HT841/HT881 - User Manual

LED Lights

Status

The Power LED lights up when the HT841/HT881 is powered on and it flashes when the HT841/HT88 is booting up.
Note: When powering up the unit with the PSU, the LED light will glow green, whereas it will be orange when using PoE.

NET1 LED

The NET 1 LED lights up when the HT841/HT881 is connected to your network through the NET1 port.

NET2 LED

The NET 2 LED lights up when the HT841/HT881 is connected to your network through the NET2 port.

FXS LED

The FXS LED indicates the status of the FXS port phone on the back panel.
OFF – Unregistered
ON (Solid Green) – Registered and Available
Blinking every 500 ms – Off-Hook / Busy
Slow blinking – FXS LED indicates voicemail

FXO LED

The FXO LEDs indicate the status of the FXO ports-phone on the back panel.
OFF – Unregistered
ON (Solid Green) – Registered and Available
Blinking every 500 ms – Off-Hook / Busy
Slow blinking – FXO LEDs indicate voicemail

GXW42xx Gateway

HT841/HT881 Gateway

Profile 1

SIP Server – Set it to the IP Address of HT841/HT881

SIP Registration – No

Outgoing Call without Registration – Yes

NAT traversal – No

Advanced Settings

STUN Server – Blank

Use Random Port – No

Advanced Settings

STUN Server – Blank

FXO lines

Wait for Dial Tone – Y or N (whichever works for your PSTN Service Provider)

Stage Method – 1

Unconditional Call Forward to VOIP:

ch1-8:444; @ch1-8:p1; ch1-8:5060++;

Channels

1-8 5060 Profile 1

Local SIP Listen port (For VOIP to PSTN calls) – 5060++

Profile 1

SIP Server – Set it to IP Address of GXW42xx

SIP Registration – No

NAT traversal – No

Model

Lifeline Port Mapping

HT841

FXS

FXO4

HT881

FXS

FXO8

Menu

Voice Prompt

Options

Main Menu

“Enter a Menu Option”

Press “*” for the next menu option

Press “#” to return to the main menu

Enter 01-05, 07,10, 12-17,47 or 99 menu options

01

“DHCP Mode”,

“Static IP Mode”

“PPPoE Mode“

Press “9” to toggle the selection

If using “Static IP Mode”, configure the IP address information using menus 02 to 05.

If using “Dynamic IP Mode”, all IP address information comes from the DHCP server automatically after reboot.

If using “PPPoE Mode”, configure PPPoE Username and Password from web GUI to get IP from your ISP.

02

“IP Address “ + IP address

03

“Subnet “ + IP address

Same as menu 02

04

“Gateway “ + IP address

Same as menu 02

05

“DNS Server “ + IP address

Same as menu 02

07

Preferred Vocoder

 
Press “9” to move to the next selection in the list:

PCM U / PCM A
iLBC
G-726
G-723
G-729
OPUS

10

“MAC Address”

Announces the MAC address of the unit.

Note: The device has two MAC addresses. One for the NET1 port and one for the NET2 port. The device MAC address announced is the address of NET2 port.

12

WAN Port Web Access

Press “9” to toggle between Auto / Enabled / Disabled.
Default is Auto.

13

Firmware Server IP Address

Announces current Firmware Server IP address.

Enter 12-digit new IP address.

14

Configuration Server IP Address

Announces current Config Server Path IP address. Enter 12-digit new IP address.

15

Upgrade Protocol

Upgrade protocol for firmware and configuration update. Press “9” to toggle between TFTP / HTTP / FTP / FTPS or HTTPS.

Default is HTTPS.

16

Firmware Version

Announces Firmware version information.

Firmware Upgrade

Firmware upgrade mode. Press “9” to toggle among the following three options:

47

“Direct IP Calling”

 Enter the target IP address to make a direct IP call, after dial tone. (See “Make a Direct IP Call”.)

86

Voice Mail

Access to your voice mails messages.

99

“RESET”

Press “9” to reboot the device.
Enter MAC address to restore factory default setting: RESTORE FACTORY DEFAULT SETTINGS

“Invalid Entry”

Automatically returns to main menu

“Device not registered”

This prompt will be played immediately after off hook If the device is not registered and the option “Outgoing Call without Registration” is in NO

Status

MAC Address

Shows devise ID in hexadecimal format. This is needed by network administrators for troubleshooting. The MAC address will be used for provisioning and can be found on the label on the original box and on the label located on the bottom panel of the device.
Note: The device has two MAC addresses, one for the NET1 port and one for the NET2 port. The MAC address located on the bottom panel of the device is the MAC address of the NET2 port. The MAC address of the WAN port is the MAC address of NET2 port +1.
Example: MAC Address: NET1- “00:0B:82:25:AF:32”, NET2- “00:0B:82:25:AF:31”.

WAN IPv4 Address

Displays assigned IPv4 address.

WAN IPv6 Address

Displays assigned IPv6 address.

Product Model

Displays product model info. Default is HT841/HT881.

Serial Number

Displays the device's serial number.

Hardware Version

Displays the hardware revision information and the part number.

Software Version

Software Status

Indicates the current software status of the HT (Running or Stopped).

System Up Time

Indicates actual system time and uptime since last reboot.

CPU Load

Indicates the amount of processing burden placed on the device's central processing unit, providing an insight into system performance and resource utilization.

Network Cable Status

PPPoE Link Up

Indicates PPPoE connection status.

NAT

Indicates type of NAT when it is configured.

Certificate Type

Indicates the current individual Certificate Generation.

Port Status

Displays relevant information regarding the FXS port and FXO ports and their registration, current status and their appropriate User ID.

Port Options

Displays relevant information regarding the FXS and FXO ports about their DND and call forward features.

CDR File

Refers to the Call Detail Records file that stores information about call activities, including call duration, call time, and call parties, for later analysis and billing purposes.
You can Download the CDR file , Preview it or delete it .

SIP File

Refers to the Session Initiation Protocol (SIP) configuration file used to define the device's SIP settings and parameters for establishing and managing VoIP communication.

Provision

Displays provisioning status.

Core Dump

Provides generated core dump file if unit malfunctions. Clean will be displayed if no issues.

System information

Provides essential details about the device, such as model number, firmware version, hardware information, and system status, for diagnostic and management purposes.
You can download the system information by clicking "Download"

Basic Settings

New End User Password

Configures user-level password.
Note: Must contain 8-30 characters, at least one number, one uppercase, and a lowercase letter. 

Confirm End User Password

Re-enter the end user password to confirm the change of user password on the web GUI to avoid typos or mistakes.

New Viewer Password

Configures viewer-level password.

Note: Must contain 8-30 characters, at least one number, one uppercase, and a lowercase letter. 

Confirm Viewer Password

Re-enter the viewer password to confirm the change of the viewer password on the web GUI to avoid typos or mistakes.

Web/SSH Access

Web Session Timeout

Configure timer to log out web session during idle.
The default is 10 min. The range is 1-60 min.

Web Access Attempt Limit

Configure the attempt limit before the lockout.
The default is 5. The range is 1-10.

Lockout Time Interval

If the login attempt failed 5 times, the login would be locked out for the time length.
Default 15 mins. Range 0-60 min.

Web Access Mode

Allows users to choose the Web Access Mode between "HTTPS", "HTTP", or "Disabled". If HTTPS is selected, web UI will be accessed using HTTPS. The default is HTTP.

HTTP Web Port

Customizes HTTP port used to access the HT841/HT881 web UI. Default is 80.

HTTPS Web Port

Customizes HTTPS port used to access the HT841/HT881 web UI. Default is 443.

Disable SSH

Enables/disables SSH access. The default is No.

SSH Port

Allows users to self-configure SSH Port number. By default, the port number is 22.

Disable Telnet

Enables/disables the Telnet access. The default is Yes.

Telnet Port

Allows users to self-configure Telnet Port number. By default, the port number is 23.

Security Controls for SSH/Telent Access

Specifies the security measures and controls applied to the SSH/Telnet protocols to ensure secure and authorized access to the device.

The Default Value is "Allow any user to set any PValue"

WAN Side Web/SSH Access

Enables/Disables the Web and SSH access through the WAN port. The available options are the following:

Default setting is Yes.

White List for WAN Side

If WAN Side Web/SSH Access is set to Yes or Auto. Users can configure the white List for WAN Side to be used for remote management.
Multiple IPs are supported and need to be separated by space.

Example:192.168.5.222 192.168.5.223 192.168.7.0/24

Note: If both blacklist and whitelist are not empty, the blacklist is processed first, followed by the whitelist.

Black List for WAN Side

If WAN Side Web/SSH Access is set to Yes or Auto. Users can configure the black List for WAN Side to ban WAN side web access.
Multiple IPs are supported and need to be separated by space.

Example:192.168.5.222 192.168.5.223 192.168.7.0/24

Note: If both blacklist and whitelist are not empty, the blacklist is processed first, followed by the whitelist.

Internet Protocol

Selects one of the following IP protocol modes:

Note: Make sure to reboot the HT841/HT881 unit for the changes to take effect.

IPv4 Address

Allows users to configure the appropriate network settings on the HT841/HT881 to obtain IPv4 address. Users could select DHCP, Static IP or PPPoE. By default, it is set to DHCP.

Dynamically assigned via DHCP

All the field values for the static IP mode are not used (even though they are still saved in the flash memory.) The FXO Gateway acquires its IP address from the first DHCP server it discovers from the LAN it is connected.

Use PPPoE

Set the PPPoE account settings. If selected, FXO Gateway attempts to establish a PPPoE session if any of the PPPoE fields are set.

Preferred DNS server

Specifies preferred DNS server to use when DHCP or PPPoE are set.
You can set up yo 4 Preferred DNS Servers.

Statically configured as IP address

Configure IP address, subnet Mask, default router IP address, 1st preferred DNS server, 2nd preferred DNS server. These fields are set to zero by default.

Allows users to configure the appropriate network settings on the HT841/HT881 to obtain an IPv6 address. Users could select DHCP or Static IP. By default, it is set to DHCP.

Enable Management Interface

Allows activation of a dedicated interface for remote management and configuration of the device.
Disabled by Default.

Management Access

defines the allowed methods (protocols) and permissions for remote access and configuration of the device, two options can be selected

Enable SNMP Through Management Interface

Allows the activation of SNMP (Simple Network Management Protocol) access exclusively through the dedicated management interface for monitoring and managing the device remotely.
Disabled by Default

Enable TR069 Through Management Interface

Allows the activation of TR-069 protocol access exclusively through the dedicated management interface for remote device management and provisioning.
Disabled by Default

Enable Syslog Through Management Interface

Allows the activation of syslog communication exclusively through the dedicated management interface for remote logging and monitoring of device events.
Disabled by Default.

Management Interface IPv4 Address

Sets the specific IPv4 address assigned to the dedicated management interface for remote access and configuration.

802.1Q/VLAN Tag

Allows the tagging of network packets with VLAN information to segment and prioritize network traffic.
The Valid Range is 0-4094, Default value is 0

802.1p priority value

Assigns a priority value to network packets for Quality of Service (QoS) and traffic prioritization purposes.
The Valid Range is 0-7, Default value is 0

Dynamically assigned via DHCP

Indicates that the device's network settings, such as IP address, are automatically obtained from a DHCP server rather than being manually configured.
It is set as the Default setting for Management Interface IPv4 Address

Statically configured as

Configure IP address, subnet Mask, default router IP address, 1st preferred DNS server, 2nd preferred DNS server.

By default: 

IP Address: 192.168.100.100

Subnet Mask: 255.255.255.0

Default Router: 192.168.100.1

DNS Server 1: 0.0.0.0

DNS Server 2: 0.0.0.0

Time Zone

Selects time zone to define date/time on the device.

Self-Defined Time Zone

Allows users to define their own time zone when time zone is set to "Using self-defined Time Zone"

The syntax is: std offset dst [offset], start [/time], end [/time]

Default is set to: MTZ+6MDT+5,M3.2.0,M11.1.0

MTZ+6MDT+5

This indicates a time zone with 6 hours offset with 1 hour ahead (when daylight saving) which is U.S central time. If it is positive (+) if the local time zone is west of the Prime Meridian (A.K.A: International or Greenwich Meridian) and negative (-) if it is east.

M4.1.0,M11.1.0

The 1st number indicates Month: 1,2,3.., 12 (for Jan, Feb, .., Dec)

The 2nd number indicates the nth iteration of the weekday: (1st Sunday, 3rd Tuesday…)

The 3rd number indicates weekday: 0,1,2,..,6 (for Sun, Mon, Tues, … ,Sat)

Therefore, this example is the DST which starts from the Second Sunday of March to the 1st Sunday of November.

Allow DHCP server to set Time Zone

Obtains time zone setting (offset) from a DHCP server using DHCP Option 2; it will override selected time zone. If set to No, the analogue adapter will use selected time zone even if provided by DHCP server. Default is Yes.

Language

Configures the languages of the voice prompt and web interface. Available languages: English, Chinese, Russian, and Spanish.

NAT/DHCP Server Information & Configuration

Working Mode of Network Interface

Refers to the configuration of the network interfaces on a device.

Device Mode

Controls whether the device is working in NAT Router, Bridge, or WAN Only mode.

The default mode is Bridge mode.

Save the setting and reboot prior to configuring the HT841/HT881.

NAT Maximum Ports

Defines the number of ports that can be managed while in NAT router mode.
Range: 0 - 4096, default is 1024. Typically, one port per connection

NAT TCP Timeout

NAT TCP idle timeout in seconds. The connection will be closed after preconfigured, timeout if not refreshed. Range: 0 - 3600

NAT UDP Timeout

NAT UDP idle timeout in seconds. The connection will be closed after preconfigured, timeout if not refreshed. Range: 0 - 3600, default is 300

Uplink Bandwidth

Specifies the maximum uplink bandwidth permitted by the device.

This function is disabled by default.

The total bandwidth can be set as 128K, 256K, 512K, 1M, 2M, 3M, 4M, 5M, 10M, or 15 M.

The primary function of this setting is to limit the uplink bandwidth for the device's internal system, signaling, and NATed traffic.

Example: When 512k is configured, there will be at least 512kbps limited for internal system, signaling, and NATed traffic.

Note: Voice or RTP stream will never be limited.

Downlink Bandwidth

Specifies the maximum downlink bandwidth permitted by the device.

This function is disabled by default.

The total bandwidth can be set as 128K, 256K, 512K, 1M, 2M, 3M, 4M, 5M, 10M, or 15 M.

The primary function of this setting is to limit the download bandwidth for the device's internal system, signaling, and NATed traffic.

Example: if 128 is configured, there will be at least 128kbps limited for internal system, signaling, and NATed traffic.

Note: Voice or RTP stream will never be limited.

Enable UPnP Support

When set to Yes, the HT841/HT881 acts as a UPnP gateway for your UPnP-enabled applications. UPnP = Universal Plug and Play. The default is No.

Reply to ICMP on WAN Port

When set to Yes, the HT841/HT881 responds to the PING command from other computers but is also made vulnerable to DOS attacks. The default is No.

Cloned WAN MAC Address

This allows the user to change/set a specific MAC address on the WAN interface. Note: Set in Hex format.

LAN Port VLAN Feature Under Bridge Mode

This feature allows users to configure a different VLAN tag and priority value for the second network port when HT841/881 is configured in bridge mode.

The priority value range is 0-7, The VLAN tag range is 0-4094.
The default VLAN Tag and Priority value are 0.

Enable LAN DHCP

When set to Yes, the device will function as a simple router and the LAN port will provide IP addresses to the internal network. Connect the WAN port to ADSL/Cable modem or any other equipment that provides access to the public Internet. The default setting is Yes.

LAN DHCP Base IP

Base IP Address for a LAN port.

The default factory setting is 192.168.2.1.

Note: When the device detects WAN IP is conflicting with LAN IP, the LAN base IP address will be changed based on the network mask the effective subnet will be increased by 1.
For example; 192.168.2.1 will be changed to 192.168.3.1 if the netmask is 255.255.255.0. Then the device will reboot

LAN DHCP Start IP

The default value is 100. The last segment of IP address is assigned to the HT841/HT881 in the LAN Network.
Default configuration assigns IP address (to local network devices) starting from 192.168.2.100.

LAN DHCP End IP

Default value is 199. This parameter allows a user to limit the number of local network devices connected to the internal router.

LAN Subnet Mask

Sets the LAN subnet mask.
Default value is 255.255.255.0

DHCP IP Lease Time

Default value is 120 hrs. (5 days). The length of time the IP address is assigned to the LAN clients. Value is set in units of hours.

DMZ IP

This function forwards all WAN IP traffic to a specific IP address if no matching port is used by HT841/HT881 or in the defined port forwarding.

Port Forwarding

Forwards a matching (TCP/UDP) port to a specific LAN IP address with a specific (TCP/UDP) port.

Up to 8 rules are available.

Reset Type

Note: After choosing the reset type, you will have to click the reset button for it to take effect.

New Admin Password

Defines the administrator level password to access the Advanced Web Configuration page. This field is case sensitive. Only the administrator can configure the “Advanced Settings” page. Password field is purposely left blank for security reasons after clicking update and saved. 

Note : The Password must contain 8-30 characters, at least one number, one uppercase, and a lowercase letter. Purposely not displayed for security reasons

Confirm Admin Password

Confirms the new admin password.

Disable User Level Web Access

Disable or enable User Level Web Access. Default is No.

Disable Viewer Level Web Access

Disable or enable Viewer Level Web Access Default is No.

Layer 2 QoS

Sets values for 802.1Q/VLAN Tag. Default is 0. Valid range is 0-4094.

SIP 802.1p. Default is 0. Valid range is 0-7.

RTP 802.1p. Default is 0. Valid range is 0-7.

Blacklist for WAN Side Port

It could be either port range or single port separated by a “,”

Example: “5000-6000, 7000 “.

STUN Server is

Configures IP address or domain name of STUN server. Only non-symmetric NAT routers work with STUN.

Keep-alive interval

Sends periodically a blank UDP packet to SIP server to keep the “ping hole” on the NAT router open. Default is 20 seconds.

Use STUN to detect network connectivity

Uses STUN keep-alive to detect WAN side network problems. If keep-alive request does not yield any response for configured number of times (minimum 3), the device will restart the TCP/IP stack.

If the STUN server does not respond when the device boots up, the feature is disabled.

Default setting is No.

Use DNS to detect network connectivity

Uses DNS to detect WAN side network problems.

Default setting is “No”.

Use ARP to detect network connectivity

Uses ARP to check the network connectivity.

Default is “Yes”.

Verify host when using HTTPS

Enables / disables the host verification when using HTTPS.

Upgrade via

Selects firmware upgrade/provisioning method: TFTP, HTTP, HTTPS, FTP or FTPS. Default is HTTPS.

Firmware Server Path

Sets IP address or FQDN of firmware server. The URL of the server that hosts the firmware release.

Note: You can specify the protocol used in the Firmware Server Path. (example: https://192.168.5.120), this will bypass the "Upgrade Via" method.

Default is fm.grandstream.com/gs.

Config Server Path

Sets IP address or FQDN of configuration server. The URL of the server that hosts the configuration file to provision HT8xx.

Note: You can specify the protocol used in the Config Server Path. (example: https://192.168.5.120), this will bypass the "Upgrade Via" method.

Default is fm.grandstream.com/gs.

XML Config File Password

Decrypts XML configuration file when encrypted. The password used for encrypting the XML configuration file using OpenSSL.

HTTP/HTTPS FTP/FTPS Username

Enters username to authenticate with HTTP/HTTPS FTP/FTPS server.

HTTP/HTTPS FTP/FTPS Password

Enters password to authenticate with HTTP/HTTPS FTP/FTPS server.

Firmware File Prefix

Checks if firmware file is with matching prefix before downloading it. This field enables user to store different versions of firmware files in one directory on the firmware server.

Firmware File Postfix

Checks if firmware file is with matching postfix before downloading it.

This field enables user to store different versions of firmware files in one directory on the firmware server.

Config File Prefix

Checks if configuration files are with matching prefix before downloading them. This field enables user to store different configuration files in one directory on the provisioning server.

Config File Postfix

Checks if configuration files are with matching postfix before downloading them. This field enables user to store different configuration files in one directory on the provisioning server.

Enable using tags in URL   

Allows users to configure variables on the configuration server path to differentiate the directories on the server.

Always send HTTP Basic Authentication Information 

Default is No. If set to Yes, The device will send configured user name and password within HTTP request before server sends authentication challenge.

Allow DHCP Option 66 or 160 to Override Server

Obtains configuration and upgrade server’s information using options 66 from DHCP server.

Note: If DHCP Option 66 is enabled, the HT8xx will attempt downloading the firmware file from the server URL provided by DHCP, even though Config Server Path is left blank.

The server URL provided by DHCP can include authentication credentials using following format: “username:password@Provisioning_Server_IP”.

Additional Override DHCP Option

Allows users to enable the Additional Override DHCP Option in Option 150. The default value is "None".

3CX Auto Provision

Sends multicast “SUBSCRIBE” message for provisioning at booting stage, used for PnP (Plug-and-Play) configuration. Default is Yes.

Automatic Upgrade

Specifies when the firmware upgrade process will be initiated; there are 4 options:

No: The HT8xx will only do an upgrade once at boot up.

Check every X minutes: User needs to specify a period in minutes.

Check every day: User needs to specify the start hour and the end hour of the day (0-23).

Check every week: User needs to specify “Day of the week (0-6)”. (Day of week is starting from Sunday).

Default is No.

Randomized Automatic Upgrade

Randomized Automatic Upgrade within the range of hours of the day or postpone the upgrade every X minute(s) by random 1 to X minute(s).

Always Check for New Firmware at Boot up

Configures the HT841/HT881 to always search for the new firmware at boot up. During the boot stage, the HT8xx will contact the firmware upgrade server to search for a new firmware, when available it will start the upgrade process, otherwise it will boot normally.

Check New Firmware only when F/W pre/suffix changes

Configure the HT8xx to search for the new firmware when the firmware prefix / suffix changes.

When this option is selected, the HT8xx will check for updates only when the pre/suffix has been changed.

Always Skip the Firmware Check

Configures the HT8xxto skip the firmware check, when this option is selected the HT8xx will always skip searching for a new firmware.

Configuration File Types Allowed

Allows users to configure provision configuration file type in xml file only or all file types.

Download and Process All Available Config Files

This feature allows users to download and process all available config files. By default, the device will provision the first available config in the order of cfgMAC > cfgMAC.xml > cfgMODEL.xml > and cfg.xml (corresponding to device-specific, model-specific, and global configs). 

If this option is enabled, the device will inverse the downloading process to cfg.xml > cfgMODEL.xml > cfgMAC.bin > cfgMAC.xml and add cfgMAC_override.xml. The following files will override the files that have already been loaded and processed.

The default value is "No"

Disable SIP NOTIFY Authentication

Disables the SIP NOTIFY Authentication on the phone adapter. If set to “Yes”, the phone adapter will not challenge NOTIFY with 401.

The default setting is “No”

Authenticate Conf File

Authenticates configuration before being accepted. This protects the configuration from unauthorized modifications. Default is No.

Validate Server Certificates

This feature allows users to validate server certificates with our trusted list of TLS connections. The device needs to reboot after changing the setting.

Default is enabled.

Trusted CA certificates A

Uses the certificate for Authentication if “Check Domain Certificates” is set to “Yes” under “Account”–> “SIP Settings”.

Trusted CA certificates B

Uses the certificate for Authentication if “Check Domain Certificates” is set to “Yes” under “Account”–> “SIP Settings”.

Trusted CA certificates C

Uses the certificate for Authentication if “Check Domain Certificates” is set to “Yes” under “Account”–> “SIP Settings”.

Trusted CA certificates D

Uses the certificate for Authentication if “Check Domain Certificates” is set to “Yes” under “Account”–> “SIP Settings”.

Load CA Certificates

This feature allows user to specify which certificate to trust when performing server authentication.

Build-in trusted : (Default) Build-in trusted certificates

Custom trusted certificate: Uploaded Certificates

All trusted Certificates: Both built-in and uploaded Certificates

SIP TLS Certificate

Specifies SSL certificate used for SIP over TLS is in X.509 format. The HT8xx has built-in private key and SSL certificate.

Maximum supported length is 4069.

SIP TLS Private Key

Specifies TLS private key used for SIP over TLS is in X.509 format.

Maximum supported length is 4069.

SIP TLS Private Key Password

Specifies SSL Private key password used for SIP Transport in TLS/TCP.

Custom Certificate

(Private Key + Certificate)

Allows users to update to the device their own certificate signed by a custom CA certificate to manage client authentication.

Enable TR-069

Sets the phone adapter system to enable the “CPE WAN Management Protocol” (TR-069). The default setting is Yes.

TR-069 firewall rules

Configures the TR-069 firewall rules , Value port range is 1-65535

ACS URL

Specifies URL of TR-069 Auto Configuration Servers (e.g., http://acs.mycompany.com), or IP address.

Default setting is: “https://acs.gdms.cloud”

ACS Username

Enters username to authenticate to ACS.

ACS Password

Enters password to authenticate to ACS.

Periodic Inform Enable

Sends periodic inform packets to ACS. Default is Yes.

Periodic Inform Interval

Sets frequency that the inform packets will be sent out to ACS.

Default is 86400 seconds.

Connection Request Username

Enters username for ACS to connect to the HT8xx.

Connection Request Password

Enters password for ACS to connect to the HT8xx.

Connection Request Port

Configures the TR-069 connection request port. The value range is 0 to 65535.Default is 7547

CPE SSL Certificate

Configures the Cert File for the phone adapter to connect to the ACS via SSL.

CPE SSL Private Key

Specifies the Cert Key for the phone adapter to connect to the ACS via SSL.

Enable SNMP

Default is No.

SNMP Version

Choose between (Version 1, Version 2c, or Version 3).

SNMP Port

Listening Port of SNMP daemon (Default 161).

SNMP Trap IP Address

IP address of trap destination. Up to 3 trap destinations are supported. Users should enter the IP addresses separated with comma (,).

SNMP Trap port

Port of Trap destination (Default 162)

SNMP Trap Version

Choose between (Version 1, Version 2c, or Version 3).

SNMP Trap Interval

Time interval between traps (Default is 5).

SNMPv1/v2c Community

Name of SNMPv1/v2c community.

SNMPv1/v2c Trap Community

Name of SNMPv1/v2c trap community.

SNMPv3 Username

Username for SNMPv3.

SNMPv3 Security Level

noAuthUser: Users with security level noAuthnoPriv and context name as noAuth.

authUser: Users with security level authNoPriv and context name as auth.

privUser: Users with security level authPriv and context name as priv.

SNMPv3 Authentication Protocol

Select the Authentication Protocol: “None” or “MD5” or “SHA.”

SNMPv3 Privacy Protocol

Select the Privacy Protocol: “None” or “AES/AES128” or “DES”.

SNMPv3 Authentication Key

Enter the Authentication Key.

SNMPv3 Privacy Key

Enter the Privacy Key.

SNMPv3 Trap Username

Username for SNMPv3 Trap.

SNMPv3 Trap Security Level

noAuthUser: Users with security level noAuthnoPriv and context name as noAuth.

authUser: Users with security level authNoPriv and context name as auth.

privUser: Users with security level authPriv and context name as priv.

SNMPv3 Trap Authentication Protocol

Select the Authentication Protocol: “None” or “MD5” or “SHA”.

SNMPv3 Trap Privacy Protocol

Select the Privacy Protocol: “None” or “AES/AES128” or “DES”.

SNMPv3 Trap Authentication Key

Enter the Trap Authentication Key.

SNMPv3 Trap Privacy Key

Enter the Trap Privacy Key.

Enable RADIUS Web Access Control

Enables RADIUS Web Access Control.
Default is "No".

Action upon RADIUS Auth Server Error

Choose action upon RADIUS server error. Default is Authenticate Locally (Default Authenticate Locally)

RADIUS Auth Protocol

RADIUS Auth Server Address

Address of RADIUS Auth server.

RADIUS Auth Server Port

Port of RADIUS Auth server.

RADIUS Shared Secret

Set RADIUS shared secret.

RADIUS VSA Vendor ID

Configure RADIUS VSA Vendor ID to match RADIUS server’s configuration. Default is 42397 for Grandstream Networks Inc.

RADIUS VSA Access Level Attribute

Configure RADIUS VSA Access Level Attribute to match RADIUS server’s configuration. Incorrect setting would cause Radius authenticate fail.

Enable OpenVPN®

Allow user to enable OpenVPN®. Default is No.

OpenVPN® Server Address

Specify the IP address or FQDN for the OpenVPN® Server.

OpenVPN® Port

Specify the listening port of the OpenVPN® server. Default is 1194

OpenVPN® Interface type

Specify the Interface type of OpenVPN® whether TAP or TUN. Default is TUN.

OpenVPN® Transport

Specify the Transport Type of OpenVPN® whether UDP or TCP. The default is UDP.

Enable OpenVPN® LZO Compression

Enable OpenVPN® LZO Compression. Default is Yes.

OpenVPN® Encryption

Select the OpenVPN® Encryption. Default is BF-CBC 128 bit (default key).

OpenVPN® Digest

Select the OpenVPN® Digest. Default is SHA1.

OpenVPN® CA

Specifies the OpenVPN® CA. Maximum Character Number is 8192.

OpenVPN® Certificate

Specifies the OpenVPN® Certificate. Maximum Character Number is 8192.

OpenVPN® Client Key

Specifies the Client Key. Maximum Character Number is 8192.

OpenVPN® Client Key Password

Configures the OpenVPN® Client Key Password. Maximum Length is 64.

OpenVPN® username

Configure the OpenVPN® username.

OpenVPN® password

Configure the OpenVPN® password

System Ring Cadence

Configuration option is set ring cadence on FXS port for all incoming calls.

Syntax: c=on1/off1-on2/off2-on3/off3; (3 cadences maximum)

Default is set to c=2000/4000; (US standards)

Call Progress Tones:

Dial Tone

Ringback Tone

Busy Tone

Reorder Tone

Confirmation Tone

Call Waiting Tone

Prompt Tone

Conference Party Hangup Tone *

Special Proceed Indication Tone

Special Condition Tone

Using these settings, users can configure tone frequencies and cadence according to their preference. By default, they are set to North American frequencies.

Configure these settings with known values to avoid uncomfortable high pitch sounds. ON is the period of ringing (“On time” in ‘ms’) while OFF is the period of silence. In order to set a continuous tone, OFF should be zero. Otherwise, it will ring ON ms and a pause of OFF ms and then repeat the pattern.

Dial tone:

f1=350@-13, f2=440@-13, c=0/0;

Syntax: f1=freq@vol, f2=freq@vol, c=on1/off1-on2/off2-on3/off3; […]

(Note: freq: 0 – 4000Hz; vol: -30 – 0dBm)

* “Conference Party Hang-up Tone” will apply only if the “Special Feature” is set to “MTS”.

Special Proceed Indication Tone: This feature allows user to configure the tone played when user goes offhook and there is voicemail on the subscribed mailbox. Need to set ‘MWI Tone’ to ‘Special Proceed Indication Tone’ to use this feature.

Prompt Tone Access Code

Key pattern to get Prompt Tone. Maximum 20 digits.

Lock Keypad Update

Configuration update via keypad (analog phone connected to FXS port keypad using IVR menu) is disabled if set to Yes.

Disable Voice Prompt

Voice prompt is disabled if set to Yes.

Disable Direct IP Call

Direct IP call is disabled if set to Yes.

Play Busy Tone When Account is unregistered

When this feature is set to Yes, device will play busy tone when the FXS port account is not registered, and the attached analog phone is offhook.
Disabled by Default.

Designates a backup communication route that becomes active when the primary route fails, ensuring continuous connectivity and call reliability.
You can set this option to Auto, Always Disconnected, or Always Connected:

Default value is Auto

Blacklist for Incoming Calls

Allow users to block incoming calls from specific list of numbers.

Maximum allow 10 SIP numbers and each number should be separated by a comma (‘,’) in web UI.

Other allowed characters are 0-9, comma (“,”), asterisk (‘*’), pound sign (‘#’) and plus sign (‘+’).

NTP Server

Allow DHCP Option 42 to override NTP server

Defines whether DHCP Option 42 should override NTP server or not. When enabled, DHCP Option 42 will override the NTP server if it is set up on the LAN. The default setting is Yes.

DHCP Option 17 Enterprise Number

Configure the DHCP option 17 number. Default is 3561

CDR File Option

By default, the device will split the allowed memory for CDR file into 2 parts. Device will create the first CDR file which is half of the allowed size, when it is full, device will create the second file.

When “CDR File Option” is set to Default “Keep”, device will keep the call records when both files are full, no more new record will be stored.

When this feature is set to “Overwrite”, device will clear the first CDR file and start storing again.

When the feature is disabled the device will not record any calls.

The CDR file output will be available at Status page: [CDR File]

SIP File Option

By default, the device will split the allowed memory for SIP file into 2 parts. Device will create the first SIP file which is half of the allowed size, when it is full, device will create the second file.

When “SIP File Option” is set to Default “Keep”, device will keep the call records when both files are full, no more new record will be stored.

When this feature is set to “Overwrite”, device will clear the first SIP file and start storing again.

The SIP file output will be available at Status page: [SIP File]

Note: “Send SIP Log” must be enabled to be able to capture the trace.

Disable Weak TLS Cipher Suites

Allows users to disable weak ciphers DES/3DES and RC4, Symmetric Encryption SEED, Symmetric Authentication MD5, Protocol Version SSLv2/SSLv3 or Disable All of the Above Weak TLS Ciphers Suites.

Default is No.

Minimum TLS Version

This feature allows customer to choose desired Minimum TLS Version.

Choices are:

Unlimited

TLS 1.1

TLS 1.2

Default is Unlimited.

Maximum TLS Version

This feature allows customer to choose desired Maximum TLS Version.

Choices are:

Unlimited

TLS 1.0

TLS 1.2

Default is Unlimited.

Syslog Protocol

If set to SSL/TLS, the syslog messages will be sent through secured TLS

Protocol to syslog server.

Default setting is UDP.

Note: The CA certificate is required to connect with the TLS server

A reboot is required to take effect.

Syslog Server

URL or IP address of syslog server.

Note: A reboot is required to take effect.

Syslog Level

Select the HT8xx to report the log level. Default is NONE. The level is one of EXTRA DEBUG, DEBUG, INFO, WARNING or ERROR. Syslog messages are sent based on the following events:

1. product model/version on boot up (INFO level)

2. NAT related info (INFO level)

4. SIP message summary (INFO level)

5. inbound and outbound calls (INFO level)

6. registration status change (INFO level)

7. negotiated codec (INFO level)

8. Ethernet link up (INFO level)

9. SLIC chip exception (WARNING and ERROR levels)

extra syslog style (EXTRA DEBUG level)

Note: A reboot is required to take effect.

Send SIP Log

Configures whether the SIP log will be included in the syslog messages.

The default setting is No.

Ethernet Capture

Enables the capturing and analysis of Ethernet network traffic for troubleshooting and monitoring purposes.

Automatic Reboot

Default is No. When “Yes, reboot every day at hour” or “Yes, reboot every week at day” or “Yes, reboot every month at day” is checked, user can specify “Hour of the day (0-23)” or “Day of the week (0-6)” or “Day of the month (0-30)”. Default time is Monday 1AM.

Port Record

Allows the recording of port-level call information, such as call duration, caller ID, and call status, for monitoring and logging purposes.

Download Device Configuration

Press Download button to download device configuration file to local computer. The filename is “config.txt”. The file is plain text and not including password fields.

Download Device XML Configuration

Press Download to download device configuration file to local computer. The filename is “config.xml”. The file will not include password fields.

Upload Firmware

Press Upload from local directory button to load the firmware file to the device from your computer. The firmware filename should be “ht8x1fw.bin”

Upload Configuration

Press Upload from local directory button to load configuration file to the device from your computer. The configuration file should be an XML file (for instance: “config.xml”). Note: The field

Export Backup Configuration

Press Download button to export device backup configuration to computer.

The output is “cfg<mac>_enc.xml” (where <mac> is the MAC address of the device). The file is encrypted and can be used on same device only.

Restore From Backup Configuration

Press Upload button to restore device configuration from previously exported backup configuration.

E911/HELD Protocol:

Enable E911

Enable Enhanced 911 call. Default is disabled

HELD Protocol

Configure HELD transfer protocol. HTTP or HTTPS

HELD Synchronization Interval

The valid synchronization interval is between 30 to 1440 minutes. The synchronization is off when the interval is 0.

Location Server

Configure the primary Location Information Server (LIS) address

Location Server Username

Configure the user name of the primary Location Information Server (LIS)

Location Server Password

Configure the password of the primary Location Information Server (LIS)

Secondary Location Server

Configure the seconary Location Information Server (LIS) address

Secondary Location Server Username

Configure the user name of the secondary Location Information Server (LIS)

Secondary Location Server Password

Configure the password of the secondary Location Information Server (LIS)

HELD Location Types

Configure "locationType" element in the location request. "geodetic", "civic" and "location URI"

HELD NAI

Configure "locationType" element in the location request. "geodetic", "civic" and "location URI"

HELD Identity 1-10

HELD Identity

HELD Identity 1-10 Value

HELD Identity value

E911 Emergency Numbers

A user can configure multiple emergency numbers separated with the delimiter symbol ";".

Geolocation-Routing Header

If "Yes", E.911 INVITE message includes the "Geolocation-Routing" header with the value "Yes"

Priority Header

If "Yes", E.911 INVITE message includes the "Priority" header with the value "emergency"

FXO Profile (1, 2)

Profile Active

Activates / Deactivates the accounts. The FXO port configuration will not change if disabled, although the port will not be operational, in this state, there will be no dial tone when picking up the analog phone and making/receiving calls will not be possible.

Primary SIP Server

Configures SIP server IP address (Supports both IPv4 and IPv6 addresses) or domain name provided by VoIP service provider. (For example: sip.mycompany.com, IPv4:192.168.5.170, or IPv6: fe80::20b:82ff:fe75:211d). This is the primary SIP server used to send/receive SIP messages from/to HT841/HT881.

Failover SIP Server

Defines failover SIP server IP address (Supports both IPv4 and IPv6 addresses) or domain name provided by VoIP service provider. (For example: sip.mycompany.com, IPv4:192.168.5.170, or IPv6 fe80::20b:82ff:fe75:211d:). This server will be used if primary SIP server becomes unavailable.

Prefer Primary SIP Server

Selects to prefer primary SIP server. The account will register to primary Server if registration with Failover server expires. Default is No.

Outbound Proxy

Specifies IP address (Supports both IPv4 and IPv6 addresses) or domain name of outbound Proxy, or media gateway, or session border controller. (For example: proxy.myprovider.com, IPv4: 192.168.5.170, or IPv6: fe80::20b:82ff:fe75:211d). It’s Used by HT841/881 for firewall or NAT penetration in different network environments. If symmetric NAT is detected, STUN will not work and only outbound proxy can correct the problem

Backup Outbound Proxy

Configures the backup outbound proxy to be used when the “Outbound Proxy” registration fails. (For example: proxy.myprovider.com, or IP address, if any: IPv4: 192.168.5.170/ IPv6: fe80::20b:82ff:fe75:211d). By default, this field is left empty.

Prefer Primary Outbound Proxy

If the user configures this option to “Yes”, when the registration expires, the device will re-register via primary outbound proxy. By default, this option is disabled.

From Domain

allows users to add the actual domain name, it will override the from header.This is an optional configuration.

SIP Transport

Selects transport protocol for SIP packets; UDP or TCP or TLS. Please make sure your SIP Server or network environment supports SIP over the selected transport method. Default is UDP.

SIP URI Scheme When Using TLS

Specifies if “sip” or “sips” will be used when TLS/TCP is selected for SIP Transport. The default setting is “sips”.

Use Actual Ephemeral Port in Contact with TCP/TLS

Controls the port information in the Via header and Contact header. If set to “No”, these port numbers will use the permanent listening port on the phone. Otherwise, they will use the ephemeral port for the connection. Default is No.

NAT Traversal

Indicates type of NAT for each account. This parameter configures whether the NAT traversal mechanism is activated. Users could select the mechanism from No, Keep-alive, STUN, UPnP, VPN, and Auto.

Default setting is No.

Selects DNS mode to use for the client to look up server. One mode can be chosen.

A Record (Default): resolves IP Address of target according to domain name.

SRV: DNS SRV resource records indicate how to find services for various protocols.

NAPTR/SRV: Naming Authority Pointer according to RFC 2915.

Use Configured IP: If the SIP server is configured as domain name, device will not send DNS queries, but will use “Primary IP” or “Backup IP” to send SIP message if at least one of them is not empty. It will try to use “Primary IP” first, after 3 tries without any response, it will switch to “Backup IP 1”, then “Backup IP 2”, and then it will switch back to “Primary IP” after 3 retries.

DNS SRV Failover Mode

Configure the preferred IP mode when DNS Mode is SRV or NAPTR/SRV.

• Default SIP request will always be sent to the address with the top priority based on the SRV query result, even if this address is different from the registered IP address.

• Saved one until DNS TTL SIP request will always be sent to the registered IP address until DNS TTL expires or registered IP address is unreachable

• Saved on until no response SIP request will always be sent to the registered IP address only until registered IP address is unreachable.

Failback Timer

When the primary SBC is up, device will send SIP requests to the primary SBC. If at any point device fails over to the secondary SBC, the SIP requests will stay on the failover SBC for the duration of the failback timer. When the timer expires, device will send SIP requests to the primary SBC, (in minutes. Default is 60 minutes, max 45 days).

Register before DNS SRV Failover

This feature is used to control whether the device need to initiate a new registration request (following existing DNS SRV fail-over mode) first and then direct the non-registration SIP request (INVITE) to the new successfully registered server or not.

Primary IP

The main IP address used for communication and control.

Backup IP1

The secondary IP address used as a backup for communication in case the Primary IP fails.

Backup IP2

the third IP address used as an additional backup for communication in case both the Primary IP and Backup IP1 fail.

TEL URI

Indicates E.164 number in the “From” header by adding the “User=Phone” parameter or using “Tel:” in SIP packets, if the HT841/HT881 has an assigned PSTN Number.

Disabled: Use “SIP User ID” information in the Request-Line and “From” header.

User=Phone: “User=Phone” parameter will be attached to the Request-Line and “From” header in the SIP request to indicate the E.164 number. If set to “Enable”.

Enabled: “Tel:” will be used instead of “sip:” in the SIP request.

Please consult your carrier before changing this parameter. The default is Disabled.

SIP Registration

Controls whether the HT841/HT881 needs to send REGISTER messages to the proxy server. The default setting is Yes.

Unregister on Reboot

Controls whether to clear SIP user’s information by sending un-register request to the proxy server. The un-registration is performed by sending a REGISTER message with “Expires=0” parameter to the SIP server. This will unregister the SIP account under the concerned FXO page.Unregister on reboot option can be set to "No", "All" or "Instance".

Default value is set to "No"

Outgoing Call Without Registration

Enables the ability to place outgoing calls even if the account is not registered (if allowed by ITSP); device will not be able to receive incoming calls. Default is No.

Register Expiration

Refreshes registration periodically with specified SIP proxy (in minutes). Maximum interval is 65535 minutes (about 45 days).

Default is 60 minutes (or 1 hour).

Reregister Before Expiration

Sends re-register request after specific time (in seconds) to renew registration before the previous registration expires.

SIP Registration Failure Retry Wait Time

Sends re-register request after specific time (in seconds) when registration process fails. Maximum interval is 3600 seconds (1 hour).

Default is 20 seconds.

SIP Registration Failure Retry Wait Time upon 403 Forbidden

Sends re-register request after specific time (in seconds) when registration process fails with error 403 Forbidden. Maximum interval is 3600 seconds (1 hour). Default is 1200 seconds.

Port Voltage Off upon no SIP Registration or SIP Registration Failure

Cuts off voltage to the port if there is no SIP registration or if SIP registration fails, preventing unwanted calls.
(in minutes. Between 0-60, default is 0. 0 means port voltage is never turned off)

Enable SIP OPTIONS/NOTIFY Keep Alive

Enables SIP OPTIONS or SIP NOTIFY to track account registration status so the ATA will send periodic OPTIONS/NOTIFY message to server to track the connection status with the server.

Default setting is No.

SIP OPTIONS/NOTIFY Keep Alive Interval

Configures the time interval when the ATA send OPTIONS or NOTIFY message to SIP server. The default setting is 30 seconds, which means the ATA will send an OPTIONS/NOTIFY message to the server every 30 seconds. The default range is 1-64800.

SIP OPTIONS/NOTIFY Keep Alive Max Lost

Defines the Number of max lost packets for SIP OPTIONS Keep Alive before re-registration. Between 3-10, default is 3.

Layer 3 QoS

Defines Diff-Serv values for SIP and RTP.

SIP DSCP (Diff-Serv value in decimal, 0-63, default 26)

RTP DSCP (Diff-Serv value in decimal, 0-63, default 46)

Local SIP Port

Defines local port to use by the HT841/HT881 for listening and transmitting SIP packets. Default value for FXO 1 is 5060 and 5062 for FXO 2.

Local RTP Port

Defines the local RTP-RTCP port pair the HT841/881 will listen and transmit. It is the HT841/881 RTP port for channel 0.

The default value for FXO port is 5004

Use Random SIP Port

Controls whether to use configured or random SIP ports. This is usually necessary when multiple HT841x/HT881 are behind the same NAT.
The default is No.