Grandstream Networks HT801 Instruction Manual

Grandstream Networks, Inc.
HT801/HT802
Administration Guide
HT801 HT802

HT80x – Administration Guide
The HT801/HT802 analog telephone adaptors provide transparent connectivity for analog phones and faxes to the world of
internet voice. Connecting to any analog phone, fax, or PBX, the HT801/HT802 are an effective and flexible solution for
accessing internet-based telephone services and corporate intranet systems across established LAN and internet connections.
The Grandstream handy tones HT801/HT802 are new additions to the popular handy tone ATA product family. This manual
will help you learn how to operate and manage your HT801/HT802 analog telephone adaptor and make the best use of its
many upgraded features including simple and quick installation, 3-way conferencing, and direct IP-IP Calling, and new
provisioning support among other features. The HT801/HT802 is very easy to manage and configure and is specifically
designed to be an easy-to-use and affordable VoIP solution for both the residential user and the teleworker.
PRODUCT OVERVIEW
The HT801 is a one-port analog telephone adapter (ATA) while the HT802 is a 2-port analog telephone adapter (ATA) that
allows users to create a high-quality and manageable IP telephony solution for residential and office environments. Its ultra-
compact size, voice quality, advanced VoIP functionality, security protection, and auto provisioning options enable users to
take advantage of VoIP on analog phones and enable service providers to offer high-quality IP service. The HT801/HT802 are
an ideal ATA for individual use and for large-scale commercial IP voice deployments.
Feature Highlights
The following table contains major features of HT801 and HT802:
HT801
HT802
1 SIP profile through 1 FXS port on HT801, 2 SIP profiles through 2 FXS ports on HT802,
and a single 10/100Mbps port on both models. 3-way voice conferencing. Wide range of caller
ID formats. Advanced telephony features, including call transfer, call forward, call-waiting, do
not disturb, message waiting indication, multi-language prompts, flexible dial plan,
and more.
T.38 Fax for creating Fax-over-IP and GR-909 Line Testing Functionalities.
TLS and SRTP security encryption technology to protect calls and accounts.
Automated provisioning options include TR-069 and XML config files.
Failover SIP server automatically switches to secondary server if main server loses
connection.
Use with Grandstream’s UCM series of IP PBXs for Zero Configuration provisioning.
Table 1: HT801/HT802 Features at a Glance
HT801/HT802 Technical Specifications
The following tables summarize all the technical specifications including the protocols/standards supported, voice codecs,
telephony features, languages, and upgrade/provisioning settings for the HT801 and the HT802.
HT801 HT802
Interfaces

Telephone
Interfaces
One (1) RJ11 FXS port Two (2) RJ11 FXS ports
Network
Interface One (1) 10/100Mbps auto-sensing Ethernet port (RJ45)
LED
Indicators POWER, INTERNET, PHONE POWER, INTERNET, PHONE1, PHONE2
Factory
Reset
Button
Yes
Voice, Fax, Modem
Telephony
Features
Caller ID display or block, call waiting, flash, blind or attended transfer, forward,hold, do not disturb, 3-way
conference.
Voice
Codecs
G.711 with Annex I (PLC) and Annex II (VAD/CNG), G.723.1, G.729A/B, G.726,G.722, iLBC, OPUS, dynamic
jitter buffer, advanced line echo cancellation
Fax over IP T.38 compliant Group 3 Fax Relay up to 14.4kpbs and auto-switch to G.711 forFax Pass-through.
Short/Long
Haul Ring
Load
5REN: Up to 1km on 24 AWG 2 REN: Up to 1km on 24 AWG
Caller ID Bellcore Type 1 & 2, ETSI, BT, NTT, and DTMF-based CID.
Disconnect
Methods Busy Tone, Polarity Reversal/Wink, Loop Current
Signalling
Network
Protocols
TCP/IP/UDP, RTP/RTCP, FTP/FTPS, HTTP/HTTPS, ARP/RARP, ICMP, DNS,DDNS, DHCP, NTP, TFTP, SSH,
Telnet, STUN, SIP (RFC3261), SIP overTCP/TLS, SRTP, TR-069.
QoS Layer 3 (ToS, DiffServ, MPLS)
DTMF
Methods In-audio, RFC2833 and/or SIP INFO
Provisionin
g and
Control
HTTP, HTTPS, FTP, FTPS, SSH, Telnet, TFTP, TR-069, secure and automatedprovisioning using AES
encryption, syslog
Security
Media SRTP
Control TLS/SIPS/HTTPS/SSH/Telnet
Manageme
nt Syslog support, SSH, Telnet remote management using web browser
Physical

Table 2: HT801/HT802 Technical Specifications
GETTING STARTED
This chapter provides basic installation instructions including the list of the packaging contents and information for obtaining
the best performance with the HT801/HT802.
Equipment Packaging
The HT801 ATA package contains:
Figure 1: HT801 Package Contents
The HT802 ATA package contains:
Figure 2: HT802 Package Contents
Note: Check the package before installation. If you find anything missing, contact your system administrator.
Universal
Power
Supply
Input: 100-240VAC, 50-60Hz.
Output: 5.0VDC/1.0A
Environme
ntal
Operational: 32o – 104oF or 0º – 40ºC.
Storage: 14o – 140oF or -10º – 60ºC.
Humidity: 10 – 90% Non-condensing
Dimension
s and
Weight
• 100mm x 100mm x 29.5mm
• 102g(without package)
• 100mm x 100mm x 29.5mm
• 114g (without package).
Compliance
Complianc
e
FCC Part15B EN55032, EN55024,EN61000-3-2,
EN61000-3-3,EN60950-1, AS/NZS
CISPR22,AS/NZS60950.1, S003
FCC 15B, AS/NZS CISPR22,
AS/NZS60950, EN55022, EN55024,EN60950,
EN61000-3-2, EN61000-3-3, UL (Power
supply).

HT801/HT802 Ports Description
The following figure describes the different ports on the back panel of the HT801.
Figure 3: HT801 Back Panel
The following figure describes the different ports on the back panel of the HT802.
Figure 4: HT802 Back Panel
Phone for HT801
Phone 1 & 2 for
HT802
Connects the analog phones/fax machines to the phone adapter using an RJ-11 telephone
cable.
Internet port Connects the phone adapter to your router or gateway using an Ethernet RJ45 network cable.
Micro-USB Power Connects the phone adapter to PSU (5V – 1A).
Reset Factory reset button. Press for 7 seconds to reset factory default settings.
Table 3: Definition of the HT801/HT802 Connectors
Connecting HT801/HT802
The HT801 and HT802 are designed for easy configuration and easy installation, to connect your HT801 or HT802, please
follow the steps above:
1. Insert a standard RJ11 telephone cable into the phone port and connect the other end of the telephone cable to a
standard touch-tone analog telephone.
2. Insert the Ethernet cable into the internet or LAN port of the HT801/ht802 and connect the other end of the Ethernet
cable to an uplink port (a router or a modem, etc.)
3. Insert the power adapter into the HT801/HT802 and connect it to a wall outlet.
Power, Ethernet, and Phone LEDs will be solidly lit when the HT801/HT802 is ready for use.

Figure 5: Connecting the HT801/HT802
HT801/HT802 LEDs Pattern
There are 3 LED buttons on HT801 and 4 LED buttons on HT802 that help you manage the status of your Handy Tone.
Figure 6 : HT801/HT802 LEDs Pattern
LED Lights Status
Power LED The Power LED lights up when the HT801/HT802 is powered on, and it flashes when the HT802 is
booting up
Internet
LED
The Ethernet LED lights up when the HT801/HT802 is connected to your network through the Ethernet
port, and it flashes when there is data being sent or received.
Phone LED for
HT801
Phone LED 1&2
for HT802
The phone LEDs
1 & 2 indicate the status of the respective FXS port-phone on the back panel OFF – Unregistered ON
(Solid Blue) – Registered and Available Blinking every second – Off-Hook / Busy Slow blinking – FXS
LEDs indicate
voicemail
Table 4: HT801/HT802 LEDs Pattern Description
CONFIGURATION GUIDE
The HT801/HT802 can be configured in one of two ways:
The IVR voice prompt menu.
The Web GUI is embedded on the HT801/HT802 using the PC’s web browser.
Obtain HT801/HT802 IP Address via Connected Analogue Phone

HT801/HT802 is by default configured to obtain the IP address from the DHCP server where the unit is located. To know which
IP address is assigned to your HT801/HT802, you should access the “Interactive Voice Response Menu” of your adapter via the
connected phone and check its IP address mode.
Please refer to the steps below to access the interactive voice response menu:
1. Use a telephone connected to the phone ports of your HT801/HT802.
2. Press *** (press the star key three times) to access the IVR menu and wait until you hear “Enter the menu option “.
3. Press 02 and the current IP address will be announced.
Understanding HT801/HT802 Interactive Voice Prompt Response Menu
The HT801/HT802has a built-in voice prompt menu for simple device configuration which lists actions, commands, menu
choices, and descriptions. The IVR menu works with any phone connected to the HT801/HT802. Pick up the handset and dial
“***” to use the IVR menu.
Menu Voice Prompt Options
Main
Men
u
“Enter a Menu Option”
Press “*” for the next menu option
Press “#” to return to the main menu
Enter 01-05, 07,10, 13-17,47 or 99 menu options
01
“DHCP Mode”,
“Static IP Mode”
Press “9” to toggle the selection
If using “Static IP Mode”, configure the IP address information using menus 02 to
05.
If using “Dynamic IP Mode”, all IP address information comes from the DHCP
server automatically after reboot.
02 “IP Address “+ IP address
The current WAN IP address is announced
If using “Static IP Mode”, enter a 12-digit new IP address. You need to reboot the
HT801/HT802 for the new IP address to take Effect.
03 “Subnet “+ IP address Same as menu 02
04 “Gateway “+ IP address Same as menu 02
05 “DNS Server “+ IP address Same as menu 02
07 Preferred Vocoder
Press “9” to move to the next selection in the list:
PCM U / PCM A
iLBC
G-726
G-723
G-729
OPUS
G722
10 “MAC Address” Announces the Mac address of the unit.
13 Firmware Server IP Address Announces current Firmware Server IP address. Enter a 12-digit new IP address.

Menu Voice Prompt Options
14 Configuration Server IP
Address Announces current Config Server Path IP address. Enter a 12-digit new IP address.
15 Upgrade Protocol Upgrade protocol for firmware and configuration update. Press “9” to toggle
between TFTP / HTTP / HTTPS / FTP / FTPS. The default is HTTPS.
16 Firmware Version Announces Firmware version information.
17 Firmware Upgrade
Firmware upgrade mode. Press “9” to toggle among the following three options:
always check
check when pre/suffix changes
never upgrade
47 “Direct IP Calling” Enter the target IP address to make a direct IP call, after dial tone. (See “Make a
Direct IP Call”.)
86 Voice Mail Access to your voice mails messages.
99 “RESET”
Press “9” to reboot the device
Enter the MAC address to restore the factory default setting
(See Restore Factory Default Setting section)
701-
702
Phone calls between different
ports of the same HT802
HT802 supports inter-port calling from the voice menu.
70X (X is the port number)
“Invalid Entry” Automatically returns to the main menu
“Device not registered” This prompt will be played immediately after off-hook If the device is not
registered, and the option “Outgoing Call without Registration” is in NO
Table 5: Voice Prompt Menu
Five success tips when using the voice prompt
“*” shifts down to the next menu option and “#” returns to the main menu.
“9” functions as the ENTER key in many cases to confirm or toggle an option.
All entered digit sequences have known lengths – 2 digits for the menu option and 12 digits for the IP address. For IP
address, add 0 before the digits if the digits are less than 3 (i.e. – 192.168.0.26 should be key in like 192168000026. No
decimal is needed).
Key entry cannot be deleted but the phone may prompt an error once it is detected.
Dial *98 to announce the extension number of the port.
Configuration via Web Browser
The HT801/HT802 embedded Web server responds to HTTP GET/POST requests. Embedded HTML pages allow a user to
configure the HT801/HT802 through a web browser such as Google Chrome, Mozilla Firefox, and Microsoft’s IE.
Accessing the Web UI
1. Connect the computer to the same network as your HT801/HT802.

2. Make sure the HT801/HT802 is booted up.
3. You may check your HT801/HT802 IP address using the IVR on the connected phone.
Please see Obtain HT801/HT802 IP Address via Connected Analogue Phone
1. Open the Web browser on your computer.
2. Enter the HT801/HT802’s IP address in the address bar of the browser.
3. Enter the administrator’s password to access the Web Configuration Menu (the default password is admin).
Notes:
The computer must be connected to the same sub-network as the HT801/HT802. This can be easily done by connecting
the computer to the same hub or switch as the HT801/HT802.
Recommended Web browsers:
Microsoft Internet Explorer: version 10 or higher.
Google Chrome: version 58.0.3 or higher.
Mozilla Firefox: version 53.0.2 or higher.
Safari: version 5.1.4 or higher.
Opera: version 44.0.2 or higher.
Web UI Access Level Management
There are two default passwords for the login page:
User Level Username Password Web Pages Allowed
End User Level user 123 Only Status and Basic Settings
Administrator Level admin admin All pages
Viewer Level viewer viewer View all pages. Changes are not allowed.
Table 6: Web access level management
The password is case-sensitive with a maximum length of 25 characters. When changing any settings, always submit them by
pressing the Update or Apply button at the bottom of the page. After submitting the changes in all the Web GUI pages,
reboot HT801/HT802 to have the changes take effect if necessary; most of the options under the Advanced Settings and FXS
Port (x) pages require a reboot.
Saving the Configuration Changes
After users make changes to the configuration, pressing the Update button will save but not apply the changes until Apply
button is clicked. Users can instead directly press Apply button. We recommend rebooting or powering cycle the phone after
applying all the changes.
Changing Admin Level Password
1. Access your HT801/HT802 web UI by entering its IP address in your favorite browser (screenshots below are from HT801
but the same applies to HT802).
2. Enter your admin password (default: admin).
3. PressLoginto access your settings and navigate toAdvanced Settings🡪Admin Password.
4. Enter the new admin password. (The new Password must contain 8-20 characters, at least one number, one uppercase,
and a lowercase letter. Purposely not displayed for security reasons.)
5. Confirm the new admin password.

6. PressApplyat the bottom of the page to save your new settings.
Figure 7: Admin Level Password
Changing User Level Password
1. Access your HT801/HT802 web UI by entering its IP address in your favorite browser.
2. Enter your admin password (default: admin).
3. PressLoginto access your settings and navigate toBasic Settings🡪End User Password.
4. Enter the new end-user password. (The new Password must contain 8-20 characters, at least one number, one uppercase,
and a lowercase letter. Purposely not displayed for security reasons.)
5. Confirm the new end-user password.
6. PressApplyat the bottom of the page to save your new settings.
Figure 8: User Level Password
Changing Viewer Password
1. Access your HT801/HT802 web UI by entering its IP address in your favorite browser.
2. Enter your admin password (default: admin).
3. PressLoginto access your settings.
4. Go toBasic Settings 🡪 NewViewer Passwordandenter the newviewer password.(The new Password must contain 8-
20 characters, at least one number, one uppercase, and a lowercase letter. Purposely not displayed for security reasons)
5. Confirm the new viewer password.
6. PressApplyat the bottom of the page to save your new settings.
Figure 9: Viewer Level Password
Changing HTTP Web Port

1. Access your HT801/HT802 web UI by entering its IP address in your favorite browser.
2. Enter your admin password (default: admin).
3. Press Login to access your settings and navigate to Basic Settings🡪Web Port.
4. Change the current port to your desired/new HTTP port. Ports accepted are in the range [1-65535].
5. Press Apply at the bottom of the page to save your new settings.
Figure 10: Web HTTP Port
Web Configuration Pages Definitions
This section describes the options in the HT801/HT802 Web UI. As mentioned, you can log in as an administrator or an end
user.
Status: Displays the system info, network status, account status, and line options.
Basic Settings: Configures the end user level password, IP address modes, web access, time zone settings, and language.
Advanced Settings: Configures networks, upgrading and provisioning, TR-069, security settings, date and time, Syslog,
audio settings, call settings and call progress tones.
FXS Port (1,2): Configures SIP settings, SIP registration, accounts settings, NAT settings, call features, and ring tones.
Status Page Definitions
Account
Status
MAC
Address
Shows device ID in hexadecimal format. This is needed by network administrators for troubleshooting. The MAC
address will be used for provisioning and can be found on the label on the original box and on the label located
on the bottom panel of the device.
IPv4
Address Displays assigned IPv4 address.
IPv6
Address Displays assigned IPv6 address.

VPN
IPv4
Address
Displays assigned OpenVPN IPv4 address.
VPN
IPv6
Address
Displays assigned OpenVPN IPv6 address.
Product
Model Displays product model info. Default is HT801/HT802.
Hardwa
re
Version
Displays the hardware revision information and the part number.
Softwar
e
version
Program: Specifies Program version. This is the main firmware release number, which is always used for
identifying the software system of the HT801/HT802.
Bootloader: Specifies Boot version.
Core: Specifies Core version.
Base: Specifies Base version.
CPE: Specifies CPE version. CPE version is displayed only when HT801/HT802 is connected to an ACS using
TR-069 protocol.
Softwar
e Status Indicates actual software status.
System
Up
Time
Indicates actual system time and uptime since the last reboot.
CPU
Load Indicates CPU load (%)
Networ
k Cable
Status
Indicates physical network cable status:
Status (Up/Down), Speed (Mbps), Operational Mode (Full/Half Duplex)
PPPoE
Link Up Indicates PPPoE connection status.
NAT Indicates the type of NAT when it is configured.
Port
Status
Displays relevant information regarding the FXS ports, their registration, current status, and their appropriate
User ID.
Port
Options Displays DND and call forward information on FXS ports.
CDR
File
Download, Preview. Or Delete call history records from the web GUI. Only the last 1000 records will be
available.
SIP File
Download, Preview or, Delete locally stored SIP trace.
Note: “Send SIP Log” must be enabled to be able to capture the trace.

Provisio
nDisplays provisioning status.
Core
Dump
Provides generated core dump file if unit malfunctions.
Clean will be displayed if no issues.
GR909
Click on “Test Page” to be redirected to the
lines tests page (Hazardous Potential, Foreign Electromotive Forces, Resistive Faults, Receiver Off-hook
and Ringer Equivalent Number)
Table 8: Status Page Definitions
Basic Settings Page Definitions
Basic Settings
New End User Password
Configures user level password. Case sensitive and max. Length of 25 characters.
Note :The new Password must contain 8-20 characters, at least one number, one
uppercase, and a lowercase letter. Purposely not displayed for security reasons.
Confirm End User Password Re-enter the end user password to confirm change user password on web GUI to
avoid typo or mistakes.
New Viewer Password
Configures viewer-level password. Case sensitive and max. length of 25 characters.
Note : The new Password must contain 8-20 characters, at least one number, one
uppercase, and a lowercase letter. Purposely not displayed for security reasons.
Confirm Viewer Password Re-enter the viewer password to confirm change viewer password on web GUI to
avoid typo or mistakes.
Web Session Timeout Configure timer to logout web session during idle. Default is 10 min.Range is 2-60
min.
Web Access Attempt Limit Configure attempt limit before lockout. Default is 5. Range is 1-10.
Lockout time interval If login attempt failed 5 times, login would be locked out for the time length. (Default
15 mins. Range 1-15 min).
Web Access Mode
Allows users to choose the Web Access Mode between “HTTPS”, “HTTP” and
“Disabled”. If “Disabled” is selected, web UI access will be disabled.
By default, “HTTP” is selected.
HTTP Web Port Customizes HTTP port used to access the HT801/HT802 web UI. Default is80.
HTTPS Web Port Customizes HTTPS port used to access the HT801/HT802 web UI. Default is443.
Disable SSH Enables/disables the SSH access. Default isNo(enabled).
SSH Port Allows users to self-configure SSH Port number.
By default, the port number is22.
SSH Idle Timeout Configures SSH session timeout. [0 – 86400] seconds; Default is0.

DisableTelnet Enables/disables the Telnet access. Default isYes(disabled).
Telnet Port Allows users to self-configure Telnet Port number.By default, the port number is23.
Telnet Idle Timeout Configure Telnet session timeout. [0 – 86400] seconds; Default is0.
Whitelist for WAN Side
Users can configure the whitelist for WAN Side to be used for remote management.
Multiple IPs are supported and need to be separated by “space”.
Example:192.168.5.222 192.168.5.223 192.168.7.0/24
Note:If both blacklist and whitelist are not empty, the blacklist is processed first,
followed by the whitelist.
Blacklist for WAN Side
Users can configure the blacklist for WAN Side to ban WAN side web access.
Multiple IPs are supported and need to be separated by “space”.
Example:192.168.5.222 192.168.5.223 192.168.7.0/24
Note:If both blacklist and whitelist are not empty, the blacklist is processed first,
followed by the whitelist.
Internet Protocol
Selects one of the following IP protocol modes:
●IPv4 Only:Enforce IPv4 protocol only.
●IPv6 Only:Enforce IPv6 protocol only.
●Both, Prefer IPv4:Enable both IPv4 and IPv6 and prefer IPv4.
●Both, prefer IPv6:Enable both IPv4 and IPv6 and prefer IPv6.
Note: Make sure to reboot the phone for the changes to take effect.
IPv4 Address
Allows users to configure the appropriate network settings on the HT80x to obtain
IPv4 address. Users could select “DHCP”, “Static IP” or “PPPoE”. By default, it is set
to “DHCP”.
Dynamically assigned via DHCP
All the field values for the static IP mode are not used (even though they are still
saved in the flash memory.) The HT801/802 acquires its IP address from the first
DHCP server it discovers from the LAN it is connected.
●DHCP hostname:Specifies the name of the client. The name may or may not be
qualified with the local domain name. This field is optional but may be required
by ISP.
●DHCP domain name:Specifies the domain name that client should use when
resolving hostname via the Domain Name System.
●DHCP vendor class ID:Exchanges vendor class ID by clients and servers to
convey particular configuration or other identification information about a client.
Default isHT8XX.
Use PPPoE
Set the PPPoE account settings. If selected, ATA attempt to establish a PPPoE
session if any of the PPPoE fields is set.
●PPPoE account ID:Defines the PPPoE username. Necessary if ISP requires you
to use a PPPoE (Point to Point Protocol over Ethernet) connection.
●PPPoE password:Specifies the PPPoE account password.
●PPPoE Service Name:Defines PPPoE service name. If your ISP uses a service
name for the PPPoE connection, enter the service name here. This field is
optional. Default is blank.
Preferred DNS server Specifies preferred DNS server to use when DHCP or PPPoE are set.
Statically configured as IP address Configure IP address, subnet Mask, default router IP address, 1stpreferred DNS
server, 2ndpreferred DNS server. These fields are set to zero by default.
IPv6 Address Allows users to configure the appropriate network settings on the HT80x to obtain
IPv6 address. Users could select “DHCP”, “Static IP”. By default, it is set to “DHCP”.

●DHCP mode:all the field values for the static IP mode are not used (even though
they are still saved in the flash memory.) The HT801/HT802 acquires its IP
address from the first DHCP server it discovers from the LAN it is connected.
●Static IP mode:configure IP address, 1stand 2ndDNS server, preferred DNS
server. These fields are set to zero by default.
●Full Static: When enabling the option full static, users need to specify the Static
IPv6 and the IPv6 Prefix length.
●Prefix Static: When enabling the option prefix static, users need to specify the
IPv6 Prefix (64 bits).
Enable Management Interface Allows administrator to setup a Virtual Network Interface on top of the physical
interface for device management. Default isNo.
Management Access Chooses whether to access using “Management Interface Only” (Default)Or “Both
Service and Management Interfaces”
Enable SNMP Through Management
Interface
This feature allows users to route SNMP packets through the management
interface. The default setting is "No".
Enable TR-069 Through Management
Interface
This feature allows users to route TR069 packets through the management
interface. The default setting is "No".
Enable Syslog Through Management
Interface
This feature allows users to route Syslog packets through the management
interface. The default setting is "No".
Management Interface IPv4 Address
Configures Voice VLAN Type:
●Default isdynamically assigned via DHCP
Or,
●statically configuredas:
○IP Address : Default is192.168.100.100
○Subnet Mask : Default is255.255.255.0
○Default Router : Default is192.168.100.1
○DNS Server 1 : Default is0.0.0.0
○DNS Server 2 : Default is0.0.0.0
●802.1Q/VLAN Tag
vlan tagging : [0 – 4094]; Default is0
●802.1p priority value:
priority : [0 – 7]; Default is0
Time Zone Selects time zone to define date/time on the device.
Self-Defined Time Zone Allows users to define their own time zone.
Allow DHCP server to set Time Zone
Obtains time zone setting (offset) from a DHCP server using DHCP Option 2; it will
override selected time zone. If set to “No”, the analogue adapter will use selected
time zone even if provided by DHCP server.
The Default setting isYes.
Language
Configures the languages of the voice prompt and web interface, except Spanish
that it is only in IVR. Available languages: English, Chinese, Traditional Chinese,
Russian, Spanish IVR.
Reset Type Gives the administrator the option to restore default configuration on the
HT801/HT802.
There are 3 types of factory reset:

Table 9: Basic Settings Page
Advanced Settings Page Definitions
●ISP Data Reset:All VoIP related configuration (mainly everything located on FXS
page).
●VOIP Data Reset:All ISP (Internet Service Provider) configuration which may
affect the IP address.
●Full Reset:Both VoIP and ISP related configuration at the same time.
Note: After you choose the reset type, you must click the reset button to take effect.
New Admin Password
Defines the administrator level password to access the Advanced Web Configuration
page. This field is case sensitive. Only the administrator can configure the
“Advanced Settings” page. Password field is purposely left blank for security
reasons after clicking update and saved.
Note :The new Password must contain 8-20 characters, at least one number, one
uppercase, and a lowercase letter. Purposely not displayed for security reasons
Confirm Admin Password Confirms the new admin password.
Disable User Level Web Access Disable or enable User Level Web Access. Default is No.
Disable Viewer Level Web Access Disable or enable Viewer Level Web Access Default is No.
Layer 2 QoS
Sets values for 802.1Q/VLAN Tag. Default is 0. Valid range is 0-4094.
SIP 802.1p. Default is 0. Valid range is 0-7.
RTP 802.1p. Default is 0. Valid range is 0-7.
Blacklist for WAN Side Port It could be either port range or single port separated by a “,”
Example: “5000-6000, 7000 “.
STUN Server is Configures IP address or domain name of STUN server. Only non-symmetric NAT
routers work with STUN.
Keep-alive interval Sends periodically a blank UDP packet to SIP server to keep the “ping hole” on the
NAT router open. Default is 20 seconds.
Use STUN to detect network
connectivity
Uses STUN keep-alive to detect WAN side network problems. If keep-alive request
does not yield any response for configured number of times (minimum 3), the device
will restart the TCP/IP stack.
If the STUN server does not respond when the device boots up, the feature is
disabled.
Default setting is No.
Use DNS to detect network
connectivity
Uses DNS to detect WAN side network problems.
Default setting is “No”.
Use ARP to detect network
connectivity
Uses ARP to check the network connectivity.
Default is “Yes”.
Verify host when using HTTPS Enables / disables the host verification when using HTTPS.
Upgrade via Selects firmware upgrade/provisioning method: TFTP, HTTP, HTTPS, FTP or FTPS.
Default is HTTPS.
Provision and upgrade to new Gen-2 Configures whether or not to upgrade to a new Gen-2 certificate,

certificate It is set to no upgrade by Default.
Firmware Server Path Sets IP address or FQDN of firmware server. The URL of the server that hosts the
firmware release. Default is fm.grandstream.com/gs.
Config Server Path
Sets IP address or FQDN of configuration server. The URL of the server that hosts
the configuration file to provision HT8xx.
Default is fm.grandstream.com/gs.
XML Config File Password Decrypts XML configuration file when encrypted. The password used for encrypting
the XML configuration file using OpenSSL.
HTTP/HTTPS FTP/FTPS Username Enters username to authenticate with HTTP/HTTPS FTP/FTPS server.
HTTP/HTTPS FTP/FTPS Password Enters password to authenticate with HTTP/HTTPS FTP/FTPS server.
Firmware File Prefix
Checks if firmware file is with matching prefix before downloading it. This field
enables user to store different versions of firmware files in one directory on the
firmware server.
Firmware File Postfix
Checks if firmware file is with matching postfix before downloading it.
This field enables user to store different versions of firmware files in one directory
on the firmware server.
Config File Prefix
Checks if configuration files are with matching prefix before downloading them. This
field enables user to store different configuration files in one directory on the
provisioning server.
Config File Postfix
Checks if configuration files are with matching postfix before downloading them.
This field enables user to store different configuration files in one directory on the
provisioning server.
Enable using tags in URL  Allows users to configure variables on the configuration server path to differentiate
the directories on the server.
Always send HTTP Basic
Authentication Information
Default isNo. If set to Yes, The device will send configured user name and password
within HTTP request before server sends authentication challenge.
Allow DHCP Option 66 or 160 to
Override Server
Obtains configuration and upgrade server’s information using options 66 from DHCP
server.
Note: If DHCP Option 66 is enabled, the HT8xx will attempt downloading the
firmware file from the server URL provided by DHCP, even though Config Server Path
is left blank.
The server URL provided by DHCP can include authentication credentials using
following format: “username:password@Provisioning_Server_IP”.
Additional Override DHCP Option Allows users to enable the Additional Override DHCP Option in Option 150. The
default value is "None".
3CX Auto Provision Sends multicast “SUBSCRIBE” message for provisioning at booting stage, used for
PnP (Plug-and-Play) configuration. Default is Yes.
Automatic Upgrade Specifies when the firmware upgrade process will be initiated; there are 4 options:
No: The HT8xx will only do an upgrade once at boot up.
Check every X minutes: User needs to specify a period in minutes.
Check every day: User needs to specify the start hour and the end hour of the day
(0-23).
Check every week: User needs to specify “Day of the week (0-6)”. (Day of week is
starting from Sunday).

Default is No.
Randomized Automatic Upgrade Randomized Automatic Upgrade within the range of hours of the day or postpone
the upgrade every X minute(s) by random 1 to X minute(s).
Always Check for New Firmware at
Boot up
Configures the HT8xx to always search for the new firmware at boot up. During the
boot stage, the HT8xx will contact the firmware upgrade server to search for a new
firmware, when available it will start the upgrade process, otherwise it will boot
normally.
Check New Firmware only when F/W
pre/suffix changes
Configure the HT8xx to search for the new firmware when the firmware prefix /
suffix changes.
When this option is selected, the HT8xx will check for updates only when the
pre/suffix has been changed.
Always Skip the Firmware Check Configures the HT8xxto skip the firmware check, when this option is selected the
HT8xx will always skip searching for a new firmware.
Configuration File Types Allowed Allows users to configure provision configuration file type in xml file only or all file
types.
Disable SIP NOTIFY Authentication
Disables the SIP NOTIFY Authentication on the phone adapter. If set to “Yes”, the
phone adapter will not challenge NOTIFY with 401.
The default setting is “No”
Authenticate Conf File Authenticates configuration before being accepted. This protects the configuration
from unauthorized modifications. Default is No.
Validate Server Certificates
This feature allows users to validate server certificates with our trusted list of TLS
connections. The device needs to reboot after changing the setting.
Default is enabled.
Trusted CA certificates A Uses the certificate for Authentication if “Check Domain Certificates” is set to “Yes”
under “Account”–> “SIP Settings”.
Trusted CA certificates B Uses the certificate for Authentication if “Check Domain Certificates” is set to “Yes”
under “Account”–> “SIP Settings”.
Load CA Certificates
This feature allows user to specify which certificate to trust when performing server
authentication.
Build-in trusted : (Default) Build-in trusted certificates
Custom trusted certificate: Uploaded Certificates
All trusted Certificates: Both built-in and uploaded Certificates
Root CA Version Configures the Root CA version. can be set to either Current root or new root.
Default Value is New Root.
SIP TLS Certificate
Specifies SSL certificate used for SIP over TLS is in X.509 format. The HT8xx has
built-in private key and SSL certificate.
Maximum supported length is 4069.
SIP TLS Private Key Specifies TLS private key used for SIP over TLS is in X.509 format.
Maximum supported length is 4069.
SIP TLS Private Key Password Specifies SSL Private key password used for SIP Transport in TLS/TCP.
Custom Certificate
(Private Key + Certificate)
Allows users to update to the device their own certificate signed by a custom CA
certificate to manage client authentication.

Gen-2 EC private key Configures the Gen-2 Elliptic Curve Private Key. based onRFC 5915.
The Max value length is 8192 characters.
Enable TR-069 Sets the phone adapter system to enable the “CPE WAN Management Protocol” (TR-
069). Default setting is Yes.
TR-069 firewall rules Configures the TR-069 firewall rules , Value port range is 1-65535
ACS URL
Specifies URL of TR-069 Auto Configuration Servers (e.g.,
http://acs.mycompany.com), or IP address.
Default setting is: “https://acs.gdms.cloud”
ACS Username Enters username to authenticate to ACS.
ACS Password Enters password to authenticate to ACS.
Periodic Inform Enable Sends periodic inform packets to ACS. Default is Yes.
Periodic Inform Interval Sets frequency that the inform packets will be sent out to ACS.
Default is 86400 seconds.
Connection Request Username Enters username for ACS to connect to the HT8xx.
Connection Request Password Enters password for ACS to connect to the HT8xx.
Connection Request Port Configures the TR-069 connection request port. The value range is 0 to
65535.Default is 7547
CPE SSL Certificate Configures the Cert File for the phone adapter to connect to the ACS via SSL.
CPE SSL Private Key Specifies the Cert Key for the phone adapter to connect to the ACS via SSL.
Enable SNMP Default is No.
SNMP Version Choose between (Version 1, Version 2c, or Version 3).
SNMP Port Listening Port of SNMP daemon (Default 161).
SNMP Trap IP Address IP address of trap destination. Up to 3 trap destinations are supported. Users should
enter the IP addresses separated with comma (,).
SNMP Trap port Port of Trap destination (Default 162)
SNMP Trap Version Choose between (Version 1, Version 2c, or Version 3).
SNMP Trap Interval Time interval between traps (Default is 5).
SNMPv1/v2c Community Name of SNMPv1/v2c community.
SNMPv1/v2c Trap Community Name of SNMPv1/v2c trap community.
SNMPv3 Username Username for SNMPv3.
SNMPv3 Security Level noAuthUser: Users with security level noAuthnoPriv and context name as noAuth.
authUser: Users with security level authNoPriv and context name as auth.

privUser: Users with security level authPriv and context name as priv.
SNMPv3 Authentication Protocol Select the Authentication Protocol: “None” or “MD5” or “SHA.”
SNMPv3 Privacy Protocol Select the Privacy Protocol: “None” or “AES/AES128” or “DES”.
SNMPv3 Authentication Key Enter the Authentication Key.
SNMPv3 Privacy Key Enter the Privacy Key.
SNMPv3 Trap Username Username for SNMPv3 Trap.
SNMPv3 Trap Security Level
noAuthUser: Users with security level noAuthnoPriv and context name as noAuth.
authUser: Users with security level authNoPriv and context name as auth.
privUser: Users with security level authPriv and context name as priv.
SNMPv3 Trap Authentication
Protocol Select the Authentication Protocol: “None” or “MD5” or “SHA”.
SNMPv3 Trap Privacy Protocol Select the Privacy Protocol: “None” or “AES/AES128” or “DES”.
SNMPv3 Trap Authentication Key Enter the Trap Authentication Key.
SNMPv3 Trap Privacy Key Enter the Trap Privacy Key.
Enable RADIUS Web Access Control Default is No.
Action upon RADIUS Auth Server
Error
Choose action upon RADIUS server error. Default is Authenticate Locally (Default
Authenticate Locally)
RADIUS Auth Server Address Address of RADIUS Auth server.
RADIUS Auth Server Port Port of RADIUS Auth server.
RADIUS Shared Secret Set RADIUS shared secret.
RADIUS VSA Vendor ID Configure RADIUS VSA Vendor ID to match RADIUS server’s configuration. Default is
42397 for Grandstream Networks Inc.
RADIUS VSA Access Level Attribute Configure RADIUS VSA Access Level Attribute to match RADIUS server’s
configuration. Incorrect setting would cause Radius authenticate fail.
Enable DDNS Allow users to use DDNS.
DDNS Server Selects DDNS Server: dyndns, freedns.afraid.org, zoneedit.com, no-ip.com, oray.net.
Default is dyndns.
DDNS Username 64 characters as Max String Length.
DDNS Password 64 characters as Max String Length.
DDNS Hostname 64 characters as Max String Length.
DDNS Hash 64 characters as Max String Length.