h3c_msr_series_routers_web_configuration_guide(v5)-release_2311(v1.06)-book.pdf
Post on 09-Jan-2016
214 Views
Preview:
TRANSCRIPT
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
1/870
H3C MSR Series Routers
Web-Based Configuration Guide(V5)
Hangzhou H3C Technologies Co., Ltd.http://www.h3c.com
Software version: MSR-CMW520-R2311Document version: 20130320-C-1.16
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
2/870
Copyright 2008-2013, Hangzhou H3C Technologies Co., Ltd. and its licensors
All rights reserved
No part of this manual may be reproduced or transmitted in any form or by any means without prior
written consent of Hangzhou H3C Technologies Co., Ltd.Trademarks
H3C, , H3CS, H3CIE, H3CNE, Aolynk, , H3Care, , IRF, NetPilot, Netflow,SecEngine, SecPath, SecCenter, SecBlade, Comware, ITCMM and HUASAN are trademarks ofHangzhou H3C Technologies Co., Ltd.
All other trademarks that may be mentioned in this manual are the property of their respective owners
Notice
The information in this document is subject to change without notice. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but all statements, information, andrecommendations in this document do not constitute the warranty of any kind, express or implied.
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
3/870
Preface
This document is the Web-based configuration guide for the H3C MSR series routers, and describeshow to visually manage and maintain the H3C MSR series routers through a Web-based interface.
This preface includes:
Audience
Conventions
About the H3C MSR documentation set
Obtaining documentation
Technical support
Documentation feedback
These configuration guides apply to the following models of the H3C MSR series routers:Model
MSR 900 MSR 900
MSR 920
MSR 930
MSR 930
MSR 930-GU
MSR 930-GT
MSR 930-DG
MSR 930-SA
MSR 20-1X
MSR 20-10
MSR 20-10E
MSR 20-11
MSR 20-12
MSR 20-15
MSR 20
MSR 20-20
MSR 20-21
MSR 20-40
MSR 30
MSR 30-10
MSR 30-11
MSR 30-11E MSR 30-11F
MSR 30-16
MSR 30-20
MSR 30-40
MSR 30-60
MSR 50 MSR 50-40
MSR 50-60
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
4/870
AudienceThis documentation is intended for:
Network planners
Field technical support and servicing engineers
Network administrators working with the routers
ConventionsThis section describes the conventions used in this documentation set.
Command conventions
Convention Description
Boldface
Boldtext represents commands and keywords that you enter literally as shown.
Italic Italictext represents arguments that you replace with actual values.
[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.
{ x | y | ... }
Braces enclose a set of required syntax choices separated by vertical bars, from whichyou select one.
[ x | y | ... ]
Square brackets enclose a set of optional syntax choices separated by vertical bars, fromwhich you select one or none.
{ x | y | ... } *
Asterisk marked braces enclose a set of required syntax choices separated by verticalbars, from which you select at least one.
[ x | y | ... ] *
Asterisk marked square brackets enclose optional syntax choices separated by verticalbars, from which you select one choice, multiple choices, or none.
&The argument or keyword and argument combination before the ampersand (&) sign canbe entered 1 to n times.
# A line that starts with a pound (#) sign is comments.
GUI conventions
Convention Description
BoldfaceWindow names, button names, field names, and menu items are in Boldface. Forexample, the New Userwindow appears; click OK.
> Multi-level menus are separated by angle brackets. For example, File> Create> Folder.
Symbols
Convention Description
WARNINGAn alert that calls attention to important information that if not understood or followed canresult in personal injury.
CAUTIONAn alert that calls attention to important information that if not understood or followed canresult in data loss, data corruption, or damage to hardware or software.
IMPORTANT An alert that calls attention to essential information.
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
5/870
Convention Description
NOTE An alert that contains additional or supplementary information.
TIPAn alert that provides helpful information.
Network topology icons
Represents a generic network device, such as a router, switch, or firewall.
Represents a routing-capable device, such as a router or Layer 3 switch.
Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supportsLayer 2 forwarding and other Layer 2 features.
Port numbering in examples
The port numbers in this document are for illustration only and might be unavailable on your device.
About the H3C MSR documentation setThe H3C MSR documentation set includes:
Category Documents Purposes
Product description andspecifications
Marketing brochures Describe product specifications and benefits.
Technology white papersProvide an in-depth description of software featuresand technologies.
Card datasheets Describe card specifications, features, andstandards.
Hardwarespecifications andinstallation
Compliance and safetymanual
Provides regulatory information and the safetyinstructions that must be followed during installation.
Installation guideProvides a complete guide to hardware installationand hardware specifications.
MSR Series Routers InterfaceModule Manual
Provide the hardware specifications of cards.
Software configuration
MSR Series RoutersConfiguration guides
Describe software features and configurationprocedures.
MSR Series RoutersCommand references
Provide a quick reference to all availablecommands.
MSR Series Routers WebConfiguration guides
Describe Web software features and configurationprocedures.
Operations andmaintenance
H3C MSR Basic RoutersProvide information about the product release,including the version history, hardware and softwarecompatibility matrix, version upgrade information,technical support information, and softwareupgrading.
H3C MSR Standard Routers
http://www.h3c.com/portal/Technical_Support___Documents/Technical_Documents/Routers/H3C_MSR_50_Series_Routers/#Configurationhttp://www.h3c.com/portal/Technical_Support___Documents/Technical_Documents/Routers/H3C_MSR_50_Series_Routers/#Configurationhttp://www.h3c.com/portal/Technical_Support___Documents/Technical_Documents/Routers/H3C_MSR_50_Series_Routers/#Configurationhttp://www.h3c.com/portal/Technical_Support___Documents/Technical_Documents/Routers/H3C_MSR_50_Series_Routers/#Configuration -
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
6/870
Obtaining documentationYou can access the most up-to-date H3C product documentation on the World Wide Webat http://www.h3c.com.
Click the links on the top navigation bar to obtain different categories of product documentation:
[Technical Support & Documents > Technical Documents] Provides hardware installation, softwareupgrading, and software feature configuration and maintenance documentation.
[Products & Solutions]Provides information about products and technologies, as well as solutions.
[Technical Support & Documents > Software Download] Provides the documentation released with thesoftware version.
Technical supportservice@h3c.com
http://www.h3c.com
Documentation feedbackYou can e-mail your comments about product documentation to info@h3c.com.
We appreciate your comments.
http://www.h3c.com/http://www.h3c.com/portal/Technical_Support___Documents/Technical_Documents/http://www.h3c.com/portal/Products___Solutions/http://www.h3c.com/portal/Technical_Support___Documents/Software_Download/http://www.h3c.com/portal/Technical_Support___Documents/Software_Download/http://www.h3c.com/portal/Products___Solutions/http://www.h3c.com/portal/Technical_Support___Documents/Technical_Documents/http://www.h3c.com/ -
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
7/870
i
Contents
Web overview 1
Logging in to the Web interface 1Logging out of the Web interface 2
Introduction to the Web interface 2User level 5
Introduction to the Web-based NM functions 5
Common Web interface elements 19Managing Web-based NM through CLI 23
Enabling/disabling Web-based NM 23
Managing the current Web user 23
Configuration guidelines 23Troubleshooting Web browser 24
Cannot access the device through the Web interface 24
Displaying device information 28Displaying device information 30
Displaying broadband connection information 30Displaying 3G wireless card state 30Displaying LAN information 32
Displaying WLAN information 32Displaying service information 33Displaying recent system logs 33Managing integrated services 33
Basic services configuration 34Configuring basic services 34
Entering the homepage of basic configuration wizard 34
Setting WAN interface parameters 34
Setting LAN interface parameters 43
Setting WLAN interface parameters 44
Validating the basic services configuration 45
Configuring WAN interfaces 47Configuring an Ethernet interface or subinterface 47
Overview 47
Configuring an Ethernet interface 47
Configuring an SA interface 50SA interface overview 50
Configuration procedure 50Configuring an ADSL/G.SHDSL interface 52
ADSL/G.SHDSL interface overview 52
Configuration procedure 52Configuring a CE1/PRI interface 55
CE1/PRI interface overview 55Configuration procedure 56
Configuring a CT1/PRI interface 58
CT1/PRI interface overview 58
Configuration procedure 58Configuring a cellular interface 59
Overview 59
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
8/870
ii
Configuration procedure 59Viewing the general information and statistics of an interface 61
Configuring VLANs 62Overview 62Configuring a VLAN and its VLAN interface 62
Recommended configuration procedures 62
Creating a VLAN and its VLAN interface 63
Configuring VLAN member ports 64
Configuring parameters for a VLAN interface 64
Configuration guidelines 66
Wireless configuration overview 67Overview 67Configuration task list 67
Configuring wireless services 68Configuring wireless access service 68
Creating a wireless access service 68
Configuring clear type wireless service 69Configuring crypto type wireless service 77
Binding an AP radio to a wireless service 82
Security parameter dependencies 83Displaying wireless access service 84
Displaying wireless service 84Displaying client 86
Displaying RF ping information 90Wireless access service configuration examples 91
Wireless service configuration example 91
Access service-based VLAN configuration example 92
PSK authentication configuration example 94
Local MAC authentication configuration example 96Remote MAC authentication configuration example 98
Remote 802.1X authentication configuration example 104802.11n configuration example 109
Client mode 111Enabling the client mode 111
Connecting the wireless service 112
Displaying statistics 113
Client mode configuration example 114
Configuring radios 116Configuring data transmit rates 120
Configuring 802.11a/802.11b/802.11g rates 120
Configuring 802.11n MCS 121
Displaying radio 122Displaying WLAN services bound to a radio 122Displaying detailed radio information 122
Configuring WLAN security 125Blacklist and white list 125
Configuring the blacklist and white list functions 125
Configuring dynamic blacklist 125Configuring static blacklist 126
Configuring white list 127Configuring user isolation 127
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
9/870
iii
Configuring WLAN QoS 129Configuring wireless QoS 129
Enabling wireless QoS 129Setting the SVP service 129
Setting CAC admission policy 130Setting radio EDCA parameters for APs 131
Setting EDCA parameters for wireless clients 132
Display radio statistics 133
Displaying client statistics 135Setting rate limiting 137
Wireless QoS configuration example 138
CAC service configuration example 138Static rate limiting configuration example 139
Dynamic rate limiting configuration example 140
Configuring advanced settings 142Setting a district code 142
Channel busy test 142
Managing 3G 144Managing the 3G modem 144
Displaying 3G information 144
Managing the pin code 145
Configuring NAT 148Overview 148
Recommended configuration procedure 148Configuring dynamic NAT 148Configuring a DMZ host 150
Creating a DMZ host 150
Enabling DMZ host on an interface 150Configuring an internal server 151Enabling application layer protocol check 153
Configuring connection limit 153NAT configuration examples 154
Internal hosts accessing public network configuration example 154Internal server configuration example 156
Configuring access control 160Configuration procedure 160
Access control configuration example 161
Configuring URL filtering 163Configuration procedure 163
URL filtering configuration example 164
Configuring MAC address filtering 166Configuring the MAC address filtering type 166
Configuring the MAC addresses to be filtered 166
MAC address filtering configuration example 168
Configuring attack protection 170Overview 170
Blacklist function 170Intrusion detection function 170
Configuring the blacklist function 172Recommended configuration procedure 172
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
10/870
iv
Enabling the blacklist function 173Adding a blacklist entry manually 173
Viewing blacklist entries 174Configuring intrusion detection 174
Attack protection configuration examples 176Attack protection configuration example for MSR 900/20-1X 176
For MSR 20/30/50/930 routers 179
Configuring application control 183Recommended configuration procedure 183
Loading applications 183
Configuring a custom application 184Enabling application control 185
Application control configuration example 186
Web page redirection configuration 188Overview 188
Configuring web page redirection 188
Configuring routes 190Overview 190
Configuring routes 190
Creating an IPv4 static route 190Displaying the active route table 192
Static route configuration example 192IPv4 static route configuration example 192
Configuration guidelines 195
Configuring user-based load sharing 196Overview 196Configuring user-based load sharing 196
Configuring traffic ordering 198Overview 198
Recommended configuration procedure 198
Setting the traffic ordering interval 199Specifying the traffic ordering mode 199Displaying internal interface traffic ordering statistics 199
Displaying external interface traffic ordering statistics 200
Configuring DNS 201Overview 201
Recommended configuration procedure 201Configuring dynamic domain name resolution 201
Configuring DNS proxy 202
Enabling dynamic domain name resolution 202
Enabling DNS proxy 202Clearing the dynamic domain name cache 203
Specifying a DNS server 203
Configuring a domain name suffix 203Domain name resolution configuration example 204
Configuring DDNS 209Overview 209Configuration prerequisites 210
Configuration procedure 210DDNS configuration example 211
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
11/870
v
Configuring DHCP 214Introduction to DHCP 214
Recommended configuration procedure 215Configuring the DHCP server 215
Configuring the DHCP relay agent 215Configuring the DHCP client 216
Enabling DHCP 216
Configuring DHCP interface setup 217
Configuring a static address pool for the DHCP server 218Configuring a dynamic address pool for the DHCP server 220Configuring IP addresses excluded from dynamic allocation 222
Configuring a DHCP server group 223DHCP configuration examples 224
DHCP configuration example without DHCP relay agent 225
DHCP relay agent configuration example 232
Configuration guidelines 238
Configuring ACLs 239Overview 239Recommended IPv4 ACL configuration procedure 239
Adding an IPv4 ACL 240
Configuring a rule for a basic IPv4 ACL 240
Configuring a rule for an advanced IPv4 ACL 242Configuring a rule for an Ethernet frame header ACL 245
Configuration guidelines 247
Configuring QoS 248Overview 248
Subnet limit 248Advanced limit 248Advanced queue 248
Configuring subnet limit 249Configuring advanced limit 250
Configuring advanced queue 253
Configuring interface bandwidth 253
Configure bandwidth guarantee 254QoS configuration examples 257
Subnet limit configuration example 257
Advanced queue configuration example 258Appendix Packet priorities 261
Configuring SNMP 264Overview 264
SNMP agent configuration task list 264
Enabling the SNMP agent function 266Configuring an SNMP view 267Configuring an SNMP community 269
Configuring an SNMP group 270
Configuring an SNMP user 271Configuring SNMP trap function 273Displaying SNMP packet statistics 275
SNMPv1/v2c configuration example 276SNMPv3 configuration example 279
Configuring bridging 285Overview 285
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
12/870
vi
Bridging overview 285Major functionalities of bridges 285
VLAN transparency 289Configuring bridging 289
Recommended basic bridging configuration procedure 289Enabling a bridge set 289
Adding an interface to a bridge set 290
Bridging configuration example 291
Configuring user groups 295User group configuration task list 295
Configuring a user group 296Configuring a user 296
Configuring access control 297Configuring application control 298Configuring bandwidth control 299Configuring packet filtering 300
Synchronizing user group configuration for wan interfaces 302
User group configuration example 302
Configuring MSTP 310Introduction to STP 310
Protocol packets of STP 310Basic concepts in STP 310
How STP works 311Introduction to RSTP 317
Introduction to MSTP 317
Why MSTP 317Basic concepts in MSTP 318How MSTP works 322Implementation of MSTP on devices 322
Protocols and standards 322Recommended MSTP configuration procedure 322
Configuring an MST region 323
Configuring MSTP globally 324
Configuring MSTP on a port 328MSTP configuration example 330
Configuration guidelines 334
Configuring RADIUS 336Overview 336Configuring a RADIUS scheme 336
Configuring common parameters 337
Adding RADIUS servers 340
RADIUS configuration example 341
Configuration guidelines 348
Configuring login control 350Configuration procedure 350Login control configuration example 351
Network requirements 351
Configuring a login control rule so Host A cannot Telnet to Router 351Configuring a login control rule so Host B cannot access Router through the Web 352
Configuring ARP 354Overview 354
Gratuitous ARP 354
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
13/870
vii
Displaying ARP entries 354Creating a static ARP entry 355
Removing ARP entries 355Enabling learning of dynamic ARP entries 356
Configuring gratuitous ARP 357Static ARP configuration example 357
Configuring ARP attack defense 362
Overview 362
Configuring periodic sending of gratuitous ARP packets 362
Configuring ARP automatic scanning 363
Configuring fixed ARP 364
Configuring IPsec VPN 366Overview 366
Recommended configuration procedure 366
Configuring an IPsec connection 367
Displaying IPsec VPN monitoring information 373IPsec VPN configuration example 374
Configuration guidelines 376
Configuring L2TP 377Enabling L2TP 378Adding an L2TP group 378
Displaying L2TP tunnel information 385Client-initiated VPN configuration example 385
Configuring GRE 390Overview 390
Configuring a GRE over IPv4 tunnel 390Recommended configuration procedure 390
Creating a GRE tunnel 390
GRE over IPv4 tunnel configuration example 392
SSL VPN overview 400How SSL VPN works 400Advantages of SSL VPN 401
Configuring SSL VPN gateway 402Recommended configuration procedure 402Configuring the SSL VPN service 403
Configuring Web proxy server resources 404
Configuring TCP application resources 406Configuring a remote access service resource 407
Configuring a desktop sharing service resource 408
Configuring an email service resource 409
Configuring a Notes service resource 410Configuring a common TCP service resource 412
Configuring IP network resources 413
Recommended configuration procedure 413Configuring global parameters 413
Configuring host resources 414
Configuring a user-IP binding 416
Configuring a predefined domain name 417Configuring a resource group 418
Configuring local users 420Adding a local user manually 420
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
14/870
viii
Importing local users in bulk 422Configuring a user group 423
Viewing user information 425Viewing online user information 425
Logging out an online user 425Viewing history user information 425
Performing basic configurations for the SSL VPN domain 426
Configuring the domain policy 426
Configuring the caching policy 428Configuring a bulletin 428
Configuring authentication policies 429
Configuring local authentication 430Configuring RADIUS authentication 430
Configuring LDAP authentication 431
Configuring AD authentication 433
Configuring combined authentication 434Configuring a security policy 435Customizing the SSL VPN user interface 439
Customizing the SSL VPN interface partially 440Customizing the SSL VPN interface fully 442
User access to SSL VPN 443Logging in to the SSL VPN service interface 443Accessing SSL VPN resources 444
Getting help information 445Changing the login password 446
SSL VPN configuration example 447Network requirements 447Configuration prerequisites 447Configuration procedure 448
Configuring the SSL VPN service 448Configuring SSL VPN resources 451
Configuring SSL VPN users 456
Configuring an SSL VPN domain 459
Verifying the configuration 461
Managing certificates 465Overview 465Recommended configuration procedure 465
Recommended configuration procedure for manual request 465Recommended configuration procedure for automatic request 467
Creating a PKI entity 468
Creating a PKI domain 469
Generating an RSA key pair 472
Destroying the RSA key pair 473Retrieving and displaying a certificate 473
Requesting a local certificate 475
Retrieving and displaying a CRL 476PKI configuration examples 476
Certificate request from a Windows 2003 CA server 476
Certificate request from an RSA Keon CA server 480IKE negotiation with RSA digital signature 484
Configuration guidelines 490
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
15/870
ix
Managing the system 491Managing the configuration 491
Saving the configuration 491Restoring factory defaults 492
Backing up configuration 492Restoring configuration 493
Backing up and restoring device files through the USB port 493
Rebooting the device 495
Managing services 495Managing users 497
Creating a user 498
Setting the super password 499Switching to the management level 499
Configuring system time 500
Setting the system time 500
Setting the time zone and daylight saving time 502Configuring TR-069 503
TR-069 network framework 504
Basic functions of TR-069 504Configuration procedure 506
Configuration guidelines 507Upgrading software 507
Upgrading software (for the MSR 900/MSR 20-1X) 507Upgrading software (for the MSR 20/30/50/930) 508
Configuring SNMP (lite version) 510Overview 510
Enabling the SNMP agent function 510
SNMP configuration examples 512
SNMPv1/v2c configuration example 512SNMPv3 configuration example 514
Configuring syslogs 516Displaying syslogs 516
Setting the log host 518
Setting buffer capacity and refresh interval 519
Using diagnostic tools 520Traceroute 520Ping 520
Traceroute operation 520Ping operation 521
Configuring WiNet 523
Configuring WiNet 523
Enabling WiNet 523
Setting the background image for the WiNet topology diagram 524
Managing WiNet 525Configuring a RADIUS user 527How the guest administrator obtains the guest password 529
WiNet configuration example 530
WiNet establishment configuration example 530WiNet-based RADIUS authentication configuration example 535
Configuration wizard 539Overview 539
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
16/870
x
Basic service setup 539Entering the configuration wizard homepage 539
Selecting a country 539Configuring local numbers 540
Configuring connection properties 541Finishing configuration wizard 541
Local number and call route 542
Basic settings 542
Fax and modem 542
Call services 542
Advanced settings 542
Basic settings 543Introduction to basic settings 543
Local number 543
Call route 543
Basic settings 544Configuring a local number 544
Configuring a call route 545Configuration examples of local number and call route 547
Configuring direct calling for SIP UAs through the SIP protocol (configuring static IP address) 547
Configuring direct calling for SIP UAs through the SIP protocol (configuring domain name) 551Configuring proxy server involved calling for SIP UAs 555
Configuring trunking mode calling 562
Fax and modem 566Protocols and standards for FoIP 566Fax flow 566
Introduction to fax methods 567
SIP modem pass-through function 567
Configuring fax and modem 568Configuring fax and modem parameters of a local number 568
Configuring fax and modem parameters of a call route 571
Call services 573Call waiting 573
Call hold 573Call forwarding 573
Call transfer 574
Call backup 574Hunt group 574
Call barring 574
Message waiting indication 574
Three-party conference 574
Silent monitor and barge in services 575
Calling party control 575
Door opening control 575CID on the FXS voice subscriber line 575CID on the FXO voice subscriber line 576
Support for SIP voice service of the VCX 576
Configuring call services of a local number 576Configuring call forwarding, call waiting, call hold, call transfer, and three-party conference 576
Configuring other voice functions 578
Configuring call services of a call route 580
Call services configuration examples 581
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
17/870
xi
Configuring call waiting 581Configuring call forwarding 582
Configuring call transfer 584Configuring hunt group 585
Configuring three-party conference 588Configuring silent monitor and barge in 590
Advanced settings 596
Introduction to advanced settings 596
Coding parameters 596
Other parameters 600
Configuring advanced settings of a local number 600Configuring coding parameters of a local number 600
Configuring other parameters of a local number 602Configuring advanced settings of a call route 603
Configuring coding parameters of a call route 603Configuring other parameters for a call route 604
Advanced settings configuration example 605
Configuring out-of-band DTMF transmission mode for SIP 605
SIP-to-SIP connections 607Configuring media parameters for SIP-to-SIP connections 607
Configuring signaling parameters for SIP-to-SIP connections 608
Configuring dial plans 610Dial plan process 610
Regular expression 611Dial plan functions 613
Number match 613
Call control 614
Number substitution 614
Configuring dial plan 615Configuring number match 615
Configuring call control 616Configuring number substitution 620
Dial plan configuration examples 622Configuring number match mode 622
Configuring the match order of number selection rules 624Configuring entity type selection priority rules 628Configuring call authority control 632
Configuring number substitution 635
Call connection 643Introduction to SIP 643
Terminology 643
Functions and features of SIP 644
SIP messages 645
SIP fundamentals 645Support for transport layer protocols 648SIP security 648
Signaling encryption 649
Media flow encryption 649TLS-SRTP combinations 650
Support for SIP extensions 650
Configuring SIP connections 651
Configuring connection properties 651
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
18/870
xii
Configuring registrar 651Configuring proxy server 653
Configuring session properties 653Configuring source address binding 653
Configuring SIP listening 655Configuring media security 656
Configuring caller identity and privacy 657
Configuring SIP session refresh 658
Configuring compatibility 658Configuring advanced settings 660
Configuring the address hiding mode 660
Specifying the outbound proxy 660Configuring registration parameters 661
Configuring voice mailbox server 663
Configuring signaling security 664
Configuring call release cause code mapping 665Configuring PSTN call release cause code mappings 665Configuring SIP status code mappings 666
SIP connection configuration examples 666Configuring basic SIP calling features 666
Configuring caller ID blocking 666Configuring SRTP for SIP calls 668
Configuring TCP to carry outgoing SIP calls 669Configuring TLS to carry outgoing SIP calls 670
Managing SIP server groups 672Creating a SIP server group 672
Configuring the real-time switching function 672
Configuring the keep-alive mode 673
Configuring the source address binding mode 674Configuring server information management 675
Configuring SIP trunk 677Features 678
Typical applications 678
Protocols and standards 679Configuring SIP trunk 679
Configuration task list 679
Enabling the SIP trunk function 680Configuring a SIP server group 680
Configuring a SIP trunk account 681Configuring a call route for outbound calls 682
Configuring a call route for a SIP trunk account 682
Configuring fax and modem parameters of the call route of a SIP trunk account 684
Configuring advanced settings of the call route of a SIP trunk account 684
Configuring media parameters for SIP-to-SIP connections 686Configuring signaling parameters for SIP-to-SIP connections 687
Configuring a call route for inbound calls 688SIP trunk configuration examples 689
Configuring a SIP server group with only one member server 689Configuring a SIP server group with multiple member servers 695
Configuring call match rules 698
Managing data links 701Overview 701
Introduction to E1 and T1 701
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
19/870
xiii
E1 and T1 voice functions 701E1 and T1 interfaces 702
Features of E1 and T1 703Introduction to BSV interface 703
Configuring digital link management 704Configuring VE1 line 704
Configuring VT1 line 709
Configuring BSV line 711
Displaying ISDN link state 716E1 voice DSS1 signaling configuration example 716
Managing lines 719FXS voice subscriber line 719
FXO voice subscriber line 719E&M subscriber line 719
E&M introduction 719E&M start mode 719
One-to-one binding between FXS and FXO voice subscriber lines 721
Echo adjustment function 721
Adjusting echo duration 721
Adjusting echo cancellation parameters 721
Enabling the nonlinear function of echo cancellation 722
Line management configuration 722Configuring an FXS voice subscriber line 722
Configuring an FXO voice subscriber line 725Configuring an E&M subscriber line 728Configuring an ISDN line 731
Configuring a paging line 733
Configuring an MoH line 734
Line management configuration examples 735Configuring an FXO voice subscriber line 735
Configuring one-to-one binding between FXS and FXO 736
Configuring SIP local survival 744Configuring SIP local survival 745
Service configuration 745User management 746
Trusted nodes 747
Call-out route 747Area prefix 748
Call authority control 749SIP local survival configuration examples 750
Configuring local SIP server to operate in alone mode 750
Configuring local SIP server to operate in alive mode 753
Configuring call authority control 755
Configuring an area prefix 760Configuring a call-out route 763
Configuring IVR 766Overview 766Advantages 766
Customizable voice prompts 766Various codecs 766Flexible node configuration 766Customizable process 766
Successive jumping 767
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
20/870
xiv
Error processing methods 767Timeout processing methods 767
Various types of secondary calls 767Configuring IVR 767
Uploading media resource files 767Importing a media resource through an MoH audio input port 768
Configuring the global key policy 769
Configuring IVR nodes 770
Configuring a call node 770Configure a jump node 773Configure a service node 775
Configuring access number management 776Configuring an access number 776
Configuring advanced settings for the access number 777
IVR configuration examples 778
Configure a secondary call on a call node (match the terminator of numbers) 778Configure a secondary call on a call node (match the number length) 782Configure a secondary call on a call node (match a number) 785
Configure an extension secondary call on a call node 787Configure a jump node 789
Configure an immediate secondary call on a service node 791Configure a secondary call on a service node 793
Configure a call node, jump node, and service node 795Customizing IVR services 801
Create a menu 802
Bind an access number 808
Customize IVR services 808Custom IVR service configuration example 809
Advanced configuration 820Global configuration 820
Batch configuration 821
Local number 821Call route 828Line management 831
SIP local survival services 835
States and statistics 837Line states 837
Displaying detailed information about analog voice subscriber lines 838
Displaying detailed information about digital voice subscriber lines 838Call statistics 839
Displaying active call summary 840
Displaying history call summary 840
SIP UA states 841
Displaying TCP connection information 841Displaying TLS connection information 841
Connection status 842Displaying number register status 842
Displaying number subscription status 843Local survival service states 843
SIP trunk account states 844
Displaying SIP trunk account states 844
Displaying dynamic contact states 845Server group information 845
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
21/870
xv
IVR information 846Displaying IVR call states 846
Displaying IVR play states 847
Index 848
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
22/870
1
Web overview
The device provides Web-based configuration interfaces for visual device management andmaintenance.
Figure 1Web-based network management operating environment
Logging in to the Web interfaceFollow these guidelines when you log in to the Web interface:
The PC in Figure 1is the one where you configure the device, but not necessarily the Web-basednetwork management terminal. The Web-based network management terminal is a PC (or anotherterminal) used to log in to the Web interface and is required to be reachable to the device.
If you click the verification code displayed on the Web login page, you can get a new verificationcode.
Up to 24 users can concurrently log in to the device through the Web interface.
You can also log in to the Web interface through HTTPS, but you must enable HTTPS on the device,and the address you input in the address bar must start with https://. For more information, see"Configuring service management."
If you have configured the auto authentication mode for an HTTPS login user by using thewebhttps-authorization modecommand, the user is automatically authenticated by the PKI certificate,without inputting any username and password. For more information, see FundamentalsConfiguration Guide.
You can use the following default settings to log in to the Web interface through HTTP:
Usernameadmin
Passwordadmin
IP address of the device192.168.1.1.
To log in to the Web interface of the device from a PC:
1. Connect the Ethernet interface Ethernet 0/0 of the device to the PC using a crossover Ethernetcable.
2. Configure an IP address for the PC and make sure the PC and device can reach each other.
For example, assign the PC an IP address (for example, 192.168.1.2) within the network segment192.168.1.0/24 (except for 192.168.1.1).
3. Open the browser, and input the login information.
a. Type the IP address http://192.168.1.1 in the address bar and press Enter.
The login page of the Web interface (see Figure 2) appears.
b. Enter the username and password admin, and the verification code, select the language
(English and Chinese are supported at present), and click Login.
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
23/870
2
Figure 2Login page of the Web interface
Logging out of the Web interfaceCAUTION:
A logged-in user cannot automatically log out by directly closing the browser.
Click Logoutin the upper-right corner of the Web interface to quit Web-based network management.
The system will not save the current configuration before you log out of the Web interface. Save thecurrent configuration before logout.
Introduction to the Web interfaceThe Web-based interface is composed of three parts: navigation area, title area, and body area.
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
24/870
3
Figure 3Initial page of the Web interface
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
25/870
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
26/870
5
Navigation area Title area Body area
Navigation areaOrganizes the Web function menus in the form of a navigation tree, where youcan select function menus as needed. The result is displayed in the body area.
Title areaOn the left, displays the path of the current configuration interface in the navigationarea; on the right, provides the Savebutton to quickly save the current configuration, the Helpbuttonto display the Web related help information, and the Logoutbutton to log out of the Web interface.
Body areaThe area where you can configure and display a function.
User levelWeb user levels, ranging from low to high, are visitor, monitor, configure, and management. Ahigher-level user has all rights of a lower-level user.
VisitorUsers of this level can perform the ping and traceroute operations, but can neither accessthe device data nor configure the device.
MonitorUsers of this level can only access the device data but cannot configure the device.ConfigureUsers of this level can access data from the device and configure the device, but theycannot upgrade the host software, add/delete/modify users, or backup/restore the applicationfile.
ManagementUsers of this level can perform any operations for the device.
Introduction to the Web-based NM functionsUser level in Table 1 indicates that users of this level or users of a higher level can perform thecorresponding operations.
Table 1Web-based NM function description
Function menu Description User level
Device Information
Device Information
Displays and allows you torefresh device information,broadband connectioninformation, 3G wirelesscard state, LAN information,WLAN information, servicesinformation, and recentsystem logs.
Monitor
Integrated Service Management
Displays the URL address ona card. Monitor
Allows you to change theURL address of a card, andlog in to the Web interfaceof the card.
Configure
Wizard Basic Configuration WizardGuides you through thebasic service configurationof routers.
Configure
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
27/870
6
Function menu Description User level
InterfaceSetup
WANInterface
Setup
WAN Interface Setup
Displays the configurationinformation of a WANinterface, and allows you toview interface statistics.
Monitor
Allows you to modify WANinterface configuration, andclear the statistics of a WANinterface.
Configure
LAN InterfaceSetup
VLAN Setup
Displays the configurationinformation of a VLAN.
Monitor
Allows you to configure aVLAN.
Configure
VLAN Interface Setup
Displays the configurationinformation of a VLANinterface.
Monitor
Allows you to configure aVLAN interface.
Configure
WirelessConfiguration
Summary
Displays wireless service,radio and client information.
Monitor
Allows you to view wirelessservice, radio and clientinformation; clear radiostatistics; clear clientstatistics, disconnect aconnection, and add a clientto a blacklist.
Configure
Access Service
Displays configurationinformation about an accessservice.
Monitor
Allows you to create andconfigure an access service.
Configure
Radio
Displays radio parametersand radio rate settings.
Monitor
Allows you to set radioparameters, 802.11a/b/grates, and 803.11n MCS.
Configure
Security
Displays configurationinformation of blacklist,whitelist, and user isolation.
Monitor
Allows you to configureblacklist, whitelist, and userisolation.
Configure
Wireless QoS
Displays wireless QoS andrate limiting settings, anddisplays radio and clientinformation.
Monitor
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
28/870
7
Function menu Description User level
Allows you to configurewireless QoS and ratelimiting, and clear radio andclient information.
Configure
Country Code
Displays configurationinformation of the countrycode.
Monitor
Allows you to set the countrycode.
Configure
3G
3G Information
Displays 3G modeminformation, UIM cardinformation, and 3Gnetwork information.
Monitor
PIN Code Management
Displays UIM card status. Monitor
Allows you to manage PINcodes. Configure
NATConfiguration
NATConfiguration
Dynamic NAT
Displays information aboutthe NAT configurations.
Monitor
Allows you to configureNAT.
Configure
DMZ Host
Allows you to create a DMZhost.
Monitor
Allows you to enable DMZhost on an interface.
Configure
NAT Server Setup
Displays configurations ofthe internal server. Monitor
Allows you to configure theinternal server.
Configure
ALG
Displays configurations ofthe application layerprotocol check function.
Monitor
Allows you to configure theapplication layer protocolcheck function.
Configure
Nat Outbound Setup
Displays configuration
information about thenumber of connectionsdisplayed.
Monitor
Allows you to configureconnection limit.
Configure
SecuritySetup
Access
Displays the access controlconfiguration information.
Monitor
Allows you to configureaccess control.
Configure
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
29/870
8
Function menu Description User level
URL Filter
Displays the informationabout URL filteringconditions.
Monitor
Allows you to add or delete
URL filtering conditions.
Configure
MAC Address Filtering
Displays the informationabout MAC address filteringconditions.
Monitor
Allows you to set MACaddress filtering types, addor delete MAC addresses tobe filtered.
Configure
Attack Defend
Blacklist
Displays and allows you torefresh the blacklistinformation and whether the
blacklist filtering is enabledor not.
Monitor
Allows you to add, modify,delete and clear blacklistentries, and set whether toenable or disable blacklistfiltering.
Configure
Intrusion Detection
Displays intrusion detectionconfiguration information.
Monitor
Allows you to configure theintrusion detection function.
Configure
ApplicationControl
Application Control
Displays application controlconfiguration information.
Monitor
Allows you to configureapplication control.
Configure
Load ApplicationAllows you to load anapplication and view theloaded application.
Configure
Custom Application
Displays custom applicationinformation.
Monitor
Allows you to add, modify
and delete a customapplication.
Configure
....Advance
Redirection
Displays the configurationinformation of redirection.
Monitor
Allows you to add, modify orremove the redirectionconfiguration on aninterface.
Configure
Route Setup SummaryDisplays IPv4 route summaryinformation.
Monitor
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
30/870
9
Function menu Description User level
CreateAllows you to create IPv4static routes.
Configure
RemoveAllows you to delete IPv4static routes.
Configure
User-based-sharing
Displays the IP address,mask and load sharinginformation of an interface.
Monitor
Allows you to modify theload sharing status andshared bandwidth of aninterface.
Configure
TrafficOrdering
Config
Displays IP addresses, trafficordering mode and trafficordering interval forinterfaces.
Monitor
Allows you to configure thetraffic ordering mode andinterval.
Configure
Statistics of Inbound InterfacesDisplays inbound interfacetraffic ordering statistics.
Monitor
Statistics of Outbound InterfacesDisplays outbound interfacetraffic ordering statistics.
Monitor
DNS Setup
DNS Configuration
Displays DNS
configurations.
Monitor
Allows you to configureDNS.
Configure
DDNS Configuration
Displays DDNSconfigurations.
Monitor
Allows you to add, modify,and delete a DDNS entry.
Configure
DHCP Setup
DHCP Enable
Displays whether DHCP isglobally enabled ordisabled.
Monitor
Allows you to enable ordisable DHCP.
Configure
DHCP Interface Setup
Displays DHCP server, relay,or client configurations onan interface.
Monitor
Allows you to enable theDHCP server, relay, or clienton an interface.
Configure
QoS
ACLIPv4
SummaryDisplays summary IPv4 ACLinformation.
Monitor
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
31/870
10
Function menu Description User levelSetup Add
Allows you to add an IPv4ACL.
Configure
Basic ConfigAllows you to configure abasic rule for an IPv4 ACL.
Configure
Advanced ConfigAllows you to configure anadvanced rule for an IPv4ACL.
Configure
Link ConfigAllows you to configure alink layer rule for an IPv4ACL.
Configure
RemoveAllows you to remove anIPv4 ACL.
Configure
Subnet Limit
Displays the subnet limitconfiguration information.
Monitor
Allows you to add, modify ordelete subnet limit rules.
Configure
Advanced Limit
Displays the advanced limitconfiguration information.
Monitor
Allows you to add, modify ordelete advanced limit rules.
Configure
Advanced Queue
Displays advanced queueconfiguration information.
Monitor
Allows you to configureinterface bandwidth, add,
modify, or delete bandwidthguarantee policies.
Configure
Classifier
SummaryDisplays classifierinformation.
Monitor
CreateAllows you to create aclassifier.
Configure
SetupAllows you to configureclassification rules for aclassifier.
Configure
RemoveAllows you to remove aclassifier.
Configure
Behavior
SummaryDisplays behaviorinformation.
Monitor
CreateAllows you to create abehavior.
Configure
SetupAllows you to configureactions for a behavior.
Configure
RemoveAllows you to remove abehavior.
Configure
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
32/870
11
Function menu Description User level
Policy
SummaryDisplays QoS policyinformation.
Monitor
CreateAllows you to create a QoSpolicy.
Configure
SetupAllows you to configureclassifier-behaviorassociations.
Configure
RemoveAllows you to remove a QoSpolicy.
Configure
PortPolicy
SummaryDisplays QoS policyapplication information of aport.
Monitor
SetupAllows you to apply a QoSpolicy to a port.
Configure
Remove Allows you to remove a QoSpolicy from a port.
Configure
SNMP(supported onthe MSR-20,MSR-30, andMSR-50)
Setup
Displays and allows you torefresh SNMP configurationinformation and statistics.
Monitor
Allows you to configureSNMP.
Configure
Community
Displays the briefinformation of SNMPcommunities.
Monitor
Allows you to create, modifyand remove an SNMPcommunity.
Configure
Group
Displays the briefinformation of SNMPgroups.
Monitor
Allows you to create, modifyand remove an SNMPgroup.
Configure
User
Displays the briefinformation of SNMP users.
Monitor
Allows you to create,modify, and remove anSNMP user.
Configure
Trap
Displays the status (enabledor disabled) of the SNMPtrap function and target hostinformation.
Monitor
Allows you to enable ordisable the SNMP trapfunction; create, modify,and remove a target host.
Configure
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
33/870
12
Function menu Description User level
View
Displays the briefinformation of SNMP views.
Monitor
Allows you to create,modify, and remove an
SNMP view.
Configure
Bridge
Global ConfigDisplays and allows you toset global bridginginformation.
Configure
Config InterfaceDisplays and allows you toset interface bridginginformation.
Configure
Security
UserGroup
Group
Displays user groupconfiguration.
Monitor
Allows you to configure usergroups.
Configure
UserDisplays user configuration. Monitor
Displays users. Configure
WANSynchronization
Allows you to synchronizethe user group configurationto a WAN interface.
Configure
Connection Control
Displays configuration ofaccess control.
Monitor
Allows you to configure timerange-based access control.
Configure
Application Control
Displays custom applicationconfiguration.
Monitor
Allows you to customizeapplications.
Configure
Bandwidth
Displays bandwidthmanagement configuration.
Monitor
Allows you to configurebandwidth control.
Configure
Packet Filter
Displays packet filteringrules. Monitor
Allows you to configurepacket filtering rules.
Configure
MSTP Region
Allows you to configure theMST region-relatedparameters andVLAN-to-MSTI mappings.
Monitor
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
34/870
13
Function menu Description User level
Allows you to modify theMST region-relatedparameters andVLAN-to-MSTI mappings.
Configure
Port
Displays MSTP portparameters.
Monitor
Allows you to modify MSTPport parameters.
Configure
GlobalDisplays MSTP parametersglobally.
Configure
RADIUSDisplays and allows you toadd, modify, and delete aRADIUS scheme.
Management
Access
Displays information aboutlogin control rules.
Monitor
Allows you to add anddelete a login control rule.
Configure
ARPManagement
ARP Table
Displays information of anARP table.
Monitor
Allows you to add, modifyand delete ARP entries.
Configure
Gratuitous ARP
Displays gratuitous ARP
configuration information.
Monitor
Allows you to configuregratuitous ARP.
Configure
Dynamic Entry
Displays the number ofdynamic ARP entries that aninterface can learn.
Monitor
Allows you to enable ordisable an interface to orfrom learning dynamic ARPentries, and change thenumber of dynamic ARP
entries that an interface canlearn.
Configure
ARPAnti-Attack
Scan
Allows you to specify theinterface performing ARPautomatic scanning.
Monitor
Allows you to start or stopARP scanning.
Configure
FixDisplays all static anddynamic ARP entries.
Monitor
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
35/870
14
Function menu Description User level
Allows you to convert alldynamic ARP entries to staticones or delete all static ARPentries.
Configure
VPN
IPsec VPN
IPsec Connection
Displays IPsec connectionconfiguration.
Monitor
Allows you to add, modify,delete, enable, or disable anIPsec connection.
Configure
Monitoring Information
Displays configuration andstatus information of IPsecconnections, and tunnelinformation of IPsecconnections.
Monitor
Allows you to delete tunnels
that are set up withconfiguration of an IPsecconnection, and delete allISAKMP SAs of an IPsecconnection.
Configure
L2TP
L2TP Configuration
Displays the L2TP status andL2TP group configurationinformation.
Monitor
Allows you to configure theL2TP status, add, modify ordelete an L2TP group.
Configure
Tunnel Info Displays L2TP tunnelinformation.
Monitor
GRE
Displays GRE tunnelinformation.
Monitor
Allows you to add, modify ordelete a GRE tunnel.
Configure
CertificateManagement
Entity
Displays PKI entityinformation.
Monitor
Allows you to add, change,and delete PKI entities.
Configure
Domain
Displays PKI domaininformation.
Monitor
Allows you to add, change,and delete PKI domains.
Configure
Certificate
Displays PKI certificates anddetails of the certificate.
Monitor
Supports the operation suchas creating keys, retrievingcertificates, applying forcertificates, and deletingcertificates.
Configure
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
36/870
15
Function menu Description User level
CRLDisplays CRLs. Monitor
Allows you to retrieve CRLs. Configure
SystemManageme
nt
Configuration
Save
Allows you to save thecurrent configuration to theconfiguration file to be usedat the next startup.
Configure
Allows you to save thecurrent configuration as thefactory defaultconfiguration.
Management
Initialize
Allows you to restore allconfigurations on the deviceto the factory defaultconfiguration.
Configure
Backup Configuration
Allows you to upload thecurrent startup configurationfile of the device to the TFTPserver for backup.
Management
Restore Configuration
Allows you to download theconfiguration file saved onthe TFTP server to the currentconfiguration file of thedevice.
Management
Backup and Restore
Displays device files. Monitor
Allows you to back up files
on the device to thedestination device through auniversal serial bus (USB)port; transfer files from thedevice where the files arebacked up to the localdevice through a USB port.
Configure
RebootAllows you to reboot thedevice.
Configure
Service Management
Displays relatedconfiguration of systemservices.
Configure
Allows you to set whether toenable different services andset related parameters.
Management
Users
User SummaryDisplays the briefinformation of users.
Monitor
Super PasswordAllows you to set the supperpassword for switching tothe management level.
Management
Create User Allows you to create a user.Management
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
37/870
16
Function menu Description User level
Modify UserAllows you to modify useraccount.
Management
Remove User Allows you to remove a user.Management
Switch To ManagementAllows you to switch the useraccess level to themanagement level.
Visitor
SNMP (supported on the MSR 900 and MSR20-1X series)
Displays SNMPconfiguration information.
Monitor
Allows you to configureSNMP.
Configure
System Time
System Time
Displays the current systemtime and its configurations.
Monitor
Allows you to set the system
time.Configure
Time Zone
Displays the time zoneconfiguration of the system.
Monitor
Allows you to set the timezone of the system.
Configure
TR-069
Displays TR-069configurations.
Monitor
Allows you to set TR-069. Configure
Software UpgradeAllows you to upgradesoftware of the device.
Configure
Other
Syslog
Loglist
Displays detailedinformation of system logs.
Monitor
Allows you to clear the logbuffer.
Configure
Loghost
Displays configurations ofthe specified loghost.
Monitor
Allows you to set the IPaddress of the loghost.
Configure
Logset
Displays the number of logsthat can be stored in the logbuffer; allows you to set therefresh period on the loginformation displayed on theWeb interface.
Monitor
Allows you to set the numberof logs that can be stored inthe log buffer.
Configure
DiagnosticTools
PingAllows you to execute thepingcommand and view theresult.
Visitor
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
38/870
17
Function menu Description User level
Trace RouteAllows you to execute thetrace routecommand andview the result.
Visitor
WiNet
WiNet Management
Displays and refreshes the
WiNet topology diagramand allows you to view thedetailed device information.
Monitor
Allows you to manuallytrigger the collection oftopology information, savethe current WiNet topologyas the baseline topology,restore the configuration tofactory defaults and restartthe member.
Configure
SetupAllows you to build or closeWiNet. Configure
User Management
Displays information aboutusers managed by theRADIUS server.
Monitor
Allows you to add, modify,delete, import, and exportusers managed by theRADIUS server.
Configure
VoiceManagement
Configuration Wizard
Displays configurationinformation about theconfiguration wizard.
Monitor
Allows you to configurevoice basic parametersthrough the configurationwizard.
Configure
Local Number
Displays local numberconfiguration information.
Monitor
Allows you to create,modify, and delete a localnumber.
Configure
Call Route
Displays call route
configuration information. Monitor
Allows you to create,modify, and delete a callroute.
Configure
Dial Plan Number Match
Displays number matchconfiguration information.
Monitor
Allows you to configurenumber match parameters.
Configure
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
39/870
18
Function menu Description User level
Call Authority Control
Displays call authoritycontrol configurationinformation, and themaximum number of callconnections in a set.
Monitor
Allows you to configure callauthority control, and themaximum number of callconnections in a set.
Configure
Number Substitution
Displays number substitutionconfiguration information.
Monitor
Allows you to configurenumber substitution.
Configure
CallConnection
SIP Connection
Displays connectionproperties,session
properties, advancedsettings, and call releasecause code mappings.
Monitor
Allows you to configureconnection properties,session properties,advanced settings, and callrelease cause codemappings.
Configure
SIP Server Group Management
Displays SIP server groupconfiguration.
Monitor
Allows you to configure aSIP server group.
Configure
Digital Link Management
Displays VE1, VT1, and BSVline configurationinformation, and line state.
Monitor
Allows you to configure aVE1, VT1, and BSV line.
Configure
Line Management
Displays FXS, FXO, E&M,and ISDN configurationinformation and state.
Monitor
Allows you to configure anFXS, FXO, E&M, and ISDNline, and query their state.
Configure
AdvancedConfiguration
Global Configuration
Displays globalconfiguration information.
Monitor
Allows you to performglobal configurations.
Configure
Batch ConfigurationDisplays batch configurationinformation.
Monitor
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
40/870
19
Function menu Description User level
Allows you to create localnumbers, call routes, andmanage lines in batches.
Configure
Statistics
Call Statistics
Allows you to view and
refresh active and historycall statistics.
Monitor
Allows you to view andrefresh active and historycall statistics, and clearhistory call statistics.
Configure
Connection StatusAllows you to view andrefresh registration andsubscription status.
Monitor
Common Web interface elementsCommon buttons and icons
Table 2Common buttons and icons
Button and icon Description
Allows you to bring the configuration on the current page into effect.
Allows you to cancel the configuration on the current page, and go to thecorresponding display page or device information page.
Allows you to refresh the information on the current page.
Allows you clear all statistics or items in a list.
Allows you to enter the page for adding an entry.
Allows you to delete entries on a list.
Allows you to select all the entries on a list or all ports on a device panel.
Allows you to clear all the entries on a list or all ports on a device panel.
Typically located in the Operationcolumn of a display page, it allows you
to enter the modify page of a corresponding entry so as to display ormodify the configurations of the entry.
Typically located in the Operationcolumn of a display page, it allows youto remove an entry.
Content display by pages
The Web interface can display contents by pages, as shown in Figure 4. You can set the number ofentries displayed per page, and view the contents on the first, previous, next, and last pages, or go to anypage that you want to check.
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
41/870
20
Figure 4Content display by pages
Searching function
The Web interface provides you with the basic and advanced searching functions to display only theentries that match specific searching criteria.
Basic search: As shown in Figure 4, input the keyword in the text box above the list, select a searchitem from the drop-down list and click the Searchbutton to display the entries that match thecriteria. Figure 5shows an example of searching for entries with VLAN ID being 2.
Figure 5Basic search function example
Advanced search: Advanced search function: As shown in Figure 4, you can click theAdvancedSearchlink to open the advanced search page, as shown in Figure 6. Specify the search criteria,and clickApplyto display the entries that match the criteria.
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
42/870
21
Figure 6Advanced search
Take the ARP table shown in Figure 4as an example. If you want to search for the ARP entries withinterface being Ethernet 0/4, and IP address range being 192.168.1.50 to 192.168.1.59, follow thesesteps:
1. Click theAdvanced Search link, specify the search criteria on the advanced search page as shownin Figure 7, and clickApply. The ARP entries with interface being Ethernet 0/4 are displayed.
Figure 7Advanced search function example (I)
2. Click theAdvanced Search link, specify the search criteria on the advanced search page as shownin Figure 8, and clickApply. The ARP entries with interface being Ethernet 0/4 and IP addressrange being 192.168.1.50 to 192.168.1.59 are displayed as shown in Figure 9.
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
43/870
22
Figure 8Advanced searching function example (II)
Figure 9Advanced searching function example (III)
Sorting function
The Web interface provides you with the basic sorting function to display entries in certain orders.
On a list page, you can click the blue heading item of each column to sort the entries based on the
heading item you selected. After your clicking, the heading item is displayed with an arrow beside it asshown in Figure 10. The upward arrow indicates the ascending order, and the downward arrowindicates the descending order.
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
44/870
23
Figure 10Basic sorting function example (based on IP address in the descending order)
Managing Web-based NM through CLI
Enabling/disabling Web-based NM
Task Command
Enable the Web-based NM service.
ip http enable
Disable the Web-based NM service.
undo ip http enable
Managing the current Web user
Task Command
Display the current login users. display web users
Log out the specified user or all users.
free web-users { all| user-id userid| user-nameusername}
Configuration guidelinesThe Web-based configuration interface supports the operating systems of Windows XP, Windows2000, Windows Server 2003 Enterprise Edition, Windows Server 2003 Standard Edition,
Windows Vista, Windows 7, Linux, and MAC OS.
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
45/870
24
The Web-based configuration interface supports the browsers of Microsoft Internet Explorer 6.0SP2 and higher, Mozilla Firefox 3.0 and higher, and Google Chrome 2.0.174.0 and higher.
The Web-based configuration interface does not support the Back, Next, Refreshbuttons providedby the browser. Using these buttons may result in abnormal display of Web pages.
The Windows firewall limits the number of TCP connections, when you use IE to log in to the Web
interface, sometimes you may be unable to open the Web interface. To avoid this problem, turn offthe Windows firewall before login.
If the software version of the device changes, clear the cache data on the browser before loggingin to the device through the Web interface; otherwise, the Web page content may not be displayedcorrectly.
You can display at most 20,000 entries that support content display by pages.
Troubleshooting Web browser
Cannot access the device through the Web interfaceSymptomYou can ping the device successfully, and log in to the device through Telnet. HTTP is enabled and theoperating system and browser version meet the Web interface requirements. However, you cannotaccess the Web interface of the device.
Analysis
If you use the Microsoft Internet Explorer, you can access the Web interface only when the followingfunctions are enabled: Run ActiveX controls and plug-ins, script ActiveX controls marked safe forscripting and active scripting.
If you use the Mozilla Firefox, you can access the Web interface only when JavaScript is enabled.Configuring the Internet Explorer settings
1. Open the Internet Explorer, and then select Tools> Internet Options.
2. Click the Security tab, and then select a Web content zone to specify its security settings, as shownin Figure 11.
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
46/870
25
Figure 11Internet Explorer setting (I)
3. Click Custom Level, and a dialog box Security Settingsappears.
4. As shown in Figure 12, enable these functions: Run ActiveX controls and plug-ins, script ActiveXcontrols marked safe for scripting and active scripting.
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
47/870
26
Figure 12Internet Explorer setting (II)
5. Click OKin the Security Settingsdialog box.
Configuring Firefox Web browser settings
1. Open the Firefox Web browser, and then select Tools> Options.2. Click the Content tab, select the Enable JavaScriptcheck box, and click OK, as shown in Figure
13.
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
48/870
27
Figure 13Firefox Web browser setting
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
49/870
28
Displaying device information
When you are logged in to the Web interface, you are placed on the Device Infopage.
The Device Infopage contains five parts, which correspond to the five tabs below the figure on the pageexcept the Services Informationand Recent System Logs tabs. When you put your cursor on a part of thefigure, the system prompts you for the tab of the corresponding information, and you can jump to the tabby clicking this part.
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
50/870
29
Figure 14Device information
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
51/870
30
Select the refresh mode from the Refresh Periodlist.
If you select a specific period, the system periodically refreshes the Device Infopage.
If you select Manual, click Refreshto refresh the page.
Displaying device informationTable 3Field descriptionField Description
Device Model
Device name.
Software Version
Software version of the device.
Firmware Version Firmware version of the device.
Hardware Version
Hardware version of the device.
Running Time
Running time after the latest boot of the device.
CPU Usage Real-time CPU usage.
Memory Usage Real-time memory usage.
Displaying broadband connection informationTable 4Field description
Field Description
Interface Interface name.
Session Type Connection type of the interface.
Network-Side ConnectionState
Connection state at the network side of the interface.
IP Address/Mask IP address and mask of the interface.
DNS Server IP address of the DNS server.
Uplink Rate (kbps) Average rate in the outgoing direction on the interface in recent 300 seconds.
Downlink Rate (kbps) Average rate in the incoming direction on the interface in recent 300 seconds.
Work Mode Rate and duplex mode of the interface.
Displaying 3G wireless card stateTo display the detailed information about the 3G wireless card state, click the More link in the 3GWireless Card Statearea. The information includes 3G modem information, user identity module (UIM)information, and 3G network information.
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
52/870
31
Figure 153G wireless card state
Table 5Field description
Field Description
3G Modem Information Connection state of the 3G network.
3G Modem State
State of the 3G modem, which can be:
NormalA 3G modem is connected to the router.
Absent or unrecognized modemNo 3G modem is connected to the routeror the modem cannot be recognized.
Model Model of the 3G modem.
Manufacturer Manufacturer of the 3G modem.
CMII ID CMII ID of the 3G modem.
Serial Number Serial number of the 3G modem.
Hardware Version Hardware version of the 3G modem.
Firmware Version Firmware version of the 3G modem.
PRL Version Preferred roaming list (PRL) version of the 3G modem.
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
53/870
32
Field Description
UIM Card State
State of the UIM card, which can be:
Absent.
Being initialized.
Fault.
Destructed. Personal identification number (PIN) code protection is disabled.
PIN code protection is enabled. Enter the PIN code for authentication.
PIN code protection is enabled, and the PIN code has passed theauthentication.
The PIN code has been blocked. Enter the PIN unlocking key (PUK) code tounblock it.
IMSI International Mobile Subscriber Identity (IMSI) of the UIM card.
Voltage Power voltage of the UIM card.
Mobile Network 3G network where the UIM card resides.
Network Type
State of the 3G network where the UIM card resides, which can be:
No Service.
CDMA.
HDR.
CDMA/HDR HYBRID.
Unknown.
RSSI Received signal strength indication (RSSI) of the 3G network.
Displaying LAN informationTable 6Field descriptionField Description
Interface Interface name.
Link State Link state of the interface.
Work Mode Rate and duplex mode of the interface.
Displaying WLAN informationTable 7Field descriptionField Description
SSID (WLAN Name) Name of the WLAN service.
Service Status Whether the service is enabled or not.
Number of PCs Connected Number of PCs connected to the WLAN service.
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
54/870
33
Displaying service informationTable 8Field description
Field Description
Service Name of the service.Status Status of the service.
Displaying recent system logsTable 9Field description
Field Description
Time
Time when the system logs are generated.
Level
Level of the system logs.Description
Contents of the system logs.
Managing integrated servicesFor devices with a card installed, if the card provides the Web interface access function, after specifyingthe URL address of the card on the integrated service management page, you can log in from theintegrated service management page to the Web interface of the card to manage the card.
When you are logged in to the Web interface, you are placed on the Device Infopage. Click the
Integrated Service Managementtab to enter the page displaying card information of the device.Figure 16Integrated service management
To change the URL address of the card, click of the target card. Enter the URL address in the field
and click to apply the configuration or click to cancel the modification.
Properly set the URL address of the card, and then connect the card to the LAN to which the
administrator belongs. On the page as shown in Figure 16, click the Managebutton, a page linkedto the specified URL address pops up, and then you can log in to the Web interface of this card tomanage it.
Figure 17Changing card URL address
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
55/870
34
Basic services configuration
This document guides you through quick configuration of basic services of routers, including configuringWAN interface parameters, LAN interface parameters, and WLAN interface parameters.
For information about WAN interfaces, see "Configuring WAN interfaces." For information about LANinterfaces, see "Configuring VLANs." For information about WLAN interfaces, see "Wirelessconfiguration overview."
Configuring basic services
Entering the homepage of basic configuration wizard
SelectWizard> Basic Configuration Wizardfrom the navigation tree.Figure 18Basic configuration wizard
Setting WAN interface parametersOn the basic configuration wizard page, click Next.
The page for configuring WAN interface parameters varies with the interface type. You are allowed toset Ethernet, SA, ADSL/G.SHDSL, CE1/PR1, CT1/PR1, and Cellular interface parameters. To do so, setthe WAN interface parameters as follows.
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
56/870
35
Ethernet interface
Figure 19Setting Ethernet interface parameters
Table 10Configuration items (in auto mode)
Item Description
WAN Interface
Select the Ethernet interface to be configured.
Connect Mode: Auto
Select theAutoconnect mode to automatically obtain an IP address.
MAC Address
Specify the MAC address of the Ethernet interface in either of the two ways: Use the MAC address of the deviceUse the default MAC address of the
Ethernet interface, which is displayed in the brackets.
Use the customized MAC addressAssign a MAC address in the field to theEthernet interface.
Table 11Configuration items (in manual mode)
Item Description
WAN Interface
Select the Ethernet interface to be configured.
Connect Mode: Manual
Select the Manualconnect mode to configure an IP address.
TCP-MSS Set the maximum TCP segment length of an interface.
MTU Set the MTU of an interface.
IP Address
Specify the IP address of the Ethernet interface.
Subnet Mask
Select a subnet mask for the Ethernet interface.
Gateway Address Configure the next hop of a static route.
DNS1Specify a DNS server IP address for the interface. Note that DNS server 1 is usedbefore DNS server 2.
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
57/870
36
Item Description
DNS2
To configure the global DNS server on the page you enter, selectAdvanced> DNSSetup> DNS Configuration. The global DNS server has priority over the DNSservers of the interfaces. The DNS query is sent to the global DNS server first. I f thequery fails, the DNS query is sent to the DNS server of the interface until the querysucceeds.
MAC Address
Specify the MAC address of the Ethernet interface in either of the two ways:
Use the MAC address of the deviceUse the default MAC address of theEthernet interface, which is displayed in the brackets.
Use the customized MAC addressAssign a MAC address in the field to theEthernet interface.
Table 12Configuration items (in PPPoE mode)
Item Description
WAN Interface
Select the Ethernet interface to be configured.
Connect Mode: PPPoE
Select the PPPoEconnect mode.In PPPoE mode, a username and password is provided by the local Internet ServiceProvider (ISP).When the device connects to the ISP server, the ISP server initiatesPPPoE authentication. When the device passes the authentication, the ISP serverwill send the IP address, subnet mask, gateway IP address, and DNS server IPaddress to the device.
User Name
Enter the username for identity authentication.
Password
Display whether a password has been specified for identity authentication.
An empty field indicates that no password is configured.
New Password Specify or modify the password for identity authentication.
TCP-MSS Set the maximum TCP segment length of an interface.
MTU Set the MTU of an interface.
Online for all time
Select an idle timeout interval:
Online for all timeThe device is always online.
Online according to the idle timeout valueThe device disconnects from theserver if no data exchange occurs between it and the server within the specifiedtime. Then, it automatically establishes the connection upon receiving a requestfor accessing the Internet from the LAN.
When Online according to the Idle Timeout valueis enabled, specify an idletimeout value.
Online according to theIdle Timeout value
Idle timeout
MAC Address
Specify the MAC address of the Ethernet interface in either of the two ways:
Use the MAC address of the deviceUse the default MAC address of theEthernet interface, which is displayed in the brackets.
Use the customized MAC addressAssign a MAC address in the field to theEthernet interface.
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
58/870
37
SA interface
Figure 20Setting SA parameters
Table 13Configuration items
Item Description
WAN Interface
Select the SA interface to be configured.
User Name
Specify the user name for identity authentication.
Password
Display whether a password has been specified for identity authentication.
An empty field indicates that no password is configured.
New Password Specify or modify the password for identity authentication.
TCP-MSS Set the maximum TCP segment length of an interface.MTU Set the MTU of an interface.
IP Address
Specify the IP address of the SA interface.
Subnet Mask
Select a subnet mask for the SA interface.
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
59/870
38
ADSL/G.SHDSL interface
Figure 21Setting ADSL/G.SHDSL parameters
Table 14Configuration items (in IPoA mode)
Item Description
WAN Interface
Select the ADSL/G.SHDSL interface to be configured.
Connect Mode: IPoA
Select the IPoA connect mode.
PVC
Specify the VPI/VCI value for PVC.
TCP-MSS Set the maximum TCP segment length of an interface.
MTU Set the MTU of an interface.
IP Address
Specify the IP address of the ADSL/G.SHDSL interface.
Subnet Mask
Select a subnet mask for the ADSL/G.SHDSL interface.
Map IP
Specify the peer destination IP address of the mapped PVC.
Table 15Configuration items (in IPoEoA mode)
Item Description
WAN Interface
Select the ADSL/G.SHDSL interface to be configured.
Connect Mode: IPoEoA
Select the IPoEoA connect mode.
PVC
Specify the VPI/VCI value for PVC.
TCP-MSS Set the maximum TCP segment length of an interface.
MTU Set the MTU of an interface.
IP Address
Specify the IP address of the ADSL/G.SHDSL interface.
Subnet Mask
Select a subnet mask for the ADSL/G.SHDSL interface.
Table 16Configuration items (in PPPoA mode)
Item Description
WAN Interface
Select the ADSL/G.SHDSL interface to be configured.
-
7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf
60/870
39
Item Description
Connect Mode: PPPoA
Select the PPPoA connect mode.
PVC
Specify the VPI/VCI value for PVC.
User Name
Specify the user name for identity authentication.
Password
Displays whether a password has been specified for identity authentication.An empty field indicates that no password is configured.
New Password Specify or modify the password for identity authentication.
TCP-MSS Set the maximum TCP segment length of an interface.
MTU Set the MTU of an interface.
Table 17Configuration items (in PPPoEoA mode)
Item Description
WAN Interface
Select the ADSL/G.SHDSL interface to be configured.
Connect Mode: PPPoEoA
Select the PPPoEoA connect mode.
PVC
Specify the VPI/VCI value for PVC.
User Name
Specify the user name for identity authentication.
Password
Displays whether a password has been specified for identity authentication.
An empty field indicates that no password is configured.
New Password Specify or modify the password for identity authentication.
TCP-MSS Set the maximum TCP segment length of an
top related