h3c_msr_series_routers_web_configuration_guide(v5)-release_2311(v1.06)-book.pdf

7/17/2019 H3C_MSR_Series_Routers_Web_Configuration_Guide(V5)-Release_2311(V1.06)-book.pdf

1/870

H3C MSR Series Routers

Web-Based Configuration Guide(V5)

Hangzhou H3C Technologies Co., Ltd.http://www.h3c.com

Software version: MSR-CMW520-R2311Document version: 20130320-C-1.16


2/870

Copyright 2008-2013, Hangzhou H3C Technologies Co., Ltd. and its licensors

All rights reserved

No part of this manual may be reproduced or transmitted in any form or by any means without prior

written consent of Hangzhou H3C Technologies Co., Ltd.Trademarks

H3C, , H3CS, H3CIE, H3CNE, Aolynk, , H3Care, , IRF, NetPilot, Netflow,SecEngine, SecPath, SecCenter, SecBlade, Comware, ITCMM and HUASAN are trademarks ofHangzhou H3C Technologies Co., Ltd.

All other trademarks that may be mentioned in this manual are the property of their respective owners

Notice

The information in this document is subject to change without notice. Every effort has been made in the

preparation of this document to ensure accuracy of the contents, but all statements, information, andrecommendations in this document do not constitute the warranty of any kind, express or implied.


3/870

Preface

This document is the Web-based configuration guide for the H3C MSR series routers, and describeshow to visually manage and maintain the H3C MSR series routers through a Web-based interface.

This preface includes:

Audience

Conventions

About the H3C MSR documentation set

Obtaining documentation

Technical support

Documentation feedback

These configuration guides apply to the following models of the H3C MSR series routers:Model

MSR 900 MSR 900

MSR 920

MSR 930

MSR 930

MSR 930-GU

MSR 930-GT

MSR 930-DG

MSR 930-SA

MSR 20-1X

MSR 20-10

MSR 20-10E

MSR 20-11

MSR 20-12

MSR 20-15

MSR 20

MSR 20-20

MSR 20-21

MSR 20-40

MSR 30

MSR 30-10

MSR 30-11

MSR 30-11E MSR 30-11F

MSR 30-16

MSR 30-20

MSR 30-40

MSR 30-60

MSR 50 MSR 50-40

MSR 50-60


4/870

AudienceThis documentation is intended for:

Network planners

Field technical support and servicing engineers

Network administrators working with the routers

ConventionsThis section describes the conventions used in this documentation set.

Command conventions

Convention Description

Boldface

Boldtext represents commands and keywords that you enter literally as shown.

Italic Italictext represents arguments that you replace with actual values.

[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.

{ x | y | ... }

Braces enclose a set of required syntax choices separated by vertical bars, from whichyou select one.

[ x | y | ... ]

Square brackets enclose a set of optional syntax choices separated by vertical bars, fromwhich you select one or none.

{ x | y | ... } *

Asterisk marked braces enclose a set of required syntax choices separated by verticalbars, from which you select at least one.

[ x | y | ... ] *

Asterisk marked square brackets enclose optional syntax choices separated by verticalbars, from which you select one choice, multiple choices, or none.

&The argument or keyword and argument combination before the ampersand (&) sign canbe entered 1 to n times.

# A line that starts with a pound (#) sign is comments.

GUI conventions


BoldfaceWindow names, button names, field names, and menu items are in Boldface. Forexample, the New Userwindow appears; click OK.

> Multi-level menus are separated by angle brackets. For example, File> Create> Folder.

Symbols


WARNINGAn alert that calls attention to important information that if not understood or followed canresult in personal injury.

CAUTIONAn alert that calls attention to important information that if not understood or followed canresult in data loss, data corruption, or damage to hardware or software.

IMPORTANT An alert that calls attention to essential information.


5/870


NOTE An alert that contains additional or supplementary information.

TIPAn alert that provides helpful information.

Network topology icons

Represents a generic network device, such as a router, switch, or firewall.

Represents a routing-capable device, such as a router or Layer 3 switch.

Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supportsLayer 2 forwarding and other Layer 2 features.

Port numbering in examples

The port numbers in this document are for illustration only and might be unavailable on your device.

About the H3C MSR documentation setThe H3C MSR documentation set includes:

Category Documents Purposes

Product description andspecifications

Marketing brochures Describe product specifications and benefits.

Technology white papersProvide an in-depth description of software featuresand technologies.

Card datasheets Describe card specifications, features, andstandards.

Hardwarespecifications andinstallation

Compliance and safetymanual

Provides regulatory information and the safetyinstructions that must be followed during installation.

Installation guideProvides a complete guide to hardware installationand hardware specifications.

MSR Series Routers InterfaceModule Manual

Provide the hardware specifications of cards.

Software configuration

MSR Series RoutersConfiguration guides

Describe software features and configurationprocedures.

MSR Series RoutersCommand references

Provide a quick reference to all availablecommands.

MSR Series Routers WebConfiguration guides

Describe Web software features and configurationprocedures.

Operations andmaintenance

H3C MSR Basic RoutersProvide information about the product release,including the version history, hardware and softwarecompatibility matrix, version upgrade information,technical support information, and softwareupgrading.

H3C MSR Standard Routers
http://www.h3c.com/portal/Technical_Support___Documents/Technical_Documents/Routers/H3C_MSR_50_Series_Routers/#Configurationhttp://www.h3c.com/portal/Technical_Support___Documents/Technical_Documents/Routers/H3C_MSR_50_Series_Routers/#Configurationhttp://www.h3c.com/portal/Technical_Support___Documents/Technical_Documents/Routers/H3C_MSR_50_Series_Routers/#Configurationhttp://www.h3c.com/portal/Technical_Support___Documents/Technical_Documents/Routers/H3C_MSR_50_Series_Routers/#Configuration


6/870

Obtaining documentationYou can access the most up-to-date H3C product documentation on the World Wide Webat http://www.h3c.com.

Click the links on the top navigation bar to obtain different categories of product documentation:

[Technical Support & Documents > Technical Documents] Provides hardware installation, softwareupgrading, and software feature configuration and maintenance documentation.

[Products & Solutions]Provides information about products and technologies, as well as solutions.

[Technical Support & Documents > Software Download] Provides the documentation released with thesoftware version.

Technical [email protected]

http://www.h3c.com

Documentation feedbackYou can e-mail your comments about product documentation to [email protected].

We appreciate your comments.
http://www.h3c.com/http://www.h3c.com/portal/Technical_Support___Documents/Technical_Documents/http://www.h3c.com/portal/Products___Solutions/http://www.h3c.com/portal/Technical_Support___Documents/Software_Download/http://www.h3c.com/portal/Technical_Support___Documents/Software_Download/http://www.h3c.com/portal/Products___Solutions/http://www.h3c.com/portal/Technical_Support___Documents/Technical_Documents/http://www.h3c.com/


7/870

i

Contents

Web overview 1

Logging in to the Web interface 1Logging out of the Web interface 2

Introduction to the Web interface 2User level 5

Introduction to the Web-based NM functions 5

Common Web interface elements 19Managing Web-based NM through CLI 23

Enabling/disabling Web-based NM 23

Managing the current Web user 23

Configuration guidelines 23Troubleshooting Web browser 24

Cannot access the device through the Web interface 24

Displaying device information 28Displaying device information 30

Displaying broadband connection information 30Displaying 3G wireless card state 30Displaying LAN information 32

Displaying WLAN information 32Displaying service information 33Displaying recent system logs 33Managing integrated services 33

Basic services configuration 34Configuring basic services 34

Entering the homepage of basic configuration wizard 34

Setting WAN interface parameters 34

Setting LAN interface parameters 43

Setting WLAN interface parameters 44

Validating the basic services configuration 45

Configuring WAN interfaces 47Configuring an Ethernet interface or subinterface 47

Overview 47

Configuring an Ethernet interface 47

Configuring an SA interface 50SA interface overview 50

Configuration procedure 50Configuring an ADSL/G.SHDSL interface 52

ADSL/G.SHDSL interface overview 52

Configuration procedure 52Configuring a CE1/PRI interface 55

CE1/PRI interface overview 55Configuration procedure 56

Configuring a CT1/PRI interface 58

CT1/PRI interface overview 58

Configuration procedure 58Configuring a cellular interface 59

Overview 59


8/870

ii

Configuration procedure 59Viewing the general information and statistics of an interface 61

Configuring VLANs 62Overview 62Configuring a VLAN and its VLAN interface 62

Recommended configuration procedures 62

Creating a VLAN and its VLAN interface 63

Configuring VLAN member ports 64

Configuring parameters for a VLAN interface 64

Configuration guidelines 66

Wireless configuration overview 67Overview 67Configuration task list 67

Configuring wireless services 68Configuring wireless access service 68

Creating a wireless access service 68

Configuring clear type wireless service 69Configuring crypto type wireless service 77

Binding an AP radio to a wireless service 82

Security parameter dependencies 83Displaying wireless access service 84

Displaying wireless service 84Displaying client 86

Displaying RF ping information 90Wireless access service configuration examples 91

Wireless service configuration example 91

Access service-based VLAN configuration example 92

PSK authentication configuration example 94

Local MAC authentication configuration example 96Remote MAC authentication configuration example 98

Remote 802.1X authentication configuration example 104802.11n configuration example 109

Client mode 111Enabling the client mode 111

Connecting the wireless service 112

Displaying statistics 113

Client mode configuration example 114

Configuring radios 116Configuring data transmit rates 120

Configuring 802.11a/802.11b/802.11g rates 120

Configuring 802.11n MCS 121

Displaying radio 122Displaying WLAN services bound to a radio 122Displaying detailed radio information 122

Configuring WLAN security 125Blacklist and white list 125

Configuring the blacklist and white list functions 125

Configuring dynamic blacklist 125Configuring static blacklist 126

Configuring white list 127Configuring user isolation 127


9/870

iii

Configuring WLAN QoS 129Configuring wireless QoS 129

Enabling wireless QoS 129Setting the SVP service 129

Setting CAC admission policy 130Setting radio EDCA parameters for APs 131

Setting EDCA parameters for wireless clients 132

Display radio statistics 133

Displaying client statistics 135Setting rate limiting 137

Wireless QoS configuration example 138

CAC service configuration example 138Static rate limiting configuration example 139

Dynamic rate limiting configuration example 140

Configuring advanced settings 142Setting a district code 142

Channel busy test 142

Managing 3G 144Managing the 3G modem 144

Displaying 3G information 144

Managing the pin code 145

Configuring NAT 148Overview 148

Recommended configuration procedure 148Configuring dynamic NAT 148Configuring a DMZ host 150

Creating a DMZ host 150

Enabling DMZ host on an interface 150Configuring an internal server 151Enabling application layer protocol check 153

Configuring connection limit 153NAT configuration examples 154

Internal hosts accessing public network configuration example 154Internal server configuration example 156

Configuring access control 160Configuration procedure 160

Access control configuration example 161

Configuring URL filtering 163Configuration procedure 163

URL filtering configuration example 164

Configuring MAC address filtering 166Configuring the MAC address filtering type 166

Configuring the MAC addresses to be filtered 166

MAC address filtering configuration example 168

Configuring attack protection 170Overview 170

Blacklist function 170Intrusion detection function 170

Configuring the blacklist function 172Recommended configuration procedure 172


10/870

iv

Enabling the blacklist function 173Adding a blacklist entry manually 173

Viewing blacklist entries 174Configuring intrusion detection 174

Attack protection configuration examples 176Attack protection configuration example for MSR 900/20-1X 176

For MSR 20/30/50/930 routers 179

Configuring application control 183Recommended configuration procedure 183

Loading applications 183

Configuring a custom application 184Enabling application control 185

Application control configuration example 186

Web page redirection configuration 188Overview 188

Configuring web page redirection 188

Configuring routes 190Overview 190

Configuring routes 190

Creating an IPv4 static route 190Displaying the active route table 192

Static route configuration example 192IPv4 static route configuration example 192


Configuring user-based load sharing 196Overview 196Configuring user-based load sharing 196

Configuring traffic ordering 198Overview 198

Recommended configuration procedure 198

Setting the traffic ordering interval 199Specifying the traffic ordering mode 199Displaying internal interface traffic ordering statistics 199

Displaying external interface traffic ordering statistics 200

Configuring DNS 201Overview 201

Recommended configuration procedure 201Configuring dynamic domain name resolution 201

Configuring DNS proxy 202

Enabling dynamic domain name resolution 202

Enabling DNS proxy 202Clearing the dynamic domain name cache 203

Specifying a DNS server 203

Configuring a domain name suffix 203Domain name resolution configuration example 204

Configuring DDNS 209Overview 209Configuration prerequisites 210

Configuration procedure 210DDNS configuration example 211


11/870

v

Configuring DHCP 214Introduction to DHCP 214

Recommended configuration procedure 215Configuring the DHCP server 215

Configuring the DHCP relay agent 215Configuring the DHCP client 216

Enabling DHCP 216

Configuring DHCP interface setup 217

Configuring a static address pool for the DHCP server 218Configuring a dynamic address pool for the DHCP server 220Configuring IP addresses excluded from dynamic allocation 222

Configuring a DHCP server group 223DHCP configuration examples 224

DHCP configuration example without DHCP relay agent 225

DHCP relay agent configuration example 232


Configuring ACLs 239Overview 239Recommended IPv4 ACL configuration procedure 239

Adding an IPv4 ACL 240

Configuring a rule for a basic IPv4 ACL 240

Configuring a rule for an advanced IPv4 ACL 242Configuring a rule for an Ethernet frame header ACL 245


Configuring QoS 248Overview 248

Subnet limit 248Advanced limit 248Advanced queue 248

Configuring subnet limit 249Configuring advanced limit 250

Configuring advanced queue 253

Configuring interface bandwidth 253

Configure bandwidth guarantee 254QoS configuration examples 257

Subnet limit configuration example 257

Advanced queue configuration example 258Appendix Packet priorities 261

Configuring SNMP 264Overview 264

SNMP agent configuration task list 264

Enabling the SNMP agent function 266Configuring an SNMP view 267Configuring an SNMP community 269

Configuring an SNMP group 270

Configuring an SNMP user 271Configuring SNMP trap function 273Displaying SNMP packet statistics 275

SNMPv1/v2c configuration example 276SNMPv3 configuration example 279

Configuring bridging 285Overview 285


12/870

vi

Bridging overview 285Major functionalities of bridges 285

VLAN transparency 289Configuring bridging 289

Recommended basic bridging configuration procedure 289Enabling a bridge set 289

Adding an interface to a bridge set 290

Bridging configuration example 291

Configuring user groups 295User group configuration task list 295

Configuring a user group 296Configuring a user 296

Configuring access control 297Configuring application control 298Configuring bandwidth control 299Configuring packet filtering 300

Synchronizing user group configuration for wan interfaces 302

User group configuration example 302

Configuring MSTP 310Introduction to STP 310

Protocol packets of STP 310Basic concepts in STP 310

How STP works 311Introduction to RSTP 317

Introduction to MSTP 317

Why MSTP 317Basic concepts in MSTP 318How MSTP works 322Implementation of MSTP on devices 322

Protocols and standards 322Recommended MSTP configuration procedure 322

Configuring an MST region 323

Configuring MSTP globally 324

Configuring MSTP on a port 328MSTP configuration example 330


Configuring RADIUS 336Overview 336Configuring a RADIUS scheme 336

Configuring common parameters 337

Adding RADIUS servers 340

RADIUS configuration example 341


Configuring login control 350Configuration procedure 350Login control configuration example 351

Network requirements 351

Configuring a login control rule so Host A cannot Telnet to Router 351Configuring a login control rule so Host B cannot access Router through the Web 352

Configuring ARP 354Overview 354

Gratuitous ARP 354


13/870

vii

Displaying ARP entries 354Creating a static ARP entry 355

Removing ARP entries 355Enabling learning of dynamic ARP entries 356

Configuring gratuitous ARP 357Static ARP configuration example 357

Configuring ARP attack defense 362

Overview 362

Configuring periodic sending of gratuitous ARP packets 362

Configuring ARP automatic scanning 363

Configuring fixed ARP 364

Configuring IPsec VPN 366Overview 366

Recommended configuration procedure 366

Configuring an IPsec connection 367

Displaying IPsec VPN monitoring information 373IPsec VPN configuration example 374


Configuring L2TP 377Enabling L2TP 378Adding an L2TP group 378

Displaying L2TP tunnel information 385Client-initiated VPN configuration example 385

Configuring GRE 390Overview 390

Configuring a GRE over IPv4 tunnel 390Recommended configuration procedure 390

Creating a GRE tunnel 390

GRE over IPv4 tunnel configuration example 392

SSL VPN overview 400How SSL VPN works 400Advantages of SSL VPN 401

Configuring SSL VPN gateway 402Recommended configuration procedure 402Configuring the SSL VPN service 403

Configuring Web proxy server resources 404

Configuring TCP application resources 406Configuring a remote access service resource 407

Configuring a desktop sharing service resource 408

Configuring an email service resource 409

Configuring a Notes service resource 410Configuring a common TCP service resource 412

Configuring IP network resources 413

Recommended configuration procedure 413Configuring global parameters 413

Configuring host resources 414

Configuring a user-IP binding 416

Configuring a predefined domain name 417Configuring a resource group 418

Configuring local users 420Adding a local user manually 420


14/870

viii

Importing local users in bulk 422Configuring a user group 423

Viewing user information 425Viewing online user information 425

Logging out an online user 425Viewing history user information 425

Performing basic configurations for the SSL VPN domain 426

Configuring the domain policy 426

Configuring the caching policy 428Configuring a bulletin 428

Configuring authentication policies 429

Configuring local authentication 430Configuring RADIUS authentication 430

Configuring LDAP authentication 431

Configuring AD authentication 433

Configuring combined authentication 434Configuring a security policy 435Customizing the SSL VPN user interface 439

Customizing the SSL VPN interface partially 440Customizing the SSL VPN interface fully 442

User access to SSL VPN 443Logging in to the SSL VPN service interface 443Accessing SSL VPN resources 444

Getting help information 445Changing the login password 446

SSL VPN configuration example 447Network requirements 447Configuration prerequisites 447Configuration procedure 448

Configuring the SSL VPN service 448Configuring SSL VPN resources 451

Configuring SSL VPN users 456

Configuring an SSL VPN domain 459

Verifying the configuration 461

Managing certificates 465Overview 465Recommended configuration procedure 465

Recommended configuration procedure for manual request 465Recommended configuration procedure for automatic request 467

Creating a PKI entity 468

Creating a PKI domain 469

Generating an RSA key pair 472

Destroying the RSA key pair 473Retrieving and displaying a certificate 473

Requesting a local certificate 475

Retrieving and displaying a CRL 476PKI configuration examples 476

Certificate request from a Windows 2003 CA server 476

Certificate request from an RSA Keon CA server 480IKE negotiation with RSA digital signature 484



15/870

ix

Managing the system 491Managing the configuration 491

Saving the configuration 491Restoring factory defaults 492

Backing up configuration 492Restoring configuration 493

Backing up and restoring device files through the USB port 493

Rebooting the device 495

Managing services 495Managing users 497

Creating a user 498

Setting the super password 499Switching to the management level 499

Configuring system time 500

Setting the system time 500

Setting the time zone and daylight saving time 502Configuring TR-069 503

TR-069 network framework 504

Basic functions of TR-069 504Configuration procedure 506

Configuration guidelines 507Upgrading software 507

Upgrading software (for the MSR 900/MSR 20-1X) 507Upgrading software (for the MSR 20/30/50/930) 508

Configuring SNMP (lite version) 510Overview 510

Enabling the SNMP agent function 510

SNMP configuration examples 512

SNMPv1/v2c configuration example 512SNMPv3 configuration example 514

Configuring syslogs 516Displaying syslogs 516

Setting the log host 518

Setting buffer capacity and refresh interval 519

Using diagnostic tools 520Traceroute 520Ping 520

Traceroute operation 520Ping operation 521

Configuring WiNet 523

Configuring WiNet 523

Enabling WiNet 523

Setting the background image for the WiNet topology diagram 524

Managing WiNet 525Configuring a RADIUS user 527How the guest administrator obtains the guest password 529

WiNet configuration example 530

WiNet establishment configuration example 530WiNet-based RADIUS authentication configuration example 535

Configuration wizard 539Overview 539


16/870

x

Basic service setup 539Entering the configuration wizard homepage 539

Selecting a country 539Configuring local numbers 540

Configuring connection properties 541Finishing configuration wizard 541

Local number and call route 542

Basic settings 542

Fax and modem 542

Call services 542

Advanced settings 542

Basic settings 543Introduction to basic settings 543

Local number 543

Call route 543

Basic settings 544Configuring a local number 544

Configuring a call route 545Configuration examples of local number and call route 547

Configuring direct calling for SIP UAs through the SIP protocol (configuring static IP address) 547

Configuring direct calling for SIP UAs through the SIP protocol (configuring domain name) 551Configuring proxy server involved calling for SIP UAs 555

Configuring trunking mode calling 562

Fax and modem 566Protocols and standards for FoIP 566Fax flow 566

Introduction to fax methods 567

SIP modem pass-through function 567

Configuring fax and modem 568Configuring fax and modem parameters of a local number 568

Configuring fax and modem parameters of a call route 571

Call services 573Call waiting 573

Call hold 573Call forwarding 573

Call transfer 574

Call backup 574Hunt group 574

Call barring 574

Message waiting indication 574

Three-party conference 574

Silent monitor and barge in services 575

Calling party control 575

Door opening control 575CID on the FXS voice subscriber line 575CID on the FXO voice subscriber line 576

Support for SIP voice service of the VCX 576

Configuring call services of a local number 576Configuring call forwarding, call waiting, call hold, call transfer, and three-party conference 576

Configuring other voice functions 578

Configuring call services of a call route 580

Call services configuration examples 581


17/870

xi

Configuring call waiting 581Configuring call forwarding 582

Configuring call transfer 584Configuring hunt group 585

Configuring three-party conference 588Configuring silent monitor and barge in 590

Advanced settings 596

Introduction to advanced settings 596

Coding parameters 596

Other parameters 600

Configuring advanced settings of a local number 600Configuring coding parameters of a local number 600

Configuring other parameters of a local number 602Configuring advanced settings of a call route 603

Configuring coding parameters of a call route 603Configuring other parameters for a call route 604

Advanced settings configuration example 605

Configuring out-of-band DTMF transmission mode for SIP 605

SIP-to-SIP connections 607Configuring media parameters for SIP-to-SIP connections 607

Configuring signaling parameters for SIP-to-SIP connections 608

Configuring dial plans 610Dial plan process 610

Regular expression 611Dial plan functions 613

Number match 613

Call control 614

Number substitution 614

Configuring dial plan 615Configuring number match 615

Configuring call control 616Configuring number substitution 620

Dial plan configuration examples 622Configuring number match mode 622

Configuring the match order of number selection rules 624Configuring entity type selection priority rules 628Configuring call authority control 632

Configuring number substitution 635

Call connection 643Introduction to SIP 643

Terminology 643

Functions and features of SIP 644

SIP messages 645

SIP fundamentals 645Support for transport layer protocols 648SIP security 648

Signaling encryption 649

Media flow encryption 649TLS-SRTP combinations 650

Support for SIP extensions 650

Configuring SIP connections 651

Configuring connection properties 651


18/870

xii

Configuring registrar 651Configuring proxy server 653

Configuring session properties 653Configuring source address binding 653

Configuring SIP listening 655Configuring media security 656

Configuring caller identity and privacy 657

Configuring SIP session refresh 658

Configuring compatibility 658Configuring advanced settings 660

Configuring the address hiding mode 660

Specifying the outbound proxy 660Configuring registration parameters 661

Configuring voice mailbox server 663

Configuring signaling security 664

Configuring call release cause code mapping 665Configuring PSTN call release cause code mappings 665Configuring SIP status code mappings 666

SIP connection configuration examples 666Configuring basic SIP calling features 666

Configuring caller ID blocking 666Configuring SRTP for SIP calls 668

Configuring TCP to carry outgoing SIP calls 669Configuring TLS to carry outgoing SIP calls 670

Managing SIP server groups 672Creating a SIP server group 672

Configuring the real-time switching function 672

Configuring the keep-alive mode 673

Configuring the source address binding mode 674Configuring server information management 675

Configuring SIP trunk 677Features 678

Typical applications 678

Protocols and standards 679Configuring SIP trunk 679

Configuration task list 679

Enabling the SIP trunk function 680Configuring a SIP server group 680

Configuring a SIP trunk account 681Configuring a call route for outbound calls 682

Configuring a call route for a SIP trunk account 682

Configuring fax and modem parameters of the call route of a SIP trunk account 684

Configuring advanced settings of the call route of a SIP trunk account 684

Configuring media parameters for SIP-to-SIP connections 686Configuring signaling parameters for SIP-to-SIP connections 687

Configuring a call route for inbound calls 688SIP trunk configuration examples 689

Configuring a SIP server group with only one member server 689Configuring a SIP server group with multiple member servers 695

Configuring call match rules 698

Managing data links 701Overview 701

Introduction to E1 and T1 701


19/870

xiii

E1 and T1 voice functions 701E1 and T1 interfaces 702

Features of E1 and T1 703Introduction to BSV interface 703

Configuring digital link management 704Configuring VE1 line 704

Configuring VT1 line 709

Configuring BSV line 711

Displaying ISDN link state 716E1 voice DSS1 signaling configuration example 716

Managing lines 719FXS voice subscriber line 719

FXO voice subscriber line 719E&M subscriber line 719

E&M introduction 719E&M start mode 719

One-to-one binding between FXS and FXO voice subscriber lines 721

Echo adjustment function 721

Adjusting echo duration 721

Adjusting echo cancellation parameters 721

Enabling the nonlinear function of echo cancellation 722

Line management configuration 722Configuring an FXS voice subscriber line 722

Configuring an FXO voice subscriber line 725Configuring an E&M subscriber line 728Configuring an ISDN line 731

Configuring a paging line 733

Configuring an MoH line 734

Line management configuration examples 735Configuring an FXO voice subscriber line 735

Configuring one-to-one binding between FXS and FXO 736

Configuring SIP local survival 744Configuring SIP local survival 745

Service configuration 745User management 746

Trusted nodes 747

Call-out route 747Area prefix 748

Call authority control 749SIP local survival configuration examples 750

Configuring local SIP server to operate in alone mode 750

Configuring local SIP server to operate in alive mode 753

Configuring call authority control 755

Configuring an area prefix 760Configuring a call-out route 763

Configuring IVR 766Overview 766Advantages 766

Customizable voice prompts 766Various codecs 766Flexible node configuration 766Customizable process 766

Successive jumping 767


20/870

xiv

Error processing methods 767Timeout processing methods 767

Various types of secondary calls 767Configuring IVR 767

Uploading media resource files 767Importing a media resource through an MoH audio input port 768

Configuring the global key policy 769

Configuring IVR nodes 770

Configuring a call node 770Configure a jump node 773Configure a service node 775

Configuring access number management 776Configuring an access number 776

Configuring advanced settings for the access number 777

IVR configuration examples 778

Configure a secondary call on a call node (match the terminator of numbers) 778Configure a secondary call on a call node (match the number length) 782Configure a secondary call on a call node (match a number) 785

Configure an extension secondary call on a call node 787Configure a jump node 789

Configure an immediate secondary call on a service node 791Configure a secondary call on a service node 793

Configure a call node, jump node, and service node 795Customizing IVR services 801

Create a menu 802

Bind an access number 808

Customize IVR services 808Custom IVR service configuration example 809

Advanced configuration 820Global configuration 820

Batch configuration 821

Local number 821Call route 828Line management 831

SIP local survival services 835

States and statistics 837Line states 837

Displaying detailed information about analog voice subscriber lines 838

Displaying detailed information about digital voice subscriber lines 838Call statistics 839

Displaying active call summary 840

Displaying history call summary 840

SIP UA states 841

Displaying TCP connection information 841Displaying TLS connection information 841

Connection status 842Displaying number register status 842

Displaying number subscription status 843Local survival service states 843

SIP trunk account states 844

Displaying SIP trunk account states 844

Displaying dynamic contact states 845Server group information 845


21/870

xv

IVR information 846Displaying IVR call states 846

Displaying IVR play states 847

Index 848


22/870

1

Web overview

The device provides Web-based configuration interfaces for visual device management andmaintenance.

Figure 1Web-based network management operating environment

Logging in to the Web interfaceFollow these guidelines when you log in to the Web interface:

The PC in Figure 1is the one where you configure the device, but not necessarily the Web-basednetwork management terminal. The Web-based network management terminal is a PC (or anotherterminal) used to log in to the Web interface and is required to be reachable to the device.

If you click the verification code displayed on the Web login page, you can get a new verificationcode.

Up to 24 users can concurrently log in to the device through the Web interface.

You can also log in to the Web interface through HTTPS, but you must enable HTTPS on the device,and the address you input in the address bar must start with https://. For more information, see"Configuring service management."

If you have configured the auto authentication mode for an HTTPS login user by using thewebhttps-authorization modecommand, the user is automatically authenticated by the PKI certificate,without inputting any username and password. For more information, see FundamentalsConfiguration Guide.

You can use the following default settings to log in to the Web interface through HTTP:

Usernameadmin

Passwordadmin

IP address of the device192.168.1.1.

To log in to the Web interface of the device from a PC:

1. Connect the Ethernet interface Ethernet 0/0 of the device to the PC using a crossover Ethernetcable.

2. Configure an IP address for the PC and make sure the PC and device can reach each other.

For example, assign the PC an IP address (for example, 192.168.1.2) within the network segment192.168.1.0/24 (except for 192.168.1.1).

3. Open the browser, and input the login information.

a. Type the IP address http://192.168.1.1 in the address bar and press Enter.

The login page of the Web interface (see Figure 2) appears.

b. Enter the username and password admin, and the verification code, select the language

(English and Chinese are supported at present), and click Login.


23/870

2

Figure 2Login page of the Web interface

Logging out of the Web interfaceCAUTION:

A logged-in user cannot automatically log out by directly closing the browser.

Click Logoutin the upper-right corner of the Web interface to quit Web-based network management.

The system will not save the current configuration before you log out of the Web interface. Save thecurrent configuration before logout.

Introduction to the Web interfaceThe Web-based interface is composed of three parts: navigation area, title area, and body area.


24/870

3

Figure 3Initial page of the Web interface


25/870


26/870

5

Navigation area Title area Body area

Navigation areaOrganizes the Web function menus in the form of a navigation tree, where youcan select function menus as needed. The result is displayed in the body area.

Title areaOn the left, displays the path of the current configuration interface in the navigationarea; on the right, provides the Savebutton to quickly save the current configuration, the Helpbuttonto display the Web related help information, and the Logoutbutton to log out of the Web interface.

Body areaThe area where you can configure and display a function.

User levelWeb user levels, ranging from low to high, are visitor, monitor, configure, and management. Ahigher-level user has all rights of a lower-level user.

VisitorUsers of this level can perform the ping and traceroute operations, but can neither accessthe device data nor configure the device.

MonitorUsers of this level can only access the device data but cannot configure the device.ConfigureUsers of this level can access data from the device and configure the device, but theycannot upgrade the host software, add/delete/modify users, or backup/restore the applicationfile.

ManagementUsers of this level can perform any operations for the device.

Introduction to the Web-based NM functionsUser level in Table 1 indicates that users of this level or users of a higher level can perform thecorresponding operations.

Table 1Web-based NM function description

Function menu Description User level

Device Information

Device Information

Displays and allows you torefresh device information,broadband connectioninformation, 3G wirelesscard state, LAN information,WLAN information, servicesinformation, and recentsystem logs.

Monitor

Integrated Service Management

Displays the URL address ona card. Monitor

Allows you to change theURL address of a card, andlog in to the Web interfaceof the card.

Configure

Wizard Basic Configuration WizardGuides you through thebasic service configurationof routers.

Configure


27/870

6


InterfaceSetup

WANInterface

Setup

WAN Interface Setup

Displays the configurationinformation of a WANinterface, and allows you toview interface statistics.

Monitor

Allows you to modify WANinterface configuration, andclear the statistics of a WANinterface.

Configure

LAN InterfaceSetup

VLAN Setup

Displays the configurationinformation of a VLAN.

Monitor

Allows you to configure aVLAN.

Configure

VLAN Interface Setup

Displays the configurationinformation of a VLANinterface.

Monitor

Allows you to configure aVLAN interface.

Configure

WirelessConfiguration

Summary

Displays wireless service,radio and client information.

Monitor

Allows you to view wirelessservice, radio and clientinformation; clear radiostatistics; clear clientstatistics, disconnect aconnection, and add a clientto a blacklist.

Configure

Access Service

Displays configurationinformation about an accessservice.

Monitor

Allows you to create andconfigure an access service.

Configure

Radio

Displays radio parametersand radio rate settings.

Monitor

Allows you to set radioparameters, 802.11a/b/grates, and 803.11n MCS.

Configure

Security

Displays configurationinformation of blacklist,whitelist, and user isolation.

Monitor

Allows you to configureblacklist, whitelist, and userisolation.

Configure

Wireless QoS

Displays wireless QoS andrate limiting settings, anddisplays radio and clientinformation.

Monitor


28/870

7


Allows you to configurewireless QoS and ratelimiting, and clear radio andclient information.

Configure

Country Code

Displays configurationinformation of the countrycode.

Monitor

Allows you to set the countrycode.

Configure

3G

3G Information

Displays 3G modeminformation, UIM cardinformation, and 3Gnetwork information.

Monitor

PIN Code Management

Displays UIM card status. Monitor

Allows you to manage PINcodes. Configure

NATConfiguration

NATConfiguration

Dynamic NAT

Displays information aboutthe NAT configurations.

Monitor

Allows you to configureNAT.

Configure

DMZ Host

Allows you to create a DMZhost.

Monitor

Allows you to enable DMZhost on an interface.

Configure

NAT Server Setup

Displays configurations ofthe internal server. Monitor

Allows you to configure theinternal server.

Configure

ALG

Displays configurations ofthe application layerprotocol check function.

Monitor

Allows you to configure theapplication layer protocolcheck function.

Configure

Nat Outbound Setup

Displays configuration

information about thenumber of connectionsdisplayed.

Monitor

Allows you to configureconnection limit.

Configure

SecuritySetup

Access

Displays the access controlconfiguration information.

Monitor

Allows you to configureaccess control.

Configure


29/870

8


URL Filter

Displays the informationabout URL filteringconditions.

Monitor

Allows you to add or delete

URL filtering conditions.

Configure

MAC Address Filtering

Displays the informationabout MAC address filteringconditions.

Monitor

Allows you to set MACaddress filtering types, addor delete MAC addresses tobe filtered.

Configure

Attack Defend

Blacklist

Displays and allows you torefresh the blacklistinformation and whether the

blacklist filtering is enabledor not.

Monitor

Allows you to add, modify,delete and clear blacklistentries, and set whether toenable or disable blacklistfiltering.

Configure

Intrusion Detection

Displays intrusion detectionconfiguration information.

Monitor

Allows you to configure theintrusion detection function.

Configure

ApplicationControl

Application Control

Displays application controlconfiguration information.

Monitor

Allows you to configureapplication control.

Configure

Load ApplicationAllows you to load anapplication and view theloaded application.

Configure

Custom Application

Displays custom applicationinformation.

Monitor

Allows you to add, modify

and delete a customapplication.

Configure

....Advance

Redirection

Displays the configurationinformation of redirection.

Monitor

Allows you to add, modify orremove the redirectionconfiguration on aninterface.

Configure

Route Setup SummaryDisplays IPv4 route summaryinformation.

Monitor


30/870

9


CreateAllows you to create IPv4static routes.

Configure

RemoveAllows you to delete IPv4static routes.

Configure

User-based-sharing

Displays the IP address,mask and load sharinginformation of an interface.

Monitor

Allows you to modify theload sharing status andshared bandwidth of aninterface.

Configure

TrafficOrdering

Config

Displays IP addresses, trafficordering mode and trafficordering interval forinterfaces.

Monitor

Allows you to configure thetraffic ordering mode andinterval.

Configure

Statistics of Inbound InterfacesDisplays inbound interfacetraffic ordering statistics.

Monitor

Statistics of Outbound InterfacesDisplays outbound interfacetraffic ordering statistics.

Monitor

DNS Setup

DNS Configuration

Displays DNS

configurations.

Monitor

Allows you to configureDNS.

Configure

DDNS Configuration

Displays DDNSconfigurations.

Monitor

Allows you to add, modify,and delete a DDNS entry.

Configure

DHCP Setup

DHCP Enable

Displays whether DHCP isglobally enabled ordisabled.

Monitor

Allows you to enable ordisable DHCP.

Configure

DHCP Interface Setup

Displays DHCP server, relay,or client configurations onan interface.

Monitor

Allows you to enable theDHCP server, relay, or clienton an interface.

Configure

QoS

ACLIPv4

SummaryDisplays summary IPv4 ACLinformation.

Monitor


31/870

10

Function menu Description User levelSetup Add

Allows you to add an IPv4ACL.

Configure

Basic ConfigAllows you to configure abasic rule for an IPv4 ACL.

Configure

Advanced ConfigAllows you to configure anadvanced rule for an IPv4ACL.

Configure

Link ConfigAllows you to configure alink layer rule for an IPv4ACL.

Configure

RemoveAllows you to remove anIPv4 ACL.

Configure

Subnet Limit

Displays the subnet limitconfiguration information.

Monitor

Allows you to add, modify ordelete subnet limit rules.

Configure

Advanced Limit

Displays the advanced limitconfiguration information.

Monitor

Allows you to add, modify ordelete advanced limit rules.

Configure

Advanced Queue

Displays advanced queueconfiguration information.

Monitor

Allows you to configureinterface bandwidth, add,

modify, or delete bandwidthguarantee policies.

Configure

Classifier

SummaryDisplays classifierinformation.

Monitor

CreateAllows you to create aclassifier.

Configure

SetupAllows you to configureclassification rules for aclassifier.

Configure

RemoveAllows you to remove aclassifier.

Configure

Behavior

SummaryDisplays behaviorinformation.

Monitor

CreateAllows you to create abehavior.

Configure

SetupAllows you to configureactions for a behavior.

Configure

RemoveAllows you to remove abehavior.

Configure


32/870

11


Policy

SummaryDisplays QoS policyinformation.

Monitor

CreateAllows you to create a QoSpolicy.

Configure

SetupAllows you to configureclassifier-behaviorassociations.

Configure

RemoveAllows you to remove a QoSpolicy.

Configure

PortPolicy

SummaryDisplays QoS policyapplication information of aport.

Monitor

SetupAllows you to apply a QoSpolicy to a port.

Configure

Remove Allows you to remove a QoSpolicy from a port.

Configure

SNMP(supported onthe MSR-20,MSR-30, andMSR-50)

Setup

Displays and allows you torefresh SNMP configurationinformation and statistics.

Monitor

Allows you to configureSNMP.

Configure

Community

Displays the briefinformation of SNMPcommunities.

Monitor

Allows you to create, modifyand remove an SNMPcommunity.

Configure

Group

Displays the briefinformation of SNMPgroups.

Monitor

Allows you to create, modifyand remove an SNMPgroup.

Configure

User

Displays the briefinformation of SNMP users.

Monitor

Allows you to create,modify, and remove anSNMP user.

Configure

Trap

Displays the status (enabledor disabled) of the SNMPtrap function and target hostinformation.

Monitor

Allows you to enable ordisable the SNMP trapfunction; create, modify,and remove a target host.

Configure


33/870

12


View

Displays the briefinformation of SNMP views.

Monitor

Allows you to create,modify, and remove an

SNMP view.

Configure

Bridge

Global ConfigDisplays and allows you toset global bridginginformation.

Configure

Config InterfaceDisplays and allows you toset interface bridginginformation.

Configure

Security

UserGroup

Group

Displays user groupconfiguration.

Monitor

Allows you to configure usergroups.

Configure

UserDisplays user configuration. Monitor

Displays users. Configure

WANSynchronization

Allows you to synchronizethe user group configurationto a WAN interface.

Configure

Connection Control

Displays configuration ofaccess control.

Monitor

Allows you to configure timerange-based access control.

Configure

Application Control

Displays custom applicationconfiguration.

Monitor

Allows you to customizeapplications.

Configure

Bandwidth

Displays bandwidthmanagement configuration.

Monitor

Allows you to configurebandwidth control.

Configure

Packet Filter

Displays packet filteringrules. Monitor

Allows you to configurepacket filtering rules.

Configure

MSTP Region

Allows you to configure theMST region-relatedparameters andVLAN-to-MSTI mappings.

Monitor


34/870

13


Allows you to modify theMST region-relatedparameters andVLAN-to-MSTI mappings.

Configure

Port

Displays MSTP portparameters.

Monitor

Allows you to modify MSTPport parameters.

Configure

GlobalDisplays MSTP parametersglobally.

Configure

RADIUSDisplays and allows you toadd, modify, and delete aRADIUS scheme.

Management

Access

Displays information aboutlogin control rules.

Monitor

Allows you to add anddelete a login control rule.

Configure

ARPManagement

ARP Table

Displays information of anARP table.

Monitor

Allows you to add, modifyand delete ARP entries.

Configure

Gratuitous ARP

Displays gratuitous ARP

configuration information.

Monitor

Allows you to configuregratuitous ARP.

Configure

Dynamic Entry

Displays the number ofdynamic ARP entries that aninterface can learn.

Monitor

Allows you to enable ordisable an interface to orfrom learning dynamic ARPentries, and change thenumber of dynamic ARP

entries that an interface canlearn.

Configure

ARPAnti-Attack

Scan

Allows you to specify theinterface performing ARPautomatic scanning.

Monitor

Allows you to start or stopARP scanning.

Configure

FixDisplays all static anddynamic ARP entries.

Monitor


35/870

14


Allows you to convert alldynamic ARP entries to staticones or delete all static ARPentries.

Configure

VPN

IPsec VPN

IPsec Connection

Displays IPsec connectionconfiguration.

Monitor

Allows you to add, modify,delete, enable, or disable anIPsec connection.

Configure

Monitoring Information

Displays configuration andstatus information of IPsecconnections, and tunnelinformation of IPsecconnections.

Monitor

Allows you to delete tunnels

that are set up withconfiguration of an IPsecconnection, and delete allISAKMP SAs of an IPsecconnection.

Configure

L2TP

L2TP Configuration

Displays the L2TP status andL2TP group configurationinformation.

Monitor

Allows you to configure theL2TP status, add, modify ordelete an L2TP group.

Configure

Tunnel Info Displays L2TP tunnelinformation.

Monitor

GRE

Displays GRE tunnelinformation.

Monitor

Allows you to add, modify ordelete a GRE tunnel.

Configure

CertificateManagement

Entity

Displays PKI entityinformation.

Monitor

Allows you to add, change,and delete PKI entities.

Configure

Domain

Displays PKI domaininformation.

Monitor

Allows you to add, change,and delete PKI domains.

Configure

Certificate

Displays PKI certificates anddetails of the certificate.

Monitor

Supports the operation suchas creating keys, retrievingcertificates, applying forcertificates, and deletingcertificates.

Configure


36/870

15


CRLDisplays CRLs. Monitor

Allows you to retrieve CRLs. Configure

SystemManageme

nt

Configuration

Save

Allows you to save thecurrent configuration to theconfiguration file to be usedat the next startup.

Configure

Allows you to save thecurrent configuration as thefactory defaultconfiguration.

Management

Initialize

Allows you to restore allconfigurations on the deviceto the factory defaultconfiguration.

Configure

Backup Configuration

Allows you to upload thecurrent startup configurationfile of the device to the TFTPserver for backup.

Management

Restore Configuration

Allows you to download theconfiguration file saved onthe TFTP server to the currentconfiguration file of thedevice.

Management

Backup and Restore

Displays device files. Monitor

Allows you to back up files

on the device to thedestination device through auniversal serial bus (USB)port; transfer files from thedevice where the files arebacked up to the localdevice through a USB port.

Configure

RebootAllows you to reboot thedevice.

Configure

Service Management

Displays relatedconfiguration of systemservices.

Configure

Allows you to set whether toenable different services andset related parameters.

Management

Users

User SummaryDisplays the briefinformation of users.

Monitor

Super PasswordAllows you to set the supperpassword for switching tothe management level.

Management

Create User Allows you to create a user.Management


37/870

16


Modify UserAllows you to modify useraccount.

Management

Remove User Allows you to remove a user.Management

Switch To ManagementAllows you to switch the useraccess level to themanagement level.

Visitor

SNMP (supported on the MSR 900 and MSR20-1X series)

Displays SNMPconfiguration information.

Monitor

Allows you to configureSNMP.

Configure

System Time

System Time

Displays the current systemtime and its configurations.

Monitor

Allows you to set the system

time.Configure

Time Zone

Displays the time zoneconfiguration of the system.

Monitor

Allows you to set the timezone of the system.

Configure

TR-069

Displays TR-069configurations.

Monitor

Allows you to set TR-069. Configure

Software UpgradeAllows you to upgradesoftware of the device.

Configure

Other

Syslog

Loglist

Displays detailedinformation of system logs.

Monitor

Allows you to clear the logbuffer.

Configure

Loghost

Displays configurations ofthe specified loghost.

Monitor

Allows you to set the IPaddress of the loghost.

Configure

Logset

Displays the number of logsthat can be stored in the logbuffer; allows you to set therefresh period on the loginformation displayed on theWeb interface.

Monitor

Allows you to set the numberof logs that can be stored inthe log buffer.

Configure

DiagnosticTools

PingAllows you to execute thepingcommand and view theresult.

Visitor


38/870

17


Trace RouteAllows you to execute thetrace routecommand andview the result.

Visitor

WiNet

WiNet Management

Displays and refreshes the

WiNet topology diagramand allows you to view thedetailed device information.

Monitor

Allows you to manuallytrigger the collection oftopology information, savethe current WiNet topologyas the baseline topology,restore the configuration tofactory defaults and restartthe member.

Configure

SetupAllows you to build or closeWiNet. Configure

User Management

Displays information aboutusers managed by theRADIUS server.

Monitor

Allows you to add, modify,delete, import, and exportusers managed by theRADIUS server.

Configure

VoiceManagement

Configuration Wizard

Displays configurationinformation about theconfiguration wizard.

Monitor

Allows you to configurevoice basic parametersthrough the configurationwizard.

Configure

Local Number

Displays local numberconfiguration information.

Monitor

Allows you to create,modify, and delete a localnumber.

Configure

Call Route

Displays call route

configuration information. Monitor

Allows you to create,modify, and delete a callroute.

Configure

Dial Plan Number Match

Displays number matchconfiguration information.

Monitor

Allows you to configurenumber match parameters.

Configure


39/870

18


Call Authority Control

Displays call authoritycontrol configurationinformation, and themaximum number of callconnections in a set.

Monitor

Allows you to configure callauthority control, and themaximum number of callconnections in a set.

Configure

Number Substitution

Displays number substitutionconfiguration information.

Monitor

Allows you to configurenumber substitution.

Configure

CallConnection

SIP Connection

Displays connectionproperties,session

properties, advancedsettings, and call releasecause code mappings.

Monitor

Allows you to configureconnection properties,session properties,advanced settings, and callrelease cause codemappings.

Configure

SIP Server Group Management

Displays SIP server groupconfiguration.

Monitor

Allows you to configure aSIP server group.

Configure

Digital Link Management

Displays VE1, VT1, and BSVline configurationinformation, and line state.

Monitor

Allows you to configure aVE1, VT1, and BSV line.

Configure

Line Management

Displays FXS, FXO, E&M,and ISDN configurationinformation and state.

Monitor

Allows you to configure anFXS, FXO, E&M, and ISDNline, and query their state.

Configure

AdvancedConfiguration

Global Configuration

Displays globalconfiguration information.

Monitor

Allows you to performglobal configurations.

Configure

Batch ConfigurationDisplays batch configurationinformation.

Monitor


40/870

19


Allows you to create localnumbers, call routes, andmanage lines in batches.

Configure

Statistics

Call Statistics

Allows you to view and

refresh active and historycall statistics.

Monitor

Allows you to view andrefresh active and historycall statistics, and clearhistory call statistics.

Configure

Connection StatusAllows you to view andrefresh registration andsubscription status.

Monitor

Common Web interface elementsCommon buttons and icons

Table 2Common buttons and icons

Button and icon Description

Allows you to bring the configuration on the current page into effect.

Allows you to cancel the configuration on the current page, and go to thecorresponding display page or device information page.

Allows you to refresh the information on the current page.

Allows you clear all statistics or items in a list.

Allows you to enter the page for adding an entry.

Allows you to delete entries on a list.

Allows you to select all the entries on a list or all ports on a device panel.

Allows you to clear all the entries on a list or all ports on a device panel.

Typically located in the Operationcolumn of a display page, it allows you

to enter the modify page of a corresponding entry so as to display ormodify the configurations of the entry.

Typically located in the Operationcolumn of a display page, it allows youto remove an entry.

Content display by pages

The Web interface can display contents by pages, as shown in Figure 4. You can set the number ofentries displayed per page, and view the contents on the first, previous, next, and last pages, or go to anypage that you want to check.


41/870

20

Figure 4Content display by pages

Searching function

The Web interface provides you with the basic and advanced searching functions to display only theentries that match specific searching criteria.

Basic search: As shown in Figure 4, input the keyword in the text box above the list, select a searchitem from the drop-down list and click the Searchbutton to display the entries that match thecriteria. Figure 5shows an example of searching for entries with VLAN ID being 2.

Figure 5Basic search function example

Advanced search: Advanced search function: As shown in Figure 4, you can click theAdvancedSearchlink to open the advanced search page, as shown in Figure 6. Specify the search criteria,and clickApplyto display the entries that match the criteria.


42/870

21

Figure 6Advanced search

Take the ARP table shown in Figure 4as an example. If you want to search for the ARP entries withinterface being Ethernet 0/4, and IP address range being 192.168.1.50 to 192.168.1.59, follow thesesteps:

1. Click theAdvanced Search link, specify the search criteria on the advanced search page as shownin Figure 7, and clickApply. The ARP entries with interface being Ethernet 0/4 are displayed.

Figure 7Advanced search function example (I)

2. Click theAdvanced Search link, specify the search criteria on the advanced search page as shownin Figure 8, and clickApply. The ARP entries with interface being Ethernet 0/4 and IP addressrange being 192.168.1.50 to 192.168.1.59 are displayed as shown in Figure 9.


43/870

22

Figure 8Advanced searching function example (II)

Figure 9Advanced searching function example (III)

Sorting function

The Web interface provides you with the basic sorting function to display entries in certain orders.

On a list page, you can click the blue heading item of each column to sort the entries based on the

heading item you selected. After your clicking, the heading item is displayed with an arrow beside it asshown in Figure 10. The upward arrow indicates the ascending order, and the downward arrowindicates the descending order.


44/870

23

Figure 10Basic sorting function example (based on IP address in the descending order)

Managing Web-based NM through CLI

Enabling/disabling Web-based NM

Task Command

Enable the Web-based NM service.

ip http enable

Disable the Web-based NM service.

undo ip http enable

Managing the current Web user

Task Command

Display the current login users. display web users

Log out the specified user or all users.

free web-users { all| user-id userid| user-nameusername}

Configuration guidelinesThe Web-based configuration interface supports the operating systems of Windows XP, Windows2000, Windows Server 2003 Enterprise Edition, Windows Server 2003 Standard Edition,

Windows Vista, Windows 7, Linux, and MAC OS.


45/870

24

The Web-based configuration interface supports the browsers of Microsoft Internet Explorer 6.0SP2 and higher, Mozilla Firefox 3.0 and higher, and Google Chrome 2.0.174.0 and higher.

The Web-based configuration interface does not support the Back, Next, Refreshbuttons providedby the browser. Using these buttons may result in abnormal display of Web pages.

The Windows firewall limits the number of TCP connections, when you use IE to log in to the Web

interface, sometimes you may be unable to open the Web interface. To avoid this problem, turn offthe Windows firewall before login.

If the software version of the device changes, clear the cache data on the browser before loggingin to the device through the Web interface; otherwise, the Web page content may not be displayedcorrectly.

You can display at most 20,000 entries that support content display by pages.

Troubleshooting Web browser

Cannot access the device through the Web interfaceSymptomYou can ping the device successfully, and log in to the device through Telnet. HTTP is enabled and theoperating system and browser version meet the Web interface requirements. However, you cannotaccess the Web interface of the device.

Analysis

If you use the Microsoft Internet Explorer, you can access the Web interface only when the followingfunctions are enabled: Run ActiveX controls and plug-ins, script ActiveX controls marked safe forscripting and active scripting.

If you use the Mozilla Firefox, you can access the Web interface only when JavaScript is enabled.Configuring the Internet Explorer settings

1. Open the Internet Explorer, and then select Tools> Internet Options.

2. Click the Security tab, and then select a Web content zone to specify its security settings, as shownin Figure 11.


46/870

25

Figure 11Internet Explorer setting (I)

3. Click Custom Level, and a dialog box Security Settingsappears.

4. As shown in Figure 12, enable these functions: Run ActiveX controls and plug-ins, script ActiveXcontrols marked safe for scripting and active scripting.


47/870

26

Figure 12Internet Explorer setting (II)

5. Click OKin the Security Settingsdialog box.

Configuring Firefox Web browser settings

1. Open the Firefox Web browser, and then select Tools> Options.2. Click the Content tab, select the Enable JavaScriptcheck box, and click OK, as shown in Figure

13.


48/870

27

Figure 13Firefox Web browser setting


49/870

28

Displaying device information

When you are logged in to the Web interface, you are placed on the Device Infopage.

The Device Infopage contains five parts, which correspond to the five tabs below the figure on the pageexcept the Services Informationand Recent System Logs tabs. When you put your cursor on a part of thefigure, the system prompts you for the tab of the corresponding information, and you can jump to the tabby clicking this part.


50/870

29

Figure 14Device information


51/870

30

Select the refresh mode from the Refresh Periodlist.

If you select a specific period, the system periodically refreshes the Device Infopage.

If you select Manual, click Refreshto refresh the page.

Displaying device informationTable 3Field descriptionField Description

Device Model

Device name.

Software Version

Software version of the device.

Firmware Version Firmware version of the device.

Hardware Version

Hardware version of the device.

Running Time

Running time after the latest boot of the device.

CPU Usage Real-time CPU usage.

Memory Usage Real-time memory usage.

Displaying broadband connection informationTable 4Field description

Field Description

Interface Interface name.

Session Type Connection type of the interface.

Network-Side ConnectionState

Connection state at the network side of the interface.

IP Address/Mask IP address and mask of the interface.

DNS Server IP address of the DNS server.

Uplink Rate (kbps) Average rate in the outgoing direction on the interface in recent 300 seconds.

Downlink Rate (kbps) Average rate in the incoming direction on the interface in recent 300 seconds.

Work Mode Rate and duplex mode of the interface.

Displaying 3G wireless card stateTo display the detailed information about the 3G wireless card state, click the More link in the 3GWireless Card Statearea. The information includes 3G modem information, user identity module (UIM)information, and 3G network information.


52/870

31

Figure 153G wireless card state

Table 5Field description

Field Description

3G Modem Information Connection state of the 3G network.

3G Modem State

State of the 3G modem, which can be:

NormalA 3G modem is connected to the router.

Absent or unrecognized modemNo 3G modem is connected to the routeror the modem cannot be recognized.

Model Model of the 3G modem.

Manufacturer Manufacturer of the 3G modem.

CMII ID CMII ID of the 3G modem.

Serial Number Serial number of the 3G modem.

Hardware Version Hardware version of the 3G modem.

Firmware Version Firmware version of the 3G modem.

PRL Version Preferred roaming list (PRL) version of the 3G modem.


53/870

32

Field Description

UIM Card State

State of the UIM card, which can be:

Absent.

Being initialized.

Fault.

Destructed. Personal identification number (PIN) code protection is disabled.

PIN code protection is enabled. Enter the PIN code for authentication.

PIN code protection is enabled, and the PIN code has passed theauthentication.

The PIN code has been blocked. Enter the PIN unlocking key (PUK) code tounblock it.

IMSI International Mobile Subscriber Identity (IMSI) of the UIM card.

Voltage Power voltage of the UIM card.

Mobile Network 3G network where the UIM card resides.

Network Type

State of the 3G network where the UIM card resides, which can be:

No Service.

CDMA.

HDR.

CDMA/HDR HYBRID.

Unknown.

RSSI Received signal strength indication (RSSI) of the 3G network.

Displaying LAN informationTable 6Field descriptionField Description

Interface Interface name.

Link State Link state of the interface.

Work Mode Rate and duplex mode of the interface.

Displaying WLAN informationTable 7Field descriptionField Description

SSID (WLAN Name) Name of the WLAN service.

Service Status Whether the service is enabled or not.

Number of PCs Connected Number of PCs connected to the WLAN service.


54/870

33

Displaying service informationTable 8Field description

Field Description

Service Name of the service.Status Status of the service.

Displaying recent system logsTable 9Field description

Field Description

Time

Time when the system logs are generated.

Level

Level of the system logs.Description

Contents of the system logs.

Managing integrated servicesFor devices with a card installed, if the card provides the Web interface access function, after specifyingthe URL address of the card on the integrated service management page, you can log in from theintegrated service management page to the Web interface of the card to manage the card.

When you are logged in to the Web interface, you are placed on the Device Infopage. Click the

Integrated Service Managementtab to enter the page displaying card information of the device.Figure 16Integrated service management

To change the URL address of the card, click of the target card. Enter the URL address in the field

and click to apply the configuration or click to cancel the modification.

Properly set the URL address of the card, and then connect the card to the LAN to which the

administrator belongs. On the page as shown in Figure 16, click the Managebutton, a page linkedto the specified URL address pops up, and then you can log in to the Web interface of this card tomanage it.

Figure 17Changing card URL address


55/870

34

Basic services configuration

This document guides you through quick configuration of basic services of routers, including configuringWAN interface parameters, LAN interface parameters, and WLAN interface parameters.

For information about WAN interfaces, see "Configuring WAN interfaces." For information about LANinterfaces, see "Configuring VLANs." For information about WLAN interfaces, see "Wirelessconfiguration overview."

Configuring basic services

Entering the homepage of basic configuration wizard

SelectWizard> Basic Configuration Wizardfrom the navigation tree.Figure 18Basic configuration wizard

Setting WAN interface parametersOn the basic configuration wizard page, click Next.

The page for configuring WAN interface parameters varies with the interface type. You are allowed toset Ethernet, SA, ADSL/G.SHDSL, CE1/PR1, CT1/PR1, and Cellular interface parameters. To do so, setthe WAN interface parameters as follows.


56/870

35

Ethernet interface

Figure 19Setting Ethernet interface parameters

Table 10Configuration items (in auto mode)

Item Description

WAN Interface

Select the Ethernet interface to be configured.

Connect Mode: Auto

Select theAutoconnect mode to automatically obtain an IP address.

MAC Address

Specify the MAC address of the Ethernet interface in either of the two ways: Use the MAC address of the deviceUse the default MAC address of the

Ethernet interface, which is displayed in the brackets.

Use the customized MAC addressAssign a MAC address in the field to theEthernet interface.

Table 11Configuration items (in manual mode)

Item Description

WAN Interface


Connect Mode: Manual

Select the Manualconnect mode to configure an IP address.

TCP-MSS Set the maximum TCP segment length of an interface.

MTU Set the MTU of an interface.

IP Address

Specify the IP address of the Ethernet interface.

Subnet Mask

Select a subnet mask for the Ethernet interface.

Gateway Address Configure the next hop of a static route.

DNS1Specify a DNS server IP address for the interface. Note that DNS server 1 is usedbefore DNS server 2.


57/870

36

Item Description

DNS2

To configure the global DNS server on the page you enter, selectAdvanced> DNSSetup> DNS Configuration. The global DNS server has priority over the DNSservers of the interfaces. The DNS query is sent to the global DNS server first. I f thequery fails, the DNS query is sent to the DNS server of the interface until the querysucceeds.

MAC Address

Specify the MAC address of the Ethernet interface in either of the two ways:

Use the MAC address of the deviceUse the default MAC address of theEthernet interface, which is displayed in the brackets.


Table 12Configuration items (in PPPoE mode)

Item Description

WAN Interface


Connect Mode: PPPoE

Select the PPPoEconnect mode.In PPPoE mode, a username and password is provided by the local Internet ServiceProvider (ISP).When the device connects to the ISP server, the ISP server initiatesPPPoE authentication. When the device passes the authentication, the ISP serverwill send the IP address, subnet mask, gateway IP address, and DNS server IPaddress to the device.

User Name

Enter the username for identity authentication.

Password

Display whether a password has been specified for identity authentication.

An empty field indicates that no password is configured.

New Password Specify or modify the password for identity authentication.



Online for all time

Select an idle timeout interval:

Online for all timeThe device is always online.

Online according to the idle timeout valueThe device disconnects from theserver if no data exchange occurs between it and the server within the specifiedtime. Then, it automatically establishes the connection upon receiving a requestfor accessing the Internet from the LAN.

When Online according to the Idle Timeout valueis enabled, specify an idletimeout value.

Online according to theIdle Timeout value

Idle timeout

MAC Address

Specify the MAC address of the Ethernet interface in either of the two ways:

Use the MAC address of the deviceUse the default MAC address of theEthernet interface, which is displayed in the brackets.



58/870

37

SA interface

Figure 20Setting SA parameters

Table 13Configuration items

Item Description

WAN Interface

Select the SA interface to be configured.

User Name

Specify the user name for identity authentication.

Password

Display whether a password has been specified for identity authentication.



TCP-MSS Set the maximum TCP segment length of an interface.MTU Set the MTU of an interface.

IP Address

Specify the IP address of the SA interface.

Subnet Mask

Select a subnet mask for the SA interface.


59/870

38

ADSL/G.SHDSL interface

Figure 21Setting ADSL/G.SHDSL parameters

Table 14Configuration items (in IPoA mode)

Item Description

WAN Interface

Select the ADSL/G.SHDSL interface to be configured.

Connect Mode: IPoA

Select the IPoA connect mode.

PVC

Specify the VPI/VCI value for PVC.



IP Address

Specify the IP address of the ADSL/G.SHDSL interface.

Subnet Mask

Select a subnet mask for the ADSL/G.SHDSL interface.

Map IP

Specify the peer destination IP address of the mapped PVC.

Table 15Configuration items (in IPoEoA mode)

Item Description

WAN Interface


Connect Mode: IPoEoA

Select the IPoEoA connect mode.

PVC




IP Address

Specify the IP address of the ADSL/G.SHDSL interface.

Subnet Mask

Select a subnet mask for the ADSL/G.SHDSL interface.

Table 16Configuration items (in PPPoA mode)

Item Description

WAN Interface



60/870

39

Item Description

Connect Mode: PPPoA

Select the PPPoA connect mode.

PVC


User Name


Password

Displays whether a password has been specified for identity authentication.An empty field indicates that no password is configured.




Table 17Configuration items (in PPPoEoA mode)

Item Description

WAN Interface


Connect Mode: PPPoEoA

Select the PPPoEoA connect mode.

PVC


User Name


Password

Displays whether a password has been specified for identity authentication.



TCP-MSS Set the maximum TCP segment length of an