Dear Grandstream Customers,
Firmware 1.0.5.9 for GWN7052/7062 is now released as official. Here is the link to the release notes:
The firmware and release notes can be downloaded from:
Please contact us should you have any issues. Thank you for your support for Grandstream products.
Technical Support
Grandstream Networks, Inc.
I would like to suggest a safety improvement,
in the “Web WAN Port Access” parameter it is possible to enable remote access to the GWN7062,
but access would be allowed to all Public IPs, therefore zero security,
I think we should be able to add a parameter on the IPs entered in the ACL (perhaps a list of 5 public IPs allowed).
I’m trying Port Forwarding, but there is a problem, maybe I’m wrong but I don’t understand,
as per the screen below, if I leave the “Source IP Address” field blank, the connection is made correctly to UCM.
If, on the other hand, I enter the authorized Public IP, the connection fails (the Public IP of origin I have verified and it is correct). How to solve?
It is also possible to enter only one Public IP allowed, often it is necessary to enter several Public IPs allowed or a range of Public IPs allowed.
it seems to me that there is no possibility to see the “NAT session table” on the screen,
and a log on the connections.
I think you got it wrong. Source IP address is IP address of WAN port. You could have multiple addresses assigned by your service provider and GWN answers on one or all of them. If you omit IP address or use service as PPPoE router will use address configured on WAN port.
ACL would be configured in Traffic rules - Forwarding rules section of Firewall configuration.
It is a bit confusing. Maybe I’m wrong, I would have to do some tests to confirm this.
you are probably right, but if so it is done very badly, it would be enough to replace that parameter with WAN1 / WAN2 etc … based on which WAN it refers to,
moreover this setting is inherent to “anyone”, so for safety it will never be used, any computer scientist never opens a path to the whole world.
Actually the ACLs I saw are in “Advanced NAT” but I can’t manage it, it seems complex and too complex to create a rule, if by chance you know how to use “Advanced NAT” please give me a screenshot on a rule you created and that it works, I’ll take it as an example.
(you should create settings that help the installer, not that put him in trouble, the installer buys a certain product because it is stable, reliable and also “relatively simple”, otherwise the installer turns to the concurrent vendor).
hi @GSSupport74,
would it be possible to have answers to my questions?
thank you,
Damiano
Hi Damiano,
I did not follow this issue. Could you summarize this issue? Thanks for your testing!
Thank you!
Hello @GSSupport74
I wrote above the anomalies that I find, with screen and details, I do not know the GWN7000, so probably I am partly wrong to interpret the GWN7062.
Hi Damiano,
Thanks for your feedback! What fimware you are currently using? Please refer to the screenshot below for GWN7062:
Thank you!
hi @GSSupport74
-> “Enable Voice Enterprise”
sorry, I hadn’t seen the advanced tab
1 - I would like to suggest a safety improvement,
in the “Web WAN Port Access” parameter it is possible to enable remote access to the GWN7062,
but access would be allowed to all Public IPs, therefore zero security,
I think we should be able to add a parameter on the IPs entered in the ACL (perhaps a list of 5 public IPs allowed).
2 - I don’t know GWN7000 so for me GWN7062 is a new “router”, I would like to understand how to create a rule in ACL (so access from the outside must be possible only from 1 or more Public IPs,
honestly I did several tests on External Access / Port Forwarding (here I understood that a door can be opened but without the control of the Public IP of origin, so for safety it is not good), I then tried on “Traffic Rules” and on Advanced NAT "but unable to create the rule I need.
Can you help me through a screen to create an inbound rule enabled for only one Public IP?
(I opened a ticket but without “luck”, and the online manual doesn’t help)
3 - where is it possible to set the timeout after a WEB access?
4 - there is no QoS setting?
Dear user,
Thank you for your feedback! Please refer to the screenshots below:
For your 1st question, we suspected that this issue was generated by the network provider, the packets may be filtered by the network provider. We will consider this improvement in the future release. For the 2nd question, it should be a bug, and we will fix it in the future release. For your 3rd question, I have reported it to our development team and we need to analyze it internally. Thanks for your testing!
Thank you!
Dear user,
Thank you for your feedback! For the 3rd feature request, I have informed our development team to consider it in the future release. For the 4th request, we will add that setting in the future release. Thanks for your testing!
Thank you!
hi @GSSupport74,
in my view, when GWN7062 will handle QoS correctly, and it will be possible to create an inbound rule in ACL, we will be able to take it into consideration, now it is an immature product, but I like it as an idea.
Good Job.
Dear Damiano,
Thanks for your feedback! Your suggestions have been sent to our development team today and our development team will evaluate thsi feature request and add that setting in the future release. Thanks for your testing!
Thank you!
Can we get the ability to import a configuration file from another of same model?
Currently the config file will not import from another unit.
