Sie sind auf Seite 1von 147

ZXV10 H11X

Home Gateway

Users Manual

Version 1.0

ZTE CORPORATION ZTE Plaza, Keji Road South, Hi-Tech Industrial Park, Nanshan District, Shenzhen, P. R. China 518057 Tel: (86) 755 26771900 800-9830-9830 Fax: (86) 755 26772236 URL: http://support.zte.com.cn E-mail: doc@zte.com.cn

LEGAL INFORMATION Copyright 2005 ZTE CORPORATION. The contents of this document are protected by copyright laws and international treaties. Any reproduction or distribution of this document or any portion of this document, in any form by any means, without the prior written consent of ZTE CORPORATION is prohibited. Additionally, the contents of this document are protected by contractual confidentiality obligations. All company, brand and product names are trade or service marks, or registered trade or service marks, of ZTE CORPORATION or of their respective owners. This document is provided as is, and all express, implied, or statutory warranties, representations or conditions are disclaimed, including without limitation any implied warranty of merchantability, fitness for a particular purpose, title or noninfringement. ZTE CORPORATION and its licensors shall not be liable for damages resulting from the use of or reliance on the information contained herein. ZTE CORPORATION or its licensors may have current or pending intellectual property rights or applications covering the subject matter of this document. Except as expressly provided in any written license between ZTE CORPORATION and its licensee, the user of this document shall not acquire any license to the subject matter herein. The contents of this document and all policies of ZTE CORPORATION, including without limitation policies related to support or training are subject to change without notice.

Revision History
Date 2006/07/03 Revision No. R1.0 Serial No. Sjzl20060704 Description

ZTE CORPORATION Values Your Comments & Suggestions!


Your opinion is of great value and will help us improve the quality of our product documentation and offer better services to our customers. Please fill out the following questionnaire and fax to: (86) 755-26772236; Or mail to: Publications R&D Department, ZTE CORPORATION, ZTE Plaza, A Wing, Keji Road South, Hi-Tech Industrial Park, Shenzhen, P. R. China 518057. Thank you for your cooperation!

Your Comments & Suggestions


Document Name Product Version ZXV10 H11X (V1.0) Home Gateway Users Manual V1.0 Document Revision Number R1.0

Equipment Installation Date Presentation: (Introductions, Procedures, Illustrations, Completeness, Level of Detail, Organization, Appearance) Good Your evaluation of this document Accessibility: (Contents, Index, Headings, Numbering, Glossary) Good Fair Average Poor Bad N/A Fair Average Poor Bad N/A

Intelligibility: (Language, Vocabulary, Readability & Clarity, Technical Accuracy, Content) Good Fair Average Poor Bad N/A

Please check the suggestions which you feel can improve this documentation: Improve the overview/introduction Improve the Contents Improve the organization Your suggestions for improvement of this document Include more figures Add more examples Add more detail Other suggestions ____________________________________________________________________ ____________________________________________________________________ ____________________________________________________________________ ____________________________________________________________________ ____________________________________________________________________ # Please feel free to write any comments on an attached sheet. If you wish to be contacted regarding your comments, please complete the following: Name Postcode Telephone Company Address E-mail Make it more concise/brief Add more step-by-step procedures Add more troubleshooting information Make it less technical Add more/better quick reference aids Improve the index

Confidential and Proprietary Information of ZTE CORPORATION

Contents
About this Users Manual...................................................... xi
Typographical Conventions ...............................................................xi Mouse Operation Conventions.......................................................... xii Safety Signs .................................................................................. xiii How to Get in Touch....................................................................... xiv
Customer Support ...................................................................................... xiv Documentation Support .............................................................................. xiv

Chapter

..........................................................................15

Product Profile .....................................................................15


Product Overview............................................................................15 Packing List ....................................................................................15 Product Features.............................................................................16 Product Appearance ........................................................................17 System Requirements .....................................................................20

Chapter

..........................................................................21

System Connections ............................................................21


System Application Environment ......................................................21 Hardware Connection ......................................................................21 Connecting LAN Network Interface ...............................................21 Connecting WAN (Ethernet) Network Interface ..............................23

Connecting Telephone .................................................................23 Connection Power Adapter ...........................................................23

Chapter

.......................................................................... 25

Preparations for Configuration ........................................... 25


Installing TCP/IP .............................................................................25 Configuring TCP/IP..........................................................................27 Checking Configuration....................................................................29 Login .............................................................................................30 General Functions ...........................................................................31

Chapter

.......................................................................... 35

Basic Configuration ............................................................. 35


LAN Interface Configuration .............................................................35
LanGroup Configuration............................................................................... 36 DHCP Client List .......................................................................................... 38 DHCP Binding Configuration......................................................................... 39 WLAN Interface Configuration ...................................................................... 40

Wireless Network Configuration........................................................40


Basic Configuration of Wireless Network ....................................................... 40 Wireless Network Sub-interface Configuration............................................... 41

WAN Connection Configuration.........................................................47


Configuring Bridge Connection ..................................................................... 49 Configuring PPPoE Connection...................................................................... 51 Configuring Static Connection ...................................................................... 53 Configuring DHCP Connection ...................................................................... 55

Confidential and Proprietary Information of ZTE CORPORATION

Chapter

..........................................................................57

Advanced Configuration ......................................................57


UPnP Configuration .........................................................................57 Static Route and Dynamic Route Configuration..................................58
Static Route................................................................................................ 58 RIP Dynamic Route..................................................................................... 60

SNTP Client Configuration ................................................................60 DDNS Configuration ........................................................................61 DNS Server Configuration................................................................64 IGMP Configuration .........................................................................64
Setting IGMP Proxy..................................................................................... 65 Setting IGMP Snooping ............................................................................... 65

Bluetooth Configuration ...................................................................66 IPQoS Configuration........................................................................67 Ingress Rate Limit Configuration.......................................................70 SNMP Configuration ........................................................................71 TR069 Configuration .......................................................................73

Chapter

..........................................................................75

Security Configuration.........................................................75
Firewall By-level Control and SPI ......................................................75 Port Forwarding ..............................................................................77 Port Trigger ....................................................................................78 Remote Access Control....................................................................81 DMZ ..............................................................................................83 Filter ..............................................................................................84
Setting Bridge Filter .................................................................................... 84
Confidential and Proprietary Information of ZTE CORPORATION 7

Setting IP Filter ........................................................................................... 85 Setting URL and WEB Filter.......................................................................... 87

IPSec Configuration.........................................................................92
Setting RSA Key.......................................................................................... 92 Adding New Connection............................................................................... 93 Modifying/Deleting Connection..................................................................... 99

Chapter

........................................................................ 101

VOIP Configuration ........................................................... 101


General Configuration....................................................................101 Voice Configuration .......................................................................103 SIP Configuration..........................................................................105
Protocol Configuration ............................................................................... 105 Media Configuration................................................................................... 107

MGCP Configuration ......................................................................109


Protocol Configuration ............................................................................... 109 Authentication Configuration...................................................................... 111

Route Select Configuration.............................................................112 Service Configuration ....................................................................114 Service Configuration Display.........................................................115 Bluetooth MAC Address Configuration .............................................116

Chapter

........................................................................ 117

Other Operation Tools....................................................... 117


System Commands.......................................................................117 Network Continuity Test Tool: PING................................................118 User Management.........................................................................119 Update Gateway ...........................................................................120
8 Confidential and Proprietary Information of ZTE CORPORATION

System Log ..................................................................................120


System Log Parameter Configuration..........................................................120 Showing System Logs................................................................................121

Chapter

........................................................................123

Device Status Check ..........................................................123


PPPoE Status Information ..............................................................123 System Statistics ..........................................................................124 IPQoS Statistics ............................................................................124 Network Statistics .........................................................................125
Ethernet Interface Statistics .......................................................................125 WLAN Interface Statistics ...........................................................................126 Bluetooth Interface Statistics......................................................................126 USB Interface Statistics..............................................................................127

Chapter

10

..................................................................129

Voice Typical Configurations .............................................129


SIP Typical Configuration ...............................................................129
Step1 Select Protocol Type.........................................................................129 Step2 SIP Protocol Configuration ................................................................130 Step 3 Check Port Status............................................................................131 Step 4 Save Configuration..........................................................................131

MGCP Typical Configuration ...........................................................132


Step1 Select Protocol Type.........................................................................132 Step 2 Configure MGCP Protocol .................................................................133 Step 3 Check Port Status............................................................................134 Step 4 Save Configuration..........................................................................134

Confidential and Proprietary Information of ZTE CORPORATION

Appendix

A B

..................................................................... 135

Solutions to Common Problems........................................ 135

Appendix

..................................................................... 139

Terms ................................................................................. 139 Tables................................................................................. 147

10

Confidential and Proprietary Information of ZTE CORPORATION

About this Users Manual


Typographical Conventions
ZTE documents employ the following typographical conventions.
TABLE 1 TYPOGRAPHICAL CONVENTIONS Typeface Meaning References to other guides and documents; parameter values Links on screens Menus, menu options, input fields, radio button names, check boxes, drop-down lists, dialog box names, window names Keys on the keyboard and buttons on screens and company name Text that you type, program code, files and directory names, and function names Optional parameters Mandatory parameters Select one of the parameters that are delimited by it Note: Provides additional information about a certain topic Checkpoint: Indicates that a particular step needs to be checked before proceeding further Tip: Indicates a suggestion or hint to make things easier or more productive for the reader

Italics
Quotes Bold CAPS Constant width [] {} |

Confidential and Proprietary Information of ZTE CORPORATION

xi

ZXV10 H11X (V1.0)Home Gateway Users Manual

Mouse Operation Conventions


TABLE 2 MOUSE OPERATION CONVENTIONS Typeface Click Double-click Right-click Drag Meaning Refers to clicking the primary mouse button (usually the left mouse button) once. Refers to quickly clicking the primary mouse button (usually the left mouse button) twice. Refers to clicking the secondary mouse button (usually the right mouse button) once. Refers to pressing and holding a mouse button and moving the mouse.

xii

Confidential and Proprietary Information of ZTE CORPORATION

Safety Signs
TABLE 3 SAFETY SIGNS Safety Signs Meaning Danger: Indicates an imminently hazardous situation, which if not avoided, will result in death or serious injury. This signal word should be limited to only extreme situations. Warning: Indicates a potentially hazardous situation, which if not avoided, could result in death or serious injury. Caution: Indicates a potentially hazardous situation, which if not avoided, could result in minor or moderate injury. It may also be used to alert against unsafe practices. Erosion: Beware of erosion. Electric shock: There is a risk of electric shock. Electrostatic: The device may be sensitive to static electricity. Microwave: Beware of strong electromagnetic field. Laser: Beware of strong laser beam. No flammables: No flammables can be stored. No touching: Do not touch. No smoking: Smoking is forbidden.

Confidential and Proprietary Information of ZTE CORPORATION

xiii

ZXV10 H11X (V1.0)Home Gateway Users Manual

How to Get in Touch


The following sections provide information on how to obtain support for the documentation and the software.

Customer Support
If you have problems, questions, comments, or suggestions regarding your product, contact us by e-mail at support@zte.com.cn. You can also call our customer support center at (86) 755 26771900 and (86) 800-9830-9830.

Documentation Support
ZTE welcomes your comments and suggestions on the quality and usefulness of this document. For further questions, comments, or suggestions on the documentation, you can contact us by e-mail at doc@zte.com.cn; or you can fax your comments and suggestions to (86) 755 26772236. You can also explore our website at http://support.zte.com.cn, which contains various interesting subjects like documentation, knowledge base, forum and service request.

xiv

Confidential and Proprietary Information of ZTE CORPORATION

Chapter

Product Profile
Product Overview
Thank you for choosing the ZXV10 H11X home gateway product of ZTE CORPORATION. The ZXV10 H11X home gateway is a modular access gateway in the center of a home network. It links multiple devices through Internet connections and provides users with safe communication, entertainment and storage functions.

Note: H11X are series products of the Home Gateway

that include H110 and H111. This guide provides the description of the H110 according to it configurations. The difference between H111 and H110 is that it doesnt provide correlation function of Bluetooth and Cardbus, which should be identified in the installation and operation.

Packing List
The package of the H11X home gateway products should contain the following components: H110/H111 host AC-DC power adapter RJ-45 10/100BaseT Ethernet cable
Confidential and Proprietary Information of ZTE CORPORATION 15

ZXV10 H11X (V1.0)Home Gateway Users Manual

RJ-11 telephone cable USB connection cable Manual and Toolkit CD Home Gateway Installation Guide Please contact your dealer if any of the above components is wrong, missing or damaged, and properly keep the package and existing components of the product for replacement requirements.

Product Features
1. Interface features
i. WAN interface

Fast Ethernet interfaces: 1, RJ-45, 10/100Mbps, compliant with standards IEEE802.3 and IEEE802.3u FXO interface: 1 RJ-11 interface for the access to the PSTN network. Users can receive calls coming from the FXO interface and make calls via the interface. Telephone sets connected to the PHONE interface can access the PSTN network directly when the power is down
ii. LAN interfaces Fast Ethernet interfaces: 4, RJ-45, 10/100Mbps, compliant with standards IEEE802.3 and IEEE802.3u WLAN interface: Compliant with IEEE 802.11g/b, with builtin antenna

Bluetooth interface: Support Core V1.2, with built-in


antenna

FXS interface: 2 RJ-11 interfaces for general telephone sets. Users can receive calls coming from the VOIP and FXO interfaces and make calls via the interfaces
USB interface: 1 Master (V2.0) & 1 Slave (V1.1)

Expansion interface: One CardBus interface, supporting 16-bit PCMCIA and 32-bit CARDBUS card
16 Confidential and Proprietary Information of ZTE CORPORATION

Chapter 1 - Product Profile

2. Technical features
The product implements two functions: data access and IP voice. The data access function is used to exchange and forward data at layers 2 and 3. The IP voice function is implemented by the related network devices based on the specific signaling protocol adopted. In addition to providing the above functions, the product gives much consideration to security, QoS and network management, such as multi-level authentication based on devices, users and services, encryption of data channels, implementation of QoS requirements matching the local devices and network according to services with different requirements, network management based on multiple management modes.

Product Appearance
Front panel

The front panel contains five indicators, whose meanings are described in the following table.
Indicator Status Description

Fault indicator

Red indicator always on

Power-on self-test failure

Green indicator always on RUN indicator Off

The device is powered on and the version is being loaded/upgraded Power off

Confidential and Proprietary Information of ZTE CORPORATION

17

ZXV10 H11X (V1.0)Home Gateway Users Manual

Indicator

Status Green flashing Green indicator always on Off

Description The equipment operation. is in normal

Physics link connection are normal The device is powered off/the network cable is unconnected. Flashing according to the network traffic Working (switched on with the WLAN button) Not working (switched off with the WLAN button) Flashing according to the network traffic Working (switched on with the Bluetooth button) Not working (switched off with the Bluetooth button)

WAN indicator

Green indicator flashing Green indicator always on Off

WLAN indicator

Green flashing Green indicator always on

Bluetooth indicator

Off

Back panel

The back panel provides two RJ-45 LAN network interfaces, one RJ-45 WAN network interfaces, two RJ-11(FXS)telephone interfaces, one RJ-11(FXO) interfaces, one RST reset button, one WLAN button, Bluetooth button, one power socket and four LAN indicators. Meanings of the LAN indicators on the back panel are defined in the table below:

18

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 1 - Product Profile

Indicator

Status Green indicator always on

Description The physical link connection is normal The device is powered off/the network cable is not connected Flashing according to the network traffic

LAN 1234

Off Green flashing

The following table describes the buttons on the back panel in details.
Button Function WLAN button Bluetooth button Description Press this button for more than 1 s to start or close Wi-Fi. Press this button for more than 1 s to start or close Bluetooth. Holding on the key for more than five seconds allows you to reset the current configuration to the factory default settings, and the system will then restart automatically (all the four indicators of the LAN port will be lit after restart).

RST

Resetting button

Side panel

The side panel provides two RJ-45 LAN network interfaces, one USB Slave interface, USB Host interface and one CardBus interface.

Confidential and Proprietary Information of ZTE CORPORATION

19

ZXV10 H11X (V1.0)Home Gateway Users Manual

System Requirements
Support of ISP is required. You should be able to get the service from an ISP via WAN access. If necessary, an Ethernet hub and some Ethernet cables can be added to construct a small/medium-sized Intranet. One PC equipped with the 10 Mbps, 100 Mbps or 10/100 Mbps Ethernet adapter For wireless access, PC need to configure or have a built-in 802.11g/b wireless network adapter. Each PC to access the network should operate in at least one operating system out of Windows 98/ME/2000/NT/XP or Linux, be correctly equipped with the network adapter driver and TCP/IP protocol, and have correct network settings. This product is set to use the fixed IP address (Static IP) or the IP address allocated in PPPoE/DCHP dial-up. You also need to set the gateway server address and the DNS server address provided by your ISP. One PC of the LAN should be equipped with the WEB explorer (Microsoft Internet Explorer 6.0 or above, or Netscape Communicator 4.0 or above should be installed in).

20

Confidential and Proprietary Information of ZTE CORPORATION

Chapter

System Connections
System Application Environment
The main application scenario of the ZXV10 H11X home gateway is shown below:

ZXV10 H11X WAN

Hardware Connection
Connecting LAN Network Interface
Connect the LAN network interface of the H110 to the network adapter of the PC or another network device through a crossover or

Confidential and Proprietary Information of ZTE CORPORATION

21

ZXV10 H11X (V1.0)Home Gateway Users Manual

straight-through Ethernet cable. You can also connect the H110 or the PC through the WLAN radio frequency signal line or USB cable. Connect the local network via an Ethernet cable. The four LAN interfaces of the H110 can auto-negotiate the connection speed of the 10 Mbps/100 Mbps Ethernet and the half-duplex/full-duplex transmission mode. Use a cross-over or straight-through Ethernet cable to connect any LAN interface of the H110 to your PC. You can also connect an LAN interface of the H110 to the Ethernet hub or the Ethernet switch, and then connect your PC or another network device to the hub or the Ethernet switch. Connect the local network through WLAN. Install a wireless network adapter on your PC and then connect the local network through the IEEE 802.11g/b-based WLAN. Try to place the H110 in the center of the wireless center to achieve the optimal coverage. Make sure that you have placed the H110 in the idealist location in the whole office or house. When connecting the local network via WLAN, make sure that the WLAN button on the rear panel of the H110 is switched on. Connect your local network through USB cables. Connect your PC and the USB Slave interface of the H110 through the USB connection line and install the driver of the USB network adapter on the PC. In this way, you can access the local network through USB just as the way you use a wired Ethernet.

Warning: Be sure not to insert the telephone line

into any RJ-45 network interface. Otherwise, the H110 will be damaged. Use Ethernet cables with RJ-45 connectors in compliance with the CE standard.

22

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 2 - System Connections

Connecting WAN (Ethernet) Network Interface


Insert an Ethernet twist-pair cable with RJ-45 connector into the Ethernet WAN interface of the H110, another end connect to the carrier network.

Connecting Telephone
Connect a telephone to the telephone interface of the H110 through the twisted pair with an RJ-11 connector.

Connection Power Adapter


Use the power adapter to connect the power supply to the H110 and ensure that the running indicator on the front panel of the H110 is on.

Warning: Please use the power adapter provided by

ZTE. Using of the wrong power adapter may cause damages to the device.

Confidential and Proprietary Information of ZTE CORPORATION

23

Chapter

Preparations for Configuration


Normally, your ISP has already configured the H110, so you can directly connect and use it. However, you may need to configure it in some special cases. Now, you need to take the following configuration steps: Use one crossover or straight-through Ethernet cable to connect a PC directly to the Ethernet port of the H110. Confirm that the TCP/IP settings of the PC are correct. Disable any running firewall or security software. Disable the proxy server setting of the explorer. Get some data from your service provider. You can consult your service provider for details.

Installing TCP/IP
If your PC has not yet been installed with TCP/IP, just install it in the following steps. Let us take the Ethernet interface under Local Connection in the Windows 2000 system for an example. Click Start, select Settings, and then click Network and Dialup Connections.

Confidential and Proprietary Information of ZTE CORPORATION

25

ZXV10 H11X (V1.0)Home Gateway Users Manual

Double click the Local Connections icon and then click the Properties button in the Local Area Connection Properties window. Click the Install button and then double click the Protocol icon.

Select Internet protocol (TCP/IP) and then click OK to finish the protocol installation.

26

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 3 - Preparations for Configuration

Configuring TCP/IP
For access to the Internet through the H110, you must configure the subnet of the PC in the LAN to be the same as that of the H110. The default network setting for H110: IP address: 192.168.1.1; subnet mask: 255.255.255.0; default gateway: 192.168.1.1. If your PC is not configured with TCP/IP previously, use Use the following IP address option to configure it. Follow the steps below: Double click the Local Connections icon, and then select Internet protocol (TCP/IP) from the Local Area Connection Properties window. Then, click the Properties button.

Confidential and Proprietary Information of ZTE CORPORATION

27

ZXV10 H11X (V1.0)Home Gateway Users Manual

In the Internet Protocol (TCP/IP) Properties dialog box, click the Use the following IP address check box, specify the local IP address in the same network segment with the LAN interface address of the H110, that is, 192.168.1.x (x is in the range of 2~254). For example, IP address is 192.168.1.2, subnet mask is 255.255.255.0, and the default gateway

setting is 192.168.1.1.
Click the OK button to save the setting.

Note: The settings are subject to your network

requirements. Be sure to perform the above configurations for the first access to the WEB configuration page of the H110.

28

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 3 - Preparations for Configuration

Checking Configuration
After the above preparations, switch on the H110. You will see that the power indicator is on. At the same time, the H110 executes the device start-up process and detects all the connected devices. From the indicators, you can see the devices of which network interfaces are successfully connected with the H110. The indicator corresponding to the network interface with successful device connection will be always on. In addition, you can use the Ping command to check the network connection between the PC and the H110 by taking the following steps: Click the Start button, and select Run. Key in cmd in the pop-up Run dialog box and then press Enter. Key in ping 192.168.1.1 at the cursor position in the pop-up interface and then press Enter. If the following information appears:

Pinging 192.168.1.1 with 32 bytes of data: Reply from 192.168.1.1: bytes=32 time=2ms

TTL=64

It indicates that the PC has been successfully connected to the H110. If the following information occurs: Pinging 192.168.1.1 with 32 bytes of data: Request timed out.

It indicates an error occurs in the installation. Please check the following items in turn:

Confidential and Proprietary Information of ZTE CORPORATION

29

ZXV10 H11X (V1.0)Home Gateway Users Manual

Whether the Ethernet cable between the H110 and your PC has been correctly connected Whether the network adapter driver on your PC is correctly installed Whether the indicators of the LAN interfaces on the H110 and the network adapter in your PC are all on Whether the TCP/IP in your PC is correctly configured If the default IP address of the H110 is 192.168.1.1, the IP address of your PC must be within the range from 192.168.1.2 to 192.168.1.254, the subnet mask should be 255.255.255.0, the default gateway should be 192.168.1.1 and the DNS server address should be 192.168.1.1.

Login
The H110 provides configuration tools based on the WEB interface to facilitate configuration and management through the WEB explorer. Open the IE, enter https://192.168.1.1 (the default IP address of the LAN interface of the H110) in the address bar and then press Enter to display the following login page.

30

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 3 - Preparations for Configuration

Input the username and password (which are both defaulted as admin), and click the Login button to enter the general function interface for device, and learn description of each configuration and device information.

HTTPS encryption mode, so you should enter https://192.168.1.1 in the address bar. Then the system will prompt you to confirm whether the certificate provided by the WEB server is correct. If yes, you will enter the WEB configuration page. If you cannot open the device configuration web page, check the proxy server setting of the browser. Select to disable the proxy server or do not use proxy server for device IP address.

Note: The H110 supports WEB configuration in the

General Functions
The general function interface displays description of all the configuration contents, including Setup, Advanced, Security, VOIP, Tools and Status tab pages. It also displays the basic status information of the device, including the system software version number, version date, system uptime, registration status of VOIP account, ext. number, Bluetooth number and WAN link status.

Confidential and Proprietary Information of ZTE CORPORATION

31

ZXV10 H11X (V1.0)Home Gateway Users Manual

Click the Log Out button at the right upper corner on the interface to exit user login and return to the login page.

32

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 3 - Preparations for Configuration

This page is intentionally blank.

Confidential and Proprietary Information of ZTE CORPORATION

33

Chapter

Basic Configuration
Click Setup on the WEB page to enter the basic configuration of the H110. The basic configuration covers LAN interface configuration, Wireless (IEEE 802.11g/b) configuration and WAN connection configuration.

LAN Interface Configuration


Click the LAN Configuration link on the left part of the page to enter the LAN interface configuration page, where you can configure the related information of four LAN interfaces of the H110.

Confidential and Proprietary Information of ZTE CORPORATION

35

ZXV10 H11X (V1.0)Home Gateway Users Manual

Note: You can click the Save button at the right

upper corner on the page to save the current configuration information. To ensure all the configuration information will not be lost after powering off, it must be saved. Click Log Out button at the right upper corner on the interface to exit user login and return to the login page.

LanGroup Configuration
Click the LanGroup1 link in the LAN Configuration table to enter the LanGroup1 Configuration page, where you can set the protocol and network layer related information in the basic LAN Group.

IP Address IP address of the LAN group (interface subnet) NetMask

36

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 4 - Basic Configuration

Subnet mask of the LAN group Enable STP Enabling STP (Spanning Tree Protocol); STP can provide path redundancy. Even if abnormal loop is caused by multiple effective paths in the network and the network gets faulty, STP can be used to ensure one effective path in two terminals. Enable DHCP Enabling/disabling DHCP Using DHCP Server Enabling the device as DHCP server function; IP address can be allocated to the client. Start IP Start IP address allocated by the DHCP Server End IP End IP address allocated by the DHCP Server NetMask IP subnet mask allocated by the DHCP Server Gateway Gateway IP address used by the DHCP client Domain Domain name used for DHCP management DNS Domain name server address NTP Server Address of the NTP server Lease Time
Confidential and Proprietary Information of ZTE CORPORATION 37

ZXV10 H11X (V1.0)Home Gateway Users Manual

Lease time (Unit: day), which is the time during which the DHCP server leases the IP address Using DHCP Relay Enabling/disabling the DHCP relay service Server IP IP address of the DHCP Server WAN Uplink interface connection

DHCP Client List


Click the DHCP Clients link to enter the page for listing DHCP clients, that is, showing the related information of the IP addresses leased.

MAC Address MAC address of DHCP client IP Address IP address allocated to DHCP client

38

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 4 - Basic Configuration

Expires in If this IP address is of static binding in the residual lease time, then the following content is displayed: Infinity.

DHCP Binding Configuration


Click the DHCP Binding link to enter the DHCP binging configuration page. You can configure MAC and IP address binding, set up a DHCP binding table, and map the client MAC address and IP address. The DHCP Server will allocate an IP address to your PC according to the configured binding relation between MAC and IP addresses, and it will never expire. For example: you can configure the MAC address as 00-11-85-0425-e4 and the IP address as 192.168.1.100, indicating that the DHCP Server will allocate the IP address 192.168.1.100 to the host corresponding to this MAC address.

Note: The IP address must belong to the address pool

provided by the DHCP Server of this LAN group.

Confidential and Proprietary Information of ZTE CORPORATION

39

ZXV10 H11X (V1.0)Home Gateway Users Manual

WLAN Interface Configuration


For WLAN interface configuration, refer to the Basic Configuration of Wireless Network in Basic Configuration of Wireless Network.

Wireless Network Configuration


Basic Configuration of Wireless Network
Click the Wireless link on the left part of the interface to enter the basic WLAN configuration interface, where you can configure the following parameters:

Enable Wireless RF Enabling or disable WLAN sub-interface. Mode Selecting the wireless communication mode; You can select 802.11b or 802.11g. Channel Wireless channel number; you can select a proper channel according to the country code.
40 Confidential and Proprietary Information of ZTE CORPORATION

Chapter 4 - Basic Configuration

Zone The used country or region Beacon Interval Beacon interval (ms) Tx Rate Configuring the data transmission power of the device; Select a lower data transmission rate to achieve the maximum value of the wireless communication range. The default value is Auto. Tx Power Transmitting power grade Enable WLANx Enable or disable a WLAN sub-interface (up to 4 WLAN sub-interface can be enabled at the same time). ESSID Wireless network service area ID, consisting of up to 32 characters with case sensitivity and used to control wireless network access; This value must match SSID of any access point for communication. Otherwise, the system cannot be accessed (the system supports enabling of four wireless network sub-interfaces at most).

Wireless Network Sub-interface Configuration


Click the LAN Configuration link on the left side of the page to enter the LAN Configuration page. Click the wireless interface name link to enter the related configuration page of wireless network sub-interface.

1. Basic information display of wireless network sub-interface After entering the configuration page of wireless network sub-interface, click the Basic link at the upper part of the
Confidential and Proprietary Information of ZTE CORPORATION 41

ZXV10 H11X (V1.0)Home Gateway Users Manual

page to enter the basic information page of wireless network sub-interface, which displays the ESSID and status information of the corresponding wireless network sub-interface.

2. Security setting for wireless network sub-interface After entering the configuration page of wireless network sub-interface, click the Security link at the upper part of the page to enter the security configuration page of wireless network sub-interface.

42

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 4 - Basic Configuration

Hide ESSID Enabling/disabling ESSID broadcast None Encryption not enabled WEP There are three kinds of WEP key lengths: 64/128/152 bit. In the majority of applications, the 64-bit WEP key is sufficient. To strengthen security, you can select the 128bit or 152-bit key length. Select the format (Hexadecimal or alphanumeric) corresponding to the key, and configure key values (Key1~Key4) for WEP encryption, and select one for configuration. Select the authentication mode between wireless devices: Shared Key or Open System.

Confidential and Proprietary Information of ZTE CORPORATION

43

ZXV10 H11X (V1.0)Home Gateway Users Manual

WPA encryption You can select the encryption algorithm: TKIP, AES or Auto. You can set the multicast key update interval: Group Key Interval. Select the PSK mode encryption (without authentications) or 802.1x authentication encryption. For the PSK mode, just add the corresponding password. For 802.1x authentication encryption, add the IP address and keyword of the authentication server.

Jump Start You can also select the encryption mode JumpStart that can be used simply. Just simply submit this function to connect our home gateway with the Station with JumpStart function.

44

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 4 - Basic Configuration

3. User management for wireless network sub-interface After entering the configuration page of wireless network sub-interface, click the Management link at the upper part of the page to enter the user management page of wireless network sub-interface, where you can configure the WLAN Station MAC address filtering rule and check the information of all the WLAN Stations associated with this wireless network sub-interface. Configuring MAC address filtering rule You can set the MAC address-based access mode to control the connected Station.

Confidential and Proprietary Information of ZTE CORPORATION

45

ZXV10 H11X (V1.0)Home Gateway Users Manual

Allow: Allowing the following MAC address associations Ban: Banning the following MAC address associations Disable Access List: Not enabling this function MAC Address: MAC address to be controlled Note: It only functions for the unassociated Station, but not the associated Station. Checking the currently associated Stations Check the information of all the WLAN Stations associated with this wireless network sub-interface.

46

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 4 - Basic Configuration

WAN Connection Configuration


To configure WAN connections, including Bridge, PPPoE, Static and DHCP, click the WAN Connection link on the web page. This product provides the support for multiple WAN connections in one physical link besides the support for a single WAN connection. When the support for multiple WAN connections is enabled, the uplink message will contain VLAN label and priority field to identify different services and priorities. The following examples of PPPoE connection describe the WAN connection configuration pages when the support for single connection or multi-connection is enabled.

Confidential and Proprietary Information of ZTE CORPORATION

47

ZXV10 H11X (V1.0)Home Gateway Users Manual

A B C

A B

The WAN Connection page includes areas A, B and C. Area A is used to configure the global parameters for the WAN connection. Area B configures the compulsory parameters for any type of WAN connection. Area C configures specific parameters for different types of WANs. The following

48

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 4 - Basic Configuration

sections introduce the settings in Area A and then other settings in Areas B and C as per the type of WAN connection. Settings in Area A may affect every WAN connection in the current system. These parameters have the following meanings: Enable multiple WAN connections Whether to support enabling multiple WAN connections. Link Speed/Duplex Mode: Working mode of the WAN Ethernet interface Current Link Status: Current link status on the WAN Ethernet interface

Youd use the Enable multiple WAN connections option in Area A with caution. If you change the option setting (change between enable and disable) and click the Apply button, all the WAN connections you configured will be cleared directly and an alert will appear on the page.
Caution:

Configuring Bridge Connection


Click the WAN Connection link on the left part of the WEB page and select Bridge in the Type box to configure the bridge connection. The configuration window when the multiple WAN

connections or single connection is enabled is as shown below.

Confidential and Proprietary Information of ZTE CORPORATION

49

ZXV10 H11X (V1.0)Home Gateway Users Manual

Name Connection name Type Connection type VLAN ID VLAN label in the Ethernet packets on the WAN interface, used only for multiple WAN connections.

50

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 4 - Basic Configuration

Priority Processing priority, connections. LAN group Associated LAN group used only for multiple WAN

Configuring PPPoE Connection


Click the WAN Connection link on the left part of the WEB page and select PPPoE in the Type box to configure the PPPoE connection. The configuration window when the multiple WAN

connections or single connection is enabled is as shown below.

Confidential and Proprietary Information of ZTE CORPORATION

51

ZXV10 H11X (V1.0)Home Gateway Users Manual

Name Connection name Type Connection type NAT Enabling/disabling NAT VLAN ID VLAN label in the Ethernet packets on the WAN interface, used only for multiple WAN connections. Range: 1~4094. Priority Priority of processing, used connections. Range: 0~7. Username Authenticated user name Password Authenticated password Authentication type
52 Confidential and Proprietary Information of ZTE CORPORATION

only

for

multiple

WAN

Chapter 4 - Basic Configuration

Authentication protocol type Mode Dialing mode, which can be Always on, OnDemand or Manual. Idle Timeout Idle time Default Gateway Whether to add the peer IP of PPP dialing as default gateway

Configuring Static Connection


The configuration window when the multiple WAN connections or single connection is enabled is as shown below.
Click the WAN Connection link on the left part of the WEB page and select Static in the Type box to configure the Static connection.

Confidential and Proprietary Information of ZTE CORPORATION

53

ZXV10 H11X (V1.0)Home Gateway Users Manual

Name Connection name Type Connection type NAT Enabling/disabling NAT VLAN ID VLAN label in the Ethernet packets on the WAN interface, used only for multiple WAN connections. Priority Priority of processing, connections. IP Address Interface IP address Mask Subnet mask Default Gateway
54 Confidential and Proprietary Information of ZTE CORPORATION

used

only

for

multiple

WAN

Chapter 4 - Basic Configuration

Default IP address of gateway DNS DNS server IP address

Configuring DHCP Connection


The configuration window when the multiple WAN connections or single connection is enabled is as shown below.
Click the WAN Connection link on the left part of the WEB page and select DHCP in the Type box to configure the DHCP connection.

Confidential and Proprietary Information of ZTE CORPORATION

55

ZXV10 H11X (V1.0)Home Gateway Users Manual

Name Connection name Type Connection type NAT Enabling/disabling NAT VLAN ID VLAN label in the Ethernet packets on the WAN interface, used only for multiple WAN connections. Priority Priority of processing, connections. used only for multiple WAN

56

Confidential and Proprietary Information of ZTE CORPORATION

Chapter

Advanced Configuration
Click the Advanced button on the WEB page to enter the advanced configuration for the H110, including UPnP (Plug and Play) configuration, route configuration, SNTP client configuration, DDNS (Dynamic Domain Name System) configurations, DNS Service configuration, IGMP Snooping and proxy configuration, Bluetooth configuration, IPQoS configuration, ingress rate limit configuration, SNMP configuration and TR069 configuration.

UPnP Configuration
Click the UPnP link on the left part of the WEB page to enter the UPnP page, where you can select whether to enable the UPnP function of the H110 and designate the user side interface (LAN Connection) and the network side interface (WAN Connection) of the UPnP function. The UPnP function is used to support zero configurations, invisible networking and auto discovery of various device types of numerous vendors. This means that one device can dynamically join a certain network, obtain an IP address, report its own functions and learn the existence and functions of the other devices.

Confidential and Proprietary Information of ZTE CORPORATION

57

ZXV10 H11X (V1.0)Home Gateway Users Manual

Enable UPnP Enabling switch the UPnP function WAN Connection Selecting the WAN side connection interface LAN Connection Selecting the LAN side interface

Static Route and Dynamic Route Configuration


Click the Route link at the left side of the page to enter the route configuration page of the H110, which is used to configure static route and RIP dynamic route.

Static Route
Click the Static Route link to enter the Static Route page, which displays the static route information list of the H110. You can configure a new route entry, or modify and delete the existing route entry.

58

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 5 - Advanced Configuration

Destination Network Address Destination network IP address Destination NetMask Destination subnet mask Next Hop IP Next hop IP address
If you need to add a new route, designate the destination network ID, subnet mask and next hop IP, and then click the Add button. Once a route is added, the route list will be refreshed. If you need to modify an existing route, select its check box from the route list. Its configuration is shown in the setting box. You can modify the next hop IP address and click the Modify button. To delete an existing route entry, select it from the displayed route list, and then click the Delete button. The route is deleted, and the route list is refreshed again.

Confidential and Proprietary Information of ZTE CORPORATION

59

ZXV10 H11X (V1.0)Home Gateway Users Manual

RIP Dynamic Route


Click the RIP link in the Routing Setup page to enter the configuration page of the dynamic routing protocol RIP, where the route table information of the system is shown. To enable the RIP function of the H110, select Enable RIP. Then, you can configure the Version and Interface parameters.

Version RIP protocol version Interface The network interface for RIP enabling; for the WAN side interface, RIP only configured at the interface without NAT enabled.

SNTP Client Configuration


Click the SNTP link on the left part of the page to enter the SNTP function configuration page, where you can configure the related information of the SNTP client on the H110 to implement time synchronization with the time server.

60

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 5 - Advanced Configuration

Enable SNTP Enabling the SNTP client function Time Zone Setting a time zone Primary Server Address IP address or domain name of the SNTP server Secondary SNTP Server IP address or domain name of the SNTP standby server Poll Time Poll time interval, in seconds, indicating the interval of server time synchronization, with the setting range from 3600 s (1 hour) to 86400 s (24 hours)

DDNS Configuration
Click the DDNS link on the left part of the WEB page to enter the DDNS Setup page, where the user can select whether to enable DDNS service.

Confidential and Proprietary Information of ZTE CORPORATION

61

ZXV10 H11X (V1.0)Home Gateway Users Manual

The DDNS (Dynamic Domain Name System) can be used to enable the host with a dynamic IP address to provide the domain name service. For example, suppose the host dynamically obtains an IP address via xdsl dialup or via the DHCP server and externally provides the domain name service. After the DDNS is applied to this host, the IP address change of this host will not affect users access to the domain name and users will not feel such IP address change of this host. This product supports two types of DDNS domain name protocols:

GNUDIP (http://gnudip2.sourceforge.net/) DDNS3 (http://www.ddns.nu)


The two protocols can be used at the same time and selected from the drop-down box.

DDNS Protocol Switching to display the two DDNS protocols Enable DDNS Whether to enable the DDNS function of this protocol Server Server address to be used
62 Confidential and Proprietary Information of ZTE CORPORATION

Chapter 5 - Advanced Configuration

If DDNS3 protocol is used, this server is a domain name, defaulted as ns.ddns.nu. If HTTP protocol of GNUDIP is used, this server address is a URL, defaulted as http://ns.eagleeyes.com.cn/cgibin/gdipupdt.cgi. Username Username Password Password Handle Binding any configured character string with the corresponding IP address, valid only when the DDNS3 protocol is used Domain Domain name corresponding to this user, valid only when the GNUDIP protocol is used WAN Connection Selecting the WAN side connection interface

Note: Username and password are obtained through

the registered DDNS server, and different protocols use different modes:

The DDNS3 protocol configures a Handle in the DDNS server through them, and it is bound with an IP address and also corresponds to a domain name (can be set). To configure this item, you should log in to http://www.ddns.nu to register and get the username, password and Handle. The GNUDIP HTTP protocol is bound with an IP address through them, and it corresponds to a domain name at the same time. Both of the above protocols should apply for a registration account from its own service provider to get such information as the username and password.
Confidential and Proprietary Information of ZTE CORPORATION 63

ZXV10 H11X (V1.0)Home Gateway Users Manual

DNS Server Configuration


Click the DNS Service link on the left part of the WEB page to enter the DNS Configuration page, where you can configure static DNS record.

Domain Name Domain name Host Name Host name IP Address IP address of the host

IGMP Configuration
Click the IGMP link on the left part of the WEB page to enter the IGMP Proxy configuration page, where you can select whether to enable IGMP Proxy and IGMP Snooping services.

64

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 5 - Advanced Configuration

Setting IGMP Proxy


The IGMP Proxy function monitors and filters to control multicast data forwarding at L3 of the network. The user can select whether to enable the IGMP Proxy service and specify the network-side interface (WAN Connection) of the IGMP Proxy function.

Enable IGMP Proxy Enabling the IGMP Proxy function WAN Connection Selecting the WAN side connection interface

Setting IGMP Snooping


The IGMP Snooping function monitors and filters to control multicast data forwarding at L2 of the network.

Enable IGMP Snooping Enabling the IGMP Snooping function

Confidential and Proprietary Information of ZTE CORPORATION

65

ZXV10 H11X (V1.0)Home Gateway Users Manual

Bluetooth Configuration
Click the Bluetooth link on the left part of the page to enter the Bluetooth configuration page. In this page, you can configure the Identity of the H110 Bluetooth interface and decide whether to enable the Personal Area Network (PAN) service of the Bluetooth interface.

Identity Indicating the identity of the Bluetooth interface. PIN Personal Identification Bluetooth module Authentication Whether to enable authentication function of PIN code. Service PAN: Indicating the switch of the Personal Area Network service. CTP: Cordless Telephone Number, verification code of

66

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 5 - Advanced Configuration

IPQoS Configuration
Click the IPQoS link on the left part of the page to enter the IPQoS configuration page. Select to enable the IPQoS function at a WAN side interface, and configure the relevant IPQoS policy. Configure the IPQoS rule and relevant parameters of the queue dispatching algorithm based on priority and weight. You can define different priorities for the data flows of different applications to send the data at a higher priority first, and limit bandwidth for the specified data flow to ensure the bandwidth of other data flows.

WAN Connection Selecting a WAN connection as the egress interface bound with the IPQoS Enable IPQoS Enabling switch for IPQoS Link Speed Uplink bandwidth of the WAN connection in the unit of kbps Borrow
Confidential and Proprietary Information of ZTE CORPORATION 67

ZXV10 H11X (V1.0)Home Gateway Users Manual

Whether to allow borrowing bandwidth from other idle queues; Yes/No: allowing borrowing/barring borrowing RED Whether to enable the RED (Random Early Detection) algorithm; Yes/No: Enable/disable Default/Low/Medium/High/Critical/Realtime/Prem ium/ Urgent They correspond to eight different priority queues. Default is the lowest priority, and Urgent is the highest priority. The Urgent queue is directly allocated to VOIP, not allowing the user to configure it. For the other seven queues, the drop-down list boxes behind specify the weight proportion corresponding to each priority, and the sum of seven weight values should be 100%.

Note: When there is VOIP voice flow at a moment,

then the available maximum bandwidth for the seven queues Default ~ Premium = total bandwidth the bandwidth occupied by VOIP. IPQoS is disabled unless the firewall security level is set to Medium or High.

Click the Add button to enter the IPQoS Rule page, where you can define the data flows based on the source/destination IP address, source/destination port number and protocol type, and put them into a certain priority queue.

68

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 5 - Advanced Configuration

Protocol Configuring an internally designated protocol, in the range of TCP, UDP and ICMP Source IP Address Source IP address of the data flow Destination IP Address Destination IP address of the data flow Source Port Source port of data flow; the configuration format of this item can be xx or xx: xx. Destination Port Destination port of data flow; the configuration format of this item can be xx or xx: xx. Interface In-interface of the data flow

Confidential and Proprietary Information of ZTE CORPORATION

69

ZXV10 H11X (V1.0)Home Gateway Users Manual

Outer face Out-interface of the data flow DSCP DSCP value of data flow, in the range of 0~69 Set Mark Whether to set mark for the data flow Priority Priority of the data flow

Ingress Rate Limit Configuration


Click the Ingress Rate Limit link on the left part of the page to enter the Ingress Rate Limit configuration page. Ingress rate limit can limit the incoming data flow rates of all the interfaces. You can enable ingress rate limit at an interface, configure the incoming data flow protocol, source address/port and destination address/port, and control the rate of this data flow.

Interface Network interface, on which ingress rate limit is enabled


70 Confidential and Proprietary Information of ZTE CORPORATION

Chapter 5 - Advanced Configuration

Protocol Protocol type of incoming data flow, in the range of ANY, TCP, UDP and ICMP Source IP Address Source IP address of the incoming data flow Source Netmask Source address mask of the incoming data flow Destination IP Address Destination IP address of the incoming data flow Destination Netmask Destination address mask of the incoming data flow Source Port Destination port of the incoming data flow Destination Port Destination port of the incoming data flow Rate Controlling rate of this data flow, in the unit of kbps(kbit/s)

Note: As configuring the ingress rate limit rule, if you

select ICMP for Protocol, then Source Port and Destination Port cannot be configured.

SNMP Configuration
As the Simple Network Management Protocol widely adopted on Internet, SNMP is set up over the UDP in TCP/IP protocol cluster to manage the network through the highly efficient NMS, provide wireless connection service, and timely report and handle network
Confidential and Proprietary Information of ZTE CORPORATION 71

ZXV10 H11X (V1.0)Home Gateway Users Manual

faults. Click the SNMP link on the left of the WEB page to enter the SNMP Configuration page, where you can set the SNMP read/write community string, enable or disable the SNMP Agent of the H110 and set the information such as Trap address.

Enable SNMP Agent Enabling SNMP agent function Enable SNMP Trap Enabling SNMP alarm sending function Name Device name Location Name of the device administrator; the default address is Nanjing, P.R.China. Contact

72

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 5 - Advanced Configuration

Contact mode of the device administrator; the default contact person is ZTE Corporation. Community Name Read/write community string name of SNMP Access Right Access right of the SNMP read/write community string Destination IP Destination IP address for receiving the SNMP alarm Trap Community Community string name of SNMP alarm Version Version number of SNMP

TR069 Configuration
Click the TR069 link on the left part of the Web page to enter the TR069 Configurations page, where you can configure URL and account for connection of CPE and ACS.

Confidential and Proprietary Information of ZTE CORPORATION

73

ZXV10 H11X (V1.0)Home Gateway Users Manual

ACS URL ACS URL address Username ACS username Password ASC password CPE URL CPE URL address Username CPE username Password CPE password Default WAN Default WAN connection

74

Confidential and Proprietary Information of ZTE CORPORATION

Chapter

Security Configuration
Click the Security button on the WEB page to enter the H110 security configuration, including basic control of firewall, port forwarding, port trigger, service control, DMZ, IP/bridge filter, WEB and URL filter and IPSec connection.

Firewall By-level Control and SPI


Click the General link on the left part of the interface to enter the firewall by-level control and SPI setting page, where the user can configure the firewall security level and whether to enable the status packet check accelerating function.

Confidential and Proprietary Information of ZTE CORPORATION

75

ZXV10 H11X (V1.0)Home Gateway Users Manual

High The firewall level is high. In this case, only the external access defined by the port mapping rule and access control rule can pass, the inner network is allowed to access the outer network, and the anti-attack function is also enabled. Medium The firewall level is medium. In this case, bilateral access of the inner network and outer network is allowed, but the set IP filtering rule that takes effect will restrict the corresponding access. Low The firewall level is low. In this case, all the access of the inner network and outer network is allowed. Note that all the filtering rules and IPQoS are disabled unless the firewall security level is set to Medium or High. SPI

76

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 6 - Security Configuration

Selecting Enable or Disable to enable or disable the status packet check function; it can be enabled to speed up the packet passing the H110.

Port Forwarding
Click the Port Forwarding link at the left part on the page to enter the Port Forwarding page, where you can configure a port access redirection policy with the WAN side IP address as the source and the LAN side IP address as the destination. You can configure at most 16 port forwarding entries. Port forwarding is used for the host of the WAN to access the server of the LAN as the client.

Enable Port Forwarding Enabling the port forwarding function Name Name of port forwarding Protocol Selecting the protocol name; The options are TCP and UDP. WAN Connection
Confidential and Proprietary Information of ZTE CORPORATION 77

ZXV10 H11X (V1.0)Home Gateway Users Manual

Corresponding to the established WAN connection WAN Port Range Destination port range of the WAN side LAN IP Address IP address of the LAN side LAN Port Corresponding port of the LAN side
For example, you can configure a port forwarding entry with PPPOE used as the WAN connection, the destination port range of the WAN side being 2030 to 2050, the host IP address of the LAN being 192.168.1.2 and the port number being 23. In this way, the host of the WAN can redirect to the Telnet service of the host of the LAN whose IP address is 192.168.1.2 by accessing a port whose port number ranges from 2030 to 2050. On the Port Forwarding page, you can enable the default configuration, set the host IP address of the LAN and specify the network-side interface so as to redirect access requests of the ports at the WAN side to a specified LAN host. Click Edit to edit the default number, enable Port Forwarding, specify the WAN connection to pppoe and set the IP address to of LAN host.

Port Trigger
The port trigger function enables the PC in LAN to open the specific port number of this device, so the application server on Internet can access the server in LAN through the specific opened port. Click the Port Trigger link on the left part of the WEB page to enter the Port Trigger page, which includes some default port information of Port Trigger. This function can configure up to 100 Port Trigger entries and validate up to Port Trigger entries at the same time.

78

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 6 - Security Configuration

Application Name Name of the application using the port trigger function Trigger Protocol Displaying the protocol of trigger connection Trigger Start Displaying the port where trigger connection starts Trigger End Displaying the port where trigger connection ends Open Protocol Displaying the protocol of forwarding connection Open Start Displaying the port where forwarding connection starts Open End Displaying the port where forwarding connection ends Status Displaying the status of the current trigger application
Confidential and Proprietary Information of ZTE CORPORATION 79

ZXV10 H11X (V1.0)Home Gateway Users Manual

Action Configuration button used to validate or cancel the current application Add Adding a group of trigger application configurations Modify Modifying the current trigger application configuration Delete Deleting the current trigger application configuration Reset Restoring the current trigger connection to the ex-factory status
The user can click the Add or Modify button to enter the property setting interface for port trigger.

Name Configuring the name of the current trigger application Trigger


80 Confidential and Proprietary Information of ZTE CORPORATION

Chapter 6 - Security Configuration

Trigger connection parameter; selecting the protocol type Opened Forwarding connection parameter; selecting the protocol type Start Port Setting the start port End Port Setting the end port Submit Submitting to validate the current configuration Back Canceling the current configuration

Remote Access Control


Click the Service Control link on the left part of the WEB page to enter the Service Control page, where you can configure a policy to control use of the specified IP address to access the specific service of the H110. Services of the H110 refer to TELNET, FTP, SNMP, HTTPS and HTTP. The control does not act on the ping operation. At most 16 IP address entries can be configured for access control.

Confidential and Proprietary Information of ZTE CORPORATION

81

ZXV10 H11X (V1.0)Home Gateway Users Manual

Enable WAN Access Enabling the host of the WAN to access the services of the H110 Mode Selecting black list or white list IP IP address of the host subject to access control
The default setting only allows hosts at the LAN side to access services of the H110. If Enable WAN Access is set, then hosts of the WAN side can also access the services. The parameter Mode is only effective for the configured IP address. If it is set to white list, only the configured IP address will be allowed to access services of the H110. If it is set to black list, the configured IP address will not be allowed to access services of the H110. For example, configure a policy that allows the IP address 192.168.1.2 to access services of the H110.

82

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 6 - Security Configuration

DMZ
Click the DMZ link on the left part of the WEB page to enter the DMZ page, where you can set a network segment or a host as the DMZ zone. The host in the DMZ zone cannot access the LAN hosts not in the DMZ zone and the WAN network, but the hosts in the DMZ zone can act as servers for the other zones. It is recommended that the host in the DMZ zone can be set to the FTP or WEB server to ensure security of the LAN side hosts not in the DMZ zone. Then the specific policy can be set in the Port Forwarding interface to redirect the request of the WAN side host for the FTP service of the H110 to the FTP or WEB server in the DMZ zone.

Enable DMZ Enabling DMZ host selection LAN LAN side access connection IP IP address setting of the DMZ host Mask

Confidential and Proprietary Information of ZTE CORPORATION

83

ZXV10 H11X (V1.0)Home Gateway Users Manual

If you have set the IP address of a certain network segment of the LAN to the DMZ zone, you must set the corresponding subnet mask here.
For example, you can set host 192.168.1.5 as a host of the DMZ zone.

Filter
Setting Bridge Filter
Click the Bridge Filter link on the left part of the WEB page to enter the Bridge Filter page, where you can configure an access filter rule based on the source MAC address and the destination MAC address. You can set up to 12 bridge filter entries.

Enable Bridge Filter Enabling the bridge filter function Name Name of the bridge filter Protocol

84

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 6 - Security Configuration

Selecting name of the protocol; The options include ANY (which indicates any protocol), IP, ARP, PPPoE SESSION, PPPoE DISCOVERY and RARP. Source Mac Source MAC address setting Destination Mac Destination MAC address setting
For example: configure the source MAC address as 00:d3:c4:17:08:ba, destination MAC address as 00:2d:30:51:11:23, and protocol as ANY, and then click Add to add an entry. You can also select an entry to be edited or deleted, and then click Submit to edit or delete it. On the Bridge Filter page, you may choose to only configure the source MAC address for the filter.

Setting IP Filter
Click the IP Filter link on the left part of the WEB page to enter the IP Filter page, where you can define a port access filter policy by using the IP address of the ingress interface of the H110 as the source and the IP address of the egress interface as the destination. At most 16 IP filter entries can be configured.

Confidential and Proprietary Information of ZTE CORPORATION

85

ZXV10 H11X (V1.0)Home Gateway Users Manual

Enable IP Filter Enabling the IP filter function Name Name of the IP filter Protocol Selecting name of the protocol; The options are ANY (which indicates any protocol), TCP, UDP and ICMP. Source IP Address Source IP address Source Netmask Source address subnet mask Destination IP Address Destination IP address Destination Netmask Destination address subnet mask
86 Confidential and Proprietary Information of ZTE CORPORATION

Chapter 6 - Security Configuration

Destination Port Start Start port no. of the destination address Destination Port End End port no. of the destination address Interface In Ingress interface of the source address Interface Out Egress interface of the destination address
For example, we can configure a policy that prohibits FTP access by using the host IP address of 192.168.1.2 on langroup1 as the source and the IP address of 192.168.2.13 on langroup2 as the destination. Then, set Source IP Address as 192.168.1.2 and Destination IP Address as 192.168.2.13, select TCP for Protocol, fill in 21 for both the start port and end port, select langroup1 for Interface In and langroup2 for Interface Out, name this rule, select the Enable IP Filter option, and then click the Add button.

Setting URL and WEB Filter


Click the Web Filter link on the left part of the WEB page to enter the Web Filter page, which consists of the Filtering Rule and Filtering Policy parts used to set rule (validation condition) and policy (filter condition) respectively and filter HTTP request for the Web server by any client. At most 100 rule/policy entries can be configured.

Confidential and Proprietary Information of ZTE CORPORATION

87

ZXV10 H11X (V1.0)Home Gateway Users Manual

Filtering Policy Used to configure policy, so the user can decide policy validation condition Filtering Rule Used to configure rule, so the user can set Web filter condition Add Adding policy or project Modify Modifying the current selected policy or project Delete Deleting the current selected policy or project Policy Name Name of the current project LAN Content Displaying the LAN side terminal affected by the current project
88 Confidential and Proprietary Information of ZTE CORPORATION

Chapter 6 - Security Configuration

Rule Name Displaying the name of rule to be used by the current policy Status Showing the running status of the current project Action Button for running and stopping the project 1. The user can click the Add or Modify button of Filtering Rule to enter the policy property interface.

Rule Name Name of the current policy Description Description of the current policy URL Key Specifying a list of URL keywords separated by spaces, For example: EDU MOVIE

Confidential and Proprietary Information of ZTE CORPORATION

89

ZXV10 H11X (V1.0)Home Gateway Users Manual

Data Key Specifying a list of Data keywords separated by spaces, For example: EDU MOVIE Submit Completing the current modifying or adding operation Back Canceling the current modifying operation 2. After configuring the policy, the user can return to the main interface and click the Add or Modify button of Filtering Policy to enter the project property interface.

Policy Name Name of the current project Client The type of the client where the project takes effect; three options are available: langroup (indicating the filter unit is langroup), IP (filtering by setting IP address) and LAN (all the LAN PCs are filtered).

90

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 6 - Security Configuration

Filter Rule Used to select the type of filter rule Schedule Used to configure the project schedule; This option is enabled only when AdvancedSNTP is validated (for the SNTP client configuration, refer to SNTP Client Configuration). 3. After the users configured AdvancedSNTP function takes effect, contents of the Schedule option will appear automatically.

Please select a date Setting the validating time for the current project, for example: Mon, Tue or Wed Start Selecting the project start time End Selecting the project end time

Confidential and Proprietary Information of ZTE CORPORATION

91

ZXV10 H11X (V1.0)Home Gateway Users Manual

IPSec Configuration
Setting RSA Key
Click the IPSec link on the left part of the WEB page to enter the IPSec page, where you can check and update the RSA key adopted at IPSec security negotiation.

Re-generate RSA keys Updating RSA keys; This product supports PSK shared secret and RSA digit signature as the negotiation authentication mode. If you select the RSA digit signature authentication mode, correctly fill in the RSA authentication key of the peer party. The user can update the RSA key as required, and send it to other users to set up IPSec security connections with him.

Note: The default condition for updating RSA key is

that the system has no security connection, or else the button will be automatically disabled. To reset the RSA key, delete the existing security connection, and then enter the IPSec page to update the RSA key.
92 Confidential and Proprietary Information of ZTE CORPORATION

Chapter 6 - Security Configuration

In addition, this RSA signature key is used for ID authentication only, so it can be open to anybody, without affecting the system security.

Adding New Connection


Click the New IPSec Connection link on the left part of the WEB page to enter the Configure VPN IPSec page, where you can configure and add a new IPSec security connection. IPSec security connection parameters fall into three categories: general configuration (General), security property configuration (IPSec) and negotiation property configuration Manual).

(IPSec

Automatic/IPSec

Confidential and Proprietary Information of ZTE CORPORATION

93

ZXV10 H11X (V1.0)Home Gateway Users Manual

1. General (general configuration) Connection Name IPSec security connection name; Please use A-Z/a-z/0-9 and underline _ with a length limited within 20 characters, and try to select a name related with its actual meaning. Interface Name of the uplink port; Select the correct interface name according to the connection mode and interface of the H110 and external network. 2. IPSec (security property configuration) Remote Endpoint Address Protected endpoint address of the peer party Security Association Mode IPSec security protection mode; The Tunneling and Transport modes are optional. Tunneling is used to protect security of external sent data of the inner network host of the H110 or the H110, and Transport is only used to protect security of external sent data of the H110. Therefore, when Transport is selected, the following four items will be automatically screened. Local Subnet IP Address (tunnel mode only) Local protected subnet IP address Local Subnet Mask (tunnel mode only) Local protected subnet IP mask Remote Subnet IP Address (tunnel mode only) Protected subnet IP address of the peer party Remote Subnet Mask (tunnel mode only) Protected subnet IP mask of the peer party Compress

94

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 6 - Security Configuration

Compressing the IP layer packet; When this option is selected, this end will attempt to use IP data compression. If the peer end also supports IP data compression, the IP data compression will be enabled. Key Exchange Mode Key exchanging mode; You can select Automatic (both parties automatically authenticate IDs and complete key exchanging, and periodically update keys), or select Manual (all the key parameters are set and updated by the user himself). The IKE negotiation mode is recommended. 3. Negotiation property configuration IPSec Automatic (negotiation connection configuration) IKE Mode Negotiation mode; Main Mode (recommended mode) and Aggressive Mode are optional. Life Time in Seconds (1-28800) Life time of security negotiation parameter; to ensure data transmission security, such key parameters generated by negotiation as key will be automatically stopped in a period, and parameters are also renegotiated automatically. The recommended value is 8 (hour). Rekey Margin (1-540) The advance time margin for renegotiation; To prevent key renegotiation from interrupting normal data transmission, it is allowed to renegotiate with the peer party about key before the key expires. The recommended value is 9 (s). Rekey Fuzz Percent (1-200) The maximum percentage of advance time margin for renegotiation; the total advance time Rekey Fuzz Percent *Rekey Margin
Confidential and Proprietary Information of ZTE CORPORATION 95

ZXV10 H11X (V1.0)Home Gateway Users Manual

Peer Authentication Adopted key negotiation mode; This product supports two key negotiation modes: Shared Secret and RSA Signature (select Main Mode for IKE Mode). The RSA Signature (for main mode) is recommended. Peer Key Key, a character string at a certain length consisting of number and English letter; When Shared Secret is selected from Peer Authentication, you must select a field (note to keep this field secret carefully) for Shared Secret completely consistent with that of the peer party. When RSA is selected for Peer Authentication, both parties should fill in the peer RSA key. For specific configuration, refer to the relevant introduction in Setting RSA Key. Fill in it as actually required. Use Perfect Forward Secrecy (PFS) Whether to select Use Perfect Forward Secrecy, and select whether to adopt Perfect Forward Secrecy at the second sub-phase of key negotiation or future key update; to ensure there is no statistic law feature between the new key and the key to expire, this option is selected preferentially. IPSec Manual (manual connection configuration)

Note: The ordinary user is not recommended to

adopt manual configuration, unless this user is an information security specialist or has special requirements.

Security Parameter Index: Local Local security index No.; The IPSec security protection policy is composed of several independent SAs. Each
96 Confidential and Proprietary Information of ZTE CORPORATION

Chapter 6 - Security Configuration

SA only restricts the unidirectional data security policy and has its own independent SPI security index number. Here, the SPI number from the local to the peer is filled in. Security Parameter Index: remote SPI number from the local to the peer; Fill it in with reference to Security Parameter Index: Local. IPSec Protocol Security protocol; IPSec allows two security protocol types: ESP (perform encryption and authenticate data completeness at the same time) and AH (only authenticating data completeness). ESP is recommended. Encryption Algorithm (ESP only) Data encryption algorithm; This product supports the following algorithms, encryption types and key lengths: 3DES-CBC, AES-CBC (128), AES-CBC (192) and AES256-CBC (256). AES-CBC (192) algorithm is recommended. Local Encryption Key (ESP only) Encryption algorithm key of outgoing data; Make a selection based on the algorithm type and key length selected in Encryption Algorithm. For example, if AES-CBC (192) is selected, it is necessary to submit a 48-length hexadecimal string as encryption key (48=192/4). Remote Encryption Key (ESP only) Encryption algorithm key of incoming data; Fill it in with reference to Local Encryption Key. Authentication Algorithm Authentication algorithm of data completeness; This product supports the following algorithms, hash types

Confidential and Proprietary Information of ZTE CORPORATION

97

ZXV10 H11X (V1.0)Home Gateway Users Manual

and key lengths: HMAC-SHA1 (160) recommended) and HMAC-MD5 (128). Local Authentication Key

(which

is

Authentication algorithm of outgoing data completeness; Make a selection based on the algorithm type and key length selected in Authentication Algorithm. For example, if HMACSHA1 (160) is selected, it is necessary to submit a 40length hexadecimal string as authentication key (48=192/4). Remote Authentication Key Encryption algorithm key of incoming data; Fill it in with reference to Local Authentication Key. Submit Confirming and submitting the new connection Cancel Canceling all the configurations of this connection
Examples:

1. User A can create a connection with Connection Name as Myserv, Remote Endpoint address as 10.40.40.151 (B public network address), Interface as Wizard Conn, Security Association Mode as Tunnel, Local subnet IP Address as 192.168.13.0, Localsubnet Mask as 255.255.255.0, Remote subnet IP Address as 192.168.12.0, Remote Subnet Mask as 255.255.255.0, Key Exchange Mode as Automatic, IKE mode as Main Mode, Lifetime as 3600, Rekey Margin as 540, Rekey fuzz Percent as 100, Peer Authentication Mode as Shared Secret and Peer Key as abcdefg1234567. 2. While, peer user B can create a connection with Connection Name as Myserv, Interface as Wizard Conn, Remote Endpoint address as 10.40.40.11 (A public network address), Security Association Mode as Tunnel,
98 Confidential and Proprietary Information of ZTE CORPORATION

Chapter 6 - Security Configuration

Local subnet IP Address as 192.168.12.0, Localsubnet Mask as 255.255.255.0, Remote subnet IP Address as 192.168.13.0, Remote Subnet Mask as 255.255.255.0, Key Exchange Mode as Automatic, IKE mode as Main Mode, Lifetime as 7200, Rekey Margin as 550, Rekey fuzz Percent as 80, Peer Authentication Mode as Shared Secret and Peer Key as abcdefg1234567. 3. After both parties submit their own connections, the upper part of this page will display the Connected prompt.

Modifying/Deleting Connection
After an IPSec security connection is correctly created, an option will be automatically added under the New IPSec Connection submenu, named as the new connection name. Select it to enter the modifying page for this connection. Except the connection name cannot be modified, the security connection modifying method is consistent with its adding method. After modifying, the user can click the Submit button to submit the modification or click the Cancel button to cancel the modification.

Confidential and Proprietary Information of ZTE CORPORATION

99

This page is intentionally blank.

Confidential and Proprietary Information of ZTE CORPORATION

100

Chapter

VOIP Configuration
Click the VOIP button on the WEB page to enter the VOIP configuration of the H110, including VOIP signaling configuration, voice related configuration, routing configuration, service related configuration and number configuration. related related related related

General Configuration
Click the General link on the left part of the page to enter the General configuration page, where you can select the signaling protocol used for VOIP, display the registration status of each subscriber line, and set the length and prefix of the internal phone number, the dial twice flag.

Confidential and Proprietary Information of ZTE CORPORATION

101

ZXV10 H11X (V1.0)Home Gateway Users Manual

Signaling Selecting the signaling protocol used for VOIP, such as SIP/MGCP; you can also click the Apply button to reregister the VOIP module to SS. VOIP Status Displaying the registration status of each subscriber line; When In Service is displayed, it indicates the VOIP module has been normally registered to SS, and the user can dial the VOIP phone number. If Out of Service is displayed, it indicates it is not registered successfully, when VOIP phone number cannot be dialed. Ext. number setup Configuring length and prefix of the internal line phone number; Length is the internal line number length (Cannot be changed by the user), and Prefix is the internal line number prefix (Changeable). The default internal line number prefix is *#, so the extension number connected to PHONE1 is *#00 and the one to PHONE2 is *#01. Two-stage dialing flag Dial twice flag
After modifying the related configuration, click the Apply button to submit modification.

Note: Upon submission of the modification, the

menu bar on the left will change along with the call protocol type selected by the user.

102

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 7 - VOIP Configuration

Voice Configuration
Click the Voice link on the left part of the page to enter the Voice page, where you can configure each parameter related with VOIP voice.

Voice Activity Detector (VAD) Disable VAD: No detection Enable using default scheme: Using the default scheme Enable using PT13 scheme: Using PT=13 scheme (not supported temporarily) Enable VAD but no silence information sent: Able to make silence detection but not send silence packet (not supported temporarily)

Confidential and Proprietary Information of ZTE CORPORATION

103

ZXV10 H11X (V1.0)Home Gateway Users Manual

DTMF Options DTMF Payload Use Redundancy: DTMF redundancy mode (not supported temporarily) out-band

DTMF Payload Use 2833: 2833 mode adopted for DTMF DTMF in voice coding enable: DTMF in-band voice transparent transmission No DTMF payloads generated: No transmission (not supported temporarily) Packet to PCM Digital Gain Digital gain from packet to PCM, with the range -14db ~ 6db PCM to Packet Digital Gain Digital gain from PCM to packet, with the range -14db ~ 6db Master Echo Enabling/disabling the master echo canceller Silence Handling (PCM) Whether to generate the comfortable nose for the PCM direction during the silence period (not supported temporarily) Fax Configuration T.38 (not supported temporarily) Pass Through (transparent transmission mode); provided configuraiton options: No Control, RTCP negotiated mode (RTCP negotiation mode) and Controlled by SS (controled by the SS) RTP Start Port Start port of RTP, range: even number of 1026~65434.
Click the Apply button to submit the service type change.

104

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 7 - VOIP Configuration

SIP Configuration
As a network communication protocol, SIP (Session Initiation Protocol) is gradually applied to control Voice over IP, SIP support voice, video, data, E-mail, chat and games.

1. Click the VOIP button on the WEB page to enter the VOIP configuration page. 2. Click the General link on the left part of the page to enter the General configuration page for VOIP. 3. Select SIP from the Signaling protocol box. 4. Click the Apply button to finish the SIP protocol selection. 5. Click the SIP Protocol link on the left side of the page to enter the Protocol configuration page.

Protocol Configuration
Click the Protocol link to enter the Protocol configuration page, where you can configure relevant parameters of the SIP.

Confidential and Proprietary Information of ZTE CORPORATION

105

ZXV10 H11X (V1.0)Home Gateway Users Manual

Host Information Interface: Local interface used by VOIP Port: Local port used by VOIP First Proxy IP Address: IP address or domain name of the first Proxy server Port: Port of the first Proxy server Second Proxy IP Address: IP address or domain name of the second Proxy server Port: Port of the second Proxy server Test Link Flag Test link flag Peer Call Flag Peer-to-peer call flag Phone Number User phone number Password User registration password Enable Enabling VOIP account; if the corresponding account is not ticked, it will be suspended.

Note: The password entry box does not display the

set password. During password change, please enter the new password with care. Or leave the password entry box null if you do not need to change the password.

106

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 7 - VOIP Configuration

Media Configuration
Click the Media link to enter the Media Setting page, which is used to declare ones media capability in network communication. Currently, talk media and fax media can be configured.

1. Talk media Enable Enabling flag, whether to enable/disable this media configuration item Type

Confidential and Proprietary Information of ZTE CORPORATION

107

ZXV10 H11X (V1.0)Home Gateway Users Manual

Media type, indicating voice/video/data Codec

the

type

of

media

is

Codec type, indicating the codec mode of the media type is G711U/G711A/G729/rfc2833 Payloadvalue Payload value, indicating the packet payload value of this media type; It is fixed for some codec types. For example, the payload value of G711A is 8, that of G711U is 0, that of G729 is 18 and that of rfc2833 is 97. Packet_time Packet assembly interval, indicating the media information in how long a period will be assembled in one UDP to be transmitted Clockrate Sampling rate, indicating the sampling rate when this media is generated 2. Fax media Enable Enabling flag, whether to enable/disable this media configuration item Type Media type, indicating the basic type of this media is voice or fax Codec Codec type, indicating the codec mode of the media type is G711A/G711U Payloadvalue Payload value, indicating the packet payload value of this media type; It is fixed for some codec types. For example, the payload value of G711A is 8, that of G711U is 0.
108 Confidential and Proprietary Information of ZTE CORPORATION

Chapter 7 - VOIP Configuration

Packet_time Packet assembly interval, indicating the media information in how long a period will be assembled in one UDP to be transmitted; T.38 does not involve this item. Clockrate Sampling rate, indicating the sampling rate when this media is generated
After modifying the related configuration, click the Apply button to submit the modification.

MGCP Configuration
The MGCP (Media Gateway Control Protocol) is an interface protocol used in the next generation network for the control interface generated after separation of media processing from signaling control, that is, the interface between the MG (Media Gateway) and the CA (Call Agent).

1. Click the VOIP button on the WEB page to enter the VOIP configuration page. 2. Click the General link on the left part of the page to enter the General configuration page for VOIP. 3. Select MGCP from the Signaling protocol box. 4. Click the Apply button to finish the MGCP protocol selection.

Protocol Configuration
Click the MGCP Basic link on the left side of the page to enter the MGCP configuration page, where you can configure basic parameters related with the MGCP.

Confidential and Proprietary Information of ZTE CORPORATION

109

ZXV10 H11X (V1.0)Home Gateway Users Manual

Host Information Interface: Local interface used by MGCP protocol Port: Port of local interface used by MGCP protocol First CA Domain Name: Domain name of the first CA (Call Agent) IP Address: IP address of the first CA (Call Agent) Port: Port of IP address of the first CA (Call Agent) Second CA Domain Name: Domain name of the second CA (Call Agent) IP Address: IP address of the second CA (Call Agent) Port: Port of IP address of the second CA (Call Agent) End Point

110

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 7 - VOIP Configuration

Domain Name: Domain name of the MG, allocated configuration according to the CA, default as iad.zte.com.cn Register Mode: You can select Wildcard register or Individual register. Name Prefix: Prefix of the MG subscriber line name; defaulted as aaln/ VOIPVOIP account Index of the MG subscriber Sequence Number: Serial number of the MG subscriber line name Enable: Enabling VOIP account; if the corresponding account is not ticked, it will be suspended
Click the Apply button to submit the service type change.

Authentication Configuration
Click the MGCP Auth link on the left side of the page to enter the Authentication configuration page, where you can configure authentication parameters related with the MGCP.

Confidential and Proprietary Information of ZTE CORPORATION

111

ZXV10 H11X (V1.0)Home Gateway Users Manual

EAID Encryption authentication algorithm ID: 0 (not authenticated) or 1 (authenticated, with the algorithm No. as1) MGID MG ID, defaulted as iad.zte.com.cn KI Initial key, defaulted as 0123456789ABCDEF P DH algorithm index: 1 (96 bytes) or 2 (128 bytes), defaulted as 1 G DH algorithm base number, defaulted as 2
Click the Apply button to submit the service type change.

Route Select Configuration


Click the Route Select link on the left side of the page to enter the Route select configuration page, where you can define routes of two office directions (VOIP/PSTN), PSTN internet telephony access code, dial plan and the default office direction route.

112

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 7 - VOIP Configuration

Route Select Office: Selecting office direction, including VOIP/PSTN Office prefix: Office direction prefix Office dial plan: Office direction dial plan PSTN setup IP Code: Internet telephony access code Prefix Dial Plan: PSTN dial plan Default office Setting the default office or route for each inner line

Confidential and Proprietary Information of ZTE CORPORATION

113

ZXV10 H11X (V1.0)Home Gateway Users Manual

Service Configuration
Click the Service Setup link on the left side of the page to enter the Service Setup page, where you can configure the forwarding service, hotline, ring at all Ext., call waiting, CID, CID restriction and polarity reversal billing services.

Phone line to assign service Selecting the number for the assigned service Forwarding Forwarding services, including Unconditional Forwarding, Forwarding when busy, Forwarding when unreachable and Forwarding when no reply

114

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 7 - VOIP Configuration

Hot line Hotline services, including Instant hot line and Delayed hot line Others Other services, including One number (Ring all Ext.) flag, Call waiting flag, CID flag, Call reverse flag and CID restrict flag
Click the Submit button to submit the service type change.

The service setup column contains some disabled items, indicating the current signaling protocol version does not support these services temporarily. Some services are disabled in gray when the user selects a different line, indicating these services cannot be configured at the current line.
Note:

Service Configuration Display


Click the Service Show link on the left side of the page to enter the Service show page, which displays the service collection of each subscriber line of the device, including PN: the VOIP service number.

Confidential and Proprietary Information of ZTE CORPORATION

115

ZXV10 H11X (V1.0)Home Gateway Users Manual

Bluetooth MAC Address Configuration


Click the Bluetooth MAC Setup link on the left side of the page to enter the Bluetooth MAC Setup page. In this page, you can set the MAC address of the Bluetooth extension number.

116

Confidential and Proprietary Information of ZTE CORPORATION

Chapter

Other Operation Tools


Click the Tools button on the WEB page to enter the system tool page for the H110, including operation tools for configuration saving, device restart, default value restoring, PING, user management, version upgrade, configuration export, system log check and configuration.

System Commands
Click the System Commands link on the left part of the page to enter the System Commands page, where you can save the current setting, restart the H110 and restore the default configuration.

Confidential and Proprietary Information of ZTE CORPORATION

117

ZXV10 H11X (V1.0)Home Gateway Users Manual

Click the Save All button to save all your current settings. Once the Restart button is clicked, response of the WEB page will pause for a while because the device restart process requires a certain delay. You must wait for the process to be completed. Click the Restore Defaults button. The system will replace the your current configuration with the default configuration.

Network Continuity Test Tool: PING


Click the Ping link on the left part of the page to enter the Ping page, where you can use the Ping command to test the network continuity.

IP Address IP address
For example: To make Ping test for the host with IP address as 192.168.1.2, click the Submit button. The Ping result will be displayed in the text box at the lower part.

118

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 8 - Other Operation Tools

User Management
Click the User Management link on the left part of the WEB page to enter the User Management page, including modification of user right, administrators password and ordinary users password.

User Right Selecting the user right Administrator or User Username User name, which is admin for super user and public for ordinary user, not modifiable New Password New password Repeat New Password Confirming the new password

Note: The user with the Administrator rights can

completely configure the H110 while the user with the User rights can only perform partial configuration and management of the H110.

Confidential and Proprietary Information of ZTE CORPORATION

119

ZXV10 H11X (V1.0)Home Gateway Users Manual

Update Gateway
Click the Update Gateway link on the left part of the WEB page to enter the Update Gateway page, where you can click the Browse button to select the local stored version and configuration file, click the Update Gateway button to complete uploading of the version and configuration file, or click the Get Configuration button to download the configuration file of the H110 to a local location.

System Log
Click the System Log link on the left part of the WEB page to enter the Syslog Configurations page, which provides the system log configuring, displaying, clearing, saving and downloading functions.

System Log Parameter Configuration


Click the System Log Settings link to enter the system log parameter configuration page, where you can configure the log level, IP address of the log server and timed saving of log to enable the system to record this level of logs and logs above this level, and select whether to output log to the log server.

120

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 8 - Other Operation Tools

Log Level Log levels; which are info, notice, warning, error, crit, alert and emerg in the ascending order; After the level is selected, the system will only record this level of logs and logs above this level. Enable Server Whether to enable the log server Server IP Configuring its IP address if the log server is enabled Auto Save Timed saving; after this function is enabled, the current log will be saved to flash every two hours. After the system is powered down, the log record before powering down can be still obtained.

Showing System Logs


Click the Logs link on the page to enter the log showing page.

Confidential and Proprietary Information of ZTE CORPORATION

121

ZXV10 H11X (V1.0)Home Gateway Users Manual

This page provides four buttons. You can click them to implement the following functions:

Refresh Showing the current latest 20 log records Save Saving the current log record to flash Clear Clearing the current log record, that is, there is 0 log now Download
Downloading the current log records to the specified local path

122

Confidential and Proprietary Information of ZTE CORPORATION

Chapter

Device Status Check


Click the Status button on the WEB page to enter the device status page for the H110, where you can check PPP connection status, system running time, system CPU/memory usage, IPQoS statistics and statistics of each network interface.

PPPoE Status Information


Click the PPPoE Status link on the left part of the WEB page to enter the PPP Connections Status page, where you can view the PPP connection status information: the IP address and online time of the PPP connection.

Confidential and Proprietary Information of ZTE CORPORATION

123

ZXV10 H11X (V1.0)Home Gateway Users Manual

System Statistics
Click the System Status link on the left part of the page to enter the System Information page, where you can view the basic status when the system runs: uptime, memory and CPU usage.

IPQoS Statistics
Click the IPQoS Statistics link on the left part of the page to enter the List of IPQoS Statistics page, where you can view the numbers of sent packets/bytes and the numbers of dropped data packets/bytes of different queues under TC dispatching at each interface.

124

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 9 - Device Status Check

Network Statistics
Click the Network Statistics link on the left part of the page to enter the network statistics page, where you can see the network statistics of four interface types.

Ethernet Interface Statistics


Click the Ethernet link to display the statistics of received/sent packets on the Ethernet interface.

Confidential and Proprietary Information of ZTE CORPORATION

125

ZXV10 H11X (V1.0)Home Gateway Users Manual

WLAN Interface Statistics


Click the WLAN link on the page to display the statistics of received/sent packets on the WLAN interface.

Bluetooth Interface Statistics


Click the Bluetooth link on the page to display the statistics of received/sent packets on the Bluetooth interface.

126

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 9 - Device Status Check

USB Interface Statistics


Click the USB link on the page to display the statistics of received/sent packets on the USB interface.

Confidential and Proprietary Information of ZTE CORPORATION

127

Chapter

10

Voice Typical Configurations


SIP Typical Configuration
Step 1 Select Protocol Type
1. Click the VOIP button on the WEB page to enter the VOIP configuration page. 2. Click the General link on the left part of the page to enter the General configuration page for VOIP. 3. Select SIP from the Signaling protocol box. 4. Set the Length and Prefix of the internal phone number from Ext. number setup. 5. Whether enabling Two-stage dialing flag. 6. Click the Apply button to finish the SIP protocol selection.

Confidential and Proprietary Information of ZTE CORPORATION

129

ZXV10 H11X (V1.0)Home Gateway Users Manual

Step 2 SIP Protocol Configuration


1. Click the SIP Protocol link on the left part to enter the SIP configuration page. 2. Select the uplink interface and port from the Host Information field. 3. Fill in the IP address (or domain name) and port for the first proxy server in the First Proxy field. The IP address (or domain name) and port are provided by the service provider. 4. For the IP address and port in the Second Proxy field, you can use the default values unless the service provider has special requirements. 5. For the phone numbers, passwords and enabling flags configured for the two phone interfaces, the service provider should provide the corresponding values. 6. Click the Apply button to finish the basic SIP protocol configuration.

130

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 10 - Voice Typical Configurations

Step 3 Check Port Status


Click the General link on the left part of the page to query the port status. If the both ports are displayed In Service, you can make a call.

Step 4 Save Configuration


1. After successful configuration, click the Tool button on the WEB page. 2. Click the System Commands link on the left part of the WEB page to enter the System Commands page. 3. Click the Save All button to save all the configuration modifications.

Confidential and Proprietary Information of ZTE CORPORATION

131

ZXV10 H11X (V1.0)Home Gateway Users Manual

MGCP Typical Configuration


Step 1 Select Protocol Type
1. Click the VOIP button on the WEB page to enter the VOIP configuration page. 2. Click the General link on the left part of the page to enter the General configuration page for VOIP. 3. Select MGCP from the Signaling protocol box. 4. Set the Length and Prefix of the internal phone number from Ext. number setup. 5. Whether enabling Two-stage dialing flag. 6. Click the Apply button to finish the MGCP protocol selection.

132

Confidential and Proprietary Information of ZTE CORPORATION

Chapter 10 - Voice Typical Configurations

Step 2 Configure MGCP Protocol


1. Click the MGCP Basic link on the left part to enter the MGCP basic configuration page. 2. Select the uplink Information field. interface and port in the Host

3. Fill in the domain name, IP address and port of the first CA server, which are provided by the service provider, in the First CA filed. If the service provider does not provide the domain name, use the default value. 4. Fill in the Domain Name, IP address and port in the Second CA field, you can use the default values unless the service provider has special requirements. 5. Configure the domain name (which is provided by the service provider) for the end port (End Point). 6. Configure the register mode and the name prefix (which are provided by the service provider) for the port (End Point). If the service provider does not provide them, use the default value. 7. Click Apply to finish the basic MGCP configuration.
Confidential and Proprietary Information of ZTE CORPORATION 133

ZXV10 H11X (V1.0)Home Gateway Users Manual

Step 3 Check Port Status


Click the General link on the left part of the page to query the port status. If the both ports are displayed In Service, you can make a call.

Step 4 Save Configuration


1. After successful configuration, click the Tool button on the WEB page. 2. Click the System Commands link on the left part of the WEB page to enter the System Commands page. 3. Click the Save All button to save all the configuration modifications.

134

Confidential and Proprietary Information of ZTE CORPORATION

Appendix

Solutions to Common Problems


Some problems may occur when you install or use the H110 home gateway. Refer to the following suggestions to solve them. If the problem cannot be solved yet, seek support from the service provider.
Problem Indicators The power indicator is still off after the product power is switched on. WAN indicator is not lit when the Ethernet cable is connected on the WAN side. The LAN indicator is off after you connect the Ethernet cable. Check that the power adapter that accompanies the product is used and that it is connected properly to the H110 and a power source outlet on the wall. Make sure you are using standard Ethernet twist-pair cable and check if the Ethernet cable connector is connected properly. The Home Gateway WAN interface should be connected to the host using cross cable, and to the router, switch or hub using straight-through cable. Make sure proper cables are used and check if the connectors are secured. Check that the Ethernet cable is properly connected to the PC/HUB and H110, and the power supply to the PC/HUB is turned on. Recommended Solution

Network access failure

Confidential and Proprietary Information of ZTE CORPORATION

135

ZXV10 H11X (V1.0)Home Gateway Users Manual

Problem WLAN connection cannot established.

Recommended Solution Check if the RF switch of the WLAN is turned on and if the WLAN indicator is on. Use the ping command to check if the LAN-side interface IP address (the default IP address of LANGROUP1 is 192.168.1.1) can be pinged successfully from the computer. If it can be pinged successfully, check the Ethernet connection and see if the indicator status is normal. If the computer uses a static IP address, check if the default gateway IP address is the IP address of the LAN-side interface connected to the PC, or set the computer to obtain IP address automatically. Confirm with the carrier that the DNS server allocated to your computer is valid, and confirm if the DNS server address is configured properly, or the computer is set to obtain DNS server address automatically. Confirm that you have enabled the NAT option in the current WAN connection. Disable the proxy server setting in the web browser. A problem may occur on the office-end device of the carrier.

be

My PC cannot access the Internet.

The user cannot log in to the home page of the family gateway. My PC cannot browse Internet web page.

Disable the proxy server setting in the web browser, or add the LAN address of the home gateway to the list in which addresses are not allowed to use proxy. Check that the DNS server specified for the PC is correct. You can test if the PC is connected to the DNS server of the provider by using the ping application.

Other application problems

136

Confidential and Proprietary Information of ZTE CORPORATION

Appendix A - Solutions to Common Problems

Problem

Recommended Solution

Check firstly if the phone set connected to the PHONE1 or PHONE2 interface of the H110 beeps normally. If yes, it means the phone set is connected properly. Enter the WEB interface of the H110. Click the VOIP button and check the VOIP Status filed on the General page. Ensure that the phone port is registered, that is, it is in service. If it is not registered, please check the SIP or MGCP configuration by referring to VOIP configuration in Chapter 7. If the port status is in service, it means the connection is proper. Contact the service provider if you still cannot make a call.
Configuration made at Web page is lost after restart. Make sure you click the Submit button for confirmation after every modification. After completing corresponding setting, you should click the Save button or enter the Tools page to click the Save All button to save it. Only in this way, can your configured parameters take effect after the H110 is powered on next time.

I cannot make a call.

Confidential and Proprietary Information of ZTE CORPORATION

137

ZXV10 H11X (V1.0)Home Gateway Users Manual

This page is intentionally blank.

138

Confidential and Proprietary Information of ZTE CORPORATION

Appendix

Terms
10Base-T/100Base-TX Adaptive version of Ethernet standard; 10Base-T employs a twisted pair at the longest length of 100 m, with the highest transmission rate as 10M bps. 100Base-TX is similar to it, but it uses two highquality twisted pairs, with the highest data transmission rate as 100Mbps. Adapter The device connected to a network segment, such as Ethernet, modem card or adapter Bandwidth The quantity of data can be transmitted in a fixed length of time

Broadband Broadcast technology supporting voice, image and data transmission via multiple channels.
DDNS Network server providing IP setup binding relation of fixed domain name and dynamic change DHCP
Confidential and Proprietary Information of ZTE CORPORATION 139

ZXV10 H11X (V1.0)Home Gateway Users Manual

DHCP (Dynamic Host Configuration Protocol) can allocate dynamic IP address to the device on network. Dynamic address means the device can get a different IP address when it connects the network each time. DNS DNS (Domain Name Server) translates the name of network node in Internet into the network address. Domain Name Domain name identifies one or multiple host names in Internet. For example, the domain name www.yahoo.com represents lots of IP addresses. As one part in the URL, domain name is sued to identify the address of the specific web page. For example, the domain name in http://www.zte.com.cn/index.jsp is www.zte.com.cn. DoS DoS (Denial of Service) will be triggered when the PC or network fails to work normally. For example, a hacker may use a false IP address to accumulate quantities of connections and attack the target server. Ethernet As one of the most common LAN protocols, it supports bus technology, with the transmission rate range as 10Mbps ~ 1000Mbs. Explorer It is an application used to find and display web page, such as Netscape Navigator and Microsoft Internet Explorer. Firewall Firewall is the secure barrier between the internal network and external network. Specifically, firewall refers to the combination of a series of components set between different networks or network security domains. By monitoring, limiting and changing data flows of different domains, firewall can screen the information, structure and
140 Confidential and Proprietary Information of ZTE CORPORATION

Appendix B - Terms

running status of the customer network to protect the customer network. FTP FTP (File Transfer Protocol) is a protocol widely used on the Internet. Its a service protocol for transmitting files between hosts on computer networks. FTP supports multiple file types and formats, e.g. text and binary file. HTTP HTTP (HyperText Transfer Protocol) defines how information is formatted and transmitted, and the responses of servers and browsers when different commands are used. All the URLs input in the browser address bar start with http://. Hub Hub is a shared network connection device providing multiple network interfaces. It connects multiple computers in a network and allows data exchange between computers. Sharing means all the ports of a hub share the fixed bandwidth, so the average data transmission rate and efficiency per user (port) is restricted by the number of users. IEEE IEEE (Institute of Electrical and Electronic Engineers) is the most famous organization form formulating standards for the electronic and electrical industries. Internet As a global network, Internet is used by millions of computers to exchange data, news and viewpoints. IP Address IP address is the 32-bit address in TCP/IP used to identity the host. There are five categories of IP addresses (A, B, C, D and E), which are in the 8-bit data format with 4 separations, such as 2.1.1.2.
Confidential and Proprietary Information of ZTE CORPORATION 141

ZXV10 H11X (V1.0)Home Gateway Users Manual

Each address covers the network address, optional subnet address and host address. Network address and subnet address are combined for routing, host address is used to identify the independent host in the network or subnet, subnet mask is used to get network and subnet information from the IP address. CIDR provides a new approach for resolving IP address and subnet mask, which is also called Internet address. IPSec IPSec is a virtual private network protocol widely supported in the industry. The user can set up IPSec VPN to strengthen security and reliability in data transmission. ISP ISP (Internet Service Provider) provides Internet access services for the individual and company. LAN LAN is a networking environment connecting some communication devices (computers, terminals and printers) in such limited areas as the room and campus. MAC Address MAC (Media Access Control) address is the L2 address parameter of network node. Each network device (like the network adapter, hub and switch) has its specific MAC address ID, and L2 switch sends data to the correct destination node by judging the destination MAC address of the packet. NAT NAT (Network Address Translation) should be used to translate the private network address into the public network address of WAN port when multiple computers in the LAN share an IP address to access Internet.

142

Confidential and Proprietary Information of ZTE CORPORATION

Appendix B - Terms

PPP PPP (Point-to-Point Protocol) provides a standard mode for transmitting data message over the point-to-point link (like telephone line). PPPoE The PPPoE (Point-to-Point Protocol over Ethernet) of PPP provides point-to-point connection in Ethernet (user authentication required) and sets up the user-oriented session channel. PPTP As a virtual private network protocol, PPTP ensures reliable transmission of the PPP encapsulated packet at the IP layer. Protocol It specifically refers to communication protocol, which is a set of rules defining the data formats observed between network devices, so they can communicate with each other, transmits, sends and receives data between them. Router Router implements connection of different types of networks through the remote WAN. Generally, the ISP line and the peer router of WAN or other network devices are interconnected to realize long-haul data transmission. During data transmission, the path to the destination is selected according to the address information in the packet, and this process is called routing. SPI SPI (Stateful Packet Inspection) inspects both the packet header and the packet content. It can specify the packet source and destination address and other more information. In addition, the state inspection firewall also closes the port, till the specific port request comes.

Confidential and Proprietary Information of ZTE CORPORATION

143

ZXV10 H11X (V1.0)Home Gateway Users Manual

TCP/IP TCP/IP (Transmission Control Protocol/Internet Protocol) is the basic communication protocol cluster of network communication, but it actually defines a group of protocols, not limited to TCP and IP. TR069 TR069 (CPE WAN Management Technical Report 069) is one of the MAN user terminal management protocols. Based on the TR069 technology standard, the service provider and the home gateway perform security interaction to implement initial configuration and automatic upgrade for the home gateway deice, improve efficiency, and reduce expenses and risks.

UDP
UDP (User Datagram Protocol) defines the computer communications in which packets are exchanged in interconnected networks. This protocol regards the network protocol (IP) as a lower protocol by default. It provides the simplest protocol mechanism for sending information to another user program. This protocol is operation oriented and does not provide submission and duplication protections. URL URL (Uniform Resource Locator) means a web address in general. URL indicates a specified information location on a www service program on the Internet. It specifies Internet protocols including HTTP or FTP. It is the unique name convention that identifies specific computers, directories and file locations on the Internet. For example, the URL of ZTE Corporation is http://www.zte.com.cn. VPN VPN (Virtual Private Network) provides a mode for securely transmitting data in Internet through access control and encryption. Its actual effect reaches or keeps close to the data transmission security level of private network.

144

Confidential and Proprietary Information of ZTE CORPORATION

Appendix B - Terms

WAN Although some WANs are private, they are usually deemed as a network for public access. WEP WEP (Wired Equivalent Privacy) is a data encryption mode based on 64bit shared key coding, and it is described in the IEEE 802.11b standard.

Confidential and Proprietary Information of ZTE CORPORATION

145

Tables
Table 1 Typographical Conventions ............................................xi Table 2 Mouse Operation Conventions .......................................xii Table 3 Safety Signs .............................................................. xiii

Confidential and Proprietary Information of ZTE CORPORATION

147