msr configuration
DESCRIPTION
MSR-configTRANSCRIPT
-
H3C MSR Series Routers Web-Based Configuration Guide
Hangzhou H3C Technologies Co., Ltd. http://www.h3c.com Software version: MSR-CMW520-R2207 Document version: 20110819-C-1.05
-
Copyright 2008-2011, Hangzhou H3C Technologies Co., Ltd. and its licensors
All rights reserved
No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Hangzhou H3C Technologies Co., Ltd.
Trademarks
H3C, , Aolynk, , H3Care,
, TOP G, , IRF, NetPilot, Neocean, NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware, Storware, NQA, VVG, V2G, VnG, PSPT, XGbus, N-Bus, TiGem, InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd.
All other trademarks that may be mentioned in this manual are the property of their respective owners
Notice
The information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute the warranty of any kind, express or implied.
-
Preface
This document is the Web-based configuration guide for the H3C MSR series routers, and describes how to visually manage and maintain the H3C MSR series routers through a Web-based interface.
This preface includes:
Audience Conventions About the H3C MSR documentation set Obtaining documentation Technical support Documentation feedback
Audience This documentation is intended for:
Network planners Field technical support and servicing engineers Network administrators working with the MSR series
Conventions This section describes the conventions used in this documentation set.
GUI conventions
Convention Description
Boldface Window names, button names, field names, and menu items are in Boldface. For example, the New User window appears; click OK.
> Multi-level menus are separated by angle brackets. For example, File > Create > Folder.
Symbols
Convention Description
WARNING An alert that calls attention to important information that if not understood or followed can result in personal injury.
CAUTION An alert that calls attention to important information that if not understood or followed can result in data loss, data corruption, or damage to hardware or software.
IMPORTANT An alert that calls attention to essential information.
NOTE An alert that contains additional or supplementary information.
TIP An alert that provides helpful information.
-
Network topology icons
Represents a generic network device, such as a router.
Represents a routing-capable device, such as a router.
Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features.
Port numbering in examples
The port numbers in this document are for illustration only and might be unavailable on your device.
About the H3C MSR documentation set The H3C MSR documentation set includes:
Chapter Contents
1 Web Overview How to log in to the Web interface, the layout and basic functions of the Web interface.
2 Device Informatio The device summary information and how to use the function.
3 Basic Services Configuration How to use the basic configuration wizard.
4 WAN Interface Configuration
How to configure the WAN interface parameters such as the connection mode and MTU.
5 VLAN Interface Configuration
How to configure a VLAN and its VLAN interface, and how to configure WLAN parameters.
6 Wireless Configuration How to configure a WLAN.
7 3G Management How to configure 3G Management.
8 NAT Configuration How to configure NAT, a NAT server, and application layer protocol check.
9 Security Configuration How to configuring access control, URL filter and attack protection.
10 Redirection Configuration How to configure Web Page Redirection.
11 Route Configuration How to add and delete IPv4 routes.
12 User-Based Load Sharing How to configure user-based load sharing.
13 Traffic Ordering Configuration How to configure traffic ordering.
14 DNS Configuration How to configure DNS and DDNS.
15 DHCP Configuration How to configure a DHCP address pool.
16 QoS Configuration How to configure QoS, line rate and IPv4 ACL.
17 SNMP How to configure SNMP-related parameters.
18 Bridging Configuration How to configure basic bridging functionalities.
-
19 Group Management How to configure user groups.
20 MSTP Configuration How to configure CWMP-related parameters.
21 RADIUS Configuration How to configure RADIUS parameters.
22 Login Control Configuration How to configure Login-Control-related parameters.
23 ARP Configuration How to configure ARP parameters.
24 IPsec VPN Configuration How to configure IPsec and IKE parameters.
25 L2TP Configuration How to configure L2TP parameters.
26 GRE Configuration How to configuring PKI parameters.
27 Certificate Management How to configuring Certificate parameters.
28. System Management How to configure System Management.
29 SNMP (Lite Version) How to configure SNMP (Lite Version) parameters.
30. Syslog How to configure Syslog related parameters.
31 Diagnostic Tools How to use ping and trace route to locate network faults.
32 WiNet Configuration How to configure WiNet parameters.
33 Voice Management-Configuration Wizard
How to use the VoIP basic configuration wizard.
34 Voice Management-Local Number and Call Route
How to configure the VoIP basic parameters, local number, call route, fax, modem, voice services, and related advanced parameters.
35 Voice Management-Dial Plan Configuration
How to configure the VoIP dial policy.
36 Voice Management-Call Connection Configuration
How to configure SIP connection of the registration server and proxy server, and SIP calls parameters.
37 Voice Management-SIP Trunk Management
How to configure SIP trunk,call route for outbound calls related parameters.
38 Voice Management-Digital Link Management
How to configure VE1, VT1, and BSV links related parameters.
39 Voice Management-Line Management
How to configure FXS, FXO, E&M, and ISDN lines related parameters.
40 Voice Management-SIP Local Survival
How to configure SIP local survival related parameters.
41 Voice Management-IVR
How to configure global key policy,IVR nodes,access number management related parameters.
42 Voice How to configure the advanced parameters for local number, call route, and link
-
Management-Advanced Configuration
management.
43 Voice Management-Statistics How to read the summary information of calls and connections.
Obtaining documentation You can access the most up-to-date H3C product documentation on the World Wide Web at http://www.h3c.com.
Click the links on the top navigation bar to obtain different categories of product documentation:
[Technical Support & Documents > Technical Documents] Provides hardware installation, software upgrading, and software feature configuration and maintenance documentation.
[Products & Solutions] Provides information about products and technologies, as well as solutions. [Technical Support & Documents > Software Download] Provides the documentation released with the software version.
Technical support [email protected]
http://www.h3c.com
Documentation feedback You can e-mail your comments about product documentation to [email protected].
We appreciate your comments.
-
i
Contents
Web overview 1 Logging in to the web interface1 Logging out of the web interface2 Introduction to the web interface2 User level4 Introduction to the web-based NM functions 4 Common web interface elements 17 Managing web-based NM through CLI 21
Enabling/disabling web-based NM 21 Managing the current web user 21
Configuration guidelines 22 Troubleshooting web browser 22
Failure to access the device through the web interface 22
Device information 26 Displaying device information 26
Device information 28 Broadband connection information 28 3G wireless card state 28 LAN information 30 WLAN information 30 Service information 31 Recent system logs 31
Integrated service management 31
Basic services configuration 32 Basic service overview 32 Configuring basic services 32
Starting the basic configuration wizard 32 Setting WAN interface parameters 33 Setting WLAN interface parameters 39 Setting LAN interface parameters 41 Validating the basic services configuration 42
WAN interface configuration 44 Configuring an Ethernet interface 44
Overview 44 Configuring an Ethernet interface 44
Configuring an SA interface 47 SA interface overview 47 Configuration procedure 47
Configuring an ADSL/G.SHDSL interface 48 ADSL/G.SHDSL interface overview 48 Configuration Procedure 49
Configuring a CE1/PRI interface 52 CE1/PRI interface overview 52 Configuration procedure 53
Configuring a CT1/PRI interface 55 CT1/PRI interface overview 55 Configuration procedure 55
-
ii
Viewing the general information and statistics of an interface 56
VLAN configuration 58 Overview 58 Configuring a VLAN and its VLAN interface 58
Configuration task lists 58 Creating a VLAN and its VLAN interface 59 Configuring VLAN member ports 60 Configuring parameters for a VLAN interface 60
Configuration guidelines 62
Wireless configuration overview 63 Overview 63 Configuration task list 63
Wireless service configuration 65 Configuring wireless access service 65
Creating a wireless access service 65 Configuring clear type wireless service 66 Configuring crypto type wireless service 74 Security parameter dependencies 80
Displaying wireless access service 82 Displaying wireless service 82 Displaying client 84 Displaying RF ping information 88
Wireless access configuration examples 89 Wireless service configuration example 89 Access service-based VLAN configuration example 90 PSK authentication configuration example 92 Local MAC authentication configuration example 96 Remote MAC authentication configuration example 99 Remote 802.1x authentication configuration example 105 802.11n configuration example 115
Client mode 118 Enabling the client mode118
Connecting the wireless service119 Displaying statistics 120
Client mode configuration example121
Radio configuration 124 Configuring data transmit rates127
Configuring 802.11b/802.11g rates127 Configuring 802.11n MCS128
Displaying radio130 Displaying wireless services bound to a radio130 Displaying detailed radio information 130
WLAN security configuration 133 Blacklist and white list133 Configuring the blacklist and white list functions 133
Configuring dynamic blacklist 133 Configuring static blacklist 134 Configuring white list 135
User isolation136 Configuring user isolation 136
-
iii
WLAN QoS configuration 138 Configuring wireless QoS138
Enabling wireless QoS138 Setting the SVP service139 Setting CAC admission policy 139 Setting radio EDCA parameters for APs 140 Setting EDCA parameters for wireless clients 141 Display radio statistics 142 Displaying client statistics 144 Setting rate limiting 146
Wireless QoS configuration example147 CAC service configuration example 147 Static rate limiting configuration example 148 Dynamic rate limiting configuration example 149
Advanced configuration 151 District code 151 Setting a district code 151 Channel busy test 151
Configuring a channel busy test 152
3G management 154 Overview154 Managing the 3G modem 154
Displaying the 3G information 154 Managing the pin code155
NAT configuration 158 Overview158 Configuring NAT158
Configuration overview 158 Configuring dynamic NAT 159 Configuring a DMZ host160 Configuring an internal server 161 Enabling application layer protocol check163 Configuring connection limit 163
NAT configuration examples 164 NAT configuration example I164 Internal server configuration example166
Access control 170 Access control overview170 Configuring access control 170 Access control configuration example 172
URL filtering 174 URL filtering overview 174 Configuring URL filtering 174 URL filtering configuration example 176
MAC address filtering 178 MAC address filtering overview178 Configuring MAC address filtering178
Configuring the MAC address filtering type 178 Configuring the MAC addresses to be filtered 179 MAC address filtering configuration example 180
-
iv
Attack protection 182 Attack protection overview182
Blacklist function 182 Intrusion detection function182
Configuring the blacklist function 184 Configuration task list 184 Enabling the blacklist function185 Adding a blacklist entry manually 185 Viewing blacklist entries 186
Configuring intrusion detection 187 Attack protection configuration examples 189
Attack protection configuration example for the MSR 900/20-1X series routers189 For MSR 20/30/50 series routers 192
Application control 196 Application control overview196 Configuring application control 196
Configuration task list 196 Loading applications196 Configuring a custom application 197 Enabling application control 198
Application control configuration example 199
Web page redirection configuration 202 Overview202 Configuring web page redirection202
Route configuration 204 Overview204 Route configuration 204
Creating an IPv4 static route204 Displaying the active route table 206
Static route configuration example 207 IPv4 static route configuration example 207
Precautions209
User-based load sharing 211 Overview211 Configuring user-based load sharing 211
Traffic ordering 213 Overview213 Configuring traffic ordering 213
Configuration overview 213 Setting the traffic ordering interval 214 Specifying the traffic ordering mode214 Displaying internal interface traffic ordering statistics214 Displaying external interface traffic ordering statistics215
DNS configuration 216 DNS overview 216 Configuring DNS 216
Configuration overview 216 Enabling dynamic domain name resolution 217 Enabling DNS proxy218 Clearing the dynamic domain name cache 218 Specifying a DNS server 218
-
v
Configuring a domain name suffix219 Domain name resolution configuration example219
DDNS configuration 225 DDNS overview225 Configuration prerequisites226 Configuration procedure 226 DDNS configuration example227
DHCP configuration 230 Introduction to DHCP 230 Configuring DHCP 231
Configuration overview 231 Enabling DHCP233 Configuring DHCP interface setup 233 Configuring a static address pool for the DHCP server 234 Configuring a dynamic address pool for the DHCP server 236 Configuring IP addresses excluded from dynamic allocation 238 Configuring a DHCP server group 239
DHCP configuration examples240 DHCP configuration example without DHCP relay agent241 DHCP relay agent configuration example248
Configuration guidelines 254
ACL configuration 255 ACL overview 255 Configuring an ACL256
Configuration task list 256 Creating an IPv4 ACL 256 Configuring a rule for a basic IPv4 ACL257 Configuring a rule for an advanced IPv4 ACL259 Configuring a rule for an Ethernet frame header ACL 262
Configuration guidelines 264
QoS configuration 265 Overview265
QoS overview265 Subnet limit265 Advanced limit265 Advanced queue 266
Configuring QoS266 Configuring subnet limit266 Configuring advanced limit268 Configuring advanced queue 271
QoS configuration examples 275 Subnet limit configuration example 275 Advanced queue configuration example277
Appendix Packet Priorities 280
SNMP 283 SNMP overview283 SNMP agent configuration 284
Configuration task list 284 Enabling the SNMP agent function 285 Configuring an SNMP view 287 Configuring an SNMP community289 Configuring an SNMP group290
-
vi
Configuring an SNMP user 292 Configuring SNMP trap function 294 Displaying SNMP packet statistics 296
SNMP configuration example297 SNMPv1 or SNMPv2c configuration example 297 SNMPv3 configuration example301
Bridging 307 Overview307
Bridging overview 307 Configuring bridging307
Configuration task list 307 Enabling a bridge set307 Adding an interface to a bridge set 308
Bridging configuration example 309
User group configuration 313 Overview313 Configuring user groups313
Configuration task list 313 Configuring a user group 314 Configuring a user 315 Configuring access control316 Configuring application control317 Configuring bandwidth control317 Configuring packet filtering318 Synchronizing user group configuration for wan interfaces320
User group configuration example320
MSTP configuration 328 Overview328
Introduction to STP328 Introduction to RSTP335 Introduction to MSTP 335 Protocols and standards 340
Configuring MSTP 341 Configuration task list 341 Configuring an MST region 341 Configuring MSTP globally 342 Configuring MSTP on a port 345
MSTP configuration example 347 Configuration guidelines 352
RADIUS configuration 354 Introduction to RADIUS 354 Configuring a RADIUS scheme354 RADIUS configuration example 359 Configuration guidelines 366
Login control configuration 368 Login control overview368 Configuring login control 368 Login control configuration example369
ARP configuration 371 Gratuitous ARP overview371 Displaying ARP entries371
-
vii
Creating a static ARP entry 372 Removing ARP entries 372 Enabling learning of dynamic ARP entries 373 Configuring gratuitous ARP374 Static ARP configuration example 374
ARP attack defense configuration 380 Overview380 Configuring periodic sending of gratuitous ARP packets 380 Configuring ARP automatic scanning 381 Configuring fixed ARP 382
IPsec VPN configuration 384 Overview384 Configuring IPsec VPN 385
Configuration task list 385 Configuring an IPsec connection 385 Displaying IPsec VPN monitoring information 392
IPsec VPN configuration example 393 Configuration guidelines 395
L2TP configuration 397 L2TP overview397 Configuring L2TP398
L2TP configuration task list 398 Enabling L2TP 398 Adding an L2TP group399 Displaying L2TP tunnel information 406
L2TP configuration example406 Client-initiated VPN configuration example 406
GRE configuration 411 GRE overview 411
Introduction to GRE 411 Configuring a GRE over IPv4 tunnel 411
Configuration prerequisites 411 Configuration task list 411 Creating a GRE tunnel 412
GRE over IPv4 tunnel configuration example413
Certificate management 421 Introduction to PKI 421
Operation of PKI422 Configuring PKI 422
Configuration task list 422 Creating a PKI entity 424 Creating a PKI domain 426 Generating an RSA key pair428 Destroying the RSA key pair 429 Retrieving and displaying a certificate 429 Requesting a local certificate 431 Retrieving and displaying a CRL432
PKI configuration examples433 Configuring a PKI entity to request a certificate from a CA (method I) 433 Configuring a PKI entity to request a certificate from a CA (method II) 437 Applying RSA digital signature in IKE negotiation 442
Configuration guidelines 448
-
viii
System management 449 Configuration management 449
Save 449 Initialize 450 Backing up configuration 450 Restoring configuration 451 Backing up and restoring device files through the USB port 452
Reboot 453 Service management 453
Overview453 Configuring service management454
User management 456 Creating a user456 Setting the super password for switching to the management level 457 Switching the user access level to the management level458
System time 458 Setting the system time459 Setting the time zone of the system 460
TR-069 configuration 460 TR-069 network framework 461 Basic functions of TR-069 461 TR-069 configuration462 Configuration guidelines 463
Software upgrade (for the MSR 900/MSR 20-1X series)464 Upgrading software 464
Software upgrade (for the MSR 20/30/50 series) 465 Upgrading software 465
SNMP (lite version) 466 SNMP overview466 SNMP agent configuration 466 SNMP configuration example468
SNMPv1/SNMPv2c configuration example 468 SNMPv3 configuration example470
Syslog 473 Configuring syslog 473
Displaying syslogs473 Setting the loghost 475 Setting buffer capacity and refresh interval476
Diagnostic tools 477 Overview477
Trace route 477 Ping 477
Tools operations 478 Trace route operation478 Ping operation 478
WiNet configuration 480 Overview480 Configuring WiNet 481
Enabling WiNet 481 Setting the background image for the WiNet topology diagram482 Managing WiNet482 Configuring a RADIUS user485
-
ix
WiNet configuration example486 WiNet establishment configuration example 486 WiNet-based RADIUS authentication configuration example 491
Configuration wizard 495 Overview495 Basic service setup 495
Entering the configuration wizard homepage495 Selecting a country495 Configuring local numbers 496 Configuring connection properties 497 Finishing configuration wizard 497
Local number and call route 498 Basic settings 498 Fax and Modem498 Call services498 Advanced settings498
Basic settings 499 Introduction to basic settings499
Local number499 Call route499
Basic settings 500 Configuring a local number 500 Configuring a call route501
Configuration examples of local number and call route 503 Configuring direct calling for SIP UAs through the SIP protocol (configuring static IP address)503 Configuring direct calling for SIP UAs through the SIP protocol (configuring domain name) 507 Configuring proxy server involved calling for SIP UAs 511 Configuring trunking mode calling518
Fax and Modem 522 FoIP overview 522
Protocols and standards for FoIP 522 Fax flow522 Introduction to fax methods 523
SIP Modem pass-through function 524 Configuring fax and Modem524
Configuring fax and Modem parameters of a local number 524 Configuring fax and Modem parameters of a call route527
Call services 529 Introduction to call services 529
Call waiting529 Call hold529 Call forwarding 530 Call transfer530 Call backup530 Hunt group 530 Call barring531 Message waiting indication 531 Three-party conference 531 Silent monitor and barge in services531 Calling party control 531 Door opening control532 CID on the FXS voice subscriber line 532
-
x
CID on the FXO voice subscriber line 532 Support for SIP voice service of the VCX 533
Configuring call services of a local number533 Configuring call forwarding, call waiting, call hold, call transfer, and three-party conference533 Configuring other voice functions534
Configuring call services of a call route 536 Call services configuration examples538
Configuring call waiting 538 Configuring call forwarding539 Configuring call transfer 541 Configuring hunt group 542 Configuring three-party conference545 Configuring silent monitor and barge in 547
Advanced settings 553 Introduction to advanced settings553
Coding parameters 553 Other parameters 557
Configuring advanced settings of a local number 557 Configuring coding parameters of a local number 557 Configuring other parameters of a local number 559
Configuring advanced settings of a call route560 Configuring coding parameters of a call route560 Configuring other parameters for a call route 561
Advanced settings configuration example 562 Configuring out-of-band DTMF transmission mode for SIP 562
SIP2SIP call settings 564 Configuring codec transparent transmission564
Dial plan 565 Dial plan overview565
Dial plan process565 Regular expression 566
Introduction to dial plan functions 568 Number match568 Call control569 Number substitution 569
Configuring dial plan 570 Configuring number match570 Configuring call control 571 Configuring number substitution 574
Dial plan configuration examples 577 Configuring number match mode577 Configuring the match order of number selection rules 579 Configuring entity type selection priority rules582 Configuring call authority control 586 Configuring number substitution 589
Call connection 597 Introduction to SIP 597
Terminology 597 Functions and features of SIP 598 SIP messages599 SIP fundamentals 599
Support for transport layer protocols 602
-
xi
SIP security 602 Signaling encryption 602 Media flow encryption603 TLS-SRTP combinations604
Support for SIP extensions604
SIP connection configuration 605 Configuring connection properties605
Configuring registrar605 Configuring proxy server607
Configuring session properties 607 Configuring source address binding607 Configuring SIP listening 609 Configuring media security 610 Configuring caller identity and privacy 611 Configuring SIP session refresh612 Configuring compatibility 612
Configuring advanced settings614 Configuring registration parameters 614 Configuring voice mailbox server 616 Configuring signaling security 617
Configuring call release cause code mapping618 Configuring PSTN call release cause code mappings 618 Configuring SIP status code mappings 619
SIP connection configuration examples 620 Configuring basic SIP calling features 620 Configuring caller ID blocking620 Configuring SRTP for SIP calls622 Configuring TCP to carry outgoing SIP calls 623 Configuring TLS to carry outgoing SIP calls 624
SIP server group management 626 Configuring a SIP server group 626
SIP trunk configuration 628 Overview628
Background628 Features 629 Typical applications 629 Protocols and standards 630
Configuring SIP trunk 630 Configuration task list 630 Enabling the SIP trunk function631 Configuring a SIP server group 631 Configuring a SIP trunk account 632
Configuring a call route for outbound calls 633 Configuring a call route for a SIP trunk account633 Configuring fax and Modem parameters of the call route of a SIP trunk account635 Configuring advanced settings of the call route of a SIP trunk account635 Configuring codec transparent transmission 637
Configuring a call route for inbound calls 637 SIP trunk configuration examples 637
Configuring a SIP server group with only one member server637 Configuring a SIP server group with multiple member servers644 Configuring call match rules 647
-
xii
Data link management 650 Introduction to data link management 650
Overview650 E1 and T1 interfaces 651 Features of E1 and T1652 Introduction to BSV interface653
Configuring digital link management 653 Configuring VE1 line653 Configuring VT1 line658 Configuring BSV line661 Displaying ISDN link state666
E1 and T1 voice configuration example 666 Configuring E1 voice DSS1 signaling 666
Line management 669 Line management overview 669
FXS voice subscriber line 669 FXO voice subscriber line669 E&M subscriber line 669 One-to-one binding between FXS and FXO voice subscriber lines670
Echo adjustment function671 Adjusting echo duration 671 Adjusting echo cancellation parameters671 Enabling the nonlinear function of echo cancellation 672
Line management configuration 672 Configuring an FXS voice subscriber line672 Configuring an FXO voice subscriber line675 Configuring an E&M subscriber line 678 Configuring an ISDN line681 Configuring a paging line683 Configuring an MoH line 684
Line management configuration examples 685 Configuring an FXO voice subscriber line685 Configuring one-to-one binding between FXS and FXO686
SIP local survival 694 Introduction 694 Configuring SIP local survival 695
Service configuration 695 User management 696 Trusted nodes697 Call-out route697 Area prefix 698 Call authority control699
SIP local survival configuration examples 700 Configuring local SIP server to operate in alone mode 700 Configuring local SIP server to operate in alive mode703 Configuring call authority control 705 Configuring an area prefix 710 Configuring a call-out route713
IVR 716 Overview716 Advantages716
Customizable voice prompts 716 Various codecs 716
-
xiii
Flexible node configuration716 Customizable process 716 Successive jumping 717 Error processing methods 717 Timeout processing methods 717 Various types of secondary calls 717
Configuring IVR 717 Uploading media resource files717 Importing a media resource through an MOH audio input port718
Configuring the global key policy719 Configuring IVR nodes720
Configuring a call node720 Configure a jump node 723 Configure a service node 725
Configuring access number management726 Configuring an access number 726 Configuring advanced settings for the access number 727
IVR configuration examples 728 Configure a secondary call on a call node (match the terminator of numbers) 728 Configure a secondary call on a call node (match the number length) 732 Configure a secondary call on a call node (match a number) 735 Configure an extension secondary call on a call node 737 Configure a jump node 739 Configure an immediate secondary call on a service node741 Configure a secondary call on a service node743 Configure a call node, jump node, and service node 745
Customizing IVR services751 Create a menu 752 Bind an access number757 Customize IVR services 758 Custom IVR service configuration examples759
Advanced configuration 771 Global configuration771 Batch configuration772
Local number772 Call route779 Line management 782 SIP local survival services 786
States and statistics 788 Line states788
Displaying detailed information about analog voice subscriber lines789 Displaying detailed information about digital voice subscriber lines789
Call statistics 790 Displaying active call summary 791 Displaying history call summary 791
SIP UA states792 Displaying TCP connection information 792 Displaying TLS connection information 792 Displaying number register status793 Displaying number subscription status 793
Local survival service states794 SIP trunk account states 795 Server group information 795
-
xiv
IVR information 796 Displaying IVR call states796 Displaying IVR play states 797
Index 798
-
1
Web overview
The device provides the web-based network management function to facilitate the operations and maintenance of network devices. Through this function, the administrator can visually manage and maintain network devices through the web interfaces.
Figure 1 Web-based network management operating environment
Logging in to the web interface The device is provided with the default web login information. You can use the default information to log in to the web interface. The default web login information is:
Username: admin Password: admin IP address of the device: 192.168.1.1. You can follow the steps below to log in to the device through the web interface.
1. Connect the device and PC
Connect the Ethernet interface Ethernet 0/0 of the device to the PC using a crossover Ethernet cable.
2. Configure an IP address for the PC and ensure that the PC and device can communicate with each other properly.
Modify the IP address of the PC to one that within the network segment 192.168.1.0/24 (except for 192.168.1.1), for example, 192.168.1.2.
3. Open the browser, and input the login information.
On the PC, open the browser, type the IP address http://192.168.1.1 in the address bar, press Enter and you can enter the login page of the web interface, as shown in Figure 2. Input the username and password admin, and the verification code, select the language (English and Chinese are supported at present), and click Login.
Figure 2 Login page of the web interface
-
2
CAUTION:
The PC in Figure 1 is the one where you configure the device, but not necessarily the web-based networkmanagement terminal. The web-based network management terminal is a PC (or another terminal) used to log in to the web interface and is required to be reachable to the device.
After logging in to the web interface, you can create a new user and configure the IP address of the interface connecting the user and the device.
If you click the verification code displayed on the web login page, you can get a new verification code. Up to 24 users can concurrently log in to the device through the web interface.
Logging out of the web interface Click Logout in the upper-right corner of the web interface to quit web-based network management.
The system will not save the current configuration before you log out of the web interface. Save the current configuration before logout.
CAUTION:
A logged-in user cannot automatically log out by directly closing the browser.
Introduction to the web interface The web-based interface is composed of three parts: navigation area, title area, and body area, as shown in Figure 3.
-
3
Figure 3 Initial page of the web interface
(1) Navigation area (2) Title area (3) Body area
Navigation area: Organizes the web function menus in the form of a navigation tree, where you can select function menus as needed. The result is displayed in the body area.
-
4
Title area: On the left, displays the path of the current configuration interface in the navigation area; on the right, provides the Save button to quickly save the current configuration, the Help button to display the web related help information, and the Logout button to log out of the web interface.
Body area: The area where you can configure and display a function.
User level Web user levels, ranging from low to high, are visitor, monitor, configure, and management.
Visitor: Users of this level can perform the ping and traceroute operations, but can neither access the device data nor configure the device.
Monitor: Users of this level can only access the device data but cannot configure the device. Configure: Users of this level can access data from the device and configure the device, but they
cannot upgrade the host software, add/delete/modify users, or back up/restore the application file.
Management: Users of this level can perform any operations for the device.
Introduction to the web-based NM functions
NOTE:
User level in Table 1 indicates that users of this level or users of a higher level can perform the corresponding operations.
Table 1 Description of web-based NM functions
Function menu Description User level
Device Information
View and refresh device information, broadband connection information, 3G wireless card state, LAN information, WLAN information, services information, and recent system logs.
Monitor
View the URL address on a card. Monitor
Device Information
Integrated Service Management Change the URL address of a
card, and log in to the web interface of the card.
Configure
Wizard Basic Configuration Wizard Perform the basic service configuration of routers. Configure
View the configuration information of a WAN interface, and interface statistics.
Monitor Interface Setup
WAN Interface Setup WAN Interface Setup
Modify WAN interface configuration, and clear the statistics of a WAN interface.
Configure
-
5
Function menu Description User level
View the configuration information of a VLAN. Monitor VLAN Setup
Configure a VLAN. Configure
View the configuration information of a VLAN interface.
Monitor
LAN Interface Setup
VLAN Interface Setup
Configure a VLAN interface. Configure
View wireless service, radio and client information. Monitor
Summary View wireless service, radio and client information; clear radio statistics; clear client statistics, disconnect a connection, and add a client to a blacklist.
Configure
View configuration information about an access service. Monitor
Access Service Create and configure an access service. Configure
View radio parameters and radio rate settings. Monitor
Radio Set radio parameters, 802.11a/b/g rates, and 803.11n MCS.
Configure
View configuration information of blacklist, whitelist, and user isolation.
Monitor
Security
Configure blacklist, whitelist, and user isolation. Configure
View wireless QoS and rate limiting settings, and radio and client information.
Monitor
Wireless QoS Configure wireless QoS and rate limiting, and clear radio and client information.
Configure
View configuration information of the country code. Monitor
Wireless Configuration
Country Code
Set the country code. Configure
3G Information View 3G modem information, UIM card information, and 3G network information.
Monitor
View UIM card status. Monitor 3G
PIN Code Management Manage PIN codes. Configure
-
6
Function menu Description User level
View information about the NAT configurations. Monitor Dynamic NAT
Configure NAT. Configure
Create a DMZ host. Monitor
DMZ HOST Enable DMZ host on an interface. Configure
View configurations of the internal server. Monitor NAT Server Setup
Configure the internal server. Configure
View configurations of the application layer protocol check function.
Monitor
ALG
Configure the application layer protocol check function. Configure
View configuration information about the number of connections displayed.
Monitor
NAT Configuration
NAT Configuration
Nat Outbound Setup
Configure connection limit. Configure
View the access control configuration information. Monitor Access
Configure access control. Configure
View information about URL filtering conditions. Monitor
URL Filter Add or delete URL filtering conditions. Configure
View information about MAC address filtering conditions. Monitor
MAC Address Filtering Set MAC address filtering types, add or delete MAC addresses to be filtered.
Configure
View and refresh the blacklist information and whether the blacklist filtering is enabled or not.
Monitor
Blacklist Add, modify, delete and clear blacklist entries, and set whether to enable or disable blacklist filtering.
Configure
View intrusion detection configuration information. Monitor
Attack Defend
Intrusion Detection Configure the intrusion detection function. Configure
Security Setup
Application Control
Application Control View application control configuration information. Monitor
-
7
Function menu Description User level
Configure application control. Configure
Load Application Load an application and view the loaded application. Configure
View custom application information. Monitor
Custom Application Add, modify, and delete a custom application. Configure
View the configuration information of redirection. Monitor
Redirection Add, modify, or remove the redirection configuration on an interface.
Configure
Summary View IPv4 route summary information. Monitor
Create Create IPv4 static routes. Configure Route Setup
Remove Delete IPv4 static routes. Configure
View the IP address, mask, and load sharing information of an interface.
Monitor
User-based-sharing Modify the load sharing status and shared bandwidth of an interface.
Configure
View IP addresses, traffic ordering mode and traffic ordering interval for interfaces.
Monitor
Config
Configure the traffic ordering mode and interval. Configure
Statistics of Inbound Interfaces
View inbound interface traffic ordering statistics. Monitor
Traffic Ordering
Statistics of Outbound Interfaces
View outbound interface traffic ordering statistics. Monitor
View DNS configurations. Monitor DNS Configuration
Configure DNS. Configure
View DDNS configurations. Monitor DNS Setup
DDNS Configuration Add, modify, and delete a DDNS entry. Configure
View whether DHCP is globally enabled or disabled. Monitor
Advance
DHCP Setup DHCP Enable
Enable or disable DHCP. Configure
-
8
Function menu Description User level
View DHCP server, relay, or client configurations on an interface.
Monitor DHCP Interface Setup
Enable the DHCP server, relay, or client on an interface. Configure
Summary View summary IPv4 ACL information. Monitor
Create Create an IPv4 ACL. Configure
Basic Config Configure a basic rule for an IPv4 ACL. Configure
Advanced Config Configure an advanced rule for an IPv4 ACL. Configure
Link Config Configure a link layer rule for an IPv4 ACL. Configure
ACL IPv4
Remove Remove an IPv4 ACL. Configure
View the subnet limit configuration information. Monitor
Subnet Limit add, modify or delete subnet limit rules. Configure
View the advanced limit configuration information. Monitor
Advanced Limit Add, modify, or delete advanced limit rules. Configure
View advanced queue configuration information. Monitor
Advanced Queue Configure interface bandwidth, add, modify, or delete bandwidth guarantee policies.
Configure
Summary View classifier information. Monitor
Create Create a classifier. Configure
Setup Configure classification rules for a classifier. Configure
Classifier
Remove Remove a classifier. Configure
Summary View behavior information. Monitor
Create Create a behavior. Configure
Setup Configure actions for a behavior. Configure
Behavior
Remove Remove a behavior. Configure
Summary View QoS policy information. Monitor
Policy
Create Create a QoS policy. Configure
-
9
Function menu Description User level
Setup Configure classifier-behavior associations. Configure
Remove Remove a QoS policy. Configure
Summary View QoS policy application information of a port. Monitor
Setup Apply a QoS policy to a port. Configure Port Policy
Remove Remove a QoS policy from a port. Configure
View and refresh SNMP configuration information and statistics.
Monitor Setup
Configure SNMP. Configure
View the brief information of SNMP communities. Monitor
Community Create, modify and remove an SNMP community. Configure
View the brief information of SNMP groups. Monitor
Group Create, modify, and remove an SNMP group. Configure
View the brief information of SNMP users. Monitor
User Create, modify, and remove an SNMP user. Configure
View the status (enabled or disabled) of the SNMP trap function and target host information.
Monitor
Trap
Enable or disable the SNMP trap function; create, modify, and remove a target host.
Configure
View the brief information of SNMP views. Monitor
SNMP (supported on the MSR 20, MSR 30, and MSR 50)
View Create, modify, and remove an SNMP view. Configure
Global Config View and set global bridging information. Configure
Bridge
Config Interface View and set interface bridging information. Configure
View user group configuration. Monitor Group
Configure user groups. Configure
View user configuration. Monitor
Security UserGroup
User View users. Configure
-
10
Function menu Description User level
WAN Synchronization
Synchronize the user group configuration to a WAN interface.
Configure
View configuration of access control. Monitor
Connection Control Configure time range-based access control. Configure
View custom application configuration. Monitor
Application Control
Customize applications. Configure
View bandwidth management configuration. Monitor Bandwidth
Configure bandwidth control. Configure
View packet filtering rules. Monitor Packet Filter
Configure packet filtering rules. Configure
Configure the MST region-related parameters and VLAN-to-MSTI mappings.
Monitor
Region Modify the MST region-related parameters and VLAN-to-MSTI mappings.
Configure
View MSTP port parameters. Monitor Port
Modify MSTP port parameters. Configure
MSTP
Global View MSTP parameters globally. Configure
RADIUS View and add, modify, and delete a RADIUS scheme.
Management
View information about login control rules. Monitor
Access Add and delete a login control rule. Configure
View information of an ARP table. Monitor
ARP Table Add, modify, and delete ARP entries. Configure
View gratuitous ARP configuration information. Monitor
ARP Management
Gratuitous ARP
Configure gratuitous ARP. Configure
-
11
Function menu Description User level
View the number of dynamic ARP entries that an interface can learn.
Monitor
Dynamic Entry Enable or disable an interface to or from learning dynamic ARP entries, and change the number of dynamic ARP entries that an interface can learn.
Configure
Specify the interface performing ARP automatic scanning.
Monitor Scan
Start or stop ARP scanning. Configure
View all static and dynamic ARP entries. Monitor
ARP Anti-Attack
Fix Convert all dynamic ARP entries to static ones or delete all static ARP entries.
Configure
View IPsec connection configuration. Monitor
IPsec Connection Add, modify, delete, enable, or disable an IPsec connection. Configure
View configuration and status information of IPsec connections, and tunnel information of IPsec connections.
Monitor IPsec VPN
Monitoring Information Delete tunnels that are set up with configuration of an IPsec connection, and delete all ISAKMP SAs of an IPsec connection.
Configure
View the L2TP status and L2TP group configuration information.
Monitor
L2TP Configuration Configure the L2TP status, add, modify or delete an L2TP group.
Configure L2TP
Tunnel Info View L2TP tunnel information. Monitor
View GRE tunnel information. Monitor
VPN
GRE Add, modify, or delete a GRE tunnel. Configure
View PKI entity information. Monitor
Entity Add, change, and delete PKI entities. Configure
Certificate Management
Domain View PKI domain information. Monitor
-
12
Function menu Description User level
Add, change, and delete PKI domains. Configure
View PKI certificates and details of the certificate. Monitor
Certificate Create keys, retrieve certificates, apply for certificates, and delete certificates.
Configure
View CRLs. Monitor CRL
Retrieve CRLs. Configure
Save the current configuration to the configuration file to be used at the next startup.
Configure
Save Save the current configuration as the factory default configuration.
Management
Initialize Restore all configurations on the device to the factory default configuration.
Configure
Backup Configuration Upload the current startup configuration file of the device to the TFTP server for backup.
Management
Restore Configuration
Download the configuration file saved on the TFTP server to the current configuration file of the device.
Management
View device files. Monitor
Configuration
Backup and Restore
Back up files on the device to the destination device through a universal serial bus (USB) port; transfer files from the device where the files are backed up to the local device through a USB port.
Configure
Reboot Reboot the device. Configure
View related configuration of system services. Configure
Service Management Set whether to enable different services and set related parameters.
Management
User Summary View the brief information of users. Monitor
System Management
Users
Super Password Set the supper password for switching to the management level.
Management
-
13
Function menu Description User level
Create User Create a user. Management
Modify User Modify user account. Management
Remove User Remove a user. Management
Switch To Management Switch the user access level to the management level. Visitor
View SNMP configuration information. Monitor SNMP (supported on the MSR 900 series and
MSR20-1X series) Configure SNMP. Configure
View the current system time and its configurations. Monitor System Time System Time
Set the system time. Configure
View TR-069 configurations. Monitor TR-069
Set TR-069. Configure
Software Upgrade Upgrade software of the device.
Management
View detailed information of system logs. Monitor Loglist
Clear the log buffer. Configure
View configurations of the specified loghost. Monitor
Loghost Set the IP address of the loghost. Configure
View the number of logs that can be stored in the log buffer; set the refresh period on the log information displayed on the web interface.
Monitor
Syslog
Logset
Set the number of logs that can be stored in the log buffer. Configure
Ping Execute the ping command and view the result. Visitor
Other
Diagnostic Tools
Trace Route Execute the trace route command and view the result. Visitor
WiNet WiNet Management View and refresh the WiNet topology diagram and view the detailed device information.
Monitor
-
14
Function menu Description User level
Manually trigger the collection of topology information, save the current WiNet topology as the baseline topology, restore the configuration to factory defaults and restart the member.
Configure
Setup Configure WiNet. Configure
View RADIUS user information. Monitor
User Management Add, modify, and delete a RADIUS user. Configure
View configuration information about the configuration wizard.
Monitor
Configuration Wizard Configure voice basic parameters through the configuration wizard.
Configure
View local number configuration information. Monitor
Local Number Create, set, and delete a local number. Configure
View call route configuration information. Monitor
Call Route Create, set, and delete a call route. Configure
View number match configuration information. Monitor
Number Match Configure number match parameters. Configure
View call number groups, and the maximum number of call connections in a set.
Monitor
Call Authority Control Configure a call number group, and the maximum number of call connections in a set.
Configure
View number substitution configuration information. Monitor
Dial Plan
Number Substitution
Configure number substitution. Configure
View connection properties, session properties, advanced settings, and call release cause code mappings.
Monitor
Voice Management
Call Connection
SIP Connection Configure connection properties, session properties, advanced settings, and call release cause code mappings.
Configure
-
15
Function menu Description User level
View SIP server group configuration. Monitor SIP Server Group
Management Configure a SIP server group. Configure
View VE1, VT1, and BSV line configuration information, and line state.
Monitor
Digital Link Management
View and configure a VE1, VT1, and BSV line. Configure
View FXS, FXO, E&M, and ISDN configuration information and state.
Monitor
Line Management Configure an FXS, FXO, E&M, and ISDN line, and query their state.
Configure
View SIP trunk status. Monitor Service Configuration
Enable the SIP trunk function. Configure
View SIP account configuration. Monitor
Account Management Add, modify, and delete a SIP account. Configure
View call route configuration. Monitor
SIP Trunk Management
Call Route Add, modify, and delete a call route. Configure
View SIP local survival configuration. Monitor Service Configuration
Configure SIP local survival. Configure
View registered user configuration. Monitor
User Management Add, modify, and delete a registered user. Configure
View trust node configuration. Monitor
Trust Nodes Add, modify, and delete a trust node. Configure
View call-out route configuration. Monitor
Call-Out Route Add, modify, and delete a call-out route. Configure
View area prefix configuration. Monitor Area Prefix
Add and delete an area prefix. Configure
SIP Local Survival
Call Authority Control View call authority control configuration and application. Monitor
-
16
Function menu Description User level
Add and delete a call rule set and apply the call rule set globally or to registered users.
Configure
View media resources configuration. Monitor
Media Resources Management Upload media resource files or
configure an MOH audio input port.
Configure
View access number configuration. Monitor Access Number
Management Add, modify, and delete an access number. Configure
View processing methods customization configuration. Monitor Processing Methods
Customization Configure processing methods customization configuration. Configure
View service node and global key policy configuration. Monitor
IVR Services
Advanced Settings Configure service node and global key policy configuration.
Configure
View global configuration information. Monitor Global Configuration
Perform global configurations. Configure
View batch configuration information. Monitor
Advanced Configuration
Batch Configuration Create local numbers, call routes, manage lines, and configure SIP local survival in batches.
Configure
Line States View information about all voice subscriber lines. Monitor
View and refresh active and history call statistics. Monitor
Call Statistics View and refresh active and history call statistics and clear history call statistics.
Configure
States and Statistics
SIP UA States
View information about all TCP-based call connections, TLS-based call connections, number register information, and subscription status information.
Monitor
-
17
Function menu Description User level
View information about all TCP-based call connections, TLS-based call connections, number register information, and subscription status information, and terminate specified TCP and TLS connections.
Configure
Local Survival Service States
View and refresh registration and subscription status. Monitor
Common web interface elements Common buttons and icons
Table 2 Common buttons and icons
Button and icon Description
Validates the configuration.
Cancels the configuration, and goes to the corresponding display page or device information page.
Refreshes the current page.
Clears all statistics or items in a list.
Adds an item.
Deletes entries on a list.
Selects all the entries on a list or all ports on a device panel.
Clears all the entries on a list or all ports on a device panel.
Typically locating at the Operation column of a display page, it allows you to enter the modify page of a corresponding entry to display or modify the configurations of the entry.
Typically locating at the Operation column of a display page, it allows you to remove an entry.
Content display by pages
The web interface can display contents by pages, as shown in Figure 4. You can set the number of entries displayed per page, and view the contents on the first, previous, next, and last pages, or go to any page that you want to check.
-
18
Figure 4 Content display by pages
Searching function
The web interface provides you with the basic and advanced searching functions to display only the entries that match specific searching criteria.
Basic search: As shown in Figure 4, input the keyword in the text box above the list, select a search item from the drop-down list and click the Search button to display the entries that match the criteria. Figure 5 shows an example of searching for entries with VLAN ID being 2.
Figure 5 Basic search function example
Advanced search: Advanced search function: As shown in Figure 4, you can click the Advanced Search link to open the advanced search page, as shown in Figure 6. Specify the search criteria, and click Apply to display the entries that match the criteria.
-
19
Figure 6 Advanced search
Take the ARP table shown in Figure 4 as an example. If you want to search for the ARP entries with interface being Ethernet 0/4, and IP address range being 192.168.1.50 to 192.168.1.59, follow these steps:
1. Click the Advanced Search link, specify the search criteria on the advanced search page as shown in Figure 7, and click Apply. The ARP entries with interface being Ethernet 0/4 are displayed.
Figure 7 Advanced search function example (I)
2. Click the Advanced Search link, specify the search criteria on the advanced search page as shown in Figure 8, and click Apply. The ARP entries with interface being Ethernet 0/4 and IP address range being 192.168.1.50 to 192.168.1.59 are displayed as shown in Figure 9.
-
20
Figure 8 Advanced searching function example (II)
Figure 9 Advanced searching function example (III)
Sorting function
The web interface provides you with the basic sorting function to display entries in certain orders.
Basic sorting function: On a list page, you can click the blue heading item of each column to sort the entries based on the heading item you selected. After your clicking, the heading item is displayed with an arrow beside it as shown in Figure 10. The upward arrow indicates the ascending order, and the downward arrow indicates the descending order.
-
21
Figure 10 Basic sorting function example (based on IP address in the descending order)
Managing web-based NM through CLI
Enabling/disabling web-based NM Table 3 Enable/disable the web-based NM service
To do Use the command
Enable the web-based NM service ip http enable
Disable the web-based NM service undo ip http enable
Managing the current web user Table 4 Manage the current web user
To do Use the command
Display the current login users display web users
Log out the specified user or all users free web-users { all | user-id userid | user-name username }
-
22
Configuration guidelines The web-based configuration interface supports the operating systems of Windows XP, Windows
2000, Windows Server 2003 Enterprise Edition, Windows Server 2003 Standard Edition, Windows Vista, Linux and MAC OS.
The web-based configuration interface supports the browsers of Microsoft Internet Explorer 6.0 SP2 and higher, Mozilla Firefox 3.0 and higher, and Google Chrome 2.0.174.0 and higher.
The web-based configuration interface does not support the Back, Next, Refresh buttons provided by the browser. Using these buttons may result in abnormal display of web pages.
The Windows firewall limits the number of TCP connections, when you use IE to log in to the web interface, sometimes you may be unable to open the web interface. To avoid this problem, turn off the Windows firewall before login.
If the software version of the device changes, clear the cache data on the browser before logging in to the device through the web interface; otherwise, the web page content may not be displayed correctly.
You can display at most 20,000 entries that support content display by pages.
Troubleshooting web browser
Failure to access the device through the web interface Symptom
You can ping the device successfully, and log in to the device through telnet. HTTP is enabled and the operating system and browser version meet the web interface requirements. However, you cannot access the web interface of the device.
Analysis
If you use the Microsoft Internet Explorer, you can access the web interface only when the following functions are enabled: Run ActiveX controls and plug-ins, script ActiveX controls marked safe for scripting and active scripting.
If you use the Mozilla Firefox, you can access the web interface only when JavaScript is enabled. Configuring the Internet Explorer settings
1. Open the Internet Explorer, and then select Tools > Internet Options.
2. Click the Security tab, and then select a web content zone to specify its security settings, as shown in Figure 11.
-
23
Figure 11 Internet Explorer setting (I)
3. Click Custom Level, and a dialog box Security Settings appears.
4. As shown in Figure 12, enable these functions: Run ActiveX controls and plug-ins, script ActiveX controls marked safe for scripting and active scripting.
-
24
Figure 12 Internet Explorer Setting (II)
5. Click OK in the Security Settings dialog box.
Configuring Firefox Web browser settings
1. Open the Firefox web browser, and then select Tools > Options.
2. Click the Content tab, select the Enable JavaScript check box, and click OK, as shown in Figure 13.
-
25
Figure 13 Firefox web browser setting
-
26
Device information
Displaying device information You can view the following information on the Device Info menu:
Device information Broadband connection information 3G wireless card state LAN information WLAN information Services information Recent system logs (Recent five system logs are displayed) After logging in to the web interface, you will enter the Device Info page, as shown in Figure 14.
NOTE:
The Device Info page contains five parts, which correspond to the five tabs below the figure on the pageexcept the Services Information and Recent System Logs tabs. When you put your cursor on a part of thefigure, the system prompts you for the tab of the corresponding information, and you can jump to the tabby clicking this part.
-
27
Figure 14 Device information
-
28
Select the refresh mode in the Refresh Period drop-down box.
If you select a specific period, the system periodically refreshes the Device Info page; If you select Manual, you need to click Refresh to refresh the page.
Device information Table 5 Device information fields
Field Description
Device Model Device name
Device ID Device ID
Software Version Software version of the device
Firmware Version Firmware version of the device
Hardware Version Hardware version of the device
Running Time Running time after the latest boot of the device
CPU Usage Real-time CPU usage
Memory Usage Real-time memory usage
Broadband connection information Table 6 Broadband connection information fields
Field Description
Interface Interface name
Session Type Connection type of the interface
Network-Side Connection State Connection state at the network side of the interface
IP Address/Mask IP address and mask of the interface
DNS Server IP address of the DNS server
Uplink Rate (Kbits/Second) Average rate in the outgoing direction on the interface in recent 300 seconds
Downlink Rate (Kbits/Second) Average rate in the incoming direction on the interface in recent 300 seconds
Work Mode Rate and duplex mode of the interface
3G wireless card state To display the detailed information about the 3G wireless card state, click the More link in the 3G Wireless Card State area. The information includes 3G modem information, UIM card information, and 3G network information, as shown in Figure 15.
-
29
Figure 15 3G wireless card state
Table 7 Fields for 3G wireless card state
Field Description
3G Modem Information Connection state of the 3G network
3G Modem State
State of the 3G modem, which can be: Normal: A 3G modem is connected to the router. Absent or unrecognized modem: No 3G modem is connected to the router
or the modem cannot be recognized.
Model Model of the 3G modem
Manufacturer Manufacturer of the 3G modem
CMII ID CMII ID of the 3G modem
Serial Number Serial number of the 3G modem
Hardware Version Hardware version of the 3G modem
Firmware Version Firmware version of the 3G modem
PRL Version Preferred roaming list (PRL) version of the 3G modem
-
30
Field Description
UIM Card State
State of the UIM card, which can be: Absent Being initialized Fault Destructed PIN code protection is disabled. PIN code protection is enabled. Enter the PIN code for authentication. PIN code protection is enabled, and the PIN code has passed the
authentication. The PIN code has been blocked. Enter the PUK code to unblock it.
IMSI International Mobile Subscriber Identity (IMSI) of the UIM card
Voltage Power voltage of the UIM card
Mobile Network 3G network where the UIM card resides
Network Type
State of the 3G network where the UIM card resides, which can be: No Service CDMA HDR CDMA/HDR HYBRID Unknown
RSSI Received signal strength indication (RSSI) of the 3G network
LAN information Table 8 Fields for LAN information
Field Description
Interface Interface name
Link State Link state of the interface
Work Mode Rate and duplex mode of the interface
WLAN information Table 9 Fields for WLAN information
Field Description
SSID (WLAN Name) Name of the WLAN service
Service Status Whether the service is enabled or not
Number of PCs Connected Number of PCs connected to the WLAN service
-
31
Service information Table 10 Fields for service information
Field Description
Service Name of the service
Status Status of the service
Recent system logs Table 11 Recent system log fields
Field Description
Time Time when the system logs are generated
Level Level of the system logs
Description Contents of the system logs
Integrated service management For devices with a card installed, if the card provides the web interface access function, after specifying the URL address of the card on the integrated service management page, you can log in from the integrated service management page to the web interface of the card to manage the card.
After logging in to the web interface of the device, you enter the Device Info page by default. Click the Integrated Service Management tab to enter the page displaying card information of the device, as shown in Figure 16.
Figure 16 Integrated service management
To change the URL address of the card, click of the target card, as shown in Figure 17. Type the URL address in the text box and click to apply the configuration or click to cancel the modification.
Properly set the URL address of the card, and then connect the card to the LAN to which the administrator belongs. On the page as shown in Figure 16, click the Manage button, a page linked to the specified URL address pops up, and then you can log in to the web interface of this card to manage it.
Figure 17 Change card URL address
-
32
Basic services configuration
You can do the following to configure basic services on the web interface:
Setting WAN interface parameters Setting WLAN interface parameters Setting LAN interface parameters
Basic service overview This document guides you through quick configuration of basic services of routers, including configuring WAN interface parameters, WLAN interface parameters, and LAN interface parameters.
NOTE:
For more information about WAN interfaces, the chapter WAN interface configuration. For more information about WLAN interfaces, see the chapter Wireless configuration. For more information about LAN interfaces, see the chapter VLAN interface configuration.
Configuring basic services
Starting the basic configuration wizard From the navigation tree, select Wizard > Basic Configuration Wizard to enter the basic configuration wizard page, as shown in Figure 18.
Figure 18 Basic configuration wizard
-
33
Setting WAN interface parameters On the basic configuration wizard page, click Next to enter the page for configuring WAN interface parameters.
The page for configuring WAN interface parameters varies with the interface type. You are allowed to set Ethernet, SA, ADSL/G.SHDSL, CE1/PR1, and CT1/PR1 interface parameters. To do so, see the following.
Ethernet interface
Figure 19 Set Ethernet interface parameters
Table 12 Configuration items of Ethernet interface parameters (in auto mode)
Item Description
WAN Interface Select the Ethernet interface to be configured.
Connect Mode: Auto Select the Auto connect mode to automatically obtain an IP address.
MAC Address
Specify the MAC address of the Ethernet interface in Either of the two ways: Use the MAC address of the device: Use the default MAC address of the
Ethernet interface, which is displayed in the brackets. Use the customized MAC address: Assign a MAC address in the field to the
Ethernet interface.
Table 13 Configuration items of Ethernet interface parameters (in manual mode)
Item Description
WAN Interface Select the Ethernet interface to be configured.
Connect Mode: Manual Select the Manual connect mode to configure an IP address.
TCP-MSS Set the maximum TCP segment length of an interface
MTU Set the MTU of an interface
-
34
Item Description
IP Address Specify the IP address of the Ethernet interface.
Subnet Mask Select a subnet mask for the Ethernet interface.
Gateway Address Configure the next hop of a static route.
DNS1
DNS2
Specify a DNS server IP address for the interface. Note that DNS server 1 is used before DNS server 2.
To configure the global DNS server on the page you enter, select Advanced > DNS Setup > DNS Configuration. The global DNS server is prior to the DNS servers of the interfaces. In other words, the DNS query is sent to the global DNS server first. If the query fails, the DNS query is sent to the DNS server of the interface until the query succeeds.
MAC Address
Specify the MAC address of the Ethernet interface in either of the two ways: Use the MAC address of the device: Use the default MAC address of the
Ethernet interface, which is displayed in the brackets. Use the customized MAC address: Assign a MAC address in the field to the
Ethernet interface.
Table 14 Configuration items of Ethernet interface parameters (in PPPoE mode)
Item Description
WAN Interface Select the Ethernet interface to be configured.
Connect Mode: PPPoE
Select the PPPoE connect mode.
In PPPoE mode, a user name and password should be provided by the local Internet Service Provider (ISP).When the device connects to the ISP server, the ISP server initiates PPPoE authentication. When the device passes the authentication, the ISP server will send the IP address, subnet mask, gateway IP address, and DNS server IP address to the device.
User Name Specify the user name for identity authentication.
Password Specify the password for identity authentication.
TCP-MSS Set the maximum TCP segment length of an interface
MTU Set the MTU of an interface
Online for all time
Online according to the Idle Timeout value
Idle timeout
Select an idle timeout interval, and you have two choices: Online for all time: The device is always online. Online according to the idle timeout value: The device disconnects from the
server if no data exchange occurs between it and the server within the specified time. Then, it automatically establishes the connection upon receiving a request for accessing the Internet from the LAN.
When Online according to the Idle Timeout value is enabled, you need to specify an idle timeout value.
MAC Address
Specify the MAC address of the Ethernet interface in either of the two ways: Use the MAC address of the device: Use the default MAC address of the
Ethernet interface, which is displayed in the brackets. Use the customized MAC address: Assign a MAC address in the field to the
Ethernet interface.
-
35
SA interface
Figure 20 Set SA parameters
Table 15 Configuration items of SA interface parameters
Item Description
WAN Interface Select the SA interface to be configured.
User Name Specify the user name for identity authentication.
Password Specify the password for identity authentication.
TCP-MSS Set the maximum TCP segment length of an interface
MTU Set the MTU of an interface
IP Address Specify the IP address of the SA interface.
Subnet Mask Select a subnet mask for the SA interface.
ADSL/G.SHDSL interface
Figure 21 Set ADSL/G.SHDSL parameters
-
36
Table 16 Configuration items of ADSL/G.SHDSL interface parameters (in IPoA mode)
Item Description
WAN Interface Select the ADSL/G.SHDSL interface to be configured.
Connect Mode: IPoA Select the IPoA connect mode.
PVC Specify the VPI/VCI value for PVC.
TCP-MSS Set the maximum TCP segment length of an interface
MTU Set the MTU of an interface
IP Address Specify the IP address of the ADSL/G.SHDSL interface.
Subnet Mask Select a subnet mask for the ADSL/G.SHDSL interface.
Map IP Specify the peer destination IP address of the mapped PVC.
Table 17 Configuration items of ADSL/G.SHDSL interface parameters (in IPoEoA mode)
Item Description
WAN Interface Select the ADSL/G.SHDSL interface to be configured.
Connect Mode: IPoEoA Select the IPoEoA connect mode.
PVC Specify the VPI/VCI value for PVC.
TCP-MSS Set the maximum TCP segment length of an interface
MTU Set the MTU of an interface
IP Address Specify the IP address of the ADSL/G.SHDSL interface.
Subnet Mask Select a subnet mask for the ADSL/G.SHDSL interface.
Table 18 Configuration items of ADSL/G.SHDSL interface parameters (in PPPoA mode)
Item Description
WAN Interface Select the ADSL/G.SHDSL interface to be configured.
Connect Mode: PPPoA Select the PPPoA connect mode.
PVC Specify the VPI/VCI value for PVC.
User Name Specify the user name for identity authentication.
Password Specify the password for identity authentication.
TCP-MSS Set the maximum TCP segment length of an interface.
MTU Set the MTU of an interface.
Table 19 Configuration items of ADSL/G.SHDSL interface parameters (in PPPoEoA mode)
Item Description
WAN Interface Select the ADSL/G.SHDSL interface to be configured.
Connect Mode: PPPoEoA Select the PPPoEoA connect mode.
PVC Specify the VPI/VCI value for PVC.
User Name Specify the user name for identity authentication.
-
37
Item Description
Password Specify the password for identity authentication.
TCP-MSS Set the maximum TCP segment length of an interface.
MTU Set the MTU of an interface.
Online for all time
Online according to the Idle Timeout value
Idle timeout
Select an idle timeout value from either of the following: Online for all time: The device is always online. Online according to the idle timeout value: The device disconnects from the
server if no data exchange occurs between it and the server within the specified time. After that, it automatically establishes the connection upon receiving a request for accessing the Internet from the LAN.
When Online according to the Idle Timeout value is enabled, you need to specify an idle timeout value.
CE1/PR1 interface
The CE1/PR1 interface works in two modes: E1 mode and CE1 mode.
1. In E1 mode
Figure 22 Set CE1/PR1 interface parameters (in E1 mode)
Table 20 Configuration items of CE1/PR1 interface parameters (in E1 mode)
Item Description
WAN Interface Select the CE1/PR1 interface to be configured.
Work Mode: E1 Select the E1 work mode.
User Name Specify the user name for identity authentication.
Password Specify the password for identity authentication.
TCP-MSS Set the maximum TCP segment length of an interface.
MTU Set the MTU of an interface.
2. In CE1 mode
-
38
Figure 23 Set CE1/PR1 interface parameters (in CE1 mode)
Table 21 Configuration items of CE1/PR1 interface parameters (in CE1 mode)
Item Description
WAN Interface Select the CE1/PR1 interface to be configured.
Work Mode: CE1 Select the CE1 work mode.
Operation Select one of the following two operation actions: Create: Binds timeslots. Remove: Unbinds timeslots.
Serial Select a number for the created Serial interface.
Timeslot-List Specify the timeslot(s) to be bound or unbound.
User Name Specify the user name for identity authentication.
Password Specify the password for identity authentication.
TCP-MSS Set the maximum TCP segment length of an interface.
MTU Set the MTU of an interface.
-
39
CT1/PR1 interface
Figure 24 Set CT1/PR1 parameters
Table 22 Configuration items of CT1/PR1 interface parameters
Item Description
WAN Interface Select the CT1/PR1 interface to be configured.
Work Mode: E1 Select the CT1 work mode.
Operation Select one of the following two operation actions: Create: Binds timeslots. Remove: Unbind timeslots.
Serial Select the number for the created serial interface.
Timeslot-List Specify the timeslot (s) to be bound or unbound.
User Name Specify the user name for identity authentication.
Password Specify the password for identity authentication.
TCP-MSS Set the maximum TCP segment length of an interface.
MTU Set the MTU of an interface.
Setting WLAN interface parameters After finishing the previous configuration, click Next to enter the page for configuring WLAN interface parameters, as shown in Figure 25.
-
40
Figure 25 Set WLAN parameters
Table 23 Configuration items of WLAN parameters
Item Description
WLAN Setting Select whether to make WLAN settings.
Network Name (SSID) Specify a wireless network name.
Network Hide Select whether to hide the network name.
Radio Unit Select a radio unit supported by the AP, which can be 1 or 2.
Which value is supported varies with device models.
Enable Encrypt Select whether to enable data encryption.
With data encryption enabled, data transmission between wireless client and wireless device can be secured.
Encrypt Act Select an encryption mode for the wireless network, WEP40 or WEP104.
Key Mode
Select a key format. When you select WEP40, the key can be a 5-character string or 10-digit hexadecimal
number. When you select WEP104, the key can be a 13-character string or a 26-digit
hexadecimal number.
Key Seed
Key 1
Key 2
You can either use a key seed to generate keys or type keys manually. Then, you can choose one of the configured keys. When you select WEP40 and ASCII, the generated or input key is a 5-character
string. When you select WEP40 and HEX, the generated or input key is a 10-digit
-
41
Item Description
Key 3
Key 4
hexadecimal number. When you select WEP104 and ASCII, the generated or input key is a 13-character
string. When you select WEP104 and HEX, the generated or input key is a 26-digit
hexadecimal number.
Setting LAN interface parameters After finishing the previous configuration, click Next to enter the page for configuring LAN interface parameters, as shown in Figure 26.
Figure 26 Set LAN parameters
Table 24 Configuration items of LAN interface parameters
Item Description
VLAN Interface
Displays the ID of the VLAN interface to be configured.
IMPORTANT:
By default, the VLAN interface on the device that has the smallest number is displayed. If no VLAN interface is available on the device, the system automatically creates an interface numbered 1 and displays it.
IP Address
Subnet Mask Specify the IP address and a subnet mask for the VLAN interface.
DHCP Server Select whether to enable DHCP server.
If you enable DHCP server, the configuration items of the DHCP server will be displayed.
Start IP Address Specify the IP address range for dynamic allocation in an extended address pool.
-
42
Item Description
End IP Address
IMPORTANT:
If the extended address pool is configured on an interface, when a DHCP client's request arrives at the interface, the server assigns an IP address from this extended address pool only. Thus, the client cannot obtain an IP address if no IP address is available in the extended address pool.
Gateway IP Address
Specify a gateway IP address in the DHCP address pool for DHCP clients.
When accessing a server or host that is not in its network segment, a DHCP client needs the gateway to forward data for it. When you specify a gateway IP address in the address pool, the DHCP server sends an IP address as well as the gateway IP address to a requesting client.
DNS Server 1
DNS Server 2
Specify a DNS server IP address in the DHCP address pool for DHCP clients. Note that DNS server 1 is used before DNS server 2.
To allow DHCP clients to access the Internet through domain names, the DHCP server needs to send an IP address as well as a DNS server IP address to clients.
Validating the basic services configuration After finishing basic services configuration, click Next to enter the page shown in Figure 27 to validate your configuration.
Figure 27 Check the basic service configuration
This page shows the configurations that you have made through the previous steps. Check the configurations, and click Finish to validate them. To make any modification, click Back to go to previous pages and edit the settings.
-
43
The page also provides an option Save Current Configuration for you to save the configurations to the configuration file (both the .cfg file and the .xml file) to be used at the next startup of the device. If the option is selected, the configurations you make survive a device reboot.
-
44
WAN interface configuration
The WAN interfaces that you can configure on the Web interface include Ethernet interfaces, SA interfaces, ADSL/G.SHDSL interfaces, CE1/PRI interfaces, and CT1/PRI interfaces.
Configuring an Ethernet interface
Overview An Ethernet interface supports the following connection modes:
Auto: The interface acts as a DHCP client to obtain an IP address through DHCP. Manual: The IP address and subnet mask are configured manually for the interface. PPPoE: The interface acts as a PPPoE (Point-to-Point Protocol) client. PPPoE provides access to the
Internet for hosts in an Ethernet through remote access devices. It also implements access control and accounting on a per-host basis. Because it is cost-effective, PPPoE gains popularity in various applications, such as residential networks.`
Configuring an Ethernet interface Select Interface Setup > WAN Interface Setup from the navigation tree to enter the WAN interface configuration page, which displays the name, connection type, IP address, mask, status, and operation icon ( ) of each interface, as shown in Figure 28.
Figure 28 WAN Interface Setup
Click the icon corresponding to an Ethernet interface to enter the page for configuring the Ethernet interface, as shown in Figure 29.
-
45
Figure 29 Configure an Ethernet interface
Table 25 Ethernet interface configuration items (auto mode)
Item Description
WAN Interface Displays the name of the Ethernet interface to be configured.
Interface Status
Display and set the interface status: If this item shows as Connected, indicating that the current interface is up and
connected, you can click the Disable button to shut down the interface. If this item shows as Not connected, indicating that the current interface is up but
not connected, you can click the Disable button to shut down the interface. If this item shows as Administratively Down, indicating that the current interface
is shut down by a network administrator, you can click the Enable button to bring up the interface.
Connect Mode: Auto Select Auto as the connection mode. The interface will obtain an IP address automatically.
MAC Address
Set the MAC address of the Ethernet interface using one of these available options: Use the MAC address of the device: Use the default MAC address of the Ethernet
interface, which is displayed in the following brackets. Use the customized MAC address: Manually set the MAC address of the Ethernet
interface. When this option is selected, you need to type a MAC address in the text box below.
-
46
Table 26 Ethernet interface configuration items (manual mode)
Item Description
WAN Interface Displays the name of the Ethernet interface to be configured.
Interface Status
Display and set the interface status: If this item shows as Connected, indicating that the current interface is up and
connected, you can click the Disable button to shut down the interface. If this item shows as Not connected, indicating that the current interface is up but
not connected, you can click the Disable button to shut down the interface. If this item shows as Administratively Down, indicating that the current interface
is shut down by a network administrator, you can click the Enable button to bring up the interface.
Connect Mode: Manual Select Manual as the connection mode. In this mode, you must assign an IP address and subnet mask for the interface manually.
TCP-MSS Configure the TCP maximum segment size (MSS) on the interface.
MTU Configure the maximum transmission unit (MTU) on the interface.
IP Address Configure an IP address for the interface.
IP Mask Configure the subnet mask for t