Page 1 MX Series Voice Gateway User Manual New Rock Technologies, Inc. MX Series Voice Gateway User Manual HX4E HX4G MX8A MX8G MX60 MX60E MX120G Website: http://www.newrocktech.com Email: gs@newrocktech.com Document Version: 201711...
Page 2: Amendment Records
MX Series Voice Gateway Amendment Records Document Rev. 03 (November 2017) Added HX4G and MX8G. This manual is applicable to New Rock's HX4G/MX8G Voice Gateway V356, HX4E/MX8A/MX60E/MX120G Voice Gateway V351, and MX60 Voice Gateway V344.P2. Document Rev. 02 (March 2017) Added MX60E, and removed MX120.
Page 3: Table Of Contents
1.1 Product Introduction ................................... 13 1.2 Functions and Features ................................14 1.3 Equipment Structure ................................... 15 1.3.1 HX4E/HX4G ..................................15 1.3.2 MX8A/MX8G ................................... 17 1.3.3 MX60....................................20 1.3.4 MX60E ....................................22 1.3.5 MX120G ................................... 25 1.4 Web Management Page ................................28 1.4.1 Layout ....................................
Page 4 2.6.1 System....................................67 2.6.2 Auto Provisioning ................................69 2.6.3 Management System Type ............................70 2.6.4 Certificate (Available on the HX4E/MX8A/HX4G/MX8G) ..................71 2.6.5 Media Stream ................................. 72 2.6.6 SIP Configuration ................................74 2.6.7 RADIUS (Unavailable on the HX4E/HX4G) ......................77 2.6.8 Greeting ...................................
Page 5 2.7.5 Packet Rate Limiting Based Dynamic Blacklisting ....................90 2.7.6 IP Table .................................... 93 2.7.7 Voice Security ................................. 93 2.7.8 Encryption ..................................94 2.7.9 VPN (Available on the HX4E/MX8A/HX4G/MX8G) ....................95 2.8 Status ......................................96 2.8.2 Call Status ..................................96 2.8.3 Call History on FXS ............................... 97 2.8.4 Call History on FXO ...............................
Page 6 User Manual MX Series Voice Gateway 4 Making an OpenVPN Client Certification (HX4E/MX8A/HX4G/MX8G) ..........120 5 Appendix: High Availability Configuration ..................123 6 Appendix: Auto Provisioning Configuration ..................124 7 Appendix: RJ45 and RJ11 Corresponding Relations ................ 125...
Page 7: Figures
Figure 1-15 Web GUI ..................................28 Figure 2-1 Login Interface for MX8A Gateway Configuration ....................30 Figure 2-2 Status Interface ................................32 Figure 2-3 Network Configuration Interface (HX4E/HX4G/MX8A/MX8G) ................32 Figure 2-4 Network Configuration Interface (MX60/MX60E/MX120G) ................33 Figure 2-5 VLAN Configuration Interface ............................ 35 Figure 2-6 System Configuration Interface ..........................
Page 8 Figure 2-28 TR069 Configuration Interface ..........................71 Figure 2-29 Certificate Configuration Interface ......................... 72 Figure 2-30 HX4E/MX8A/HX4G/MX8G Media Stream Configuration Interface ..............72 Figure 2-31 MX60/MX60E/MX120G Media Stream Configuration Interface ..............73 Figure 2-32 SIP Related Configuration Interface ........................74 Figure 2-33 RADIUS Configuration Interface..........................
Page 9 Figure 2-61 Upgrading interface by .img file ........................... 103 Figure 2-62 Upgrade Interface ..............................103 Figure 2-63 Restore Factory Settings Interface (HX4E/MX8A/HX4G/MX8G) ..............104 Figure 2-64 Restore Factory Settings Interface (MX60/MX60E/MX120G) ..............104 Figure 2-65 Interface for Capturing Port Recordings ......................104 Figure 2-66 Ethereal Capture Interface ............................
Page 10: Tables
Table 1-5 Indicator Status of HX4E/HX4G ........................... 16 Table 1-6 Configuration Combination of MX8A/MX8G ......................17 Table 1-7 Voice Interface Cards Supported by the MX8A/MX8G ..................18 Table 1-8 Description of MX8A/MX8G Front Panel ........................18 Table 1-9 Description of MX8A/MX8G Back Panel ........................19 Table 1-10 Indicator Status of MX8A/MX8G ..........................
Page 11 Table 2-40 Subsequent choices for moving the Blocked IP Addresses to static defense ..........92 Table 2-41 Encryption Configuration Parameters ........................94 Table 2-42 VPN Configuration Parameters ..........................96 Table 2-43 System Status Parameters ............................99 Table 2-44 Log Management Configuration Parameters ...................... 101 New Rock Technologies, Inc.
Page 12 User Manual MX Series Voice Gateway Table 7-45 Pin Specifications for RJ45 Socket Port ....................... 125...
Page 13: Overview
 To be used as remote access equipment for IP-PBXs in call center deployment The MX family has four sub-series: HX4E, MX8A, HX4G, MX8G, MX60, MX60E and MX120G, which mainly differ in port capacities. Table 1-1 MX Series Gateway Hardware Specifications...
Page 14: Functions And Features
 Support concurrent calls under full load   Support call progress tones for various countries and regions Support Line second stage dialing or voice prompt  Support PSTN failover on power or network failure  New Rock Technologies, Inc.
Page 15: Equipment Structure
Support Ping blocking  Support optional voice interface cards (only supported by the MX8A/MX120G)  Support the VPN client (only available with the HX4E/MX8A/HX4G/MX8G)  Support VLAN  Support New Rock Cloud, allowing New Rock devices located behind NAT or firewall to be easily ...
Page 16: Figure 1-1 Hx4E/Hx4G Front Panel
DHCP. If no IP address is obtained, 192.168.2.218 is used by default, and you can change it on Basic > Network page. FXO/FXS FXS port or FXO port Table 1-5 Indicator Status of HX4E/HX4G Indicator Status Description PWR(green) Blinking green The device is starting. New Rock Technologies, Inc.
Page 17: Mx8A/Mx8G
The port is in idle status 1.3.2 MX8A/MX8G The MX8A/MX8G adopts a compact metal structural design. It can be placed on a desk or installed in a standard communications cabinet and provides eight analog ports. MX8A/MX8G supports the following types of configuration.
Page 18: Figure 1-3 Mx8A/Mx8G Front Panel
User Manual MX Series Voice Gateway Table 1-7 Voice Interface Cards Supported by the MX8A/MX8G Voice Interface Card Types Number of FXS Ports Number of FXO Ports 401A-4FXS 401A-4FXO 401A-2FXS/2FXO Figure 1-3 MX8A/MX8G Front Panel Table 1-8 Description of MX8A/MX8G Front Panel...
Page 19: Figure 1-5 Rj45 To Rs232 Serial Cable
MX Series Voice Gateway User Manual Table 1-9 Description of MX8A/MX8G Back Panel Item Description The console port is used for local management and testing. PCs can be connected to device by linking the RS232 port to CON port. Connecting cables need to be produced or purchased.
Page 20: Mx60
CAT-5 cables supplied with the unit. MX60 offers up to 48 interfaces of FXS/FXO. MX60 supports the following types of configuration. Table 1-11 Configuration Combination of MX60 Models Number of FXS Ports Number of FXO Ports MX60-16S MX60-32S MX60-48S MX60-16FXO MX60-32FXO MX60-48FXO MX60-8S/8 New Rock Technologies, Inc.
Page 21: Figure 1-7 Mx60 Front Panel
Line 13-16 respectively from top to bottom, and the middle columns in the same manner. Figure 1-8 MX60 Back Panel-AC Figure 1-9 MX60 Back Panel-DC New Rock Technologies, Inc.
Page 22: Mx60E
CAT-5 cables. MX60E offers up to 48 analog line ports and supports the following configurations: Table 1-15 Configuration Combination of MX60E Models Number of FXS Ports Number of FXO Ports MX60E-16S MX60E-32S MX60E-48S MX60E-16FXO MX60E-32FXO MX60E-48FXO New Rock Technologies, Inc.
Page 23: Figure 1-10 Mx60E Front Panel
RJ45. The first column on the left matches Line 1-4 respectively from top to bottom, the first column on the right matches Line 13-16 respectively from top to bottom, and the middle columns in the same manner. New Rock Technologies, Inc.
Page 24: Figure 1-11 Mx60E Back Panel-Ac
Glittery Letter Status Blinking with C IP address conflicts Blinking with D Device startup failure Blinking with E Network failure Blinking with P Software upgrading Blinking with T App exited (the device cannot be used normally) New Rock Technologies, Inc.
Page 25: Mx120G
RJ45. The first column on the left matches Line 1-4 respectively from top to bottom, the first column on the right matches Line 21-24 respectively from top to bottom, and the middle columns in the same manner. New Rock Technologies, Inc.
Page 26: Figure 1-13 Mx120G Back Panel-Ac
Configuration interface (CON), used for local management and debugging. ETH1/ETH2 Two 10/100 Mbps Ethernet ports (RJ45). They share one IP address, which by default is 192.168.2.240 and you can change it on Basic > Network page. USB interface New Rock Technologies, Inc.
Page 27: Table 1-24 Meanings Of Mx120G Indicators
IP address conflicts Blinking with D The severe starting failure needs to address by your dealer Blinking with E Network failure Blinking with P Software upgrading Blinking with T App exited (The device cannot be used normally) New Rock Technologies, Inc.
Page 28: Web Management Page
It is recommended that users press the Reboot button on the top right corner to enable the configuration after changing all parameters to be modified. New Rock Technologies, Inc.
Page 29: Parameters Setting
2.1 Login 2.1.1 Obtaining Gateway IP Address HX4E/MX8A/HX4G/MX8G Gateways start DHCP service by default, and automatically obtain an IP address on the LAN; you can use the factory-default gateway IP address if it is unable to be obtained (e.g. when connected directly with a computer).
Page 30: Privileges Of Administrator And Operator (Web Gui)
After login, "Admin” is displayed on the upper left corner of the interface. The operator is allowed to browse a subset of the configuration parameters. After login, "Operator” is displayed on the upper left corner of the interface. New Rock Technologies, Inc.
Page 31: Accessing Through Ssh
Both root user and the operator user are allowed to access a device with SSH:  root user has permission to change the configuration of all parameters.  operator user has permission to access only the directories of the user. It is allowed to use su- commands New Rock Technologies, Inc.
Page 32: Basic Configuration
After login, open the Basic tab page to view device information. If the SIP port of the device is 5060, you are advised to modify it. Figure 2-2 Status Interface 2.2.2 Network After login, click Basic>Network to open the configuration interface. Figure 2-3 Network Configuration Interface (HX4E/HX4G/MX8A/MX8G) New Rock Technologies, Inc.
Page 33: Figure 2-4 Network Configuration Interface (Mx60/Mx60E/Mx120G)
ETH1 configurations. ETH1 (MX60/MX60E/MX MX60, MX60E, and MX120G each have two network ports: ETH1 and ETH2. 120G) HX4E/MX8A/HX4G/MX8G each has only one network port. Setup Methods for obtaining an IP address. Static IP address: static IP address is used; ...
Page 34: Vlan
IP address of the device by using STUN query. The IP address obtained through STUN is used in SIP message fields such as Via and Contact and SDP C field. 2.2.3 VLAN After login, click Basic>VLAN to open the configuration interface. New Rock Technologies, Inc.
Page 35: Figure 2-5 Vlan Configuration Interface
Multi-service VLAN: The device can configure different VLAN information for the voice  service (SIP signaling and RTP/T.38 media stream) and the management service (HTTP/HTTPS, Telnet) and includes a different VLAN tag in a data packet of a different service. New Rock Technologies, Inc.
Page 36: System
FXS port of the device, and dialing ##. In the case of a single VLAN, the IP address of the single VLAN is voiced; in the case of a multi-service VLAN, the IP address of the management VLAN is voiced. 2.2.4 System After login, click Basic>System to open the configuration interface. New Rock Technologies, Inc.
Page 37: Figure 2-6 System Configuration Interface
The gateways provide the following processing modes after detecting hook flash from subscriber terminals: Internal: the hook flash event will be handled internally; Server(RFC 2833): transmitting the hook flash to platform with RFC 2833; Server (SIP INFO): transmitting the flash-off to platform with SIP INFO. New Rock Technologies, Inc.
Page 38: Sip
10/20 (default value)/30/40 /MX60/MX60E/MX120G G.723 MX60/MX60E/MX120G 5.3/6.3 30 (default value)/60 iLBC MX60/MX60E/MX120G 13.3/15.2 20/30 (default value) MX60/MX60E/MX120G G.722 HX4E/MX8A/HX4G/MX8G 10/20(default value)/30/40 HX4E/MX8A/HX4G/MX8G 4.75/5.15/5.9/6.7/7. G.722.2 10/20(default value)/30/40 4/7.95/10.2/12.2 2.2.5 SIP After login, click Basic>SIP to open the configuration interface. New Rock Technologies, Inc.
Page 39: Figure 2-7 Sip Configuration Interface
This domain name will be used in INVITE messages. If it is not set here, the gateways will use the name IP address or domain name of the proxy server as the user-agent domain name. It has no default value. New Rock Technologies, Inc.
Page 40: High Availability
Balancing mode. Primary-Standby mode Backup SIP proxy Configure the address and port number of the backup SIP proxy server. When the primary SIP server fails, the gateway failovers from the primary server to the backup server automatically. New Rock Technologies, Inc.
Page 41: Tls&Srtp
The MX series gateways support SIP signaling over TLS and SRTP (an encrypted form of RTP) as well. . After login, choose Basic > SIP, to go to the configuration page. Figure 2-9 TLS&SRTP Configuration Interface New Rock Technologies, Inc.
Page 42: Mgcp
The gateways use SIP protocol by default. When the gateways need to interface with MGCP protocol - based softswitch platform, set the relevant parameters here. After login, click Basic > MGCP to open the configuration interface. Figure 2-10 MGCP Configuration Interface New Rock Technologies, Inc.
Page 43: Table 2-10 Mgcp Configuration Parameters
Using configured digit map Select whether to activate the digit map configured by local gateway. Default not selected. New Rock Technologies, Inc.
Page 44: Foip
Keep connection when on- Select if the gateways actively cancel connection disconnect when subscribers hook on. hook Default not selected. 2.2.9 FoIP After login, click Basic>FoIP to open this interface. Figure 2-11 Fax Configuration Interface (HX4E/MX8A/HX4G/MX8G) New Rock Technologies, Inc.
Page 45: Figure 2-12 Mx60/Mx60E/Mx120G Fax Configuration Interface
T.38 is recommended because it is more stable. Enable G.711 pass-through according to the your device model:  HX4E/MX8A/HX4G/MX8G: Select G.711 pass-through in this area.  MX60/MX60E/MX120G: Select G.711 in this field, and then select Pass-through.
Page 46: Alarm
Use original RTP port: Indicates that the original RTP port established during the call is used.  Enable the fax ECM mode.  HX4E/MX8/HX4G/MX8G: The default value is related to the transmission rate. When the maximum fax rate is 14400 bps, the ECM mode is disabled by default. When the maximum fax ECM mode rate is 33600 bps, the ECM mode is enabled by default.
Page 47: Line
 Acknowledge All: Click to acknowledge all alarms of this type. The acknowledged alarms will not be displayed but be kept in the security event log. 2.3 Line 2.3.1 Phone Number The content below is only applicable to gateways with FXS ports. New Rock Technologies, Inc.
Page 48: Subscriber Line Features
Fill in the telephone number associated with the subscriber line n (FXS port). This should be manually performed if Batch mode is not used. 2.3.2 Subscriber Line Features The content below is only applicable to gateways with FXS ports. After login, click Line > Configuration to open the configuration interface. New Rock Technologies, Inc.
Page 49: Figure 2-16 Subscriber Line Configuration Interface
This is not mandatory. If this parameter remains blank, the phone number of the extension set is used. Registrar If Registration is selected, users must enter the authentication password for registering of this line password here. New Rock Technologies, Inc.
Page 50 P-Asserted-Id field preferentially: The caller identification information is preferentially obtained  from the P-Asserted-Id field in the INVITE message. From field only: The caller identification information is obtained from the From field in the  INVITE message. From field only is selected by default. New Rock Technologies, Inc.
Page 51: Subscriber Line Batch (Unavailable On The Hx4E/Hx4G)
Step 1 Click , the following interface is shown. Choose batch configured features and click OK. Step 2 Click to activate this function to configure this parameter. For details of the parameter, see Line > Configuration. New Rock Technologies, Inc.
Page 52: Subscriber Line Characteristics
MX Series Voice Gateway Figure 2-17 Feature Batch Configuration Interface 2.3.4 Subscriber Line Characteristics The content below is only applicable to gateways with FXS ports. After login, click Line > feature to open the configuration interface. New Rock Technologies, Inc.
Page 53: Figure 2-18 Subscriber Line Characteristics Configuration Interface
Used by the gateway to detect Hook Flash event, the default is 75 milliseconds. The gateway will ignore any flash that fall short of the shortest flash time. Generally, this value should not be less than 75 milliseconds. New Rock Technologies, Inc.
Page 54 Set the parameter Alert-Infon according to the “Alert-Info” value provided on the SIP server. Distinctive When the “Alert-info” value of received INVITE message matches with the Alert-Infon, ring Alert/Ringing cadence n is activated. Alert-Info 1 Match with ring cadence 1. New Rock Technologies, Inc.
Page 55: Trunk
Line 2 increases 1 progressively based on that of Line 1, and so on. ID n Fill in the telephone number associated with the trunk n (FXO port). This should be manually performed if Batch mode is not used. New Rock Technologies, Inc.
Page 56: Trunk Features
Note: This parameter is displayed only when Multi port is checked on Advanced>SIP page. Registration Select if this trunk registers with the SIP registration server. By default, this is not selected. Password If Registration is selected, the authentication password for registering this line must be entered here. New Rock Technologies, Inc.
Page 57: Trunk Batch (Unavailable On The Hx4E/Hx4G)
Step 1 Click , the following interface is shown. Choose batch configured trunks and click OK. Step 2 Click to activate this function to configure this parameter. For details of the parameter, see Trunk > Feature. New Rock Technologies, Inc.
Page 58: Trunk Characteristics
User Manual MX Series Voice Gateway Figure 2-21 Trunk Batch Configuration Interface 2.4.4 Trunk Characteristics Only a gateway with FXO ports can display this interface. After login, click Trunk > Advanced to open the configuration interface. New Rock Technologies, Inc.
Page 59: Figure 2-22 Trunk Characteristics Configuration Interface
PSTN. The default is 600 in milliseconds. Note: This parameter is used to match the digit receiving response time of the PSTN PBX. Call ID detection Before ringing; After ringing. The After ringing mode is generally used. New Rock Technologies, Inc.
Page 60: Routing
Busy tone frequency If Detect dual-frequency busy tones is enabled, you need to specify the frequency to be detected. Unit: Hz. 2.5 Routing 2.5.1 Digit Map After login, click Routing>Digit Map to open the dialing rules interface. New Rock Technologies, Inc.
Page 61: Figure 2-23 Configuration Interface For Digit Map
# key. Terminate after receiving * and any two-digit number. *xx is primarily used to activate feature codes for supplementary services, such as CRBT, Call Transfer, Do not Disturb, etc. New Rock Technologies, Inc.
Page 62: Routing Table
Dial rules by default are as follows: 01[3-5,7,8]xxxxxxxxx 010xxxxxxxx 02xxxxxxxxx 0[3-9]xxxxxxxxxx 11[0,2-9] 111xx 123xx 95105xxx 95xxx 100xx 1[3-5,7,8]xxxxxxxxx [2-3,5-7]xxxxxxx 8[1-9]xxxxxx 80[1-9]xxxxx 800xxxxxxx 4[1-9]xxxxxx 40[1-9]xxxxx 400xxxxxxx xxxxxxxxxx.T 2.5.2 Routing Table After login, click Routing > Routing Table to open the configuration interface. New Rock Technologies, Inc.
Page 63: Figure 2-24 Routing Table Configuration Interface
8000 or 8001 are routed to FXO port in a sequential order. Namely, FXO Port 2 is selected when FXO Port 1 is busy and so on. Where IP is the source, 800[0-1] is the number, and FXO 1-2 is the routing destination. New Rock Technologies, Inc.
Page 64: Table 2-20 Routing Table Format
Add 8888 at the end of the calling number starting with 6120 for calls from an FXS (Phone/fax) port. REPLACE Number replacement. The replacing number follows REPLACE. Example: FXS CPN88 REPLACE 2682000 Replace the calling number beginning with 88 for calls from FXS port with 2682000. New Rock Technologies, Inc.
Page 65: Table 2-22 Routing Destination
ROUTE NONE Example: IP CPN[1,3-5] ROUTE NONE Bar all calls from IP, of which the calling numbers start with 1, 3, 4, and 5. Block all calls from IP numbers starting with 1, 3, 4, 5 New Rock Technologies, Inc.
Page 66: Examples Of Routing Rules
Here is an example of terminating incoming calls from analog trunks to a hunt group consisting of ports FXS1 and FXS2 in round-robin fashion: ROUTE 1-2/R Outbound Call Barring Restrict users to make certain calls, such as an international call. Examples are as follows: New Rock Technologies, Inc.
Page 67: Advanced Configuration
Further, we set up the trunk group such that it is used only by calls to destinations with prefix 6120: 6120 ROUTE 2.6 Advanced Configuration 2.6.1 System After login, click Advanced > System to open this interface. New Rock Technologies, Inc.
Page 68: Figure 2-25 Interface Of System Advanced Configuration
NAT refresh time of the LAN router where the gateway is located. Gateway’s NAT holding function will carry out periodic operation according to this parameter. With seconds as its unit, default value of 60 seconds. New Rock Technologies, Inc.
Page 69: Auto Provisioning
Note: If the ACS is a TFTP server, the username and the password are not displayed. Password Input a password for accessing the ACS. Firmware upgrade Supports firmware download and update using ACS. Note: The firmware can be a tar.gz file or an img file. New Rock Technologies, Inc.
Page 70: Management System Type
If SNMP is selected, the following three parameters need to be specified. Server Enter the address of the SNMP server. Trap port Enter the port number of the SNMP server. The default value is 162. Notification interval The default value is 900 seconds. New Rock Technologies, Inc.
Page 71: Certificate (Available On The Hx4E/Mx8A/Hx4G/Mx8G)
The account used for the ACS to connect back to the device, for example, admin. username Connection request The password used for the network management server to connect back to the device. password 2.6.4 Certificate (Available on the HX4E/MX8A/HX4G/MX8G) After login, click Advanced >Cert. to open the interface. New Rock Technologies, Inc.
Page 72: Media Stream
Step 2 Click Upload. Step 3 Select and upload the file client.ovpn. Step 4 Reboot the device. 2.6.5 Media Stream After login, click Advanced > Media Stream to open this interface. Figure 2-30 HX4E/MX8A/HX4G/MX8G Media Stream Configuration Interface New Rock Technologies, Inc.
Page 73: Figure 2-31 Mx60/Mx60E/Mx120G Media Stream Configuration Interface
Nonstandard RTP SID data could generate noise for calls. Obtain Media Address SDP global address (default value): obtains the IP address from SDP global address;  From SDP media address: obtains the IP address from SDP Media Description.  New Rock Technologies, Inc.
Page 74: Sip Configuration
SDP etc. MX gateways provide flexibility in field setting in order to improve compatibility with the SIP register server. After login, click Advanced > SIP to open this interface. Figure 2-32 SIP Related Configuration Interface New Rock Technologies, Inc.
Page 75: Table 2-28 Sip Related Configuration Parameter
Select either the External network IP address or the LAN IP address. REGISTER External network IP address: use the NAT information returned by registration server.  LAN IP address: keep original content of Contact when register.  New Rock Technologies, Inc.
Page 76 INVITE request retransmit interval, for UDP only. It is 1000 ms by default. Timer B INVITE transaction timeout timer. It is 16000 ms by default. Timer D Wait time for response retransmits. It is 16000 ms by default. New Rock Technologies, Inc.
Page 77: Radius (Unavailable On The Hx4E/Hx4G)
Select SIP/TCP or SIP/UDP, and the default is UDP. Note: both peers must choose the same Protocol type transmission type. Specify the local port used by SIP/TCP. Local TCP port 2.6.7 RADIUS (Unavailable on the HX4E/HX4G) After login, click Advanced >RADIUS to open this interface. Figure 2-33 RADIUS Configuration Interface New Rock Technologies, Inc.
Page 78: Greeting
Set whether to send RADIUS charge message for  Outbound calls  Inbound calls  When calls are connected  Unanswered calls  2.6.8 Greeting After login, click Advanced>Greeting to open the audio files interface. Figure 2-34 Greeting Interface New Rock Technologies, Inc.
Page 79: Call Progress Tone Plan
Prompt tone of off-hook dial tone. Second dial tone Second stage dial tone. Prompt of voice mail, or when the subscriber line is set with “Do not Disturb Service and Call Stutter dial tone Transfer”. Busy tone Busy line prompt. New Rock Technologies, Inc.
Page 80: Feature Access Codes
Using #xx (dial # and 2 digits number) to cancel a service. This is illustrated with the following defaults for various parameters, which may be modified according to requirements. It is highly recommended not to modify the default configuration in System feature codes. New Rock Technologies, Inc.
Page 81: Figure 2-36 Feature Codes Configuration Interface
(See 2.3.2 Subscriber Line Features). Deactivate CFB The feature code for deactivating call forwarding on busy, with default of #61. User operation: off hook → press #61 → hang up. New Rock Technologies, Inc.
Page 82: Clock Service
While listening, you can press a two-digit CRBT index to change to another CRBT file. Three-way calling The default value is *79. 2.6.11 Clock Service After login, click Advanced > System time to open this interface. New Rock Technologies, Inc.
Page 83: Figure 2-37 Clock Service Interface
MX Series Voice Gateway User Manual Figure 2-37 Clock Service Interface New Rock Technologies, Inc.
Page 84: Table 2-33 Clock Service Parameters
Display current time for the device. Click Clock calibration to calibrate the time. System time sync Set the synchronization period of the time. It is 120 minutes by default. interval Primary time server Enter the IP address of preferred time server here. It has no default value. New Rock Technologies, Inc.
Page 85: Security
Regularly change the root/operator password for accessing the device through SSH, and improve the password strength  Regularly change the HTTP/HTTPS/SSH port for accessing the device  Disable SSH once accessing is completed. All of the above are available on Security>Access page. Figure 2-38 Access Configuration Interface New Rock Technologies, Inc.
Page 86: Access List
Access list is used to specify the source addresses which are allowed to access the device through Web GUI (HTTP/HTTPS) or SSH. After login, click Security>Access list to open the configuration interface. Once access list is enabled, only addresses specified here are allowed to access the device through Web GUI or SSH. New Rock Technologies, Inc.
Page 87: Figure 2-39 Access List Configuration Interface
Step 2 In the input box, enter IP addresses and select types of service. Step 3 Select Enable, and click Save.  If SSH is selected, please enable SSH on Security>Access page.  The device allows an access list of up to 20 entries. New Rock Technologies, Inc.
Page 88: Brute Force Login Prevention
Default value: 3 times/day Lock time Specify the IP address lock time. An IP address will be unlocked after the lock time and is allowed to access the device again. Default value: 10 minutes Locked IP addresses New Rock Technologies, Inc.
Page 89: Acl-Based Traffic Filtering
Local port Specify the local port range of the device for receiving data packets. Range is 0 to 65535. Source IP address Specify the source IP address range. Note: This parameter does not support domain names. New Rock Technologies, Inc.
Page 90: Packet Rate Limiting Based Dynamic Blacklisting
IP address of the attack source is added to the blocked list. Data packets from this address will no longer be received. Rule configuration After login, choose Security > Dynamic defense, to go to the configuration interface. New Rock Technologies, Inc.
Page 91: Figure 2-43 Dynamic Defense Configuration Interface
: Duplicate the selected rule to a new rule  Delete : Delete the selected rule  Batch delete: Batch Delete all selected rules Blocked IP addresses The blocked IP addresses of dynamic defense will be deleted after the device reboots. New Rock Technologies, Inc.
Page 92: Figure 2-44 Dynamic Defense (Blocked Ip Addresses) Interface
Cancel to add the entry to the static defense list. Cancel ACL-based Traffic Filtering For details about static defense, see 2.7.4  Batch delete: Delete selected entries in a batch. Example Explanations of the rules listed in Figure 2-43 are as follows: New Rock Technologies, Inc.
Page 93: Ip Table
After login, go to Security>Voice Security to add the SIP-allowed addresses (IP addresses or domain names). You may add SIP servers addresses or SBC (when register to SBC) addressed to SIP-allowed addresses. If no SIP-allowed addresses are set, the device will respond SIP signaling from any IP address. New Rock Technologies, Inc.
Page 94: Encryption
Figure 2-46 Voice Security Configuration Interface 2.7.8 Encryption After login, click Security>Encryption to open this interface. Figure 2-47 Encryption Configuration Interface Table 2-41 Encryption Configuration Parameters Name Description Signal encryption Choose whether to encrypt signaling. By default, this is not selected. New Rock Technologies, Inc.
Page 95: Vpn (Available On The Hx4E/Mx8A/Hx4G/Mx8G)
VPN client need to be deployed instead, which greatly reduces the network expense. With a built-in VPN client, the HX4E/MX8A/HX4G/MX8G is ready to be directly connected to the VPN server to avoid the firewall issues and NAT issues.
Page 96: Status
3. After the certificate is uploaded, restart the device. 4. After the device is restarted, click Basic > Status to view the VPN connection status. 2.8 Status 2.8.2 Call Status After login, click Call Status>Call Status to open this interface. New Rock Technologies, Inc.
Page 97: Call History On Fxs
2.8.4 Call History on FXO After login, click Call Status>Call history on FXO to open this interface. Figure 2-51 Interface of Call on FXO 2.8.5 SIP Message Count After login, click Call Status>SIP message count to open this interface. New Rock Technologies, Inc.
Page 98: Logs
Critical runtime information of gateways can be obtained in this interface, including: Information regarding login interface (including IP address and permissions of the user)  SIP registration status  Call-related signaling and media (RTP) information  After login, click Logs>System Status to open this interface. New Rock Technologies, Inc.
Page 99: Call Message
Show the latest call. Call Context Info Show the call status. (Call Context Info) Rtp Context Info Show the voice channel related to the calls. 2.9.2 Call Message After login, click Logs>Call Message to open this interface. New Rock Technologies, Inc.
Page 100: System Startup
After login, click Logs>System Startup to open this interface. Log files can be downloaded through this interface. Figure 2-55 Interface of System Startup 2.9.4 Manage Log After login, click Logs>Manage Log to open this interface. Log files can be downloaded through this interface. New Rock Technologies, Inc.
Page 101: Figure 2-56 Manage Log Interface
Procedure for downloading the log: Step 1 Click Download, the gateway begins to assemble the logs. Step 2 After a few seconds, the interface of log saving will appear. Figure 2-57 Log Saving Interface New Rock Technologies, Inc.
Page 102: Tools
If the kernel version is required to upgrade, choose the .img file to upgrade, if not, choose the tar.gz file. Upgrading by .img file If the kernel version is required to upgrade, choose the .img file to upgrade. New Rock Technologies, Inc.
Page 103: Figure 2-60 Upgrade Interface
The device upgrade process may last for several minutes. Do not power off, disconnect (from the  network), or restart the device during the process. Otherwise, the system may be damaged, and the device cannot be started. New Rock Technologies, Inc.
Page 104: Restore Factory Settings
The factory settings are designed based on common applications, and therefore, there is no need to modify them in many deployment situations. For HX4E/MX8A/HX4G/MX8G, you can choose to restore network or telephony related factory settings, or both. For MX60/MX60E/MX120G, only restoring both is available. Restoration takes effect after the system is restarted.
Page 105: Ip Capture
/log/dump.cap in libpcap format. Figure 2-66 Ethereal Capture Interface 2.10.6 Network Diagnosis (HX4E/MX8A/HX4G/MX8G) After login, click Tools > Network diagnosis to open this interface. If the Internet is unavailable, you can use this tool to diagnose whether the network is connected.
Page 106: Product Information
After login, click Version info to view the gateway hardware and software version information. 2.12 Reboot To restart the gateway, click Reboot in the top right corner. 2.13 Logout After login, click the Logout at top right to exit the gateway management system and return to the login interface. New Rock Technologies, Inc.
Page 107: Appendix: Vlan Configuration
VLAN and includes the VLAN tag in all sent data packets. All device services belong to the same VLAN. The device receives only data packets that carry the VLAN tag and includes the VLAN tag in all sent data New Rock Technologies, Inc.
Page 108: Lldp
VLAN configuration information via an LLDAP message, adds VLAN tag in packets it sends, and obtains network information such as IP address using the DHCP mode by default. Configuration After login, click Basic>VLAN. Set LLDP to on, set LLDP packet interval, and then click Save. New Rock Technologies, Inc.
Page 109: Figure 3-1 Scenario Diagram
VLAN, adds VLAN information to the next messages to be sent, and obtains network information such as an IP address via DHCP. The device ignores any subsequent LLDP message with different VLAN ID. 0 shows the handling procedure. New Rock Technologies, Inc.
Page 110 Procedure of Handling the LLDP Message with no VLAN ID Messages LLDP Message  Upon receipt of an LLDP message, the device will check if the VLAN ID, Priority, and DSCP fields are included. Figure 3-2 shows the LLDP message. New Rock Technologies, Inc.
Page 111: Dhcp
3.1.2 DHCP The device obtains the VLAN tag and QoS using DHCP option 132 and option 133 from DHCP server. Be ensured that DHCP option 132 and DHCP option 133 are properly configured on the DHCP server. New Rock Technologies, Inc.
Page 112 4. The device will update its VLAN settings if the values in option 132 and option 133 carried in DHCPOFFER change and reboot will be made after that. Messages 1. DHCPDISCOVER message sent from the device to the DHCP server New Rock Technologies, Inc.
Page 113: Manual Configuration
On the web interface, click Basic > VLAN, set the Activate to On, set Mode to Single VLAN, enter the VLAN tag, and specify network information such as IP address or select DHCP. As shown in Figure 3-4. New Rock Technologies, Inc.
Page 114: Multi-Service Vlan
(SIP signaling and RTP/T.38 media stream), and a management service (HTTP/HTTPS, Telnet,). The device carries a different VLAN tag in data packets for different services. In this mode, the physical network port of the device can have a separate address or obtain an address from a non-VLAN network. New Rock Technologies, Inc.
Page 115: Figure 3-6 Configuring Voice Vlan To Work In Mode 1
Multi-service VLAN. Select Mode 1 for Voice VLAN, enter the VLAN tag, and specify network information such as IP address. Figure 3-6 Configuring Voice VLAN to Work in Mode 1  Mode2 - Signaling (SIP) and media stream (RTP/T.38) are divided into different  VLANs New Rock Technologies, Inc.
Page 116: Figure 3-7 Configuring Voice Vlan To Work In Mode 2
On the web interface, click Basic>VLAN, and ensure that the VLAN function is set to On and Mode is set to Multi-service VLAN. Select Management VLAN, set the VLAN tag of the management service, and specify network information such as IP address. New Rock Technologies, Inc.
Page 117: Figure 3-8 Configuring Management Vlan
1. Configure multi-service VLAN on the HX4 device: the voice VLAN uses mode 1, the VLAN tag is 300, the VLAN tag of the management VLAN is 200, and the IP address is obtained from the corresponding VLAN network using DHCP. As shown in Figure 3-10. New Rock Technologies, Inc.
Page 118: Figure 3-10 Configuring Multi-Service Vlan
Figure 3-11. From top to bottom: IP address of the device’s physical network port, IP address of the management VLAN, and IP address of the voice VLAN. Figure 3-11 IP Addresses of the Device in Multi-Service VLAN New Rock Technologies, Inc.
Page 119: Figure 3-12 Sip Data Packet Carrying Vlan Tag Of The Voice Vlan In The Multi-Service Vlan Mode
5. Check that tag 200 of the management VLAN is carried in the HTTP packet for the PC management device Web GUI. Figure 3-14 RTP Data Packet Carrying VLAN Tag of the Management VLAN in the Multi-Service VLAN Mode New Rock Technologies, Inc.
Page 120: Making An Openvpn Client Certification (Hx4E/Mx8A/Hx4G/Mx8G)
# Copy the content beginning with “-----BEGIN …” and ending with “-----END …” from ca.crt to # replace the following content. -----BEGIN CERTIFICATE----- -----END CERTIFICATE----- </ca> <cert> # Copy the content beginning with “-----BEGIN …” and ending with “-----END …”rom client.crt to # replace the following content. -----BEGIN CERTIFICATE----- -----END CERTIFICATE----- New Rock Technologies, Inc.
Page 121 Step 3 Save the file as the name of client.ovpn. Step 4 Transform the format to UNIX. Take the Ultra Edit as an example to describe the transform procedure, shown as the figure below. After transformation, save the file. New Rock Technologies, Inc.
Page 122 User Manual MX Series Voice Gateway New Rock Technologies, Inc.
Page 123: Appendix: High Availability Configuration
Appendix: High Availability Configuration For configuration details, High Availability Configuration Guide. Note: If the link is unavailable, go to New Rock's official website: http://newrocktech.com to obtain the file from Support>Download >[Task Guide] High Availability Configuration Guide New Rock Technologies, Inc.
Page 124: Appendix: Auto Provisioning Configuration
 Enabling centralized management of configuration files to enhance account information security For configuration details, see New Rock Devices Auto Provisioning Configuration Manual. Note: If the link is unavailable, go to New Rock's official website: http://en.newrocktech.com/usersmanual to obtain the file. New Rock Technologies, Inc.
Page 125: Appendix: Rj45 And Rj11 Corresponding Relations
Pair Pair Pair Analog line pair TIP1 RING1 TIP2 TIP3 RING3 RING2 TIP4 RING4 Orange Green Blue Brown Reference color Orange Blue Green Brown white white white white Figure 7-1 Schematic Diagram of Subscriber Line Connection New Rock Technologies, Inc.

This manual is also suitable for:

Mx8a Mx series Mx60 Mx60e Mx120g Hx4e ... Show all

New Rock Technologies MX8G User Manual

Quick Links

Need help?

Questions and answers

Related Manuals for New Rock Technologies MX8G

Summary of Contents for New Rock Technologies MX8G

This manual is also suitable for:

Table of Contents