Page 1: User Manual
MX Series Voice Gateway User Manual New Rock Technologies, Inc. MX Series Voice Gateway User Manual HX4E MX8A MX60 MX60E MX120G Website: http://www.newrocktech.com Email: gs@newrocktech.com Document Version: 201706...
Page 2: Amendment Records
MX Series Voice Gateway Amendment Records Document Rev. 02 (March 2017) Added MX60E, and removed MX120. This manual is applicable to New Rock's MX series Voice Gateway V351. Document Rev. 01 (June 2016) This manual is applicable to New Rock’s MX series Voice Gateway V344.
Page 3: Table Of Contents
MX Series Voice Gateway User Manual Contents Amendment Records ..........................2 Contents ............................... 3 Figures ................................. 7 Tables ................................ 10 1 Overview .............................. 14 1.1 Product Introduction ................................14 1.2 Functions and Features ................................15 1.3 Equipment Structure ................................16 1.3.1 HX4E ....................................
Page 4 User Manual MX Series Voice Gateway 2.2.4 System ..................................... 40 2.2.5 SIP ..................................... 42 2.2.6 High Availability ................................44 2.2.7 TLS&SRTP ..................................45 2.2.8 MGCP ....................................46 2.2.9 FoIP ....................................48 2.2.10 Alarm ..................................... 50 2.3 Line ........................................ 52 2.3.1 Phone Number ................................52 2.3.2 Subscriber Line Features ............................
Page 5 MX Series Voice Gateway User Manual 2.7.4 ACL-based Traffic Filtering ............................94 2.7.5 Packet Rate Limiting Based Dynamic Blacklisting ................... 95 2.7.6 IP Table ................................... 98 2.7.7 Voice Security ................................98 2.7.8 Encryption ..................................99 2.7.9 VPN (Available on the HX4E/MX8A) ......................... 100 2.8 Status ......................................
Page 6 User Manual MX Series Voice Gateway 4 Making an OpenVPN Client Certification (HX4E/MX8A) ............. 125 5 Appendix: High availability configuration ..................128 6 Appendix: Auto provisioning configuration ................. 129...
Page 7: Figures
MX Series Voice Gateway User Manual Figures Figure 1-0 HX4E Front Panel ............................... 17 Figure 1-1 HX4E Back Panel ................................. 17 Figure 1-2 MX8A Front Panel ..............................19 Figure 1-3 MX8A Back Panel ............................... 19 Figure 1-4 RJ45 to RS232 Serial Cable ............................. 20 Figure 1-5 USB to RS232 Converter Cable ..........................
Page 8 User Manual MX Series Voice Gateway Figure 2-34 Feature Batch Configuration Interface ......................56 Figure 2-35 Subscriber Line Characteristics Configuration Interface ................57 Figure 2-36 Phone Number Configuration Interface ......................59 Figure 2-37 Trunk Line Features Configuration Interface ....................60 Figure 2-38 Trunk Batch Configuration Interface ........................
Page 9 MX Series Voice Gateway User Manual Figure 2-70 System Status Interface ............................104 Figure 2-71 Call Message Interface ............................105 Figure 2-72 Interface of System Startup ..........................105 Figure 2-73 Manage Log Interface ............................106 Figure 2-74 Log Saving Interface ............................107 Figure 2-75 Path Saving Interface ............................
Page 10: Tables
User Manual MX Series Voice Gateway Tables Table 1-1 MX Series Gateway Hardware Specifications ....................14 Table 1-2 Configuration Combination of HX4E ........................16 Table 1-3 Description of HX4E Front Panel ..........................17 Table 1-4 Description of HX4E Back Panel ..........................17 Table 1-5 Indicator Status of HX4E ............................
Page 11 MX Series Voice Gateway User Manual Table 2-5 System Configuration Parameters ......................... 41 Table 2-6 Codec Methods Supported by Gateways ......................42 Table 2-7 SIP Configuration Parameters ..........................43 Table 2-8 Parameters ..................................44 Table 2-9 TLS&SRTP Configuration Parameter ........................46 Table 2-10 MGCP Configuration Parameters ........................
Page 12 User Manual MX Series Voice Gateway Table 2-41 Encryption Configuration Parameters ....................... 99 Table 2-42 VPN Configuration Parameters ......................... 101 Table 2-43 System Status Parameters ........................... 104 Table 2-44 Log Management Configuration Parameters ....................106...
Page 13 MX Series Voice Gateway User Manual New Rock Technologies, Inc.
Page 14: Overview
Overview 1.1 Product Introduction MX Series intelligent VoIP Gateways (MX Gateways) are designed to bridge the traditional telecom terminal device into IP networks through SIP or MGCP protocols. The main applications include: For carriers and value-added service providers to provide telephone, fax and voice-band data services ...
Page 15: Functions And Features
MX Series Voice Gateway User Manual Hardware for MX series gateways uses high-performance CPUs, ensuring that each product of the series can achieve full-capacity concurrent calls with high speech quality. MX gateways software adopts the stable and reliable embedded Linux operating system (OS),...
Page 16: Equipment Structure
User Manual MX Series Voice Gateway Support Web GUI-based management , SSH, automatic software upgrades, and configuration  downloading Support high availability, implementing a cloud of SIP servers working in primary-standby or load  balancing mode Support auto provisioning ...
Page 17: Figure 1-0 Hx4E Front Panel
MX Series Voice Gateway User Manual Figure 1-0 HX4E Front Panel Table 1-3 Description of HX4E Front Panel Item Description Power Indicator WAN interface indicator PC interface indicator FXO/FXS FXS /FXO port indicator Figure 1-1 HX4E Back Panel Table 1-4 Description of HX4E Back Panel...
Page 18: Mx8A
User Manual MX Series Voice Gateway Table 1-5 Indicator Status of HX4E Indicator Status Description Blinking green The device is starting. PWR(green) Steady green The device is running. The device is powered off or a power supply fault occurred The WAN interface failed to acquire the IP address. Possibly the WAN...
Page 19: Figure 1-2 Mx8A Front Panel
MX Series Voice Gateway User Manual Table 1-7 Voice Interface Cards Supported by the MX8A Voice Interface Card Types Number of FXS Ports Number of FXO Ports 401A-4FXS 401A-4FXO 401A-2FXS/2FXO Figure 1-2 MX8A Front Panel Table 1-8 Description of MX8A Front Panel...
Page 20: Figure 1-4 Rj45 To Rs232 Serial Cable
User Manual MX Series Voice Gateway Table 1-9 Description of MX8A Back Panel Item Description The console port is used for local management and testing. PCs can be connected to device by linking the RS232 port to CON port. Connecting cables need to be produced or purchased.
Page 21: Mx60
MX Series Voice Gateway User Manual Indicator Status Description Blinking green Calling Registration has not started. Steady green A WAN connection is established without any service flow. Blinking green A WAN connection is established with service flow. (green) WAN interface is disconnected.
Page 22: Figure 1-6 Mx60 Front Panel
User Manual MX Series Voice Gateway Models Number of FXS Ports Number of FXO Ports MX60-24S/8 MX60-40S/8 MX60-16S/16 MX60-32S/16 MX60-24S/24 Figure 1-6 MX60 Front Panel Table 1-12 Description of MX60 Front Panel Item Description Three interface slots; each can correspond with four RJ45 sockets; each RJ45socket can correspond with four pairs of analog lines.
Page 23: Figure 1-7 Schematic Diagram Of Mx60 Subscriber Line Connection
MX Series Voice Gateway User Manual Figure 1-7 Schematic Diagram of MX60 Subscriber Line Connection Figure 1-8 MX60 Back Panel-AC Figure 1-9 MX60 Back Panel-DC Table 1-14 Description of MX60 Back Panel Item Description Ground Pole PWR/STU/ALM Indicator, see 0 for description...
Page 24: Mx60E
User Manual MX Series Voice Gateway Item Description DC power socket,-48 VDC input. Table 1-15 Meanings of MX60 Indicators Mark Function Status Description Green Power on Power Indication Power off System locked and inactive Status Indication Blinking green Normal operation...
Page 25: Figure 1-10 Mx60E Front Panel
MX Series Voice Gateway User Manual MX60E Front Panel Figure 1-10 Description of MX60E Front Panel Table 1-17 Item Remarks Three interface slots; each has four RJ45 sockets; each RJ45 socket can correspond with four pairs of analog lines. Note: Numbers of interface slots vary from different configuration.
Page 26: Figure 1-11 Schematic Diagram Of Mx60E Subscriber Line Connection
User Manual MX Series Voice Gateway Schematic Diagram of MX60E Subscriber Line Connection Figure 1-11 MX60E Back Panel-AC Figure 1-12 Description of MX60E Back Panel Table 1-19 Item Description Ground pole Indicator, see Table 1-20 for description PWR/STU/ALM USB interface...
Page 27: Mx120G
MX Series Voice Gateway User Manual Meanings of MX60E Indicators Table 1-20 Mark Function Status Description Green Power on Power Indication Power off System locked and inactive Status Indication Blinking green Normal operation No alarms Blinking red New alarms occurred but not confirmed.
Page 28: Figure 1-13 Mx120G Front Panel
User Manual MX Series Voice Gateway Table 1-23 Configuration Combination of MX120G Number of FXS Number of Concurrent calls Description Models Ports FXO Ports Depend on the value of X. Single AC power MX120G-NA-X X=C, it is 24 Dual AC power...
Page 29: Figure 1-14 Schematic Diagram Of Mx120G Subscriber Line Connection
MX Series Voice Gateway User Manual TIP1 RING1 TIP2 TIP3 RING3 RING2 TIP4 RING4 Orange Green Blue Brown Reference color Orange Blue Green Brown white white white white Figure 1-14 Schematic Diagram of MX120G Subscriber Line Connection Table 1-26 Corresponding Relation Between MX120G RJ45 Socket and Line Number RJ45 Socket No.
Page 30: Figure 1-15 Mx120G Back Panel-Ac
User Manual MX Series Voice Gateway operator during equipment startup, diagnosis or operation. In this mode, LED flashes to display numbers, letters or other patterns in matrix. Please refer to Table 1-29. Figure 1-15 MX120G Back Panel-AC Figure 1-16 MX120G Back Panel-DC...
Page 31: Table 1-28 Meanings Of Mx120G Indicators
MX Series Voice Gateway User Manual Table 1-28 Meanings of MX120G Indicators Indicator Status Description Steady green The power supply is working. No power supply. (red, green) Steady red The power supply is abnormal. Blinking green The device is running.
Page 32: Web Management Page
MX Series Voice Gateway User Manual 1.4 Web Management Page 1.4.1 Layout The Web GUI of the MX series gateways includes a general information display bar, a general operation bar, a menu bar, and a configuration area. Web GUI Figure 1-17...
Page 33: Parameters Setting
MX Series Voice Gateway User Manual Parameters Setting 2.1 Login 2.1.1 Obtaining Gateway IP Address MX8A/HX4E Gateways start DHCP service by default, and automatically obtain an IP address on the LAN; you can use the factory-default gateway IP address if it is unable to be obtained (e.g. when connected directly with a computer).
Page 34: Gateway Administrator And Operator Rights (Web Gui)
User Manual MX Series Voice Gateway login interface. Both Chinese and English are provided for the Web GUI.  The Web GUI can be accessed using browsers such as Internet Explorer 8 to 11, Firefox, and Google Chrome. The IE browser is used as an example below.
Page 35: Accessing Through Ssh
MX Series Voice Gateway User Manual passwords. After login, "Admin” is displayed on the upper left corner of the interface. The operator is allowed to browse a subset of the configuration parameters. After login, "Operator” is displayed on the upper left corner of the interface.
Page 36: Ssh User Permissions
User Manual MX Series Voice Gateway 2.1.5 SSH user Permissions Both root user and the operator user are allowed to access a device with SSH:  root user has permission to change the configuration of all parameters.  operator user has permission to access only the directories of the user. It is allowed to use su- commands only.
Page 37: Figure 2-20 Network Configuration Interface (Hx4E/Mx8A)
MX Series Voice Gateway User Manual HX4E/MX8A Figure 2-20 Network Configuration Interface ( MX60/MX60E/MX120G Figure 2-21 Network Configuration Interface ( Table 2-3 Network Configuration Parameters Name Description ETH1 configurations. ETH1 (MX60/MX60E/MX MX60, MX60E, and MX120G each have two network ports: ETH1 and ETH2.
Page 38: Vlan
User Manual MX Series Voice Gateway Name Description Password Enter an authentication password if PPPoE service is selected, and there is no default value. If “Static IP” or “DHCP” is selected but an address fails to be obtained, the gateways will use IP address the IP address filled in here.
Page 39: Figure 2-22 Vlan Configuration Interface
MX Series Voice Gateway User Manual Figure 2-22 VLAN Configuration Interface Table 2-4 VLAN Configuration Parameters Name Description Automatic discovery LLDP On: Indicates that the LLDP is enabled. The device periodically sends LLDP messages and  parses received LLDP messages to get VLAN ID and priority.
Page 40: System
User Manual MX Series Voice Gateway Name Description Voice VLAN VLAN to which the voice service (SIP signaling and RTP/T.38 media stream) belongs. None: disable the voice VLAN  Mode 1: SIP and RTP/T.38 are on the same VLAN ...
Page 41: Figure 2-23 System Configuration Interface
MX Series Voice Gateway User Manual Figure 2-23 System Configuration Interface Table 2-5 System Configuration Parameters Name Description Off-hook timer If a subscriber does not dial any digit within the specified time by this parameter after off-hook, the gateways will prompt to hang up with a busy tone.
Page 42: Sip
User Manual MX Series Voice Gateway Name Description DTMF transmission Transmission modes of DTMF signal supported by the gateways include RFC 2833, Audio and method SIP INFO. The factory default value is RFC 2833. RFC 2833: separate DTMF signal from sessions and transmit it to the platform through ...
Page 43: Figure 2-24 Sip Configuration Interface
MX Series Voice Gateway User Manual Figure 2-24 SIP Configuration Interface Table 2-7 SIP Configuration Parameters Name Description Local signaling Configure the UDP port for transmitting and receiving SIP messages, with its default value 5060. port Note: The signaling port number can be set in the range of 1-9999, but cannot conflict with the other port numbers used by the equipment.
Page 44: High Availability
User Manual MX Series Voice Gateway Name Description Subdomain This domain name will be used in INVITE messages. If it is not set here, the gateways will use the name IP address or domain name of the proxy server as the user-agent domain name. It has no default value.
Page 45: Tls&Srtp
SIP server to the sending of REGISTER to the next SIP server. 2.2.7 TLS&SRTP The MX series gateways support SIP signaling over TLS and SRTP (an encrypted form of RTP) as well. . After login, choose Basic > SIP, to go to the configuration page.
Page 46: Mgcp
User Manual MX Series Voice Gateway TLS&SRTP Configuration Parameter Table 2-9 Name Description TLS server Set to the address of a softswitch or IMS platform that supports TLS. After the configuration, the TLS function is automatically enabled but you should enable TLS on Line > Configuration or Trunk >...
Page 47: Table 2-10 Mgcp Configuration Parameters
MX Series Voice Gateway User Manual Table 2-10 MGCP Configuration Parameters Name Description Local port Configure the UDP port for transmitting and receiving MGCP messages, the default value is 2427. Note: The signaling port number can be set in the range of 1-9999, but cannot conflict with the other port numbers used by the equipment.
Page 48: Foip
User Manual MX Series Voice Gateway Name Description Set whether the gateways report “offhook events” to replace 401 messages in NTFY or Using notify instead of report “on-hook events” to replace 402 messages in NTFY when responding to messages 401/402 sent by the proxy server.
Page 49: Figure 2-29 Mx60/Mx60E/Mx120G Fax Configuration Interface
MX Series Voice Gateway User Manual MX60/MX60E/MX120G Fax Configuration Interface Figure 2-29 Table 2-11 Fax Configuration Parameters Name Description Initial offer Codec Click Edit, go to Basic>System page to configure. For details, see 2.2.4 System. RTP port Min. Click Edit, go to Advanced>Media stream page to configure. For details, see 2.6.5 Media Stream.
Page 50: Alarm
User Manual MX Series Voice Gateway Name Description Allow opposite When the device sends a fax message in G.711 transparent transmission mode, if the other party terminal to switch sends a T.38 negotiation request, the device will respond to the request and automatically switch to T.38...
Page 51: Figure 2-30 Alarm Icon
MX Series Voice Gateway User Manual The alarm icon in the general information bar on the page displays the total number of security events. Move the cursor to the icon, you may see the brief summary of the potential security issues.
Page 52: Line
User Manual MX Series Voice Gateway 2.3 Line 2.3.1 Phone Number The content below is only applicable to gateways with FXS ports. After login, click Line > Batch Configuration (Phone number) to open the configuration interface. Figure 2-32 Configuration Interface for...
Page 53: Figure 2-33 Subscriber Line Configuration Interface
MX Series Voice Gateway User Manual Figure 2-33 Subscriber Line Configuration Interface Table 2-14 Subscriber Line Configuration Parameters Name Description Fill in the port number associated with this port. “FXS-n” corresponds to the Line>Batch Phone line configuration>ID n. SIP account Fill in the number associated with this port.
Page 54 User Manual MX Series Voice Gateway Name Description Note: The following features are valid only in SIP protocol. When the gateways use MGCP protocol, features are controlled by the proxy server without the need to be set on the gateway.
Page 55: Subscriber Line Batch (Unavailable On The Hx4E)
MX Series Voice Gateway User Manual Name Description Registration The device subscribes the registration status of the line. If the subscription is successful, the SIP subscription server sends a NOTIFY message for notification of the registration status of the line.
Page 56: Subscriber Line Characteristics
User Manual MX Series Voice Gateway Figure 2-34 Feature Batch Configuration Interface 2.3.4 Subscriber Line Characteristics The content below is only applicable to gateways with FXS ports. After login, click Line > feature to open the configuration interface. New Rock Technologies, Inc.
Page 57: Figure 2-35 Subscriber Line Characteristics Configuration Interface
MX Series Voice Gateway User Manual Figure 2-35 Subscriber Line Characteristics Configuration Interface Table 2-15 Subscriber Line Characteristics Configuration Parameter Name Description Gain to IP Adjust the voice volume from the analog extension. The default is 0. Taking decibel as the unit, setting range is -3 ~ +3 decibels.
Page 58 User Manual MX Series Voice Gateway Name Description Hook flash time Used by gateway to detect hook flash, the default is 800 milliseconds. The gateway will regard the flash duration between Hook flash time min and Hook flash time max as effective flash. Any flash lasting over the longest time will be considered by gateway as hang up.
Page 59: Trunk
MX Series Voice Gateway User Manual Name Description Configure ring Configure ring patterns for ring cadence 1. patterns for ring e.g. 1: if the ring patterns are set to 2, 500, 500, 1000, 3000, the ringing cadence is 0.5s on, 0.5s cadence 1 off;...
Page 60: Trunk Features
User Manual MX Series Voice Gateway 2.4.2 Trunk Features Only a gateway with FXO ports can display this interface. After login, click Trunk > Feature to open the configuration interface. Figure 2-37 Trunk Line Features Configuration Interface Table 2-17 Configuration Parameters of Trunk Features...
Page 61: Trunk Batch (Unavailable On The Hx4E)
MX Series Voice Gateway User Manual Name Description Note: The following features are valid only in SIP protocol. When the gateways use MGCP protocol, the control of all call services is provided by the proxy server without the need of these setting.
Page 62: Trunk Characteristics
User Manual MX Series Voice Gateway Figure 2-38 Trunk Batch Configuration Interface 2.4.4 Trunk Characteristics Only a gateway with FXO ports can display this interface. After login, click Trunk > Advanced to open the configuration interface. New Rock Technologies, Inc.
Page 63: Figure 2-39 Trunk Characteristics Configuration Interface
MX Series Voice Gateway User Manual Figure 2-39 Trunk Characteristics Configuration Interface Table 2-18 Trunk Characteristics Configuration Parameter Name Description Gain to IP Adjust the volume of the voice sent from the PSTN to the device. Increase the value when the volume received by internal party is low.
Page 64: Routing
User Manual MX Series Voice Gateway Name Description Ring relay Select whether to relay the ring of inbound call to the FXS port when the Inbound handle mode for the FXO port is selected as Direct. The default is Phone ring independently.
Page 65: Figure 2-40 Configuration Interface For Digit Map
MX Series Voice Gateway User Manual Figure 2-40 Configuration Interface for Digit Map Dialing rules are used to effectively detect completed received number sequences that are ready to be sent in order to reduce connection time of telephone calls. The maximum number of rules that can be stored in gateways is 250. Each rule can hold up to 32 numbers and 38 characters.
Page 66: Routing Table
User Manual MX Series Voice Gateway Digit map Description Terminate after receiving # and any two-digit number. #xx is primarily used to stop feature codes for supplementary services, such as CRBT, Call Transfer, Do not Disturb, etc. [2-3,5-7]xxxxxxx The gateway terminates receiving digits after receiving eight digits starting with any digits except 1, 4, or 9.
Page 67: Figure 2-41 Routing Table Configuration Interface
MX Series Voice Gateway User Manual Figure 2-41 Routing Table Configuration Interface Click to open the illustrative interface for routing configuration. The routing table with a capacity of 500 rules provides two functions including number transformation and call routing assignment.
Page 68: Table 2-20 Routing Table Format
User Manual MX Series Voice Gateway For details of Source and Number, see Table 2-20. For details of Number Transformation and Routing Destination, see Table 2-21 and Table 2-22 respectively. Table 2-20 Routing Table Format Name Description Source There are three types of source: IP, FXS (Phone/fax) and FXO (Line).
Page 69: Table 2-22 Routing Destination
MX Series Voice Gateway User Manual Processing Description and Example Mode REPLACE Another use of REPLACE is to replace the specific number based on another number associated with the call. For example, replacing the calling number according to the called number.
Page 70: Examples Of Routing Rules
User Manual MX Series Voice Gateway Destination Description and Example Route a call to FXS port(s). ROUTE FXS Example 1: IP 800[0-3] ROUTE FXS 1-2 Select a port in sequential order. Example 2: IP 800[0-3] ROUTE FXS 1 Direct this call to FXS port 1.
Page 71: Advanced Configuration
MX Series Voice Gateway User Manual Routing Setting Description FXS[1] 0 ROUTE NONE A calling starting with 0 is barred from dialing using the phone set at FXS1 port FXS[1-2] 00 ROUTE NONE A calling starting with 00 is barred from dialing using the phone set at FXS1 to FXS2 port.
Page 72: Figure 2-42 Interface Of System Advanced Configuration
User Manual MX Series Voice Gateway Figure 2-42 Interface of system advanced configuration Table 2-23 NAT Configuration Parameters Name Description Recording Remote recording Call recordings are stored on an external Windows or Linux based recording server, on which the agent provided by New Rock collects and stores the call recording files. For more...
Page 73: Auto Provisioning
MX Series Voice Gateway User Manual Name Description SDP Address External network IP address: Use NAT public address.  Internal network IP address: Use the gateway’s IP address.  Note: External network IP address is effective when the device successfully obtains NAT public address.
Page 74: Management System Type
User Manual MX Series Voice Gateway Name Description Update mode The following modes are available. Power on: the gateway detects whether there are configurations and firmware to be updated  when the device is powered on. Power on + Periodical: when the device is powered on, the gateway first checks whether ...
Page 75: Certificate (Available On The Hx4E/Mx8A)
MX Series Voice Gateway User Manual Figure 2-45 TR069 Configuration Interface Table 2-26 TR069 Configuration Parameters Name Description ACS-URL Specify the URL of the ACS. User name Set the user name used by the device to authenticate with the ACS.
Page 76: Media Stream
User Manual MX Series Voice Gateway Figure 2-46 Certificate Configuration Interface Step 1 Prepare the OpenVPN certificate file “client.vpn” based on the information provided by the server. For details, see 4 Making an OpenVPN Client Certification. Step 2 Click Upload.
Page 77: Figure 2-48 Mx60/Mx60E/Mx120G Media Stream Configuration Interface
MX Series Voice Gateway User Manual MX60/MX60E/MX120G Media Stream Configuration Interface Figure 2-48 Table 2-27 Media Stream Configuration Parameter Name Description RTP port min. The lowest port number of UDP ports for RTP transmission and receiving. The parameter must be greater than or equal to 3000. This is a required field.
Page 78: Sip Configuration
User Manual MX Series Voice Gateway Name Description Obtain Media SDP global address (default value): obtains the IP address from SDP global address;  Address From SDP media address: obtains the IP address from SDP Media Description.  2.6.6 SIP Configuration SIP messages consist of request messages and response messages.
Page 79: Table 2-28 Sip Related Configuration Parameter
MX Series Voice Gateway User Manual Table 2-28 SIP Related Configuration Parameter Name Description SIP configuration The default is 86400 seconds. Set the time interval for which MWI service subscription request MWI subscription will be sent to the SIP server. This parameter should be used in conjunction with voice mail subscription on the page of the subject subscriber line.
Page 80 User Manual MX Series Voice Gateway Name Description Domain name in The default is Domain name. REGISTER Domain name: complete domain name used for registration (for example: 8801@registrar.newrock.com); Sub domain name: only use the common part of the name of domain (for example:...
Page 81: Radius (Unavailable On The Hx4E)
MX Series Voice Gateway User Manual Name Description Timer E non-INVITE request retransmit interval, UDP only. It is 500 ms by default. Timer F non-INVITE transaction timeout timer. It is 17000 ms by default and ranges from 2000 to 32000 Timer G INVITE response retransmit interval.
Page 82: Greeting
User Manual MX Series Voice Gateway Table 2-29 RADIUS Configuration Parameter Name Description Primary Server Define IP address and port number of preferred Radius server. Note: if the port number is not yet configured, please use Radius default port number 1813.
Page 83: Call Progress Tone Plan
MX Series Voice Gateway User Manual Table 2-30 Greeting Configuration Parameters Name Description Second Stage Click Browse, and then select the local audio file named welcome.wav. Click Upload. The uploaded audio file overwrites the original one. Dialing Configuration(Appl If you want to delete the current customized second stage dialing tone, click Delete. After the icable for FXO gateway restarts, the default second stage dialing tone will be used.
Page 84: Feature Access Codes
User Manual MX Series Voice Gateway Name Description Busy tone Busy line prompt. Congestion tone Notification of call set up failure due to resource limit. Ring back tone The tone sent to caller when ringing is on. Off-hook Reminds the subscriber when the phone is off-hook and no dialup has occurred.
Page 85: Figure 2-53 Feature Codes Configuration Interface
MX Series Voice Gateway User Manual Figure 2-53 Feature Codes Configuration Interface Table 2-32 Feature Codes Configuration Parameter Name Description System feature codes Obtain IP address The feature code for obtaining the IP address of gateway, with a default of ##.
Page 86 User Manual MX Series Voice Gateway Name Description Deactivate CFB The feature code for deactivating call forwarding on busy, with default of #61. User operation: off hook → press #61 → hang up. Activate CFNR The feature code for activating call forwarding on no answer, with default of *62. Dialing the feature code should activate call forwarding on no answer and specify destination number.
Page 87: Clock Service
MX Series Voice Gateway User Manual 2.6.11 Clock Service After login, click Advanced > System time to open this interface. Figure 2-54 Clock Service Interface New Rock Technologies, Inc.
Page 88: Table 2-33 Clock Service Parameters
User Manual MX Series Voice Gateway Table 2-33 Clock Service Parameters Name Description Time Zone Select a time zone, the parameter values include: (GMT-11:00) Midway Island  (GMT-10:00) Honolulu. Hawaii  (GMT-09:00) Anchorage, Alaska  (GMT-08:00) Tijuana  (GMT-06:00) Denver ...
Page 89: Security
MX Series Voice Gateway User Manual Name Description Secondary time Enter the IP address of Secondary time server here. It has no default value. server 2.7 Security 2.7.1 Access Security The administrator is recommended to perform the following operations to prevent mostly illegal accessing to the device: ...
Page 90: Figure 2-55 Access Configuration Interface
User Manual MX Series Voice Gateway Access Configuration Interface Figure 2-55 Table 2-34 Access security setting parameters Name Description Set the administrator/operator password by entering the current password. The password must meet the following requirements: Change 8 to 16 characters ...
Page 91: Access List
MX Series Voice Gateway User Manual Name Description Enable SSH If this parameter is selected, terminals are allowed to access the device through SSH. It is not selected by default. When accessing the device through SSH, you should login with user operator, and use su root command to change to user root.
Page 92 User Manual MX Series Voice Gateway Step 1 Click Add. Step 2 In the input box, enter IP addresses and select types of service. Step 3 Select Enable, and click Save.  If SSH is selected, please enable SSH on Security>Access page.
Page 93: Brute Force Login Prevention
MX Series Voice Gateway User Manual 2.7.3 Brute Force Login Prevention A brute force login attack makes multiple login attempts within a short time period, trying to guess the password to login. To prevent brute force login attacks, the MX provides several methods including CAPTCHA for logging into Web GUI, limiting the number of login attempts, and access whitelist of trusted IP addresses.
Page 94: Acl-Based Traffic Filtering
User Manual MX Series Voice Gateway Brute Force Login Prevention (Lockout IP Addresses) Interface Figure 2-58 Table 2-36 Brute Force Login Prevention (Lockout IP Addresses) Information Name Description IP address Indicates a locked IP address. Date Indicates the date when an IP address is locked.
Page 95: Packet Rate Limiting Based Dynamic Blacklisting
MX Series Voice Gateway User Manual Name Description Source IP address Specify the source IP address range. Note: This parameter does not support domain names. Protocol Specify the protocol type. The value can be set TCP, UDP, ICMP, or any.
Page 96: Figure 2-60 Dynamic Defense Configuration Interface
User Manual MX Series Voice Gateway Dynamic Defense Configuration Interface Figure 2-60 Table 2-38 Dynamic Defense (Rule Configuration) Parameters Name Description Specifies the local port range of the device for receiving data packets. Local port The supported port range is 0 to 65535.
Page 97: Figure 2-61 Dynamic Defense (Blocked Ip Addresses) Interface
MX Series Voice Gateway User Manual Dynamic Defense (Blocked IP Addresses) Interface Figure 2-61 Table 2-39 Dynamic Defense (Blocked IP Addresses) Information Name Description IP address The IP address of the attacker detected by the device. Date The time when the device detects the attacker and initiates defense.
Page 98: Ip Table
User Manual MX Series Voice Gateway  Rule 1: Port 5060 is allowed to receive at most 20 UDP packets per second.  Rule 2: Port 5060 is allowed to receive at most 50 TCP packets per second. 2.7.6 IP Table The IP filtering function is used to ignore the VoIP messages from untrusted network.
Page 99: Encryption
MX Series Voice Gateway User Manual Voice Security Configuration Interface Figure 2-63 2.7.8 Encryption After login, click Security>Encryption to open this interface. Figure 2-64 Encryption Configuration Interface Table 2-41 Encryption Configuration Parameters Name Description Signal encryption Choose whether to encrypt signaling. By default, this is not selected.
Page 100: Vpn (Available On The Hx4E/Mx8A)
User Manual MX Series Voice Gateway Name Description Encryption method Set the gateway encryption method, default is 7. The optional parameters as below: 2:TCP not encrypted  3: TCP encrypted  6: UDP not encrypted  7: UDP encrypted ...
Page 101: Status
MX Series Voice Gateway User Manual recommended to construct a VPN network, and configure VPN client for HX4E/MX8A. After login, click Security > Access, and then choose L2TP or OpenVPN. Figure 2-65 VPN Configuration Interface Table 2-42 VPN Configuration Parameters...
Page 102: Call History On Fxs
User Manual MX Series Voice Gateway Figure 2-66 Call Status Interface 2.8.2 Call History on FXS After login, click Call Status>Call history on FXS to open this interface. Figure 2-67 Interface of Call History on FXS 2.8.3 Call History on FXO After login, click Call Status>Call history on FXO to open this interface.
Page 103: Sip Message Count
MX Series Voice Gateway User Manual 2.8.4 SIP Message Count After login, click Call Status>SIP message count to open this interface. Figure 2-69 SIP Message Count Interface 2.9 Logs 2.9.1 System Status Critical runtime information of gateways can be obtained in this interface, including: ...
Page 104: Call Message
User Manual MX Series Voice Gateway Figure 2-70 System Status Interface Table 2-43 System Status Parameters Name Description Login User Info Show the IP address and permissions of the login user. The numbers following the IP address show the online permission level of the user: 1- administrator, 2 - operator, 3 – viewer. The viewer can only read the configuration.
Page 105: System Startup
MX Series Voice Gateway User Manual Figure 2-71 Call Message Interface 2.9.3 System Startup After login, click Logs>System Startup to open this interface. Log files can be downloaded through this interface. Figure 2-72 Interface of System Startup 2.9.4 Manage Log After login, click Logs>Manage Log to open this interface.
Page 106: Figure 2-73 Manage Log Interface
User Manual MX Series Voice Gateway interface. Figure 2-73 Manage Log Interface Table 2-44 Log Management Configuration Parameters Name Description Download log Log level Select the log file level of gateway, the default is 4. The higher the level the more details the log file will be.
Page 107: Tools
MX Series Voice Gateway User Manual Figure 2-74 Log Saving Interface Step 3 Click Save, and select path to save. Figure 2-75 Path Saving Interface Step 4 The user may review the log file from the server. 2.10 Tools 2.10.1 Configuration Management After login, click Tools>Import data to open this interface.
Page 108: Upgrade
User Manual MX Series Voice Gateway Figure 2-76 Configuration Management Interface 2.10.2 Upgrade The device supports two upgrading methods: upgrading by .img file or upgrading by tar.gz file. If the kernel version is required to upgrade, choose the .img file to upgrade, if not, choose the tar.gz file.
Page 109: Restore Factory Settings
MX Series Voice Gateway User Manual Step 1 Click Tools>Software upgrade>Choose file to choose a tar.gz file. Figure 2-79 Upgrade Interface Step 2 Click Upgrade. Step 3 Follow prompts to complete the upgrade. The device upgrade process may last for several minutes. Do not power off, disconnect (from the ...
Page 110: Capture Recordings On The Port
User Manual MX Series Voice Gateway 2.10.4 Capture Recordings on the Port After login, click Tools > Analog capture to open this interface. This tool can be used to capture the voice stream from the Phone or Line interface. When the call lasts longer than 200 seconds, only the first 200 seconds of voice stream will be captured.
Page 111: Product Information
MX Series Voice Gateway User Manual Figure 2-84 Automatic Diagnosis Interface Figure 2-85 Ping Diagnosis Interface 2.11 Product Information After login, click Version info to view the gateway hardware and software version information. 2.12 Reboot To restart the gateway, click Reboot in the top right corner.
Page 112: Appendix: Vlan Configuration
MX Series Voice Gateway User Manual Appendix: VLAN Configuration Virtual Local Area Network (VLAN) virtually divides a physical LAN into multiple broadcast domains. Only hosts in the same VLAN can directly communicate without a router, so broadcast packets are restricted to the same VLAN, improving network security (e.g, a data-only VLAN or voice-only VLAN).
Page 113: Lldp
MX Series Voice Gateway User Manual The device receives only data packets that carry the VLAN tag and includes the VLAN tag in all sent data packets. In this mode, the physical network port of the device has no separate address and shares the IP address of the VLAN interface.
Page 114: Figure 3-86 Scenario Diagram
User Manual MX Series Voice Gateway Discovery Mechanism Figure 3-86 Scenario Diagram The process consists of the following steps: The device periodically sends an LLDP message to notify the switch the device information. The sending interval is modifiable on the GUI interface. See Table 2-4.
Page 115: Figure 3-87 Procedure Of Handling Lldp Message Carrying A Vlan Id
MX Series Voice Gateway User Manual Figure 3-87 Procedure of Handling LLDP Message Carrying a VLAN ID Procedure of Handling the LLDP Message with no VLAN ID  During startup period, if the device receives LLDP messages with no VLAN ID, it uses the VLAN information configured manually.
Page 116: Dhcp
User Manual MX Series Voice Gateway Figure 3-89 LLDP Message Sent Message with a VLAN ID  After obtaining a VLAN ID from the LLDP message, the device adds the VLAN information to the Ethernet frame headers of all messages to be sent. In addition, the device adds a DSCP value to the RTP message.
Page 117 MX Series Voice Gateway User Manual ensured that DHCP option 132 and DHCP option 133 are properly configured on the DHCP server. Configuration After login, click Basic > VLAN. Set DHCP to be On, and then click Save. In addition, ensure DHCP is set on the Basic >...
Page 118: Manual Configuration
User Manual MX Series Voice Gateway 2. DHCPOFFER returned by the DHCP server 3.2 Manual Configuration 3.2.1 Single VLAN All services of the device are on the same VLAN, and the device receives only data packets carrying the VLAN and includes the VLAN tag in all sent data packets. In the single VLAN mode, all device services belong to the same VLAN.
Page 119: Multi-Service Vlan
MX Series Voice Gateway User Manual Figure 3-91 Configuring the Single VLAN Example of Single VLAN Configure the device to work in single VLAN mode with a corresponding VLAN tag of 200, and restart the device. Check that all data packets sent by the device carry a VLAN ID 200, as shown in Figure 3-92.
Page 120: Figure 3-93 Configuring Voice Vlan To Work In Mode 1
User Manual MX Series Voice Gateway Configuring Voice VLAN The device includes a VLAN tag configured in the voice VLAN in SIP, RTP and T.38 data packets. The voice VLAN of the device has the following two modes: Mode 1 and Mode 2.
Page 121: Figure 3-94 Configuring Voice Vlan To Work In Mode 2
MX Series Voice Gateway User Manual In this mode, the voice VLAN cannot be configured with a separate address but shares the IP address of the VLAN interface of the device. On the web interface, click Basic>VLAN, and ensure that the VLAN function is set to On, and Mode is set to Multi-service VLAN.
Page 122: Figure 3-95 Configuring Management Vlan
User Manual MX Series Voice Gateway Figure 3-95 Configuring Management VLAN Example of Multi-Service VLAN Figure 3-96 shows the network environment. The ports for connecting the switch and HX4 are added to VLAN 200 and VLAN 300. The port for connecting the switch and SIP server is added to VLAN 300.
Page 123: Figure 3-97 Configuring Multi-Service Vlan
MX Series Voice Gateway User Manual Figure 3-97 Configuring Multi-Service VLAN 2. Restart the device for the VLAN to take effect. 3. Use the PC belonging to VLAN 200 to log in to the web page. On the Basic > Status page, the IP address of each interface of the device can be viewed as shown in Figure 3-98.
Page 124: Figure 3-99 Sip Data Packet Carrying Vlan Tag Of The Voice Vlan In The Multi-Service Vlan Mode
User Manual MX Series Voice Gateway 4. Enable the device to register with the SIP server and call an extension number on the SIP server. Check that VLAN tag 300 configured in the voice VLAN is carried in the SIP packet and RTP packet.
Page 125 MX Series Voice Gateway User Manual Making an OpenVPN Client Certification (HX4E/MX8 When the device serves as the OpenVPN client, a certificate needs to be uploaded as described in 2.6.4 Certificate. To make a certificate, follow this procedure: Obtain from the server the .ovpn file, or the “ca.crt”, “client.crt”, “client.key” and “ta.key files, and other information.
Page 126 User Manual MX Series Voice Gateway </cert> <key> # Copy the content beginning with “-----BEGIN …” and ending with “-----END …”fromclient.key to # replace the following content. -----BEGIN RSA PRIVATE KEY----- -----END RSA PRIVATE KEY----- </key> <tls-auth> # Copy the content beginning with “-----BEGIN …” and ending with “-----END …” from ta.key to # replace the following content.
Page 127 MX Series Voice Gateway User Manual New Rock Technologies, Inc.
Page 128: Appendix: High Availability Configuration
User Manual MX Series Voice Gateway Appendix: High availability configuration For configuration details, High Availability Configuration Guide. Note: If the link is unavailable, go to New Rock's official website: http://newrocktech.com to obtain the file from Support>Download >[Task Guide] High Availability Configuration Guide...
Page 129: Appendix: Auto Provisioning Configuration
MX Series Voice Gateway User Manual Appendix: Auto provisioning configuration MX8A/HX4E series voice gateways support auto provisioning, which allows users to manage gateway configuration and firmware upgrades remotely and centrally. In this mode, users manage and store firmware upgrade packages and gateway configuration files on an automatic configuration server (ACS).

This manual is also suitable for:

Mx60e Hx4e Mx60 Mx8a Mx120g

New Rock Technologies MX series User Manual

Amendment Records

Contents

Figures

Tables

1 Overview

2 Parameters Setting

3 Appendix: VLAN Configuration

Appendix: High Availability Configuration

Appendix: Auto Provisioning Configuration

Quick Links

User Manual

Need help?

Questions and answers

Related Manuals for New Rock Technologies MX series

Summary of Contents for New Rock Technologies MX series

This manual is also suitable for:

Table of Contents