Grandstream Networks GWN7000 User manual

Grandstream Networks, Inc.
GWN7000
Enterprise Multi-WAN Gigabit VPN Router
User Manual

P a g e | 2
GWN7000 User Manual
COPYRIGHT
©2016 Grandstream Networks, Inc. http://www.grandstream.com
All rights reserved. Information in this document is subject to change without notice. Reproduction or
transmittal of the entire or any part, in any form or by any means, electronic or print, for any purpose
without the express written permission of Grandstream Networks, Inc. is not permitted.
The latest electronic version of this guide is available for download here:
http://www.grandstream.com/support
Grandstream is a registered trademark and Grandstream logo is trademark of Grandstream Networks, Inc.
in the United States, Europe and other countries.
OPEN SOURCE LICENSES
GWN7000 firmware contains third-party open source software. Grandstream Open source licenses can be
downloaded from Grandstream web site from here
CAUTION
Changes or modifications to this product not expressly approved by Grandstream, or operation of this
product in any way other than as detailed by this guide, could void your manufacturer warranty.
WARNING
Please do not use a different power adaptor with devices as it may cause damage to the products and void
the manufacturer warranty.

P a g e | 3
GWN7000 User Manual
Table of Contents
DOCUMENT PURPOSE.................................................................................................9
CHANGE LOG..............................................................................................................10
Firmware Version 1.0.2.71...................................................................................................................10
WELCOME ................................................................................................................... 11
PRODUCT OVERVIEW ................................................................................................12
Technical Specifications.......................................................................................................................12
INSTALLATION ............................................................................................................14
Equipment Packaging..........................................................................................................................14
Connect your GWN7000......................................................................................................................14
Safety Compliances.............................................................................................................................15
Warranty...............................................................................................................................................15
GETTING STARTED.....................................................................................................16
LED Indicators .....................................................................................................................................16
Use the WEB GUI................................................................................................................................16
Access WEB GUI..........................................................................................................................16
WEB GUI Languages ...................................................................................................................18
WEB GUI Configuration................................................................................................................19
Overview Page .............................................................................................................................20
Save and Apply Changes .............................................................................................................21
ROUTER CONFIGURATION ........................................................................................22
Status...................................................................................................................................................22
Ports Configuration..............................................................................................................................23
WAN Ports Settings......................................................................................................................23
Tunnel...........................................................................................................................................24
Global Settings .............................................................................................................................25
Port Mirroring................................................................................................................................26
Static Routes........................................................................................................................................26
QoS......................................................................................................................................................28
DDNS...................................................................................................................................................31

P a g e | 4
GWN7000 User Manual
SETTING UP A WIRELESS NETWORK ......................................................................32
Discover and Pair GWN76xx Access Points .......................................................................................32
Network Groups...................................................................................................................................35
Create an SSID under a Network Group......................................................................................40
Additional SSID under Same Network Group ..............................................................................41
CLIENTS CONFIGURATION........................................................................................43
Clients..................................................................................................................................................43
Status............................................................................................................................................43
Edit IP and Name..........................................................................................................................44
Block a client.................................................................................................................................45
VPN (VIRTUAL PRIVATE NETWORK).........................................................................46
Overview..............................................................................................................................................46
OpenVPN® Server Configuration........................................................................................................46
Generate Self-Issued Certificate Authority (CA)...........................................................................46
Generate Server/Client Certificates..............................................................................................49
Create OpenVPN® Server ...........................................................................................................56
OpenVPN® Client configuration..........................................................................................................60
L2TP/IPSEC Configuration..................................................................................................................64
GWN7000 L2TP/IPSec Client Configuration................................................................................64
PPTP CONFIGURATION.....................................................................................................................67
GWN7000 Client Configuration ....................................................................................................67
FIREWALL.................................................................................................................... 70
Basic Settings ......................................................................................................................................70
General Settings...........................................................................................................................70
Port Forwarding ............................................................................................................................70
DMZ..............................................................................................................................................71
Inter-Group Traffic Forwarding......................................................................................................72
UPnP ............................................................................................................................................73
Traffic Rules Settings...........................................................................................................................74
Firewall Advanced Settings..................................................................................................................75
General Settings...........................................................................................................................75
SNAT.............................................................................................................................................76
DNAT ............................................................................................................................................77
MAINTENANCE AND TROUBLESHOOTING..............................................................79

P a g e | 5
GWN7000 User Manual
Maintenance ........................................................................................................................................79
Debug ..................................................................................................................................................80
Capture.........................................................................................................................................80
Ping/Traceroute ............................................................................................................................81
Syslog...........................................................................................................................................83
NAT Table .....................................................................................................................................83
File Sharing..........................................................................................................................................84
SNMP (Pending)..................................................................................................................................86
UPGRADING AND PROVISIONING ............................................................................88
Upgrading Firmware ............................................................................................................................88
Upgrading via WEB GUI...............................................................................................................88
Provisioning and backup......................................................................................................................89
Download Configuration ...............................................................................................................89
Configuration Server.....................................................................................................................89
Reset and reboot .................................................................................................................................90
EXPERIENCING THE GWN7000 ENTERPRISE ROUTER .........................................91

P a g e | 6
GWN7000 User Manual
Table of Tables
Table 1: GWN7000 Technical Specifications ..............................................................................................12
Table 2: GWN7000 Equipment Packaging..................................................................................................14
Table 3: LED Indicators...............................................................................................................................16
Table 4: Overview........................................................................................................................................20
Table 5: GWN7000 WEB GUI -> Router ->Port -> WAN Port (1,2)............................................................23
Table 6: 6in4 Tunnels..................................................................................................................................24
Table 7: 6rd Tunnels....................................................................................................................................25
Table 8: aiccu Tunnels.................................................................................................................................25
Table 9: GWN7000 WEB GUI->Router->Port->Global Settings.................................................................26
Table 10: Port Mirroring...............................................................................................................................26
Table 11: IPv4 Static Routes.......................................................................................................................27
Table 12: IPv6 Static Routes.......................................................................................................................27
Table 13: QoS Basic....................................................................................................................................29
Table 14: Upstream QoS.............................................................................................................................29
Table 15: QoS Policer .................................................................................................................................30
Table 16: Device Configuration...................................................................................................................33
Table 17: Basic............................................................................................................................................36
Table 18: Wi-Fi............................................................................................................................................38
Table 19: CA Certificate...............................................................................................................................47
Table 20: Server Certificate.........................................................................................................................50
Table 21: Client Certificat............................................................................................................................54
Table 22: OpenVPN® Server......................................................................................................................57
Table 23: OpenVPN® Client .......................................................................................................................62
Table 24: L2TP Configuration......................................................................................................................65
Table 25: PPTP Configuration.....................................................................................................................68
Table 26: Port Forward................................................................................................................................71
Table 27: DMZ.............................................................................................................................................72
Table 28: UPnP Settings .............................................................................................................................73
Table 29: Firewall Traffic Rules...................................................................................................................74
Table 30: Firewall-General Settings............................................................................................................75
Table 31: SNAT ...........................................................................................................................................76
Table 32: DNAT...........................................................................................................................................77
Table 33: Maintenance................................................................................................................................79
Table 34: Debug-Capture............................................................................................................................81
Table 35: Add a New File to Share..............................................................................................................85
Table 36: SNMP Basic Page.......................................................................................................................86
Table 37: SNMP Advanced Page................................................................................................................87
Table 38: Network Upgrade Configuration..................................................................................................88

P a g e | 7
GWN7000 User Manual
Table of Figures
Figure 1: GWN7000 Front View..................................................................................................................14
Figure 2: GWN7000 Back View ..................................................................................................................15
Figure 3: GWN7000 Web GUI Login Page.................................................................................................17
Figure 4: Change Password on first boot....................................................................................................18
Figure 5: Setup Wizard ...............................................................................................................................18
Figure 6: GWN7000 Web GUI Language ...................................................................................................19
Figure 7: GWN7000 Web GUI Language ...................................................................................................19
Figure 8: Overview Page.............................................................................................................................20
Figure 9: Apply Changes.............................................................................................................................21
Figure 10: Router's Status ..........................................................................................................................22
Figure 11: QoS............................................................................................................................................28
Figure 12: Discover AP ...............................................................................................................................32
Figure 13: Discovered Devices...................................................................................................................33
Figure 14: GWN7610 online........................................................................................................................33
Figure 15: Network Group...........................................................................................................................35
Figure 16: Add a New Network Group........................................................................................................36
Figure 17: Device Membership...................................................................................................................39
Figure 18: Add AP to Network Group from Access Points Page.................................................................40
Figure 19: Create an SSID..........................................................................................................................41
Figure 20: Additional SSID..........................................................................................................................42
Figure 21: Additional SSID Created............................................................................................................42
Figure 22: Clients........................................................................................................................................43
Figure 23: Client's Status............................................................................................................................44
Figure 24: Client's Configuration.................................................................................................................44
Figure 25: Block a Client.............................................................................................................................45
Figure 26: Unban Client..............................................................................................................................45
Figure 27: Create CA Certificate .................................................................................................................47
Figure 28: CA Certificate.............................................................................................................................49
Figure 29: Generate Server Certificates .....................................................................................................50
Figure 30: User Management .....................................................................................................................52
Figure 31: Client Certificat...........................................................................................................................54
Figure 32: Create OpenVPN® Server.........................................................................................................57
Figure 33: OpenVPN®................................................................................................................................60
Figure 34: OpenVPN® Client......................................................................................................................61
Figure 35: OpenVPN® Client......................................................................................................................64
Figure 36: L2TP Client Configuration..........................................................................................................65
Figure 37: L2TP Client ................................................................................................................................67
Figure 38: PPTP Client Configuration.........................................................................................................68

P a g e | 8
GWN7000 User Manual
Figure 39: PPTP Client ...............................................................................................................................69
Figure 40: Basic->General Settings............................................................................................................70
Figure 41: Port Forward..............................................................................................................................71
Figure 42: DMZ ...........................................................................................................................................72
Figure 43: Inter-group Traffic Forwarding ...................................................................................................72
Figure 44: Enabling inter-group traffic.........................................................................................................73
Figure 45: Traffic Rules Settings.................................................................................................................74
Figure 46: Capture Files..............................................................................................................................81
Figure 47: IP Ping .......................................................................................................................................82
Figure 48: Traceroute..................................................................................................................................82
Figure 49: Syslog ........................................................................................................................................83
Figure 50: NAT table ...................................................................................................................................84
Figure 51: Add a New File to Share............................................................................................................85
Figure 52: File Share Actions......................................................................................................................85
Figure 53: Access File Share......................................................................................................................86

P a g e | 9
GWN7000 User Manual
DOCUMENT PURPOSE
This document describes how to configure the GWN7000 to manage wired and wireless networks via an
intuitive WebGUI. The intended audiences of this document are network administrators. Please visit
http://www.grandstream.com/support to download the latest “GWN7000 User Manual”.
This guide covers following topics:
•Product Overview
•Installation
•Getting Started
•Router Configuration
•Setting up a Wireless Network
•Clients Configuration
•VPN
•Firewall
•Maintenance and Troubleshooting
•Experiencing the GWN7000 Enterprise Router

P a g e | 10
GWN7000 User Manual
CHANGE LOG
This section documents significant changes from previous versions of the GWN7000 user manuals. Only
major new features or major document updates are listed here. Minor updates for corrections or editing are
not documented here.
Firmware Version 1.0.2.71
•This is the initial version.

P a g e | 11
GWN7000 User Manual
WELCOME
Thank you for purchasing Grandstream GWN7000 Enterprise Multi-WAN Gigabit VPN Router.
The GWN7000 is a powerful enterprise-grade multi-WAN Gigabit VPN router. Ideal for the enterprise,
small-to-medium business, retail, education, hospitality and medical markets, the GWN7000 supports
comprehensive Wi-Fi and VPN solutions that can be shared across one or many different physical
locations. It features high-performance routing and switching power and a hardware-accelerated VPN
client/server for secure inter-office connectivity. To maximize network reliability, the GWN7000 supports
traffic load balancing and failover. The GWN7000 features an integrated controller and automated
provisioning master that can setup and manage up to 300+ in-network GWN series Wi-Fi Access Points.
This can be easily operated through the product’s intuitive web browser user interface, which also offers a
central panel to monitor and control the entire network.
--------------------------------------------------------------------------------------------------------------------------------------------
Caution:
Changes or modifications to this product not expressly approved by Grandstream, or operation of this
product in any way other than as detailed by this User Manual, could void your manufacturer warranty.
Warning:
Please do not use a different power adaptor with the GWN7000 as it may cause damage to the products
and void the manufacturer warranty.
--------------------------------------------------------------------------------------------------------------------------------------------

P a g e | 12
GWN7000 User Manual
PRODUCT OVERVIEW
Technical Specifications
Table 1: GWN7000 Technical Specifications
Network Interfaces
•2 x autosensing 10/100/1000 WAN Ports
•1 x autosensing 10/100/1000 configurable as LAN, WAN or VoIP port
•4 x autosensing 10/100/1000 LAN Ports
WAN
•DHCP
•Static IP
•PPPoE
•Load balance & failover
•Rule based routing
LAN
•DHCP server
•DNS Cache
•Multiple zones
•VLAN
Auxiliary Ports
•2 x USB 3.0 ports
•1 x Reset Pinhole
Routing Performance
Up to 1 million packets/second with 64-byte packet size
USB
•3G/4G/LTE as WAN
•Printer sharing
•File sharing
Network Protocols
•IPv4, IPv6, 802.1Q, 802.1p
VPN
•Protocols: PPTP, L2TP/IPSec, OpenVPN®
•Client, Server or pass through
LED
8 green-color LEDs for device tracking and status indication
Mounting
Indoor wall mount, Desktop
QoS
VLAN, TOS, supports multiple traffic classes, filter by port, IP address, DSCP,
and policing
Firewall
NAT, DMZ, Port Forwarding, SPI, UPnP
Auto Provisioning
Capability
Embedded provisioning controller to manage up to 300+ GWN series Wi-Fi APs
Management
Web, CLI
Power
•802.3at PoE
•Included Power Supply: 12V/2A

P a g e | 13
GWN7000 User Manual
•Max power consumption: 16W
Environmental
•Operation: 0°C to 50°C
•Storage: -10°C to 60°C
•Humidity: 10% to 90% Non-condensing
Physical
Unit Dimensions: 200 x 136 x 37mm; Unit Weight: 570g
Entire Package Dimensions: 324 x 163.5 x 54mm; Entire Package Weight: 930g
Package Content
•GWN7000 Enterprise Router
•12V/2A Power Adapter
•Quick Installation Guide
•GPL License
Compliance
FCC, CE, RCM, IC

P a g e | 14
GWN7000 User Manual
INSTALLATION
Before deploying and configuring the GWN7000, the device needs to be properly powered up and
connected to the network. This section describes detailed information on installation, connection and
warranty policy of the GWN7000.
Equipment Packaging
Table 2: GWN7000 Equipment Packaging
Main Case
Yes (1)
Power adaptor
Yes (1)
Quick Installation Guide
Yes (1)
GPL License
Yes (1)
Connect your GWN7000
Figure 1: GWN7000 Front View

P a g e | 15
GWN7000 User Manual
Figure 2: GWN7000 Back View
To set up the GWN7000, follow the steps below:
1. Connect one end of an RJ-45 Ethernet cable into the WAN1 or/and WAN2 port(s) of the
GWN7000.
2. Connect the other end of the Ethernet cable(s) into a DSL modem or router(s).
3. Connect the 12V DC power adapter into the power jack on the back of the GWN7000. Insert the
main plug of the power adapter into a surge-protected power outlet.
4. Wait for the GWN7000 to boot up and connect to internet/network. In the front of the GWN7000
the Power LED will be in solid green, and the WAN LED will flash in green.
5. Connect one of the LAN ports to your computer, the associated LED ports will flash in green.
6. (Optional) Connect LAN ports to your GWN76xx access points or/and other devices, the
associated LED ports will flash in green.
Safety Compliances
The GWN7000 Enterprise Router complies with FCC/CE and various safety standards. The GWN7000
power adapter is compliant with the UL standard. Use the universal power adapter provided with the
GWN7000 package only. The manufacturer’s warranty does not cover damages to the device caused by
unsupported power adapters.
Warranty
If the GWN7000 Enterprise Router was purchased from a reseller, please contact the company where the
device was purchased for replacement, repair or refund. If the device was purchased directly from
Grandstream, contact our Technical Support Team for a RMA (Return Materials Authorization) number
before the product is returned. Grandstream reserves the right to remedy warranty policy without prior
notification.

P a g e | 16
GWN7000 User Manual
GETTING STARTED
The GWN7000 Enterprise Router provides an intuitive web GUI configuration interface for easy
management to give users access to all the configurations and options for the GWN7000’s setup.
This section provides step-by-step instructions on how to read LED indicators and use Web GUI interface
of the GWN7000.
LED Indicators
The front panel of the GWN7000 has LED indicators for power and interfaces activities, the table below
describes the LED indicators status.
Table 3: LED Indicators
LED
Status
Indication
POWER
OFF
GWN7000 is powered off or abnormal power supply.
Solid green
GWN7000 is powered on correctly.
WAN (1,2)
Flashing green
GWN7000 is connected as a client to another network and
data is transferring.
Solid green
GWN7000 is connected as a client to another network and
there is no activity.
LAN (1,2,3,4,5)
Flashing green
A device is connected to the corresponding LAN port and
data is transferring.
Solid green
A device is connected to the corresponding LAN port and
there is no activity.
Use the WEB GUI
Access WEB GUI
The GWN7000 embedded Web server responds to HTTPS GET/POST requests. Embedded HTML pages
allow users to configure the device through a Web browser such as Microsoft IE, Mozilla Firefox, Google
Chrome.

P a g e | 17
GWN7000 User Manual
Figure 3: GWN7000 Web GUI Login Page
To access the Web GUI:
1. Connect a computer to a LAN Port of the GWN7000.
2. Ensure the device is properly powered up, and the Power, LAN port LEDs light up in green.
3. Open a Web browser on the computer and enter the web GUI URL in the following format:
https://192.168.1.1 (Default IP address).
4. Enter the administrator’s login and password to access the Web Configuration Menu. The default
administrator's username and password are "admin" and "admin".
Note: At first boot or after factory reset, users will be asked to change the default administrator and
user passwords before accessing GWN7000 web interface.
The password field is case sensitive with a maximum length of 32 characters. Using strong password
including letters, digits and special characters is recommended for security purposes.

P a g e | 18
GWN7000 User Manual
Figure 4: Change Password on first boot
At first login, a Setup Wizard tool will pop up to help going through the configuration setup, or exit to
configure manually. Setup Wizard can be accessed anytime by clicking on while on the web interface.
Figure 5: Setup Wizard
WEB GUI Languages
Currently the GWN7000 series web GUI supports English and Simplified Chinese.
To change default language, select the displayed language at the upper right of the web GUI either before
or after logging in.

P a g e | 19
GWN7000 User Manual
Figure 6: GWN7000 Web GUI Language
Figure 7: GWN7000 Web GUI Language
WEB GUI Configuration
GWN7000 web GUI includes 8 main sections to configure and manage the router and check connection
status.
•Overview: Provides an overall view of the GWN7000’s information presented in a Dashboard style for
easy monitoring.
•Router: Displays device’s status and used to configure ports settings such as IP configuration for
WAN ports, load balancing, failover, static routes, port mirroring, QoS and DDNS.
•Access Points: To add, pair and manage discovered access points.
•Clients: Shows and manages the list of the clients connected to LAN ports of the GWN7000 and
wireless clients connected via GWN76xx access points.
•VPN:Configures OpenVPN® Client/Server, PPTP and L2TP/IPSec client tunnels.
•Firewall: Basic and advanced Firewall configuration to securely manage router’s incoming/outgoing
traffic.
•Network Group: To add and manage wireless network groups using paired access points via VLANs.
•System Settings: For Maintenance and debugging features, as well as generating certificates and
file sharing.

P a g e | 20
GWN7000 User Manual
Overview Page
Overview is the first page shown after successful login to the GWN7000’s Web Interface. It provides an
overall view of the GWN7000’s information presented in a Dashboard style for easy monitoring.
Figure 8: Overview Page
It is used to show the status of the GWN7000 for different items, please refer to the following table for each
item:
Table 4: Overview
AP
Shows the number of Access Points that are Discovered, Paired
(Online) and Offline. Click on to go to Access Points’page for
basic and advanced configuration options for the APs
Clients
Shows the total number of connected clients, and a count for clients
connected to each Channel. Click on to go to Clients page for
more options.
AP Channel Distribution
Shows the Channel used for all APs that are paired with this Access
Point.