2030 to 2050, the host IP address of the LAN being 192.168.1.2 and the port number being 23. In this way, the host of the WAN can redirect to the Telnet service of the host of the LAN whose IP address is 192.168.1.2 by accessing a port whose port number ranges from 2030 to 2050.

On the Port Forwarding page, you can enable the default configuration, set the host IP address of the LAN and specify the network-side interface so as to redirect access requests of the ports at the WAN side to a specified LAN host.

Click Edit to edit the default number, enable Port Forwarding, specify the WAN connection to pppoe and set the IP address to of LAN host.

Port Trigger The port trigger function enables the PC in LAN to open the specific port number of this device, so the application server on Internet can access the server in LAN through the specific opened port. Click the Port Trigger link on the left part of the WEB page to enter the Port Trigger page, which includes some default port information of Port Trigger. This function can configure up to 100 Port Trigger entries and validate up to Port Trigger entries at the same time.



Application Name

Name of the application using the port trigger function

Trigger Protocol

Displaying the protocol of trigger connection

Trigger Start

Displaying the port where trigger connection starts

Trigger End

Displaying the port where trigger connection ends

Open Protocol

Displaying the protocol of forwarding connection

Open Start

Displaying the port where forwarding connection starts

Open End

Displaying the port where forwarding connection ends

Status

Displaying the status of the current trigger application



Action

Configuration button used to validate or cancel the current application

Add

Adding a group of trigger application configurations

Modify

Modifying the current trigger application configuration

Delete

Deleting the current trigger application configuration

Reset

Restoring the current trigger connection to the ex-factory status

The user can click the Add or Modify button to enter the property setting interface for port trigger.

Name

Configuring the name of the current trigger application

Trigger



Trigger connection parameter; selecting the protocol type

Opened

Forwarding connection parameter; selecting the protocol type

Start Port

Setting the start port

End Port

Setting the end port

Submit

Submitting to validate the current configuration

Back

Canceling the current configuration

Remote Access Control Click the Service Control link on the left part of the WEB page to enter the Service Control page, where you can configure a policy to control use of the specified IP address to access the specific service of the H110. Services of the H110 refer to TELNET, FTP, SNMP, HTTPS and HTTP. The control does not act on the ping operation. At most 16 IP address entries can be configured for access control.



Enable WAN Access

Enabling the host of the WAN to access the services of the H110

Mode

Selecting black list or white list

IP

IP address of the host subject to access control

The default setting only allows hosts at the LAN side to access services of the H110. If Enable WAN Access is set, then hosts of the WAN side can also access the services. The parameter Mode is only effective for the configured IP address. If it is set to white list, only the configured IP address will be allowed to access services of the H110. If it is set to black list, the configured IP address will not be allowed to access services of the H110.

For example, configure a policy that allows the IP address 192.168.1.2 to access services of the H110.



DMZ Click the DMZ link on the left part of the WEB page to enter the DMZ page, where you can set a network segment or a host as the DMZ zone. The host in the DMZ zone cannot access the LAN hosts not in the DMZ zone and the WAN network, but the hosts in the DMZ zone can act as servers for the other zones. It is recommended that the host in the DMZ zone can be set to the FTP or WEB server to ensure security of the LAN side hosts not in the DMZ zone. Then the specific policy can be set in the Port Forwarding interface to redirect the request of the WAN side host for the FTP service of the H110 to the FTP or WEB server in the DMZ zone.

Enable DMZ

Enabling DMZ host selection

LAN

LAN side access connection

IP

IP address setting of the DMZ host

Mask



If you have set the IP address of a certain network segment of the LAN to the DMZ zone, you must set the corresponding subnet mask here.

For example, you can set host 192.168.1.5 as a host of the DMZ zone.

Filter Setting Bridge Filter Click the Bridge Filter link on the left part of the WEB page to enter the Bridge Filter page, where you can configure an access filter rule based on the source MAC address and the destination MAC address. You can set up to 12 bridge filter entries.

Enable Bridge Filter

Enabling the bridge filter function

Name

Name of the bridge filter

Protocol



Selecting name of the protocol; The options include ANY (which indicates any protocol), IP, ARP, PPPoE SESSION, PPPoE DISCOVERY and RARP.

Source Mac

Source MAC address setting

Destination Mac

Destination MAC address setting

For example: configure the source MAC address as 00:d3:c4:17:08:ba, destination MAC address as 00:2d:30:51:11:23, and protocol as ANY, and then click Add to add an entry. You can also select an entry to be edited or deleted, and then click Submit to edit or delete it.

On the Bridge Filter page, you may choose to only configure the source MAC address for the filter.

Setting IP Filter Click the IP Filter link on the left part of the WEB page to enter the IP Filter page, where you can define a port access filter policy by using the IP address of the ingress interface of the H110 as the source and the IP address of the egress interface as the destination. At most 16 IP filter entries can be configured.



Enable IP Filter

Enabling the IP filter function

Name

Name of the IP filter

Protocol

Selecting name of the protocol; The options are ANY (which indicates any protocol), TCP, UDP and ICMP.

Source IP Address

Source IP address

Source Netmask

Source address subnet mask


Destination IP address

Destination Netmask

Destination address subnet mask



Destination Port Start

Start port no. of the destination address

Destination Port End

End port no. of the destination address

Interface In

Ingress interface of the source address

Interface Out

Egress interface of the destination address

For example, we can configure a policy that prohibits FTP access by using the host IP address of 192.168.1.2 on langroup1 as the source and the IP address of 192.168.2.13 on langroup2 as the destination. Then, set Source IP Address as 192.168.1.2 and Destination IP Address as 192.168.2.13, select TCP for Protocol, fill in 21 for both the start port and end port, select langroup1 for Interface In and langroup2 for Interface Out, name this rule, select the Enable IP Filter option, and then click the Add button.

Setting URL and WEB Filter Click the Web Filter link on the left part of the WEB page to enter the Web Filter page, which consists of the Filtering Rule and Filtering Policy parts used to set rule (validation condition) and policy (filter condition) respectively and filter HTTP request for the Web server by any client. At most 100 rule/policy entries can be configured.



Filtering Policy

Used to configure policy, so the user can decide policy validation condition

Filtering Rule

Used to configure rule, so the user can set Web filter condition

Add

Adding policy or project

Modify

Modifying the current selected policy or project

Delete

Deleting the current selected policy or project

Policy Name

Name of the current project

LAN Content

Displaying the LAN side terminal affected by the current project



Rule Name

Displaying the name of rule to be used by the current policy

Status

Showing the running status of the current project

Action

Button for running and stopping the project

1. The user can click the Add or Modify button of Filtering Rule to enter the policy property interface.

Rule Name

Name of the current policy

Description

Description of the current policy

URL Key

Specifying a list of URL keywords separated by spaces, For example: EDU MOVIE



Data Key

Specifying a list of Data keywords separated by spaces, For example: EDU MOVIE

Submit

Completing the current modifying or adding operation

Back

Canceling the current modifying operation

2. After configuring the policy, the user can return to the main interface and click the Add or Modify button of Filtering Policy to enter the project property interface.

Policy Name

Name of the current project

Client

The type of the client where the project takes effect; three options are available: langroup (indicating the filter unit is langroup), IP (filtering by setting IP address) and LAN (all the LAN PCs are filtered).



Filter Rule

Used to select the type of filter rule

Schedule

Used to configure the project schedule; This option is enabled only when Advanced SNTP is validated (for the →SNTP client configuration, refer to SNTP Client Configuration).

3. After the user’s configured Advanced SNTP function →takes effect, contents of the Schedule option will appear automatically.

Please select a date

Setting the validating time for the current project, for example: Mon, Tue or Wed

Start

Selecting the project start time

End

Selecting the project end time



IPSec Configuration Setting RSA Key Click the IPSec link on the left part of the WEB page to enter the IPSec page, where you can check and update the RSA key adopted at IPSec security negotiation.

Re-generate RSA keys

Updating RSA keys; This product supports PSK shared secret and RSA digit signature as the negotiation authentication mode. If you select the RSA digit signature authentication mode, correctly fill in the RSA authentication key of the peer party. The user can update the RSA key as required, and send it to other users to set up IPSec security connections with him.

Note: The default condition for updating RSA key is that the system has no security connection, or else the button will be automatically disabled. To reset the RSA key, delete the existing security

connection, and then enter the IPSec page to update the RSA key.



In addition, this RSA signature key is used for ID authentication only, so it can be open to anybody, without affecting the system security.

Adding New Connection Click the New IPSec Connection link on the left part of the WEB page to enter the Configure VPN IPSec page, where you can configure and add a new IPSec security connection. IPSec security connection parameters fall into three categories: general configuration (General), security property configuration (IPSec)

and negotiation property configuration (IPSec Automatic/IPSec

Manual).



1. General (general configuration)

Connection Name

IPSec security connection name; Please use A-Z/a-z/0-9 and underline _ with a length limited within 20 characters, and try to select a name related with its actual meaning.

Interface

Name of the uplink port; Select the correct interface name according to the connection mode and interface of the H110 and external network.

2. IPSec (security property configuration)

Remote Endpoint Address

Protected endpoint address of the peer party

Security Association Mode

IPSec security protection mode; The Tunneling and Transport modes are optional. Tunneling is used to protect security of external sent data of the inner network host of the H110 or the H110, and Transport is only used to protect security of external sent data of the H110. Therefore, when Transport is selected, the following four items will be automatically screened.

Local Subnet IP Address (tunnel mode only)

Local protected subnet IP address

Local Subnet Mask (tunnel mode only)

Local protected subnet IP mask

Remote Subnet IP Address (tunnel mode only)

Protected subnet IP address of the peer party

Remote Subnet Mask (tunnel mode only)

Protected subnet IP mask of the peer party

Compress



Compressing the IP layer packet; When this option is selected, this end will attempt to use IP data compression. If the peer end also supports IP data compression, the IP data compression will be enabled.

Key Exchange Mode

Key exchanging mode; You can select Automatic (both parties automatically authenticate IDs and complete key exchanging, and periodically update keys), or select Manual (all the key parameters are set and updated by the user himself). The IKE negotiation mode is recommended.

3. Negotiation property configuration

IPSec Automatic (negotiation connection configuration)

IKE Mode

Negotiation mode; Main Mode (recommended mode) and Aggressive Mode are optional.

Life Time in Seconds (1-28800)

Life time of security negotiation parameter; to ensure data transmission security, such key parameters generated by negotiation as key will be automatically stopped in a period, and parameters are also renegotiated automatically. The recommended value is 8 (hour).

Rekey Margin (1-540)

The advance time margin for renegotiation; To prevent key renegotiation from interrupting normal data transmission, it is allowed to renegotiate with the peer party about key before the key expires. The recommended value is 9 (s).

Rekey Fuzz Percent (1-200)

The maximum percentage of advance time margin for renegotiation; the total advance time ≤ Rekey Fuzz Percent *Rekey Margin



Peer Authentication

Adopted key negotiation mode; This product supports two key negotiation modes: Shared Secret and RSA Signature (select Main Mode for IKE Mode). The RSA Signature (for main mode) is recommended.

Peer Key

Key, a character string at a certain length consisting of number and English letter; When Shared Secret is selected from Peer Authentication, you must select a field (note to keep this field secret carefully) for Shared Secret completely consistent with that of the peer party. When RSA is selected for Peer Authentication, both parties should fill in the peer RSA key. For specific configuration, refer to the relevant introduction in Setting RSA Key. Fill in it as actually required.

Use Perfect Forward Secrecy (PFS)

Whether to select Use Perfect Forward Secrecy, and select whether to adopt Perfect Forward Secrecy at the second sub-phase of key negotiation or future key update; to ensure there is no statistic law feature between the new key and the key to expire, this option is selected preferentially.

IPSec Manual (manual connection configuration)

Note: The ordinary user is not recommended to adopt manual configuration, unless this user is an information security specialist or has special requirements.

Security Parameter Index: Local

Local security index No.; The IPSec security protection policy is composed of several independent SAs. Each



SA only restricts the unidirectional data security policy and has its own independent SPI security index number. Here, the SPI number from the local to the peer is filled in.

Security Parameter Index: remote

SPI number from the local to the peer; Fill it in with reference to Security Parameter Index: Local.

IPSec Protocol

Security protocol; IPSec allows two security protocol types: ESP (perform encryption and authenticate data completeness at the same time) and AH (only authenticating data completeness). ESP is recommended.

Encryption Algorithm (ESP only)

Data encryption algorithm; This product supports the following algorithms, encryption types and key lengths: 3DES-CBC, AES-CBC (128), AES-CBC (192) and AES256-CBC (256). AES-CBC (192) algorithm is recommended.

Local Encryption Key (ESP only)

Encryption algorithm key of outgoing data; Make a selection based on the algorithm type and key length selected in Encryption Algorithm. For example, if AES-CBC (192) is selected, it is necessary to submit a 48-length hexadecimal string as encryption key (48=192/4).

Remote Encryption Key (ESP only)

Encryption algorithm key of incoming data; Fill it in with reference to Local Encryption Key.

Authentication Algorithm

Authentication algorithm of data completeness; This product supports the following algorithms, hash types



and key lengths: HMAC-SHA1 (160) (which is recommended) and HMAC-MD5 (128).

Local Authentication Key

Authentication algorithm of outgoing data completeness; Make a selection based on the algorithm type and key length selected in Authentication Algorithm. For example, if HMAC-SHA1 (160) is selected, it is necessary to submit a 40-length hexadecimal string as authentication key (48=192/4).

Remote Authentication Key

Encryption algorithm key of incoming data; Fill it in with reference to Local Authentication Key.

Submit

Confirming and submitting the new connection

Cancel

Canceling all the configurations of this connection

Examples:

1. User A can create a connection with Connection Name as Myserv, Remote Endpoint address as 10.40.40.151 (B public network address), Interface as Wizard Conn, Security Association Mode as Tunnel, Local subnet IP Address as 192.168.13.0, Localsubnet Mask as 255.255.255.0, Remote subnet IP Address as 192.168.12.0, Remote Subnet Mask as 255.255.255.0, Key Exchange Mode as Automatic, IKE mode as Main Mode, Lifetime as 3600, Rekey Margin as 540, Rekey fuzz Percent as 100, Peer Authentication Mode as Shared Secret and Peer Key as abcdefg1234567.

2. While, peer user B can create a connection with Connection Name as Myserv, Interface as Wizard Conn, Remote Endpoint address as 10.40.40.11 (A public network address), Security Association Mode as Tunnel,



Local subnet IP Address as 192.168.12.0, Localsubnet Mask as 255.255.255.0, Remote subnet IP Address as 192.168.13.0, Remote Subnet Mask as 255.255.255.0, Key Exchange Mode as Automatic, IKE mode as Main Mode, Lifetime as 7200, Rekey Margin as 550, Rekey fuzz Percent as 80, Peer Authentication Mode as Shared Secret and Peer Key as abcdefg1234567.

3. After both parties submit their own connections, the upper part of this page will display the Connected prompt.

Modifying/Deleting Connection After an IPSec security connection is correctly created, an option will be automatically added under the New IPSec Connection submenu, named as the new connection name. Select it to enter the modifying page for this connection.

Except the connection name cannot be modified, the security connection modifying method is consistent with its adding method. After modifying, the user can click the Submit button to submit the modification or click the Cancel button to cancel the modification.




C h a p t e r 7

VOIP Configuration

Click the VOIP button on the WEB page to enter the VOIP related configuration of the H110, including VOIP signaling related configuration, voice related configuration, routing related configuration, service related configuration and number related configuration.

General Configuration Click the General link on the left part of the page to enter the General configuration page, where you can select the signaling protocol used for VOIP, display the registration status of each subscriber line, and set the length and prefix of the internal phone number, the dial twice flag.



Signaling

Selecting the signaling protocol used for VOIP, such as SIP/MGCP; you can also click the Apply button to re-register the VOIP module to SS.

VOIP Status

Displaying the registration status of each subscriber line; When In Service is displayed, it indicates the VOIP module has been normally registered to SS, and the user can dial the VOIP phone number. If Out of Service is displayed, it indicates it is not registered successfully, when VOIP phone number cannot be dialed.

Ext. number setup

Configuring length and prefix of the internal line phone number; Length is the internal line number length (Cannot be changed by the user), and Prefix is the internal line number prefix (Changeable). The default internal line number prefix is *#, so the extension number connected to PHONE1 is *#00 and the one to PHONE2 is *#01.

Two-stage dialing flag

Dial twice flag

After modifying the related configuration, click the Apply button to submit modification.

Note: Upon submission of the modification, the menu bar on the left will change along with the call protocol type selected by the user.

Chapter 7 - VOIP Configuration


Voice Configuration Click the Voice link on the left part of the page to enter the Voice page, where you can configure each parameter related with VOIP voice.

Voice Activity Detector (VAD)

Disable VAD: No detection

Enable using default scheme: Using the default scheme

Enable using PT13 scheme: Using PT=13 scheme (not supported temporarily)

Enable VAD but no silence information sent: Able to make silence detection but not send silence packet (not supported temporarily)



DTMF Options

DTMF Payload Use Redundancy: DTMF out-band redundancy mode (not supported temporarily)

DTMF Payload Use 2833: 2833 mode adopted for DTMF

DTMF in voice coding enable: DTMF in-band voice transparent transmission

No DTMF payloads generated: No transmission (not supported temporarily)

Packet to PCM Digital Gain

Digital gain from packet to PCM, with the range -14db ~ 6db

PCM to Packet Digital Gain

Digital gain from PCM to packet, with the range -14db ~ 6db

Master Echo

Enabling/disabling the master echo canceller

Silence Handling (PCM)

Whether to generate the comfortable nose for the PCM direction during the silence period (not supported temporarily)

Fax Configuration

T.38 (not supported temporarily)

Pass Through (transparent transmission mode); provided configuraiton options: No Control, RTCP negotiated mode (RTCP negotiation mode) and Controlled by SS (controled by the SS)

RTP Start Port

Start port of RTP, range: even number of 1026~65434.

Click the Apply button to submit the service type change.



SIP Configuration As a network communication protocol, SIP (Session Initiation Protocol) is gradually applied to control Voice over IP, SIP support voice, video, data, E-mail, chat and games.

1. Click the VOIP button on the WEB page to enter the VOIP configuration page.

2. Click the General link on the left part of the page to enter the General configuration page for VOIP.

3. Select SIP from the Signaling protocol box.

4. Click the Apply button to finish the SIP protocol selection.

5. Click the SIP Protocol link on the left side of the page to enter the Protocol configuration page.

Protocol Configuration Click the Protocol link to enter the Protocol configuration page, where you can configure relevant parameters of the SIP.



Host Information

Interface: Local interface used by VOIP

Port: Local port used by VOIP

First Proxy

IP Address: IP address or domain name of the first Proxy server

Port: Port of the first Proxy server

Second Proxy

IP Address: IP address or domain name of the second Proxy server

Port: Port of the second Proxy server

Test Link Flag

Test link flag

Peer Call Flag

Peer-to-peer call flag

Phone Number

User phone number

Password

User registration password

Enable

Enabling VOIP account; if the corresponding account is not ticked, it will be suspended.

Note: The password entry box does not display the set password. During password change, please enter the new password with care. Or leave the password entry box null if you do not need to change the password.



Media Configuration Click the Media link to enter the Media Setting page, which is used to declare one’s media capability in network communication. Currently, talk media and fax media can be configured.

1. Talk media

Enable

Enabling flag, whether to enable/disable this media configuration item

Type



Media type, indicating the type of media is voice/video/data

Codec

Codec type, indicating the codec mode of the media type is G711U/G711A/G729/rfc2833

Payloadvalue

Payload value, indicating the packet payload value of this media type; It is fixed for some codec types. For example, the payload value of G711A is 8, that of G711U is 0, that of G729 is 18 and that of rfc2833 is 97.

Packet_time

Packet assembly interval, indicating the media information in how long a period will be assembled in one UDP to be transmitted

Clockrate

Sampling rate, indicating the sampling rate when this media is generated

2. Fax media

Enable

Enabling flag, whether to enable/disable this media configuration item

Type

Media type, indicating the basic type of this media is voice or fax

Codec

Codec type, indicating the codec mode of the media type is G711A/G711U

Payloadvalue

Payload value, indicating the packet payload value of this media type; It is fixed for some codec types. For example, the payload value of G711A is 8, that of G711U is 0.



Packet_time

Packet assembly interval, indicating the media information in how long a period will be assembled in one UDP to be transmitted; T.38 does not involve this item.

Clockrate

Sampling rate, indicating the sampling rate when this media is generated

After modifying the related configuration, click the Apply button to submit the modification.

MGCP Configuration The MGCP (Media Gateway Control Protocol) is an interface protocol used in the next generation network for the control interface generated after separation of media processing from signaling control, that is, the interface between the MG (Media Gateway) and the CA (Call Agent).

1. Click the VOIP button on the WEB page to enter the VOIP configuration page.


3. Select MGCP from the Signaling protocol box.

4. Click the Apply button to finish the MGCP protocol selection.

Protocol Configuration Click the MGCP Basic link on the left side of the page to enter the MGCP configuration page, where you can configure basic parameters related with the MGCP.



Host Information

Interface: Local interface used by MGCP protocol

Port: Port of local interface used by MGCP protocol

First CA

Domain Name: Domain name of the first CA (Call Agent)

IP Address: IP address of the first CA (Call Agent)

Port: Port of IP address of the first CA (Call Agent)

Second CA

Domain Name: Domain name of the second CA (Call Agent)

IP Address: IP address of the second CA (Call Agent)

Port: Port of IP address of the second CA (Call Agent)

End Point



Domain Name: Domain name of the MG, allocated configuration according to the CA, default as iad.zte.com.cn

Register Mode: You can select Wildcard register or Individual register.

Name Prefix: Prefix of the MG subscriber line name; defaulted as aaln/

VOIP：VOIP account Index of the MG subscriber

Sequence Number: Serial number of the MG subscriber line name

Enable: Enabling VOIP account; if the corresponding account is not ticked, it will be suspended


Authentication Configuration Click the MGCP Auth link on the left side of the page to enter the Authentication configuration page, where you can configure authentication parameters related with the MGCP.



EAID

Encryption authentication algorithm ID: 0 (not authenticated) or 1 (authenticated, with the algorithm No. as1)

MGID

MG ID, defaulted as iad.zte.com.cn

KI

Initial key, defaulted as 0123456789ABCDEF

P

DH algorithm index: 1 (96 bytes) or 2 (128 bytes), defaulted as 1

G

DH algorithm base number, defaulted as 2


Route Select Configuration Click the Route Select link on the left side of the page to enter the Route select configuration page, where you can define routes of two office directions (VOIP/PSTN), PSTN internet telephony access code, dial plan and the default office direction route.



Route Select

Office: Selecting office direction, including VOIP/PSTN

Office prefix: Office direction prefix

Office dial plan: Office direction dial plan

PSTN setup

IP Code: Internet telephony access code

Prefix Dial Plan: PSTN dial plan

Default office

Setting the default office or route for each inner line



Service Configuration Click the Service Setup link on the left side of the page to enter the Service Setup page, where you can configure the forwarding service, hotline, ring at all Ext., call waiting, CID, CID restriction and polarity reversal billing services.

Phone line to assign service

Selecting the number for the assigned service

Forwarding

Forwarding services, including Unconditional Forwarding, Forwarding when busy, Forwarding when unreachable and Forwarding when no reply



Hot line

Hotline services, including Instant hot line and Delayed hot line

Others

Other services, including One number (Ring all Ext.) flag, Call waiting flag, CID flag, Call reverse flag and CID restrict flag

Click the Submit button to submit the service type change.

Note: The service setup column contains some disabled items, indicating the current signaling protocol version does not support these services temporarily. Some services are disabled in gray when the user selects a different line, indicating these services cannot be configured at the current line.

Service Configuration Display Click the Service Show link on the left side of the page to enter the Service show page, which displays the service collection of each subscriber line of the device, including PN: the VOIP service number.



Bluetooth MAC Address Configuration Click the Bluetooth MAC Setup link on the left side of the page to enter the Bluetooth MAC Setup page. In this page, you can set the MAC address of the Bluetooth extension number.


C h a p t e r 8

Other Operation Tools

Click the Tools button on the WEB page to enter the system tool page for the H110, including operation tools for configuration saving, device restart, default value restoring, PING, user management, version upgrade, configuration export, system log check and configuration.

System Commands Click the System Commands link on the left part of the page to enter the System Commands page, where you can save the current setting, restart the H110 and restore the default configuration.



Click the Save All button to save all your current settings. Once the Restart button is clicked, response of the WEB page will pause for a while because the device restart process requires a certain delay. You must wait for the process to be completed. Click the Restore Defaults button. The system will replace the your current configuration with the default configuration.

Network Continuity Test Tool: PING Click the Ping link on the left part of the page to enter the Ping page, where you can use the Ping command to test the network continuity.

IP Address

IP address

For example: To make Ping test for the host with IP address as 192.168.1.2, click the Submit button. The Ping result will be displayed in the text box at the lower part.

Chapter 8 - Other Operation Tools


User Management Click the User Management link on the left part of the WEB page to enter the User Management page, including modification of user right, administrator’s password and ordinary user’s password.

User Right

Selecting the user right Administrator or User

Username

User name, which is admin for super user and public for ordinary user, not modifiable

New Password

New password

Repeat New Password

Confirming the new password

Note: The user with the Administrator rights can completely configure the H110 while the user with the User rights can only perform partial configuration and management of the H110.



Update Gateway Click the Update Gateway link on the left part of the WEB page to enter the Update Gateway page, where you can click the Browse button to select the local stored version and configuration file, click the Update Gateway button to complete uploading of the version and configuration file, or click the Get Configuration button to download the configuration file of the H110 to a local location.

System Log Click the System Log link on the left part of the WEB page to enter the Syslog Configurations page, which provides the system log configuring, displaying, clearing, saving and downloading functions.

System Log Parameter Configuration Click the System Log Settings link to enter the system log parameter configuration page, where you can configure the log level, IP address of the log server and timed saving of log to enable the system to record this level of logs and logs above this level, and select whether to output log to the log server.

Chapter 8 - Other Operation Tools


Log Level

Log levels; which are info, notice, warning, error, crit, alert and emerg in the ascending order; After the level is selected, the system will only record this level of logs and logs above this level.

Enable Server

Whether to enable the log server

Server IP

Configuring its IP address if the log server is enabled

Auto Save

Timed saving; after this function is enabled, the current log will be saved to flash every two hours. After the system is powered down, the log record before powering down can be still obtained.

Showing System Logs Click the Logs link on the page to enter the log showing page.



This page provides four buttons. You can click them to implement the following functions:

Refresh

Showing the current latest 20 log records

Save

Saving the current log record to flash

Clear

Clearing the current log record, that is, there is 0 log now

Download

Downloading the current log records to the specified local path


C h a p t e r 9

Device Status Check

Click the Status button on the WEB page to enter the device status page for the H110, where you can check PPP connection status, system running time, system CPU/memory usage, IPQoS statistics and statistics of each network interface.

PPPoE Status Information Click the PPPoE Status link on the left part of the WEB page to enter the PPP Connections Status page, where you can view the PPP connection status information: the IP address and online time of the PPP connection.



System Statistics Click the System Status link on the left part of the page to enter the System Information page, where you can view the basic status when the system runs: uptime, memory and CPU usage.

IPQoS Statistics Click the IPQoS Statistics link on the left part of the page to enter the List of IPQoS Statistics page, where you can view the numbers of sent packets/bytes and the numbers of dropped data packets/bytes of different queues under TC dispatching at each interface.

Chapter 9 - Device Status Check


Network Statistics Click the Network Statistics link on the left part of the page to enter the network statistics page, where you can see the network statistics of four interface types.

Ethernet Interface Statistics Click the Ethernet link to display the statistics of received/sent packets on the Ethernet interface.



WLAN Interface Statistics Click the WLAN link on the page to display the statistics of received/sent packets on the WLAN interface.

Bluetooth Interface Statistics Click the Bluetooth link on the page to display the statistics of received/sent packets on the Bluetooth interface.

Chapter 9 - Device Status Check


USB Interface Statistics Click the USB link on the page to display the statistics of received/sent packets on the USB interface.


C h a p t e r 10

Voice Typical Configurations

SIP Typical Configuration Step 1 Select Protocol Type 1. Click the VOIP button on the WEB page to enter the VOIP

configuration page.


3. Select SIP from the Signaling protocol box.

4. Set the Length and Prefix of the internal phone number from Ext. number setup.

5. Whether enabling Two-stage dialing flag.

6. Click the Apply button to finish the SIP protocol selection.



Step 2 SIP Protocol Configuration 1. Click the SIP Protocol link on the left part to enter the

SIP configuration page.

2. Select the uplink interface and port from the Host Information field.

3. Fill in the IP address (or domain name) and port for the first proxy server in the First Proxy field. The IP address (or domain name) and port are provided by the service provider.

4. For the IP address and port in the Second Proxy field, you can use the default values unless the service provider has special requirements.

5. For the phone numbers, passwords and enabling flags configured for the two phone interfaces, the service provider should provide the corresponding values.

6. Click the Apply button to finish the basic SIP protocol configuration.

Chapter 10 - Voice Typical Configurations


Step 3 Check Port Status Click the General link on the left part of the page to query the port status. If the both ports are displayed In Service, you can make a call.

Step 4 Save Configuration 1. After successful configuration, click the Tool button on the

WEB page.

2. Click the System Commands link on the left part of the WEB page to enter the System Commands page.

3. Click the Save All button to save all the configuration modifications.



MGCP Typical Configuration Step 1 Select Protocol Type 1. Click the VOIP button on the WEB page to enter the VOIP

configuration page.


3. Select MGCP from the Signaling protocol box.

4. Set the Length and Prefix of the internal phone number from Ext. number setup.

5. Whether enabling Two-stage dialing flag.

6. Click the Apply button to finish the MGCP protocol selection.

Chapter 10 - Voice Typical Configurations


Step 2 Configure MGCP Protocol 1. Click the MGCP Basic link on the left part to enter the

MGCP basic configuration page.

2. Select the uplink interface and port in the Host Information field.

3. Fill in the domain name, IP address and port of the first CA server, which are provided by the service provider, in the First CA filed. If the service provider does not provide the domain name, use the default value.

4. Fill in the Domain Name, IP address and port in the Second CA field, you can use the default values unless the service provider has special requirements.

5. Configure the domain name (which is provided by the service provider) for the end port (End Point).

6. Configure the register mode and the name prefix (which are provided by the service provider) for the port (End Point). If the service provider does not provide them, use the default value.

7. Click Apply to finish the basic MGCP configuration.



Step 3 Check Port Status Click the General link on the left part of the page to query the port status. If the both ports are displayed In Service, you can make a call.

Step 4 Save Configuration 1. After successful configuration, click the Tool button on the

WEB page.

2. Click the System Commands link on the left part of the WEB page to enter the System Commands page.

3. Click the Save All button to save all the configuration modifications.


A p p e n d i x A

Solutions to Common Problems

Some problems may occur when you install or use the H110 home gateway. Refer to the following suggestions to solve them. If the problem cannot be solved yet, seek support from the service provider.

Problem Recommended Solution

Indicators

The power indicator is still off after the product power is switched on.

Check that the power adapter that accompanies the product is used and that it is connected properly to the H110 and a power source outlet on the wall.

WAN indicator is not lit when the Ethernet cable is connected on the WAN side.

Make sure you are using standard Ethernet twist-pair cable and check if the Ethernet cable connector is connected properly. The Home Gateway WAN interface should be connected to the host using cross cable, and to the router, switch or hub using straight-through cable. Make sure proper cables are used and check if the connectors are secured.

The LAN indicator is off after you connect the Ethernet cable.

Check that the Ethernet cable is properly connected to the PC/HUB and H110, and the power supply to the PC/HUB is turned on.

Network access failure




WLAN connection cannot be established.

Check if the RF switch of the WLAN is turned on and if the WLAN indicator is on.

My PC cannot access the Internet.

Use the ping command to check if the LAN-side interface IP address (the default IP address of LANGROUP1 is 192.168.1.1) can be pinged successfully from the computer.

If it can be pinged successfully, check the Ethernet connection and see if the indicator status is normal. If the computer uses a static IP address, check if the default gateway IP address is the IP address of the LAN-side interface connected to the PC, or set the computer to obtain IP address automatically.

Confirm with the carrier that the DNS server allocated to your computer is valid, and confirm if the DNS server address is configured properly, or the computer is set to obtain DNS server address automatically.

Confirm that you have enabled the NAT option in the current WAN connection.

Disable the proxy server setting in the web browser.

A problem may occur on the office-end device of the carrier.

The user cannot log in to the home page of the family gateway.

Disable the proxy server setting in the web browser, or add the LAN address of the home gateway to the list in which addresses are not allowed to use proxy.

My PC cannot browse Internet web page.

Check that the DNS server specified for the PC is correct. You can test if the PC is connected to the DNS server of the provider by using the ping application.

Other application problems

Appendix A - Solutions to Common Problems



I cannot make a call.

Check firstly if the phone set connected to the PHONE1 or PHONE2 interface of the H110 beeps normally. If yes, it means the phone set is connected properly.

Enter the WEB interface of the H110. Click the VOIP button and check the VOIP Status filed on the General page. Ensure that the phone port is registered, that is, it is in service. If it is not registered, please check the SIP or MGCP configuration by referring to VOIP configuration in Chapter 7.

If the port status is in service, it means the connection is proper. Contact the service provider if you still cannot make a call.

Configuration made at Web page is lost after restart.

Make sure you click the Submit button for confirmation after every modification. After completing corresponding setting, you should click the Save button or enter the Tools page to click the Save All button to save it. Only in this way, can your configured parameters take effect after the H110 is powered on next time.





A p p e n d i x B

Terms

10Base-T/100Base-TX

Adaptive version of Ethernet standard; 10Base-T employs a twisted pair at the longest length of 100 m, with the highest transmission rate as 10M bps. 100Base-TX is similar to it, but it uses two high-quality twisted pairs, with the highest data transmission rate as 100Mbps.

Adapter

The device connected to a network segment, such as Ethernet, modem card or adapter

Bandwidth

The quantity of data can be transmitted in a fixed length of time

Broadband

Broadcast technology supporting voice, image and data transmission via multiple channels.

DDNS

Network server providing IP setup binding relation of fixed domain name and dynamic change

DHCP



DHCP (Dynamic Host Configuration Protocol) can allocate dynamic IP address to the device on network. Dynamic address means the device can get a different IP address when it connects the network each time.

DNS

DNS (Domain Name Server) translates the name of network node in Internet into the network address.

Domain Name

Domain name identifies one or multiple host names in Internet. For example, the domain name www.yahoo.com represents lots of IP addresses. As one part in the URL, domain name is sued to identify the address of the specific web page. For example, the domain name in http://www.zte.com.cn/index.jsp is www.zte.com.cn.

DoS

DoS (Denial of Service) will be triggered when the PC or network fails to work normally. For example, a hacker may use a false IP address to accumulate quantities of connections and attack the target server.

Ethernet

As one of the most common LAN protocols, it supports bus technology, with the transmission rate range as 10Mbps ~ 1000Mbs.

Explorer

It is an application used to find and display web page, such as Netscape Navigator and Microsoft Internet Explorer.

Firewall

Firewall is the secure barrier between the internal network and external network. Specifically, firewall refers to the combination of a series of components set between different networks or network security domains. By monitoring, limiting and changing data flows of different domains, firewall can screen the information, structure and

Appendix B - Terms


running status of the customer network to protect the customer network.

FTP

FTP (File Transfer Protocol) is a protocol widely used on the Internet. It’s a service protocol for transmitting files between hosts on computer networks. FTP supports multiple file types and formats, e.g. text and binary file.

HTTP

HTTP (HyperText Transfer Protocol) defines how information is formatted and transmitted, and the responses of servers and browsers when different commands are used. All the URLs input in the browser address bar start with “http://”.

Hub

Hub is a shared network connection device providing multiple network interfaces. It connects multiple computers in a network and allows data exchange between computers. Sharing means all the ports of a hub share the fixed bandwidth, so the average data transmission rate and efficiency per user (port) is restricted by the number of users.

IEEE

IEEE (Institute of Electrical and Electronic Engineers) is the most famous organization form formulating standards for the electronic and electrical industries.

Internet

As a global network, Internet is used by millions of computers to exchange data, news and viewpoints.

IP Address

IP address is the 32-bit address in TCP/IP used to identity the host. There are five categories of IP addresses (A, B, C, D and E), which are in the 8-bit data format with 4 separations, such as 2.1.1.2.



Each address covers the network address, optional subnet address and host address. Network address and subnet address are combined for routing, host address is used to identify the independent host in the network or subnet, subnet mask is used to get network and subnet information from the IP address. CIDR provides a new approach for resolving IP address and subnet mask, which is also called Internet address.

IPSec

IPSec is a virtual private network protocol widely supported in the industry. The user can set up IPSec VPN to strengthen security and reliability in data transmission.

ISP

ISP (Internet Service Provider) provides Internet access services for the individual and company.

LAN

LAN is a networking environment connecting some communication devices (computers, terminals and printers) in such limited areas as the room and campus.

MAC Address

MAC (Media Access Control) address is the L2 address parameter of network node. Each network device (like the network adapter, hub and switch) has its specific MAC address ID, and L2 switch sends data to the correct destination node by judging the destination MAC address of the packet.

NAT

NAT (Network Address Translation) should be used to translate the private network address into the public network address of WAN port when multiple computers in the LAN share an IP address to access Internet.

Appendix B - Terms


PPP

PPP (Point-to-Point Protocol) provides a standard mode for transmitting data message over the point-to-point link (like telephone line).

PPPoE

The PPPoE (Point-to-Point Protocol over Ethernet) of PPP provides point-to-point connection in Ethernet (user authentication required) and sets up the user-oriented session channel.

PPTP

As a virtual private network protocol, PPTP ensures reliable transmission of the PPP encapsulated packet at the IP layer.

Protocol

It specifically refers to communication protocol, which is a set of rules defining the data formats observed between network devices, so they can communicate with each other, transmits, sends and receives data between them.

Router

Router implements connection of different types of networks through the remote WAN. Generally, the ISP line and the peer router of WAN or other network devices are interconnected to realize long-haul data transmission. During data transmission, the path to the destination is selected according to the address information in the packet, and this process is called “routing”.

SPI

SPI (Stateful Packet Inspection) inspects both the packet header and the packet content. It can specify the packet source and destination address and other more information. In addition, the state inspection firewall also closes the port, till the specific port request comes.



TCP/IP

TCP/IP (Transmission Control Protocol/Internet Protocol) is the basic communication protocol cluster of network communication, but it actually defines a group of protocols, not limited to TCP and IP.

TR069

TR069 (CPE WAN Management Technical Report 069) is one of the MAN user terminal management protocols. Based on the TR069 technology standard, the service provider and the home gateway perform security interaction to implement initial configuration and automatic upgrade for the home gateway deice, improve efficiency, and reduce expenses and risks.

UDP

UDP (User Datagram Protocol) defines the computer communications in which packets are exchanged in interconnected networks. This protocol regards the network protocol (IP) as a lower protocol by default. It provides the simplest protocol mechanism for sending information to another user program. This protocol is operation oriented and does not provide submission and duplication protections.

URL

URL (Uniform Resource Locator) means a web address in general. URL indicates a specified information location on a www service program on the Internet. It specifies Internet protocols including HTTP or FTP. It is the unique name convention that identifies specific computers, directories and file locations on the Internet. For example, the URL of ZTE Corporation is http://www.zte.com.cn.

VPN

VPN (Virtual Private Network) provides a mode for securely transmitting data in Internet through access control and encryption. Its actual effect reaches or keeps close to the data transmission security level of private network.

Appendix B - Terms


WAN

Although some WANs are private, they are usually deemed as a network for public access.

WEP

WEP (Wired Equivalent Privacy) is a data encryption mode based on 64bit shared key coding, and it is described in the IEEE 802.11b standard.


Tables

Table 1 Typographical Conventions ............................................xi Table 2 Mouse Operation Conventions .......................................xii Table 3 Safety Signs .............................................................. xiii

Date post:	24-Apr-2015
Category:	Documents
Upload:	evgeniy-mokrushin
View:	774 times
Download:	8 times

ZXV10 H11X User Manual

Documents