Avadesign SHS 3830 User manual

SHS 3830
User Manual
SHS 3830 is an embedded server that provides IP-PBX functions and two
WAN ports Router features.
2014
Avadesign Technology Co. Ltd
www.avadesign.com.tw
2014/11/25

1
WELCOME
Congratulations on purchasing the SHS 3830. The SHS 3830 is an embedded server
that provides IP-PBX functions and two WAN ports Router features. The SIP-based
IP-PBX can create telephony systems for home and small-to-medium enterprises.
Manual version V1.00 25-11-2014
Avadesign Technology Co. Ltd
4F.-10, No.351, Sec. 2, Zhongshan
Rd., Zhonghe Dist., New Taipei City
23504, Taiwan R.O.C.
www.avadesign.com.tw

2
Table of Contents
Chapter 1 Introduction........................................................................................................................ 5
1.1 SHS-3830 Specification.................................................................................................................... 5
1.1.1 SIP IP-PBX Function........................................................................................................5
1.1.2 IP Network connection..................................................................................................... 6
1.1.3 Management.................................................................................................................... 7
1.1.4 Environmental.................................................................................................................. 7
1.1.5 Approvals......................................................................................................................... 7
1.2 Hardware Overview................................................................................................................. 7
1.2.1 Front Panel and LED Indicator ........................................................................................ 7
1.2.2 Back Panel....................................................................................................................... 8
Chapter 2 Start to configure SHS3830.......................................................................................... 9
2.1 Unpacking........................................................................................................................................... 9
2.2 Plug in DC power adapter to SHS 3830.................................................................................. 9
2.3 Connect to LAN Port................................................................................................................ 9
2.4 Open Web Browser ................................................................................................................. 9
2.5 Basic and Advance Configurations for IP-PBX..................................................................... 10
2.5.1 WAN configuration .......................................................................................................10
2.5.2 LAN configuration .........................................................................................................20
2.5.2.1 LAN configure....................................................................................................20
2.5.2.2 DHCP reserved IP............................................................................................. 21
2.5.3 IP-PBX...........................................................................................................................23
2.5.3.1 Group.................................................................................................................23
2.5.3.2 Subscribers........................................................................................................ 27
2.5.3.3 SIP Trunk........................................................................................................... 32
2.5.3.4 Dial Plan ............................................................................................................ 33
2.5.3.5 SIP status .......................................................................................................... 36
2.5.3.6 Queue................................................................................................................ 37
2.5.3.7 Paging................................................................................................................ 39
2.5.3.8 Preview.............................................................................................................. 42

3
2.5.3.9 Download Log....................................................................................................44
2.5.3.10 Download CDR................................................................................................ 45
2.5.3.11 Debug Capture ................................................................................................ 46
2.5.3.12 Update IPPBX .................................................................................................49
Chapter 3 Web configuration for Router functions..........................................................50
3.1 System status ................................................................................................................... 50
3.1.1 Link status....................................................................................................................... 50
3.1.2 Data monitor................................................................................................................... 50
3.1.3 DHCP clients table ......................................................................................................... 51
3.1.4 NAT table........................................................................................................................ 52
3.1.5 Current routing table.......................................................................................................52
3.2 Load balance ...................................................................................................................53
3.2.1 Outbound........................................................................................................................ 53
3.2.2 Inbound........................................................................................................................... 55
3.3 Firewall ............................................................................................................................57
3.3.1 Super Users...................................................................................................................... 58
3.3.2 DoS defense..................................................................................................................... 61
3.3.3 ARP protection..................................................................................................................64
3.3.4 Local IP filtering................................................................................................................64
3.3.5 Remote IP filtering............................................................................................................ 67
3.3.6 URL filtering...................................................................................................................... 71
3.3.7 Intrusion security.............................................................................................................. 74
3.3.8 Messenger blocking.........................................................................................................78
3.3.9 IP session limit..................................................................................................................79
3.4 Quality control .................................................................................................................79
3.4.1 QoS.................................................................................................................................79
3.4.2 Bandwidth control........................................................................................................... 81
3.4.3 Outgoing Route .............................................................................................................. 84
3.4.4 LAN IP speed limit.......................................................................................................... 87
3.5 Advance ..........................................................................................................................90
3.5.1 VPN pass through .......................................................................................................... 90
3.5.2 DMZ................................................................................................................................ 91
3.5.3 Virtual server................................................................................................................... 95
3.5.4 DDNS..............................................................................................................................99
3.5.5 Mac done......................................................................................................................100
3.5.6 Multi-NAT...................................................................................................................... 101

4
3.5.7 Inner DNS..................................................................................................................... 104
3.5.8 Routing configure .........................................................................................................107
3.6 System .......................................................................................................................... 111
3.6.1 Password ..................................................................................................................... 111
3.6.2 Time.............................................................................................................................. 112
3.6.3 Mail alert....................................................................................................................... 113
3.6.4 System log ................................................................................................................... 114
3.6.5 Remote configure......................................................................................................... 115
3.6.6 Load default ................................................................................................................. 117
3.6.7 Config backup.............................................................................................................. 118
3.6.8 Firmware update.......................................................................................................... 119
3.7 Save & Reboot................................................................................................................ 120
Chapter 4 In-bound function .....................................................................................121
Chapter 5 Hardware load default...............................................................................122
Chapter 6 Appendix....................................................................................................123
6.1 TCP/IP Protocol Port Number List................................................................................... 123

5
Chapter 1 Introduction
SHS 3830 is an embedded server that provides IP-PBX functions and two WAN ports
Router features. The Firewall and QoS improves VoIP network voice quality.
The IP-PBX module of SHS 3830 is a SIP-based IP-PBX that can create telephony
systems for home and small-to-medium enterprises. It is also designed to operate on a
variety of VoIP applications, such as auto-attendant, call transfer, and IP-based
communications. Since it supports industry-standard SIP, it works with all SIP-supported
products and devices available today. The key features of SHS 3830 are quiet, power
saving, stability and small volume box.
1.1 SHS-3830 Specification
1.1.1 SIP IP-PBX Function
RFC3261 compliance
SIP UDP/TCP Protocol
MD5 Digest Authentication (RFC2069/RFC2617)
Allow FXO/FXS gateway, IP Phone and the DP-104 SIP IP video door phone to
register.
Support 50 registered extensions
Easy install APP on smart phone to become SIP IP-PBX client extension
Support SIP Trunk
Support Audio Codec G.711 A-law/μ-law
Support pass through Video Call
Out Band DTMF (RFC4733, RFC2833 / SIP INFO)
Adaptive Jitter Buffer
Automatic voice attendant
Record your own greeting voice messages via voice file up-load from Web
NAT Traversal configurable
Blind Transfer
Configurable Call and Pickup group
Block Anonymous Call
Call Hold
Call Transfer
Call Park
Call Queuing
Call Routing (DID & ANI) (in dial-plan function)
Caller ID
Route by Caller ID (in dial-plan function)
Music On Hold
Music On Transfer

6
Time and Date
Flexible Dial Plan
Support Multi call rule to configure
Outgoing Routing Rule (Drop, Replace, Add) and Routes selection
Incoming Routing Rule (Drop, Replace, Add)
Dial Group Setting
Call Group, Pick up group setting
Configure maximum concurrent SIP calls
RTP Routed or Direct mode selection
SIP Trunk setting
Cellular Phone resonance setting
Video preview setting
Flexible Routing Plan
Voice broadcasting over IP Phone with separated group
Provide CDR log file
1.1.2 IP Network connection
IPv4 (RFC 791) for WAN and LAN ports
IP/ICMP/ARP/RARP/SNTP
NTP Server and Time Zone setting
WAN: DHCP, Fixed, PPPoE, DDNS
LAN : Static Private IP or DHCP Server
NAT allows users to surf internet by means of a single broadband user account
Multiple DMZ Host (PPPoE, static IP)
Multiple Virtual Server
Multiple NAT function
Protocol Route Control (IP Binding Function, by IP & port number)
Protocol Bandwidth Control (by application protocol port number)
IP/URL Blocking
User Bandwidth control Function ( by user IP address)
Outgoing wan link selected (by user IP address)
Remote Configuration through Internet
Mail Alert: H32 WAN up
WAN down
System Log
System Log: local event logging –log send to remote server
Firewall
Backup / Restore Router configuration file from PC
Outbound Load Balance: provide 2 working mode: (1) session (2) weight round
robin
Inbound Load Balance: provide 2 working mode: (1) session (2) weight round

7
robin
TCP/UDP (RFC 793/768)
RTP/RTCP (RFC 1889/1890)
1.1.3 Management
Administrative HTTP and port number configuration
Subscriber information display
HTTP port and user ID, Password control
Firmware and Library upload
Configuration Backup/Restore
Reset to Factory default setting
Soft-Reset or Reboot System
Status display: Network, Line, SIP Trunk status
1.1.4 Environmental
Dimensions:155(W) x 106(H) x 29(D) mm
Weight: 300g
Power Adaptor: INPUT: AC100V~240V, 50/60Hz 0.8A
OUTPUT: DC 12V, 2.0A
1.1.5 Approvals
CE
FCC
RoHS
1.2 Hardware Overview
1.2.1 Front Panel and LED Indicator
RESET: If SHS 3830 encounters any system crash, you may press this button to reload
factory default value as press the button over 3 seconds or reset back to latest
configuration file while pushing the button.
USB: SHS 3830 provides two USB 2.0 ports. Light on when SHS 3830 detects USB
device and active.
LAN: SHS 3830 provides three RJ45 type LAN ports connecting to your computer or
network device such as Hub/Switch via RJ45 cable. Light on means link 100 Mbps.
Flash when data is transmitting or receiving with 100 Mbps. Light off means
SHS3830
USB
LAN
WAN
POWER
2 1
2 1
3 2 1
RESET

8
disconnected or undetected.
WAN: SHS 3830 provides two RJ45 type WAN ports connecting to broadband
transmission equipment such as ADSL or Fiber or CABLE Modem via RJ45 cable.
Light on means link 100 Mbps. Flash when data is transmitting or receiving with
100 Mbps. Light off means disconnected or undetected.
POWER: Light on when SHS3830 is powered by on.
1.2.2 Back Panel
POWER: A switch for power on or off
DC 12V/2A: Connecting to AC adapter. Input AC 100V~240V, 50/60Hz 0.8A;
Output DC12V 2.0A
LAN/WAN: RJ-45 socket, complied with Ethernet 10/100base-T.
USB: USB 2.0 ports, USB Type A.
LAN1
LAN2
WAN1
LAN3
WAN2
USB
1
2
POWER
DC+12V
I
O

9
Chapter 2 Start to configure SHS3830
2.1 Unpacking
Unpack the items. Your package should include:
One SHS 3830
One external power adaptor INPUT: AC100V~240V, 50/60Hz 0.8A
OUTPUT: DC 12V, 2.0A
If items are missing or damaged, notify your Avadesign representative. Keep the
carton and packing material.
2.2 Plug in DC power adapter to SHS 3830
2.3 Connect to LAN Port
LAN port of SHS3830 connects to user’s computer or Hub/Switch port via RJ45
cable. Then plug in AC power cord to power source and switch on the SHS 3830.
2.4 Open Web Browser
Type the default IP address http://192.168.1.254 in the address bar of the
Chrome browser to open web configuration. The screen shows as below:
Please input with username: admin and password: admin then click “Login”
button on the screen. After login SHS3830, user can start to do basic and advance
configurations.
After Login SHS 3830 user will see screen as below, and there are ten main
categories, user can click on each category to extend detail items.
Please type 192.168.1.254
Username: admin
Password: admin

10
Welcome
System Status
WAN configure
LAN configure
Load balance
Firewall
Quality control
Advance
System
IP-PBX
Save & reboot
The various configuration menus are explained below. You can select various
function listed in the left side of Welcome page display.
Welcome Home Page
2.5 Basic and Advance Configurations for IP-PBX
To make SHS 3830 work smoothly you have to set up some basic and advance
configurations that include router and IP-PBX features.
The first, you have to configure WAN and LAN IP for network enable.
2.5.1 WAN configuration
There are two WAN ports for the SHS 3830. You can select “WAN configure”in
the menu bar on the left side of screen to configure WAN1/WAN2 as shown below.
There are several WAN functions can be made in this display, you can configure
functions to each WAN port separately.
Menu bar

11
WAN Configure –WAN1 –Dynamic IP
WAN1/WAN2 TYPE
Three kinds of WAN types to let you select for each WAN port:
1. Dynamic IP - connect to Cable Modem.
Obtain an IP address from ISP automatically. Usually it's used to connect
CABLE modem. You won't need to assign an IP address. The SHS 3830 will get
the IP address for user automatically.
2. PPPoE - connect to Dial Up DSL
Some ISPs require use of PPPoE to connect to their service. Connect to ISP
via dial-up connecting, ISP will assign a legal IP to you after the user ID and
password had been passed when the connection is made (The user ID and
password here are provided by your ISP.)
3. Static IP - Connect to Leased DSL
ISP assigns you a static IP address. When used the leased line of ADSL. ISP
will provide you the relative IP, Subnet Mask, Gateway and DNS. You need to
indicate the static IP manually.
VPN Client
User can select either Disable or PPTP or L2TP or L2TP over IPSec. With
PPTP/L2TP/L2TP-PSK dial up features to help construct a complete Client/Server
topology for need of enterprise network, it improves security in connecting links in
public network.
Internet Schedule
This function allows you to control each WAN port link up/down time by
WAN1
configure

12
daily/weekly. Available time: WAN port link up time. For example : The link time is
from AM 9:30 –PM 6:30. User can fill 09:30 : 18:30
Select Weekly: choose by day
Note: When enable SCHEDULE function, the line will up/down following the
timer set, no matter DOD function is enable or not.
Healthy check
User can select either Enable or Disable.
When choose Dynamic IP, you only need to save this selection by clicking on
“Apply”button shown as below. When finish setting all parameter, reboot SHS 3830.
WAN Configure –WAN2 –Dynamic IP
The content and usage of WAN2 is the same as WAN1.
Click on “Apply”button to save
the configuration what you
choose.

13
WAN Configure –WAN1 –PPPoE
PPPoE/Dial up DSL Type
Select “PPPoE” and you will need to enter the ID and Password. Sometimes
you also need to input the Service Name if ISP requires for it. Max Idle Time is using
to disconnect the ADSL connection automatically after the idle period you define. The
unit is minute and the default is 0. This default value let SHS 3830 remain connecting
all the time unless disconnected by user manually or ISP. If you define the period as
3 and the SHS 3830 will auto disconnect after idling 3 minutes. Supposing that you
don’t have the Service Name, you may ask your ISP for it.
Account: User Name, provide by ISP, up to 60 characters can be enter.
Password: provide by ISP, up to 60 characters can be enter.
Max Idle Time: 0 =no check, check by minutes
Connect mode:
Manual: You need to initiate WAN connection manually, by clicking "WAN1
connect" or "WAN2 connect" button in "System Status" - "Link status" menu.
However, power up or reset also can initiate the WAN connection.
Dial-on-demand: Whenever a user is trying to access the Internet from his
computer, this WAN port will start connection automatically if it is disconnected.
Always-on: The WAN port will try to establish the connection as long as it is
disconnected, no matter this port is used or not.

14
LCP echo: To send LCP (Link Control Protocol) echo request at regular interval to
ISP for checking PPPoE connection active.
Interval: Editable for need between 0 ~ 65535.
Counter: the number of LCP echo request to be sent.
about "always on " function, normally you need to combine "Health check "
function together, then "always on" will be work more prefect because there have a
ADSL modem between router & ISP equipment. in physical layer, if ADSL line fail but
ADSL modem still alive , SHS 3830 can’t detect line is broken unless ISP send a
disconnect packet to SHS 3830 so if ADSL line is in abnormal up-down, sometimes
router module of SHS 3830 does not get disconnect message from ISP, so
connected line is deemed to still connection by SHS 3830.
If you enable "Health check " in each line. then the SHS 3830 can automatically
send packet out through WAN to detect whether line is active or not ( 1 packet/30 sec)
this function will cover entire network to secure packet will not lose in defect-line ,
include router-->ADSL modem--> ADSL line--> ISP Equipment---> Interest.
It's better to enable at least 2 options in "Health Check", in order to avoid
misjudgments when only 1 option selected and that "option Server fail".
Static IP/Leased DSL Type
If you select “Static IP”, you will need to input the IP address, Subnet Mask,
Primary DNS, Secondary DNS and Gateway provided by your ISP. The picture below
is an example of static IP’s settings.
WAN Configure –WAN1 –Static IP

15
3G Access (3G USB Modem)
In order to prevent any case in losing wired line connections, 3G wireless line
for backup seems the best way to keep line alive to make your business not affected.
Just a few steps for configured page as below, and then it soon can be online with no
obstacle.
Disable/Enable of 3G USB modem is subject to be deactivated or activated all
the time since the device turns on, so make sure 3G USB modem attached before
device power on. All necessary parameters for configuration can be acquired from
ISPs offering for account.
WAN configure –3G USB modem configure
PPTP Dial Up
PPTP dial up for WAN access type as below, need some parameters from ISPs
to complete configuration page.
Ensure to key in user name and password as same as ISP offering. PPTP
Server IP can be URL type or IP address that both are acceptable for device due to
able to distinguish which one of them.

16
WAN Configure –WAN1 –Dynamic IP - PPTP
Below status shown established PPTP links for example.
L2TP Dial Up
If ISPs ask for L2TP for dial up, then user can choose and enable it just follow
below page to fill in necessary items to launch Internet service.

17
WAN Configure –WAN1 –Dynamic IP –L2TP
L2TP over IPSec. Dial up (L2TP-PSK) (Option)
It is L2TP over IPSec. dial up to offer a better protection for Internet access.
Although not many devices support the feature in market, it is a choice for user to
adopt for specific requirement if necessary.
Regarding above various VPN Clients for dial up to Server to establish secured
connection to access data or contents, many of them have been wildly adopted by
enterprises for their resources share no matter in between branch and headquarter ,
or employee carry portable devices outside to online import and export data for
business.
Basically, the SHS 3830 does NOT provide this feature. User has to pay for this
option.
Internet Schedule
Scheduling Internet connection with time period to save cost and manage access
internet for workers to improve efficiency.

18
WAN Configure –Internet schedule
Healthy check
1. Enable:
SHS 3830 will check ADSL link automatically to check whether link alive or
not ,if link fail, the Router will switch packet to another exist link( except TCP
packet), the router will switch back to ADSL link again after router check ADSL line
link again.
SHS 3830 provides 3 methods to check ADSL link. You can choose it with
each method or both as follows:
DNS : test DNS in Internet
Ping IP : to test IP in Internet
Time Server
Suggest select at least 2 method to check ADSL link, in order to avoid router
making wrong action due to Internet Server disable.
2. Disable: no Healthy check function
If without “Time Server” existing, this function will disable automatically.
Healthy check can be set up to test 3 different destination IP, in order to
avoid wrong operation (in case destination server is fail).

19
WAN Configure –Healthy check