GXW4500 User Manual
GXW4500 User Manual
GXW45xx Series
User Manual
GXW4500 Series – User Manual
Thank you for purchasing the Grandstream GXW450X Digital VoIP Gateway. The GXW450X offers an easy-to-manage, easy-to-configure IP
communications solution for any business with virtual and/or branch locations. The GXW450X supports popular voice codecs and is designed for f
compatibility and interoperability with third-party SIP providers, thus enabling you to fully leverage the benefits of VoIP technology, integrate an I
system into a VoIP network, and efficiently manage GXW450x supports SNMP (Simple Network Management Protocol) which is widely used in net
management for network monitoring for collecting information about monitored devices. To configure SNMP settings, go to GXW450x Web
GUI→System Settings→SNMPcommunication costs.
This manual will help you learn how to operate and manage your GXW450X Digital Gateway and make the best use of its many upgraded features
including simple and quick installation, multi-party conferencing, and direct IP-IP Calling. This Digital VoIP Gateway is very easy to manage and sca
specifically designed to be an easy-to-use and affordable VoIP solution for large and medium-sized enterprises
Safety Compliances
The GXW450X is compliant with various safety standards including FCC/CE. Its power adapter is compliant with UL standards.
Warning:
Use only the power adapter included in the GXW450X package. The use of an alternative power adapter may permanently damage the unit.
Warranty:
Grandstream has a reseller agreement with our reseller customers. End users should contact the company from whom the product was purchased, for
replacement, repair, or refund.
If you purchased the product directly from Grandstream, contact your Grandstream Support for an RMA (Return Materials Authorization) number.
Grandstream reserves the right to change the warranty policy without prior notification.
Caution
Changes or modifications to this product not expressly approved by Grandstream, or operation of this product in any way other than as detailed by this U
Manual, could void your manufacturer warranty.
Feature Highlights
Support of a wide range of voice codecs, including G.722, G.729, iLBC, OPUS, and more
TLS and SRTP security encryption technology to protect calls and accounts
The following table resumes all the technical specifications including the protocols/standards supported, voice codecs, languages, and
upgrade/provisioning settings for the GXW450X
Interfaces
T1/E1/J1 Interface 1/2/4 RJ45 ports, supporting up to 30/60/120 simultaneous VoIP calls
LCD Display 128×32 dot matrix graphic LCD with DOWN and OK buttons
Reset Switch Yes, long press for factory reset and short press for the reboot.
Voice Capabilities
Voice-over-Packet LEC with NLP Packetized Voice Protocol Unit, 128ms-tail-length carrier grade Line Echo Cancellation, Dynamic Jitter Bu
Capabilities Modem detection & auto-switch to G.711
Voice and Fax Codecs G.711 A-law/U-law, G.722, G.723.1 5.3K/6.3K, G.726, G.729A/B, Opus, iLBC, GSM-FR, AAL2-G.726-32
T.38 compliant Group 3 Fax Relay up to 14.4kpbs and auto-switch to G.711 for Fax Passthrough, Fax data pump V.17, V
Fax over IP
V.27ter, V.29 for T.38 fax relay.
Voice-quality
Echo cancellation (G.168-2004), Jitter buffer, Silence suppression (VAD, CNG), PLC
Enhancement
QoS Layer 2 QoS (802.1Q, 802.1p) and Layer 3 (ToS, DiffServ, MPLS) QoS
SIP (RFC 3261) over UDP/TCP/TLS, PRI, SS7, MFC R2, RBS (pending)
Upgrade Firmware upgrade via TFTP / HTTP / HTTPS or local HTTP upload
Device Management Syslog, HTTPS, Web browser, voice prompt, backup and restore, port capture, and packet capture
TCP/UDP/IP, RTP/RTCP, ICMP, ARP, DNS, DDNS, DHCP, NTP, TFTP, SSH, HTTP/HTTPS, PPPoE, STUN, SRTP, TLS, LDAP, PP
Network Protocols
Frame Relay (pending), IPV6, OpenVPN®
Status and statistic Call status and history, device status monitoring, and ISDN status monitoring
Security
Physical
Additional Features
Web UI: English, Simplified Chinese, Traditional Chinese, Spanish, French, Portuguese, German, Russian, Italian, Polish, C
Multi-Language Customizable IVR/voice prompts: English, Chinese, British English, German, Spanish, Greek, French, Italian, Dutch, Polish
Support Portuguese, Russian, Swedish, Turkish, Hebrew, Arabic;
FCC: 47 C.F.R FCC Part 15 Class B; 47 C.F.R FCC Part 68 (TIA-968-B Section 5.2.4 (T1+ISDN))
GETTING STARTED
This chapter provides basic installation instructions including the list of the packaging contents and also information for obtaining the best perfor
with the GXW450X.
Equipment Packaging
Connecting the GXW450X gateway is easy. Follow these steps to connect your GXW450X gateway to the Internet and access the unit’s configurati
pages.
1. Connect one end of a straight-through RJ45 Ethernet cable into the WAN port of the GXW450X; connect the other end to the uplink port of a
Ethernet switch/hub.
2. Connect the 12V DC power adapter to the DC 12V power jack on the back of the GXW450X. Insert the main plug of the power adapter into a
protected power outlet.
3. Connect one end of the T1/E1/J1 cable provided by the service provider into the T1/E1/J1 port of the GXW450X; connect the other end to the
T1/E1/J1 wall jack.
4. Wait for the GXW450X to boot up. The front LCD display will show the GXW450X hardware information when the boot process is completed.
5. Once the GXW450X is successfully connected to the network via the WAN port, the Network LED indicator will be lit green, and an IP address
shown on the LCD display.
WAN/LAN ports Ethernet ports used to connect the GXW to the local and external network
RESET Factory Reset button. Press and hold for a while to reset the factory default settings.
USB port 2 Ports used to connect external USB drives to the GXW
The keypad menu of the GXW450X consists of 2 buttons: OK and Down keys to navigate different options.
2. Press “Down” to browse different menu options. Press “OK” to select an entry.
4. The LCD will return to default display after being idle in the menu for longer than 20 seconds.
Reboot
Factory Reset
Press “OK” to start. Then press the “Down” button to test different LCD patterns. When done, press the “OK” button to exit.
Fan Mode
Factory
Select “All On” “All Off” or “Blinking” and check the LED status for USB, SD, T1/E1/J1, Phone 1/Phone 2, Line 1/Line 2 ports. After the
Menu
test, select “Back” in the menu, and the device will show the LED actual status again.
Select “2022-02-22 22:22” or “2011-01-11 11:11” to start the RTC (Real-Time Clock) test pattern. Check the system time from LCD idle
screen by pressing the “DOWN” button, or from the Web GUI🡪System Status🡪General page. After the test, reboot the device man
and the device will display the correct time.
Hardware Testing
Select “Test DSP” to perform the DSP test on the device. This is mainly for factory testing purposes
which verifies the hardware connection inside the device. The diagnostic result will display on the LCD after the test is done.
Default
Passwor Showing the default Web login password. Once the password was changed, this menu will not show again.
d
Web Protocol: Web access protocol. HTTP or HTTPS. By default, it’s HTTPS
Info Port: Web access port number. By default, it’s 8089
The GXW450X has LED indicators in the front to display the connection status. The following table shows the status definitions.
LED Indicator LED Status
Power
Solid: Connected
LAN
OFF: Disconnected
WAN
The GXW450X embedded Web server responds to HTTP/HTTPS GET/POST requests. Embedded HTML pages allow users to configure the device t
a Web browser such as Microsoft IE, Mozilla Firefox, or Google Chrome.
2. Ensure the GXW450X is properly powered on and displays the IP address on the LCD screen.
3. Open a web browser on the computer and enter the displayed IP address into the search bar in the following format:
https://ipaddress:portnumber
4. Enter username and password to login. (The default administrator username is “admin” and the default random password can be found on th
sticker on the GXW450X).
At first login, users will be forced to change the default admin password. The following screen will be shown, enter the requested information to p
Enter New Password
Press “Confirmed” to apply the settings and access the web GUI.
Setup Wizard
When the user logs in to the GXW450X Web GUI for the first time, he will be asked to change the default password and add an email address to im
security, and a setup wizard will provide guidance to set up basic configuration. Configurations in the setup wizard include Network settings, Time
and Trunk/routes.
Figure 5: GXW450X Setup Wizard
There are six main sections in the Web GUI for users to view the Gateway status and configure and manage the GXW450X.
System Status: Displays GXW450X Dashboard, System Information, Active calls, and network status.
Trunk: To Digital and VoIP trunks and manage inbound/outbound call routes.
System Settings: To configure The HTTP server, network settings, OpenVPN®, security settings, Email Settings, and Time Settings.
Maintenance: To perform the firmware upgrade, backup configurations, user management cleaner setup, reset/reboot, Syslog setup, and
troubleshooting
Currently the GXW450X series Web GUI supports English, Simplified Chinese, Traditional Chinese,
Users can select the displayed language on the Web GUI login page or at the upper right tab of the Web GUI after logging in.
Figure 6: GXW450X Web GUI Languages
Click on the “Save” button after configuring the Web GUI options on one page. After saving all the changes, make sure to click on the “Apply Chan
button on the upper right of the web page to submit all the changes. If the change requires a reboot to take effect, a prompted message will pop
you to reboot the device.
SYSTEM STATUS
The System Status section is the interface that allows users to check the general information about the GXW450X such as software and hardware
information, space usage, resources usage, etc.
Dashboard
The GXW450X monitors the status of Trunks, Digital Channels, Disk capacities, etc. It presents administrators with the real-time status in different s
under the Web GUI🡪System Status🡪Dashboard.
Users could access the space usage information from Web GUI🡪System Status🡪Dashboard 🡪Space Usage. It shows the available and used spa
Space Usage and Inode Usage.
Configuration partition: This partition contains GXW450X system configuration files and service configuration files.
Configuration partition
Data partition
Note: Inode is the pointer used for file reference in the system. The system usually has limited resources of pointers.
Resource Usage
When configuring and managing the GXW450X, users could access resource usage information to estimate the current usage and allocate the res
accordingly. Under Web GUI🡪System Status🡪Dashboard 🡪Resource Usage, the current CPU usage and Memory usage are shown in this chart
Disk Capacity
Users could check the external devices’ capacities from the Dashboard page of the GXW450X under Web GUI🡪System Status🡪Dashboard 🡪De
Storage Capacity.
Figure 9: Device Storage Capacity
PBX Status
The PBX status shows the status of some of the gateway GXW450X services. Among the services monitored on the PBX status tab, there is System
Active Calls, Schedule backup, etc.
Interfaces Status
This section displays the interface connection status on the GXW450X for USB, SD Card, LAN, WAN, and Digital interfaces.
Trunks
Users could see all the configured trunks’ status in this section.
Figure 12: Trunks Status
Four statuses are possible for any trunk configured on the GXW450X:
Available
Busy
Abnormal
Unmonitored
To visualize the state of each channel of the Digital trunk, users can waver the mouse over the status of the digital trunk as shown on the figure be
System Information
The GXW450X system Information can be accessed via Web GUI🡪System Status🡪System Information, which displays the following system
information.
General
On this menu, users could check the hardware and software information for the GXW450X. Please see the details in the following table.
System Information
System Time Current system time. The current system time is also available on the upper right of each web page.
Version Information
Network
Under Web GUI🡪System Status🡪System Information🡪Network, users could check the network information for the GXW450X. Please see the d
in the following table.
WAN/LAN
Global unique ID of the device, in HEX format. The MAC address can be found on the label coming with the original box and on
MAC Address
label located at the bottom of the device.
IPv6 Address
The IPv6 address Link attributed to the network interface
Link
Active Calls
The active calls on the GXW450X are displayed on the Web GUI🡪System Status🡪Active Calls page. Users can monitor call status and hang up ac
call(s) in a real-time manner.
Users can click on “Hang up All” to terminate all the active calls at once.
Network status
GXW450X supports Network Status to display active internet connections. Users can use Network Status to troubleshoot connection issues betwee
GXW450X and other services. This information can be found under Web GUI🡪System Status🡪Network Status, the users can view active Interne
connections and the Active Unix Domain Sockets.
Figure 17: Active connections
SYSTEM SETTINGS
This chapter explains configurations for system-wide parameters on the GXW450X. System settings are under the “System Settings” tab on GXW45
Web GUI. System settings include Network Settings, Security Settings, HTTP Server, Email Settings, Time Settings, OpenVPN® settings, and DDNS
Settings
HTTP Server
The GXW450X embedded web server responds to HTTP/HTTPS GET/POST requests. Embedded HTML pages allow the users to configure the gate
through a Web browser such as Microsoft IE, Mozilla Firefox, and Google Chrome. By default, the Gateway can be accessed via HTTPS using Port 8
(e.g., https://192.168.1.50:8089). Users could also change the access protocol and port as preferred under Web GUI🡪System Settings🡪HTTP Ser
Basic
Settings
Redirect Enable or disable redirect from port 80. On the gateway, the default access protocol is HTTPS and the default port number is 8089
From Port When this option is enabled, the access using HTTP with Port 80 will be redirected to HTTPS with Port 8089. The default setting is
80 “Enable”.
Protocol Select HTTP or HTTPS. The default setting is “HTTPS”. This is also the protocol used for zero config when the endpoint device
Type downloads the config file from the GXW450X.
Port Specify the port number to access the HTTP server. The default port is 8089.
Enable IP
If enabled, only the IP address on the permitted IP list will be allowed to access the GXW450X’s web GUI.
whitelist
Permitted
Add an IP address to the list of allowed IPs to access GXW450X’s web GUI. Ex: 192.168.6.233 / 255.255.255.255
IP(s)
Certificate
Settings
Select the mode to download SSL certificates for the web server, two modes are available:
Options Manually Upload certificate: Upload the files while respecting size and format.
Automatically request certificate: enter the domain from which to request the certificate files.
Upload the certificate for the built-in HTTP server and override the existing one.
TLS Cert
Note: The size of your certificate must be under 2MB. This is the certificate file (*.pem format only) for TLS connection and it will b
renamed as “certificate.pem” automatically. It contains a private key for the client and a signed certificate for the server.
Reset
Restore the default key and certificate. The web server needs to reload to take effect after certificate restoration.
Certificate
Network Settings
After successfully connecting the GXW450X to the network for the first time, users could log in to the Web GUI and go to System Settings🡪Netwo
Settings to configure the network parameters for the device. In this section, all the available network setting options are listed. Select each tab on
Web GUI🡪System Settings🡪Network Settings page to configure IPV4 Settings, IPV6 Settings, 802.1X and Static Routes.
Basic Settings
Please refer to the following tables for basic network configuration parameters on GXW450X.
Switch: WAN port interface will be used for the uplink connection. LAN port interface
Method
be used as a room for PC connection.
MTU Specifies the Maximum Transmission Unit. (By default, it’s 1492)
IPv4 Address
Enter the preferred DNS server address. If Preferred DNS is used, GXW450X will try to
Preferred DNS Server
as the Primary DNS server.
IP Method Select DHCP, Static IP, or PPPoE. The default setting is DHCP.
IP Address Enter the IP address for static IP settings. The default setting is 192.168.0.160
Subnet Mask Enter the subnet mask address for static IP settings. The default setting is 255.255.0.0.
Gateway IP Enter the gateway IP address for static IP settings. The default setting is 0.0.0.0
DNS Server 1 Enter the DNS server 1 address for static IP settings.
DNS Server 2 Enter the DNS server 2 address for static IP settings.
Assign the VLAN tag of the layer 2 QoS packets for the LAN port. The default value is
Layer 2 QoS 802.1Q/VLAN Tag
VLAN Tag). The valid range is between 2 and 4094.
Assign the priority value of the layer 2 QoS packets for the LAN port. The default valu
Layer 2 QoS 802.1p Priority Value
The valid range is between 0 and 7.
Subnet Mask Enter the subnet mask address. The default setting is 255.255.255.0.
DHCP Server Enable Enable or disable DHCP server capability. The default setting is “Yes.
DNS Server 1 Enter DNS server address 1. The default setting is 8.8.8.8
DNS Server 2 Enter DNS server address 2. The default setting is 208.67.222.222.
Allow IP Address From Enter the DHCP IP Pool starting address. The default setting is 192.168.2.100.
Allow IP Address To Enter the DHCP IP Pool ending address. The default setting is 192.168.2.254.
Default Gateway Configure the default Gateway assigned by the DHCP server.
Default IP Lease Time Enter the IP lease time (in seconds). The default setting is 43200.
Assign the VLAN tag of the layer 2 QoS packets for the LAN port. The default value is
Layer 2 QoS 802.1Q/VLAN Tag
VLAN Tag). The valid range is between 2 and 4094.
Assign the priority value of the layer 2 QoS packets for LAN port. The default value is
Layer 2 QoS 802.1p Priority Value
valid range is between 0 and 7.
IPv6 Address
DNS Server 1 Enter the DNS server 1 address for static settings.
DNS Server 2 Enter the DNS server 2 address for static settings.
LAN (when “Method” is set to “Route”)
Allow IP Address From Enter the DHCP IP Pool starting address. The default setting is “2001:db8:2:2::3000”.
Allow IP Address To Enter the DHCP IP Pool ending address. The default setting is “2001:db8:2:2::4000”.
Default IP Lease Time Enter the IP lease time (in seconds). The default setting is 43200.
This feature can bind MAC to IP address on the LAN port when GXW450x is set to “Route” mode.
When devices receive IP addresses from the GXW450X LAN port, they will be listed on the web UI under “System Settings 🡪 Network Settings 🡪
DHCP Client List” as shown below.
Users can bind manually a MAC to an IP address by clicking on , the following figure will pop up.
Figure 20: Add Bind New MAC Address Bind
The user needs to set the device MAC address and the IP that will be bound to it (the IP address needs to be within the GXW450X DHCP range).
In order to bind a batch of listed MAC addresses, the user needs to check first the MAC addresses to bind and click on . A confirma
popup will be shown, click to bind the addresses.
After Clicking “OK” to confirm the binding, the “Bind Status” will change from “Unbind” to “Binding”.
802.1X Settings
IEEE 802.1X is an IEEE standard for port-based network access control. It provides an authentication mechanism to the device before the device ca
access the Internet or other LAN resources. The GXW450X supports 802.1X as a supplicant/client to be authenticated. The following diagram and
show the GXW450X uses 802.1X mode “EAP-MD5” on the WAN port as the client in the network to access the Internet.
The following table shows the configuration parameters for 802.1X on GXW450X. Identity and MD5 password are required for authentication, whic
should be provided by the network administrator obtained from the RADIUS server. If “EAP-TLS” or “EAP-PEAPv0/MSCHAPv2” is used as the 802.1
mode, users will also need to upload 802.1X CA Certificate and 802.1X Client Certificate, which should be also generated from the RADIUS server.
Select 802.1X mode. The default setting is “Disable”. The supported 802.1X mode is:
EAP-MD5
802.1X Mode
EAP-TLS
EAP-PEAPv0/MSCHAPv2
802.1X CA Certificate Upload 802.1X CA certificate. This file will be renamed as “8021x_ca_cert” automatically.
802.1X Client Upload 802.1X client certificate with both certificate and private key. This file will be renamed as “8021x_client_cert”
Certificate automatically.
Static Routes
The GXW450X provides users static routing capability that allows the device to use manually configured routes, rather than information only from
dynamic routing or gateway configured in the GXW450X Web GUI🡪System Settings🡪Network Settings🡪Basic Settings to forward traffic. It ca
used to define a route when no other routes are available or necessary.
Click on to create a new IPv4 static route or click on to create a new IPv6 static route. T
configuration parameters are listed in the table below.
Configure the destination IPv4 address or the destination IPv6 subnet for the GXW450X to reach using the static route.
Example:
Destinatio
n
IPv4 address – 192.168.66.4
Configure the subnet mask for the above destination address. If left blank, the default value is 255.255.255.255.
Netmask
Example: 255.255.255.0
Configure the IPv4 or IPv6 gateway address so that the GXW450X can reach the destination via this gateway. The gateway address
optional.
Gateway
Example:
192.168.40.5 or 2001:740:D::1
Interface Specify the network interface on the GXW450X to reach the destination using the static route.
Port Forwarding
The GXW450X network interface supports router functions which provide users the ability to do port forwarding. If the GXW450X is set to “Route”
Web GUI🡪System Settings🡪Network Settings🡪Basic Settings: Method, port forwarding is available for configuration.
The port forwarding configuration is under the Web GUI🡪System Settings🡪Network Settings🡪Port Forwarding page. Please see the related settin
the table below.
Specify the WAN port number or a range of WAN ports. An unlimited number of ports can be configured.
Note:
WAN
Port
When it is set to a range, the WAN port, and LAN port must be configured with the same range, such as WAN port: 1000-1005 and LA
port: 1000-1005, and access from the WAN port will be forwarded to the LAN port with the same port number, for example, WAN port
will be port forwarding to LAN port 1000.
Note:
LAN
Port
When it is set to a range, the WAN port, and LAN port must be configured with the same range, such as WAN port: 1000-1005 and LA
port: 1000-1005, and access from the WAN port will be forwarded to the LAN port with the same port number, for example, WAN port
will be port forwarding to LAN port 1000.
Protoc
ol Select protocol type “UDP Only”, “TCP Only” or “TCP/UDP” for the forwarding in the selected port. The default setting is “UDP Only”.
Type
OpenVPN®
OpenVPN® settings allow the users to configure GXW450X to use VPN features, the following table gives details about the various options in ord
configure the GXW450X as OpenVPN Client.
OpenVPN® Enable Enable / Disable the OpenVPN® feature. The default is “Disabled”.
Configures the hostname/IP and port of the server. For example, “192.168.1.2:22” or
OpenVPN® Server Address
“2001:0DB8:0000:0000:0000:0000:1428:0000”.
Select the same protocol that the OpenVPN® server is using, e.g., select UDP if the OpenVPN® i
using UDP. Available options:
TCP
Compress tunnel packets using the LZO algorithm on the VPN link. Don’t enable this unless it is a
OpenVPN® Use Compression
enabled in the server config file.
Please select a cryptographic cipher from the drop-down list. Use the same setting that you are u
OpenVPN® Encryption Algorithm
on the server. The default setting is “BF-CBC(Blowfish)”.
OpenVPN® CA Cert Upload an SSL/TLS root certificate. This file will be renamed as ‘ca.crt’ automatically.
OpenVPN® Client Cert Upload a client certificate. This file will be renamed as ‘client.crt’ automatically.
OpenVPN® Client Key Upload a client private key. This file will be renamed as ‘client.key’ automatically.
DDNS Settings
DDNS setting allows users to access GXW450X via domain name instead of IP address.
The GXW450X supports DDNS service from the following DDNS provider:
dydns.org
freedns.afraid.org
zoneedit.com
noip.com
oray.net
1. Register domain in DDNS service provider. Please note the GXW450X needs to have public IP access.
Figure 25: Register Domain Name on Noip.com
2. On Web GUI🡪System Settings🡪Network Settings🡪DDNS Settings, enable DDNS service and configure username, password, and hostnam
3. Now you can use a domain name instead of an IP address to connect to the GXW450X Web GUI.
Figure 27: Using Domaine Name to Connect to GXW450X
Security Settings
The GXW450X provides users with firewall security configurations to prevent certain malicious attacks on the GXW450X system. Users could config
allow, restrict or reject specific traffic through the device for security and bandwidth purpose. The GXW450X also provides the Fail2ban feature for
authentication errors in SIP REGISTER, INVITE and SUBSCRIBE. To configure firewall settings in the GXW450X, go to the Web GUI🡪System
Settings🡪Security Settings page.
Static Defense
Under the Web GUI🡪System Settings🡪Security Settings🡪Static Defense page, users will see the following information:
The following table shows a sample current service status running on the GXW450X.
67 udhcpd UDP/IPv4
Under “Custom Firewall Settings”, users could create new rules to accept, reject or drop certain traffic going through the GXW450X. To create a ne
click on the “Create New Rule” button and a new window will pop up for users to specify rule options.
Right next to the “Create New Rule” button, there is a checkbox for the option “Reject Rules”. If it’s checked, all the rules will be rejected except th
firewall rules listed below. In the firewall rules, only when there is a rule that meets all the following requirements, the option “Reject Rules” will be
allowed to check:
Action: “Accept”
Type “In”
The destination port is set to the system login port (e.g., by default 8089)
Rule Name Specify the Firewall rule name to identify the firewall rule.
Action 1. ACCEPT
2. REJECT
3. DROP
1. FTP
2. SSH
3. Telnet
Service 4. HTTP
5. Custom
If “Custom” is selected, users will need to specify Source (IP and port), Destin
(IP and port), and Protocol (TCP, UDP, or Both) for the service. Please note if
source or the destination field is left blank, it will be used as “Anywhere”.
Save the change and click on the “Apply” button. Then submit the configuration by clicking on “Apply Changes” on the upper right of the web pag
new rule will be listed at the bottom of the page with sequence number, rule name, action, protocol, type, source, destination, and operation. Mor
operations are below:
Use the arrows up ,down , to the top or to the bottom to move the rules up and down.
For typical firewall settings, users could configure the following options on the GXW450X.
Ping Defense If enabled, ICMP response will not be allowed for Ping requests. The default setting is disabled. To enable or disable it, clic
Enable the check box for the LAN or WAN (GXW450X) interface.
Allows the GXW450X to handle excessive amounts of SYN packets from one source and keep the web portal access. There
two options available and only one of these options may be enabled at one time.
SYN-Flood eth(0)LAN defends against attacks directed to the LAN IP address of the GXW450X.
Defense Enable eth(1)WAN defends against attacks directed to the WAN IP address of the GXW450X.
SYN Flood Defense will limit the number of SYN packets accepted by the GXW450X from one source to 10 packets per sec
Any excess packets from that source will be discarded.
Ping-of-Death Enable to prevent Ping-of-Death attack on the device. The default setting is disabled. To enable or disable it, click on the c
Defense Enable box for the LAN or WAN (GXW450X) interface.
Dynamic Defense
Dynamic defense is supported on the GXW450X series. It can blacklist hosts dynamically when the LAN mode is set to “Route” under the Web
GUI🡪System Settings🡪Network Settings🡪Basic Settings page. If enabled, the traffic coming into the GXW450X can be monitored, which helps pr
massive connection attempts or brute force attacks on the device. The blacklist can be created and updated by the GXW450X firewall, which will th
displayed on the web page. Please refer to the following table for dynamic defense options on the GXW450X.
Dynamic Defense
Enable dynamic defense. The default setting is disabled.
Enable
Blacklist Update
Configure the blacklist update time interval (in seconds). The default setting is 120.
Interval
Connection Configure the connection threshold. Once the number of connections from the same host reaches the threshold, it will b
Threshold added to the blacklist. The default setting is 100.
Allowed IPs and ports range, multiple IP addresses, and port range.
For example:
Dynamic Defense
Whitelist
192.168.2.10-
192.168.2.20 5060:5061
Blacklist
Black List Users will be able to view the IPs that have been blocked by GXW450X.
If a host at IP address 192.168.2.5 initiates more than 100 TCP connections to the GXW450X, it will be added to the GXW450X blacklist. This ho
192.168.2.5 will be blocked by the GXW450X for 500 seconds.
Since IP range 192.168.2.10-192.168.2.20 is in the whitelist, if a host initiates more than 20 TCP connections to the GXW450X within 1 minute,
not be added to the GXW450X blacklist. It can still establish a TCP connection with the GXW450X.
Fail2Ban
Fail2Ban feature on the GXW450X provides intrusion detection and prevention for authentication errors in SIP INVITE and SUBSCRIBE. Once the en
detected within “Max Retry Duration”, the GXW450X will act to forbid the host for a certain period as defined in “Banned Duration”. This feature he
prevent SIP brute force attacks on the gateway system.
Figure 30: Fail2Ban Settings
Global
Settings
Enable Enable Fail2Ban. The default setting is disabled. Please make sure both “Enable Fail2Ban” and “Asterisk Service” are turned on to
Fail2Ban Fail2Ban for SIP authentication on the GXW450X.
Banned Configure the duration (in seconds) for the detected host to be banned. The default setting is 600. If set to 0, the host will be alw
Duration banned.
Max Retry Within this duration (in seconds), if a host exceeds the max times of retry as defined in “MaxRetry”, the host will be banned. The
Duration default setting is 600.
MaxRetry Configure the number of authentication failures during “Max Retry Duration” before the host is banned. The default setting is 5.
Fail2Ban Configure IP address, CIDR mask, or DNS host in the whitelist. Fail2Ban will not ban the host with a matching address in this list.
Whitelist 20 addresses can be added to the list.
Local
Settings
Asterisk Enable Asterisk service for Fail2Ban. The default setting is disabled. Please make sure both “Enable Fail2Ban” and “Asterisk Servic
Service turned on to use Fail2Ban for SIP authentication on the GXW450X.
Listening Configure the listening port number for the service. By default, port 5060 will be used for UDP and TCP, and port 5061 will be us
Port Number TLS.
Configure the number of authentication failures during “Max Retry Duration” before the host is banned. The default setting is 10
MaxRetry
Please make sure this option is properly configured as it will override the “MaxRetry” value under “Global Settings”.
Login Attack
Enables defense against excessive login attacks to the GXW450X’s web GUI. The default setting is disabled.
Defense
Listening
This is the Web GUI listening port number which is configured under System Settings🡪HTTP Server🡪Port. The default is 8089
Port Number
When the number of failed login attempts from an IP address exceeds the MaxRetry number, that IP address will be banned from
MaxRetry
accessing the Web GUI. The default setting is 5
Blacklist
Black List Users will be able to view the IPs that have been blocked by GXW450X.
TLS Security
Under the Web GUI🡪System Settings🡪Security Settings🡪TLS security page, users can now select the minimum and maximum versions of TLS
GXW450x to support.
Maximum TLS Version Specifies the minimum TLS version on the GXW450x in order to accept TLS connection.
Minimum TLS Version Specifies the maximum TLS version on the GXW450x in order to accept TLS connection.
SSH Access
SSH switch is available via Web GUI. Users can enable or disable SSH access directly from the Web GUI or LCD screen. For web SSH access, please
GXW450X web interface and go to Web GUI🡪System Settings🡪Security Settings🡪SSH Access. By default, SSH access is disabled for security
concerns. It is highly recommended to only enable SSH access for debugging purposes
Time Settings
The current system time on the GXW450X can be found under Web GUI🡪System Status🡪Dashboard🡪PBX Status.
To configure the GXW450X to update the time automatically, go to Web GUI🡪System Settings🡪Time Settings🡪Automatic Date and Time.
Figure 33: Automatic Date and Time Settings
The configurations under Web GUI🡪Settings🡪Time Settings🡪Automatic Date and Time page require reboot to take effect. Please consider configuring
Automatic Date and Time-related changes when setting up the GXW450X for the first time to avoid service interruption after installation and deployment
production.
Remote NTP Specify the URL or IP address of the NTP server for the GXW450X to synchronize the date and time. The default NTP server is
Server ntp.ipvideotalk.com.
Enable DHCP If set to “Yes”, the GXW450X can get provisioned for Time Zone from DHCP Option 2 in the local server automatically. The defau
Option 2 setting is “Yes”.
Enable DHCP If set to “Yes”, the GXW450X can get provisioned for NTP Server from DHCP Option 42 in the local server automatically. This will
Option 42 override the manually configured NTP Server. The default setting is “Yes”.
Select the proper time zone option so the GXW450X can display the correct time accordingly.
Time Zone
If “Self-Defined Tome Zone” is selected, please specify the time zone parameters in the “Self-Defined Time Zone” field as describ
the below option.
If “Self-Defined Time Zone” is selected in the “Time Zone” option, users will need to define their own time zone following the for
below.
The syntax is: std offset dst [offset], start [/time], end [/time]
MTZ+6MDT+5
This indicates a time zone with 6 hours offset and 1 hour ahead for DST, which is U.S central time. If it is positive (+), the local tim
zone is west of the Prime Meridian (A.K.A: International or Greenwich Meridian); If it is negative (-), the local time zone is east.
Self-Defined
M4.1.0,M11.1.0
Time Zone
The 1st number indicates Month: 1,2,3.., 12 (for Jan, Feb, .., Dec).
The 2nd number indicates the nth iteration of the weekday: (1st Sunday,
3rd Tuesday…). Normally 1, 2, 3, 4 are used. If 5 is used, it means the last iteration of the weekday.
The 3rd number indicates weekday: 0,1,2,..,6 ( for Sun, Mon, Tues, … ,Sat).
Therefore, this example is the DST which starts on the First Sunday of
To manually set the time on the GXW450X, go to Web GUI🡪System Settings🡪Time Settings🡪Set Date and Time. The format is YYYY-MM-DD
HH:MM:SS.
Current Date and Manually set up the system time. If the system time is automatically set up successfully, the manually configured value w
Time not take effect.
Date Format Configure the global date format, the default format is yyyy-mm-dd.
Chooses the format that will be used to display the Time, 24-hour format or 12-hour format, the default setting is the 24
Time Format
format
Manual setup of time will take effect immediately after saving and applying changes in the Web GUI. If users would like to reboot the GXW450X and keep
manual setup time setting, please make sure “Remote NTP Server”, “Enable DHCP Option 2” and “Enable DHCP Option 42” options under Web
GUI🡪Settings🡪Time Settings🡪 Automatic Date and Time page are unchecked or set to empty. Otherwise, time auto updating settings in this page will ta
effect after reboot.
NTP Server
The GXW450X can be used as an NTP server for the NTP clients to synchronize their time. To configure the GXW450X as the NTP server, set “Enab
server” to “Yes” under Web GUI🡪System Settings🡪Time Settings🡪NTP Server. On the client side, point the NTP server address to the GXW450
address or hostname to use the GXW450X as the NTP server.
Office Time
On the GXW450X, the system administrator can define “office time”, which can be used to configure time conditions for the inbound rule schedule
configure office time, go to Web GUI🡪System Settings🡪Time Settings🡪Office Time. Click on “Add Office Time” to create an office time.
Figure 36: Add New Office Time
Time Configure the start time and end time for office hours.
Show Advanced Options Check this option to show advanced options. Once selected, please specify the “Month” and “Day” options.
Select “Time” and the day for the “Week” for the office time. The system administrator can also define the month and day of the month as advanc
options. Once done, click on “Save” and then “Apply Change” for the office time to take effect. The office time will be listed on the web page as th
figure shows below.
Click on “Delete Selected Office Times” to delete multiple selected office times at once.
Holiday
On the GXW450X, the system administrator can define “holiday”, which can be used to configure time conditions for the inbound rule schedule. To
configure holiday, go to Web GUI🡪System Settings🡪Time Settings🡪Holiday. Click on “Add Holiday” to create holiday time.
Show Advanced Options Check this option to show advanced options. If selected, please specify the days as holidays in one week below.
Enter holiday “Name” and “Holiday Memo” for the new holiday. Then select “Month” and “Day”. The system administrator can also define days in
week as advanced options. Once done, click on “Save” and then “Apply Change” for the holiday to take effect. The holiday will be listed in the web
as the figure shows below.
Email Settings
Email Settings
The Email application on the GXW450X can be used to send out alert event Emails, retrieve admin password, etc. The configuration parameters ca
accessed via Web GUI🡪System Settings🡪Email Settings🡪Email Settings.
TLS Enable Enable or disable TLS during transferring/submitting your Email to another SMTP server. The default setting is “Yes”.
MTA: Mail Transfer Agent. The Email will be sent from the configured domain. When MTA is selected, there is no need to set u
Type SMTP server for it, or no user login is required. However, the Emails sent from MTA might be considered spam by the target S
server.
Client: Submit Emails to the SMTP server. An SMTP server is required, and users need log in with the correct credentials.
Email
Select the email template format to be sent. The “HTML” format is compatible with most mail clients and is recommended. If the m
Template
client does not support the “HTML” format, please select the “Plain Text” format.
Sending
Domain Specify the domain name to be used in the Email when using the type “MTA”.
SMTP
Specify the SMTP server when using the type “Client”.
Server
Enable
Enable SASL Authentication. When disabled, GXW450X will not try to use the user name and password for mail client login
SASL
authentication. Most of the mail server requires login authentication while some other private mail servers allow anonymous login
Authentica
which requires disabling this option to send Email as normal. For Exchange Server, please disable this option.
tion
Username A username is required when using the type “Client”. Normally it’s the Email address.
Password Password to login for the above Username (Email address) is required when using the type “Client”.
POP/POP3
Configure the POP/POP3 server address for the configured username
Server
Example: pop.gmail.com
Address
POP/POP3 Configure the POP/POP3 server port for the configured username
Server Port Example: 995
Display
Specify the display name in the FROM header in the Email.
Name
The following figure shows a sample Email setting on the GXW450X, assuming the email is using the default SMTP server of Gmail.
Figure 40: Email Settings
Once the configuration is finished, click on “Test”. In the prompt, fill in a valid Email address to send a test Email to verify the Email settings on the
GXW450X.
Email Template
The Email templates on the GXW450X can be used for email notification. The configuration parameters can be accessed via Web GUI🡪System
Settings🡪Email Settings🡪Email Templates.
To configure the email template, click the button under Options column, and edit the template as desired.
Figure 42: Alert Events Template
Finally, users can click on to upload a custom picture to the email template to display their own logo in the sent mails for examp
Under GXW450X Web GUI🡪System Settings🡪Email Settings🡪Email Send Log, users could search, filter, and check whether the Email is sent o
successfully or not. This page will also display the corresponding error message if the Email is not sent out successfully.
Figure 43: Email Send Log
Field Description
Receivers Enter the email recipient, while searching for multiple recipients, please separate them with a comma and no spaces.
Send result Enter the status of the send result to filter with
Email send module Select the email module to filter from the drop-down list, which contains: All modules; User password; Alert events; CDR; T
SNMP
GXW450x supports SNMP (Simple Network Management Protocol) which is widely used in network management for network monitoring for colle
information about monitored devices. To configure SNMP settings, go to GXW450x Web GUI→System Settings→SNMP.
Note
This page has five tabs: SNMP Settings, SNMP Community, SNMP Trap Destination, SNMP V3 Users, and SNMP Trap Proxy. Please refer to the belo
tables for each tab.
SNMP Settings
Contact Email Configures the email address of the administrator on which to receive notifications.
SNMP Community
Community string associated with the trap. It must match the community string of the
Name
receiver.
Community is by default set to Public, as community strings for SNMP v1 and v2 aren’t
Community
encrypted.
SNMP V3 Users
Authentication Protocol Authentication Protocol for SNMPv3. Available protocols are MD5 and SHA.
Privacy Protocol Privacy protocol for SNMPv3. Available protocols are: DES, AES-128, AES-192, AES-256
TR-069
The GXW450x series supports TR-069 for remote management of equipment by service providers, reducing on-site visits and downtime.To configu
SNMP settings, go to GXW450x Web GUI→System Settings→SNMP.
Note
Sets the device to enable the “CPE WAN Management Protocol” (TR-069). The default setting is “No”.
Enable TR-069
Note: Reboot the device to make changes take effect.
Enable Periodic Inform Sends periodic inform packets to ACS. The default is “No”.
Configures to send
ACS Connection Request Username Enters username for the ACS to connect to the device.
ACS Connection Request Password Enters the password for the ACS to connect to the device.
ACS Connection Request Port Enters the port for the ACS to connect to the device.
CPE Cert File Uploads Cert File for the device to connect to the ACS via SSL.
CPE Cert Key Uploads Cert Key for the device to connect to the ACS via SSL.
TRUNKS
GXW450X is a VoIP Digital Gateway that supports both trunk modes Digital and VoIP to ensure a smooth integration of digital and VoIP communi
to connect the legacy telephony infrastructure made up of PRI (E1, T1, J1) to the IP network.
Digital Trunks
The GXW450X supports E1/T1/J1 which are physical connection technologies used in the digital network. T1 is the North American standard, J1 is
Japan, whereas E1 is the European standard. GXW450X supports four signaling protocols: PRI_NET, PRI_CPE, MFC/R2, and SS7. PRI provides a vary
number of channels depending on the standards in the country of implementation (E1, T1, or J1); MFC/R2 is a signaling protocol heavily used ove
trunks; SS7 uses out-of-band signaling, which travels on a separate, dedicated channel rather than within the same channel as the telephone call,
providing more efficiency and higher security level when the telephone calls are set up.
3. Go to Web GUI🡪 Trunks🡪Outbound Routes and Inbound Routes to configure outbound and inbound rules for the digital trunk.
Go to Web GUI🡪 Gateway Settings🡪Interface Settings🡪Digital Hardware page and configure the following:
Click on to edit digital ports. Please see configuration parameters in the tables below:
Click on to edit group. This assigns channels to be used for the digital port. For E1, 30 B channels can be assigned to the default group; fo
23 B channels can be assigned to the default group.
If fewer than 30 B channels for E1 or 23 B channels for T1/J1 are assigned in the default group, users can click on to add more groups. This is
necessary in most cases and only the default group is needed.
The GXW450X currently supports E1, T1, and J1 digital hardware types. When different signaling is selected for E1, T1, or J1, the settings in basic o
and advanced options will be different. The following tables list all the settings to configure digital ports when selecting each signaling.
Basic Settings
All E1/T1/J1 spans generate a clock signal on their transmit side. The parameter determines whether the clock signal from
far end of the E1/T1/J1 is used as the master source of clock timing. If the far end is used as the master, the gateway syste
clock will synchronize to it.
Clock
Master: The port will never be used as a source of timing. This is appropriate when you know the far end should always
slave to you.
Slave: The equipment at the far end of the E1/T1/J1 link is the preferred source of the master clock.
Chooses the signaling protocol that will be used on the digital port, the available options are : PRI_NET, PRI_CPE, SS7,
Signaling
MFC/R2
The line build-out (LBO) is the distance between the operators and the gateway. Please use the default value of 0dB unles
distance is long.
LBO
T1: “AMI” or “B8ZS”
E1: “AMI” or “HDB3”
RX Gain Configure the RX gain for the receiving channel of the digital port. The valid range is from -24dB to +12dB.
TX Gain Configure the TX Gain for the transmitting channel of the digital port. The valid range is -24dB to +12dB.
Codec Select alaw or ulaw. If set to default, alaw will be used for E1.
If the span type is E1, the signaling configured as MFC/R2, then framing must configure as “cas”; If the span type is E1,
signaling configured as PRI or SS7, then framing must configure as “ccs”; If span type is T1, and the signaling configure
Framing
PRI or SS7, then framing can configure as “esf” or “d4”;
If span type is J1, and the signaling configured as PRI or SS7, then framing can configure as “esf” or “d4”.
Advanced Settings
This setting is used to specify the type of the callee number. The service provider will usually verify this. The default sett
“unknown”. In some very unusual circumstances, you may need set it to “Dynamic” or “Redundant”.
PRI Dial Plan
Note: When one type is selected, you might not be able to dial another class of numbers. For example, if “National” is
configured, you won’t be able to dial local or international numbers.
PRI Local Dial Plan This setting is used to specify the type of caller number. The service provider will usually verify this.
International Prefix
National Prefix
Local Prefix Configure the prefix in PRI Local Dial Plan and PRI Dial Plan for each type.
Private Prefix
Unknown Prefix
This setting is used to set up the ChannelD in the SETUP message. If enabled, only the specified B channel can be used.
PRI Exclusive Otherwise, select one of the channels in the B channel. If you need to override the existing channels selection routine and
all PRI channels to be marked as exclusively selected, please enable it.
If selected, the transmission of facility-based ISDN supplementary services (such as caller name from CPE over facility)
Facility Enable
be enabled.
When receiving a remote “SETUP” SIP message, and the “Sending Complete” field is not included in it, the gateway wil
SETUP ACK a “SETUP ACK” to request more information. This option should be used if a remote device has “SETUP ACK” support
issues.
Configure this option to send overlap digits. If enabled, the SETUP message can include some digits of the callee number
Overlap Dial the rest of the digits can be sent using the INFORMATION message. If disabled, the callee number will be sent via SETU
message when all the digits are ready.
Some switches (AT&T especially) require network-specific facilities. Currently the supported values are “none”, “sdn”,
NSF
“megacom”, “tollfreemegacom”.
If enabled, GXW450x can send a signaling message to the calling party indicating that the call is still in progress and that
called party has not yet answered. This can be helpful in situations where the call setup time is longer than expected, or w
PROGRESS there may be delays in the network.
If disabled, the pri incoming calls to GXW450x converts the PROGRESS message into ALERTING message and send it
PRI trunk. This option is used to determine whether the peer supports the PROGRAMS message. Enabled By Default.
Basic Settings
All E1/T1/J1 spans generate a clock signal on their transmit side. The parameter determines whether the clock signal from
far end of the E1/T1/J1 is used as the master source of clock timing. If the far end is used as the master, the gateway syste
clock will synchronize to it.
Clock
Master: The port will never be used as a source of timing. This is appropriate when you know the far end should always
slave to you.
Slave: The equipment at the far end of the E1/T1 link is the preferred source of the master clock.
Chooses the signaling protocol that will be used on the digital port, the available options are : PRI_NET, PRI_CPE, SS7,
Signaling MFC/R2
PRI: when one end is set to NET, the other end should be set to CPE.
The Data channel for control. Specifies the channel to use for data connections when PRI_NET or PRI_CPE is chosen as
signaling protocol. While, the first dropdown list specifies the E1/T1 port to use, and the second specifies the channel to u
Data channel
for data connections when SS7 is chosen.
The user can group multiple E1 lines with a single data channel.
Originating point code is used to identify the node originating the message, always provided by the operator/ISP.
Originating Point Code ITU Format: decimal number.
ANSI & CHINA Format: decimal number or XXX-XXX-XXX.
The destination point code is the address to send the message to, always provided by the operator/ISP.
Destination Point Code ITU Format: decimal number.
ANSI & CHINA Format: decimal number or XXX-XXX-XXX.
When Span Type is E1, ITU & CHINA Range: [0, 4065], ANSI Range: [0, 16353].
First CIC
When Span Type is T1/J1, ITU & CHINA Range: [0, 4072], ANSI Range: [0, 16360].
Assign CIC To D-channel If set to yes, D-channel will be assigned a CIC. Else, D-channel will not be assigned. By default, it is set to No.
Network Indicator (NI) should match in nodes, otherwise, it might cause issues. Users can select “National”, “National Sp
Network Indicator
“International”, or “International Spare”. Usually, “National” or “International” is used.
The line build-out (LBO) is the distance between the operators and the gateway. Please use the default value of 0dB unles
LBO
distance is long.
RX Gain Configure the RX gain for the receiving channel of the digital port. The valid range is from -24dB to +12dB.
TX Gain Configure the TX Gain for the transmitting channel of the digital port. The valid range is -24dB to +12dB.
Codec Select alaw or ulaw. If set to default, alaw will be used for E1.
If the span type is E1, the signaling configured as MFC/R2, then framing must configure as “cas”;
If the span type is E1, the signaling configured as PRI or SS7, then framing must configure as “ccs”;
Framing
If span type is T1, and the signaling configured as PRI or SS7, then framing can configure as “esf” or “d4”;
If span type is J1, and the signaling configured as PRI or SS7, then framing can configure as “esf” or “d4”.
Advanced Settings
Indicates the type of the called number. The receiving switch may use this indicator during translations to apply the numb
Called Nature of Address Indicator
proper dial plan. Users can select “Unknown”, “Subscriber”, “National”, “International” or “Dynamic”.
Indicates the type of the calling number. The receiving switch may use this indicator during translations to apply the num
Calling Nature of Address Indicator
proper dial plan. Users can select “Unknown”, “Subscriber”, “National”, “International” or “Dynamic”.
This option decides on SS7 trunk outgoing calls,By controlling the "original called number IE" (Information Element) in
signaling messages, the user can ensure that the correct phone number is displayed to the recipient of a call, even when th
has been rerouted or redirected.
Orginal Called Example: if a call is routed through multiple networks or carriers, the "original called number" information can be lost or
modified along the way. However, by using this SS7 option, the user can preserve the original called number and ensure t
is displayed correctly to the recipient.
Disabled by Default.
Early ACM can be used to provide immediate feedback to callers that their call is being connected, as opposed to hearing
silence or ringing until the call is actually connected to the intended party. This can help to reduce perceived wait times an
improve the overall user experience.
Early ACM If enabled, When an inbound call is received by the gateway, the gateway can signal to the calling party that the call is be
connected and that the called party will begin ringing. This early answer supervision signal is sent by the gateway before
called party's phone rings.
Disabled by Default.
International Prefix
National Prefix
Configure the prefix in Called Nature of Address Indicator and Calling Nature of Address Indicator for each type.
Subscriber Prefix
Unknown Prefix
Basic Settings
All E1/T1/J1 spans generate a clock signal on their transmit side. The parameter determines whether the clock signal from the f
end of the E1/T1/J1 is used as the master source of clock timing. If the far end is used as the master, the gateway system clock
synchronize to it.
Clock
Master: The port will never be used as a source of timing. This is appropriate when you know the far end should always be
slave to you.
Slave: The equipment at the far end of the E1/T1 link is the preferred source of the master clock.
Chooses the signaling protocol that will be used on the digital port.
Signaling
PRI: when one end is set to NET, the other end should be set to CPE
MFC/R2 multinational adaption. GXW450X supports MFC/R2 standards by ITU and MFC/R2 standards in different countries or
Variant
regions including Argentina, Brazil, China, Czech Republic, Colombia, Ecuador, Indonesia, Mexico, the Philippines, and Venezue
Defines the Caller Category. Users can choose among the following options: National Subscriber, National Priority Subscriber,
Category
International Subscriber, and International Priority Subscriber.
If enabled, the callee side will request the caller to send the caller number first and then called number.
Get ANI First
Note: Options “Get ANI First” and “Skip Category” cannot be enabled at the same time.
The line build-out (LBO) is the distance between the operators and the gateway. Please use the default value of 0dB unless the
LBO
distance is long.
RX Gain Configure the RX gain for the receiving channel of the digital port. The valid range is from -24dB to +12dB.
TX Gain Configure the TX Gain for the transmitting channel of the digital port. The valid range is -24dB to +12dB.
If the span type is E1, the signaling configured as MFC/R2, then framing must configure as “cas”;
If the span type is E1, the signaling configured as PRI or SS7, then framing must configure as “ccs”;
Framing
If the span type is T1, and the signaling configured as PRI or SS7, then framing can configure as “esf” or “d4”;
If span type is J1, and the signaling configured as PRI or SS7, then framing can configure as “esf” or “d4”.
CRC
For E1, select whether to use CRC4 or None.
Validation
Advanced
Settings
MF Back
MFC/R2 value in milliseconds for MF timeout. Values smaller than 500ms are not recommended. -1 represents the default valu
Timeout (ms)
MFC/R2 value in milliseconds for the metering pulse timeout. Metering pulse is sent by some telcos for some R2 variants durin
Metering call presumably for billing purposes to indicate costs. Should not last more than 500ms, -1 represents the
Pulse Timeout
(ms) default value, and for Argentina,
the default value is 400ms, for others is 0ms.
Brazil has a special calling party category for collect calls (llamadas por cobrar) instead of using the operator (as in Mexico). The
Allow Collect spec in Brazil says a special GB tone should be used to reject collect calls.
Calls
By default, this is disabled, which means collect calls will be blocked.
Double Some gateways require a double-answer process to block collect calls. If users have a problem blocking collect calls using Grou
Answer signals, please try enabling this option.
If enabled, the callee side will request the caller to send the caller category before sending the caller number.
Skip Category
Note: “Get ANI First” and “Skip Category” cannot be enabled at the same time.
Whether or not to report to the other end “accept call with charge”. This setting has no effect on most telecoms. The default se
Charge Calls
is enabled (recommended).
Custom Click on the “Custom Options” button (on the left top of the configuration dialog) and then the user can customize desired ton
Options timer options accordingly.
Basic Settings
All E1/T1/J1 spans generate a clock signal on their transmit side. The parameter determines whether the clock signal from
far end of the E1/T1/J1 is used as the master source of clock timing. If the far end is used as the master, the gateway syste
clock will synchronize to it.
Clock
Master: The port will never be used as a source of timing. This is appropriate when you know the far end should always
slave to you.
Slave: The equipment at the far end of the E1/T1/J1 link is the preferred source of the master clock.
Chooses the signaling protocol that will be used on the digital port.
Signaling
PRI: when one end is set to NET, the other end should be set to CPE.
The line build-out (LBO) is the distance between the operators and the gateway. Please use the default value of 0dB unles
LBO
distance is long.
RX Gain Configure the RX gain for the receiving channel of the digital port. The valid range is from -24dB to +12dB.
TX Gain Configure the TX Gain for the transmitting channel of the digital port. The valid range is -24dB to +12dB.
Codec Select alaw or ulaw. If set to default, ulaw will be used for T1/J1.
Advanced Settings
This setting is used to specify the type of the callee number. The service provider will usually verify this. The default sett
“unknown”. In some very unusual circumstances, you may need set it to “Dynamic” or “Redundant”.
PRI Dial Plan
Note: When one type is selected, you might not be able to dial another class of numbers. For example, if “National” is
configured, you won’t be able to dial local or international numbers.
PRI Local Dial Plan This setting is used to specify the type of caller number. The service provider will usually verify this.
International Prefix
National Prefix
Local Prefix Configure the prefix in PRI Local Dial Plan and PRI Dial Plan for each type.
Private Prefix
Unknown Prefix
PRI T310 Configure PRI T310 Timer (in seconds). The default value is 10 seconds.
This setting is used to set up the ChannelID in the SETUP message. If enabled, only the specified B channel can be used.
PRI Exclusive Otherwise, select one of the channels in the B channel. If you need to override the existing channels selection routine and
all PRI channels to be marked as exclusively selected, please enable it.
If selected, the transmission of facility-based ISDN supplementary services (such as caller name from CPE over facility)
Facility Enable
be enabled.
When receiving a remote “SETUP” SIP message, and the “Sending Complete” field is not included in it, the gateway wil
SETUP ACK a “SETUP ACK” to request more information. This option should be used if a remote device has “SETUP ACK” support
issues.
Configure this option to send overlap digits. If enabled, the SETUP message can include some digits of the callee number
Overlap Dial the rest of the digits can be sent using the INFORMATION message. If disabled, the callee number will be sent via SETU
message when all the digits are ready.
Some switches (AT&T especially) require network-specific facilities. Currently the supported values are “none”, “sdn”,
NSF
“megacom”, “tollfreemegacom”, “accunet”.
If disabled, the pri incoming calls GXW450X to convert the PROGRESS message into ALERTING message and send it t
PROGRESS PRI trunk. This option is used to determine whether the peer supports the PROGRAMS message.
Enabled by Default.
Basic Settings
All E1/T1/J1 spans generate a clock signal on their transmit side. The parameter determines whether the clock signal from th
end of the E1/T1/J1 is used as the master source of clock timing. If the far end is used as the master, the gateway system clo
will synchronize to it.
Clock
Master: The port will never be used as a source of timing. This is appropriate when you know the far end should always
slave to you.
Slave: The equipment at the far end of the E1/T1 link is the preferred source of the master clock.
Chooses the signaling protocol that will be used on the digital port.
Signaling
PRI: when one end is set to NET, the other end should be set to CPE
Originating point code is used to identify the node originating the message, always provided by the operator/ISP.
Originating
Point Code ITU Format: decimal number.
The destination point code is the address to send the message to, always provided by the operator/ISP.
Destination
Point Code ITU Format: decimal number.
When Span Type is E1, ITU & CHINA Range: [0, 4065], ANSI Range: [0, 16353].
First CIC
When Span Type is T1/J1, ITU & CHINA Range: [0,4072], ANSI Range: [0, 16360].
Assign CIC to D-
If set to yes, D-channel will be assigned with a CIC. Else, D-channel will not be assigned with a CIC. By default, it is set to No
Channel
Network Network Indicator (NI) should match in nodes, otherwise, it might cause issues. Users can select “National”, “National Spare”
Indicator “International”, or “International Spare”. Usually, “National” or “International” is used.
The line build-out (LBO) is the distance between the operators and the gateway. Please use the default value of 0dB unless t
LBO
distance is long.
RX Gain Configure the RX gain for the receiving channel of the digital port. The valid range is from -24dB to +12dB.
TX Gain Configure the TX Gain for the transmitting channel of the digital port. The valid range is -24dB to +12dB.
Codec Select alaw or ulaw. If set to default, ulaw will be used for T1/J1.
Advanced
Settings
Called Nature of
Indicates the type of the called number. The receiving switch may use this indicator during translations to apply the number
Address
proper dial plan. Users can select “Unknown”, “Subscriber”, “National”, “International” or “Dynamic”.
Indicator
Calling Nature of
Indicates the type of the calling number. The receiving switch may use this indicator during translations to apply the numbe
Address
proper dial plan. Users can select “Unknown”, “Subscriber”, “National”, “International” or “Dynamic”.
Indicator
International
Prefix
National Prefix
Configure the prefix in Called Nature of Address Indicator and Calling Nature of Address Indicator for each type.
Subscriber Prefix
Unknown Prefix
Basic
Settings
All E1/T1/J1 spans generate a clock signal on their transmit side. The parameter determines whether the clock signal from the far en
the E1/T1/J1 is used as the master source of clock timing. If the far end is used as the master, the gateway system clock will synchro
to it.
Clock
Master: The port will never be used as a source of timing. This is appropriate when you know the far end should always be a sla
you.
Slave: The equipment at the far end of the E1/T1 link is the preferred source of the master clock.
Signaling Chooses the signaling protocol that will be used on the digital port.
RX Gain Configure the RX gain for the receiving channel of the digital port. The valid range is from -24dB to +12dB.
TX Gain Configure the TX Gain for the transmitting channel of the digital port. The valid range is -24dB to +12dB.
Codec Select alaw or ulaw. The default codec is “ulaw” for T1.
Advanced
Settings
Hide CallerID Configure to hide outgoing caller ID. The default setting is “No”.
Configure the Caller ID. This is the number that the trunk will try to use when making outbound calls. For some providers, it mi
Caller ID
not be possible to set the CallerID with this option and this option will be ignored.
This is to implement a Digital trunk outbound line selection strategy. Three options are available:
Ascend: When the call goes out from this digital trunk, it will always try to use the first idle digital port. The port order that
call will use to go out would be port 1🡪port 2🡪port 3🡪port 4. Every time it will start with port 1 (if it’s idle).
DAHDI Out Poll: When the call goes out from this digital trunk, it will use the port that is not used last time. And it will always use the
Line Selection in the order of port 1🡪2🡪3🡪4🡪1🡪2🡪3🡪4🡪1🡪2🡪3🡪4…, following the last port being used.
Descend: When the call goes out from this digital trunk, it will always try to use the last idle digital port. The port order tha
call will use to go out would be port 16🡪port 10🡪port 2🡪port 1. Every time it will start with port 4 (if it’s idle).
Fax Gateway
If enabled, GXW450X will detect the fax tone on the digital interface in order to initiate T.38 fax, otherwise, it will be sent in aud
pass-through.
After configuring the digital trunk on the GXW450X as described above, if it doesn’t work as expected, users can go to capture the signaling trace
GXW450X Web GUI for troubleshooting purposes.
Depending on the signaling selected for the digital trunk, users can go to the following pages to capture a trace:
1. Click on “Start” to start capturing traces. The output result shows “Capturing…”
After capturing the trace, users can download it for basic analysis. Or you can contact Grandstream Technical support in the following link for furth
assistance if the issue is not resolved:
https://www.grandstream.com/support
VoIP Trunks
The VoIP trunks allow the GXW450X to be connected over an IP network via SIP protocol to a VoIP provider or to another device that supports the
trunks.
VoIP trunks can be configured in GXW450X under Web GUI🡪 Trunks🡪VoIP Trunks. Once created, the VoIP trunks will be listed with Provider Nam
Type, Hostname/IP, Username, and Options to edit/detect the trunk.
Provider Name Configure a unique label (up to 64 characters) to identify this trunk when listed in outbound rules, inbound rules and etc.
Host Name Configure the IP address or URL for the VoIP provider’s server of the trunk.
Turn on this setting when the gateway is using public IP and communicating with devices behind NAT. If there is a one-way a
NAT
issue, usually it is related to NAT configuration or SIP/RTP port support on the firewall.
If the trunk has an assigned PSTN telephone number, this field should be set to “User=Phone”. Then a “User=Phone” parame
TEL URI will be attached to the Request-Line and TO header in the SIP request to indicate the E.164 number. If set to “Enable”, “Tel:” w
used instead of “SIP:” in the SIP request. The default setting is disabled.
Configure the actual domain name. This can be used to override the “From” Header.
From Domain
For example, “trunk.GXW450X.provider.com” is the From Domain in From Header: sip: [email protected]
Transport Configure the SIP transport protocol to be used in this trunk. UDP; TCP or TLS. The default setting is “UDP”
If “Type” is set
to “Register SIP
Trunk”
Need Select whether the trunk needs to register on the external server or not when the “Register SIP Trunk” type is selected. The de
Registration setting is “Yes”.
Allow outgoing
If enabled outgoing calls even if the registration to this trunk fails will still be able to go through. Note that if we uncheck the
calls if
“Need Registration” option, this option will be ignored. The default setting is “Yes”.
registration fails
Username Enter the username to register to the trunk from the provider.
Password Enter the password to register to the trunk from the provider.
AuthID Enter the Authentication ID to register to the trunk from the provider.
After creating the SIP Trunk user can click on to edit the trunk and have detailed parameters to configure. Below is a table of the Basic and ad
parameters of a SIP trunk.
Basic Settings
Provider Name Configure a unique label to identify this trunk when listed in outbound rules, inbound rules and etc.
Host Name Configure the IP address or URL for the VoIP provider’s server of the trunk.
Secondary SIP Server The URL or IP address, and port of the SIP server. This will be used when the primary SIP server fails.
Keep CID from the inbound call when dialing out even if the option “Keep Trunk CID” is enabled. Please make sure the
Keep Original CID
GXW at the other end supports matching user entry using the “username” field from the authentication line.
Turn on this option when the gateway is using public IP and communicating with devices behind NAT. If there is a one-w
NAT
audio issue, usually it’s related to NAT configuration or SIP/RTP port configuration on the firewall.
If the trunk has an assigned PSTN telephone number, this field should be set to “User=Phone”. Then a “User=Phone”
TEL URI parameter will be attached to the Request-Line and TO header in the SIP request to indicate the E.164 number. If set to
“Enable”, “Tel:” will be used instead of “SIP:” in the SIP request. The default setting is disabled.
CallerID Name Configure the new name of the caller when the extension has no CallerID Name configured.
Configure the actual domain name. This can be used to override the “From” Header.
From Domain For example, “trunk.GXW450X.provider.com” is the From Domain in From Header:
sip:[email protected].
1. UDP
Transport 2. TCP
3. TLS
Need Registration Select whether the trunk needs to register on the external server or not when the “Register SIP Trunk” type is selected. Th
default setting is “Yes”.
Allow outgoing calls if registration If enabled outgoing calls even if the registration to this trunk fails will still be able to go through. Note that if we uncheck
fails “Need Registration” option, this option will be ignored. The default setting is “Yes”.
From User Configures the actual username of the extension. This can be used to override the “From” Header
Username Enter the username to register to the trunk from the provider.
Password Enter the password to register to the trunk from the provider.
AuthID Enter the Authentication ID to register to the trunk from the provider.
Advanced Settings
Select the audio codec for the VoIP trunk. The available codecs are: PCMU, PCMA, G.726, G.729, iLBC, G.722, AAL2-
Codec Preference
G.726-32, G.723, OPUS
Send PPI Header If checked, the invite message sent to trunks will contain PPI (P-Preferred-Identity) Header.
Configure how to set the PPI number, there are three possible options:
Send PAI Header If checked, the INVITE message sent from the trunk will contain PAI (P-Asserted-Identity) Header. Default is unchecked
DOD as From Name If enabled and “From User” is configured, the INVITE’s From header will contain the DOD number.
Passthrough PAI Header If enabled and “Send PAI Header” is disabled, PAI headers will be preserved as calls pass through the GXW450X.
Enable sending an outbound signal to the proxy instead of the devices directly.
Outbound Proxy Support
The default setting is “unchecked”.
When configured, the outbound signal will be sent to the proxy instead of the devices directly. The outbound proxy can b
Outbound Proxy
domain name or IP address.
Backup Outbound Proxy Secondary Outbound Proxy will be used when the primary proxy cannot be connected.
Remove OBP from Route If enabled, the Route header will be removed from SIP requests. The default setting is “No”.
Configure where to get the destination ID of an incoming SIP call, from SIP Request-line or To-header. The default is set
DID Mode
“Request-line”.
Configure the default DTMF mode when sending DTMF on this trunk.
Default: The global setting of DTMF mode will be used. The global setting for the DTMF Mode setting is under Web
GUI🡪Gateway Settings🡪SIP Settings🡪ToS.
DTMF Mode RFC2833: Send DTMF using RFC2833.
Info: Send DTMF using the SIP INFO message.
Inband: Send DTMF using inband audio. This requires a 64-bit codec, i.e., PCMU and PCMA.
Auto: Send DTMF using RFC2833 if offered. Otherwise, inband.
If enabled, the GXW450X will regularly send SIP OPTIONS to the device to check if the device is still online. The defau
Enable Heartbeat Detection
setting is “No”.
When the “Enable Heartbeat Detection” option is set to “Yes”, configure the interval (in seconds) of the SIP OPTIONS
Heartbeat Frequency
message sent to the device to check if the device is still online. The default setting is 60 seconds.
Maximum Number of Call Lines The maximum number of concurrent calls using the trunk. The default setting 0, which means no limit.
Enable SRTP for the VoIP trunk to use
1. Disabled
2. Enabled but not forced
SRTP 3. Enabled and forced”
Selects the SIP response code to send to the VoIP trunk when the E1/T1/J1 interface is down or unavailable, the avilable v
are 480 and 503 , set to 480 by Default
E1/T1/J1 Error Code
● Error Code 480: the requested service is temporarily unavailable
● Error Code 503: the service is unavailable due to a server overload or maintenance
Basic Settings
Provider Name Configure a unique label to identify this trunk when listed in outbound rules, inbound rules and etc.
Host Name Configure the IP address or URL for the VoIP provider’s server of the trunk.
Keep CID from the inbound call when dialing out even if the option “Keep Trunk CID” is enabled. Please make sure the
Keep Original CID
GXW at the other end supports matching user entry using the “username” field from the authentication line.
Turn on this option when the gateway is using public IP and communicating with devices behind NAT. If there is a one-w
NAT
audio issue, usually it’s related to NAT configuration or SIP/RTP port configuration on the firewall.
If the trunk has an assigned PSTN telephone number, this field should be set to “User=Phone”. Then a “User=Phone”
TEL URI parameter will be attached to the Request-Line and TO header in the SIP request to indicate the E.164 number. If set to
“Enable”, “Tel:” will be used instead of “SIP:” in the SIP request. The default setting is disabled.
Configure the Caller ID. This is the number that the trunk will try to use when making outbound calls. For some provider
Caller ID
might not be possible to set the CallerID with this option and this option will be ignored.
CallerID Name Configure the new name of the caller when the extension has no CallerID Name configured.
Configure the actual domain name. This can be used to override the “From” Header.
From Domain For example, “trunk.GXW450X.provider.com” is the From Domain in From Header:
sip:[email protected].
1. UDP
Transport 2. TCP
3. TLS
Select whether the trunk needs to register on the external server or not when the “Register SIP Trunk” type is selected. Th
Need Registration
default setting is “Yes”.
Allow outgoing calls if registration If enabled outgoing calls even if the registration to this trunk fails will still be able to go through. Note that if we uncheck
fails “Need Registration” option, this option will be ignored. The default setting is “Yes”.
From User Configures the actual username of the extension. This can be used to override the “From” Header
Username Enter the username to register to the trunk from the provider.
Password Enter the password to register to the trunk from the provider.
AuthID Enter the Authentication ID to register to the trunk from the provider.
Advanced Settings
Select the audio codec for the VoIP trunk. The available codecs are: PCMU, PCMA, G.726, G.729, iLBC, G.722, AAL2-
Codec Preference
G.726-32, G.723, OPUS
Send PPI Header If checked, the invite message sent to trunks will contain PPI (P-Preferred-Identity) Header.
Configure how to set the PPI number, there are three possible options:
Send PAI Header If checked, the INVITE message sent from the trunk will contain PAI (P-Asserted-Identity) Header. Default is unchecked
DOD as From Name If enabled and “From User” is configured, the INVITE’s From header will contain the DOD number.
Passthrough PAI Header If enabled and “Send PAI Header” is disabled, PAI headers will be preserved as calls pass through the GXW450X.
Enable sending an outbound signal to the proxy instead of the devices directly.
Outbound Proxy Support
The default setting is “unchecked”.
When configured, the outbound signal will be sent to the proxy instead of the devices directly. The outbound proxy can b
Outbound Proxy
domain name or IP address.
Backup Outbound Proxy Secondary Outbound Proxy will be used when the primary proxy cannot be connected.
Remove OBP from Route If enabled, the Route header will be removed from SIP requests. The default setting is “No”.
Configure where to get the destination ID of an incoming SIP call, from SIP Request-line or To-header. The default is set
DID Mode
“Request-line”.
Configure the default DTMF mode when sending DTMF on this trunk.
Default: The global setting of DTMF mode will be used. The global setting for the DTMF Mode setting is under Web
GUI🡪Gateway Settings🡪SIP Settings🡪ToS.
DTMF Mode RFC2833: Send DTMF using RFC2833.
Info: Send DTMF using the SIP INFO message.
Inband: Send DTMF using inband audio. This requires a 64-bit codec, i.e., PCMU and PCMA.
Auto: Send DTMF using RFC2833 if offered. Otherwise, inband.
If enabled, the GXW450X will regularly send SIP OPTIONS to the device to check if the device is still online. The defau
Enable Heartbeat Detection
setting is “No”.
When the “Enable Heartbeat Detection” option is set to “Yes”, configure the interval (in seconds) of the SIP OPTIONS
Heartbeat Frequency
message sent to the device to check if the device is still online. The default setting is 60 seconds.
Maximum Number of Call Lines The maximum number of concurrent calls using the trunk. The default setting 0, which means no limit.
1. Disabled
2. Enabled but not forced
3. Enabled and forced”
The default setting is “Disabled”.
It uses SDP Security Description to exchange keys. Please refer to :
SDES: https://tools.ietf.org/html/rfc4568
SRTP: https://www.ietf.org/rfc/rfc3711.txt
Selects the SIP response code to send to the VoIP trunk when the E1/T1/J1 interface is down or unavailable, the avilable v
are 480 and 503 , set to 480 by Default
E1/T1/J1 Error Code
● Error Code 480: the requested service is temporarily unavailable
● Error Code 503: the service is unavailable due to a server overload or maintenance
The GXW450X provides Direct Outward Dialing (DOD) for both Digital and SIP trunks, which is a service of a local phone company (or local exchan
carrier) that allows subscribers to connect to outside lines directly.
Company ABC has a SIP trunk. This SIP trunk has 4 DIDs associated with it. The main number of the office is routed to an auto attendant. The othe
numbers are direct lines to specific users of the company. Now when a user makes an outbound call their caller ID shows up as the main office nu
This poses a problem as the CEO would like his calls to come from their direct line. This can be accomplished by configuring DOD for the CEO’s
number/extension.
2. Click to access the DOD options for the selected SIP Trunk.
4. For “DOD Number” enter one of the numbers (DIDs) from your SIP/Digital trunk provider. In the example above
Company ABC received 4 DIDs from their provider. ABC will enter the number for the CEO’s direct line.
5. Set the DOD name and If the extension number needs to be appended to the DID number click on “Add Extension”.
6. Enter a number in the “Number” field. Users have the option of entering more than one number/extension separating them using “,”. In this cas
Company ABC would enter the CEO’s numbers/extensions.
Once completed, the user will return to the EDIT DOD page which shows all the extensions that are associated with a particular DOD.
Figure 49: Edit DOD
Outbound Routes
An outbound route is a set of rules defined by privileges and patterns that the gateway uses to decide the numbers that can go out through the t
and who has the right to use the trunk and trunk to use for an outbound call.
On the GXW450X, the outbound route priority is based on the “Best matching pattern”. For example, the GXW450X has outbound route A with pa
1xxx and outbound route B with pattern 10xx configured. When dialing 1000 for an outbound call, outbound route B will always be used first. This
because pattern 10xx is a better match than pattern 1xxx. Only when there are multiple outbound routes with the same pattern configured, the
GXW450X will use the first pattern matched.
Calling Rule
Configure the name of the calling rule (e.g., local, long-distance, etc). Letters, digits, _, and – are allowed.
Name
All patterns are prefixed with the “_”.
Special characters:
Notes:
Multiple patterns can be used. Each pattern should be entered in new line.
Example:
_X.
_NNXXNXXXXX
_818X.
When enabled, users could specify extensions allowed to use this outbound route. “Privilege Level” is automatically disabled if
“Enable Filter on Source Caller ID”.
Enable Filter The following two methods can be used at the same time to define the extensions as the source caller ID.
on Source
Caller ID 1. Select available extensions/extension groups from the left to the right. This allows users to specify arbitrary single extensio
available in the PBX.
2. Custom Dynamic Route: define the pattern for the source caller ID. This allows users to define extension range instead of
selecting them one by one.
Main Trunk
Allows the user to specify the number of digits that will be stripped from the beginning of the dialed string before the call is pl
via the selected trunk.
Strip Example:
The users will dial 9 as the first digit of long-distance calls. However, 9 should not be sent out via digital lines and the PSTN line
this case, 1 digit should be stripped before the call is placed.
Specify the digits to be prepended before the call is placed via the trunk. Those digits will be prepended after the dialing numb
Prepend
stripped.
Failover Trunk
Failover trunks can be used to make sure that a call goes through an alternate route when the primary trunk is busy or down. If
Failover Trunk” is enabled and “Failover trunk” is defined, the calls that cannot be placed via the regular trunk may have a secon
trunk to go through.
Trunk
GXW450X supports up to 10 failover trunks.
Example: The user’s primary trunk is a VoIP trunk and the user would like to use the PSTN when the VoIP trunk is not available.
PSTN trunk can be configured as the failover trunk of the VoIP trunk.
Allows the user to specify the number of digits that will be stripped from the beginning of the dialed string before the call is pl
via the selected trunk.
Strip Example:
The users will dial 9 as the first digit of long-distance calls. However, 9 should not be sent out via digital lines and the PSTN line
this case, 1 digit should be stripped before the call is placed.
Specify the digits to be prepended before the call is placed via the trunk. Those digits will be prepended after the dialing numb
Prepend
stripped.
Time
Condition
Use Main Trunk or Failover Trunk: Use the Main Trunk and its settings during the configured time conditions. If the main trunk i
Time unavailable, the Failover Trunk and its settings will be used instead.
Condition
Mode Use Specific Trunks: Use specific trunks during the configured time conditions. The Strip and Prepend settings of the Main Trun
be used. If a trunk is unavailable during its time condition, no failover trunks will be used.
Time
Users could customize holiday time, office time, or a specified time to allow the outbound route to be used.
Condition
Inbound Routes
When a call comes into the GXW450X from the outside, it will usually arrive along with information about the telephone number that was dialed (a
known as the “DID”) and the Caller ID of the person who called.
The Inbound Routes are used to tell the system what to do with calls that come into the GXW450X on any trunk based on the pattern of the DID a
caller ID of the person who called.
Special characters:
Multiple patterns can be used. Each pattern should be entered in new line. _818X.
Example:
_X.
1000
_NNXXNXXXXX
1001
_818X.
_X.
1000
_NNXXN
XXXXX
1001
_818X.
_X.
1000
_NNXXN
XXXXX
1001
_818X.
All patterns are prefixed by “_” character, but please do not enter more than one “_” at the beginning. In
patterns, some characters have special meanings:
[12345-9] … Any digit in the brackets. In this example, 1,2,3,4,5,6,7,8,9 are allowed.
Configures the pattern-matching format to manipulate the numbers of incoming callers or to set a fixed
callerID number for calls that go through this inbound route.
${CALLERID(num)}: Default value which indicates the number of an incoming caller (CID). The CID
will not be modified.
CalleID ${CALLERID(num):n}: Skips the first n characters of a CID number, where n is a number.
Number ${CALLERID(num):-n}: Takes the last n characters of a CID number, where n is a number.
${CALLERID(num):s:n}: Takes n characters of a CID number starting from s+1, where n is a number
and s is a character position (e.g. ${CALLERID(num):2:7} takes 7 characters after the second character
of a CID number).
Default string is ${CALLERID(name)} which means the name of a incoming caller, it’s a pattern-matching
syntax format.
CallerID
Name A${CALLERID(name)}B means Prepend a character ‘A’ and suffix a character ‘B’ to ${CALLERID(name)}.
Not using pattern-matching syntax means setting fix name to incoming caller.
Users can import and export inbound routes to quickly set up inbound routing on a GXW450X or to back up an existing configuration. An exporte
inbound route configuration can be directly imported without needing any manual modifications.
The imported file should be in CSV format and using UTF-8 encoding, the imported file should contain the below columns, and each column shou
separated by a comma (It is recommended to use Notepad++ for the imported file creation):
GATEWAY SETTINGS
This section describes internal options that haven’t been mentioned in previous sections yet. The settings in this section can be applied globally to
GXW450X, including general configurations, jitter buffer, RTP settings, and hardware config. The options can be accessed via Web GUI🡪Gateway
Settings🡪General Settings.
SIP Settings
The GXW450X SIP global settings can be accessed via Web GUI🡪 Gateway Settings🡪SIP Settings.
General
On this page, users can define the Binding UDP Port for SIP protocol and Enable 486 to Failover Trunk.
Figure 53: SIP Settings – General
Bind UDP Port Configure binding UDP port for SIP. The default setting is “5060”.
Reroutes failed outbound calls that receive a 486 response through the failover trunk to retry the call. If disabled, calls t
Enable 486 to receive a 486 response will be terminated.
Failover Trunk
The default setting is “unchecked”.
Misc
On this Web page, users can define the DNS mode used by the GXW450X and Outbound SIP Registrations.
Outbound SIP
Registrations
Configure the number of registration attempts before giving up. 0 means continuously trying until the registration
request is accepted.
Register Attempts
DNS
A&AAAA
A
DNS mode
AAAA
Note: This setting only affects the DNS queries that occur when making calls.
Table 37: SIP Settings – Misc
Session Timer
Force Timer If checked, always request and run the session timer. The default is “unchecked”.
If checked, run the session timer only when requested by another UA.
Timer
Default is “checked”.
TCP
Configure to allow incoming TCP connections with the GXW450X. The default setting is “No”.
Enable
TCP Bind
Configure the IP address for the TCP server to bind to. 0.0.0.0 means binding to all interfaces. The port number is optional. If not spe
IPv4
5060 will be used. The default setting is “0.0.0.0:5060”
Address
TCP Bind
Configure the IPv6 address for the TCP server to bind to. “[::]” means bind to all interfaces. The port number is optional with the defa
IPv6
being 5060. For example, [2001:0DB8:0000:0000:0000:0000:1428:0000]:5060. The default setting is “[::]:5060”.
Address
TLS
Configure to allow incoming TLS connections with the GXW450X. The default setting is “No”.
Enable
Configure the IP address for the TLS server to bind to. 0.0.0.0 means binding to all interfaces. The port number is optional. If not spec
5061 will be used. The default setting is “0.0.0.0:5061”.
TLS Bind
IPv4
Note: The IP address must match the common name (hostname) in the certificate. Please do not bind a TLS socket to multiple IP
Address
addresses. For details on how to construct a certificate for SIP, please refer to the following document: http://tools.ietf.org/html/draf
sip-domain-certs
TLS Bind Configure the IPv6 address for the TLS server to bind to. “[::]” means bind to all interfaces. The port number is optional with the defa
IPv6 being 5061. For example, [2001:0DB8:0000:0000:0000:0000:1428:0000]:5061. Note: The IP address must match the common name
Address (hostname) in the certificate so that the TLS socket won’t bind to multiple IP addresses. The default setting is “[::]:5061”.
TLS Do
Not If enabled, the TLS server’s certificate won’t be verified when acting as a client. The default setting is “Yes”.
Verify
This is the CA certificate if the TLS server being connected to requires a self-signed certificate, including the server’s public key. This f
will be renamed as “TLS.ca” automatically.
TLS Self-
Signed
Note:
CA
TLS Cert
Note:
The size of a private key must be under 2MB. This is the private key (*.key format only) for TLS connections.
TLS Key
This file will be renamed as “TLS.key” automatically.
This file must be named with the CA subject name hash value. It contains CA’s (Certificate Authority) public key, which is used to veri
accessed servers.
TLS CA
Cert Note:
TLS CA
Display a list of files under the CA Cert directory.
List
NAT
Configure a static IP address and port (optional) used in outbound SIP messages if the GXW450X is behind NAT. If it is a
External Host
hostname, it will only be looked up once.
Use IP address in
If enabled, the SDP connection will use the IP address resolved from the external host. The default setting is “enabled”.
SDP
External UDP
Configure the externally mapped UDP port when the GXW450X is behind a static NAT or PAT. The default setting is “5060”.
Port
External TCP Port Configure the externally mapped TCP port when the GXW450X is behind a static NAT or PAT. The default setting is “5060”.
External TLS Port Configures the externally mapped TLS port when GXW450X is behind a static NAT or PAT. The default setting is “5061”.
Adds a list of network addresses that are considered inside of the NAT network. Multiple entries are allowed. If not configur
the external IP address will not be set correctly.
Local Network
Address A sample configuration could be as follows:
192.168.0.0/16
ToS
ToS For SIP Configure the Type of Service for SIP packets. The default setting is None.
ToS For RTP Audio Configure the Type of Service for RTP audio packets. The default setting is None.
If enabled, compact SIP headers will be sent. The default setting is “No”.
Send Compact SIP
Headers
Note: This change requires a system reboot to take effect.
Enable Relaxed DTMF Select to enable relaxed DTMF handling. The default setting is “No”.
Configures the default mode for sending DTMF.
RFC2833: DTMF is transmitted as audio in the RTP stream but is encoded separately from the audio stream.
Inband: DTMF is transmitted as audio and is included in the audio stream. Requires alaw/ulaw codecs.
DTMF Mode SIP INFO: DTMF is transmitted through a separate network connection from the media streams.
Auto: DTMF mode will be negotiated with the remote peer. RFC2833 will be used by default unless the remot
peer does not support it.
Configure the timeout in seconds. When the call is in talking status, if there is no RTP activity after the timeout, the
RTP Timeout
will be terminated. The default setting is 90 seconds.
Configure the timeout in seconds. When the call is on hold, if there is no RTP activity after the timeout, the call wil
RTP Hold Timeout
terminated. This value must be larger than “RTP Timeout”. The default setting is 100 seconds.
Configure the interval (in seconds) that an RTP Keepalive packet will be sent on an SDP connection. The default se
RTP Keep-alive
is 0 (no RTP Keepalive).
Default
Incoming/Outgoing Configure the default duration (in seconds) of incoming/outgoing registration. The default setting is 120.
Registration Time
No: Unsupported.
Trust Remote Party ID Configure whether the Remote-Party ID should be trusted. The default setting is “No”.
Send Remote Party ID Configure whether the Remote-Party ID should be sent or not. The default setting is “No”.
Yes: The GXW450X will send 180 Ringing followed by 183 Session Progress and in-band audio.
No: The GXW450X will send 180 Ringing if 183 Session Progress has not been sent yet. If the audio path is
Generate In-Band Ringing
established already with 183 then send in-band ringing.
Never: Whenever ringing occurs, the GXW450X will send 180 Ringing as long as 200OK has not been set yet.
Server User Agent Configure the user agent string for the GXW450X.
Default
Incoming/Outgoing Configure the default duration (in seconds) of incoming and outgoing registration. The default setting is 120 seco
Registration Time
RTP Settings
RTP Settings
RTP Start Configure the RTP port starting number. The default setting is 10000.
RTP End Configure the RTP port ending address. The default setting is 20000.
Configure to enable or disable strict RTP protection. If enabled, RTP packets that do not come from the source of the RTP stream
Strict RTP
be dropped. The default setting is “Disable”.
RTP
Configure to enable or disable RTP Checksums on RTP traffic. The default setting is “Disable”.
Checksums
The GXW450X payload type for audio codecs can be configured here.
Configure payload type for ADPCM (G.726, 32kbps, AAL2 codeword packing). The valid range is between 96 and 127. The de
AAL2-G.726
setting is 112.
DTMF Configure payload type for DTMF. The valid range is between 96 and 127. The default setting is 101.
G.721
Configure to enable/disable G.721 compatible. The default setting is Yes.
Compatible
G.726 Configure the payload type for G.726 if “G.721 Compatible” is disabled. The default setting is 111.
iLBC Configure the payload type for iLBC. The valid range is between 96 and 127. The default setting is 97.
OPUS Configure the payload type for OPUS. The valid range is between 96 and 127. The default setting is 123.
Click on to set the values of the payload parameters to the factory default values
While configuring the payload values users can Click on to reset the values to the last saved values on the gateway.
Voice Prompt
The GXW450X supports multiple languages in Web GUI as well as system voice prompt. The following languages are currently supported in the sy
voice prompt:
English (United States), British English, Arabic, Chinese, Dutch, French, German, Greek, Hebrew, Italian, Polish, Portuguese, Russian, Spanish, Catala
Swedish, Czech, and Turkish.
English (United States) and Chinese voice prompts are built-in with the GXW450X already. The other languages provided by Grandstream can be
downloaded and installed from the GXW450X Web GUI directly. Additionally, users could customize their own voice prompts, package them and u
them to the GXW450X.
Language settings for voice prompts can be accessed under Web GUI🡪Gateway Settings🡪Voice Prompt🡪Language.
To download and install voice prompt package in different languages from GXW450X Web GUI, click on button.
Click on to download the language to the GXW450X. The installation will be automatically started once the downloading is finished.
A new language option will be displayed after successfully installed. Users then could select it to apply in the GXW450X system voice prompt or d
from the GXW450X
Users can upload the prompt package manually to the GXW450X. Users can create their own prompt package for different languages and use the
the default voice prompts.
To upload the voice prompt to the GXW450X, press the button and brows the prompt package.
Prompt Tone Settings tab has been added to the GXW to help users choose which prompt will be played by the GXW during call failure, the follow
voice message responses have been added and can be set to be played for 4XX, 5XX, and 6XX call failures:
The default for 404 and 604 status codes: “Your call can’t be completed as dialed. Please check the number and dial again.”
The default for 5xx status codes: “Server error. Please check your device.”
The default for 403 and 603 status codes: “The call was rejected by the server. Please try again later.”
The default for all other status codes: “All circuits are busy now. Please try again later.”
Additionally, custom voice messages recorded and uploaded in Gateway Settings🡪Voice Prompt🡪Custom Prompt can be used for these failure
responses instead of the default messages.
Moreover, users also have the possibility to customize the prompt for typical call failure reasons like (no permission to allow outbound calls, busy
incorrect number dialed …etc.).
To customize these prompts users could record and upload their own files under “Gateway Settings 🡪 Voice Prompt 🡪 Custom Prompts” then sel
each one for a specific call failure case under the “Gateway Settings🡪 Call Failure Tone Settings 🡪 General Call Failure Tones” page as shown on th
following figure:
Figure 60: General call Failure Tones
Jitter Buffer
A jitter buffer is used at the receiving equipment to store incoming RTP packets, re-align them in terms of timing and check they are in the correct
If some arrive slightly out of sequence then, provided it is large enough, the jitter buffer can put them back into the right sequence. However, for t
work the receiving device must delay the audio very slightly while it checks and reassembles the packet stream.
Below are the Jitter buffer Settings to control the size of the buffer and its implementation mode:
Enable Jitter
Select to enable the jitter buffer on the sending side of the SIP channel. The default setting is “No”.
Buffer
Jitter Buffer Configure the time (in ms) to buffer. This is the jitter buffer size used in the “Fixed” jitter buffer or used as the initial time for the
Size “adaptive” jitter buffer. The default setting is 100.
Configure the jitter buffer implementation on the sending side of a SIP channel. The default setting is “Fixed”.
Fixed
Implementati
The size is always equal to the value of “Max Jitter Buffer”.
on
Adaptive
The size is adjusted automatically and the maximum value equals the value of “Max Jitter Buffer”.
Max Jitter Configure the maximum time (in ms) to buffer for “Adaptive” jitter buffer implementation or used it as the jitter buffer size for “
Buffer jitter buffer implementation. The default setting is 100.
Interface Settings
The GXW450X supports E1/T1/J1 which are physical connection technologies used in digital networks. T1 is the North American standard, J1 is use
Japan, whereas E1 is the European standard. GXW450X supports four signaling protocols: PRI_NET, PRI_CPE, MFC/R2, and SS7. PRI provides a vary
number of channels depending on the standards in the country of implementation (E1, T1, or J1); MFC/R2 is a signaling protocol heavily used ove
trunks; SS7 uses out-of-band signaling, which travels on a separate, dedicated channel rather than within the same channel as the telephone call,
providing more efficiency and higher security level when the telephone calls are set up.
The interface settings page allows the configuration of digital hardware parameters. For more details, refer to the [Digital Hardware Configurati
section.
GXW450X also allows the users to configure Tone Region by choosing their country to set the default tones for dial tone, busy tone, and ring ton
be sent. If not specified, the default setting is “The United States”.
MAINTENANCE
The Maintenance section lists different tools to help troubleshoot the issues that might be encountered while using the GXW450X alongside a set
options to manage users, control web GUI access, upgrade the firmware, backup the configuration, take ethernet and Digital traces …etc.
User Management
User management is on the Web GUI🡪 Maintenance🡪User Management page. Users could create multiple accounts for different administrator
in to the GXW450X Web GUI.
When logged in as Super Admin, click on to create a new account for Web GUI user. The following dialog will prompt. Configure t
parameters as shown in below table.
Configures a username to identify the user which will be required in Web GUI login. Letters, digits, and underscores are
User Name
allowed in the user name.
Privilege This is the role of the Web GUI user. Currently, only “Admin” is supported when Super Admin creates a new user.
User Password Configures a password for this user which will be required in Web GUI login. Letters, digits, and underscores are allowed.
Department Enters the necessary information to keep a record for this user.
Fax
Email Address
First Name
Last Name
Home Number
Mobile Phone
Number
Change Information
Change Password
Follow the steps below to change the Web GUI access password.
3. Enter the new password and retype the new password to confirm. The new password has to be at least 4 characters. The maximum length of t
password is 16 characters.
4. Configure the Email Address that is used when login credentials are lost.
6. Once the web page comes back to the login page again, enter the username “admin” and the new password to login.
Enable Change Password When enabled, the fields to enter the new password will be displayed
GXW450X allows users to configure binding email in case log in password is lost. GXW450X login credentials will be sent to the designated email
address. The feature can be found under Web GUI🡪Maintenance🡪Change Information🡪Change Binding Email.
After the user logs in to the GXW450X Web GUI, the user will be automatically logged out after a certain timeout, or he/she can be banned for a s
period if the login timeout is exceeded. Those values can be specified under the GXW450X web GUI🡪Maintenance🡪Change Information🡪Log
Settings page.
The “User Login Timeout” value is in minutes and the default setting is 10 minutes. If the user doesn’t make any operation on Web GUI within the
timeout, the user will be logged out automatically. After that, the Web GUI will be redirected to the login page and the user will need to enter the
username and password to log in.
If set to 0, there is no timeout for the Web GUI login session and the user will not be automatically logged out.
The “maximum number of login attempts” can prevent the GXW450X from brute force decryption, if this number is exceeded user IP address w
banned from accessing the GXW for a period based on user configuration, the default value is 5.
“User ban period” specifies the period in minutes an IP will be banned from accessing the GXW if the User max number of try login is exceeded, t
default value is 5.
“Login Banned User List” shows the list of IPs banned from the GXW.
“Login White List” Users can add a list of IPs’ to avoid the above restriction, thus, they can exceed the User’s max number of try login.
Operation Log
The admin has the authority to view operation logs on the GXW450X Web GUI🡪Maintenance🡪 Operation Log page. Operation logs list the ope
done by all the Web GUI users, for example, Web GUI login, creating trunk, creating outbound rule, etc. There are 7 columns to record the operati
details “Date”, “User Name”, “IP Address”, “Results”, “Page Operation”, “Specific Operation” and “Remark”.
Figure 66: Operation Logs
The operation log can be sorted and filtered for easy access. Click on the header of each column to sort. For example, clicking on “Date” will sort t
according to the operation date and time. Clicking on “Date” again will reverse the order.
User Name The username of the user who performed the operation.
Page Operation The page where the operation is made. For example, login, logout, delete user, create trunk and etc.
Specific Operation Click on to view the options and values configured by this operation.
Users could also filter the operation logs by time condition, IP address and/or username. To use the filter, click on and configure the
The above figure shows an example that operations made by user “admin” on a device with IP 172.16.1.62 from 2018-12-08 16:38 to 2018-12-11 1
are filtered out and displayed.
To delete operation logs, users can perform filtering first and then click on to delete the filtered result of operation
Syslog
On the GXW450X, users could dump the Syslog information to a remote server under Web GUI🡪Maintenance🡪Syslog. Enter the Syslog server
hostname or IP address and select the module/level for the Syslog information.
The default Syslog level for all modules is “error”, which is recommended in your GXW450X settings because it can be helpful to locate the issues
errors happen.
Some typical modules for GXW450X functions are as follows and users can turn on “notice” and “verb” levels besides the “error” level.
Syslog is usually for debugging and troubleshooting purpose. Turning on all levels for all Syslog modules is not recommended for daily usage. Too many
Syslog prints might cause traffic and affect system performance.
The reserved size for Syslog entries on the cache memory of the GXW is 50M, once this size is reached the GXW will clean up 2M of the oldest Sys
entries to allow to save new logs.
System Events
The GXW450X can monitor important system events, log the alerts and send Email notifications to the system administrator.
Alert Log
Under Web GUI🡪Maintenance🡪System Events🡪Alert Log, system messages are listed when the alert is triggered for the configured system ev
The following picture shows the “User Login Successes”, “User Login Failed” and “System Reboot” alert logs.
then click on .
The above figure shows an example of a System reboot Alerts logged on 2018-12-11 at 23:57 displayed using the filter Event name System Reboo
To delete alert logs, users can perform filtering first and then click on to delete the filtered result of operation logs.
users can click on to delete all alert logs at once.
The system alert events list can be found under Web GUI🡪Maintenance🡪System Events🡪Alert Events. The following event is currently support
the GXW450X which will have an alert, and/or an Email generated if occurred:
Disk Usage
Memory Usage
System Reboot
System Update
System Crash
Restore Config
Fail2ban Blocking
1. Disk Usage
Detect Cycle: The GXW450X will perform the internal disk usage detection based on this cycle. Users can enter the number and then select
second(s)/minute(s)/hour(s)/day(s) to configure the cycle.
Alert Threshold: If the detected value exceeds the threshold (in percentage), the GXW450X system will send the alert.
2. External Disk Usage
Detect Cycle: The GXW450X will perform the External disk usage detection based on this cycle. Users can enter the number and then select
second(s)/minute(s)/hour(s)/day(s) to configure the cycle.
Alert Threshold: If the detected value exceeds the threshold (in percentage), the GXW450X system will send the alert.
3. Memory Usage
Detect Cycle: The GXW450X will perform the memory usage detection based on this cycle. Users can enter the number and then select
second(s)/minute(s)/hour(s)/day(s) to configure the cycle.
Alert Threshold: If the detected value exceeds the threshold (in percentage), the GXW450X system will send the alert.
4. System Crash
Detect Cycle: The GXW450X will detect the event at each cycle based on the specified time. Users can enter the number and then select
second(s)/minute(s)/hour(s)/day(s) to configure the cycle.
Click on the switch to turn on/off the alert and Email notification for the event. Users could also select the checkbox for each even
then click on buttons “Alert On”, “Alert Off”, “Email Notification On”, or “Email Notification Off” to control the alert and Email notification configura
Alert Contact
Users could add the administrator’s Email address under Web GUI🡪Maintenance🡪System Events🡪Alert Contact to send the alert notification. Up
Email addresses can be added.
The GXW450X can be upgraded to a new firmware version remotely or locally. This section describes how to upgrade your GXW450X via network
upload.
The GXW450X can be upgraded via TFTP/HTTP/HTTPS by configuring the URL/IP Address for the TFTP/HTTP/HTTPS server and selecting a downlo
method. Configure a valid URL for TFTP, HTTP, or HTTPS; the server name can be FQDN or IP address.
Upgrade Via Allow users to choose the firmware upgrade method: TFTP, HTTP, or HTTPS.
Firmware File Prefix If configured, only the firmware with the matching encrypted prefix will be downloaded.
Firmware File Suffix If configured, only the firmware with the matching encrypted postfix will be downloaded.
HTTP/HTTPS User Name The user name for the HTTP/HTTPS server.
2. Click on “Save”. Then reboot the device to start the upgrading process.
3. Please be patient during the upgrading process. Once done, a reboot message will be displayed in the LCD.
4. Manually reboot the GXW450X when it’s appropriate to avoid immediate service interruption. After it boots up, log in to the Web GUI to chec
firmware version.
If there is no HTTP/TFTP server, users could also upload the firmware to the GXW450X directly via Web GUI. Please follow the steps below to uplo
firmware locally.
1. Download the latest GXW450X firmware file from the following link and save it on your PC: https://www.grandstream.com/support/firmware
3. Go to Web GUI🡪Maintenance🡪Upgrade, upload the firmware file by clicking on and select the firmwa
from your PC. The default firmware file name is gxw4500fw.bin
Figure 77: Upgrading Firmware Files
4. Wait until the upgrading process is successful and a window will be popped up in the Web GUI requesting to confirm the reboot of the GXW4
the changes to take effect.
5. Click on “OK” to reboot the GXW450X and check the firmware version after it boots up.
Please do not interrupt or power cycle the GXW450X during the upgrading process.
The firmware file name allows the use of the special characters besides the following restricted characters: # $ ^ & * + ( ) [ ] / ; ‘ | , < > ?
Users can download a free TFTP, FTP, or HTTP server and conduct a local firmware upgrade. A free window version TFTP server is available for dow
from:
http://www.solarwinds.com/products/freetools/free_tftp_server.aspx
http://tftpd32.jounin.net
1. Unzip the firmware files and put all of them in the root directory of the TFTP server;
2. Connect the PC running the TFTP server and the GXW450X to the same LAN segment;
3. Launch the TFTP server and go to the File menu🡪Configure🡪Security to change the TFTP server’s default setting from “Receive Only” to “Tran
Only” for the firmware upgrade;
4. Start the TFTP server and configure the TFTP server in the GXW450X web configuration interface;
End users can also choose to download a free HTTP server from http://httpd.apache.org/ or use
For users that would like to use remote upgrading without a local TFTP/FTP/HTTP server, Grandstream
offers a NAT-friendly HTTP server. This enables users to download the latest software upgrades for the
gateway via this server. Please refer to the following webpage for the firmware server path to use:
https://www.grandstream.com/support/firmware
Backup
The GXW450X configuration can be backed up locally or via the network. The backup file will be used to restore the configuration on GXW450X w
necessary.
Backup/Restore
Users could back up the GXW450X configurations for restore purposes under Web GUI🡪Maintenance🡪Backup🡪Backup/Restore. Click on
to create a new backup. Then the following dialog will show:
2. Choose where to store the backup file: USB Disk, SD Card, or Local.
Once the backup is done, the list of the backups will be displayed with the date and time on the web page. Users can download , restore ,o
delete it from the GXW450X internal storage or the external device.
Click on to upload backup file from the local device to GXW450X. The uploaded backup file will also be displayed in the we
and can be used to restore the GXW450X.
The option allows GXW450X to perform automatic backup at the user-specified time. Scheduled backup files can only be stor
a USB / SD card / SFTP server. Users can set backup time from 0-23 and how frequently the backup will be performed.
Figure 80: Schedule Backup
Data Sync
Besides local backup, users could backup the voice records and/or CDR on a daily basis to a remote server via SFTP protocol automatically under W
GUI🡪Maintenance🡪Backup🡪Data Sync.
The client account supports special characters such as @ or “.”. This change allows users to use an email address as SFTP accounts. It allows users
to specify the destination directory on the SFTP server for the backup files. If the directory doesn’t exist on the destination, GXW450X will create th
directory automatically.
Figure 81: Data Sync
Enable Data Sync Enable the auto backup function. This option is disabled by default
Password Enter the Password associate with the Account on the SFTP backup server.
Destination Specify the directory in the SFTP server to keep the backup file. Format: ‘xxx/xxx/xxx’, If this directory does not exist, GXW w
Directory create this directory automatically.
Sync Time Enter 0-23 to specify the backup hour of the day.
Before saving the configuration, users could click on “Test Connection”. The GXW450X will then try connecting the server to make sure the server
and accessible for the GXW450X.
Save the changes and all the backup logs will be listed on the web page.
To restore the configuration on the GXW450X from a backup file, users could go to Web GUI🡪Maintenance🡪Backup🡪Backup/Restore.
A list of previous configuration backups is displayed on the web page. Users could click on of the desired backup file and it will be restore
the GXW450X.
If users have other backup files on the PC to restore on the GXW450X, click on “Upload Backup File” first and select it from the local PC to upl
the GXW450X. Once the uploading is done, this backup file will be displayed in the list of previous configuration backups for restoring purpos
Click on to restore from the backup file.
Users could also restore using the backup file saved on an SD card or USB device plugged into the GXW450X.
Figure 82: Restore GXW450X from Backup File
Backup file must be in tar format and contain letters, digits or special characters -_. The file size must be less than 10MB.
System Cleanup/Reset
Users could perform reset and reboot under Web GUI🡪Maintenance🡪System Cleanup/Reset🡪Reset & Reboot. To factory reset the device, sel
mode type first. There are two different types of reset.
User Data: The data such as CDR Records Operation Logs Core file etc.
All: Restore the device to factory default settings for both User Data and User Configuration.
Users could configure to clean the Call Detail Report/Voice Records/Voice Mails/FAX automatically under Web GUI🡪 Maintenance🡪System
Cleanup/Reset 🡪Cleaner.
CDR Cleaner
CDR Clean Time Enter 0-23 to specify the hour of the day to clean up CDR.
Clean Interval Enter 1-30 to specify the day of the month to clean up CDR.
File Cleaner
Clean Files in External Device If enabled the files in an external device (USB/SD card) will be atomically cleaned up as configured.
Choose Cleaner File Select the files for system automatic clean.
File Clean Threshold Specify the threshold of local storage usage from 0 to 99 (in percentage).
File Clean Time Enter 0-23 to specify the hour of the day to clean up the files.
File Clean Interval Enter 1-30 to specify the day of the month to clean up the files.
Cleaner Log Press the “Clean” button to clean the cleaner log.
Users could manage the content of the external drives, USB and /or SD card, manually from the Web GUI under Maintenance🡪System Cleanup/
🡪USB / SD Card Files Cleanup.
On this Web page, users could navigate through the paths and the directories of the USB and/or the SD card and select the files and folders to cle
Network Troubleshooting
On the GXW450X, users could capture traces, ping remote host and traceroute remote host for troubleshooting purposes under Web
GUI🡪Maintenance🡪Network Troubleshooting.
Ethernet Capture
An ethernet trace can be captured for troubleshooting purposes related to network issues, the SIP flow, etc.
The captured trace can be downloaded for analysis. Instructions or results will be displayed in the Web GUI output result.
WAN
Both
Check this box to save the capture files in the SFTP server. Please make sure the configuration of data synchronizatio
Enable SFTP Data Sync
works in advance.
Storage to External
Check this box to activate storage of the capture either on the USB or SD Card.
Device
Capture Filter Enter the filter to obtain the specific types of traffic, such as (host, src, dst, net, proto…).
The output result is in .pcap format. Therefore, users could specify the capture filter as used in the general network traffic capture tool (host, src, d
protocol, port, port range) before starting to capture the trace.
IP Ping
Enter the Target Host using either a hostname or an IP address. Then press the “Start” button. The output result will dynamically be displayed in th
window below.
Traceroute
Enter the target host in hostname or IP address. Then press the “Start” button. The output result will dynamically be displayed in the window below
Signaling Troubleshooting
Service Check
Enable Service Check to periodically check the GXW450X responsiveness. Check Cycle is configurable in seconds and the default setting is 60 sec.
Times is the maximum number of failed checks before restarting the GXW450X. The default setting is 3. If there is no response from GXW450X aft
attempts (default) to check, the current status will be stored and GXW450X will be restarted.
CDR Filter
On the GXW450X, the CDR can be accessed under Web GUI🡪CDR🡪CDR. Users could filter the call report by clicking on and specifying t
date range and criteria, depending on how the users would like to include the logs in the report. Click on the “Search” button to display the gener
report.
Figure 90: CDR Filter
You can specify a caller number or set a caller number with a pattern (. match zero or more characters only appears in the end. X
any digit from 0-9, case-insensitive, repeatable, and only appears in the end. If the pattern string contains “.” in the end, “X” must
appear before “.”.).
For Example:
Caller
Number X: It will filter out CDR records where a caller number is of ranges from 0 to 9.
XXXX: It will filter out CDR records where a caller number has 4 digits.
3XXX: It will filter out CDR records where a caller number has a leading digit of 3 and a length of 4 digits.
3.: It will filter out CDR records where a caller number has a leading digit 3.
Callee
Enter the caller name to filter the CDR report. CDR with the matching caller name will be filtered out.
Number
Source
Select source trunk(s) and the CDR of calls going through inbound trunk(s) will be filtered out.
Trunk Name
Destination
Select destination trunk(s) and the CDR of calls going outbound through the trunk(s) will be filtered out.
Trunk Name
Specify the start time and the end time to filter the CDR report. Click on the calendar icon on the right and the calendar will show
Time
users to select the exact date and time.
Filter with the call status, the available statuses are the following:
Answered
Status No Answer
Busy
Failed
Status
Call From
Call To
Start Time
Call Time
Talk Time
After applying the filter, Users could perform the following operations on the CDR report:
Click on the header of the data field column to sort the report according to an ascending or descending order. Clicking on the same header again
reverse the order.
On the bottom of the page, click on button to remove CDR records that appear on search results.
Automatic Download
Users could configure the GXW450X to automatically download the CDR records and send the records to an Email address. Click on “Automatic
Download Settings” and configure the parameters in the dialog below.
Figure 92: Automatic CDR Download
To receive CDR records automatically from Email, check “Enable” and select a time period “By Day” “By Week” or “By Month”, and select Hour of th
as well for the automatic download period. Make sure you have entered an Email or multiple email addresses where to receive the CDR records.
Users have the option to delete the sent records “Delete Sent Records”.
The CSV CDR report file downloaded will have the following data fields.
Account Code String An account code associated with the Party A channel. r
Lastdata String The application data for the last application the Party A channel executed. r
Date/tim
Start time The time the CDR was created. r
e
The time when Party A was answered, or when the bridge between
Date/tim
Answer Time r
e Party A and
Party B was created.
Date/tim The time when the CDR was finished. This occurs when either party hangs up, or when the bridge between
End time r
e the parties is broken.
Call time Integer The time in seconds from start time until the end time. r
Talk time Integer The time in seconds from answer time until the end time. r
Field Type Description A
The final known disposition of the CDR record. The possible values are: “ANSWERED”,
Disposition Enum r
“NO ANSWER, CONGESTION, FAILED,
and BUSY.
Amaflags Enum A flag is specified on the Party A channel. The possible values are: “OMIT, BILLING, and DOCUMENTATION. r
A user-defined
Userfield String r
field set on the channels. If set on both the Party A and Party B channels, the user fields
of both are concatenated and separated by a comma.
Dest Channel
String The destination extension of the call r
Extension
A numeric value that, combined with uniqueid and linkedid, can be used to uniquely identify a single CDR
Session String r
record
Account code: —
Context: did-out
Lastapp: Dial
Lastdata: PJSIP/1006@trunk_5,,b(callee-handler^s^1)
Talk Time: 18
Disposition: ANSWERED
Amaflags: DOCUMENTATION
UniqueID: 1542092488
Userfield: External
Caller name: –
Answer by: trunk_5
Session: 1542092488529109-1008
CHANGE LOG
This section documents significant changes from previous versions of GXW450X user manuals. Only major new features or major document updat
listed here. Minor updates for corrections or editing are not documented here.
Added new option “Original Called” when using SS7 signaling type. [Original Called]
Added support for “early ACM” in SS7 interface settings. [Early ACM]
Firewall rules will now apply to traffic between LAN and WAN interfaces. [Static Defense]
Added E1/T1/J1 Error Code option to allow users to send either 480 or 503 response to the VoIP trunk when the E1/T1/J1 interface is down or
unavailable. [E1/T1/J1 Error Code]
No major changes
Added the ability to customize call failure tone settings. [Call Failure Tone Settings]
Added ability to group E1 lines with a single DATA channel. [Data channel]
Added T1 E&M signaling support. [Table 30: Digital Hardware Configuration Parameters: T1 – E&M Immediate]
Added Secondary SIP Server option to Register SIP Trunks. [Secondary SIP Server]
The administrator-level users can now view the SNMP page. [SNMP]
Added ability to select a different E1/T1 port to use for the line’s data channel when SS7 is selected as the signaling type. [Data channel]
Added ability to select the minimum and maximum TLS versions to support. [TLS Security]
Added options From User, Send PPI Header, PPI Mode, and DOD as From Name. [Table 33: VoIP Trunk Configuration Parameters – Register SIP
[Table 34: VoIP Trunk Configuration Parameters – Peer SIP Trunk]
Added the ability to configure DODs for VoIP trunks. [Direct Outward Dialing (DOD)]
Added the Set Caller ID option to the Edit Inbound Rule page. [Set Caller ID Info]
Added the Enable Filter on Source Caller ID option to the Edit Outbound Rule page. This option will allow only callers with the specified CID p
to use the outbound route. [Enable Filter on Source Caller ID]
No major changes.
No major changes.
Need Support?
Can’t find the answer you’re looking for? Don’t worry we’re here to help!
CONTACT SUPPORT