WELCOME

GWN7001/7002/7003 are Multi-WAN Gigabit VPN routers with built-in firewalls that allow businesses to build comprehensive wired, wireless, and VPN networks for one or many locations. They offer high-performance routing and switching power, along with built-in VPN support for secure in-office and inter-office connectivity. To provide enterprise-grade security protection and ensure stable network operation, the GWN7001/7002/7003 features a built-in firewall with advanced content security, filtering, threat detection, attack prevention, and more. To maximize network reliability, they support traffic load balancing, failover (WAN backup), and bandwidth management capabilities. The GWN7001 includes 6 Gigabit Ethernet ports. The GWN7002/GWN7003 include 2x 2.5 Gigabit SFP ports, 4/9 Gigabit Ethernet ports, and 2 PoE output ports that allow them to provide power to other endpoints. These routers can manage themselves and up to 150 Grandstream GWN Series Wi-Fi APs thanks to an embedded controller located in the product’s web user interface. These routers can also be managed with GDMS Networking and GWN Manager, Grandstream’s free cloud and on-premise network management tools. By providing high-performance routing, VPN support, powerful security protection, and easy-to-use network management tools, the GWN Gigabit VPN routers are ideal for a wide variety of deployments, including small-to-medium businesses, retail, education, hospitality, healthcare, and more.

PRODUCT OVERVIEW

Technical Specifications

GWN700x Technical Specifications

INSTALLATION

Before deploying and configuring the GWN700x router, the device must be properly powered on and connected to the network. This section describes detailed information on the installation, connection, and warranty policy of the GWN700x router.

Package Contents

GWN700x Ports

GWN700x ports

Powering and Connecting GWN700x

1. Power the GWN700x

GWN7002/GWN7003 can be powered on using the right PSU (DC 24V, 1A) or PoE (IEEE 802.3af/at).

2. Connect to the Internet

Connect the LAN/WAN or SFP/WAN port to an optical fiber broadband modem, ADSL broadband modem, or community broadband interface.

3. Connect to GWN7002/7003 Network

Connect your computer to one of the LAN ports.

GWN700x installation

• Mounting GWN7001/7002 to the Wall

1. Using a drill, make two holes in the wall with 135.0mm spacing, 6.0mm diameter. Put a plastic anchor and screw (not provided) on each hole.
2. Mount the GWN7001/7002 router on the mounting screws.

• Mounting GWN7003 to the Wall

1. Use the provided screws to fix the two L-shaped Mounting brackets (rotated 90°) on both sides of the GWN7003 router.
2. Stick the router port up and horizontally on the selected wall, and mark the position of the screw hole on the L-shaped mounting brackets with a marker. Then, drill a hole at the marked position with an impact drill, and drill the plastic anchors (prepared by yourself) into the drilled hole in the wall.
3. Use a screwdriver to tighten the screws (prepared by yourself) that have passed through the L-shaped mounting brackets to ensure that the GWN7003 router is firmly installed on the wall.

• Install on a 19” Standard Rack

1. Check the grounding and stability of the rack.
2. Install the two L-shaped rack-mounting accessories on both sides of the router, and fix them with the screws provided.
3. Place the router in a proper position in the rack and support it with the bracket.
4. Fix the L-shaped rack mounting to the guide grooves at both ends of the rack with screws(prepared by yourself) to ensure that the router is stably and horizontally installed on the rack.

• Grounding GWN7003

1. Remove the ground screw from the back of the router, and connect one end of the ground cable to the wiring terminal of the router.
2. Put the ground screw back into the screw hole, and tighten it with a screwdriver.
3. Connect the other end of the ground cable to another device that has been grounded or directly to the terminal of the ground bar in the equipment room.

GETTING STARTED

The GWN700x Multi-WAN Gigabit VPN Routers provide an intuitive web GUI configuration interface for easy management to give users access to all the configurations and options for the GWN700x’s setup.

Use the WEB GUI

Access the WEB GUI

The GWN700x embedded Web server responds to HTTPS GET/POST requests. Embedded HTML pages allow users to configure the device through a Web browser such as Microsoft IE, Mozilla Firefox, or Google Chrome.

To download the App, click on Remote Management (GWN App).

To access the Web GUI:

1. Connect your computer to a LAN port on the GWN700x.
2. Verify that the device is powered on and that both the Power and LAN port LEDs are solid green.
3. Open a web browser and enter the Web GUI URL:
   • https://192.168.80.1 (default IP address)
   • myrouter.grandstream.com
4. Log in with the administrator credentials:
   • Username: admin
   • Password: (printed on the device’s MAC tag)

Once logged in, you will have access to the Web Configuration Menu.

At first boot or after a factory reset, users will be asked to change the default administrator and user passwords before accessing the GWN700x web interface. The password field is case-sensitive with a maximum length of 128 characters. Using strong passwords including letters (both uppercase and lowercase), digits, and special characters is recommended for security purposes.

Once the user enters the password, this is the initial page that will be shown. This page contains general information and status about the router.

Search

To make it easier for the user to find a particular option quickly, the GWN700X web UI has a search feature which can be accessed by clicking on the magnifier icon on the top right corner of the screen and typing the option name.

Setup Wizard and Feedback

Setup Wizard

If the user missed the Setup Wizard at the first boot of GWN700X. It’s accessible all the time at the top of the page, and it contains the necessary settings that the user must configure in 2 steps: first country and time zone, and then Internet Settings.

Click  button to go through the setup wizard.

Feedback

If the user has a question or a suggestion to make the GWN700x product even better or has an issue, they can always send feedback. In case of a problem, it’s better to include Syslog, as it may help solve the problem faster.

After that, click on the corresponding feedback type to get redirected to the help desk.

Web UI Languages

To change the Web UI interface language, in the right corner of the page, click on the username and then click on Language, then select the preferred language as shown below:

Account Settings

On the list, select “Account Settings” to open the settings related to the account

Safe Mode

Safe Mode provides configuration protection and fast rollback to prevent loss of access or service interruption caused by misconfiguration.

When enabled, configuration changes must be applied before the countdown ends; otherwise, the system will automatically roll back to the configuration before enabling Safe Mode.

To set Safe Mode, please follow the steps below.

1. Click on the umbrella icon on the top-right side of the screen.

2. Configure the timer for Safe Mode, then click “Enable”.

3. Once Safe Mode has been enabled, the user can do three actions. Apply, Reset Timer, and Rollback.

• Apply: Use Apply when you want the configuration to take effect permanently. This should be done after the administrator has finished configuring; otherwise, the configuration will be rolled back when the timer elapses.

• Reset Timer: Reset the timer to give yourself more time to finish configuring the device. You can configure the duration of the timer, and please note that the time chosen will not accumulate on top of the remaining time in the timer.

• Rollback: Use Rollback to immediately revert any changes that have been made.

OVERVIEW

Overview Page

Overview is the first page shown after successful login to the GWN700x’s Web Interface. It provides an overall view of the GWN700x’s information presented in a Dashboard style for easy monitoring. Please refer to the figure and table below:

Overview page

Port Info

Port Info page displays an overview of all ports’ status, including the USB Port, Gigabit ports, and SFP ports, indicating the links up with green color and links down with grey color. Furthermore, the user can click on the port icon to get more info about the selected link. Refer to the figure below:

Navigate to Web UI → Overview → Port Info:

System Info

The System Info page shows info related to the GWN700x router, like device name, system version, MAC address, system uptime, CPU and memory usage, temperature, etc.

The router’s System Info can be accessed from the Web GUI → Overview → System Info.

To resynchronize the time and the date set on the router, please use the button .

NETWORK SETTINGS

In this section, the user can find general network settings of the router. These settings include WAN port configuration, general LAN ports configuration, in addition to IGMP protocol configuration, and hardware acceleration settings for the router.

Port Configuration

To access port configuration, please access the user interface of the GWN700X router and then navigate to Network Settings → Port Configuration.

• Port Status

At the top, you can find the status of all the ports of the router.

• Violet color: port speed is 2.5Gbps (works only with SFP ports and 2.5 Gbps SFP modules).
• Green color: port speed is 1Gbps.
• Light green color: port speed is 100Mbps/10Mbps.
• Grey color: link down.
• White color: port disabled.
• Internet icon: port connected to the internet (for WAN ports).

• Port Configuration

The port configuration page allows the user to configure the settings related to all the ports of the router; this includes the gigabit Ethernet ports as well as the SFP ports. The settings that can be edited include flow control, speed, and duplex mode.

PoE Configuration

The Power over Ethernet (PoE) settings allow you to manage power allocation for connected devices. Ensure the power adapter meets the maximum supply requirement to avoid disruptions or device failure.

Key Settings:

• Power Supply Mode: Defines the PoE standard used, such as Active PoE (802.3af/at) or 48V Passive PoE.
• Maximum Power Supply: Specifies the maximum wattage allocated to each port.
• Priority: Determines which port gets priority in case of power limitations.

Power Allocation Considerations:

• If Port 5 requires 9W and Port 6 requires 5.2W, compatible power adapters include:
  • IEEE 802.3at PoE+ Input (≤13W)
  • 24VDC 1A Power Adapter (≤13W)
  • 24VDC 1.5A Power Adapter (≤25W)
  • 24VDC 2A Power Adapter (≤36W)

• If Port 5 requires 9W and Port 6 requires 13W, higher power adapters are necessary:
  • 24VDC 1.5A Power Adapter (≤25W)
  • 24VDC 2A Power Adapter (≤36W)

WAN

The WAN ports can be connected to a DSL modem or a router. WAN port support also sets up static IPv4/IPv6 addresses and configures PPPoE.

On this page, the user can modify the settings for each WAN port and also can delete or even add another WAN. Adding a WAN port will reduce the LAN ports. In the case where there is more than one WAN port, load balancing or backup (Failover) can be configured.

If a GWN router is added to either GDMS Networking or GWN Manager, the WAN Speed Test feature will be available to users. Please check GWN Management Platforms – User Guide (WAN Speed Test).

: Edit WAN interface.

: Delete WAN interface. When you delete a WAN interface, it will turn into a LAN port. Any VPN configuration that was bound to the WAN port will be disabled.

: Renew the IP address of the interface. Clicking this button will trigger the DHCP protocol IP request process. The interface will acquire a new DHCP configuration provided by the DHCP server, updating the IP address, gateway, DNS server(s) information, etc…

: Release the IP address of the interface. Clicking this button sends a DHCP Release message to the DHCP server, actively releasing the currently acquired WAN IP interface and clearing the WAN port’s IP, gateway, and DNS configurations. The WAN port enters a disconnected state and requires a “Renew” operation to re-acquire an IP address before network connectivity can be restored.

Click on to add another WAN port or click on the “edit icon” to edit the previously created ones.

Please refer to the following table for network configuration parameters on the WAN port.

WAN Settings

USB WAN Support

USB WAN is supported in the latest firmware versions. When using a USB dongle for WAN connectivity, please follow the guidelines below to ensure proper operation:

• Recommended Hardware Version:
  Use USB WAN with hardware version V2.0 or later, where the USB port output is 1A (5W).
• Using Hardware Versions Before V2.0A:
  For devices with a USB port output 0.5A (2.5W) (hardware versions before V2.0A), ensure that the connected USB dongle’s power/current requirements are fully met.
• Insufficient Power Cases:
  If the USB dongle requires more power than the USB port can provide, use a powered USB hub to supply additional power and ensure stable operation.

Triple play

Triple Play feature allows the user to benefit from a multi-service plan (depends on ISP provider), and with a single WAN connection, each service, e.g, Internet, Voice (VoIP), and IPTV, can be separated using VLANs and a specific port.

Navigate to Network Settings → WAN → Edit/Add WAN, then scroll down and search for Bridge Mode. Please refer to the figure below:

LAN

To access the LAN configuration page, log in to the GWN700x WebGUI and go to Network Settings → LAN. VLAN configuration, such as adding VLANs or setting up a VLAN port, can be found here on this page, as well as the ability to add Static IP Bindings, local DNS Records, and Bonjour Gateway.

VLAN

GWN700x router integrates VLANs to enhance security and add more functionalities and features. VLAN tags can be used with SSIDs to separate them from the rest. Also, the user can allow these VLANs only on specific LANs for more control and isolation, and they can be used as well with policy routing.

• Add or Edit VLAN

To Add or Edit a VLAN, Navigate to Router Interface → Network Settings → LAN. Click the  button or click the Edit button.

Add/edit VLAN

VLAN Port Settings

The user can use LAN ports to allow only specific VLANs on each LAN port, and in case there is more than one VLAN, then there is an option to choose one VLAN as the default VLAN ID (PVID or Port VLAN Identifier). Click to edit the VLAN Port Settings or click  to delete that configuration and bring back the default settings, which is by default VLAN 1.

Allowed VLANs	Choose the VLANS to be allowed on this port.
PVID	Select the Port VLAN Identifier or the default VLAN ID

DHCP Server

On this page, the administrator can configure the DHCP servers for the different address pools with different configurations.

To create a DHCP server, click button.

Static IP Binding

The user can set static IP binding to devices, in which the IP address will be bound to the MAC address. Any traffic that is received by the router that does not have the corresponding IP address and MAC address combination will not be forwarded.

To configure Static IP Binding, please navigate to Network Settings → LAN → Static IP Binding, refer to the figure and table below:

Static IP Binding

Local DNS Records

Local DNS Records is a feature that allows the user to add DNS records to the router, which can be used to map the domain name to an IP address. This feature can be used when the user needs to access a specific server using a domain name instead of an IP address, when they do not want to include the entry in public DNS servers. To add a local DNS record, please navigate to Network Settings → LAN → Local DNS Records, then click “Add” button.

• Enter the domain name in the “Domain” field.
• Then, enter the IP address to which the domain name will be mapped.
• Toggle on the “Status” for the mapping to take effect.

Bonjour Gateway

The Bonjour service is a zero-configuration network that enables automatic discovery of devices and services on a local network. For example, it can be used on a local network to share printers with Windows® and Apple® devices.

Once enabled, Bonjour services (such as Samba) can be provided to Bonjour-supporting clients under multiple VLANs. Once enabled, configure the services of the VLANs and proxies that need to intercommunicate.

To start using Bonjour Gateway, Toggle ON or OFF the service first, then select the VLAN and the services as shown below:

IGMP

When IGMP Proxy is enabled, the GWN router can issue IGMP messages on behalf of the clients behind it, and then the GWN router will be able to access any multicast group.

To start using IGMP Proxy:

1. Toggle ON IGMP Proxy first.
2. Select the WAN interface to be used from the drop-down list (Note: IGMP Proxy cannot be enabled on a WAN port with bridge mode enabled)
3. Select the version; by default, it is Auto.

The user can also enable IGMP Snooping. Once enabled, multicast traffic will be forwarded to the port belonging to the multicast group member. This configuration will be applied to all LAN ports.

On the IGMP Multicast Group Table, all the active multicast groups will be displayed here.

Network Acceleration

Network acceleration allows the router to transfer data at a higher rate when Hardware acceleration is enabled. This ensures high performance.

CLIENTS

The clients page keeps a list of all the devices and users connected currently or previously to different LAN subnets with details such as the MAC Address, the IP Address, the duration time, and the upload and download information, etc.

The users also have the option to customize this page by adding or removing desired columns. Check the figure below for the available options:

Clients Page

• View Client Information and Report

Click on a device to open the full report of the traffic used by the device. The report will contain the total data uploaded and downloaded, as well as the statistics used by each application on the device.

To see information related to the device, please click on the Device Info tab.

VPN

VPN stands for “Virtual Private Network”, and it encrypts data in real time to establish a protected network connection when using public networks.

VPN allows the GWN700x routers to be connected to a remote VPN server using PPTP, IPSec, L2TP, OpenVPN®, and WireGuard® protocols, or to configure an OpenVPN® server and generate certificates and keys for clients.

GWN700X routers support the following VPN functions:

• PPTP: Client and server
• IPSec: Site-to-site and client-to-site
• OpenVPN®: Client and server
• L2TP: Client
• WireGuard®: Server

For more details on how to configure each VPN protocol separately, please refer to the guides below:

1. OpenVPN®
   • OpenVPN® Site-to-Site Guide
   • OpenVPN® Client-to-Site Guide
2. L2TP
   • L2TP Client Guide
3. PPTP Guide
   • PPTP Client-to-Server Guide
4. WireGuard®
   • WireGuard Site-to-Site Guide
   • WireGuard Client-to-Server Guide
5. IPSec
   • IPSec Site-to-Site Configuration Guide
   • IPSec Client-to-Site Configuration Guide

VPN page can be accessed from the GWN700x Web GUI → VPN.

Setup Wizard

The main purpose of the Setup Wizard is to help users quickly and efficiently configure VPNs like WireGuard®, IPSec, OpenVPN®, PPTP, and L2TP. It allows you to configure VPN connections with minimal manual input by automating most of the necessary steps and parameters. This makes it particularly useful for users who may not be familiar with more advanced networking settings.

• Easy Deployment: The wizard simplifies VPN deployment, supporting various networking scenarios, including both client-to-site and site-to-site connections.
• Predefined Configuration: Users can select from predefined VPN options, such as WireGuard®, IPSec, OpenVPN®, etc., based on their needs. Each type of VPN comes with different available scenes and configurations.

Purpose: The primary goal of this wizard is to make VPN setup faster and easier by automating many of the common settings. This reduces the likelihood of misconfigurations and ensures a smoother setup experience, especially for users who may not have in-depth knowledge of VPN protocols.

Relation to Manual Configuration: It’s important to note that the VPN Setup Wizard mirrors the same configuration process as manually configuring VPNs, but in a more user-friendly way. Advanced users can still manually configure VPNs if needed, but for most users, the wizard offers a more accessible method.

VPN-Type Specific:

The wizard is tailored for each VPN type. For instance:

• WireGuard®: Prioritizes fast, low-latency connections with a simple and secure setup.
• IPSec: Provides robust encryption and secure communication for both site-to-site and client-to-site scenarios.
• OpenVPN®: Allows more customizable security options, such as user-based certificate management and SSL encryption.
• PPTP/L2TP: Legacy protocols are supported for backward compatibility with older devices and systems.

By following this wizard, users can rapidly configure the required VPN connections without needing to navigate complex settings manually, making it an ideal solution for businesses looking to enhance security without complexity.

• WireGuard® Setup Wizard

• IPSec Setup Wizard

• OpenVPN® Setup Wizard

• PPTP Setup Wizard

• L2TP Setup Wizard

WireGuard®

WireGuard® is a free, open-source VPN solution that offers high performance, ease of use, and robust security for encrypting virtual private networks. The GWN700x series routers support WireGuard® VPN with features like automatic client generation and QR code scanning for easy setup on mobile devices and other devices with camera support. WireGuard® can be configured to create Peers for Site-to-Site connections or to establish clients for terminal devices, such as mobile phones and computers.

To start using WireGuard® VPN, please navigate to Web UI → VPN → WireGuard® page. Click on the “Add” button to add a WireGuard® server as shown below:

Please refer to the figure and table below when filling in the fields.

Add/Edit WireGuard®

Once finished configuring WireGuard®, click on the ” Add client” icon to generate clients very quickly and easily, as shown in the figures below:

Enter a name and toggle status ON, then click on the “Save” button.

Now, the user can either download the configuration file and share it, or download a QR code for devices like mobile phones to scan.

For more details, refer to this guide: WireGuard® Site-to-Client.

Peers

On the Peers tab, users can create Site-to-Site connections by clicking the ‘Add‘ button to configure new WireGuard peers.

For more details, refer to this guide: WireGuard® Site-to-Site.

Please refer to the figure below when filling in the fields.

Remote Clients

The Remote Clients tab displays a list of all connected WireGuard® clients. Each client connection is shown with relevant details such as:

• Name: The client’s configured name.
• Enable: Toggle to enable or disable the connection for the client.
• WireGuard®: Displays the WireGuard® instance the client is connected to.
• Last Handshake: Shows when the last successful handshake with the client occurred.
• Actual Endpoint Address : Port: Displays the client’s current IP address and port.

Operations include:

• View connection details.
• Download the client configuration file or QR code.
• Edit or delete the client configuration

To view connected clients, navigate to VPN → WireGuard® → Remote Clients.

The user can download the config file after adding the client.

Or scanning the QR code for devices with camera support.

IPSec

IPSec, or Internet Protocol Security, is mainly used to authenticate and encrypt packets of data sent over the network layer. To accomplish this, they use two security protocols – ESP (Encapsulation Security Payload) and AH (Authentication Header); the former provides both authentication and encryption, whereas the latter provides only authentication for the data packets. Since both authentication and encryption are equally desirable, most of the implementations use ESP.

IPSec supports two different encryption modes; they are Tunnel (default) and Transport mode. Tunnel mode is used to encrypt both payloads as well as the header of an IP packet, which is considered to be more secure. Transport mode is used to encrypt only the payload of an IP packet, which is generally used in gateway or host implementations.

IPSec also involves the IKE (Internet Key Exchange) protocol, which is used to set up the Security Associations (SA). A Security Association establishes a set of shared security parameters between two network entities to provide secure network layer communication. These security parameters may include the cryptographic algorithm and mode, traffic encryption key, and parameters for the network data to be sent over the connection. Currently, there are two IKE versions available – IKEv1 and IKEv2. IKE works in two phases:

Phase 1: ISAKMP operations will be performed after a secure channel is established between two network entities.

Phase 2: Security Associations will be negotiated between two network entities.

IKE operates in three modes for exchanging keying information and establishing security associations – Main, Aggressive, and Quick mode.

• Main mode: is used to establish phase 1 during the key exchange. It uses three two-way exchanges between the initiator and the receiver. In the first exchange, algorithms and hashes are exchanged. In the second exchange, shared keys are generated using the Diffie-Hellman exchange. In the last exchange, verification of each other’s identities takes place.

• Aggressive mode: provides the same service as the main mode, but it uses two exchanges instead of three. It does not provide identity protection, which makes it vulnerable to hackers. The main mode is more secure than this.

• Quick mode: After establishing a secure channel using either the main mode or aggressive mode, the quick mode can be used to negotiate general IPsec security services and generate newly keyed material. They are always encrypted under a secure channel and use the hash payload that is used to authenticate the rest of the packet.

IPSec Site-to-Site

To build an IPSec secure tunnel between two sites located in two distant geographical locations, we can use the sample scenario below:

The branch office router needs to connect to the Headquarters office via an IPSec tunnel; on each side, we have a GWN700x router. Users can configure the two devices as follows:

The branch office router runs a LAN subnet 192.168.1.0/24, and the HQ router runs a LAN subnet 192.168.3.0. The public IP of the branch office router is 1.1.1.1, and the IP of the HQ router is 2.2.2.2.

Go under VPN → IPSec → Site-to-Site, then click on to add a VPN Client.

○ Phase 1

○ Phase 2

After this is done, press “Save” and do the same for the HQ Router. The two routers will build the tunnel and the necessary routing information to route traffic through the tunnel back and from the branch office to the HQ network.

• Create the remote user credentials:

To create the remote user account which will be required to be entered on the client side and authenticated on the server side, please refer to the Remote Users section.

IPSec Client-to-Site

Go under VPN → IPSec → Client-to-Site, then fill in the following information:

OpenVPN®

OpenVPN®is a virtual private network solution that offers a secure connection to a distant host. VPN provides the possibility to reach hosts that are located on a local area network and be logically located in that same local area network, hence the name Virtual Private Network. The connection between the client and the server is authenticated using a username and password or/and TLS encryption.

Typically, users can set up a client-to-server connection, the client being a computer, and the server being a GWN router or a GCC device. The user can also set up a site-to-site VPN connection using OpenVPN® to interconnect two sites securely. In the following sections, you can find an explanation for all the configuration fields for OpenVPN®.

OpenVPN® Client

There are two ways to use the GWN700x as an OpenVPN® client:

1. Upload the client certificate created from an OpenVPN® server to GWN700x.

2. Create client/server certificates on GWN700x and upload the server certificate to the OpenVPN® server.

Go to Go to VPN → OpenVPN® → OpenVPN® Clients and follow the steps below:

Click on button. The following window will pop up.

Clickafter completing all the fields.

OpenVPN® Client

OpenVPN® Server

To use the GWN700x as an OpenVPN® server, you will need to start creating OpenVPN® certificates and remote users.

To create a new VPN server, navigate to Web UI → VPN → OpenVPN® page → OpenVPN® Servers tab.

Clickafter completing all the fields.

Refer to the table below:

Create OpenVPN® Server

• Create the remote user credentials:

To create the remote user account which will be required to be entered on the client side and authenticated on the server side, please refer to the Remote Users section.

PPTP

A data-link layer protocol for wide area networks (WANs) based on the Point-to-Point Protocol (PPP) and developed by Microsoft, enables network traffic to be encapsulated and routed over an unsecured public network such as the Internet. Point-to-Point Tunneling Protocol (PPTP) allows the creation of virtual private networks (VPNs), which tunnel TCP/IP traffic through the Internet.

PPTP Clients

To configure the PPTP client on the GWN700x, navigate under VPN → PPTP → PPTP Clients and set the following:

1. Click on the “Add” button.

The following window will pop up.

PPTP Client Configuration

PPTP Servers

To add a PPTP Server, please navigate to Web UI → VPN → PPTP page → PPTP Servers tab, then click on the “Add” button.

PPTP Server

• Create the remote user credentials:

To create the remote user account, which will be required to be entered on the client side and authenticated on the server side, please refer to the Remote Users section.

To view the clients connected to this server, click on the “Client List” icon as shown below:

L2TP

To configure the L2TP client on the GWN700x router, navigate under “VPN → VPN Clients” and set the following:

1. Click on thebutton, and the following window will pop up.

L2TP Client Configuration

Clickafter completing all the fields.

Remote Users

To create the VPN user accounts, please navigate to VPN → Remote Users, then click “Add“. The account configured will be used for the client to authenticate into the VPN server. The remote client user that can be created in this section is for PPTP, IPSec, and OpenVPN.

If the remote user is using OpenVPN®, the configuration file can be exported as an .ovpn file. This file can then be modified as needed to fit the user’s requirements.

Add VPN Remote Users

To authenticate a remote user into the VPN server successfully, the username and password are used alongside the client certificate. To create a client certificate, please refer to the Certificates section.

To configure the VPN clients for each VPN server type, please refer to the respective VPN client configuration above.

ROUTING

Routing Table

The Routing Table page displays the routes currently configured on your Grandstream device. It shows key information such as the IP address, protocol type, outgoing interface, next hop, administrative distance, and the metric for each route.

You can toggle between IPv4 Routing Table and IPv6 Routing Table using the tabs at the top of the page. Additionally, you can filter routes based on outgoing interfaces or search for a specific next hop.

• IP Address: The destination network or IP address.
• Protocol Type: Indicates the type of routing (e.g., Direct, Static, VPN).
• Outgoing Interface: The network interface used for routing traffic to the destination.
• Next Hop: The IP address of the next device in the routing path.
• Administrative Distance: The trustworthiness of the route.
• Metric: Determines the best route based on number of hops, bandwidth, latency, and reliability. A lower metric indicates higher priority. The range to define can be between 1 and 254, and the default value is 60.

To view the routing table, navigate to Routing → Routing Table.

• IPv4 Routing Table

• IPv6 Routing Table

Policy Routes

The Policy Routes feature on the GWN700X series allows network administrators to create advanced routing rules to efficiently manage traffic across multiple WAN interfaces. This feature supports three modes: Load Balancing, Backup, and Standby. Each mode serves a unique purpose to enhance network performance, ensure uninterrupted connectivity, and provide granular control over traffic distribution. These policies can be applied to specific VLANs for tailored traffic management.

Policy Pool

To create a policy pool rule, follow these steps:

1. Navigate to Routing → Policy Routes in the web interface.
2. Open the Policy Pool tab.
3. Click the Add button to create a new rule.
4. Select the desired mode:

• Load Balance: distributes traffic based on predefined weights, ensuring proportional allocation aligned with actual bandwidth capacity.
• Backup: switches to an alternate interface if the primary fails. Traffic can be proportionally allocated between preferred and backup interfaces using load-balancing weights, ensuring continuous network availability.
• Standby: activates the standby interface only if the preferred one fails, ensuring uninterrupted network connectivity.

5. Select a Balancing Strategy:

• Connection-Based (Default): distributes traffic evenly across all links.
• Source IP Address: distributes traffic based on the source IP, ensuring each IP consistently uses the same interface, minimizing network issues.
• Source & Destination IP Addresses: distributes traffic based on both source and destination IPs, ensuring each IP pair consistently uses the same interface.

6. Assign the Preferred Interface(s) and configure their Weight values (1–10).

7. (Optional) Assign Alternate Interface(s) for Backup mode or Standby Interface for Standby mode.

8. Save the configuration.

Key Details:

• You can configure these routes with either WAN or VPN interfaces.
• Once created, a policy pool can be applied to specific VLANs, enabling precise traffic management per VLAN.

Load Balance Mode

• Purpose: Distribute traffic evenly or proportionally across multiple WAN interfaces based on bandwidth capacity or network requirements.
• How It Works:
  • Configure weights for each WAN interface. For instance, if two WAN ports have weights of 1 and 2, traffic will be divided in a 1:2 ratio. Similarly, setting weights to 1 and 1 will evenly distribute traffic in a 1:1 ratio across both WAN interfaces.
  • Suitable for scenarios where bandwidth optimization and redundancy are required.
• Advantages:
  • Efficiently uses all available bandwidth.
  • Provides redundancy across multiple WAN connections.

Backup Mode

• Purpose: Provide failover support by routing traffic to alternate interfaces when all preferred WAN interfaces fail.
• How It Works:
  • In backup mode, the backup interfaces remain active and ready to handle traffic if a failure is detected on all preferred interfaces. However, the alternate interfaces only become active when all preferred interfaces are down. Once activated, traffic is distributed across the alternate interfaces based on their assigned weights.
  • The status of the interfaces is monitored using ICMP replies to a tracking IP, which determines when the interface is up or down. For more details, refer to the WAN section. If the preferred interfaces come back online, traffic will revert to the primary interface after five consecutive tracking intervals (typically 60 seconds).
• Key Features:
  • Backup interfaces are always active.
  • Traffic can be distributed proportionally between preferred and backup interfaces if weights are configured.

Standby Mode

• Purpose: maintain a single standby interface, which is only activated when all the primary interfaces fail. This is especially useful in cases like PPPoE authentication conflicts, where multiple active sessions can cause issues.
• How It Works:
  • The standby interface remains inactive until all preferred (primary) interfaces fail. A Tracking IP Address (such as 1.1.1.1 or 8.8.8.8) is configured to monitor the status of the primary interface. The router pings this IP to check if the primary interface is up or down. If the pings fail continuously, the router switches to the standby interface.
  • For PPPoE, authentication occurs only when the standby interface is activated, preventing simultaneous session conflicts.
  • Failback occurs when the primary interface recovers, after five consecutive successful tracking intervals (typically 60 seconds) where the router pings a configured Tracking IP Address to check if the interface is back online. For PPPoE, failback may take up to 400 seconds due to session lock delays and the time required for PPPoE authentication to complete.
• Key Features:
  • Standby interface remains inactive to conserve resources, activating only when needed.
  • Resolves PPPoE authentication conflicts when the same account is configured across multiple WAN ports.
  • Ensures smooth failback after the primary interface recovers, with an extended failback period for PPPoE sessions.

Comparison Table

Feature/Mode	Load Balancing	Backup Mode	Standby Mode
Purpose	Distribute traffic across multiple interfaces.	Failover with active backup.	Failover with inactive standby.
Traffic Behavior	Balanced based on weights (Ratio).	When all preferred interfaces fail or become unavailable, the alternate interfaces will automatically take over. Traffic will be distributed proportionally between the alternate interfaces based on their configured weights, ensuring seamless failover	Activate the standby interface only when all preferred interfaces have failed.
Resource Usage	Utilizes all interfaces actively.	Backup interfaces are always active, and more than one interface can be configured as a backup.	The standby interface remains inactive, and only one interface can be designated as standby.

Policy Route

On the second tab (Policy Routes), the user can specify which Networks (VLANs) can use which Load Balance rule (must be created first), also the user can specify the protocol type, source, and destination IP, and even assign a schedule for it.

To create a Policy Route, please navigate to Routing → Policy Routes page → Policy Routes tab, then click on the “Add” button to click on the “edit icon” to edit as shown below:

Static Routes

Static routing allows administrators to manually define routing paths instead of relying on dynamic routing protocols. This method is ideal for services requiring a consistent, unchanging route.

The GWN700x supports manual configuration of both IPv4 and IPv6 static routes, accessible through the Web GUI by navigating to Routing → Static Routes.

• IPv4 Static Routes

To add a new static route, click on the Add button and complete the necessary fields as described.

• IPv6 Static Routes

To add a new static route, click on the Add button and complete the necessary fields as described.

Open Shortest Path First (OSPF)

Open Shortest Path First (OSPF) is a dynamic routing protocol used in IP networks to determine the best path for data packets across the network. In Grandstream GWN routers, OSPF allows for efficient routing across large and complex networks by exchanging routing information between routers, ensuring each router knows the optimal path to various network destinations.

The GWN routers support a robust OSPF configuration to provide flexibility, security, and scalability for enterprise-level networks. OSPF is designed to work within an Autonomous System (AS), ensuring fast convergence and optimal routing decisions based on link state information.

To view or configure OSPF settings, navigate to Routing → OSPF.

Global Settings

The Global Settings tab contains important configurations to enable and fine-tune OSPF on your Grandstream GWN router. Some of the key options on this page include:

• Router ID: This field defines a unique IPv4 address that identifies your router within the OSPF network. It must be set for the router to participate in OSPF.
• Always Advertise Default Route: This toggle ensures that the router always advertises the default route (0.0.0.0/0) to other routers in the OSPF network, designating it as a gateway.
• Metric: The metric determines the cost of a route in OSPF. Lower values indicate a more preferred route, guiding the OSPF protocol in route selection.
• Metric Type: You can choose between:
  • Type 1: Considers both the OSPF metric and other route costs.
  • Type 2: Considers only the OSPF metric, typically used for external routes.
• External Route Import: This section allows you to import routes from other routing protocols, such as Direct, Static, RIP, and BGP, giving you flexibility when integrating with different network setups.

Interface Settings

In this section, users can view, add, or modify OSPF configurations for each interface on the device. The interface settings allow fine-tuning of OSPF behavior by defining key parameters like intervals for OSPF hello packets, authentication types, and the cost metric for each interface.

To navigate: Routing → OSPF → Interface Settings

To add a new OSPF interface, they can click on the Add button. To edit an existing interface, click on the Edit icon next to the interface. Refer to the images for a visual guide.

Key Configurations:

• Name: A customizable label for the interface.
• Enable: Toggle to enable or disable OSPF for this interface.
• Interface: Select the specific interface (e.g., VLAN) where OSPF should run.
• Area ID: Identifies the OSPF area the interface belongs to (default: 0.0.0.0 for backbone).
• Hello Interval (Sec): The interval between OSPF Hello packets to maintain neighbor relationships (default: 10 seconds).
• Dead Interval (Sec): The interval after which a neighbor is considered down if no Hello packet is received (default: 40 seconds).
• Cost: Determines the OSPF route cost; a lower cost means that the route has a higher priority.
• Priority: Controls the interface’s eligibility to become the Designated Router (DR).
• Authentication Type: Choose between No Authentication, Simple Password, or MD5 Authentication for OSPF packets.

These configurations help ensure optimal routing behavior and secure communication between OSPF-enabled devices.

Area Settings

The OSPF Area Settings tab allows users to configure OSPF areas to optimize routing and control traffic within different network zones. This section is essential for network segmentation and ensuring efficient routing within the Open Shortest Path First (OSPF) protocol in Grandstream GWN routers. OSPF divides networks into multiple areas to decrease routing overhead and enhance scalability.

To navigate to this page, go to Routing → OSPF → Area Settings.

To Add or Edit an Area:

• Click the Add button to create a new area.
• Click the Edit icon next to an existing area to modify its configuration.

Key Configurations in Area Settings:

• Area ID: A unique identifier for the OSPF area, defined in IPv4 format or an integer.
• Area Type: Options include:
  • None: No special designation for the area.
  • Stub: Restricts external route advertisements to minimize routing overhead.
  • NSSA (Not-So-Stubby Area): Balances between a stub and full OSPF area by allowing specific external routes.
• No Summary: Prevents summarized routes from being sent into the area, promoting more specific routing information.
• Conversion Type: Manages area type conversions:
  • Never: Disables conversion.
  • Always: Enables automatic conversion.

Neighbor Info

The Neighbor Info tab provides a summary of neighboring OSPF routers that have formed adjacencies with your Grandstream GWN router. This feature helps monitor OSPF neighbor relationships and troubleshoot connectivity between routers in a network running OSPF.

To view this information, navigate to Routing → OSPF → Neighbor Info.

Key Parameters Displayed in Neighbor Info:

• Neighbor ID: The unique identifier of the neighboring router.
• Priority: Indicates the priority value of the neighbor, which helps in determining the designated router (DR) and backup designated router (BDR).
• Status: Shows the current state of the OSPF neighbor (e.g., Full, Init, 2-Way).
• Dead Time: The countdown before the neighbor is considered down, based on the Hello interval.
• Neighbor Address: The IP address of the neighbor.
• Interface: The interface on your router that is communicating with the neighbor.
• Uptime: The amount of time the OSPF neighbor relationship has been established.

This tab helps monitor OSPF relationships in real-time and identify potential routing issues.

RIP

Routing Information Protocol (RIP) is a distance-vector routing protocol used by routers to exchange routing information within a local network or across networks. In Grandstream GWN routers, RIP allows the configuration of both RIP Version 1 (RIPv1) and RIP Version 2 (RIPv2) to determine how routers communicate route information, maintain updated routing tables, and ensure efficient network management.

The RIP section is divided into four main tabs:

1. Global Settings
2. Interface Settings
3. Route Advertisement
4. Neighbor Info

Each tab provides specific configurations for setting up and managing RIP routing on your network.

RIP – Global Settings

The Global Settings tab is where the general RIP configuration is defined. You can enable RIP, choose the RIP version, and configure important parameters such as RIP Distance, Timers, and External Route Import options.

To navigate to this section: Go to Routing → RIP → Global Settings.

• RIP: Toggle to enable or disable RIP on the router.
• RIP Version:
  • RIPv1: Basic, classful routing protocol, no subnet information.
  • RIPv2: Classless routing protocol with subnet and route tags support.
• RIP Distance: Specifies the administrative distance for RIP routes, which helps in determining the reliability of the route (default is 120).
• Always Advertise Default Route: When enabled, the router will always advertise a default route to other routers.

Timer Configuration:

• Update Timer: The interval (in seconds) between route update messages.
• Invalid Timer: The duration (in seconds) after which a route is considered invalid if no update has been received.
• Garbage Collection Timer: The time after which an invalid route is removed from the routing table.

External Route Import:

You can configure the router to import external routes from the following sources:

• Direct Routes
• Static Routes
• OSPF Routes
• BGP Routes

For each protocol type, you can configure the metric values that affect the priority of the route.

RIP – Interface Settings

The RIP Interface Settings tab allows users to configure RIP interfaces on the GWN router. It displays a list of interfaces that can participate in the RIP routing protocol. Users can manage settings like the RIP version used for transmitting and receiving, authentication types, and other advanced options for RIP routing.

To add an interface, click the Add button, or to edit an interface, click the edit icon. See the provided images for visual guidance.

Key Parameters:

• Interface: Specifies the interface that RIP will run on (e.g., VLAN, physical interface).
• RIP Tx Version / RIP Rx Version: Select the RIP version for transmitting and receiving routes.
• RIPv2 Broadcast: Enable/disable broadcasting RIP version 2 messages.
• Interface Suppression: Suppresses sending RIP updates on the interface.
• Loop Protection: Protects from routing loops using the Split Horizon method.
• Authentication Type: Choose the type of authentication for RIP (e.g., MD5).
• Secret: Authentication key (password) for MD5 or simple authentication.

RIP – Route Advertisement

The Route Advertisement tab in the RIP section allows users to define specific routes that need to be advertised to other routers in the network. This is essential for controlling which sub-networks are shared across the RIP protocol. Proper route advertisement ensures efficient routing and network management by determining what parts of the network can be reached through the RIP-enabled router.

Navigation: To view or modify Route Advertisement settings, navigate to Routing → RIP → Route Advertisement.

Key Features in the Route Advertisement Tab:

• Subnet Address / Mask Length: Displays the list of subnets being advertised along with their corresponding subnet mask lengths.
• Add Route Advertisement: This feature allows users to add one or more subnets to advertise across the network. When adding, users need to provide both the Subnet Address and the Mask Length (e.g., /24 for Class C networks).
• Operations: Each route entry has options to edit or delete the advertisement.

If the user wishes to add a new route advertisement, they can click on the Add button and provide the required subnet address and mask length. Once configured, these routes will be shared across the network via RIP.

RIP – Neighbor Info

The Neighbor Info tab in the RIP configuration provides details about the neighboring RIP routers that communicate with the router to exchange routing information. This tab displays crucial information regarding the neighbors, which helps in managing and troubleshooting RIP routing within the network.

Navigation: To view RIP neighbor details, navigate to Routing → RIP → Neighbor Info.

Key Information Displayed:

• Interface: The network interface that is communicating with the neighbor router.
• RIP Version Info: Displays the version of RIP used by the neighbor router.
• Default Distance: Indicates the default administrative distance for the neighbor.
• Neighbor Address: The IP address of the neighboring RIP router.
• Update Time: The last time an update was received from the neighboring router.

Border Gateway Protocol (BGP)

The Border Gateway Protocol (BGP) is a key exterior gateway routing protocol used to exchange routing information between different autonomous systems (AS) over the Internet. BGP plays a critical role in determining the best path for data packets as they travel across various networks. On Grandstream GWN routers, BGP is configured under the Routing section, offering a powerful solution for network administrators to control traffic between different AS networks.

To configure BGP on Grandstream routers, navigate to Routing → BGP.

BGP – Global Settings

The Global Settings tab in BGP configuration allows the user to define the general BGP parameters essential for the protocol’s operation.

Key Parameters:

• AS (Autonomous System): The AS number identifies the autonomous system to which the router belongs. It is a required value with a valid range from 1 to 4,294,967,295.
• Router ID: A unique identifier in IPv4 format for the router. The router ID is required and helps identify this router in the BGP network.

External Route Import:

• This section allows users to configure which route types (Direct, Static, OSPF, and RIP) can be imported into the BGP routing table.
• Protocol Type: You can check the boxes for the route types to import, and set their respective route metrics, which determine the preference for routes. Lower metric value indicates a higher route preference/priority.

BGP – Peer

In the BGP (Border Gateway Protocol) Peer tab, users can view, add, or edit BGP peers that are configured on the router. A BGP peer is a neighboring router with which routing information is exchanged. Peers are established through their IP address and ASN (Autonomous System Number).

To add or modify a BGP peer:

• Click on the Add button to create a new peer.
• To modify an existing peer, click the Edit icon next to the peer you want to change.

Key configurable fields in this tab include:

• Remote AS: The Autonomous System Number of the remote peer.
• Remote Address: The IP address of the remote BGP peer.
• Connection Hold Time: The maximum amount of time to hold a BGP connection without receiving a keepalive message.
• Connect Retry Time: The interval to retry establishing a BGP connection.
• Keepalive Time: The frequency of sending keep-alive messages to ensure the peer is active.
• MD5 Authentication: Optional security for BGP connections using an MD5 password for session authentication.

BGP – Route Advertisement

The Route Advertisement tab allows users to manage BGP-advertised routes by adding or removing specific subnets. Here, you can define which networks are advertised to BGP peers.

To add or modify an advertised route, click Add or the Edit icon. The configuration will prompt you to enter the subnet address and mask length, then click Save.

Key configurable fields in this tab include:

Subnet Address / Mask Length: Specify the network’s IP address and the corresponding subnet mask length (e.g., 10.0.0.0 / 24).

BGP – Peer Info

The Peer Info tab in the BGP section provides details on the active BGP peers. Here, users can monitor the status and connection of their BGP peers to ensure proper route exchange.

• BGP Version Info: Shows the BGP protocol version in use, typically version 4.
• Peer Address: Displays the IP address of the BGP peer.
• Peer AS: Shows the Autonomous System (AS) number of the peer.
• Status:
  • Established: Indicates a fully functional BGP connection where routes are being successfully exchanged between peers. This state confirms that the BGP connection is active and stable.
  • Active: Shows the BGP connection is active but may not have fully exchanged routes.
• Uptime: Tracks how long the peer connection has been established and active.

You can click the Refresh button to update the status of the peers. This allows users to verify quickly if their BGP peers are properly connected and whether routes are being exchanged as expected.

Administrative Distance

In this page, the user can configure the default administrative distance value for each type of route. This feature determines the path selection when receiving traffic and deciding the most adequate route. It helps also distinguish the routes reliability in case there is a conflict of multiple routes (multiple routes leading to the same destination).

TRAFFIC MANAGEMENT

Traffic Management – Basic Settings

The GWN700x routers are capable of identifying and analyzing the traffic exchanged between the intranet clients and remote hosts located on the Internet. To enable this feature please navigate to the GUI of the router, then click on Traffic Management → Basic Settings and toggle on “Traffic Identification”.

Traffic Statistics

When “Traffic Identification” is enabled, the router will start identifying the traffic and generate statistics. The statistics will be represented graphically as shown in the screenshot below. The feature displays the name and the type of the service generating the traffic to easily identify which services are being used and which clients are using them.

QoS

Quality of Service (QoS) is a feature that allows the prioritization if the latency-sensitive traffic exchanged between the WAN and the LAN hosts. This will offer more control over the usage of a limited bandwidth and ensures that all application services are not affected by the amount of the traffic exchanged.

General Settings – QoS

On this page, the user will be able to allocate a percentage of the download and the upload bandwidth to 4 classes. These classes can be assigned to applications to determine which application traffic will be prioritized, this includes the inbound and the outbound traffic. Also, it’s possible to tag outbound traffic with DSCP tags for each class.

To set Upload/Download bandwidth percentage for each class, click on edit button .

Edit Bandwidth limit

Click on bandwidth statistics icon to get a general overview for upload/download bandwidth status.

APP Class

GWN700X routers can prioritize the traffic of each application individually. The priority level can be set in 4 classes, class 1 having the highest priority and class 4 having the lowest priority. To access APP Class settings, please access the web GUI of the router then navigate to Traffic Management → QoS → APP Class.

The user can either set the priority for the individual applications by selecting the priority of the corresponding applications.

Or, the use can select the applications and application categories and then click “Configure Classes” then choose the adequate priority.

QoS Rules

QoS class rules are rules which sets the QoS based on source or/and destination IP addresses, and source and destination ports.

QoS – Add Class Rules

VoIP Settings

VoIP Settings in QoS allow the user to identify and prioritize the VoIP traffic that is forwarded by the router. To configure this option, please access the web UI of the GWN router and navigate to Traffic Management → QoS → VoIP Settings, then toggle on the “VoIP Prioritization”, after that specify the SIP UDP port, by default the port number is 5060.

Bandwidth Limit

Bandwidth limit feature helps to limit bandwidth by specifying the maximum upload and download limit, then this limit can be applied on each IP/MAC address or applied on all IP addresses in the IP address range. Navigate to Web UI → Traffic Management → Bandwidth Limit.

To add a bandwidth rule, please click on “Add” button or click on “Edit” icon as shown above.

Please refer to the figure below:

AP MANAGEMENT

GWN700X routers come with an embedded controller for the GWN access points. The user can configure all the Wi-Fi related settings through the controller. When the APs are connected to the router, and they are paired with it, they will automatically inherit the configuration which has been set on the router’s AP Management section.

Access Points

In this section, the user can add the access point which can be controlled using the embedded controller within the router. The user can either pair or takeover an access point in order to be able to configure it. The configuration performed on the router AP embedded controller will be pushed to the access points; thus, offering a centralized management of the GWN access points.

To add a GWN access point to the GWN router, please navigate to Web UI → AP Management → Access Points.

Pair AP: Use this button when pairing an AP which has not be set as a master.
Takeover AP: Use this button to take over an access point which has formerly been set as slave to a different master device. In order to pair the devices successfully, the network administrator must enter the password of the master device.

Click on a paired GWN AP to view Details, Client list and debug tools. Please refer to the figures below:

Details section contains details about the paired AP like firmware version, SSID, IP address, Temperature, etc.

Client List section lists all the connected clients trough this AP with many info like MAC Address, Device name, IP Address, bandwidth, etc.

Debug section provides the users with many debug tools to help diagnostics any issue like Ping/Traceroute, One-click Debug and SSH Remote Access.

Transfer APs to GDMS Networking/GWN Manager

GWN routers also enables to users to transfer their paired GWN APs to GDMS Networking/GWN Manager.

On the AP Management → Access Points page, select the AP or APs then click on “Transfer” button as shown below:

On the next page, select either GDMS Networking or GWN Manager then click “Save” button. the user will be forwarded automatically to either GDMS Networking or GWN Manager to login.

SSIDs

In this page, the user can configure SSID settings. The Wi-Fi SSID will be broadcasted by the paired access points. This offers a centralized control over the SSIDs created which makes managing many GWN access points easier and more convenient.

In order to add an SSID, the user should click on “Add” button, then the following page will appear:

Add SSID

Private Pre-Shared Key (PPSK)

PPSK (Private Pre-Shared Key) is a way of creating Wi-Fi passwords per group of clients instead of using one single password for all clients. When configuring PPSK, the user can specify the Wi-Fi password, maximum number of access clients, maximum upload and download bandwidth.

To start using PPSK, please follow the steps below:

1. First, create an SSID with WPA key mode set to either PPSK without RADIUS or PPSK with RADIUS.
2. Navigate to Web UI → AP Management → PPSK page, then click on “Add” button then fill in the fields as shown below:

It’s also possible to import PPSK data, first, download the provided CSV template to ensure the correct format. Open the file in a spreadsheet editor like Excel and fill in the required fields, including the account name, Wi-Fi pre-shared key, maximum access number, MAC address, upload and download limits, VLAN ID, SSID, and description. Once the data is entered correctly, save the file and upload it using the import function. Make sure the format matches the template to avoid errors during the import process.

Add PPSK

Radio

Under AP Managements → Radio, the user will be able to set the general wireless settings for all the Wi-Fi SSIDs created by the router. These settings will take effect on the level of the access points which are paired with the router.

Radio

Mesh

Through the controller embedded in the GWN700X routers, the user can configure a Wi-Fi Mesh using the GWN access points. The configuration is centralized and the user can view the topology of the Mesh.

• Configuration:

To configure GWN access points in a Mesh network successfully, the user must pair the access points first with the GWN router, then configure the same SSID on the access points. Once that’s done, the user should navigate to AP Management → Mesh → Configure, then enable Mesh and configure the related information as shown in the figure below.

For more information about the parameters that need to be configured, please refer to the table below.

Mesh Configuration

• Topology:

In this page, the user will be able to see the topology of the GWN access points when they are configured in a Mesh network. The page will display information related to the APs like the MAC address, RSSI, Channel, IP Address, and Clients. It will show as well the cascades in the Mesh.

Switch Management

The Switch Management feature allows administrators to monitor, configure, and manage multiple switches through the GWN router interface. With this feature, users can easily add switches to the management platform, take control of their configurations, upgrade firmware, and view performance metrics.

Key Features:

• Switch Discovery: Automatically discover available switches connected to the network for easy management.
• Take over Device: Add and take over switches for centralized management, allowing you to configure and monitor them directly from the GWN interface.
• Upgrade, Reboot, and Export: Perform administrative tasks like upgrading switch firmware, rebooting devices, and exporting a list of managed switches.
• Detailed Monitoring: View performance metrics, such as traffic statistics and PoE port details, for each switch.
• Comprehensive Configuration: Global switch settings and individual port configurations are available, enabling you to fine-tune your network based on specific needs.

This feature streamlines network management by providing a unified platform to control all switches in the environment, enhancing visibility, and reducing the complexity of managing multiple devices.

Switches

Take over Device (add switch)

• Take over a switch

To manage a switch for the first time in your GWN network, follow these steps to “take over” and configure it.

Steps to Take over a Switch:

1. Navigate to: Switch Management → Switches. This will bring you to the Switches table. If no devices have been added yet, you will see a prompt stating “No data. Please select at least one device to manage.”

2. Discover Available Switches:
   Click on the Take over Device button. A new window will open showing all the switches in your network that are available for management. For each switch, you’ll see:
   • Device Model
   • MAC Address
   • IP Address (IPv4/IPv6)
   • Firmware Version
     If the firmware version is outdated, an upgrade may be required before taking over the switch.

3. Select the Switch:
   Tick the checkbox next to the switch you want to take over. You can select multiple switches if desired. Click Save once your selection is made.

4. Enter the Login Password:
   For security, a password prompt will appear. Enter the Login Password of the switch to confirm and complete the takeover.

5. Confirm the Takeover:
   A confirmation dialog will appear indicating that the global configuration from the GWN router will be adopted on the switch. Click OK to proceed.

6. Review the Managed Switches:
   Once successfully added, the switch will appear in the Switches table with the following details:
   • Device Model
   • MAC Address
   • Device Name
   • IP Address
   • Firmware Version
   • System Up Time
     You will also see a status for how many switches are Online and Offline.

• Delete (Remove) a switch

To remove a switch from the GWN router:

1. Navigate to: Switch Management → Switches.
2. Delete a Single Switch: in the Operations column of the Switches table, click the Delete icon next to the switch you wish to remove.

3. Delete Multiple Switches: alternatively, select multiple switches by checking the boxes next to their names, then click the Delete button at the top of the table.

4. Confirmation: confirm the deletion in the prompt that appears.

Upgrade, Reboot and Export

• Upgrade switches

1. Navigate to: Switch Management → Switches.
2. In the Switches table, select the switches you want to upgrade by checking the boxes.
3. Click Upgrade.
4. A prompt will appear: “Send request to the selected device successfully, and the device will attempt to upgrade.”
   • Note: Do not disconnect the network or power supply during the upgrade process.
5. Click Send to initiate the upgrade.

• Reboot switch

1. Navigate to: Switch Management → Switches.
2. In the Switches table, identify the switch you want to reboot.
3. Click the Reboot icon (power symbol) located under the Operations column.
4. A confirmation message will appear asking: “Confirm to restart this device?”
5. Click Reboot to restart the switch.

• Export switches list

1. Navigate to: Switch Management → Switches.
2. In the Switches table, click the Export button located at the top-right corner.
3. The switch list will be downloaded as an Excel (.xls) file, containing details such as Device Model, MAC Address, IP Address, Firmware Version, and System Up Time.

Switch Details

• Performance

• Info

• Port

The Port Configuration page enables you to manage and fine-tune the behavior of each port. You can adjust network settings, security controls, VLAN profiles, and more for each individual port. This helps tailor each port’s function to the specific needs of your network.

Port Details

• Port Enable/Disable: Switches the port on or off.
• Description: Option to label the port for easier management.
• Link Aggregation (LAG): Assigns the port to a LAG group to increase throughput or redundancy.
• Port Profile: Selects from existing VLAN profiles or allows profile override for custom configurations.
• Port Mirroring: Mirrors traffic from one port to another for monitoring.
• Trust DHCP Snooping: Improves DHCP security by only allowing trusted DHCP traffic.

Port Profile Override This section allows custom configuration when the default port profile doesn’t fit the requirements.

• Native VLAN: Specifies the VLAN for untagged traffic.
• Allowed VLAN: Defines which VLANs are permitted to pass through.
• Voice VLAN: Prioritizes voice traffic for QoS (Quality of Service).
• Speed Settings: Options include Auto-Negotiation, Full-Duplex, Half-Duplex, and more.
• Flow Control: Determines whether the port will use flow control to manage traffic congestion.

Security Options

• Storm Control:
  • Prevents traffic floods (e.g., broadcast, multicast storms) that can degrade network performance by limiting the number of broadcast or multicast packets allowed.
• Port Isolation:
  • Restricts communication between devices on the same switch. When enabled, the port can only communicate with uplink ports and is isolated from other local ports for improved security.
• Port Security:
  • This feature limits the number of MAC addresses allowed on a port, preventing unauthorized devices from connecting.
• 802.1X Authentication:
  • Provides network access control by authenticating devices attempting to connect to the network via this port. Commonly used in environments where device identity and security are important, such as enterprise networks.

• Debug

For the Debug function there are two primary functions:

1. Ping/Traceroute:
   • Select a diagnostic tool from the dropdown menu:
     • IPv4 Ping
     • IPv6 Ping
     • IPv4 Traceroute
     • IPv6 Traceroute
   • Enter the target IP address or hostname.
   • Click Start to initiate the diagnostic.
   • The diagnostic results will display packet transmission details, round-trip times, and packet loss, as shown.

2. SSH Remote Access:
   • Enter the SSH password to start remote access.
   • A notification will confirm the remote session, which will terminate automatically after 48 hours.
   • To manually end the session, click Stop SSH Remote Access.

Switch Configuration

In this section, you can configure the switch details, manage VLAN interfaces, and set up RADIUS authentication.

Access the Configuration Page:
In the Switch Management → Switches screen, click the Configuration icon next to the desired switch.

Edit Switch Details:
The Switches → Edit page (as seen in the second image) allows you to configure:

• Device Name and Remarks
• Device Password
• RADIUS Authentication: You can choose to use the Switch Global Configuration or define a custom RADIUS setting by selecting from the dropdown or adding a new one by clicking Add RADIUS Authentication.

Manage VLAN Interfaces:
Scroll to the VLAN Interface section where you can:

• Add a VLAN by clicking the Add button.
• Edit existing VLAN entries by clicking the pencil icon.
• View each VLAN’s status, type, and IP addresses.

Add/Edit VLAN Interface:
When adding or editing, set the VLAN ID, choose IP settings (Static IP or DHCP), and configure IPv6 if required.

Save Changes:
After making your changes, click Save to apply the configuration.

Configuration

Global Switch Configuration

In the Global Switch Configuration section, you can configure settings that affect all switches in your network, ensuring consistent behavior across your entire switch infrastructure. This is distinct from configuring individual switches, as it provides network-wide settings.

Configurable Options:

• RADIUS Authentication:
  • Set a RADIUS profile for centralized authentication across switches.
• Voice VLAN:
  • Enable a dedicated VLAN for voice traffic, optimizing voice data flow.
• Multicast:
  • IGMP/MLD Snooping VLAN: Designate VLANs for IGMP and MLD snooping to manage multicast traffic efficiently.
  • Unknown Multicast Packet: Choose how to handle unknown multicast packets (e.g., Flood).
• DHCP Snooping Settings:
  • Enable DHCP snooping to prevent unauthorized DHCP servers.
• 802.1x:
  • Set up a guest VLAN for 802.1x-based authentication, securing access to the network.
• Others:
  • Jumbo Frame: Configure the maximum frame size, useful for reducing overhead in high-throughput networks.

Each of these settings is aimed at ensuring your network operates optimally by providing controls that apply universally across all switches under management.

Port Profile

In the Port Profile section, you can manage settings that will be applied across multiple switch ports to maintain consistency in configuration. The configuration of port profiles ensures that multiple ports can follow a unified policy or set of rules. Key elements you can configure in this section include:

• Profile Name: Assign a custom name to the port profile for easy identification.
• Native VLAN: Specify the VLAN that will be considered the default for untagged traffic.
• Allowed VLAN: Define which VLANs are allowed on the ports using this profile.
• Voice VLAN: Enable and configure a separate VLAN for voice traffic, if needed.
• Speed: Set the data transmission speed for the port.
• Duplex Mode: Configure the port to operate in full, half-duplex, or auto-negotiation mode.
• Flow Control: Manage the ability to control the data flow for traffic congestion.
• Ingress & Egress: Control the flow of incoming and outgoing traffic.
• LLDP-MED: Enable LLDP-MED to facilitate auto-negotiation for voice and network devices.
• Security Settings:
  • Storm Control: Prevent traffic storms on the network.
  • Port Isolation: Isolate this port to limit communication with other ports.
  • Port Security: Set up port-based security to restrict unauthorized devices.
  • 802.1X: Enable 802.1X for port-based network access control.

ACCESS CONTROL

SafeSearch

The GWN700X routers offer SafeSearch feature on Bing, Google, and Youtube. Enabling this option will hide any inappropriate or explicit search results from being displayed.

EXTERNAL ACCESS

By default, all the requests initiated from the WAN side are rejected by the router GWN700x external access features allow hosts located on the WAN side to access the services hosted on the LAN side of the GWN router.

DDNS

Dynamic Domain Name System (DDNS) allows users to map a dynamic IP address to a fixed domain name, making it easier to access devices on networks where the IP address may change. This is especially useful for remote access to networked devices without requiring a static IP.

Grandstream GWN700x routers support DDNS configuration, enabling seamless remote access through a consistent domain name, regardless of IP changes. Key features include:

• Multiple Provider Support: Choose from popular DDNS providers to match your existing account.
• Public IP Detection: When positioned behind a NAT, the GWN700x can detect and register the public IP address for accurate DDNS updates.
• Customizable Update Intervals: Set the frequency of updates to ensure the DDNS server always has the current IP address.
• Interface Selection: Specify the WAN interface used for DDNS, allowing flexibility in multi-WAN environments.

These features make the GWN700x routers ideal for environments requiring reliable remote access, even in networks with dynamic IP addresses.

DDNS Page

Port Forwarding

Port forwarding allows requests initiated on the WAN side of the router to be forwarded to a LAN host. This is done by configuring either the port only, or the port and the IP address in case we want to restrict access over that specific port to one IP address. Once the router receives the request on the IP address, the router will verify the port on which the request has been initiated and will forward the request to the host IP address and the port of the host which is configured as the destination.

Port forwarding can be used in the case when a host on the WAN side wants to access a server on the LAN side.

Navigate to GWN700x WEB UI → External Access  → Port Forwarding:

Refer to the following table for the Port Forwarding option when editing or creating a port forwarding rule:

Port Forwarding page

DMZ

When configuring the DMZ, the router will allow all external access requests to the DMZ host. This is

This section can be accessed from GWN700x Web GUI → External Access  → DMZ.
GWN700x supports DMZ, where it is possible to specify a Hostname IP Address to be put on the DMZ.

Enabling the DMZ host function, the computer set as the DMZ host can be completely exposed to the Internet, realizing two-way unrestricted communication.

Refer to the table below for DMZ fields:

DMZ Page

UPnP

GWN700x supports UPnP, which enables programs running on a host to configure automatically port forwarding.

UPnP allows a program to make the GWN700x open necessary ports, without any intervention from the user, without making any checks.

UPnP settings can be accessed from GWN700x Web GUI → External Access → UPnP.

UPnP Settings

When UPnP is enabled, the ports will be shown in the section below. The information shown includes application name, IP address of the LAN host which has requested the opening of the port, the external port number, the internet port number, and the transport protocol used (UDP or TCP).

TURN Service

TURN stands for Traversal Using Relays around NAT, and it’s a network service that helps establish peer-to-peer connections between devices that are behind a NAT or Firewall. Real-time communication like video conferencing, Voice over IP, etc benefit from the TURN service to establish connections between peers when the NAT or the firewall blocks or modifies the traffic.

Navigate to Web UI → External Access → TURN Service. The service is OFF by default; toggle Status ON to turn on the service. The default TURN Server Port is 3478; it’s also possible to add or remove username and password by clicking on “minus” and “Plus” icons.

FIREWALL

The Firewall in GWN routers enables the user to secure the network by blocking the most common attacks and allowing for more control over the traffic.

The Firewall section provides the ability to set up input/output policies for each WAN interface and LAN group, as well as setting configuration for Static and Dynamic NAT and ALG.

Firewall – Basic Settings

General Settings

• Flush Connection Reload

When this option is enabled, and the firewall configuration changes are made, existing connections that had been permitted by the previous firewall rules will be terminated.
If the new firewall rules do not permit a previously established connection, it will be terminated and will not be able to reconnect. With this option disabled, existing connections are allowed to continue until they timeout, even if the new rules would not allow this connection to be established.

DoS Defense

A denial-of-service attack is an attack aimed at making the network resources unavailable to legitimate users by flooding the target machine with so many requests that the system overloads or even crashes or shuts down.

DoS Defense

Spoofing Defense

The spoofing defense section offers many countermeasures to the various spoofing techniques. To protect your network against spoofing, please enable the following measures in order to eliminate the risk of having your traffic intercepted and spoofed. GWN routers offer measures to counter spoofing on ARP information, as well as on IP information.

ARP Spoofing Defense

• Block ARP Replies with Inconsistent Source MAC Addresses: The router will verify the destination MAC address of a specific packet, and when the response is received by the router, it will verify the source MAC address, and it will make sure that they match. Otherwise, the router will not forward the packet.
• Block ARP Replies with Inconsistent Destination MAC Addresses: The router will verify the source MAC address when the response is received. The router will verify the destination MAC address, and it will make sure that they match. Otherwise, the router will not forward the packet.
• Decline VRRP MAC Into ARP Table: The router will decline to include any generated virtual MAC address in the ARP table.

IP Spoofing Defense

• Block IP Packet From WAN with Inconsistent Source IP Addresses: The router will verify the IP address of the inbound packets; the source IP address has to match the destination IP address to which the request was initially sent. If there is a mismatch between these two IP addresses, the router will drop the packet.
• Block IP Packet from LAN With Inconsistent Source IP Address: The router will verify the IP address of the packets forwarded. If the router discovers that there is a mismatch in the packet source IP address, the packet will not be forwarded.

Rules Policy

Rules policy allows to define how the router is going to handle the traffic based on whether it is inbound traffic or outbound traffic. This is done per WAN port as well as LAN ports of the router.

• Inbound Policy: Define the decision that the router will take for the traffic initiated from the WAN. The options available are Accept, Reject, and Drop.
• Outbound Traffic: Define the decision that the router will take for the traffic initiated from the LAN side. The options available are Accept, Reject, and Drop.
• IP Masquerading: Enable IP masquerading. This will mask the IP address of the internal hosts.
• MSS Clamping: Enabling this option will allow the MSS (Maximum Segment Size) to be negotiated during the TCP session negotiation
• Log Drop / Reject Traffic: Enabling this option will generate a log of all the traffic that has been dropped or rejected.

uRPF

uRPF (Unicast Reverse Path Forwarding) is a security feature that verifies the legitimacy of the source of unicast packets before forwarding them to their destination. This mechanism is implemented to prevent source IP spoofing.

• Loose Mode: In this mode, only the packet’s source address is checked against the routing table; the ingress interface is not verified.
• Strict Mode: In this mode, the packet’s source address is checked against the routing table, and the ingress interface must match the routing table, but in certain cases it may incorrectly drop non-attack packets.
• Disable: Disables source verification.

Content Security

The content security feature on GWN700x routers uses DPI (Deep Packet Inspection) to allow users to filter (accept, deny, or drop packets) content based on DNS, APP, or URL. DNS and URL filtering use keywords and wildcard * (which can represent any string), while APP filtering works by selecting APPs from a list organized in categories.

For more details about how to block (filter) DNS, APPs, and URLs, please visit the link below:

documentation.grandstream.com/knowledge-base/gwn700x-firewall-content-security

DNS Filtering

When DNS filtering is enabled, the router will filter the DNS requests initiated by the LAN hosts and disallow the requests that match the queries that contain the strings and patterns specified in the “Filtered DNS” field. To access DNS filtering, please access the web UI of the router, then navigate to Firewall → Content Security → DNS Filtering.

Add DNS Filtering

APP Filtering

The user can restrict application(s) from accessing the Internet. To restrict applications from accessing the Internet, please access the web UI of the router, then navigate to Firewall → Content Security → APP Filtering and check the boxes of the applications, then click “Save”.

Enter the name of the rule along with the description, then choose the application which will be restricted from accessing the Internet. The user can choose the applications from two categories, “Efficiently Identifiable” applications and “Others”. The first category can be quickly identified from a single network packet, while the second category requires multiple packet inspections before the application is identified and blocked.

URL Filtering

The user can restrict access to specific URLs by configuring this option. Enter the URL(s) in the “Filter URL” field.

Add URL Filtering

Traffic Rules

GWN700x offers the possibility to fully control incoming/outgoing traffic for different protocols in customized scheduled times and take actions for specified rules such as Accept, Reject, and Drop.

Traffic Rules settings can be accessed from GWN700x Web GUI → Firewall → Traffic Rules.

Following actions are available to configure Input, output, and forward rules for configured protocols

• To add new rule, click on “Add” button .
• To edit a rule, click on “Edit” icon .
• To delete a rule, click on “Delete” icon .

Inbound Rules

The Inbound Rules page of the Grandstream GWN router’s firewall settings is used to manage and configure the incoming traffic rules for the device. These rules are crucial for controlling which types of traffic are permitted or denied when entering the network through external sources or terminals.

• Accept: To allow the traffic to go through.

• Deny: A reply will be sent to the remote side stating that the packet is rejected.

• Drop: The packet will be dropped without any notice to the remote side.

• Clone: You can also duplicate a rule by clicking the “Clone” button, allowing you to create a copy that can be easily modified as needed.
• Move to Top: the priority of the rules are from the top to bottom, based on the “No.” the lower the number, the higher the priority, and the user can priorities any rule by clicking on “Move to Top” button giving the rule higher priority.

Traffic Rules – Inbound Rules

Outbound Rules

The GWN700x allows to filter outgoing traffic from the local LAN networks to outside networks and apply rules such as:

• Accept: To allow the traffic to go through.

• Deny: A reply will be sent to the remote side stating that the packet is rejected.

• Drop: The packet will be dropped without any notice to the remote side.

Traffic Rules – Outbound Rules

Forwarding Rules

Forwarding rules control traffic flow between different networks (WAN, VLAN or VPN) or devices within a network, allowing administrators to manage access and enforce security policies. Each rule specifies conditions for traffic, such as source and destination groups, protocol types, and actions (e.g., Accept, Deny, or Drop).

Rules are prioritized by serial number—the lower the number, the higher the priority. This order ensures that high-priority rules are applied first, enabling precise control over network traffic and security. Advanced settings, like content and application filtering, offer additional layers of control for accepted traffic.

Click Add to create a new forwarding rule or Edit (pencil icon) next to an existing rule to modify it.

Traffic Rules – Forwarding Rules

Advanced NAT

NAT or Network address translation as the name suggests it’s a translation or mapping private or internal addresses to public IP addresses or vice versa, and the GWN routers support both.

• SNAT :  Source NAT refers to the mapping of clients IP address (Private or Internal Addresses) to a public one.
• DNAT : Destination NAT is the reverse process of SNAT where packets will be redirected to a specific internal address.

The Firewall Advanced NAT page provides the ability to set up the configuration for Static and Dynamic NAT.

SNAT

Following actions are available for SNAT.

Click on to add the Port Forward rule.

Click on to edit a Port Forward rule.

Click on to delete a Port Forward rule.

Refer to the below table when creating or editing a SNAT entry:

SNAT page

DNAT

The following actions are available for DNAT:

Click on to add the Port Forward rule.

Click on toedit a Port Forward rule.

Click on todelete a Port Forward rule.

Refer to the below table when creating or editing a DNAT entry:

Advanced NAT – DNAT

ALG

ALG stands for Application Layer Gateway. Its purpose is to prevent some of the problems caused by router firewalls by inspecting VoIP traffic (packets) and if necessary modifying it.

Navigate to  Web GUI → Firewall → ALG to activate ALG.

CAPTIVE PORTAL

Captive Portal feature on GWN700x helps to define a Landing Page (Web page) that will be displayed on Wi-Fi clients’ browsers when attempting to access the Internet. Once connected Wi-Fi clients will be forced to view and interact with that landing page before Internet access is granted.

The Captive Portal feature can be configured from the GWN700x Web page under “Captive Portal”.

Policy

Users can customize a portal policy on this page. Click on “Add” button to add new policy or click on “Edit” to edit previously added one.

The policy configuration page allows for adding multiple captive portal policies which will be applied to SSIDs and contain options for different authentication types.

Policy page

Splash Page

The splash page allows users with an easy-to-configure menu to generate a customized splash page that will be displayed to the users when trying to connect to the Wi-Fi.

On this menu, users can create multiple splash pages and assign each one of them to a separate captive portal policy to enforce the select authentication type.

The generation tool provides an intuitive “WYSIWYG” method to customize a captive portal with a very rich manipulation tool.

To add a splash page, click on “Add” button or click on “Edit” icon to edit previously added one.

Users can set the following:

• Authentication type: Add one or more ways from the supported authentication methods (Simple Password, Radius Server, For Free, Facebook, Twitter, Google and Voucher).
• Set up a picture (company logo) to be displayed on the splash page.
• Customize the layout of the page and background colors.
• Customize the Terms of use text.
• Visualize a preview for both mobile devices and laptops.

Guests

This page displays information about the clients connected via Captive portal including the MAC address, Hostname, Authentication Type, etc.

To export the list of all guests, please click on “Export Guest List” button, then an EXCEL file will be downloaded.

Vouchers

Voucher feature will allow clients to have internet access for a limited duration using a code that is randomly generated from platform controller.

As an example, a coffee shop could offer internet access to customers via Wi-Fi using voucher codes that can be delivered on each command. Once the voucher expires the client can no longer connect to the internet.

Note that multiple users can use a single voucher for connection with expiration duration of the voucher that starts counting after first successful connection from one of the users that are allowed.

Another interesting feature is that the admin can set data bandwidth limitation on each created voucher depending on the current load on the network, users’ profile (VIP customers get more speed than regular ones etc.…) and the internet connection available (fiber, DSL or cable etc.…) to avoid connection congestion and slowness of the service.

Click on “Add” button to create a voucher group.

Please refer to the figure below when filling up the fields.

MAINTENANCE

GWN700x offers multiple tools and options for maintenance and debugging to help further troubleshooting and monitoring the GWN700x resources.

TR-069

It is a protocol for communication between CPE (Customer Premise Equipment) and an ACS (Auto Configuration Server) that provides secure auto-configuration as well as other CPE management functions within a common framework.

TR-069 stands for a “Technical Report” defined by the Broadband Forum that specifies the CWMP “CPE WAN Management Protocol”. It commonly uses HTTP or HTTPS as transport for communication between CPE and the ACS. The message exchange is using SOAP (XML_RPC) for configuration and management of the device.

TR-069 page

SNMP

GWN700x routers support SNMP (Simple Network Management Protocol) which allows network administrators to monitor and manage Grandstream devices using external SNMP management systems. The configuration is divided into four main tabs: Global Configuration, Group Management, Community Management, and User Management.

To configure SNMP settings, go to GWN700x Web GUI → Maintenance → SNMP, From there you will find mutiple tabs for configuration :

Global Configuration

• SNMPv1, SNMPv2c: Enables or disables SNMP versions 1 and 2c. These versions use community-based access (public/private strings) and do not support encryption or authentication. Recommended only for internal or trusted networks.
• SNMPv3: Enables or disables SNMP version 3. SNMPv3 adds enhanced security with authentication and encryption mechanisms, protecting data integrity and confidentiality between the SNMP manager and device.

Group Management

• Add/Delete: Adds or removes SNMP groups. Each group defines permissions and access rules for community or user associations.
• Name: Specifies the group name (1–32 characters). Each group must have a unique name.
• Enable: Enables or disables the group. When disabled, no members of the group can access the device through SNMP.
• SNMP Version: Selects which SNMP version applies to this group (SNMPv1, SNMPv2c, or SNMPv3). This ensures community strings or users linked to the group use the correct SNMP protocol.

Community Management

• Name: Defines the community name (1–32 characters). In SNMPv1/v2c, this acts as a “shared password” that controls access to SNMP data.
• Enable: Enables or disables the community. When disabled, the community cannot be used to query SNMP data.
• Group: Associates the community with a specific SNMP group. The group determines the SNMP version and permissions.
• Allowed Source IP: Restricts SNMP access to specific IP addresses or subnets for security purposes. it can be done through two methods: IP Address: Specifies individual IP addresses to be allowed. IP Subnet: Specifies individual subnet ranges that are allowed to query the SNMP agent. Prefix length (1–32) defines subnet size (CIDR format).

User Management

• Name: Sets the SNMPv3 username (1–32 characters). Each SNMPv3 user must have unique credentials.
• Enable: Enables or disables the SNMPv3 user.
• Authentication Mode: Selects the authentication algorithm used to verify message integrity: MD5 or SHA. SHA provides stronger security and is recommended.
• Authentication Key: Defines the password (8–32 characters) used for authentication based on the selected mode.
• Encryption Mode: Specifies the encryption algorithm for SNMP messages: DES or AES. AES is preferred for stronger encryption.
• Encryption Key: Defines the password (8–32 characters) used to encrypt SNMP messages.
• Group: Associates the user with a specific SNMPv3 group for permission and access control.
• Allowed Source IP: Limits SNMPv3 access to defined IP addresses or subnets.

Backup and Restore

The GWN700x configuration can be backed up (e.g., when performing a firmware update), the configuration can be uploaded to the router by clicking on “Import” and selecting the back up file. This will load the backed up configuration back into the router quickly.

If the user wish to modify the configuration file before importing, then a GWN Router Configuration Tool can be used to make the necessary modifications to the configuration file. The tool is supported on Windows® and Linux environments. To download the tool: GWN Router Configuration Tool, then download the Windows® or Linux version accordingly.

Please, visit this guide on how to use the GWN Router Configuration Tool User Guide.

If the user wants to reset the device to its initial configuration, he/she can click one “Factory Reset”.

Diagnostics

Many debugging tools are available on GWN700x’s Web GUI to check the status and troubleshoot GWN700x’s services and networks.

To access these tools navigate to “Web UI → System Settings → System Diagnosis“

Ping / Traceroute / NSlookup

• Ping

The Ping tool is used to test connectivity between the router and a specific target IP address or hostname. It sends a series of packets to the destination and measures the time taken for the packets to return, providing useful information about network latency and connectivity.

• Tool: Select “Ping” from the dropdown.
• IP Family: Choose between IPv4 or IPv6.
• Target IP Address / Hostname: Enter the IP address or hostname you want to ping.
• Interface: Select the network interface (e.g., WAN1, WAN2) through which the test will be conducted.

Click Start to begin the test. The Diagnostic Result will display the round-trip time for each packet and the overall packet loss, if any.

• Traceroute

The Traceroute tool identifies the path that packets take from the router to a specified destination. It lists each hop (intermediate routers) along the way and measures the time taken for the packets to reach each hop.

• Tool: Select “Traceroute” from the dropdown.
• IP Family: Choose between IPv4 or IPv6.
• Target IP Address / Hostname: Enter the IP address or hostname for tracing the route.
• Interface: Choose the network interface to send the traceroute request.

Click Start to initiate the traceroute. The Diagnostic Result will display each hop along the route to the target, along with the response times for each hop.

• NSlookup

The NSlookup tool is used to query DNS servers for domain name resolution. It retrieves the IP address associated with a domain name or vice versa, helping to diagnose DNS-related issues.

• Tool: Select “NSlookup” from the dropdown.
• Domain: Enter the domain name you want to query (e.g., “grandstream.com”).
• Interface: Select the interface to use for the DNS lookup.

Click Start to run the query. The Diagnostic Result will display the DNS server queried, along with the resolved IP address or any error if the domain cannot be found.

Core File

When a crash event happens on the unit, it will automatically generate a core dump file that can be used by the engineering team for debugging purposes.

Capture

This section is used to capture packet traces from the GWN700x interfaces (WAN ports and network groups) for troubleshooting purposes or monitoring. It’s even possible to capture based on MAC address or IP Address, once done the user can click on and the file (CAP) will start downloading right away.

One-click Debug

One-click Debug diagnostic tool allows to gather information and diagnostic data that can help with troubleshooting any issues that the router may encounter.

To start capturing the diagnostic data, click on “One-click Debug” button. Once done, the following buttons will appear.

:Delete the diagnostics data.

:Download diagnostics data.

Remote Support

Remote Support feature allows providing support remotely to diagnose the issues that may occur. In this case, our support team may ask to enable this feature to provide remote access through an encrypted tunnel.

To enable it, click on “Enable Remote Support”, then enter the administrator’s password.

External Syslog

GWN700x routers support dumping the Syslog information to a remote server under Web GUI → System Settings → System Diagnosis → External Syslog Tab

Enter the Syslog server Hostname or IP address and select the level for the Syslog information. Nine levels of Syslog are available: None, Emergency, Alert, Critical, Error, Warning, Notice, Information and Debug.

ARP Cache Table

GWN700X router keeps an ARP table record of all the device which have been assigned an IP address from the router. The record will keep the devices information when the device is offline. To access the ARP Cache Table, please navigate to System Diagnostics → ARP Cache Table

Link Tracing Table

Link Tracing Table shows the flow of traffic by displaying the source IP address/Port (the green color) and the reply IP address/port (the blue color), also other information can be displayed like IP Family, Protocol Type, Life Time, Status, Packets/Bytes etc.

Users/Administrators can also delete the flow of certain IP addresses/Ports (Source and Destination) or then click on “Delete” button to clear the link tracing statistic.

Network Diagnostics

Network diagnostics feature allows the user to quickly diagnose the connection link on a specific WAN interface.

PoE Diagnostics

PoE diagnostics page offers an insight about the ports and their components as well as the power used and the temperature. The information provided can be useful when the user encounters an issue with the PoE function of the GWN700X router.

GDMS Networking / GWN Manager Connection Diagnostics

If the GWN700x router is added to the GDMS Networking or GWN Manager, it will display a Cloud icon with a green check mark (as shown in the figure below) indicating it’s added to either GDMS Networking or GWN Manager.

In case there is an issue with the connection, then the user can navigate to Maintenance → System Diagnosis → Cloud/Manager Connection Diagnostics and then click on “Detection” or “Redetect” button to see in what stage/step the connection has failed.

Upgrade

Under Maintenance → Upgrade. The user has the option to upgrade the GWN router via manual upload (a bin file) or via network either HTTP/HTTPS or TFTP or even schedule to upgrade in a specific time.

Please refer to the figure below:

Alerts & Notifications

Alerts page displays alerts about the network, the user can specify to display only certain types like (System, Performance, Security or Network) or the levels. To check the alerts which have been generated, please navigate to Maintenance → Alerts & Notifications page.

In this page, previous alerts will be displayed.

Click on “Alert Notification Settings” to configure the alert notifications.

Alerts

Alerts Types

The available types are System, Performance, Security, Network, or the user can choose to display all the types.

Alerts Levels

The user can filter the alert level by the following levels: All Levels, Emergency, Warning or Notice.

Alert Notification Settings

To enable the notifications on the Alerts tab, please click on “Alert Notification Settings” button as shown below:

The figures below show all the possible alerts notifications that the user can enable on the Alerts tab, organized into 4 categories: System Alert, Performance Alert, Security Alert, and Network Alert.

Please refer to the figures below:

SYSTEM SETTINGS

Basic Settings

On the Basic Settings page, users can configure essential settings for the GWN700x router, including:

Basic Info

• Device Name: Assign a custom name for the router.
• System Contact: Contact information of the person in charge of device operation and maintenance to facilitate troubleshooting and coordination. Name, Phone, and Email can be entered. Only support input in numbers, letters and special characters, does not support “\?/,’
• System Location: The physical installation location of the device, used for asset management and tracking. You can enter information such as the server room, floor, rack, point info, etc. Only support input in numbers, letters and special characters, does not support “\?/,’

Region and Time

• Country/Region: Set the geographical location.
• Time Zone: Set the time zone.
• NTP Server: Configure one or more NTP servers to synchronize the router’s time. Click the + icon to add additional NTP servers, which is useful for ensuring time accuracy from multiple sources.
• Synchronize Time to The Taken-Over Device: Once enabled, all devices managed by the router will directly synchronize with the router’s NTP server time settings.
• Language: Choose the preferred display language.

Other Settings

• Reboot Plan: Set up a scheduled reboot if required by clicking on Create Schedule under the Reboot Plan section.
• LED Indicator: Configure the LED indicator to be Always On, Always Off, or based on a defined schedule.

Manager Server Settings

In the case of GWN manager (on-premise GWN management solution), the user can specify the manager server address and port, there is also the option to allow DHCP option 43 override.

Administrator

In this category, the user can configure Administrator accounts and create roles. The roles allow selecting specific privileges; then the roles can be assigned to the account(s) created to grant the privileges to the users of the accounts.

Administrator

In this tab, you can configure the accounts of administrators with the roles created in the “Role” tab. You can configure multiple accounts with different privileges, such as being able to configure the different features of the router, or to monitor the resources using the dashboard.

Click on the button “Add” to create a new administrator account, then configure the fields according to the parameter description found in the table below.

Role

On this page, the user can manage different roles. These roles allow creating accounts with different privileges to allow many users to manage specific features and components of the system.

Click on “Add Role”.

Security Management

Under “Web UI → System Settings → Security Management“ the user can change the login password and activate the web service, for example, web WAN port access for HTTPS port 443 as well as enabling SSH remote access.

Web Service

The Web Service section configures secure HTTPS access to the device’s web interface. HostName defines the domain or DDNS address used for remote access, and HTTPS Port sets the port number for HTTPS connections (default 443, range 1–65535, excluding reserved ports). Web WAN Port Access enables or disables web management from the WAN side for security purposes.

Administrators can also configure IP Addresses Allowed Through WAN to restrict access only to specific IPs or subnets. If the field is left empty, it means all IP addresses are allowed.

SSH Service

This feature allows the user to access the device using SSH remotely. Enable this option and click on “SSH Access” button and then enter the SSH remote access password (login password).

Passwordless Remote Access

Enabling the Passwordless Remote Access feature, accessing the device using GDMS Networking will not require entering the password to be able to access the web GUI of the router.

Email Settings

The Email Settings feature in the GWN router enables email alerts for network events and notifications. To configure email notifications, follow these steps:

1. Enable Email Notifications: Toggle the “Email Notifications” switch to enable alerts.
2. Enter Sender Information:
   • From Email Address: Enter the email address from which alerts will be sent. Example: notifications@gwnrouter.com.
   • From Name: Specify the sender name that will appear in alert emails. Example: GWN Router Alert.
3. Configure SMTP Server:
   • SMTP Hostname: Enter the SMTP server hostname. This is required for the router to connect to your email service provider. Example: smtp.example.com.
   • SMTP Port: Set the SMTP port used by your email provider. Common ports are 587 (for TLS) and 465 (for SSL).
   • SMTP Username: Input the email account’s username. Example: your-email@example.com.
   • SMTP Password: Enter the password for the SMTP username.
4. Certificate Validation:
   • Skip Certificate Validation: Toggle this option only if your SMTP server does not support SSL certificates. Enabling this will send alerts without server certificate validation.
5. Set Receiver Email Address:
   • Add the email addresses to which notifications should be sent. Example: admin@yourdomain.com. Multiple addresses can be added by clicking “Add E-mail Address”.
6. Save Configuration:
   • Click “Save” to apply the settings or “Save and Test” to test email notifications.

Note: Ensure that SMTP credentials are correct, and the SMTP server allows email relay for notifications to work properly.

File Sharing

The GWN routers have a USB port that can be used for file sharing, either using a USB flash drive or a Hard Drive, enabling clients with Windows, Mac or Linux to access files easily on the local network. There is also an option to enable a password for security reasons.

Navigate to System Settings → File Sharing.

PROFILES

MAC Group

The MAC Group is a feature in GWN700x that enables the user to create a group of MAC addresses from the available ones or manually adding the MAC Address.

To create a new MAC group, Navigate under: “Profiles → MAC Group“ then click on “Add” button.

• Add devices from the list:

Enter the name of the MAC Group, then add the devices from the list.

• Add Devices Manually:

Enter the name of the MAC Group, then add the devices’ MAC addresses.

After the MAC Group is created, to take effect the user needs to apply it, for example like the SSID:

Navigate to ” Web UI → AP Management → SSIDs“, either click on “Add” button to create new SSID or click on “Edit” icon to edit previously created SSID, scroll down to “Access Security” section then look for “Blocklist Filtering” option and finally select from the list the previously created MAC address, the user can select one or more, or click on “Add” at the bottom of the list to create new one.

Please refer to the figure below:

IP Address Group

The IP Address Group feature allows users to manage groups of IP addresses for applying policies such as security rules, NAT, or firewall settings. Both IPv4 and IPv6 addresses are supported. By grouping addresses, you can manage multiple addresses with ease, improving policy efficiency and reducing errors.

To configure IP Address Groups, follow these steps:
Navigate to Profiles → IP Address Group from the main menu.

IPv4 Address

The IPv4 Address feature lets you add individual IPv4 addresses, subnets, or ranges for use in policies like NAT or firewall settings. Once addresses are added, you can group them for better management.

Steps to add an IPv4 Address:

1. Navigate to Profiles → IP Address Group → IPv4 Address.
2. Click Add to create a new IPv4 address.
3. Enter a Name for the address.
4. Select the Type from:
   • IP Address
   • IP Address/Mask Length
   • IP Address Range
5. Fill in the relevant details (e.g., IP address, subnet mask, or range).
6. Click Save to add the IPv4 address.

IPv4 Address Group

The IPv4 Address Group feature allows you to combine multiple IPv4 addresses into one group, simplifying the application of policies like SNAT or firewall rules.

Steps to create an IPv4 Address Group:

1. Navigate to Profiles → IP Address Group → IPv4 Address Group.
2. Click Add to create a new IPv4 group.
3. Enter a Name for the group.
4. Select the IPv4 addresses you wish to include in the group from the list.
5. Click Save to create the group.

IPv6 Address

The IPv6 Address feature lets you add IPv6 addresses or networks, which can be used in settings such as firewall rules or NAT configurations.

Steps to add an IPv6 Address:

1. Navigate to Profiles → IP Address Group → IPv6 Address.
2. Click Add to create a new IPv6 address.
3. Enter a Name for the address.
4. Select the Type:
   • IP Address
   • IP Address/Prefix Length
5. Fill in the relevant IPv6 address or prefix.
6. Click Save to add the IPv6 address.

IPv6 Address Group

The IPv6 Address Group feature allows you to group multiple IPv6 addresses into one group. This makes it easier to apply policies to multiple addresses at once.

Steps to create an IPv6 Address Group:

1. Navigate to Profiles → IP Address Group → IPv6 Address Group.
2. Click Add to create a new IPv6 group.
3. Enter a Name for the group.
4. Select the IPv6 addresses to include from the list.
5. Click Save to create the group.

IP Address Group – Example

Here’s an example of how to use an IPv4 Address Group in a Source NAT (SNAT) configuration:

1. Navigate to Routing → SNAT.
2. Click Add to create a new SNAT rule.
3. Select the Destination Group as WAN1 (WAN).
4. Under Destination Address Type, choose Select IPv4 Address Group.
5. Under Destination Address, select the desired IPv4 Address Group from the list.
6. Configure other fields such as Destination Port as needed.
7. Click Save to apply the rule.

FQDN (Fully Qualified Domain Name)

The FQDN feature allows you to define domain names that can be applied in traffic rules, firewall policies, or other configurations. It can also be paired with specific IP addresses, making it easier to manage domains instead of individual IP addresses.

You can create individual FQDN Addresses or group multiple FQDN addresses into an FQDN Address Group for easier management and application in rules.

FQDN – Address

An FQDN Address is a domain name entry that can optionally be associated with up to eight IP addresses. This is useful for applying domain-based traffic filtering or rules.

To create an FQDN Address:

1. Navigate to: Profiles → FQDN → Address
2. Enter the following:
   • Name: Name of the FQDN address (e.g., “Grandstream”).
   • FQDN: Enter the domain (e.g., *.grandstream.com). Wildcards can be used to match subdomains.
   • Manually added IPs (optional): Add up to 8 IP addresses to be associated with the FQDN.
3. Click Save to add the FQDN entry.

FQDN – Address Group

FQDN Address Groups allow you to group several FQDN addresses, which simplifies applying multiple FQDNs within traffic rules.

To create an FQDN Address Group:

1. Navigate to: Profiles → FQDN → Address Group
2. Provide a Name for the group.
3. Select the FQDN addresses to be included in the group.
4. Click Save to create the group.

FQDN – Example

Here is an example of applying an FQDN Address Group in a firewall rule. This will show how to use domain-based filtering within your network.

Example: Applying FQDN Address Group in a Traffic Rule

1. Navigate to: Firewall → Traffic Rules → Add Inbound Rule.
2. For Source Address Type, select FQDN Address Group.
3. Select the previously created FQDN Address Group (e.g., “FQDN Address Group”).
4. Configure any other parameters as needed and click Save.

RADIUS

RADIUS is a networking protocol that provides centralized authentication, authorization, and accounting for users or devices connecting to a network. In the GWN7002, the RADIUS feature allows network administrators to integrate external RADIUS servers for handling network access.

To create a RADIUS profile:

1. Navigate to: Profiles → RADIUS → Add.
2. Enter the RADIUS server details:
   • Authentication Server: Enter the server address and port for authentication (default port is 1812).
   • RADIUS Accounting Server: Enter the server address and port for accounting purposes (default port is 1813).
   • RADIUS NAS ID: Input the NAS ID (Network Access Server ID).
   • Attempt Limit: Specify the number of attempts before the server denies access.
   • RADIUS Retry Timeout: Set the time to wait before retrying a connection to the server (in seconds).
   • Accounting Update Interval: Set the interval at which accounting updates will be sent (in seconds).
3. Save the profile.

RADIUS – Example

Applying the RADIUS Profile to a Wi-Fi SSID:

1. Navigate to: AP Management → SSIDs → Add.
2. In the Access Security section, configure the following:
   • Security Mode: Select WPA2.
   • WPA Key Mode: Select PPSK with RADIUS or another option based on the required encryption method.
   • RADIUS Profile: Select the previously created RADIUS Profile from the dropdown list.
3. Save the settings.

Schedule

GWN routers allow the user to create a schedule, either weekly based or an absolute date/time (specific date and an interval), then these schedules can be assigned to various services on GWN routers: Upgrade, SSID, Bandwidth limit, Policy route and reboot.

To create a schedule, navigate to Profiles → Schedule, then click on “Create Schedule” button as shown below:

Certificates

CA Certificates

In this section, the user can create a CA certificate. This certificate will authenticate the user when connected to the VPN server created on the router. This authentication will ensure that no identity is being usurped and that the data exchanged remain confidential. To create a certificate, please access the web GUI of the router and access System Settings → Certificates → CA Certificates then click “Add” and fill in the necessary information.

Add CA Certificate

Certificate

In this section, the user can create a server or a client certificate. To create a certificate please access the web UI of the router, then navigate to System Settings → Certificates → Add Certificate, click “Add”, then enter the necessary information regarding the certificate.

Add Certificate

Certificates Backup and Restore

To backup the created certificates, first select all the desired certificates, then click on “Backup” button and enter a password to protect it as shown below:

To restore a certificate, click on “Restore” button, then upload the file and enter the password.

CHANGE LOG

This section documents significant changes from previous versions of the GWN700x routers user manuals. Only major new features or major document updates are listed here. Minor updates for corrections or editing are not documented here.

Firmware Version 1.0.11.61

• Added a “Sync NTP Server Time” [System Info]
• Added Account Settings page [Account Settings]
• Added support for Safe Mode [Safe Mode]
• Added WAN IP DHCP release and renew functions [WAN]
• Added DHCP server(s) configuration page [DHCP Server]
• Added Bridge Mode for Bonjour Gateway [Bonjour Gateway]
• Added support for obtaining PPTP client addresses from the local network [PPTP Servers]
• Metric and Administrative Distance can now be viewed in the routing table [Routing Table]
• Changed the default administrative distance of static routes to 1 [Static Routes]
• Added support for metric configuration in Static Routes [Static Routes]
• Added Administrative Distance support [Static Routes]
• Added Administrative Distance configuration section [Administrative Distance]
• Added support for uRPF configuration [uRPF]
• Added Administrator account configuration section [Administrator]
• VPN services will now be disabled when a WAN interface that they depend on is deleted. [WAN]
• Added Remote Support tunnel feature [Remote Support]
• Removed “Admin Password Change Alert” [Alerts]
• Added “Administrator Change Alert” [Alerts]
• Added RADIUS as an authentication option for administrators [Administrator]
• Added role creation for administrator accounts with privilege control [Role]
• Added ability to edit SNMP OUID values sysName, sysContact, and sysLocation from RFC1213 for MIB-II

Firmware Version 1.0.11.36

• No major updates.

Firmware Version 1.0.11.35

• Updated the PoE output and Power & Green Energy Efficieny in the datasheet and added the USB Port Specifications. [PoE Power Budget] [Power & Green Energy Efficieny] [USB Port Specifications]
• Updated GWN7003 Power Adapter information. [GWN700x Ports]
• Added USB WAN support. [USB WAN Support] [Port Type]
• Added support for 4G USB dongle and allowing it to be configured on the WAN Port. [USB Port Specifications] [USB WAN Support] [APN (Access Point Name)] [SIM PIN] [USB Modem Login Password] [Authentication Type]

Firmware Version 1.0.11.26

• Added support to more SNMP communities. [Community Management]
• Added support for IP allow list on WAN’s port web access. [Web Service]
• Added option to limit the bandwidth on WAN/LAN ports. [Ingress Rate (Mbps)] [Egress Rate (Mbps)]
• Added support to IP address Group for QoS Rules. [Source Address Type] [Destination Address Type]

Firmware Version 1.0.11.18

• Added support to load-balancing policies. [Policy Routes]
• Added support for port forwarding rule with multiple source IP addresses. [Port Forwarding]
• Added VLAN ID for PPSK. [PPSK]
• Optimized PoE Configuration. [PoE Configuration]

Firmware Version 1.0.11.6

• Added support for VLAN2. [VLAN]
• Added support for nslookup. [System Diagnostics]
• Optimized Traceroute feature. [System Diagnostics]
• Added RADIUS configuration as a profile. [RADIUS]
• Optimized dynamic route WAN action rule. [WAN]
• Optimized WireGuard® configuration. [WireGuard®]
• Optimized Feedback configuration. [Feedback]
• Optimized Client list filtering. [Client]
• After changing the login password, the web will be forcibly logged out. [Security Management]
• OpenVPN/WireGuard® local ports automatically provide an available number. [WireGuard®][OpenVPN®]
• Added support for switch management. [Switch Management]
• Added switch statistics to the dashboard. [Overview]
• Added support for dynamic routing: OSPF/RIP/BGP. [OSPF] [RIP] [BGP]
• Added VPN configuration wizard. [VPN Setup Wizard]
• Added support for 6G band. [Overview]
• Added support for captive portal on wired network. [Captive Portal]
• Added multiple language support. [Web UI Languages]
• Added FQDN and FQDN group profile. [FQDN]
• Added object grouping profile support. [Profiles]
• Added support for nslookup [NSlookup]
• Added support for TR069, settings can be found under Maintenance. [tr-069]
• Cloud/Manager connection detection support multiple links. [Manager Servers Settings]
• Added “Service Name” filed to the WAN PPPoE configuration. [WAN]
• Added the feature Email Settings. [Email Settings]
• Added support for Standby on Demand mode for PPPoE. [WAN]
• Added standby mode in policy routing. [Policy Routing]
• Added the ability to detect the public IP when the GWN700x is behind another router. [GDMS Networking]
• GDMS Networking/GWN Manager connection detection support multiple links. [GDMS Networking/GWN Manager]
• Added support for cloud configuration of DDNS IP source and update interval. [DDNS]
• Added supports for cloud configuration of exempt IP, DoS defense, and Spoofing defense.
• Added support for cloud security alerts.
• Added support to configure blackhole for static routes. [Static Routes]
• Added support for exporting .ovpn files [VPN Remote Users]
• Optimized Alert & Notifications Web UI. [Alert & Notifications]
• Added support for setting up multiple NTP servers. [NTP Server]

Firmware Version 1.0.5.36

• No major change

Firmware Version 1.0.5.35

• No major change

Firmware Version 1.0.5.30

• Added the new feature of Speed test [WAN]

Firmware Version 1.0.5.7

• Removed the DHCP range restriction on Static IP assignment which was added in 1.0.5.6 [Static IP Binding]

Firmware Version 1.0.5.6

• Added new feature of WAN-Bridge Mode and VLAN tag priority [WAN]
• Added new feature of disabling the router ports [Port Configuration]
• Added more services under DHCP option 43 [LAN]
• Added IGMP proxy and IGMP snooping [IGMP]
• Added new feature of IP Routed Subnet [LAN]
• Added Bonjour Gateway [Bonjour Gateway]
• Added Binding Mode and Device Name under Static IP Binding [Static IP Binding]
• Added new feature of transferring GWN APs taken over by GWN router to GWN Cloud/Manager [AP Management]
• Added Client list under Access Point for clients connected currently to the AP [Access Points]
• Added PPSK (Private Pre-Shared Key) feature [PPSK]
• Added SSID Bandwidth limit feature with schedule support [SSIDs]
• Added WireGuard® VPN [WireGuard®]
• Added new feature of exporting clients list [Clients]
• Added clients bandwidth limit feature with schedule support [Clients]
• Added Bandwidth limit feature for both wireless and wired clients [Bandwidth Limit]
• Added more social authentication (Facebook, Twitter and Google) under Captive portal [Splash Page]
• Added Vouchers feature under Captive Portal [Vouchers]
• Added new feature of exporting Guest list [Guests]
• Added support for more alerts [Alerts]
• Added new feature of naming the GWN router [Basic Settings]
• Added new feature of customizing the Hostname [Web Service]
• Added GWN.Cloud/Manager connection status detection [System Diagnostics]
• Added EEE (Energy-Efficient Ethernet) feature [Port Configuration]
• Added the option to display a month-long time period in traffic statistics (only for GWN7003) [Traffic Statistics]
• Added TURN Service feature [TURN Service]

Firmware Version 1.0.3.5

• No major changes.

Firmware Version 1.0.3.4

• Added new feature of TURN server (Beta) [TURN Service]
• Added new feature of 2.5G SFP module support [Port Configuration]
• Added QoS bandwidth statistics feature [QoS]

Firmware Version 1.0.1.6

• This is the initial release.

---