Page 1 VRG5-31412 Series Residential Gateway Network Management User’s Manual Version 0.91...
Page 2 Trademarks Contents are subject to revision without prior notice. All other trademarks remain the property of their respective owners. Copyright Statement Copyright  2019, All Rights Reserved. This publication may not be reproduced as a whole or in part, in any way whatsoever unless prior consent has been obtained from Company.
Page 3 Revision History Version Firmware Date Description 0.90 0.99.00 2017/01/24 First Release 0.91 0.99.00 2019/03/08 Add a note of Copy-cfg command...
Page 4: Table Of Contents
Table of Contents Chapter 1. INTRODUCTION ........................7 1.1 Management Options ................................8 1.2 Interface Descriptions ................................8 1.3 Connecting the Residential Gateway ............................9 Chapter 2. Command Line Interface (CLI) ....................9 2.1 Remote Console Management - Telnet ............................ 9 2.2 Navigating CLI ..................................
Page 5 3.5.2 Wireless Security ................................104 3.5.3 Wireless Advanced ............................... 119 3.5.4 MAC Access Filter ................................. 123 3.5.5 WPS ....................................124 3.6 Security ....................................125 3.6.1 Firewall ..................................125 3.6.2 Packet Filter .................................. 126 3.6.3 URL Filter ..................................130 3.6.4 VPN Passthrough ................................131 3.6.5 UPnP .....................................
Page 6 APPENDIX A: Set Up DHCP Auto-Provisioning ..................209 APPENDIX B: DHCP Text Sample ......................214...
Page 7: Chapter 1. Introduction
1. INTRODUCTION Thank you for purchasing the WLAN Residential Gateway which is designed to aim at FTTX applications. This WLAN Residential Gateway provides four TP ports for LAN applications, one fiber optic or TP port for WAN, wireless function provides users not only more flexible ways to enjoy bandwidth-intensive services but also more secure internetwork connections by implementing packet or URL filtering policies.
Page 8: Management Options
1.1 Management Options Management options available in this Residential Gateway are listed below:  CLI Management  Web Management Web Management is of course done over the network. Once the Residential Gateway is on the network, you can login and monitor the status remotely or locally by a web browser. Local console-type Web management, especially for the first time use of Residential Gateway to set up the needed IP, can also be done through any of the four 10/100/1000Base-T 8-pin RJ-45 ports located at the front panel of the Residential Gateway.
Page 9: Connecting The Residential Gateway
MDI/MDIX auto-crossover, i.e. either crossover or straight through CAT-5 cable may be used. Since there is no separated RJ-45 Management Console port for this Residential Gateway, however any of these four 10/100/1000Base-T RJ-45 ports can be used temporarily as the RJ-45 Management Console Port for local management.
Page 10: Navigating Cli
Step 1. Use Local Console to assign an IP address to the Gateway  IP address  Subnet Mask  Default gateway IP address, if required Step 2. Run Telnet Step 3. Log into the Gateway CLI Limitations: When using Telnet, keep the following in mind: Only two active Telnet sessions can access the Gateway at the same time.
Page 11: Quick Keys
Logout from the CLI or terminate User Mode logout Console or Telnet session. Privileged Mode 2.2.2 Quick Keys In CLI, there are several quick keys that you can use to perform several functions. The following table summarizes the most frequently used quick keys in CLI. Keys Purpose Enter an unfinished command and press “Tab”...
Page 12: Login Username & Password
Symbols Brief Description > Currently, the device is in User mode. Currently, the device is in Privileged mode. (config)# Currently, the device is in Global Configuration mode. Syntax Brief Description Reference parameter. [-s size] [-r repeat] [-t timeout] These three parameters are used in ping command and are optional, which means that you can ignore these three parameters if they are unnecessary when executing...
Page 13: User Mode
required for default setting). When system prompt shows “Gateway>”, it means that the user has successfully entered the User mode. For security reasons, it is strongly recommended that you add a new login username and password using User command in Configuration mode. When you create your own login username and password, you can delete the default username (admin) to prevent unauthorized accesses.
Page 14: Privileged Mode
99)secs] [-r repeat (1-99) Enter the repeat value that how many times times] should be pinged. [-t timeout (1-99) Enter the timeout value when the specified IP secs] address is not reachable. (optional) Example Gateway> ping 8.8.8.8 Gateway> ping 8.8.8.8 –s 128 –t 10 2.4 Privileged Mode The only place where you can enter the Privileged (Enable) mode is in User mode.
Page 15 Note: For ISP, the default write protection level is set “home” in configuration file on the ground of safety, which means the following functions are unable to be overwritten when executing configure restoration. 1. DDNS 2. Network Setup (LAN-IP, DHCP Server, DHCP Reserved) 3.
Page 16: Firmware Command
Example Gateway# copy-cfg to ftp 192.168.1.198 HS_0600_file.conf running misadmin1 abcxyz Gateway# copy-cfg to tftp 192.168.1.198 HS_0600_file.conf startup 3. Restore the Gateway back to default settings. Command / Example Gateway# copy-cfg from default Gateway# reload 4. Restore the Gateway back to default settings but keep IP configurations. Command / Example Gateway# copy-cfg from default keep-ip Gateway# reload...
Page 17: Reload Command
timeout (1-99) secs] (optional) [-t timeout (1- [-r repeat (1-99) Enter the repeat value that how many times 99)secs] times] should be pinged. [-t timeout (1-99) Enter the timeout value when the specified IP secs] address is not reachable. (optional) Example Gateway>...
Page 18 configuration error. It can be used in Privileged or Configuration mode. The following describes different uses of “show” command. 1. Display system information Enter “show system-info” command in Privileged or Configuration mode, and then the following information will appear. Company Name: Display a company name for this Gateway. Use “system-info company-name [company-name]”...
Page 19: Configuration Mode
Refer to “Show interface statistics command” and “Show sfp information command” sections. 4. Show default, running and startup configurations Refer to “show default-setting copmmand”, “show running-config command” and “show start-up- config command” sections. 2.5 Configuration Mode When you enter “configure” or “config” and press “Enter” in Privileged mode, you will be directed to Global Configuration mode where you can set up advanced switching functions.
Page 20: No Command
Gateway(config)# interface 1,3-5 Enter a single interface number together with Gateway(config-if-1,3-5)# a range of interface numbers. Use both comma and hypen to signify the combination of different interface numbers. In this example, interface 1, 3, 4, 5 will apply commands entered. 2.5.2 No Command Almost every command that you enter in Configuration mode can be negated using “no”...
Page 21: Applications Command
M/B Version: Display the main board version. Serial Number: Display the serial number of this Gateway. Up Time: Display the up time since last restarting. Local Time: Display local time. 2. Display or verify currently-configured settings Refer to the following sub-sections. “Interface command”, “IP command”, “User command”, “VLAN command”...
Page 22 Gateway(config)# no Disable DMZ function. applications dmz Show Command Gateway(config)# show Shows the current status of DMZ. applications dmz 2. Set up Port Forwarding function. Command Parameter Description Gateway(config)# applications Enable Port Forwarding function. A host port-forwarding on the private network of the Residential Gateway is invisible from the Internet for it is protected by the firewall.
Page 23: Interface Command
Gateway(config-port-forwarding- Clear the IP address of the server on the No.)# no client-ip private network. Gateway(config-port-forwarding- Return local port to default value 1. No.)# no local-port Gateway(config-port-forwarding- Return public port to default value 1. No.)# no public-port Return protocol to default value “Both”. Gateway(config-port-forwarding- No.)# no protocol Show Command...
Page 24 Gateway(config-net-PORT- [copper|fiber] Specify combo port on copper or fiber PORT)# combo-mode port. [copper|fiber] No command Gateway(config-net-PORT- Disable combo mode. PORT)# no combo-mode 4. Set up port duplex mode. Command Parameter Description Gateway(config-net-PORT- [full] Configure port duplex to full. PORT)# duplex [full] No command Gateway(config-net-PORT- Configure port duplex to half.
Page 25 7. Shutdown Interface. Command Parameter Description Gateway(config-net-PORT- Disable interface. PORT)# shutdown No command Gateway(config-net-PORT- Enable interface. PORT)# no shutdown 8. Set up port speed. Command Parameter Description Gateway(config-net-PORT- [1000|100|10] Set port speed as 1000Mbps, 100Mbps or PORT)# speed [1000|100|10] 10Mbps. Note1 : Speed can only be configured when auto-negotiation is disabled.
Page 26 Gateway(config-net-PORT- Undo VLAN mode configuration. PORT)# vlan dot1q-vlan mode Gateway(config-net-PORT- Undo VLAN trunk native mode PORT)# no vlan dot1q-vlan configuration. mode trunk native Show command Gateway(config-net-PORT- Show the current status of each port. PORT)# show interface Gateway(config-net-PORT- Show IEEE802.1q tag VLAN table. PORT)# show dot1q-vlan tag- vlan 10.
Page 27 msc0 msc1 msc2 msc3 29:nss1- 30:nss1- 31:nss1- 32:nss1- msc4 msc5 msc6 msc7 33:nss1- 34:nss1- 35:nss2- 36:nss2- msc8 msc9 msc0 msc1 37:nss2- 38:nss2- 39:nss2- 40:nss2- msc2 msc3 msc4 msc5 41:nss2- 42:nss2- 43:nss2- 44:nss2- msc6 msc7 msc8 msc9 Gateway(config-wlan1)# Enable Multicast to Unicast function. multicast-to-unicast Gateway(config-wlan1)# Enable Protection function.
Page 28 Gateway(config-wlan1)# no Disble LDPC function. ldpc Gateway(config-wlan1)# no Return multicast rate to default value multicast-rate Gateway(config-wlan1)# no Disable Multicast to Unicast function. multicast-to-unicast Gateway(config-wlan1)# no Disable Protection function. protection Gateway(config-wlan1)# no Return RF output power to default value. rf-output-power Gateway(config-wlan1)# no Return RTS threshold to default value.
Page 29 Gateway(config-wlan2)# [channel_number] Specify the channel number from the list shown channel [channel_number] below: Channel Number: auto, 5-13 Gateway(config-wlan2)# Enable Coexist function. coexist Gateway(config-wlan2)# [20|40|80] Specify the channel width in MHz. channel width [20|40|80] Gateway(config-wlan2)# [256-2346] Specify the fragment threshold ranging fragment-threshold [256- between 256-2346.
Page 30 Gateway(config-wlan2)# Enable TDLS Channel Switch Prohibited tdls channel-switch- function. prohibited Gateway(config-wlan2)# Enable TDLS Prohibited function. tdls prohibited Gateway(config-wlan2)# tx- Enable Tx Beamforming function. breamforming Gateway(config-wlan2)# Enable WLAN Partition function. wlan-partition No Command Gateway(config-wlan2)# no Disable Aggregation function. aggregation Gateway(config-wlan2)# no Return Beacon Interval to default value.
Page 31 Gateway(config-wlan2)# no Disable TDLS Prohibited function. tdls prohibited Gateway(config-wlan2)# no Disable Tx-Beamforming function. tx-breamforming Gateway(config-wlan2)# no Disable WLAN Partition function. wlan-partition Show Command Gateway(config)# show Shows the current advanced status of WiFi interface wlan2 2.4G. 11. Set up WiFi basic & security settings. For Bandwidth 5G: Command Parameter...
Page 32 password [password] Gateway(config-wlan1-ssid- [1812-65535] Specify the port number for the RADIUS No.)# dot1x radius-server- server. The default value is 1812. port [1812-65535] Gateway(config-wlan1-ssid- [nat|bridge] Specify the operation mode for the service set, No.)# operation-mode either NAT or Bridge mode. [nat|bridge] Gateway(config-wlan1-ssid- [0-1000] Specify the limit in Mbps for data reception.
Page 33 Gateway(config-wlan1-ssid- [ascii|hex] Select ASCII (5 characters) or HEX (10 No.)# security encryption characters) the format of the key. wep key format [ascii|hex] Gateway(config-wlan1-ssid- [64|128] Select 64 bits or 128 bits from the pull-down No.)# security encryption menu. The wireless client devices must have wep key [64|128] the same WEP encryption length as the Residential Gateway.
Page 34 Gateway(config-wlan1-ssid- [1-4094] Specify access VLAN ID for the SSID. No.)# vlan dot1q-vlan access-vlan [1-4094] Gateway(config-wlan1-ssid- Enable Wireless Multimedia function. It No.)# wmm provides basic Quality of service (QoS) features to IEEE 802.11 networks. No Command Gateway(config-wlan1-ssid- Disable the WiFi service set. No.)# no active Gateway(config-wlan1-ssid- Reset wireless operation band to default.
Page 35 Gateway(config-wlan2-ssid- [b|g|n|bg|gn|bgn] Select one of the following modes for your No.)# [b|g|n|bg|gn|bgn] wireless network. Network Mode Description In this mode, the Residential Gateway will 2.4 GHz (B) only support 802.11b standard. In this mode, the Residential Gateway will 2.4 GHz (G) only support 802.11g standard.
Page 36 Gateway(config-wlan2-ssid- [1812-65535] Specify the port number for the RADIUS No.)# dot1x radius-server- server. The default value is 1812. port [1812-65535] Gateway(config-wlan2-ssid- [nat|bridge] Specify the operation mode for the service set, No.)# operation-mode either NAT or Bridge mode. [nat|bridge] Gateway(config-wlan2-ssid- [0-1000] Specify the limit in Mbps for data reception.
Page 37 Gateway(config-wlan2-ssid- [64|128] Select 64 bits or 128 bits from the pull-down No.)# security encryption menu. The wireless client devices must have wep key [64|128] the same WEP encryption length as the Residential Gateway. Gateway(config-wlan2-ssid- [radius|shared- Select Enterprise (RADIUS) or Personal (Shared Key) as the authentication mode.
Page 38 Gateway(config-wlan2-ssid- Enable Wireless Multimedia function. It No.)# wmm provides basic Quality of service (QoS) features to IEEE 802.11 networks. No Command Gateway(config-wlan2-ssid- Disable the WiFi service set. No.)# no active Gateway(config-wlan2-ssid- Reset wireless operation band to default. No.)# no band Gateway(config-wlan2-ssid- Have the SSID hidden in public.
Page 39: Ip Command
kbps Gateway(config-if-PORT- [port | queue] Configure egress rate mode PORT)# qos rate-limit egress [port | queue] Gateway(config-if-PORT- [0-7] Specify the default priority bit to the selected PORT)# qos user-priority interfaces. [0-7] No command Gateway(config-if-PORT-PORT)# no qos Undo default queue on the port default-class Gateway(config-if-PORT-PORT)# no qos rate- Delete QoS ingress rate limit setting.
Page 40 2. Set up an IP address of the Gateway or configure the Gateway to get an IP address automatically from DHCP server. IP command Parameter Description Gateway(config)# ip lan- [A.B.C.D] Enter the desired IP address for your Gateway. ip [A.B.C.D] [255.X.X.X] [255.X.X.X] Enter subnet mask of your IP address.
Page 41 Gateway(config-address- [aa:bb:cc:dd:ee:ff] This is the MAC address of the DHCP client reservation-No.)# ip- which you want to bundle with the IP address in address IP field. [aa:bb:cc:dd:ee:ff] No command Gateway(config)# no ip dhcp server domain- Remove DHCP domain name. name [domain-name] Gateway(config)# no ip dhcp server ip-lease- Return the lease time to default value.
Page 42 snooping immediate-leave No command Gateway(config)# no ip igmp Disable IGMP/MLD Snooping function. snooping Gateway(config)# no ip igmp Disable immediate leave function. snooping immediate-leave Show command Gateway(config)#show ip igmp Show current IGMP/MLD snooping status snooping including immediate leave function. Gateway(config)#show ip igmp Show IGMP/MLD group table.
Page 43 6. Configure WAN Interface Command Parameter Description Gateway(config)# ip wan- Apply all WAN interface configuration and interface apply all VLAN configuration. Gateway(config)# ip wan- Specify the number of WAN data interface. interface data [1] The data interface is the default WAN Interface of the Residential Gateway.
Page 44 remotely log in the Residential Gateway via the Management Interface’s IP address if the source IP address is allowed using management command. And if the Management Interface is not created on the Residential Gateway, the network administrator can remotely log in the Residential Gateway via the data Interface’s IP address.
Page 45: Management Command
Gateway(config- Return Static IP connection to default data/management -1)# no static- setting Gateway(config- Return VLAN ID to default setting. data/management -1)# no vlan- Show command Gateway(config- Show current WAN DATA interface status. data/management -1)# show 2.5.7 Management Command Command Parameter Description Gateway(config)# Permit the computers to manage the...
Page 46 The default value is 80. Gateway(config)# Enable CPE WAN Management Protocol management cwmp-agent function. Gateway(config)# Submit your settings after you finish management cwmp-agent configuring CWMP. apply Gateway(config)# [password] Specify the password for Connection management cwmp-agent Request Server. connection-request password [password] Gateway(config)# [username] Specify the username for Connection...
Page 47 Gateway(config)# no Deny the Web management access on management access- LAN port. control lan web Gateway(config)# no Clear configured IP address. management access- control source-binding Gateway(config)# no Deny the computers to manage the management access- Residential Gateway from its WAN ports. control wan Gateway(config)# no Deny the SNMP management access on...
Page 48: Ntp Command
control Gateway(config)# Show Show the current status of CWMP. management cwmp-agent 2.5.8 NTP Command Command Parameter Description Gateway(config)# ntp Enable the Gateway to synchronize the clock with a time server. Gateway(config)# ntp [recurring | date] Enable daylight saving with recurring daylight-saving [recurring | mode.
Page 49: Qos Command
4=4hours 5=6hours, 6=8hours, 7=12hours, 8=24hours Gateway(config)# ntp time- [0-135] Specify the time zone to which the zone [0-135] Gateway belongs. Use space and a question mark to view the complete code list of 147 time zones. For example, “Gateway(config)# ntp time- zone ?”...
Page 50 Gateway(config)# qos queue- [1:2:4:8] Specify the queue weighted weighted [1:2:4:8] No command Gateway(config)# no qos Disable QoS function Gateway(config)# no qos 802.1p- Undo 802.1p mapping Gateway(config)# no qos dscp-map [0-63] Undo specify a DSCP value [0-63] Gateway(config)# no queuing-mode Specify QoS queuing mode as strict mode Gateway(config)# no qos queue- Undo specify the queue...
Page 51: Security Command
2.5.9 Security Command 1. General Settings Command Parameter Description Gateway(config)# security Enable Firewall function. firewall No Command Gateway(config)# no Disable Firewall function. security firewall Show Command Gateway(config)# show Shows the current status of firewall. security firewall 2. Set up Packet Filter Command Parameter Description...
Page 52 Gateway(config-lan-No.)# [A.B.C.D] Specify an IP address range for the LAN destination ip [A.B.C.D] filter to block packets whose destination IP addresses are in this range. Gateway(config-lan-No.)# [1-65535] Specify the destination port number of the destination port-number [1- packets which the LAN Filter will block. 65535] Gateway(config-lan-No.)# [tcp | udp]...
Page 53 Gateway(config)# no [1-10] Delete the configured application rule. security packet-filter application [1-10] Gateway(config)# no [1-10] Delete the configured LAN rule. security packet-filter lan [1- Gateway(config)# no [1-10] Delete the configured MAC rule. security packet-filter mac [1-10] Gateway(config)# no [1-10] Delete the configured WAN rule. security packet-filter wan [1-10] Gateway(config-...
Page 54 Show Command Gateway(config)# show Shows all the security packet rule table, security packet-filter including Application, LAN, MAC and WAN table. Gateway(config- Shows the specified application packet application-No.)# show rule. Gateway(config-lan-No.)# Shows the specified LAN packet rule. show Gateway(config-mac-No.)# Shows the specified MAC packet rule. show Gateway(config-wan-No.)# Shows the specified WAN packet rule.
Page 55 “Internet Protocol Security”. It is a suite of protocols for secure exchange of packets at the IP layer. Gateway(config)# security Enable the L2TP passthrough on the vpn-passthrough l2tp Residential Gateway. L2TP stands for “Layer 2 Tunneling Protocol”. It is used to enable Point-to-Point sessions via the Internet on the Layer 2 level.
Page 56 Gateway(config)# security Enable ICMP smurf function to prevent ddos icmp-smurf the hacker to forge the IP address of the Residential Gateway and send repeated ping requests to it flooding the network. Gateway(config)# security Enable IP land function to prevent an ddos ip-land attack which involves a synchronized request being sent as part of the three...
Page 57 Gateway(config)# security Enable prevent Residential ddos tcp-scan Gateway to be probed by a hacker for open TCP ports to then block. Gateway(config)# security Enable to prevent the hacker to send a ddos tcp-syn-with-data volume of requests for connections that cannot be completed. Gateway(config)# security Enable to prevent a series of systematic ddos tcp-udp-portscan...
Page 58 Gateway(config)# no Disable IP spoof security ddos ip-spoof Gateway(config)# no Disable IP teardrop security ddos ip-teardrop Gateway(config)# no Disable ping-of-death security ddos ping-of-death Gateway(config)# no Disable FIN attack prevention on the LAN security ddos per-source-ip port IP address Gateway(config)# no Disable ICMP attack prevention on the security ddos per-source-ip LAN port IP address...
Page 59: Sip Command
2.5.10 SIP Command Command Parameter Description Gateway(config)# sip [1-2] Specify one of two account entry account [1-2] Gateway(config-account- Enable the specified SIP account. No.)# active Gateway(config-account- [name] Specify the authentication user name, up No.)# authentication to 31 characters. username [name] Gateway(config-account- [password] Specify the authentication password, up to...
Page 60 [60-65535] Gateway(config)# sip [1024-65535] Specify start port. media-port [1024-65535] Gateway(config)# sip [90-65535] Specify session timer in second. session-timer [90-65535] Gateway(config)# sip sip- [1024-65535] Specify SIP port number. port-number [1024-65535] Gateway(config)# sip time- [100-1000] Specify SIP time interval in second. interval [100-1000] Gateway(config)# sip [tcp] Specify SIP transport type to TCP.
Page 61: Snmp Command
No.)# no proxy port Gateway(config-account- Set server address to default. No.)# no server address Gateway(config-account- Set server port to default. No.)# no server port Gateway(config-account- Set user name to default. No.)# no username Show Command Gateway(config-account- Show the information of the account. No.)# show Gateway(config)# show sip Show SIP configuration...
Page 62 Gateway(config-community- Remove the SNMP community descriptions for “mycomm”. NAME)# no description Gateway(config-community- Remove the configured access privilege. NAME)# no level This will set this community’s level to “access denied”. Show command Gateway(config)# show snmp-server Show or verify whether SNMP is enabled or disabled.
Page 63 Gateway(config)# show [1-2] Show the specified SNMP trap destination snmp-server trap-destination account information. [1-2] Gateway(config-trap- Show and verify the selected trap ACCOUNT)# show destination account’s information. Exit command Gateway(config-trap-ACCOUNT)# exit Return to Global Configuration mode. Trap-destination example Gateway(config)# snmp-server trap- Create a trap destination account.
Page 64: Syslog Command
Show command Gateway(config)# show snmp-server Show community configuration. community Gateway(config)# show snmp-server trap- Show trap destination configuration. destination Gateway(config)# show snmp-server trap- Show the current enable/disable status of type each type of trap. Trap-type example Gateway(config)# snmp-server trap-type All types of SNMP traps will be sent. 2.5.12 Syslog Command Syslog command Parameter...
Page 65: System-Info Command
Gateway(config)# syslog Enable System log function. Gateway(config)# syslog server Set the primary system log server IP address 192.180.2.1 to 192.168.2.1. 2.5.13 System-Info Command Command Parameter Description Gateway(config)# system- [dhcp_vendor_id] Enter a DHCP vendor ID, up to 55 info dhcp-vendor-id alphanumeric characters, for this Gateway. [dhcp_vendor_id] Gateway(config)# system- [host_name]...
Page 66 Gateway(config)# system-info system-contact Set the system contact field to “info@compnay.com”. info@company.com Set the system location field to “13thfloor”. Gateway(config)# system-info system-location 13thfloor Set the system name field to “backbone1”. Gateway(config)# system-info system-name backbone1 Gateway(config)# system-info host-name Change the Gateway’s hostname to “edgeswitch10”.
Page 67: User Command
2.5.14 User Command User command Parameter Description Gateway(config)# user [user_name] Enter the new account’s username. The name [user_name] authorized user login name is up to 20 alphanumeric characters. Only 10 login accounts can be registered in this device. Gateway(config-user- Activate this user account. NAME)# active Gateway(config-user- [description]...
Page 68: Vlan Command
Gateway(config-user-miseric)# password Set up a password for this new account “miseric” mis2256i Gateway(config-user-miseric)# level rw Set this user account’s privilege level to “read and write”. 2.5.15 VLAN Command Command Parameter Description Gateway(config)# vlan apply Apply all WAN interface configuration and all VLAN configuration.
Page 69 Gateway(config-account-No.)# Specify voice rx level voice-level rx [1-5] Gateway(config-account-No.)# Specify voice tx level voice-level tx [1-5] Gateway(config)# voice apply Apply all voice configuration. Gateway(config)# voice call- Enable call waiting. service call-wait Gateway(config)# voice call- Specify call waiting timeout in second. service call-wait timeout Gateway(config)# voice codec [1-5]...
Page 70 Gateway(config)# dialing-setting [1-60] Specify the time for first-digit timeout in first-digit [1-60] second. If a user picks up the handset without dialing a call within this specified time, the dialing tone will be changed to busy tone. Gateway(config)# dialing-setting [**| *# | *1 | *2 Select the key from the drop-down menu.
Page 71 Gateway(config)# voice fxs [before-ring | Select Before Ring when you want caller-id-display [before-ring | after-ring ] information of caller ID to be shown before after-ring ] ringing. Select After Ring when you want information of caller ID to be shown after ringing.
Page 72 Gateway(config)# no voice Configure codec priority and standard [1-5] codec [1-5] Specify codec priority Gateway(config)# no voice dtmf- Configure DTMF method to default method Gateway(config)# no voice [1-10] Specify item and clear the number of dialing-plan [1-10] dialing plan Gateway(config)# no voice Configure first digit timeout to default dialing-setting first-digit Gateway(config)# no voice...
Page 73 dialing-plan [1-10] configuration Gateway(config)# show voice Display dialing setting configuration dialing-setting Gateway(config)# show voice Display FAX configuration Gateway(config)# show voice fxs Display FXS configuration Gateway(config)# show voice Display phone book configuration phone-book...
Page 74: Chapter 3. Web Management
3. WEB MANAGEMENT This chapter describes how to manage the Residential Gateway through a Web browser. The IP address concepts and gaining access to the Residential Gateway will be introduced first, and then followed by web-based management instructions. 3.1 The Concept of IP address IP addresses have the format n.n.n.n, for example 168.168.8.100.
Page 75  Run a Web browser and specify the Residential Gateway’s IP address to reach it. (The default IP of Residential Gateway is “192.168.0.1” before any changes.)  Login to the Residential Gateway to reach the Main Menu. Once you gain the access, a Login window appears like the following: Enter the authorized user name and password then click “Login”.
Page 76: Introduction To Sub-Menus
3.3 Introduction to Sub-Menus If you successfully login to the web management, the first page you will see is as follows: Main Menu Bar Configuration Area Main Menu Bar At the left of the screen page is the Main Menu bar. It contains the following main tabs: Setup －...
Page 77 － To configure the QoS settings and the rate limit of the Residential Gateway － To configure SIP settings, such as SIP Basic/Advanced/Account Settings. SIP Settings Voice － To configure VoIP settings, such as Voice, Phone Book, Call server, FAX and FXS port settings, etc.
Page 78: Setup
3.4 Setup Select Setup from the Main Menu bar. Then you can see the sub-items – System Information, Basic Setup, Network Setup and Routing Setup – on the sub menu bar.
Page 79: System Information
3.4.1 System Information Select System Information from the Setup sub menu bar. Then, System Information screen page appears as follows: This page displays basic information of the Residential Gateway and information about the SFP transceiver plugged in the WAN port. And for more details, please refer to the description of the individual section below.
Page 80 System Name — This is the model name of the Residential Gateway. System Location — Display a brief location description for this Residential Gateway. DHCP Vendor ID — Enter the Vendor ID used for DHCP relay agent function. Model Name — Display the product’s model name. Host Name —...
Page 81 Speed — This is the maximal link speed which the fiber transceiver supports. Distance — This is the maximal transmission distance which the fiber transceiver supports. Vendor Name — This is the name of the manufacturer. Vendor PN — This is the model name of the fiber transceiver. Vendor SN —...
Page 82: Basic Setup
RX Power (dbm) — The slide-in SFP module optical Receiver power. 3.4.2 Basic Setup This page enables the network administrator to configure the general settings of the Residential Gateway. Select Setup > Basic Setup to access this page. And it will appear as follows: And for details on the settings of this page, please refer to the description of the individual section below.
Page 83 3.4.2.1 WAN Interface This section shows the basic information of the WAN interfaces of the Residential Gateway. Below is a description of each column in the list. Status － It is Enabled if the WAN interface is activated. And it is Disabled if the WAN interface is deactivated.
Page 84 VLAN － This is the VLAN ID which this WAN interface will add to the egress untagged packets. P-Bit －This is the 802.1p priority value which this WAN interface will add to the egress untagged packet together with its VLAN ID. IP －...
Page 85 address if the source IP address is allowed in the “Device Access” page of the UI. And if the Management Interface is not created on the Residential Gateway, the network administrator can remotely log in the Residential Gateway via the data Interface’s IP address. The difference between the two scenarios is illustrated in the following diagram.
Page 86 VLAN － Specify a VLAN ID for the WAN interface in the text box. And the WAN interface will add this VLAN ID to the egress untagged packets. ( This parameter is only available when the WAN information is Data, Management) P-Bit －...
Page 87 Enable Ping Access － Click Enable to allow the WAN interface to reply the ICMP echo requests which it receives from the public network. Note: If you want to assign manual DNS to LAN side, please go to “Network Setup” to disable DNS proxy.
Page 88 3.4.2.2 VLAN Settings Select one of the following two system operation modes for the Residential Gateway in the pull- down menu: Inside NAT VLAN － This is the PVID of the LAN port on the private network. Interface － Specify NAT or Bridge mode for each port. This section shows which LAN ports are on the private network (inside NAT) and which LAN ports are on the public network (outside NAT).
Page 89 When a LAN port is allocated to the public network, it is selected “Bridge” in the drop-down box. A device which is connected to this port will be a host on the public network. Bridge Mode － When the Residential Gateway is in this mode, all devices connected to the Residential Gateway from its LAN ports or WLAN are in the public network.
Page 90 3.4.2.3 VLAN State This is to show which VID the ports belongs to. Click VLAN State to view the VLAN table or check members of the VLAN groups of the Residential Gateway. － View-only filed that shows the VID  When untagged packets enter the Residential Gateway from a LAN port on the public network and leave from the WAN port of the Residential Gateway, they will be added the PVID and P-Bit value of the incoming LAN port.
Page 91: Ddns
3.4.3 DDNS DDNS stands for “Dynamic Domain Name Service”. It allows a host to bind with a permanent domain name so the host can be found on the internet with this domain name. With DDNS, the network administrator can access the Residential Gateway with a permanent domain name even if it is often assigned different IP addresses by DHCP.
Page 92: Network Setup
Click Apply to submit your settings after you finish configuring this page. DDNS State This is a view-only section. It displays information about the current status of the DDNS service such as “Initiating DDNS service”, “good (The update was successful, and the hostname is now updated.)”...
Page 93 3.4.4.1 LAN IP This section allows you to assign a private IP address to the Residential Gateway. This is an IP address which the Residential Gateway has on the private network. Below is the description of the configuration parameters for the private network setup. IP Address －...
Page 94 DHCP Server － Enable or disable the DHCP server function of the Residential Gateway. Domain Name － Specify the domain name of the Residential Gateway in the text boxes. Start IP Address － Specify an IP address from which the Residential Gateway will start to assign the IP addresses to the DHCP clients on the private network.
Page 95 3.4.4.3 DHCP Reservation This section contains the DHCP Reservation Table. The DHCP Reservation Table includes the IP addresses reserved for the designated DHCP clients. You can create a new entry or modify an entry of this table in the text boxes. Below is the description for each column of the DHCP Reservation Table.
Page 96: Routing Setup
MAC － This is the MAC address of the DHCP client which you want to bundle with the IP address in IP field. Action － Click Check Icon to add a new entry after you configure it in the textboxes of the table.
Page 97 3.4.5.1 Static Routing This section allows you to edit or modify an entry in the Static Route Table of the Residential Gateway. A static route is a pre-determined pathway that packets can travel to reach a specific destination network. Enter the information below to set up a static route in the Static Route Table. Static Route －...
Page 98: Wifi
3.4.5.2 Routing Table This table displays all the static routes created on the Residential Gateway. Click Refresh to renew the current status of routing table. 3.5 WiFi Select WiFi in the Main Menu bar. Then you can see the sub-items – Wireless Setup, Wireless Security and Wireless Advanced –...
Page 99: Wireless Setup
3.5.1 Wireless Setup This page allows the network administrator to set up a wireless network of the Residential Gateway. Select Wireless Setup from WiFi sub menu bar. Then, Wireless Setup screen page appears as follows: For Bandwidth 5G: WiFi State — Enable WiFi function for 5G bandwidth. DFS State —...
Page 100 upper sideband. (This field is only available when the network mode is 2.4 GHz (N), 2.4 GHz (G+N), or 2.4 GHz (B+G+N).) Channel Number —Select one of the channels in the pull-down menu. The wireless channels are stipulated to prevent too many APs from using the same frequency. Select the channel which is used by fewer APs in your application environment.
Page 101 WMM — Click to enable or disable Wireless Multimedia function. It provides basic Quality of service (QoS) features to IEEE 802.11 networks. Data Rate — Select a data rate in the pull-down menu to decide the speed of the wireless network. Tx Restrict (Mbps) —...
Page 102 Control Sideband — The extra bandwidth will be available when the channel bandwidth is 40MHz. If you select Upper, the extra bandwidth will be extended in the upper sideband. (This field is only available when the network mode is 2.4 GHz (N), 2.4 GHz (G+N), or 2.4 GHz (B+G+N).) Channel Number —Select one of the channels in the pull-down menu.
Page 103 Broadcast SSID — Enable to have the SSID disclose in public, or disable to have the SSID hidden in public. WMM — Click to enable or disable Wireless Multimedia function. It provides basic Quality of service (QoS) features to IEEE 802.11 networks. Data Rate —...
Page 104: Wireless Security
3.5.2 Wireless Security This page allows the network administrator to set the authentication method for the wireless network of the Residential Gateway when the WiFi connection is set up manually. Select Wireless Security from WiFi sub menu bar. Then, Wireless Security screen page appears as follows: This section enables you to set the authentication type for the WLAN whose SSID is selected in the section above.
Page 105 Select SSID — Select the SSID you want to configure. Encryption — The Residential Gateway supports four types of encryptions － WEP, WPA, WPA2 and WPA-Mixed. Select one of them in the drop-down menu as the encryption of this WLAN. Or select Disabled if you don’t want any data encryption for this WLAN.
Page 106 Authentication － Select Auto, Open System or Shared Key for authentication. RADIUS Sever IP Address － Specify the IP address of the RADIUS server in the text box. RADIUS Server Port － Specify the port number for the RADIUS server in the text box.
Page 107 Authentication － Select Auto, Open System or Shared Key for authentication. Key Length － Select 64 bits or 128 bits from the pull-down menu. The wireless client devices must have the same WEP encryption length as the Residential Gateway. Key Format － Select ASCII (5 characters) or HEX (10 characters) from the pull-down menu as the format of the key.
Page 108 WPA2 Cipher Suite － View-only field that shows TKIP or AES is currently used. RADIUS Sever IP Address － Specify the IP address of the RADIUS server in the text box. RADIUS Server Port － Specify the port number of the RADIUS server in the text box.
Page 109 WPA2 Cipher Suite － View-only field that shows TKIP or AES is currently used. Pre-Shared Key Format － Select Passphrase (alphanumeric format) or Hex(64characters) (“A-F”, “a-f” and “0-9”) in the pull-down menu. WPA Pre-Shared Key － Specify the pre-shared alphanumeric key value in the text box.
Page 110 WPA Cipher Suite － View-only field that shows TKIP or AES is currently used. WPA 2 Cipher Suite － View-only field that shows TKIP or AES is currently used. RADIUS Sever IP Address － Specify the IP address of the RADIUS server in the text box.
Page 111 WPA Cipher Suite －View-only field that shows TKIP or AES is currently used. WPA 2 Cipher Suite － View-only field that shows TKIP or AES is currently used. Pre-Shared Key Format － Select either Passphrase (alphanumeric format) or Hex(64characters) (“A-F”, “a-f” and “0-9”) in the pull-down menu. Pre-Shared Key －...
Page 112 Select SSID — Select the SSID you want to configure. Encryption — The Residential Gateway supports four types of encryptions － WEP, WPA, WPA2 and WPA-Mixed. Select one of them in the drop-down menu as the encryption of this WLAN. Or select Disabled if you don’t want any data encryption for this WLAN.
Page 113 Authentication － Select Auto, Open System or Shared Key for authentication. RADIUS Sever IP Address － Specify the IP address of the RADIUS server in the text box. RADIUS Server Port － Specify the port number for the RADIUS server in the text box.
Page 114 Authentication － Select Auto, Open System or Shared Key for authentication. Key Length － Select 64 bits or 128 bits from the pull-down menu. The wireless client devices must have the same WEP encryption length as the Residential Gateway. Key Format － Select ASCII (5 characters) or HEX (10 characters) from the pull-down menu as the format of the key.
Page 115 WPA2 Cipher Suite － View-only field that shows TKIP or AES is currently used. RADIUS Sever IP Address － Specify the IP address of the RADIUS server in the text box. RADIUS Server Port － Specify the port number of the RADIUS server in the text box.
Page 116 WPA2 Cipher Suite － View-only field that shows TKIP or AES is currently used. Pre-Shared Key Format － Select Passphrase (alphanumeric format) or Hex(64characters) (“A-F”, “a-f” and “0-9”) in the pull-down menu. WPA Pre-Shared Key － Specify the pre-shared alphanumeric key value in the text box.
Page 117 WPA Cipher Suite － View-only field that shows TKIP or AES is currently used. WPA 2 Cipher Suite － View-only field that shows TKIP or AES is currently used. RADIUS Sever IP Address － Specify the IP address of the RADIUS server in the text box.
Page 118 WPA Cipher Suite －View-only field that shows TKIP or AES is currently used. WPA 2 Cipher Suite － View-only field that shows TKIP or AES is currently used. Pre-Shared Key Format － Select either Passphrase (alphanumeric format) or Hex(64characters) (“A-F”, “a-f” and “0-9”) in the pull-down menu. Pre-Shared Key －...
Page 119: Wireless Advanced
3.5.3 Wireless Advanced For Bandwidth 5G: Fragment Threshold － Specify the fragment threshold ranging between 256-2346. The default value is 2346. RTS Threshold － Specify the RTS threshold ranging between 0-2347. The default value is 2347. Beacon Interval － Specify the Beacon Interval threshold ranging between 20-1024. The default value is 100.
Page 120 Protection － Click to enable or disable Protection function. Aggregation － Click to enable or disable Aggregation function. Short GI － Click to enable or disable Short GI function. WLAN Partition － Click to enable or disable WLAN Partition function. STBC －...
Page 121 Fragment Threshold － Specify the fragment threshold ranging between 256-2346. The default value is 2346. RTS Threshold － Specify the RTS threshold ranging between 0-2347. The default value is 2347. Beacon Interval － Specify the Beacon Interval threshold ranging between 20-1024. The default value is 100.
Page 122 Protection － Click to enable or disable Protection function. Aggregation － Click to enable or disable Aggregation function. Short GI － Click to enable or disable Short GI function. WLAN Partition － Click to enable or disable WLAN Partition function. STBC －...
Page 123: Mac Access Filter
3.5.4 MAC Access Filter This page allows the network administrator to make its wireless access policy for the Residential Gateway. Afterwards, the Residential Gateway can deny or allow access of specific wireless client devices to its wireless network. Select MAC Access Filter from WiFi menu. Then, MAC Access Filter screen page appears as follows: For details on the settings, please refer to the description of the individual section below.
Page 124: Wps
3.5.5 WPS Disable WPS － Check the box to disable WPS function. WPS stands for “Wi-Fi Protected Setup”. It is a standard which makes the WiFi security simpler and easier.
Page 125: Security
3.6 Security Select Security in the Main Menu bar. And the sub-items – Firewall, Packet Filter, URL Filter and VPN Pass Through – will show up on the sub menu bar. 3.6.1 Firewall Select Firewall in the sub menu bar for Security. Then, the following screen page will appear This section allows you to enable or disable the firewall protection of the Residential Gateway.
Page 126: Packet Filter
3.6.2 Packet Filter This function enables the Residential Gateway to filter out the unwanted packets according to the IP address, the source MAC address or the application protocol. So the network administrator can set up the access policies on the Residential Gateway. Select Packet Filter in the sub menu bar of Security.
Page 127 WAN Filter This section allows you to edit the WAN filter rules. The WAN filter rule will block packets which are received by the Residential Gateway from the public network and match the pre-determined condition of the rule. Below is an explanation for each column of the rule table. Enable —...
Page 128 LAN Filter This section allows you to edit the rule table for the LAN filter. The LAN filter will block packets which are received by the Residential Gateway from the private network and match the pre-determined condition of any entry in the rule table. Below is a description for each column of this table.
Page 129 of each column in this table. Enable — Select the checkbox if you want to enable this rule. MAC Address — Specify the MAC address of the packet which will be denied by this rule. Destination IP — Specify the destination IP address of the packets which will be denied by this rule.
Page 130: Url Filter
Application — The drop-down menu offers the most widely used Internet applications, including FTP, SSH, Telnet, SMTP, DNS, HTTP, POP, NNTP, IMAP, SNMP, and HTTPS. Select an application whose packets will be denied by this filter rule. Actions — Click Add New Application Filter to add a new rule to the table after you configure it in the text boxes.
Page 131: Vpn Passthrough
URL Filter String — Specify the URL address which this rule will allow or deny. Action — Click Add URL Filter to add a new rule to the table after you configure it in the text boxes. Then, click Check Icon to submit the new settings. If you need to remove any entry from this table, click Cross Icon.
Page 132: Upnp
PPTP Passthrough — Enable or disable PPTP passthrough on the Residential Gateway. PPTP stands for “Point-to-Point Tunneling Protocol”. And PPTP passthrough is a feature which allows the Point-to-Point Protocol to be tunneled through an IP network. L2TP Passthrough — Enable or disable the L2TP passthrough on the Residential Gateway.
Page 133: Ddos
3.6.6 DDoS The Residential Gateway supports DDoS Prevention. DDoS stands for “Distributed Denial of Service”. It is a Hacker’s attack from a multitude of compromised systems to a target. It will cause the target to deny the service for normal users. Select DDoS from the Security sub menu bar. Then, DDoS screen page appears as follows: This section allows you to configure the DDoS prevention feature to prevent the Residential Gateway from malicious attacks.
Page 134 Or untick the checkbox to disable this feature. But note that when the feature is disabled, the Residential Gateway will be vulnerable to DDoS attacks. Whole System Flood: SYN — Tick the checkbox to prevent a SYN attack. A SYN attack will interrupt the process of the three way handshake of TCP and redirect the acknowledge response to a malicious IP address.
Page 135 Residential Gateway and send repeated ping requests to it flooding the network. IP Land — Tick the checkbox to prevent an attack which involves a synchronized request being sent as part of the three way handshake of TCP to an open port specifying the port as both the source and destination effectively locking the port.
Page 136 Sensitivity — Select High or Low from the pull-down menu for the sensitivity of the TCP/UDP port scan prevention. Click Select All to select all of kinds of DDoS attacks in the checkboxes. Or click Clear all to unselect all of the checkboxes. Enable Source IP Blocking —...
Page 137: Application
3.7 Application Select Application in the Main Menu bar. And the sub-items – Port Forwarding and DMZ – will show up on the sub menu bar. 3.7.1 Port Forwarding A host on the private network of the Residential Gateway is invisible from the Internet for it is protected by the firewall.
Page 138 Select Port Forwarding from the Application sub menu bar. Then, the screen page appears as follows: Port Forwarding Table This section allows you to create or modify a port forwarding rule which will be executed by the Residential Gateway. Below is a description of configuration parameters in this section.
Page 139 Protocol — Choose TCP, UDP or Both in the pull-down menu as your desired protocol. Public Port — Specify the port number which the packets from the Internet are destined to (1~65535). Local Port — Specify the port number which the packets are destined to (1~65535). Application Description —...
Page 140: Dmz
3.7.2 DMZ DMZ stands for “Demilitarized Zone”. It is an IP address on the private network of the Residential Gateway. But it is exposed to the Internet for special-purpose services. So a host on the private network can be assigned the IP address of the DMZ to provide services to the hosts on the Internet.
Page 141 Select DMZ from the Application sub menu bar. Then, DMZ screen page appears as follows: DMZ Settings This section allows you to create or edit the DMZ of a selected interface in the Interface List. Below is a description of configuration parameters in this section. Current DMZ Status —...
Page 142 Source IP — Select Any IP Address to expose the DMZ to any IP address on the Internet. Or you can select the other radio button and specify an IP address range in the text boxes so the DMZ will be exposed to the IP address in the specified IP address range only.
Page 143: Qos
3.8 QoS Select QoS in the Main Menu bar. And the sub-items – QoS Priority and QoS Ratelimiter will show up on the sub menu bar. 3.8.1 QoS Priority QoS stands for the “Quality of Service”. It allows the network administrator to give traffic of a service a higher priority for bandwidth to ensure its quality.
Page 144 For details on the settings, please refer to the description of the individual section below. QoS Priority Configuration: The Residential Gateway supports QoS of the egress traffic. QoS of the Residential Gateway provides four queues for packet transmission – Queue 0, Queue 1, Queue 2 and Queue 3.
Page 145 select weight, the Residential Gateway will follow the pre-determined ratio of the transmission rates to transmit the packets. Port Priority Mode > Strict Queue Mode If you select Port for the Priority Mode and strict for the Queue Mode, you need to decide how the ports of the Residential Gateway will be mapped to the queues.
Page 146 Queue Weight(Q0:Q1:Q2:Q3) — Specify the ratio of the transmission rates for queues in the text boxes. Port Priority — Select a queue from the pull-down menu to map it to the port. 802.1p Priority Mode > Strict Queue Mode If you select 802.1p for the Priority Mode and strict for the Queue Mode, you need to determine how the 802.1p value will be mapped to the queues.
Page 147 Queue Weight(Q0:Q1:Q2:Q3) — Specify the ratio of the transmission rate for queues in the text boxes. 802.1p Priority Map — Select a 802.1p value from the first pull-down menu. And select a queue in the second pull-down menu to map the 802.1p value to it. DSCP Priority Mode >...
Page 148: Qos Ratelimiter
Queue Weight(Q0:Q1:Q2:Q3) — Specify the ratio of the transmission rate for queues in the text boxes. DSCP Priority Map — Select a DSCP value from the first pull-down menu. And select a queue from the second pull-down menu to map the DSCP value to it. Click Apply to submit the settings after you finish configuring this page.
Page 149 For details on the settings, please refer to the description of the individual section below. Rate Limit Configuration This section contains a table which displays the current rate limit settings of the Residential Gateway. It allows you to set the maximum rate limit of the ingress and egress traffic on each port.
Page 150: Sip
Click OK to submit your settings after you finish configuring this page. 3.9 SIP Select SIP in the Main Menu bar. And the sub-items – Basic Settings, Account Settings and Server Settings – will show up in the sub menu bar. 3.9.1 Basic Settings Select Basic Settings from the SIP Management menu.
Page 151 Basic Settings This section allows you to configure basic SIP settings for the telephony service. . SIP Port Number — Specify a port number which the Residential Gateway will open for the SIP packets. The number ranges from 1024 to 65535. And the default setting is 5060. Session Timer —...
Page 152: Account Settings
3.9.2 Account Settings This page enables the network administrator to register the phone numbers of the telephones connected to the Residential Gateway in the SIP server. The SIP server can locate the registered phone numbers after the registration is completed. And when the server receives a request to set up a connection to one of these phone numbers from another phone number, the server can forward the request packet to the correct destination.
Page 153 Display Name — Specify a display name for the SIP user agent. Authentication User Name — Specify the authentication name for the SIP user agent to register in the SIP server. Authentication Password — Specify the authentication password for the SIP user agent to register in the SIP server.
Page 154: Server Settings
3.9.3 Server Settings Select Server Setting from the SIP Management menu. Then, Server Setting screen page appears as follows: For details on the settings, please refer to the description of the individual section below. Server Settings This section allows you to decide which servers the telephony ports are going to register in and how they are going to register.
Page 155 Register — Tick the checkbox to enable the SIP user agent under Telephony Port 1 or Telephony Port 2. And you will see more available parameters appear as follows. Register Server Address — Specify the registration server IP address. Register Server Port — Specify the registration server port. Proxy Address —...
Page 156: Voice
3.10 Voice Select Voice in the Main Menu bar. And the sub-items – Voice Settings, Call Service, FAX settings, General Dialing Settings, Phone Book and Dialing Plan – will show up on the sub menu bar. 3.10.1 Voice Settings Select Voice Setting from the Voice menu. Then, the following screen page appears. For details on the settings, please refer to the description of the individual section below.
Page 157 Voice Setting Below is a description of configuration parameters in this section. Codec Priority 1~5 — Codec stands for “Compress-Decompress”. It converts the analog voice signals to digital data packets. There are nine different codecs in the pull- down menu. And each of them requires different bandwidth. Select one of them from the drop-down menu for each priority.
Page 158 Voice Active Detector — If the voice being encoded is human speech or background noise, select a mode from the drop-down menu to determine. Or select Disable to deactivate this feature. Line Echo Canceller Tail Length — Select Tail Length for line echo cancellation from the drop-down menu.
Page 159: Call Service
3.10.2 Call Service Select Call Service from the Voice menu. Then, Call Service screen page appears as follows: For details on the settings, please refer to the description of the individual section below. Call Service This section allows you to configure for the call forwarding and call waiting functions.
Page 160 Call Waiting Timeout — Specify the call waiting timeout time in the text box. If you would like to continue with your first call and ignore a waiting call, this is the time that the second caller will wait before disconnecting the waiting call. Note: When the call waiting function is activated, the call forward function will be deactivated.
Page 161: Fax Port Settings
3.10.3 FAX Port Settings Select FXS port setting from the Voice menu. Then, the following screen page appears. For details on the settings, please refer to the description of the individual section below. FAX Port Setting: This section allows you to configure for the fax function of the Residential Gateway.
Page 162 Hook Flash Detect Upper Bound — Specify the maximum time to detect hook flash. Hook Flash Detect Lower Bound — Specify the minimum time to detect hook flash. Voice Tx Level — Select the transmitting sound level from the drop-down menu. The corresponding value for each level can be found in the table below.
Page 163: Fax Settings
-12 dB -6 dB -2.5 dB Ring Cadence On — Specify how long the tone will last. Ring Cadence Off — Specify how long it will wait before the next tone rings. Click Apply to apply your settings after you finish configuring this page. 3.10.4 FAX Settings Select FAX Setting from the Voice menu bar.
Page 164: General Dialing Settings
and fax messages will be sent with T.38. Voice and Fax Pass Voice will be transmitted with the defined CODEC priority Through and fax messages will be sent with G.711/Ulaw. Click Apply to apply your settings after you finish configuring this page. 3.10.5 General Dialing Settings Select General Dialing Setting from the Voice menu.
Page 165 Transfer Key — Select a key from the drop-down menu. When hook flash is pressed on a call, the transfer key will be activated and a call will be transferred by pressing the selected key(s). You can follow the procedures below to transfer a call. Step 1.
Page 166 There are two ways to put a call on hold, please see the table below for detailed descriptions. To put a call on hold, press~ To resume a call on hold, press~ “FlashHook” “＊1” (Hold Call Key combination) Method 1. “FlashHook”...
Page 167: Phone Book
3.10.6 Phone Book The Residential Gateway supports 2-digit speed dial for the local lines and the SIP phone numbers that are used frequently. Select Phone Book from the Voice menu. Then, Phone Book screen page appears as follows. For details on the settings, please refer to the description of the individual section below. Phone Book This section enables you to make settings for the phone book function.
Page 168: Dialing Plan
3.10.7 Dialing Plan The Residential Gateway supports Dialing Plan. A dialing plan establishes the expected number and pattern of digits for a telephone number. This includes country codes, access codes, area codes and all combinations of digits dialed. For instance, the North American public switched telephone network (PSTN) uses a 10-digit dial plan that includes a 3-digit area code and a 7-digit telephone number.
Page 169 Dest. IP / DNS — Specify Destination IP / DNS address. Port — Specify the port number. Click Check Icon to add this new rule to the Dialing Plan below after you enter the new settings. Click the Pencil Icon button on the entry that you would like to make some changes. Click Apply to apply your settings after you finish configuring this page.
Page 170: Iptv
3.11 IPTV Select IPTV in the Main Menu bar. And the sub-items – IGMP Control – will show up on the sub menu bar. 3.11.1 IGMP Control The Residential Gateway supports the IGMP snooping and the IGMP proxy. IGMP stands for “Internet Group Management Protocol”.
Page 171 IGMP Snooping/Proxy Enable or disable the IGMP snooping and IGMP proxy function on the Residential Gateway. When the IGMP host is on the private network, the IGMP proxy must be activated for the Residential Gateway to learn the request of the host. And when the IGMP host is on the public network, the IGMP snooping must be enabled for the Residential Gateway to learn this request of the host.
Page 172: Management
3.12 Management Select Management in the Main Menu bar. And the sub-items – Auto-Provision (DHCP) & SNMP– will show up on the sub menu bar. 3.12.1 DHCP Auto Provision This section allows you to enable or disable the DHCP auto-provisioning function. DHCP Auto Provision —...
Page 173 Enable CWMP Agent — Enable or disable TR-069 function. Management Server URL — Specify HTTP address of the Auto Configuration Server. Management Server User Name — Specify the password of the Auto Configuration Server. Management Server Confirm Password — Specify the password of the Auto Configuration Server again.
Page 174 Connect Request User Password — Specify the name of the Connection Request Server. Connect Request Confirm Password — Specify the name of the Connection Request Server again. Click Apply Basic Setup to submit your settings after you finish configuring this page.
Page 175: Snmp
3.12.2 SNMP The Residential Gateway supports SNMP management. SNMP stands for “Simple Network Management Protocol”. A brief introduction for SNMP will be found in Chapter 4 of this document. 3.12.2.1 SNMP Management Select SNMP from the Management sub menu bar. And then the following screen page appears. This section allows you to make proper settings on the Residential Gateway so you can manage the Residential Gateway by SNMP.
Page 176 Description —Shows a unique description for this community name. This is mainly for reference only. Action — Click Add New SNMP Management to add a new rule to the table after you configure it in the text boxes. And to modify an entry in the rule table, click Pencil Icon. Then, click OK to submit the new settings.
Page 177 3.12.2.2 SNMP Destination Click the option SNMP Trap Destination from the SNMP menu and then the following screen page appears. State — Enable or disable the function of sending trap to the specified destination. Destination — Enter the specific IP address of the network management system that will receive the trap.
Page 178 Cold Start Trap — Enable or disable the Gateway to send a trap when the Gateway is turned on. Warm Start Trap — Enable or disable the Gateway to send a trap when the Gateway restarts. Authentication Failure Trap — Enable or disable the Gateway to send authentication failure trap after any unauthorized users attempt to login.
Page 179: Administration
3.13 Administration Select Administration in the Main Menu bar. And the sub-items – Device Access, Interface Management, Time, Syslog, Diagnostics, User Privilege, Backup/Restore, Factory Default, Firmware Upgrade and Save & Logout– will show up on the sub menu bar. 3.13.1 Device Access The network administrator may need to restrict the management access from LAN ports so he can prevent end users to change the settings of the Residential Gateway.
Page 180 3.13.1.1 Management Access This section allows you to configure the management methods for the Residential Gateway. Below is a description of the configuration parameters of this section. HTTP Management Port — This is Internet socket port numbers used by protocols of the transport layer of the Internet Protocol Suite for the establishment of host-to-host connectivity.
Page 181: Interface Management
Allow Remote IP address — Select Any IP Address for the Residential Gateway to be managed from its WAN port by any remote IP address. Or select the second radio button and specify a range of IP addresses in the text boxes to enable these IP addresses to manage the Residential Gateway from the WAN port.
Page 182 3.13.2.1 Port Configuration This section displays the port state of the Residential Gateway. You can click drop-down arrow in each column of the table to configure the settings of the selected port in the next section. Below is a description of the configuration parameters of this section. Port Number —...
Page 183: Time
Flow Control — Enable or disable the flow control function. Click OK to submit your settings after you finish configuring this page. 3.13.3 Time This page enables the network administrator to change the settings of the Residential Gateway’s internal clock. Select Time from the Administration sub menu bar, and then Time screen page will appear as follows: 3.13.3.1 Time Zone Setting This section enables you to make the date and time settings of the Residential Gateway.
Page 184 Date Time Setting — Specify the date and time in the text boxes to set the internal clock of the Residential Gateway manually. Or click Copy Computer Time to update the Residential Gateway’s internal clock from the management computer. Time Synchronization — Click to enable or disable time synchronization. NTP Server Option —...
Page 185: Syslog
Daylight Saving Time — To enable or disable the daylight saving time function. Daylight saving time is the practice of advancing clocks during summer months by one hour so that evening daylight lasts an hour longer, while sacrificing normal sunrise times. Daylight Saving Time Date Start —...
Page 186 3.13.4.1 Syslog Setting Below is a description of the configuration parameters of this section. Syslog — Tick the checkbox to enable this feature. Or untick the checkbox to deactivate Syslog Server IP Address — Specify the IP address of the Syslog server in the text box. Syslog Level —...
Page 187: Diagnostics
3.13.5 Diagnostics This page enables the network administrator to use ICMP to check the network connectivity. The Residential Gateway supports the diagnostic tools such as ICMP. It can emit ICMP Ping messages to a destination host on the Internet and see if it can receive the replies from the host. Select Diagnostics from Administration sub menu bar.
Page 188: User Privilege
Packet Size — Enter the packet size that would be sent. The allowable packet size is from 1 to 65500 bytes. (optional) Click Start for the Residential Gateway to emit ICMP packets to the destination IP address. And the ICMP replies from the destination host or any other ICMP messages will be displayed in this section.
Page 189 Read & Write — Partial access right, unable to modify user account, system information and items under System Utility menu. Read Only — Read-Only access privilege. User Name —Shows a name for the user account. Description — Shows the given remark for the account. Action —...
Page 190: Backup/Restore
3.13.7 Backup/Restore Select Backup/Restore from Administration sub menu bar. Then, Backup/Restore screen page will appear as follows: 3.13.7.1 Backup/Restore This section enables you to create a backup file for the current configuration of the Residential Gateway. And you can load a backup configuration file to restore the previous configuration. Below is a description of the configuration parameters of this section.
Page 191 Config Type — There are three types of Config Type: Running-config, Default-config and Start-up-config. Running-config — Back up the data you’re processing Default-config — Back up the data same as factory setting. Start-up-config — Back up the data same as last saved data. File Location —...
Page 192 Restore using FTP— You may restore configuration using FTP server as long as following the procedure below. Action — Click to choose Restore Config. Server — Click to choose FTP. Server IP Address— Enter the specific IP address of the File Server. User Name —...
Page 193 To overwrite all of configuration, please change the write protection level “home” into “editor”.In terms of User Privilege. If the write protection level is “editor”, it loads the homeuser of new homeuser configure file into DUT...
Page 194: Factory Default
3.13.8 Factory Default Select Factory Default from Administration sub menu bar. Then, Factory Default screen page will appear as follows: 3.13.8.1 Factory Default Load Factory Setting will set all the configurations of the Gateway back to the factory default settings, including the IP and Gateway address. Load Factory Setting is useful when network administrators would like to re-configure the system.
Page 195: Firmware Upgrade
3.13.9 Firmware Upgrade This page enables the network administrator to upgrade the firmware of the Residential Gateway. Select Firmware Upgrade from Administration sub menu bar. Then, Firmware Upgrade screen page will appear as follows: 3.13.9.1 TFTP Upgrade Server — Select the TFTP protocol. Upgrade Image Option —...
Page 196 3.13.9.2 FTP Upgrade Server —Select the FTP protocol. Upgrade Image Option — Select the Image you want to boot up. Server IP Address — Enter the specific IP address of the File Server. User Name — Enter the specific username to access the File Server. Password —...
Page 197: Save&Logout
Upgrade Image Option — Select the Image you want to boot up. Select File —Click browse, select the desired file. Click OK to start the download process and receive files 3.13.10 Save & Logout Select Save and Logout from Administration sub menu bar. Then, Save and Logout screen page will appear as follows: 3.13.10.1 Save &...
Page 198: Status
Next bootup Image Click drop-down box to select Image and click Set Next bootup Image to set the desired next bootup Image. 3.14 Status Select Status in the Main Menu bar. And the sub-items – WAN, LAN, WiFi, Routing Table, Port Status and Event Log–...
Page 199 MAC Address — This is the MAC address of the Residential Gateway on the public network. DHCP Server — This is the DHCP server which the Residential Gateway has on the public network. DNS Server— This is the DNS server which the Residential Gateway has on the public network.
Page 200: Lan
3.14.2 LAN This page displays information of the Residential Gateway on the private network. Select LAN from the Status sub menu bar. Then, LAN screen page appears as follows: And for more details, please refer to the description of the individual section below. LAN Status: This is a view-only section which displays information about the the Residential Gateway on the private network.
Page 201: Wifi
DHCP Client List This is a view-only section. It displays the list of the DHCP clients which are assigned IP addresses by the Residential Gateway. Index — The number of each client assigned. Host Name — The name of each host. Type —...
Page 202 State — Shows the WiFi service set is enabled or disabled. SSID — Shows identification number of service set. Band — Shows the bandwidth of the service set. Encryption — Shows the encryption mechanism is enabled or disabled. MAC — The MAC address of the service set. Associated Clients —...
Page 203: Routing Table
Band — Shows the bandwidth of the service set. Encryption — Shows the encryption mechanism is enabled or disabled. MAC — The MAC address of the service set. Associated Clients — Shows the number of users who are connected with the WiFi service set.
Page 204: Line Status
Netmask — The subnet mask of the destination network of the route. Gateway — The IP address of a gateway through which this route will send the packets to the destination network. Metric — Metric is the cost of a route to a destination network. Interface —...
Page 205: Port Status
Phone Status This is a view-only section that shows the last number you dial on each TEL port. 3.14.6 Port Status Select Port Status from the Status sub menu bar. Then, the following screen page appears. Port Status This is a view-only section which displays information about the port status of the Residential Gateway.
Page 206: Event Log
Link Status — It is the current link status of the port, either Link Up or Link Down.. Port Speed — It is the channel of the wireless network of the Residential Gateway. Duplex — This field shows that the port is in the full duplex mode when it links up. Flow Control —...
Page 207: Wizard
3.15 Wizard For beginners, this section is a quick guide for configuration step by step. Here is the procedure : Dev. Info. WAN  Mgmt  LAN  IPTV  Oper. Mode  SNMP  Mgmt&Maintenance...
Page 208: Chapter 4. Snmp Network Management
4. SNMP NETWORK MANAGEMENT The Simple Network Management Protocol (SNMP) is an application-layer protocol that facilitates the exchange of management information between network devices. It is part of the TCP/IP protocol suite. SNMP enables network administrators to manage network performance, find and solve network problems, and plan for network growth.
Page 209 APPENDIX A: Set Up DHCP Auto-Provisioning Networking devices, such as switches or gateways, with DHCP Auto-provisioning function allow you to automatically upgrade firmware and configuration at startup process. Before setting up DHCP Server for auto-upgrade of firmware and configuration, please make sure the Residential Gateway that you purchased supports DHCP Auto-provisioning.
Page 210 Step 2. Prepare “dhcpd.conf” file You can find this file in Linux ISC DHCP server. /usr/local/etc/dhcpd.conf Step 3. Copy the marked text to “dhcpd.conf” A sample of dhcp text is provided in Appendix B. Please copy the marked area to “dhcpd.conf” file. Copy the text to dhcpd.conf file Sample dhcp text...
Page 211 Step 4. Modify “dhcpd.conf” file Modify the marked area with your own settings. This value is configurable and can be defined by users. Specify the protocol used (Protocol 1: FTP; Protocol 0: TFTP). Specify the FTP or TFTP IP address. Login FTP server anonymously.
Page 212 Step 5. Generate a Configuration File Before preparing the configuration image in TFTP/FTP Server, please make sure the device generating the configuration image is set to “Get IP address from DHCP” assignment. This is because that DHCP Auto-provisioning is running under DHCP mode, so if the configuration image is uploaded by the network type other than DHCP mode, the downloaded configuration image has no chance to be equal to DHCP when provisioning, and it results in MD5 never match and causes the device to reboot endlessly.
Page 213 B. Auto-Provisioning Process This Residential Gateway is setting-free (through auto-upgrade and configuration) and its upgrade procedures are as follows: The ISC DHCP server will recognize the device whenever it sends an IP address request to it. And ISC DHCP server will tell the device how to get a new firmware or configuration. The device will compare the firmware and configuration MD5 code form of DHCP option every time when it communicates with DHCP server.
Page 214 192.168.2.1 192.168.2.99; option subnet-mask 255.255.255.0; option broadcast-address 192.168.2.255; option routers 192.168.2.2; option domain-name-servers 168.95.1.1, 168.95.192.1, 192.168.2.2; host CTS-FAE { hardware ethernet 00:14:85:06:5A:06; fixed-address 192.168.2.99; #Please copy the text below to your dhcpd.conf file# option space SAMPLE; # protocol 0:tftp, 1:ftp option SAMPLE.protocol code 1 = unsigned integer 8;...
Page 216 This page is intentionally left blank. evision History Manual Version Modification Firmware Version Date Revise description of Phone NO., Length of NO., Delete Length, and Prefix No. in 2011/11 Section 2.9.7. 0.99 Add multi-user & tone customization (Revise 1.01.37 2011/05 Administrator Account &...

CTS VRG5-31412 Series User Manual

Chapter 1. INTRODUCTION

Chapter 2. Command Line Interface (CLI)

Chapter 3. WEB MANAGEMENT

Chapter 4. SNMP NETWORK MANAGEMENT

Quick Links

Need help?

Questions and answers

Related Manuals for CTS VRG5-31412 Series

Summary of Contents for CTS VRG5-31412 Series

Table of Contents