Grandstream Networks HT812 Instruction Manual

Grandstream Networks, Inc.
HT812/HT814 Series
Administration Guide

HT812/HT814 – Administration Guide
The HT812/HT814 analog telephone adaptors (ATAs) provide transparent connectivity for analog phones and faxes to the
world of internet voice. Connecting to any analog phone, fax or PBX, the HT812/HT814 is an effective and flexible solution for
accessing internet-based telephone services and corporate intranet systems across established LAN and internet connections.
This Grandstream Handy Tones are a new addition to the popular Handy Tone ATA product family. This manual will help you
to learn how to operate and manage your HT812/HT814 analog telephone adaptors and make the best use of their many
upgraded features including simple and quick installation, 3-way conferencing, direct IP-IP Calling, and new provisioning
support among other features. The HT812/HT814 are very easy to manage and configure, and they are specifically designed
to be an easy to use and affordable VoIP solution for both the residential user and the teleworker.
PRODUCT OVERVIEW
The HT812/HT814 are 2/4 ports analog telephone adaptors (ATAs) that allow users to create a high-quality and manageable IP
telephony solution for residential and office environments. Their ultra-compact size, voice quality, advanced VoIP functionality,
security protection and auto provisioning options enable users to take advantage of VoIP on analog phones and enables
service providers to offer high quality IP service. The HT812/HT814 are an ideal ATA s for individual use and for large scale
commercial IP voice deployments since they permit small and medium businesses to create integrated IP and PSTN telephony
systems that efficiently manage communication costs. HT812/HT814’s inclusion of an integrated NAT router and dual
10/100/1000Mbps Ethernet WAN and LAN ports enables a shared broadband connection between multiple Ethernet devices
as well as the extension of VoIP services to analog phones.
Feature Highlights
The following table contains the major features of the HT812/HT814:
HT812 / HT814
Support 2 SIP profiles through 2 FXS ports for HT812 and 4 FXS
port for HT814 and dual 10/100/1000Mbps Ethernet port for
HT812
Support 3-way voice conferencing.
Support wide range of caller ID formats.
Support advanced telephony features, including call transfer, call
forward, call-waiting, do not disturb, message waiting indication,
multi-language prompts, flexible dial plan and more.
Support T.38 Fax for creating Fax-over-IP.
TLS and SRTP security encryption technology to protect calls and
accounts.
Automated provisioning options include TR-069 and XML config
files.
Failover SIP server automatically switches to secondary server if
main server loses connection.
Use with Grandstream’s UCM series of IP PBXs for Zero
Configuration provisioning.
GR-909 Line Testing Functionalities.
Table 1: HT812/HT814 Features at a Glance
HT812/HT814 Technical Specifications
The following table resumes all the technical specifications including the protocols/standards supported, voice codecs,
telephony features, languages and upgrade/provisioning settings for the HT812/HT814.
Interfaces
Telephone
Interfaces
Two (2) RJ11 FXS ports for HT812.
Four (4) RJ11 FXS sports for HT814.
Network
Interface Two (2) 10/100/1000 Mbps Ethernet port (RJ45).
LED Indicators
POWER, LAN, WAN, PHONE1, PHONE2 for HT812.
POWER, LAN, WAN, PHONE1, PHONE2, PHONE3, PHONE4 for HT814.
Factory Reset
Button Yes.
Voice, Fax,
Modem
Telephony
Features
Caller ID display or block, call waiting, flash, blind or attended transfer, forward, hold, do not disturb,
3-way conference.
Voice Codecs G.711 with Annex I (PLC) and Annex II (VAD/CNG), G.723.1, G.729A/B, G.722, G.726, iLBC, OPUS,
dynamic jitter buffer, advanced line echo cancellation.
Fax over IP T.38 compliant Group 3 Fax Relay up to 14.4kpbs and auto-switch to G.711 for Fax Pass-through.

Short/Long Haul
Ring Load
For HT812: 3 REN, up to 1km on 24AWG line.
For HT814: 2 REN, up to 1km on 24AWG line.
Caller ID Bellcore Type 1 & 2, ETSI, BT, NTT, and DTMF-based CID.
Disconnect
Methods Busy Tone, Polarity Reversal/Wink, Loop Current.
Signaling
Network
Protocols
TCP/IP/UDP, RTP/RTCP, HTTP/HTTPS, FTP/FTPS, ARP/RARP, ICMP, DNS, DDNS, DHCP, NTP, TFTP, SSH,
Telnet, STUN, SIP (RFC3261), SIP over TCP/TLS, SRTP, TR-069.
QoS Layer 2 (802.1Q VLAN, SIP/RTP 802.1p) and Layer 3 (ToS, Diffserv, MPLS).
DTMF Methods In-audio, RFC2833 and/or SIP INFO.
Provisioning and
Control
HTTP, HTTPS, SSH, FTP, FTPS, Telnet, TFTP, TR-069, secure and automated provisioning using TR069,
syslog.
Security
Media SRTP.
Control TLS/SIPS/HTTPS/HTTP/SSH/Telnet.
Management Syslog support, SSH, Telnet remote management using web browser.
Physical
Universal Power
Supply
Input: 100-240VAC, 50-60Hz
Output: 12V/0.5A for HT812.
Output: 12V/1A for HT814.
Environmental
Operational: 32 – 104 F or 0º – 40ºC.
Storage: 14 – 140 F or -10º – 60ºC.
Humidity: 10 – 90% Non-condensing.
Dimensions and
Weight
Dimension : 28.5 x 130 x 90 mm (H x W x D).
Weight: 353.33g for HT812 and for 423.5g for HT814.
Compliance
Compliance FCC/CE/RCM.
Table 2: HT812/HT814 Technical Specifications
GETTING STARTED
This chapter provides basic installation instructions including the list of the packaging contents and also information for
obtaining the best performance with the HT812/HT814.
Equipment Packaging
The HT812/HT814 ATAs packages contain:
Figure 1: HT812 Package Contents
o o
o o

Figure 2: HT814 Package Contents
HT812/HT814 Ports Description
The following figure describes the different ports on the back panel of the HT812/HT814.
Figure 3: HT812 Back Panel Figure 4: HT814 Back Panel
Phone 1 & 2 (HT812)
Phone 1,2,3 & 4 (HT814)
Connects the analog phones / fax machines to the ATA using an RJ-11 telephone cable.
WAN
Connects the ATA to your router, switch or modem using an Ethernet RJ45 network cable.
co
LAN Connects the ATA to your PC or switch using an Ethernet RJ45 network cable.
DC Power
Connects the ATA to PSU
(12V – 0.5A for HT812) and (12V – 1A for HT814).
Reset Factory reset button. Press for 7 seconds to reset factory default settings.
Table 3: HT812/HT814 Connectors Definitions
Connecting HT812/HT814
The HT812/HT814 are designed for easy configuration and easy installation, to connect your HT812/HT814, please follow the
steps below:
Scenario 1: Connecting the HT812/HT814 using WAN Port
When connecting HT812/HT814 using the WAN port, they will act as simple DHCP Client.
1. Insert a standard RJ11 telephone cable into the phone ports and connect the other end of the telephone cable to a
standard touch-tone analog telephone.
2. Connect the WAN port of the HT812/HT814 to a router, switch or modem using an Ethernet cable.
3. Insert the power adapter into the HT812/HT814 and connect it to a wall outlet and make sure to respect the technical
specifications of the power adapter used.
4. Power, WAN and Phone LEDs will be solidly lit when the HT812/HT814 is ready for use.
Scenario 2: Connecting the HT812/HT814 using LAN Port
When connecting the HT812/HT814 using the LAN port, they will act as a router and DHCP serving addresses, the devices
connected with HT812/HT814 LAN will pull DHCP addresses from your HT812/HT814.
1. Insert a standard RJ11 telephone cable into the phone ports and connect the other end of the telephone cable to a
standard touch-tone analog telephone.
2. Connect a computer or switch to the LAN port of the HT812/HT814 using an Ethernet Cable.
3. Insert the power adapter into the HT812/HT814 and connect it to a wall outlet and make sure to respect the technical
specifications of the power adapter used.
4. Power, LAN and Phone LEDs will be solidly lit when the HT812/HT814 is ready for use.
Check the package before installation. If you find anything missing, contact your system administrator.
Please make sure to enable NAT Router under Web GUI 🡪 Basic Settings 🡪Device Mode.

Figure 5: Connecting the HT812/HT814
HT812/HT814 LEDs Pattern
There are four (4) LED types that help you manage the status of your HT812/HT814.
Figure 6: HT812/HT814 LEDs Pattern
LED Lights Status
Power LED The Power LED lights up when the HT812/HT814 are powered on and it flashes when the
HT812/HT814 is booting up.
WAN LED The WAN LED lights up when the HT812/HT814 are connected to your network through the
WAN port.
LAN LED The LAN LED lights up when the HT812/HT814 are connected to your network through the
LAN port.
Phone LED 1&2 (HT812)
Phone LED 1,2,3 & 4
(HT814)
The phone LEDs indicate status of the respective FXS port-phone on the back panel
OFF – Unregistered
ON (Solid Blue) – Registered and Available
Blinking every 500 ms – Off-Hook / Busy
Slow blinking – FXS LEDs indicates voicemail
Table 4: HT812/HT814 LEDs Pattern Description
CONFIGURATION GUIDE
The HT812/HT814 can be configured via one of two ways:
The IVR voice prompt menu.
The Web GUI embedded on the HT812/HT814 using PC’s web browser.
Obtain HT812/HT814 IP Address via Connected Analogue Phone
HT812/HT814 are by default configured to obtain the IP address from DHCP server where the unit is located. To know which
IP address is assigned to your HT812/HT814, you should access to the “Interactive Voice Response Menu” of your adapter via
the connected phone and check its IP address mode.
Please refer to the steps below to access the interactive voice response menu:
1. Use a telephone connected to phone ports (FXS) of your HT812/HT814.
2. Press *** (press the star key three times) to access the IVR menu and wait until you hear “Enter the menu option “.
3. Press 02 and the current IP address will be announced.
Understanding HT812/HT814 Interactive Voice Prompt Response Menu
The HT812/HT814 have a built-in voice prompt menu for simple device configuration which lists actions, commands, menu
choices, and descriptions. The IVR menu works with any phone connected to the HT812/HT814.
Pick up the handset and dial “***” to use the IVR menu.

Menu Voice Prompt Options
Main
Menu “Enter a Menu Option”
Press “*” for the next menu option
Press “#” to return to the main menu
Enter 01-05, 07,10, 12-17,47 or 99 menu options
01
“DHCP Mode”,
“Static IP Mode”
“PPPoE Mode“
Press “9” to toggle the selection
If using “Static IP Mode”, configure the IP address information using menus 02
to 05.
If using “Dynamic IP Mode”, all IP address information comes from the DHCP
server automatically after reboot.
If using “PPPoE Mode”, configure PPPoE Username and Password from web GUI
to get IP from your ISP.
02 “IP Address“ + IP address
The current WAN IP address is announced
If using “Static IP Mode”, enter 12-digit new IP address. You need to reboot
your HT812/HT814 for the new IP address to take Effect.
03 “Subnet“ + IP address Same as menu 02
04 “Gateway“ + IP address Same as menu 02
05 “DNS Server“ + IP address Same as menu 02
07 Preferred Vocoder
Press “9” to move to the next selection in the list:
PCM U / PCM A
iLBC
G-726
G-723
G-729
OPUS
G722
10 “MAC Address”
Announces the MAC address of the unit.
Note: The device has two MAC addresses. One for the WAN port and one for
the LAN port. The device MAC address announced is the address of LAN port.
12 WAN Port Web Access
Press “9” to toggle between enable / disable.
Default is disabled.
13 Firmware Server IP Address Announces current Firmware Server IP address. Enter 12-digit new IP address.
14 Configuration Server IP
Address Announces current Config Server Path IP address. Enter 12-digit new IP address.
15 Upgrade Protocol Upgrade protocol for firmware and configuration update. Press “9” to toggle
between TFTP / HTTP / FTP / FTPS or HTTPS. Default is HTTPS.
16 Firmware Version Announces Firmware version information.
17 Firmware Upgrade
Firmware upgrade mode. Press “9” to toggle among the following three
options:
Always check
Check when pre/suffix changes
Never upgrade
20 “Check Device Individual
Certificate Information”
The users can now use the IVR system to obtain specific details about the
device’s certificate.
47 “Direct IP Calling” Enter the target IP address to make a direct IP call, after dial tone. (See “Make a
Direct IP Call”.)
86 Voice Mail Access to your voice mails messages.
99 “RESET”
Press “9” to reboot the device
Enter MAC address to restore factory default setting
(See Restore Factory Default Setting section)
“Invalid Entry” Automatically returns to main menu
“Device not registered” This prompt will be played immediately after off hook If the device is not
registered and the option “Outgoing Call without Registration” is in NO
Table 5: Voice Prompt Menu

Five success tips when using the voice prompt
“*” shifts down to the next menu option and “#” returns to the main menu
“9” functions as the ENTER key in many cases to confirm or toggle an option.
All entered digit sequences have known lengths – 2 digits for menu option and 12 digits for IP address. For IP address,
add 0 before the digits if the digits are less than 3 (i.e. – 192.168.0.26 should be key in like 192168000026. No decimal is
needed).
Key entry cannot be deleted but the phone may prompt error once it is detected.
Dial *98 to announce the extension number of the port.
Configuration via Web Browser
The HT812/HT814 embedded Web server responds to HTTP GET/POST requests. Embedded HTML pages allow a user to
configure the HT812/HT814 through a web browser such as Google Chrome, Mozilla Firefox and Microsoft’s IE.
Microsoft Internet Explorer: version 10 or higher.
Google Chrome: version 58.0.3 or higher.
Mozilla Firefox: version 53.0.2 or higher.
Safari: version 5.1.4 or higher.
Opera: version 44.0.2 or higher.
Accessing the Web UI
Via WAN port
For the initial setup, the Web access is by default enabled when the device is using private IP and disabled when using public
IP, and you cannot access the Web UI of your HT812/HT814 until it’s enabled, the following steps will show you how to enable
it via IVR.
1. Power your HT812/HT814 using PSU with the right specifications.
2. Connect your analog phone to phone ports (FXS) of your HT812/HT814.
3. Press *** (press the star key three times) to access the IVR menu and wait until you hear “Enter the menu option “.
4. Press 12, the IVR menu will announce that the web access is disabled, press 9 to enable it.
5. Reboot your HT812/HT814 to apply the new settings.
Please refer to steps below if your HT812/HT814 is connected via WAN port:
1. You may check your HT812/HT814 IP address using the IVR on the connected phone.
Please see Obtain the HT812/HT814 IP address via the connected analogue phone
2. Open the web browser on your computer.
3. Enter the HT812/HT814’s IP address in the address bar of the browser.
4. Enter the administrator’s password to access the Web Configuration Menu.
Note: The computer must be connected to the same sub-network as the HT812/HT814. This can be easily done by connecting
the computer to the same hub or switch as the HT812/HT814.
Via LAN port
Please refer to steps below if your HT812/HT814 is connected via LAN port:
1. Power your HT812/HT814 using PSU with the right specifications.
2. Connect your computer or switch directly to your HT812/HT814 LAN port.
3. Open the web browser on your computer.
4. Enter the default LAN IP address (192.168.2.1) in the address bar of the browser.
5. Enter the administrator’s password to access the Web Configuration Menu.
6. Make sure to reboot your device after changing your settings to apply the new configuration.
Web UI Access Level Management
There are three default passwords for the login page:
User Level Password Web Pages Allowed
End User Level 123 Only Status and Basic Settings
Administrator Level admin All pages
Viewer Level viewer Only checking. Not allowed to modify content.
The password is case-sensitive and must contain 8-20 characters, at least one number, one uppercase, and one lowercase
letter. When changing any settings, always submit them by pressing Update or Apply button at the bottom of the page. After
submitting the changes in all the Web GUI pages, if a reboot is required, the web page will prompt the user to reboot by
Please make sure to reboot the device after changing network settings (IP Address, Gateway, Subnet…) to apply the new
configuration.
Please make sure that your computer has a valid IP address on the range 192.168.2.x so you can access the web GUI of your
HT812/HT814.

offering a reboot button on the web page.
Saving the Configuration Changes
After users make changes to the configuration, pressing Update button will save but not apply the changes until Apply
button is clicked. Users can instead directly press Apply button. When a reboot is required to apply changes, the web page
will prompt the user to reboot by offering a reboot button on the web page.
Changing Admin Level Password
1. Access your HT812/HT814 web UI by entering its IP address in your favorite browser.
2. Enter your admin password (default: admin).
3. Press Login to access your settings.
4. Go to Advanced Settings 🡪 New Admin Password and enter the new admin password.
5. Confirm the new admin password.
6. Press Apply at the bottom of the page to save your new settings.
Figure 7: Admin Level Password
Changing User Level Password
1. Access your HT812/HT814 web UI by entering its IP address in your favorite browser.
2. Enter your admin password (default: admin).
3. Press Login to access your settings.
4. Go to Basic Settings 🡪 New End User Password and enter the new end-user password.
5. Confirm the new end-user password.
6. Press Apply at the bottom of the page to save your new settings.
Figure 8: User Level Password
Changing Viewer Password
1. Access your HT812/HT814 web UI by entering its IP address in your favorite browser.
2. Enter your admin password (default: admin).
3. Press Login to access your settings.
4. Go to Basic Settings 🡪 New Viewer Password and enter the new viewer password.
5. Confirm the new viewer password.
6. Press Apply at the bottom of the page to save your new settings.
Figure 9: Viewer Level Password
Changing HTTP Web Port
1. Access your HT812/HT814 web UI by entering its IP address in your favorite browser.
2. Enter your admin password (default: admin).
3. Press Login to access your settings.
4. Go to Basic Settings 🡪 HTTP Web Port.
5. Make sure that the Web Access Mode is set to HTTP.
6. Change the current port to your desired/new HTTP port. Ports accepted are in range [1-65535].
7. Press Apply at the bottom of the page to save your new settings

Figure 10: Web HTTP Port
Web Configuration Pages Definitions
This section describes the options in the HT812/HT814 Web UI. As mentioned, you can log in as an administrator or an end
user.
Status: Displays the system info, network status, account status, and line options.
Basic Settings: Configures the end user level password, IP address modes, web access, time zone settings and language.
Advanced Settings: Configures networks, upgrading and provisioning, TR-069, security settings, date and time, syslog,
audio settings, call settings and call progress tones.
Profile (1,2): Configures the SIP Server, SIP Registration, NAT settings, call features, ring tones.
FXS Ports: Configures SIP accounts settings, Off hook Auto-dial.
Status Page Definitions
Status
MAC
Address
Shows device ID in hexadecimal format. This is needed by network administrators for troubleshooting. The
MAC address will be used for provisioning and can be found on the label on original box and on the label
located on the bottom panel of the device.
Note: The device has two MAC addresses, one for the WAN port and one for the LAN port. The MAC address
located on the bottom panel of the device is the MAC address of LAN port. The MAC address of WAN port is
MAC address of LAN port +1.
Example: MAC Address: WAN – “00:0B:82:25:AF:32”, LAN – “00:0B:82:25:AF:31”.
WAN IPv4
Address Displays assigned IPv4 address.
WAN IPv6
Address Displays assigned IPv6 address.
VPN IPv4
Address Displays assigned OpenVPN IPv4 address.
VPN IPv6
Address Displays assigned OpenVPN IPv6 address.
Product
Model Displays product model info. Default is HT812 or HT814.
Hardware
Version Displays the hardware revision information and the part number.
Software
version
Program: Specifies Program version. This is the main firmware release number, which is always used for
identifying the software system of the HT812/HT814.
Bootloader: Specifies Boot version.
Core: Specifies Core version.
Base: Specifies Base version.
CPE: Specifies CPE version. CPE version is displayed only when HT812/HT814 is connected to an ACS
using TR-069 protocol.
Software
Status Indicates the current software status of the HT (Running or Stopped).
System
Up Time Indicates actual system time and uptime since last reboot.
CPU Load Indicates CPU load (%)

Network
Cable
Status
Indicates the Status of the Network cables connected to the LAN Port and the WAN Port.
Status (Up/Down), Speed (Mbps), Operational Mode (Full/Half Duplex)
PPPoE
Link Up Indicates PPPoE connection status.
NAT Indicates type of NAT when it is configured.
Port
Status
Displays relevant information regarding the FXS ports about their registration, current
status and their appropriate User ID.
Port
Options Displays relevant information regarding the FXS ports about their DND and call forward features.
CDR File Download, Preview. Or, Delete call history records from the web GUI. Only the last 1000 records will be
available.
SIP File
Download, Preview or, Delete locally stored SIP trace.
Note: “Send SIP Log” must be enabled to be able to capture the trace.
Provision Displays provisioning status.
Core
Dump Provides generated core dump file if unit malfunctions. Clean will be displayed if no issues.
Table 6: Status Page Definitions
Basic Settings Page Definitions
Basic Settings
New End User Password
Configures user level password. Case sensitive and max. Length of 20 characters.
Note : The new Password must contain 8-20 characters, at least one number, one uppercase,
and a lowercase letter. Purposely not displayed for security reasons.
Confirm End User Password Re-enter the end user password to confirm change user password on web GUI to avoid typo or
mistakes.
New Viewer Password
Configures viewer-level password. Case sensitive and max. length of 20 characters.
Note : The new Password must contain 8-20 characters, at least one number, one uppercase,
and a lowercase letter. Purposely not displayed for security reasons.
Confirm Viewer Password Re-enter the viewer password to confirm change viewer password on web GUI to avoid typo
or mistakes.
Web/SSH Access
Web Session Timeout Configure timer to logout web session during idle. Default is 10 min. Range is 2-60 min.
Web Access Attempt Limit Configure attempt limit before lockout. Default is 5. Range is 1-10.
Web Lockout Duration If login attempt failed 5 times, login would be locked out for the time length. (Default 15
mins. Range 1-15 min).
Web Access Mode
Allows users to choose the Web Access Mode between “HTTPS”, “HTTP” and “Disabled”. If
“Disabled” is selected, web UI access will be disabled.
By default, “HTTP” is selected.
HTTP Web Port Customizes HTTP port used to access the HT801/HT802 web UI. Default is 80.
HTTPS Web Port Customizes HTTPS port used to access the HT801/HT802 web UI. Default is 443.
Disable SSH Enables/disables the SSH access. Default is No (enabled).
SSH Port Allows users to self-configure SSH Port number.
By default, the port number is 22.
SSH Idle Timeout Configures SSH session timeout. [0 – 86400] seconds; Default is 0.
Disable Telnet Enables/disables the Telnet access. Default is Yes (disabled).
Telnet Port Allows users to self-configure Telnet Port number. By default, the port number is 23.
Security Controls for SSH/Telnet
Access
Allows the user to choose the security control for SSH or Telnet Access, the options can be :
1. Only allow SSH private IP users to set system Pvalue.
2. Allow all SSH users to set system Pvalue.
3. Allow all SSH users to set any Pvalue.
4. Allow any user to set any Pvalue.
5. Prohibit setting Pvalue.
By default , it is set to "Allow any user to set any Pvalue".

WAN Side Web/SSH Access
Enables / Disables the Web and SSH access through the WAN port. The available options are
the following:
●No: No access to the web or SSH from any IP address on the WAN side.
●Yes: Access for the Web GUI and SSH is enabled on the WAN side.
●Auto: Only private IP could access the web or SSH on the WAN side.
Default setting is Auto.
Whitelist for WAN Side
Users can configure the whitelist for WAN Side to be used for remote management.
Multiple IPs are supported and need to be separated by “space”.
Example: 192.168.5.222 192.168.5.223 192.168.7.0/24
Note: If both blacklist and whitelist are not empty, the blacklist is processed first, followed by
the whitelist.
Blacklist for WAN Side
Users can configure the blacklist for WAN Side to ban WAN side web access.
Multiple IPs are supported and need to be separated by “space”.
Example: 192.168.5.222 192.168.5.223 192.168.7.0/24
Note: If both blacklist and whitelist are not empty, the blacklist is processed first, followed by
the whitelist.
Internet Protocol
Selects one of the following IP protocol modes:
●IPv4 Only: Enforce IPv4 protocol only.
●IPv6 Only: Enforce IPv6 protocol only.
●Both, Prefer IPv4: Enable both IPv4 and IPv6 and prefer IPv4.
●Both, prefer IPv6: Enable both IPv4 and IPv6 and prefer IPv6.
Note: Make sure to reboot the phone for the changes to take effect.
IPv4 Address Allows users to configure the appropriate network settings on the HT80x to obtain IPv4
address. Users could select “DHCP”, “Static IP” or “PPPoE”. By default, it is set to “DHCP”.
Dynamically assigned via DHCP
All the field values for the static IP mode are not used (even though they are still saved in the
flash memory.) The HT801/802 acquires its IP address from the first DHCP server it discovers
from the LAN it is connected.
●DHCP hostname: Specifies the name of the client. The name may or may not be qualified
with the local domain name. This field is optional but may be required by ISP.
●DHCP domain name: Specifies the domain name that client should use when resolving
hostname via the Domain Name System.
●DHCP vendor class ID: Exchanges vendor class ID by clients and servers to convey
particular configuration or other identification information about a client. Default
is HT8XX.
Use PPPoE
Set the PPPoE account settings. If selected, ATA attempt to establish a PPPoE session if any of
the PPPoE fields is set.
●PPPoE account ID: Defines the PPPoE username. Necessary if ISP requires you to use a
PPPoE (Point to Point Protocol over Ethernet) connection.
●PPPoE password: Specifies the PPPoE account password.
●PPPoE Service Name: Defines PPPoE service name. If your ISP uses a service name for
the PPPoE connection, enter the service name here. This field is optional. Default is blank.
Preferred DNS server Specifies preferred DNS server to use when DHCP or PPPoE are set.
Statically configured as IP address Configure IP address, subnet Mask, default router IP address, 1st preferred DNS server,
2nd preferred DNS server. These fields are set to zero by default.
IPv6 Address
Allows users to configure the appropriate network settings on the HT80x to obtain IPv6
address. Users could select “DHCP”, “Static IP”. By default, it is set to “DHCP”.
●DHCP mode: all the field values for the static IP mode are not used (even though they are
still saved in the flash memory.) The HT801/HT802 acquires its IP address from the first
DHCP server it discovers from the LAN it is connected.
●Static IP mode: configure IP address, 1st and 2nd DNS server, preferred DNS server.
These fields are set to zero by default.
●Full Static: When enabling the option full static, users need to specify the Static IPv6 and
the IPv6 Prefix length.
●Prefix Static: When enabling the option prefix static, users need to specify the IPv6 Prefix
(64 bits).
Enable Management Interface Allows administrator to setup a Virtual Network Interface on top of the physical interface for
device management. Default is No.
Management Access Chooses whether to access using “Management Interface Only” (Default) Or “Both Service
and Management Interfaces”
Enable SNMP Through Management
Interface
This feature allows users to route SNMP packets through management interface. Default
setting is No.
Enable TR-069 Through Management
Interface
This feature allows users to route TR-069 packets through the management interface. Default
setting is No.
Enable Syslog Through Management
Interface
This feature allows users to route Syslog packets through the management interface. Default
setting is No.
Management Interface IPv4 Address Configures Voice VLAN Type :
●Default is dynamically assigned via DHCP
Or,
●statically configured as:

○IP Address : Default is 192.168.100.100
○Subnet Mask : Default is 255.255.255.0
○Default Router : Default is 192.168.100.1
○DNS Server 1 : Default is 0.0.0.0
○DNS Server 2 : Default is 0.0.0.0
●802.1Q/VLAN Tag
vlan tagging : [0 – 4094]; Default is 0
●802.1p priority value :
priority : [0 – 7]; Default is 0
Time Zone Selects time zone to define date/time on the device.
Self-Defined Time Zone Allows users to define their own time zone.
Allow DHCP server to set Time Zone
Obtains time zone setting (offset) from a DHCP server using DHCP Option 2; it will override
selected time zone. If set to “No”, the analogue adapter will use selected time zone even if
provided by DHCP server.
The Default setting is Yes.
Language Configures the languages of the voice prompt and web interface, except Spanish that it is only
in IVR. Available languages: English, Chinese, Traditional Chinese, Russian, Spanish IVR.
NAT/DHCP Server Information & Configuration
Device Mode Controls whether the device is working in NAT router mode or Bridge mode. Save the setting
and reboot prior to configuring the HT812/HT814.
NAT maximum ports Defines the number of ports that can be managed while in NAT router mode.
Range: 0 – 4096, default is 1024. Typically, one port per connection.
NAT TCP timeout NAT TCP idle timeout in seconds. Connection will be closed after preconfigured, timeout if
not refreshed. Range: 0 – 3600
NAT UDP timeout NAT TCP idle timeout in seconds. Connection will be closed after preconfigured, timeout if
not refreshed. Range: 0 – 3600, default is 300
Uplink bandwidth
Specifies the maximum uplink bandwidth permitted by the device. This function is disabled by
default. The total bandwidth can be set as: 128K, 256K, 512K, 1M, 2M, 3M, 4M, 5M, 10M or
15M.
The primary function of this setting is to limit the uplink bandwidth for the device internal
system, signaling and NATed traffic. Example: When 512k is configured, there will be at least
512kbps limited for internal system, signaling and NATed traffic. Voice or RTP stream will
never be limited.
Downlink bandwidth
Specifies the maximum downlink bandwidth permitted by the device. This function is disabled
by default. The total bandwidth can be set as: 128K, 256K, 512K, 1M, 2M, 3M, 4M, 5M, 10M
or 15M.
The primary function of this setting is to limit the download bandwidth for the device internal
system, signaling and NATed traffic. Example: if 128 is configured, there will be at least
128kbps limited for internal system, signaling and NATed traffic. Voice or RTP stream will
never be limited.
Enable UPnP support When set to “Yes”, the HT812/HT814 acts as an UPnP gateway for your UPnP enabled
applications. UPnP = “Universal Plug and Play”
Reply to ICMP on WAN port Default is No. When set to “Yes”, the HT812/HT814 responds to the PING command from
other computers, but is also made vulnerable to DOS attacks.
Cloned WAN MAC Addr This allows the user to change/set a specific MAC address on the WAN interface.
Note: Set in Hex format
LAN Port VLAN Feature Under
Bridge Mode
Allows users to configure the customized VLAN tag and priority value under switch mode.
VLAN Tag range is 0-4094, the Priority Vlaue range is 0-7.
The Default for both is 0
Enable LAN DHCP
When set to “Yes”, device will function as a simple router and LAN port will provide IP
addresses to internal network. Connect the WAN port to ADSL/Cable modem or any other
equipment that provides access to public Internet
LAN DHCP Base IP
Base IP Address for a LAN port. Default factory setting is 192.168.2.1. Note: When the device
detects WAN IP is conflicting with LAN IP, the LAN base IP address will be changed based
on the network mask — the effective subnet will be increased by 1.
For example; 192.168.2.1 will be changed to 192.168.3.1 if net mask is 255.255.255.0. Then
the device will reboot
LAN DHCP Start IP
Default value is 100. The last segment of IP address assigned to the HT812/HT814 in the LAN
Network.
Default configuration assigns IP address (to local network devices) starting from
192.168.2.100.
LAN DHCP End IP
Default value is 199. This parameter allows a user to limit the number of local network
devices connected to the internal router.
Default configuration assigns IP address (to devices connected to the LAN port) in a range
from 192.168.2.100 up to 192.168.2.199.
LAN Subnet Mask Sets the LAN subnet mask. Default value is 255.255.255.0

Table 7: Basic Settings Page
Advanced Settings Page Definitions
DHCP IP Lease Time Default value is 120 hrs (5 days). The length of time the IP address is assigned to the LAN
clients. Value is set in units of hours.
DMZ IP This function forwards all WAN IP traffic to a specific IP address if no matching port is used
by HT812/HT814 or in the defined port forwarding.
Port Forwarding Forwards a matching (TCP/UDP) port to a specific LAN IP address with a specific
(TCP/UDP) port. Up to 8 rules are available.
Reset Type
Gives the administrator the option to restore default configuration on the HT801/HT802.
There are 3 types of factory reset:
●ISP Data Reset: All ISP (Internet Service Provider) configuration which may affect the IP
address will be reseted (including WAN static IP).
●VOIP Data Reset: All VoIP related configuration (mainly everything located on FXS
page).
●Full Reset: Both VoIP and ISP related configuration at the same time.
Note: After you choose the reset type, you must click the reset button to take effect.
New Admin Password
Defines the administrator level password to access the Advanced Web Configuration page. This
field is case sensitive. Only the administrator can configure the “Advanced Settings” page.
Password field is purposely left blank for security reasons after clicking update and saved.
Note : The new Password must contain 8-20 characters, at least one number, one uppercase, and a
lowercase letter. Purposely not displayed for security reasons
Confirm Admin Password Confirms the new admin password.
Disable User Level Web Access Disable or enable User Level Web Access. Default is No.
Disable Viewer Level Web Access Disable or enable Viewer Level Web Access Default is No.
Layer 2 QoS
Sets values for 802.1Q/VLAN Tag. Default is 0. Valid range is 0-4094.
SIP 802.1p. Default is 0. Valid range is 0-7.
RTP 802.1p. Default is 0. Valid range is 0-7.
Blacklist for WAN Side Port It could be either port range or single port separated by a “,”
Example: “5000-6000, 7000 “.
STUN Server is Configures IP address or domain name of STUN server. Only non-symmetric NAT routers work
with STUN.
Keep-alive interval Sends periodically a blank UDP packet to SIP server to keep the “ping hole” on the NAT router
open. Default is 20 seconds.
Use STUN to detect network
connectivity
Uses STUN keep-alive to detect WAN side network problems. If keep-alive request does not yield
any response for configured number of times (minimum 3), the device will restart the TCP/IP
stack.
If the STUN server does not respond when the device boots up, the feature is disabled.
Default setting is No.
Use DNS to detect network
connectivity
Uses DNS to detect WAN side network problems.
Default setting is “No”.
Use ARP to detect network
connectivity
Uses ARP to check the network connectivity.
Default is “Yes”.
Verify host when using HTTPS Enables / disables the host verification when using HTTPS.
Upgrade via Selects firmware upgrade/provisioning method: TFTP, HTTP, HTTPS, FTP or FTPS. Default is
HTTPS.
Provision and upgrade to new Gen-
2 certificate
Configures whether or not to upgrade to a new Gen-2 certificate,
It is set to no upgrade by Default.
Firmware Server Path
Sets IP address or FQDN of firmware server. The URL of the server that hosts the firmware
release.
Note: You can specify the protocol used in the Firmware Server Path. (example:
https://192.168.5.120), this will bypass the "Upgrade Via" method.
Default is fm.grandstream.com/gs.
Config Server Path
Sets IP address or FQDN of configuration server. The URL of the server that hosts the
configuration file to provision HT8xx.
Note: You can specify the protocol used in the Config Server Path. (example:
https://192.168.5.120), this will bypass the "Upgrade Via" method.
Default is fm.grandstream.com/gs.
XML Config File Password Decrypts XML configuration file when encrypted. The password used for encrypting the XML
configuration file using OpenSSL.
HTTP/HTTPS FTP/FTPS
Username Enters username to authenticate with HTTP/HTTPS FTP/FTPS server.

HTTP/HTTPS FTP/FTPS Password Enters password to authenticate with HTTP/HTTPS FTP/FTPS server.
Firmware File Prefix Checks if firmware file is with matching prefix before downloading it. This field enables user to
store different versions of firmware files in one directory on the firmware server.
Firmware File Postfix
Checks if firmware file is with matching postfix before downloading it.
This field enables user to store different versions of firmware files in one directory on the
firmware server.
Config File Prefix Checks if configuration files are with matching prefix before downloading them. This field
enables user to store different configuration files in one directory on the provisioning server.
Config File Postfix Checks if configuration files are with matching postfix before downloading them. This field
enables user to store different configuration files in one directory on the provisioning server.
Enable using tags in URL Allows users to configure variables on the configuration server path to differentiate the directories
on the server.
Always send HTTP Basic
Authentication Information
Default is No. If set to Yes, The device will send configured user name and password within
HTTP request before server sends authentication challenge.
Allow DHCP Option 66 or 160 to
Override Server
Obtains configuration and upgrade server’s information using options 66 from DHCP server.
Note: If DHCP Option 66 is enabled, the HT8xx will attempt downloading the firmware file from
the server URL provided by DHCP, even though Config Server Path is left blank.
The server URL provided by DHCP can include authentication credentials using following
format: “username:password@Provisioning_Server_IP”.
Additional Override DHCP Option Allows users to enable the Additional Override DHCP Option in Option 150. The default value is
"None".
3CX Auto Provision Sends multicast “SUBSCRIBE” message for provisioning at booting stage, used for PnP (Plug-
and-Play) configuration. Default is Yes.
Automatic Upgrade
Specifies when the firmware upgrade process will be initiated; there are 4 options:
No: The HT8xx will only do an upgrade once at boot up.
Check every X minutes: User needs to specify a period in minutes.
Check every day: User needs to specify the start hour and the end hour of the day (0-23).
Check every week: User needs to specify “Day of the week (0-6)”. (Day of week is starting from
Sunday).
Default is No.
Randomized Automatic Upgrade Randomized Automatic Upgrade within the range of hours of the day or postpone the upgrade
every X minute(s) by random 1 to X minute(s).
Always Check for New Firmware at
Boot up
Configures the HT8xx to always search for the new firmware at boot up. During the boot stage,
the HT8xx will contact the firmware upgrade server to search for a new firmware, when available
it will start the upgrade process, otherwise it will boot normally.
Check New Firmware only when
F/W pre/suffix changes
Configure the HT8xx to search for the new firmware when the firmware prefix / suffix changes.
When this option is selected, the HT8xx will check for updates only when the pre/suffix has been
changed.
Always Skip the Firmware Check Configures the HT8xxto skip the firmware check, when this option is selected the HT8xx will
always skip searching for a new firmware.
Configuration File Types Allowed Allows users to configure provision configuration file type in xml file only or all file types.
Download and Process All Available
Config Files
This feature allows users to download and process all available config files. By default, the device
will provision the first available config in the order of cfgMAC > cfgMAC.xml >
cfgMODEL.xml > and cfg.xml (corresponding to device-specific, model-specific, and global
configs).
If this option is enabled, the device will inverse the downloading process to cfg.xml >
cfgMODEL.xml > cfgMAC.bin > cfgMAC.xml and add cfgMAC_override.xml. The following
files will override the files that have already been loaded and processed.
The default value is "No"
Disable SIP NOTIFY
Authentication
Disables the SIP NOTIFY Authentication on the phone adapter. If set to “Yes”, the phone adapter
will not challenge NOTIFY with 401.
The default setting is “No”
Authenticate Conf File Authenticates configuration before being accepted. This protects the configuration from
unauthorized modifications. Default is No.
Validate Server Certificates
This feature allows users to validate server certificates with our trusted list of TLS connections.
The device needs to reboot after changing the setting.
Default is enabled.
Trusted CA certificates A Uses the certificate for Authentication if “Check Domain Certificates” is set to “Yes” under
“Account”–> “SIP Settings”.
Trusted CA certificates B Uses the certificate for Authentication if “Check Domain Certificates” is set to “Yes” under
“Account”–> “SIP Settings”.
Load CA Certificates This feature allows user to specify which certificate to trust when performing server
authentication.
Build-in trusted : (Default) Build-in trusted certificates
Custom trusted certificate: Uploaded Certificates

All trusted Certificates: Both built-in and uploaded Certificates
Root CA Version Configures the Root CA version. can be set to either Current root or new root.
Default Value is New Root.
SIP TLS Certificate
Specifies SSL certificate used for SIP over TLS is in X.509 format. The HT8xx has built-in
private key and SSL certificate.
Maximum supported length is 4069.
SIP TLS Private Key Specifies TLS private key used for SIP over TLS is in X.509 format.
Maximum supported length is 4069.
SIP TLS Private Key Password Specifies SSL Private key password used for SIP Transport in TLS/TCP.
Custom Certificate
(Private Key + Certificate)
Allows users to update to the device their own certificate signed by a custom CA certificate to
manage client authentication.
Gen-2 EC private key
Configures the Gen-2 Elliptic Curve Private Key. based on RFC 5915.
The Max value length is 8192 characters.
Enable TR-069
Sets the phone adapter system to enable the “CPE WAN Management Protocol” (TR-069).
Default setting is Yes.
Note: New Parameters were added to the TR069 Data model starting from Firmware version
1.0.47.4
TR-069 firewall rules Configures the TR-069 firewall rules , Value port range is 1-65535
ACS URL
Specifies URL of TR-069 Auto Configuration Servers (e.g., http://acs.mycompany.com), or IP
address.
Default setting is: “https://acs.gdms.cloud”
ACS Username Enters username to authenticate to ACS.
ACS Password Enters password to authenticate to ACS.
Periodic Inform Enable Sends periodic inform packets to ACS. Default is Yes.
Periodic Inform Interval Sets frequency that the inform packets will be sent out to ACS.
Default is 86400 seconds.
Connection Request Username Enters username for ACS to connect to the HT8xx.
Connection Request Password Enters password for ACS to connect to the HT8xx.
Connection Request Port Configures the TR-069 connection request port. The value range is 0 to 65535.Default is 7547
CPE SSL Certificate Configures the Cert File for the phone adapter to connect to the ACS via SSL.
CPE SSL Private Key Specifies the Cert Key for the phone adapter to connect to the ACS via SSL.
Enable SNMP Default is No.
SNMP Version Choose between (Version 1, Version 2c, or Version 3).
SNMP Port Listening Port of SNMP daemon (Default 161).
SNMP Trap IP Address IP address of trap destination. Up to 3 trap destinations are supported. Users should enter the IP
addresses separated with comma (,).
SNMP Trap port Port of Trap destination (Default 162)
SNMP Trap Version Choose between (Version 1, Version 2c, or Version 3).
SNMP Trap Interval Time interval between traps (Default is 5).
SNMPv1/v2c Community Name of SNMPv1/v2c community.
SNMPv1/v2c Trap Community Name of SNMPv1/v2c trap community.
SNMPv3 Username Username for SNMPv3.
SNMPv3 Security Level
noAuthUser: Users with security level noAuthnoPriv and context name as noAuth.
authUser: Users with security level authNoPriv and context name as auth.
privUser: Users with security level authPriv and context name as priv.
SNMPv3 Authentication Protocol Select the Authentication Protocol: “None” or “MD5” or “SHA.”
SNMPv3 Privacy Protocol Select the Privacy Protocol: “None” or “AES/AES128” or “DES”.
SNMPv3 Authentication Key Enter the Authentication Key.
SNMPv3 Privacy Key Enter the Privacy Key.

SNMPv3 Trap Username Username for SNMPv3 Trap.
SNMPv3 Trap Security Level
noAuthUser: Users with security level noAuthnoPriv and context name as noAuth.
authUser: Users with security level authNoPriv and context name as auth.
privUser: Users with security level authPriv and context name as priv.
SNMPv3 Trap Authentication
Protocol Select the Authentication Protocol: “None” or “MD5” or “SHA”.
SNMPv3 Trap Privacy Protocol Select the Privacy Protocol: “None” or “AES/AES128” or “DES”.
SNMPv3 Trap Authentication Key Enter the Trap Authentication Key.
SNMPv3 Trap Privacy Key Enter the Trap Privacy Key.
Enable RADIUS Web Access
Control Default is No.
Action upon RADIUS Auth Server
Error
Choose action upon RADIUS server error. Default is Authenticate Locally (Default Authenticate
Locally)
RADIUS Auth Server Address Address of RADIUS Auth server.
RADIUS Auth Server Port Port of RADIUS Auth server.
RADIUS Shared Secret Set RADIUS shared secret.
RADIUS VSA Vendor ID Configure RADIUS VSA Vendor ID to match RADIUS server’s configuration. Default is 42397
for Grandstream Networks Inc.
RADIUS VSA Access Level
Attribute
Configure RADIUS VSA Access Level Attribute to match RADIUS server’s configuration.
Incorrect setting would cause Radius authenticate fail.
Enable DDNS Allow users to use DDNS.
DDNS Server Selects DDNS Server: dyndns, freedns.afraid.org, zoneedit.com, no-ip.com, oray.net.
Default is dyndns.
DDNS Username 64 characters as Max String Length.
DDNS Password 64 characters as Max String Length.
DDNS Hostname 64 characters as Max String Length.
DDNS Hash 64 characters as Max String Length.
Enable OpenVPN® Allow user to enable OpenVPN®. Default is No.
OpenVPN® Server Address Specify the IP address or FQDN for the OpenVPN® Server.
OpenVPN® Port Specify the listening port of the OpenVPN® server. Default is 1194
OpenVPN® Interface type Specify the Interface type of OpenVPN® whether TAP or TUN. Default is TUN.
OpenVPN® Transport Specify the Transport Type of OpenVPN® whether UDP or TCP. The default is UDP.
Enable OpenVPN® LZO
Compression Enable OpenVPN® LZO Compression. Default is Yes.
OpenVPN® Encryption Select the OpenVPN® Encryption. Default is BF-CBC 128 bit (default key).
OpenVPN® Digest Select the OpenVPN® Digest. Default is SHA1.
OpenVPN® CA Specifies the OpenVPN® CA. Maximum Character Number is 8192.
OpenVPN® Certificate Specifies the OpenVPN® Certificate. Maximum Character Number is 8192.
OpenVPN® Client Key Specifies the Client Key. Maximum Character Number is 8192.
OpenVPN® Client Key Password Configures the OpenVPN® Client Key Password. Maximum Length is 64.
OpenVPN® username Configure the OpenVPN® username.
OpenVPN® password Configure the OpenVPN® password
System Ring Cadence
Configuration option is set ring cadence on FXS port for all incoming calls.
Syntax: c=on1/off1-on2/off2-on3/off3; (3 cadences maximum)
Default is set to c=2000/4000; (US standards)
Call Progress Tones:
Dial Tone
Ringback Tone
Busy Tone
Using these settings, users can configure tone frequencies and cadence according to their
preference. By default, they are set to North American frequencies.
Configure these settings with known values to avoid uncomfortable high pitch sounds. ON is the
period of ringing (“On time” in ‘ms’) while OFF is the period of silence. In order to set a

Reorder Tone
Confirmation Tone
Call Waiting Tone
Prompt Tone
Conference Party Hangup Tone *
Special Proceed Indication Tone
Special Condition Tone
continuous tone, OFF should be zero. Otherwise, it will ring ON ms and a pause of OFF ms and
then repeat the pattern.
Example configuration for N.A.
Dial tone:
f1=350@-13, f2=440@-13, c=0/0;
Syntax: f1=freq@vol, f2=freq@vol, c=on1/off1-on2/off2-on3/off3; […]
(Note: freq: 0 – 4000Hz; vol: -30 – 0dBm)
* “Conference Party Hang-up Tone” will apply only if the “Special Feature” is set to “MTS”.
Special Proceed Indication Tone: This feature allows user to configure the tone played when user
goes offhook and there is voicemail on the subscribed mailbox. Need to set ‘MWI Tone’ to
‘Special Proceed Indication Tone’ to use this feature.
Prompt Tone Access Code Key pattern to get Prompt Tone. Maximum 20 digits.
Lock Keypad Update Configuration update via keypad (analog phone connected to FXS port keypad using IVR menu)
is disabled if set to Yes.
Disable Voice Prompt Voice prompt is disabled if set to Yes.
Disable Direct IP Call Direct IP call is disabled if set to Yes.
Play Busy Tone When Account is
unregistered
When this feature is set to Yes, device will play busy tone when the FXS port account is not
registered, and the attached analog phone is offhook.
Blacklist for Incoming Calls
Allow users to block incoming calls from specific list of numbers.
Maximum allow 10 SIP numbers and each number should be separated by a comma (‘,’) in web
UI.
Other allowed characters are 0-9, comma (“,”), asterisk (‘*’), pound sign (‘#’) and plus sign (‘+’).
NTP Server Defines the URL or IP address of the NTP server. The ATA may obtain the date and time from the
server. The default setting is “pool.ntp.org.”
Allow DHCP Option 42 to override
NTP server
Defines whether DHCP Option 42 should override NTP server or not. When enabled, DHCP
Option 42 will override the NTP server if it is set up on the LAN. The default setting is Yes.
DHCP Option 17 Enterprise
Number Configure the DHCP option 17 number. Default is 3561
CDR File Option
By default, the device will split the allowed memory for CDR file into 2 parts. Device will create
the first CDR file which is half of the allowed size, when it is full, device will create the second
file.
When “CDR File Option” is set to Default “Keep”, device will keep the call records when both
files are full, no more new record will be stored.
When this feature is set to “Overwrite”, device will clear the first CDR file and start storing again.
When the feature is disabled the device will not record any calls.
The CDR file output will be available at Status page: [CDR File]
SIP File Option
By default, the device will split the allowed memory for SIP file into 2 parts. Device will create
the first SIP file which is half of the allowed size, when it is full, device will create the second
file.
When “SIP File Option” is set to Default “Keep”, device will keep the call records when both
files are full, no more new record will be stored.
When this feature is set to “Overwrite”, device will clear the first SIP file and start storing again.
The SIP file output will be available at Status page: [SIP File]
Note: “Send SIP Log” must be enabled to be able to capture the trace.
Disable Weak TLS Cipher Suites
Allows users to disable weak ciphers DES/3DES and RC4, Symmetric Encryption SEED,
Symmetric Authentication MD5, Protocol Version SSLv2/SSLv3 or Disable All of the Above
Weak TLS Ciphers Suites.
Default is No.
Minimum TLS Version
This feature allows customer to choose desired Minimum TLS Version.
Choices are:
Unlimited
TLS 1.0
TLS 1.1
TLS 1.2
Default is Unlimited.
Maximum TLS Version
This feature allows customer to choose desired Maximum TLS Version.
Choices are:
Unlimited
TLS 1.0
TLS 1.1
TLS 1.2
Default is Unlimited.
Syslog Protocol
If set to SSL/TLS, the syslog messages will be sent through secured TLS
Protocol to syslog server.
Default setting is UDP.
Note: The CA certificate is required to connect with the TLS server
A reboot is required to take effect.
Syslog Server URL or IP address of syslog server.
Note: A reboot is required to take effect.
Syslog Level Select the HT8xx to report the log level. Default is NONE. The level is one of EXTRA DEBUG,
DEBUG, INFO, WARNING or ERROR. Syslog messages are sent based on the following events:
1. product model/version on boot up (INFO level)

2. NAT related info (INFO level)
3. sent or received SIP message (DEBUG level)
4. SIP message summary (INFO level)
5. inbound and outbound calls (INFO level)
6. registration status change (INFO level)
7. negotiated codec (INFO level)
8. Ethernet link up (INFO level)
9. SLIC chip exception (WARNING and ERROR levels)
10. memory exception (ERROR level)
extra syslog style (EXTRA DEBUG level)
Note: A reboot is required to take effect.
Send SIP Log Configures whether the SIP log will be included in the syslog messages.
The default setting is No.
With Secret Key Information Allows users to make packet capture including the secret key to decrypt the captured TLS
packets. Default value is No.
Information Capture Allows the user to start the Information capture process, which can be enabled with a reboot
option every day at a specific time or disabled, Disabled by default.
Always Send HTTP Basic
Authentication Information
If set to Yes, the device will send configured username and password within HTTP request
without server sending authentication challenge.
Automatic Reboot
Default is No. When “Yes, reboot every day at hour” or “Yes, reboot every week at day” or “Yes,
reboot every month at day” is checked, user can specify “Hour of the day (0-23)” or “Day of the
week (0-6)” or “Day of the month (0-30)”. Default time is Monday 1AM.
Download Device Configuration Press Download button to download device configuration file to local computer. The filename is
“config.txt”. The file is plain text and not including password fields.
Download Device XML
Configuration
Press Download to download device configuration file to local computer. The filename is
“config.xml”. The file will not include password fields.
Upload Firmware
Press Upload from local directory button to load the firmware file to the device from your
computer. The firmware filename should be “ht80xfw.bin” (ht802fw.bin for HT802 for instance),
"ht81xfw.bin” for HT812/HT814 or "ht818fw.bin” for HT818.
Upload Configuration
Press Upload from local directory button to load configuration file to the device from your
computer. The configuration file should be an XML file (for instance: “config.xml”). Note: The
field
is not mandatory in the document but if available only device with specified MAC address will
accept the configuration file.
Export Backup Configuration
Press Download button to export device backup configuration to computer.
The output is “cfg<mac>_enc.xml” (where <mac> is the MAC address of the device). The file is
encrypted and can be used on same device only.
Restore From Backup
Configuration
Press Upload button to restore device configuration from previously exported backup
configuration.
E911/HELD Protocol:
Enable E911 Enable Enhanced 911 call. Default is disabled
HELD Protocol Configure HELD transfer protocol. HTTP or HTTPS
HELD Synchronization Interval The valid synchronization interval is between 30 to 1440 minutes. The synchronization is off
when the interval is 0.
Location Server Configure the primary Location Information Server (LIS) address
Location Server Username Configure the user name of the primary Location Information Server (LIS)
Location Server Password Configure the password of the primary Location Information Server (LIS)
Secondary Location Server Configure the seconary Location Information Server (LIS) address
Secondary Location Server
Username Configure the user name of the secondary Location Information Server (LIS)
Secondary Location Server
Password Configure the password of the secondary Location Information Server (LIS)
HELD Location Types Configure "locationType" element in the location request. "geodetic", "civic" and "location URI"
HELD NAI Configure "locationType" element in the location request. "geodetic", "civic" and "location URI"
HELD Identity 1-10 HELD Identity
HELD Identity 1-10 Value HELD Identity value
E911 Emergency Numbers A user can configure multiple emergency numbers separated with the delimiter symbol ";".
Geolocation-Routing Header If "Yes", E.911 INVITE message includes the "Geolocation-Routing" header with the value "Yes"

Profiles Pages Definitions
Priority Header If "Yes", E.911 INVITE message includes the "Priority" header with the value "emergency"
Profiles (1,2)
Profile Active
Activates / Deactivates the accounts. The FXS port configuration will not change if disabled, although the port will
not be operational, in this state, there will be no dial tone when picking up the analog phone and making/receiving
calls will not be possible.
Primary SIP
Server
Configures SIP server IP address (Supports both IPv4 and IPv6 addresses) or domain name provided by VoIP service
provider. (For example: sip.mycompany.com, IPv4:192.168.5.170, or IPv6: fe80::20b:82ff:fe75:211d). This is the
primary SIP server used to send/receive SIP messages from/to HT81x.
Failover SIP
Server
Defines failover SIP server IP address (Supports both IPv4 and IPv6 addresses) or domain name provided by VoIP
service provider. (For example: sip.mycompany.com, IPv4:192.168.5.170, or IPv6 fe80::20b:82ff:fe75:211d:). This
server will be used if primary SIP server becomes unavailable.
Prefer Primary
SIP Server
Selects to prefer primary SIP server. The account will register to primary Server if registration with Failover server
expires. Default is No.
Outbound Proxy
Specifies IP address (Supports both IPv4 and IPv6 addresses) or domain name of outbound Proxy, or media gateway,
or session border controller. (For example: proxy.myprovider.com, IPv4: 192.168.5.170, or IPv6:
fe80::20b:82ff:fe75:211d). It’s Used by HT818 for firewall or NAT penetration in different network environments. If
symmetric NAT is detected, STUN will not work and only outbound proxy can correct the problem
Backup
Outbound Proxy
Configures the backup outbound proxy to be used when the “Outbound Proxy” registration fails. (For example:
proxy.myprovider.com, or IP address, if any: IPv4: 192.168.5.170/ IPv6: fe80::20b:82ff:fe75:211d). By default, this
field is left empty.
Prefer Primary
Outbound Proxy
If the user configures this option to “Yes”, when the registration expires, the device will re-register via primary
outbound proxy. By default, this option is disabled.
From Domain allows users to add the actual domain name, it will override the from header.This is an optional configuration.
Allow DHCP
Option 120
(override SIP
Server)
Configures the HT81x to collect SIP server address from DHCP option 120. Default is No.
SIP transport Selects transport protocol for SIP packets; UDP or TCP or TLS. Please make sure your SIP Server or network
environment supports SIP over the selected transport method. Default is UDP.
SIP URI Scheme
When Using TLS Specifies if “sip” or “sips” will be used when TLS/TCP is selected for SIP Transport. The default setting is “sips”.
Use Actual
Ephemeral Port
in Contact with
TCP/TLS
Controls the port information in the Via header and Contact header. If set to “No”, these port numbers will use the
permanent listening port on the phone. Otherwise, they will use the ephemeral port for the connection. Default is No.
NAT Traversal
Indicates type of NAT for each account. This parameter configures whether the NAT traversal mechanism is activated.
Users could select the mechanism from No, Keep-alive, STUN, UPnP.
Default setting is No.
DNS Mode
Selects DNS mode to use for the client to look up server. One mode can be chosen.
A Record (Default): resolves IP Address of target according to domain name.
SRV: DNS SRV resource records indicate how to find services for various protocols.
NAPTR/SRV: Naming Authority Pointer according to RFC 2915.
Use Configured IP: If the SIP server is configured as domain name, device will not send DNS queries, but will use
“Primary IP” or “Backup IP” to send SIP message if at least one of them is not empty. It will try to use “Primary IP”
first, after 3 tries without any response, it will switch to “Backup IP 1”, then “Backup IP 2”, and then it will switch
back to “Primary IP” after 3 retries.
DNS SRV use
Registered IP
When the HT81x is registered using the second SRV record, making an outbound call, it will try the second SRV
(registered IP) first. By default, this option is disabled and the DNS SRV will use first SRV instead of the registered
IP.
DNS SRV
Failover Mode
Configure the preferred IP mode when DNS Mode is SRV or NAPTR/SRV.
• Default SIP request will always be sent to the address with the top priority based on the SRV query result, even if
this address is different from the registered IP address.
• Saved one until DNS TTL SIP request will always be sent to the registered IP address until DNS TTL expires or
registered IP address is unreachable
• Saved on until no response SIP request will always be sent to the registered IP address only until registered IP
address is unreachable.
Failback Timer
When the primary SBC is up, device will send SIP requests to the primary SBC. If at any point device fails over to the
secondary SBC, the SIP requests will stay on the failover SBC for the duration of the failback timer. When the timer
expires, device will send SIP requests to the primary SBC, (in minutes. Default is 60 minutes, max 45 days).
Register before
DNS SRV
Failover
This feature is used to control whether the device need to initiate a new registration request (following existing DNS
SRV fail-over mode) first and then direct the non-registration SIP request (INVITE) to the new successfully registered
server or not.
TEL URI Indicates E.164 number in “From” header by adding “User=Phone” parameter or using “Tel:” in SIP packets, if the
HT81x has an assigned PSTN Number.
Disabled: Use “SIP User ID” information in the Request-Line and “From” header.

User=Phone: “User=Phone” parameter will be attached to the Request-Line and “From” header in the SIP request to
indicate the E.164 number. If set to “Enable”.
Enabled: “Tel:” will be used instead of “sip:” in the SIP request.
Please consult your carrier before changing this parameter. Default is Disabled.
Use Request
Routing ID in
SIP INVITE
Header
If set to Yes, device will use the configured [Request URI Routing ID] in the SIP INVITE. This option is usually used
under a SIP trunk account’s configuration. Default is No.
SIP Registration Controls whether the HT81x needs to send REGISTER messages to the proxy server. Default setting is Yes.
Unregister on
Reboot
Controls whether to clear SIP user’s information by sending un-register request to the proxy server. The un-
registration is performed by sending a REGISTER message with “Expires=0” parameter to the SIP server. This will
unregister the SIP account under the concerned FXS page.Unregister on reboot option can be set to "No", "All" or
"Instance".
1. Set to "No": If the "Unregister on reboot" option is set to "No", it means that the SIP user's information will not
be cleared when the device reboots. In other words, the SIP account will remain registered with the server even
after the device is rebooted.
2. Set to "All": If the "Unregister on reboot" option is set to "All", it means that all SIP accounts associated with the
device will be unregistered when the device reboots. This option clears the SIP user's information for all the FXS
ports on the device.
3. Set to "Instance": If the "Unregister on reboot" option is set to "Instance", it means that only the SIP account
associated with the concerned FXS port will be unregistered when the device reboots. This option clears the SIP
user's information for only the specific FXS port that is affected by the reboot.
Default value is set to "No"
Outgoing Call
Without
Registration
Enables the ability to place outgoing calls even if the account is not registered (if allowed by ITSP); device will not be
able to receive incoming calls. Default is No.
Register
Expiration
Refreshes registration periodically with specified SIP proxy (in minutes). Maximum interval is 65535 minutes (about
45 days).
Default is 60 minutes (or 1 hour).
Reregister
Before
Expiration
Sends re-register request after specific time (in seconds) to renew registration before the previous registration expires.
SIP Registration
Failure Retry
Wait Time
Sends re-register request after specific time (in seconds) when registration process fails. Maximum interval is 3600
seconds (1 hour).
Default is 20 seconds.
SIP Registration
Failure Retry
Wait Time upon
403 Forbidden
Sends re-register request after specific time (in seconds) when registration process fails with error 403 Forbidden.
Maximum interval is 3600 seconds (1 hour). Default is 1200 seconds.
Port Voltage Off
upon no SIP
Registration or
SIP Registration
Failure
Delay Time of
Port Voltage Off
Timer Since
Boot
Allows users to configure the timer of Port Voltage Off.
For Port Voltage Off upon no SIP, the Valid Range is 0 to 60 with the Default value being 0 ( 0 means the port voltage
is never turned off )
Enable SIP
OPTIONS/NOTI
FY Keep Alive
Enables SIP OPTIONS or SIP NOTIFY to track account registration status so the ATA will send periodic
OPTIONS/NOTIFY message to server to track the connection status with the server.
Default setting is No.
SIP
OPTIONS/NOTI
FY Keep Alive
Interval
Configures the time interval when the ATA send OPTIONS or NOTIFY message to SIP server. The default setting is
30 seconds, which means the ATA will send an OPTIONS/NOTIFY message to the server every 30 seconds. The
default range is 1-64800.
SIP OPTIONS
Keep Alive Max
Lost
Defines the Number of max lost packets for SIP OPTIONS Keep Alive before re-registration. Between 3-10, default
is 3.
Layer 3 QoS
Defines Diff-Serv values for SIP and RTP.
SIP DSCP (Diff-Serv value in decimal, 0-63, default 26)
RTP DSCP (Diff-Serv value in decimal, 0-63, default 46)
Local SIP Port Defines local port to use by the HT81x for listening and transmitting SIP packets. Default value for FXS 1 is 5060 and
5062 for FXS 2.
Local RTP Port Defines the local RTP-RTCP port pair the HT81x will listen and transmit. It is the HT81x RTP port for channel 0.
The default value for FXS port is 5004
Use Random SIP
Port
Controls whether to use configured or random SIP ports. This is usually necessary when multiple HT81x are behind
the same NAT.
Default is No.
Use Random
RTP Port
Controls whether to use configured or random RTP ports. This is usually necessary when multiple HT81x are behind
the same NAT.
Default is No.