Grandstream GWN7000 User Manual

Grandstream Networks, Inc.
GWN7000 Enterprise Multi-WAN Gigabit VPN Router
User Manual
P a g e | 2
COPYRIGHT
©2017 Grandstream Networks, Inc. http://www.grandstream.com
All rights reserved. Information in this document is subject to change without notice. Reproduction or
transmittal of the entire or any part, in any form or by any means, electronic or print, for any purpose without
the express written permission of Grandstream Networks, Inc. is not permitted.
The latest electronic version of this guide is available for download here:
http://www.grandstream.com/support
Grandstream is a registered trademark and Grandstream logo is trademark of Grandstream Networks, Inc.
in the United States, Europe and other countries.
OPEN SOURCE LICENSES
GWN7000 firmware contains third-party open source software. Grandstream Open source licenses can be
downloaded from Grandstream web site from here
CAUTION
Changes or modifications to this product not expressly approved by Grandstream, or operation of this product in any way other than as detailed by this guide, could void your manufacturer warranty.
WARNING
Please do not use a different power adaptor with devices as it may cause damage to the products and void the manufacturer warranty.
P a g e | 3
Table of Contents
DOCUMENT PURPOSE ............................................................................................... 10
CHANGE LOG .............................................................................................................. 11
Firmware Version 1.0.4.23 ................................................................................................................... 11
Firmware Version 1.0.4.20 ................................................................................................................... 11
Firmware Version 1.0.2.75 ................................................................................................................... 11
Firmware Version 1.0.2.71 ................................................................................................................... 12
WELCOME ................................................................................................................... 13
PRODUCT OVERVIEW ................................................................................................ 14
Technical Specifications ....................................................................................................................... 14
INSTALLATION ............................................................................................................ 16
Equipment Packaging .......................................................................................................................... 16
Connect your GWN7000 ...................................................................................................................... 16
Safety Compliances ............................................................................................................................. 17
Warranty ............................................................................................................................................... 17
GETTING STARTED ..................................................................................................... 18
LED Indicators ..................................................................................................................................... 18
Use the WEB GUI ................................................................................................................................ 18
Access WEB GUI .......................................................................................................................... 18
WEB GUI Languages ................................................................................................................... 20
WEB GUI Configuration ................................................................................................................ 21
Overview Page ............................................................................................................................. 22
Save and Apply Changes ............................................................................................................. 23
ROUTER CONFIGURATION ........................................................................................ 24
Status ................................................................................................................................................... 24
Ports Configuration .............................................................................................................................. 24
WAN Ports Settings ...................................................................................................................... 25
Tunnel ........................................................................................................................................... 26
Global Settings ............................................................................................................................. 27
Port Mirroring ................................................................................................................................ 28
Static Routes ........................................................................................................................................ 28
P a g e | 4
QoS ...................................................................................................................................................... 29
DDNS ................................................................................................................................................... 33
DPI ....................................................................................................................................................... 33
SETTING UP A WIRELESS NETWORK ...................................................................... 35
Discover and Pair GWN76xx Access Points ....................................................................................... 35
Network Groups ................................................................................................................................... 38
Create an SSID under a Network Group ...................................................................................... 46
Additional SSID under Same Network Group .............................................................................. 47
Client Bridge ........................................................................................................................................ 49
CLIENTS CONFIGURATION ........................................................................................ 50
Clients .................................................................................................................................................. 50
Status ............................................................................................................................................ 50
Edit IP and Name .......................................................................................................................... 51
Bandwidth Rules ........................................................................................................................... 51
Block a client ................................................................................................................................. 52
Clients Access ...................................................................................................................................... 52
Time Policy ........................................................................................................................................... 53
Banned Clients ..................................................................................................................................... 54
VPN (VIRTUAL PRIVATE NETWORK) ......................................................................... 55
Overview .............................................................................................................................................. 55
OpenVPN® Server Configuration ........................................................................................................ 55
Generate Self-Issued Certificate Authority (CA) ........................................................................... 55
Generate Server/Client Certificates .............................................................................................. 58
Create OpenVPN® Server ........................................................................................................... 65
OpenVPN® Client configuration .......................................................................................................... 69
L2TP/IPSEC Configuration .................................................................................................................. 72
GWN7000 L2TP/IPSec Client Configuration ................................................................................ 72
PPTP CONFIGURATION ..................................................................................................................... 75
GWN7000 Client Configuration .................................................................................................... 75
GWN7000 PPTP Server Configuration ........................................................................................ 78
FIREWALL .................................................................................................................... 80
Basic Settings ...................................................................................................................................... 80
General Settings ........................................................................................................................... 80
Port Forwarding ............................................................................................................................ 80
DMZ .............................................................................................................................................. 81
P a g e | 5
Inter-Group Traffic Forwarding ...................................................................................................... 82
UPnP ............................................................................................................................................ 83
Traffic Rules Settings ........................................................................................................................... 84
Firewall Advanced Settings .................................................................................................................. 85
General Settings ........................................................................................................................... 85
SNAT ............................................................................................................................................. 86
DNAT ............................................................................................................................................ 87
CAPTIVE PORTAL ....................................................................................................... 89
Policy Configuration Page ................................................................................................................... 89
Files Configuration Page ..................................................................................................................... 90
Clients Page ......................................................................................................................................... 92
BANDWIDTH RULES ................................................................................................... 93
MAINTENANCE AND TROUBLESHOOTING .............................................................. 95
Maintenance ........................................................................................................................................ 95
Debug .................................................................................................................................................. 98
Capture ......................................................................................................................................... 98
Ping/Traceroute ............................................................................................................................ 99
Syslog ......................................................................................................................................... 101
NAT Table ................................................................................................................................... 102
Email/Notification ............................................................................................................................... 103
LED Schedule .................................................................................................................................... 104
File Sharing ........................................................................................................................................ 105
SNMP ................................................................................................................................................. 107
User Manager .................................................................................................................................... 108
UPGRADING AND PROVISIONING .......................................................................... 110
Upgrading Firmware .......................................................................................................................... 110
Upgrading via WEB GUI ............................................................................................................. 110
Provisioning and backup .....................................................................................................................111
Download Configuration ..............................................................................................................111
Configuration Server ....................................................................................................................111
Reset and reboot ................................................................................................................................111
EXPERIENCING THE GWN7000 ENTERPRISE ROUTER ....................................... 112
P a g e | 6
Table of Tables
Table 1: GWN7000 Technical Specifications .............................................................................................. 14
Table 2: GWN7000 Equipment Packaging .................................................................................................. 16
Table 3: LED Indicators ............................................................................................................................... 18
Table 4: Overview ........................................................................................................................................ 22
Table 5: GWN7000 WEB GUIRouterPortWAN Port (1,2)................................................................. 25
Table 6: 6In4 Tunnels .................................................................................................................................. 26
Table 7: 6rd Tunnels .................................................................................................................................... 27
Table 8: AICCU Tunnels .............................................................................................................................. 27
Table 9: GWN7000 WEB GUIRouterPortGlobal Settings ................................................................ 27
Table 10: Port Mirroring ............................................................................................................................... 28
Table 11: IPv4 Static Routes ....................................................................................................................... 29
Table 12: IPv6 Static Routes ....................................................................................................................... 29
Table 13: QoS Basic .................................................................................................................................... 30
Table 14: Upstream QoS ............................................................................................................................. 30
Table 15: QoS Policer ................................................................................................................................. 31
Table 16: QoS Smart Queue ....................................................................................................................... 32
Table 17: DPI Settings ................................................................................................................................. 34
Table 18: Device Configuration ................................................................................................................... 36
Table 19: Basic ............................................................................................................................................ 40
Table 20: Wi-Fi ............................................................................................................................................ 41
Table 21: Time Policy Parameters .............................................................................................................. 54
Table 22: CA Certificate ............................................................................................................................... 56
Table 23: Server Certificate ......................................................................................................................... 59
Table 24: Client Certificate .......................................................................................................................... 63
Table 25: OpenVPN® Server ...................................................................................................................... 66
Table 26: OpenVPN® Client ....................................................................................................................... 70
Table 27: L2TP Configuration ...................................................................................................................... 73
Table 28: PPTP Configuration ..................................................................................................................... 76
Table 29: PPTP Server Configuration Parameters ..................................................................................... 78
Table 30: Port Forward ................................................................................................................................ 81
Table 31: DMZ ............................................................................................................................................. 82
Table 32: UPnP Settings ............................................................................................................................. 83
Table 33: Firewall Traffic Rules ................................................................................................................... 84
Table 34: Firewall-General Settings ............................................................................................................ 85
Table 35: SNAT ........................................................................................................................................... 86
Table 36: DNAT ........................................................................................................................................... 87
P a g e | 7
Table 37: Basic Configuration Page ............................................................................................................ 89
Table 38: Bandwidth Rules.......................................................................................................................... 93
Table 39: Maintenance ................................................................................................................................ 95
Table 40: Debug-Capture ............................................................................................................................ 99
Table 41: Email Setting ............................................................................................................................. 103
Table 42: Email Events .............................................................................................................................. 104
Table 43: LED Schedule settings .............................................................................................................. 104
Table 44: Add a New File to Share ............................................................................................................ 106
Table 45: SNMP Basic Page ..................................................................................................................... 107
Table 46: SNMP Advanced Page .............................................................................................................. 108
Table 47: VPN User Parameters ............................................................................................................... 109
Table 48: Network Upgrade Configuration ................................................................................................ 110
P a g e | 8
Table of Figures
Figure 1: GWN7000 Front View .................................................................................................................. 16
Figure 2: GWN7000 Back View .................................................................................................................. 17
Figure 3: GWN7000 Web GUI Login Page ................................................................................................. 19
Figure 4: Change Password on first boot .................................................................................................... 20
Figure 5: Setup Wizard ............................................................................................................................... 20
Figure 6: GWN7000 Web GUI Language ................................................................................................... 21
Figure 7: GWN7000 Web GUI Language ................................................................................................... 21
Figure 8: Overview Page ............................................................................................................................. 22
Figure 9: Apply Changes ............................................................................................................................. 23
Figure 10: Router's Status .......................................................................................................................... 24
Figure 11: QoS ............................................................................................................................................ 29
Figure 12: DPI Status .................................................................................................................................. 34
Figure 13: Discover AP ............................................................................................................................... 35
Figure 14: Discovered Devices ................................................................................................................... 36
Figure 15: GWN7610 online........................................................................................................................ 36
Figure 16: locating Access Points ............................................................................................................... 38
Figure 17: Network Group ........................................................................................................................... 39
Figure 18: Add a New Network Group ........................................................................................................ 39
Figure 19: Device Membership ................................................................................................................... 44
Figure 20: Wi-Fi Schedule ........................................................................................................................... 45
Figure 21: Add AP to Network Group from Access Points Page ................................................................. 46
Figure 22: Create an SSID .......................................................................................................................... 47
Figure 23: Additional SSID .......................................................................................................................... 48
Figure 24: Additional SSID Created ............................................................................................................ 48
Figure 25: Client Bridge .............................................................................................................................. 49
Figure 26: Clients ........................................................................................................................................ 50
Figure 27: Client's Status ............................................................................................................................ 51
Figure 28: Client's Configuration ................................................................................................................. 51
Figure 29: Client Bandwidth Rules .............................................................................................................. 52
Figure 30: Block a Client ............................................................................................................................. 52
Figure 31: Unban Client .............................................................................................................................. 52
Figure 32: Global Blacklist .......................................................................................................................... 53
Figure 33: Managing the Global Blacklist ................................................................................................... 53
Figure 34: Blacklist Access List ................................................................................................................... 53
Figure 35: Ban/Unban Client ....................................................................................................................... 54
Figure 36: Create CA Certificate ................................................................................................................. 56
Figure 37: CA Certificate ............................................................................................................................. 58
Figure 38: Generate Server Certificates ..................................................................................................... 59
P a g e | 9
Figure 39: User Management ..................................................................................................................... 61
Figure 40: Client Certificate......................................................................................................................... 63
Figure 41: Create OpenVPN® Server ......................................................................................................... 66
Figure 42: OpenVPN® ................................................................................................................................ 68
Figure 43: OpenVPN® Client ...................................................................................................................... 69
Figure 44: OpenVPN® Client ...................................................................................................................... 72
Figure 45: L2TP Client Configuration .......................................................................................................... 73
Figure 46: L2TP Client ................................................................................................................................ 75
Figure 47: PPTP Client Configuration ......................................................................................................... 76
Figure 48: PPTP Client ............................................................................................................................... 77
Figure 49: PPTP Server Configuration ....................................................................................................... 78
Figure 50: BasicGeneral Settings ............................................................................................................ 80
Figure 51: Port Forward .............................................................................................................................. 81
Figure 52: DMZ ........................................................................................................................................... 82
Figure 53: Inter-group Traffic Forwarding ................................................................................................... 82
Figure 54: Enabling inter-group traffic ......................................................................................................... 83
Figure 55: Traffic Rules Settings ................................................................................................................. 84
Figure 56: portal_default.html page ............................................................................................................ 91
Figure 57: portal_pass.html page ............................................................................................................... 91
Figure 58: Files Settings Page .................................................................................................................... 92
Figure 59: Client Web Page ........................................................................................................................ 92
Figure 60: MAC Address Bandwidth rule .................................................................................................... 94
Figure 61: Bandwidth Rules ........................................................................................................................ 94
Figure 62: Logserver Configuration ............................................................................................................ 98
Figure 63: Capture Files .............................................................................................................................. 99
Figure 64: IP Ping ..................................................................................................................................... 100
Figure 65: Traceroute ................................................................................................................................ 101
Figure 66: Syslog ...................................................................................................................................... 102
Figure 67: NAT table ................................................................................................................................. 103
Figure 68: LED Schedule .......................................................................................................................... 105
Figure 69: Add a New File to Share .......................................................................................................... 106
Figure 70: File Share Actions .................................................................................................................... 106
Figure 71: Access File Share .................................................................................................................... 107
P a g e | 10

DOCUMENT PURPOSE

This document describes how to configure the GWN7000 to manage wired and wireless networks via an
intuitive WebGUI. The intended audiences of this document are network administrators. Please visit
http://www.grandstream.com/support to download the latest “GWN7000 User Manual”.
This guide covers following topics:
Product Overview
Installation
Getting Started
Router Configuration
Setting up a Wireless Network
Clients Configuration
VPN
Firewall
Captive Portal
Bandwidth Rules
Maintenance and Troubleshooting
Upgrading and Provisioning
Experiencing the GWN7000 Enterprise Router
P a g e | 11

CHANGE LOG

This section documents significant changes from previous versions of the GWN7000 user manuals. Only
major new features or major document updates are listed here. Minor updates for corrections or editing are
not documented here.

Firmware Version 1.0.4.23

Added support for enable/disable MPPE in both PPTP server and client. [MPPE]

Firmware Version 1.0.4.20

Added support for Additional Routed Subnets. [Additional IPv4 Addresses][Additional IPv4 Static Address][Destination IP]
Added support for Timed Client Disconnect and Enhanced Client Blocking. [Clients Access]
Added support for Client Bridge (GWN76xx Access Point is required for this feature.). [Client Bridge]
Added support for OpenApp ID for Deep Packet Inspection. [DPI]
Added support for Syslog Server. [Logserver]
Added support for PPTP Server. [PPTP CONFIGURATION]
Added support for Smart Queue QoS. [Smart Queue]
Added support for Configurable web UI access port.[Web WAN Access][Web HTTP Access][Web
HTTPS Port]
Added support for E-mail notifications. [Email/Notification]

Firmware Version 1.0.2.75

Added support for Captive Portal [CAPTIVE PORTAL]
Added support for Bandwidth Rules [BANDWIDTH RULES]
Added support for Select Band per SSID [SSID Band]
Added support for selectively enable 802.11b/g/n [Mode]
Added option to enable/disable support for 802.11b devices [Allow Legacy Device(802.11b)]
Added support for custom wireless power [Custom Wireless Power(dBm)]
Added support for AP location using blinking LED [Access Point location]
Added support for limit client count per SSID [Wireless Client Limit]
Added support for better roaming decision [Enable Voice Enterprise]
Added support for LEDs schedule [LED Schedule]
Added support for Wi-Fi schedule [Wi-Fi Schedule]
Added option to enable/disable DHCP option 66 & 43 override [Allow DHCP options 66 and 43
override]
P a g e | 12

Firmware Version 1.0.2.71

This is the initial version.
P a g e | 13

WELCOME

Thank you for purchasing Grandstream GWN7000 Enterprise Multi-WAN Gigabit VPN Router.
The GWN7000 is a powerful enterprise-grade multi-WAN Gigabit VPN router. Ideal for the enterprise, small-
to-medium business, retail, education, hospitality and medical markets, the GWN7000 supports
comprehensive Wi-Fi and VPN solutions that can be shared across one or many different physical locations.
It features high-performance routing and switching power and a hardware-accelerated VPN client/server
for secure inter-office connectivity. To maximize network reliability, the GWN7000 supports traffic load
balancing and failover. The GWN7000 features an integrated controller and automated provisioning master
that can setup and manage up to 300+ in-network GWN series Wi-Fi Access Points. This can be easily
operated through the product’s intuitive web browser user interface, which also offers a central panel to
monitor and control the entire network.
----------------------------------------------------------------------------------------------------------------------------- ---------------
Caution:
Changes or modifications to this product not expressly approved by Grandstream, or operation of this
product in any way other than as detailed by this User Manual, could void your manufacturer warranty.
Warning:
Please do not use a different power adaptor with the GWN7000 as it may cause damage to the products
and void the manufacturer warranty.
----------------------------------------------------------------------------------------------------------------------------- ---------------
P a g e | 14

PRODUCT OVERVIEW

Technical Specifications

Table 1: GWN7000 Technical Specifications
Network Interfaces
2 x autosensing 10/100/1000 WAN Ports
1 x autosensing 10/100/1000 configurable as LAN, WAN or VoIP port
4 x autosensing 10/100/1000 LAN Ports
WAN
DHCP
Static IP
PPPoE
Load balance & failover
Rule based routing
LAN
DHCP server
DNS Cache
Multiple zones
VLAN
Auxiliary Ports
2 x USB 3.0 ports
1 x Reset Pinhole
Routing Performance
Up to 1 million packets/second with 64-byte packet size
USB
Printer sharing
File sharing
Network Protocols
IPv4, IPv6, 802.1Q, 802.1p
VPN
Protocols: PPTP, L2TP/IPSec, OpenVPN®
Client, Server or pass through
LED
8 green-color LEDs for device tracking and status indication
Mounting
Indoor wall mount, Desktop
QoS
VLAN, TOS, supports multiple traffic classes, filter by port, IP address, DSCP,
and policing
Firewall
NAT, DMZ, Port Forwarding, SPI, UPnP
Auto Provisioning Capability
Embedded provisioning controller to manage up to 300+ GWN series Wi-Fi APs
Management
Web, CLI
Power
802.3at PoE
Included Power Supply: 12V/2A
Max power consumption: 16W
P a g e | 15
Environmental
Operation: 0°C to 50°C
Storage: -10°C to 60°C
Humidity: 10% to 90% Non-condensing
Physical
Unit Dimensions: 200 x 136 x 37mm; Unit Weight: 570g Entire Package Dimensions: 324 x 163.5 x 54mm; Entire Package Weight: 930g
Package Content
GWN7000 Enterprise Router
12V/2A Power Adapter
Quick Installation Guide
GPL License
Compliance
FCC, CE, RCM, IC
P a g e | 16

INSTALLATION

Before deploying and configuring the GWN7000, the device needs to be properly powered up and
connected to the network. This section describes detailed information on installation, connection and
warranty policy of the GWN7000.

Equipment Packaging

Table 2: GWN7000 Equipment Packaging
Main Case
Yes (1)
Power adaptor
Yes (1)
Quick Installation Guide
Yes (1)
GPL License
Yes (1)

Connect your GWN7000

Figure 1: GWN7000 Front View
P a g e | 17
Figure 2: GWN7000 Back View
To set up the GWN7000, follow the steps below:
1. Connect one end of an RJ-45 Ethernet cable into the WAN1 or/and WAN2 port(s) of the GWN7000.
2. Connect the other end of the Ethernet cable(s) into a DSL modem or router(s).
3. Connect the 12V DC power adapter into the power jack on the back of the GWN7000. Insert the main plug of the power adapter into a surge-protected power outlet.
4. Wait for the GWN7000 to boot up and connect to internet/network. In the front of the GWN7000 the Power LED will be in solid green, and the WAN LED will flash in green.
5. Connect one of the LAN ports to your computer, the associated LED ports will flash in green.
6. (Optional) Connect LAN ports to your GWN76xx access points or/and other devices, the associated LED ports will flash in green.

Safety Compliances

The GWN7000 Enterprise Router complies with FCC/CE and various safety standards. The GWN7000
power adapter is compliant with the UL standard. Use the universal power adapter provided with the
GWN7000 package only. The manufacturer’s warranty does not cover damages to the device caused by
unsupported power adapters.

Warranty

If the GWN7000 Enterprise Router was purchased from a reseller, please contact the company where the
device was purchased for replacement, repair or refund. If the device was purchased directly from
Grandstream, contact our Technical Support Team for a RMA (Return Materials Authorization) number
before the product is returned. Grandstream reserves the right to remedy warranty policy without prior
notification.
P a g e | 18

GETTING STARTED

The GWN7000 Enterprise Router provides an intuitive web GUI configuration interface for easy
management to give users access to all the configurations and options for the GWN7000’s setup.
This section provides step-by-step instructions on how to read LED indicators and use Web GUI interface
of the GWN7000.

LED Indicators

The front panel of the GWN7000 has LED indicators for power and interfaces activities, the table below
describes the LED indicators status.
Table 3: LED Indicators
LED
Status
Indication
POWER
OFF
GWN7000 is powered off or abnormal power supply.
Solid green
GWN7000 is powered on correctly.
WAN (1,2) Flashing green
GWN7000 is connected as a client to another network and
data is transferring.
Solid green
GWN7000 is connected as a client to another network and
there is no activity.
LAN (1,2,3,4,5) Flashing green
A device is connected to the corresponding LAN port and
data is transferring.
Solid green
A device is connected to the corresponding LAN port and
there is no activity.

Use the WEB GUI

Access WEB GUI

The GWN7000 embedded Web server responds to HTTPS GET/POST requests. Embedded HTML pages
allow users to configure the device through a Web browser such as Microsoft IE, Mozilla Firefox, Google
Chrome.
P a g e | 19
Figure 3: GWN7000 Web GUI Login Page
To access the Web GUI:
1. Connect a computer to a LAN Port of the GWN7000.
2. Ensure the device is properly powered up, and the Power, LAN port LEDs light up in green.
3. Open a Web browser on the computer and enter the web GUI URL in the following format:
https://192.168.1.1 (Default IP address).
4. Enter the administrator’s login and password to access the Web Configuration Menu. The default
administrator's username and password are "admin" and "admin".
Note: At first boot or after factory reset, users will be asked to change the default administrator and
user passwords before accessing GWN7000 web interface.
The password field is case sensitive with a maximum length of 32 characters. Using strong password
including letters, digits and special characters is recommended for security purposes.
P a g e | 20
Figure 4: Change Password on first boot
At first login, a Setup Wizard tool will pop up to help going through the configuration setup, or exit to
configure manually. Setup Wizard can be accessed anytime by clicking on while on the web interface.
Figure 5: Setup Wizard

WEB GUI Languages

Currently the GWN7000 series web GUI supports English and Simplified Chinese.
To change default language, select the displayed language at the upper right of the web GUI either before or after logging in.
P a g e | 21
Figure 6: GWN7000 Web GUI Language
Figure 7: GWN7000 Web GUI Language

WEB GUI Configuration

GWN7000 web GUI includes 8 main sections to configure and manage the router and check connection status.
Overview: Provides an overall view of the GWN7000’s information presented in a Dashboard style for
easy monitoring.
Router: Displays device’s status and used to configure ports settings such as IP configuration for WAN
ports, load balancing, failover, static routes, port mirroring, QoS and DDNS.
Access Points: To add, pair and manage discovered access points.
Clients: Shows and manages the list of the clients connected to LAN ports of the GWN7000 and
wireless clients connected via GWN76xx access points.
VPN: Configures OpenVPN® Client/Server, PPTP and L2TP/IPSec client tunnels.
Firewall: Basic and advanced Firewall configuration to securely manage router’s incoming/outgoing
traffic.
Captive Portal: Configuration settings for the captive portal feature.
Bandwidth Rules: Configures the bandwidths rules that allows users to limit bandwidth utilization per
SSID or client (MAC address or IP address).
P a g e | 22
Network Group: To add and manage wireless network groups using paired access points via VLANs.
System Settings: For Maintenance and debugging features, as well as generating certificates and file
sharing.

Overview Page

Overview is the first page shown after successful login to the GWN7000’s Web Interface. It provides an
overall view of the GWN7000’s information presented in a Dashboard style for easy monitoring.
Figure 8: Overview Page
It is used to show the status of the GWN7000 for different items, please refer to the following table for each
item:
Table 4: Overview
AP
Shows the number of Access Points that are Discovered, Paired (Online)
and Offline. Click on to go to Access Points’ page for basic and
advanced configuration options for the APs
Clients
Shows the total number of connected clients, and a count for clients
connected to each Channel. Click on to go to Clients page for
more options.
P a g e | 23
AP Channel Distribution
Shows the Channel used for all APs that are paired with this Access
Point.
Top AP
Shows the Top APs list, assort the list by number of clients connected to
each AP or data usage combining upload and download. Click on
to go to Access Points page for basic and advanced configuration options
for the APs.
Top SSID
Shows the Top SSIDs list, assort the list by number of clients connected
to each SSID or data usage combining upload and download. Click on
to go to Network Group page for more options.
Top Clients
Shows the Top Clients list, assort the list of clients by their upload or
download. Click on to go to Clients page for more options.
Traffic
Shows the sent/received traffic data speeds on both WAN ports.
Note that Overview page in addition to other tabs can be updated each 15s, 1min, 2min, 5min or Never by
clicking in the upper bar menu (Default is 15s).

Save and Apply Changes

When clicking on "Save" button after configuring or changing any option on the web GUI pages. A message
mentioning the number of changes will appear on the upper menu.
Figure 9: Apply Changes
Click on button to apply changes, or to undo the changes.
P a g e | 24

ROUTER CONFIGURATION

This section includes configuration pages for network WAN ports, static routes, QoS and DDNS and shows
also the router status.

Status

Status page displays Device Status to check MAC address, Part Number, Firmware related information
and Uptime for the GWN7000; and WAN Status showing general information about WAN Ports such as
uptime, current throughput, aggregate usage, and IP address and also the application traffic. Router’s Status page can be accessed from Web GUIRouterStatus.
Figure 10: Router's Status
Note: Once DPI is enabled under Router feature. Users will be able to see their application traffics under
Application Traffic section

Ports Configuration

Connect to GWN7000’s Web GUI from a computer connected to a LAN port and go to RouterPort page
for Port configuration.
P a g e | 25

WAN Ports Settings

The GWN7000 has 2 WAN ports configured as DHCP clients by default. Each port can be connected with
DSL modem or routers. WAN ports support also setting static IPv4/IPv6 addresses, and configure PPPoE
for each WAN port. Please refer to the following table for basic network configuration parameters on WAN
ports for GWN7000.
Table 5: GWN7000 WEB GUIRouterPortWAN Port (1,2)
Enabled
Choose whether to enable or disable the WAN port.
Name
Specify the port name.
WAN Address Type
Select "DHCP", "Static" or "PPPoE" mode on the WAN interfaces of GWN7000.
The default setting is "DHCP".
DHCP
When selected, it will act as a DHCP client and acquire an IPv4 address
automatically from the DHCP server.
Static
When selected, the user should set a static IPv4 address, IPv4 Subnet Mask,
IPv4 Gateway and adding Additional IPv4 Addresses as well to
communicate with the web interface, SSH, or other services running on the
device.
PPPoE
When selected, the user should set the PPPoE account and password, PPPoE
Keep alive interval and Inter-Key Timeout (in seconds).
Preferred IPv4 DNS
Enter the preferred DNS server address (IPv4 address). If Preferred DNS is set,
GWN7000 will use it in priority.
Alternate IPv4 DNS
Enter the Alternate DNS server address (IPv4 address). If Preferred DNS is set,
GWN7000 will use it in when the Preferred DNS fails.
Native IPv6
Used to enable assigning IPv6 address to GWN7000. Once checked users will be
able to configure following fields: “IPv6 Address Assignment”, “Preferred IPv6
DNS”, “Alternate IPv6 DNS” and “IPv6 Relay to LAN”.
IPv6 Address
Assignment
This option is appearing when enabling “Native IPv6” option.
Select "Auto" to get an IPv6 address from DHCP server or "Static" to configure
manually an IPv6 address. If set to Static, the following fields should be configured:
IPv6 Address/Prefix Length
Used to set an IPv6 address/Prefix length when using Static IPv6 option Example: fec0:470:28:5b2::1/64
IPv6 Gateway
Used to define the Gateway’s IPv6 address.
IPv6 Prefix/IPv6 Prefix Length
Enter the IPv6 prefix and IPv6 prefix length. Example: ::1/64
P a g e | 26
Preferred IPv6 DNS
This option appears only when “Native IPv6” option is enabled.
It is used to set a preferred DNS server address (IPv6 address). If Preferred DNS
is set, GWN7000 will use it in priority.
Alternate IPv6 DNS
This option appears only when “Native IPv6” option is enabled.
It is used to set an Alternate DNS server address (IPv6 address). If Preferred DNS
is set, GWN7000 will use it in when the Preferred DNS fails.
IPv6 Relay to LAN
This option appears only when “Native IPv6” option is enabled. When enabled the GWN7000 will relay IPv6 address to LAN clients
Multi-WAN
These options are used when both WAN ports are enabled and using Failover
feature:
Tracking IP
Configures the tracking IP(s). ICMP packets are being used to track the IP(s)
address(es). When the tracking fails, the GWN7000 will use the secondary
WAN port as failover. Default IP used is 8.8.8.8.
Tracking Timeout (sec)
Configures tracking timeout in seconds. Default value is 2.
Tracking Interval (sec)
Configures the track interval in seconds. Default value is 5.
Bandwidth
Specifies the bandwidth for the port, e.g: “100k”, “1M” or “100M”.
VLAN Tagging
Used to enable VLAN tagging. If set to “0” the VLAN tagging will be disabled,
otherwise set a VLAN value between 5 and 4093. Default is 0.

Tunnel

Tunnel page is used to set IPv6 tunnels on WAN ports via IPv6 tunnel brokers service providers, this serves
the purpose of transferring IPv6 packets over IPv4 Network. It supports creating 6in4, 6rd and AICCU
tunnels. Please refer to below tables for each tunnel type.
Table 6: 6In4 Tunnels
WAN Interface
Choose the WAN port on which to setup the 6in4 tunnel.
MTU
Set the Maximum Transmission Unit value. The valid range is 64-9000. Default value is 1500.
6in4 IPv4 Peer
Address
Enter the IPv4 tunnel endpoint at the tunnel’s provider.
6in4 Tunnel Endpoint
IPv6 Address
Enter the local IPv6 address delegated to the tunnel endpoint. Example: 2001:db8:2222::2/64
6in4 Routed Prefix
Set the routable prefix given by the tunnel provider to allow LAN clients to get
addresses from that prefix.
Tunnel ID
Specifies the tunnel’s ID.
Username
Set the username used to login into the tunnel broker.
P a g e | 27
Password
Set the password (used for endpoint update).
Update Key
Set the update key, it overrides the password used for endpoint update.
Table 7: 6rd Tunnels
WAN Interface
Choose the WAN port on which to setup the 6rd tunnel.
MTU
Set the Maximum Transmission Unit value. The valid range is 64-9000 and default value is 1500.
6rd IPv4 Peer
Address
Enter the IPv4 Peer address.
6rd IPv6 Address
Prefix
Specifies the IPv6 prefix given by the provider. Example: 2001:B000::/32
IPv6 Prefix Length
Specifies the IPv6 prefix length (Value between 1 and 128). Example: 32
IPv4 Prefix Length
Specifies the prefix length of the IPv4 transport address. (Value between 1 and 32).
Table 8: AICCU Tunnels
WAN Interface
Choose the WAN port on which to setup the aiccu tunnel.
Username
Enter the Username (Provided by signing up with SixXS Tunnel Broker)
Password
Enter the Username’s password

Global Settings

This section specifies operating mode for multi-WAN that will be used for enabling/disabling Failover and
Load Balancing on WAN ports, and banning MAC addresses.
The following table shows the configuration parameters for Multi-WAN settings
Table 9: GWN7000 WEB GUIRouterPortGlobal Settings
Multi-WAN
Specifies the operating mode for multi -WAN. Three options are available:
Disabled
Failover: Automatically switch to the connected WAN after failure.
Load Balance + Failover: Operating the load balance mode, at the same
time automatically switch to the connected WAN after failure.
Disabled
This will disable Multi-WAN feature
Failover
If chosen failover will be enabled on WAN ports, admins need to choose the
Primary WAN port to be used. When selected, user can set Multi-WAN parameters on WAN ports.
P a g e | 28
Load Balance +
Failover
In addition to failover, load balance will be used on both ports to optimize the
resource utilization. Please note that for this feature to work, WAN ports should be
connected to different networks. When selected, user can set Multi-WAN parameters on WAN ports.
Banned Client MAC
Shows the list of banned clients MAC addresses, other MAC addresses could be
also added by clicking on or removed by clicking on .

Port Mirroring

With port mirroring enabled, the GWN7000 will send a copy of all network packets seen on one LAN port to another port, where the packet can be analyzed. Refer to the below table for the available fields to configure.
Table 10: Port Mirroring
Enable Outgoing
Mirroring
Check to enable outgoing mirroring for a LAN port. Default is “Disabled”
Enable Incoming
Mirroring
Check to enable incoming mirroring for a LAN port. Default is “Disabled”
Mirroring Port
Select which LAN port that will be mirroring traffic. Default is “Disabled”
Mirrored Port
Select which LAN port that will act as mirrored port. Default is “Disabled”

Static Routes

GWN7000 supports setting manually static IPv4 and IPv6 routes as well as displaying routing table entries. Static routes configuration page can be accessed from GWN7000 WebGUIRouterStatic Routes:
Three tabs are available:
- Routes to view routing table entries.
- IPv4 to create, edit or delete static IPv4 static routes.
- IPv6 to create, edit or delete static IPv6 static routes.
Following actions are available in both IPv4 and IPv6 tabs:
To add a new static route, click on
To edit a static route, click on
To delete a static route, click on
Refer to the following tables when editing or creating IPv4/IPv6 static routes:
P a g e | 29
Table 11: IPv4 Static Routes
Name
Enter the Name of the static route to be configured.
Enabled
Select whether to enable or disable this static route.
Group
Choose the LAN’s Network Group, which will be using this static route.
Target Network/Host
Enter the Network/Host IP address on which to route the traffic to. Example: 192.168.5.0
Netmask
Enter the Network/Host Netmask. Example: 255.255.255.0
NextHop
Enter the NextHop IP address. Example: 192.168.5.1.
Metric
Set the metric value. The valid range is 0-255. Default value is 1.
Table 12: IPv6 Static Routes
Name
Enter the Name of the static route to be configured.
Enable
Select whether to enable or disable this static route.
Group
Choose the LAN’s Network Group
Target Network/Host
Enter the Network/Host IP address on which to route the traffic to. 2001:db8:3c4d:4::/64
NextHop
Enter the Gateway’s IP address. fec0:470:28:5b2::1/64
Metric
Set the metric value. The valid range is 0-255. Default value is 1.
QoS
The GWN7000 offers the possibility to enable and configure QoS on both WAN and LAN interfaces, this
will help to manage in more depth the network traffic to define priority and classify different services and
protocols in a scheduled manner.
Figure 11: QoS
P a g e | 30
To activate QoS, check “Enable QoS”. Three tabs are available for configuration:
Basic: Download and upload bandwidth speeds settings on each WAN interface.
Upstream QoS: Upstream QoS allows creating Traffic Classes to prioritize traffic for specific resources
on the network by controlling transmission/upload rate. Note that different classes can be created and
assigned as Traffic filters by respecting following conditions:
The total of Upstream bandwidth values of each created class should not exceed the upstream
bandwidth value configured in Basic.
The remaining bandwidth will be lent to the next priority level of class.All filter options are summed together.
Policer: While Upstream QoS is dealing with traffic transmission, Policer is controlling the incoming
traffic. Thus, allowing to create rules to specific targets to set priority and received traffic rate, giving the
GWN7000 the ability to drop the exceeding traffic when reaching the configured maximum rate.
Smart Queue: The smart queue is an integrated network system that performs better per-packet/per flow network scheduling, reduces the buffer bloat and keeps latency at acceptable levels.
Refer to the following tables for each tab option:
Table 13: QoS Basic
Enabled
Check to enable upstream and downstream bandwidth speeds for the selected
WAN interface.
Upstream
Set the Upstream value to specify the upload bandwidth for selected interface, the
value should end with Mbit, Kbit or with no unit if the set value is referring to “bit”
unit. Note that the set value will affect and limit the bandwidth values on created
classes on QoS Upstream. Examples: 500Mbit
100Kbit 500
Downstream
Set the Downstream value to specify the download bandwidth speed for selected
interface, the value should end with “Mbit”, “Kbit” or with no unit if the set value is
referring to “bit” unit. Examples: 1000Mbit
100Kbit 500
Table 14: Upstream QoS
Traffic Class
Name
Define a name for the traffic class.
Priority
Set the priority of the traffic class, the lower the value, the highest the priority. Valid
range is between 1 and 64.
Loading...
+ 82 hidden pages