Jump to content

Port Forwarding In China with a Huawei SmartAX MT800


madmanaenewman

Recommended Posts

Posted

I am located in Mainland China. I have an Huawei SmartAX MT800 connected to the phone line, then a Mercury MR804. I am downloading, but at slowish speeds and UTorrent (and PF PortChecker) reports that the port is not forwarded. I followed the guide for the Mercury (set IP to static, forward the port). I am pretty sure I did this correct even though the Mercury interface is in Chinese. I opened the port (6112) for "both" at the static ip address (192.168.1.50). After reading everything three of four times it seemed clear enough, so I doubt I made any mistakes.

I then removed the Mercury from the loop and signed into the Huawei SmartAX MT800. I had intermittent problems doing this. I am guessing (and likely showing my ignorance) that the ISP was somehow blocking access when I did this. I eventually succeeded, and I also found a guide to follow to forward the port here: http://www.zultrax.com/forward-port/huawei-smartax-mt800.htm. The trouble is, everything is in Chinese. However, even with my interpreter's help (who does not know computers well), none of the screens looked promising to either forward ports or provide a method of turning off any firewall features. I took screen images of the entire interface, but I do not know how to include them here. I will paste what I can at the end in the off chance that it helps. I find myself wondering if these are special ordered by the ISP to have a firewall that cannot be altered. I also tried the Glasnost test which reports as follows:

Is your upload traffic rate limited?

There is no indication that your ISP rate limits your uploads.

However, some of the measurements were affected by noise, which limits Glasnost ability to detect rate limiting.

Details:

* There is no indication that your ISP rate limits your BitTorrent uploads. In our tests, uploads using control flows achieved up to 283 Kbps while uploads using BitTorrent achieved up to 246 Kbps.

* There is no indication that your ISP rate limits uploads on port 6881 or 56305. In our tests, uploads on port 6881 achieved up to 246 Kbps while uploads on port 56305 achieved up to 236 Kbps.

Is your download traffic rate limited?

Your ISP appears to rate limit your downloads.

Details:

* Your ISP appears to rate limit your BitTorrent downloads. In our tests, downloads using control flows achieved up to 106 Kbps while downloads using BitTorrent achieved up to 161 Kbps.

* There is no indication that your ISP rate limits downloads on port 6881 or 56305. In our tests, downloads on port 6881 achieved up to 110 Kbps while downloads on port 56305 achieved up to 106 Kbps.

1) Am I correct to conclude that the ISP is not blocking anything? Am I further correct that the great firewall of China is not responsible for blocking anything? If so, then am I correct is blaming the Huawei?

2) Does anyone see anything promising in the Huawei interface?

3) Is it possible to flash (if that is the correct term...to reprogram in other words) the Huawei with something in English and something that I can forward ports on or turn off the firewall (assuming there is one)?

4) Perhaps a silly question, but do ISP's require a specific make and model modem or can I just buy a new modem that has the ability to do what needs to be done?

5) If I pay the $35 (or whatever it was), will PFConfig be able to somehow either disable the modem's firewall (or forward a port) or walk me through it?

Here is the interface text. I would be happy to provide the actual screen shots:

SmartAX MT800

状态信息

系统信息

业务信息

流量统计

基本配置

工具

系统信息

项目 描述

产品信息 SmartAX MT800

MAC地址 00:18:02:3B:D6:1D

软件版本 V100R001B013

固件版本 Y.1.61.4

发布日期 (2006-11-21)

批次编号 SCC1P1.013.Y1614

ADSL 描述

ADSL状态 激活

通道模式 快速

标准 G.dmt

激活速率 下/上行(kbps) 2048/512

噪声裕度 下/上行(dB) 27.0 dB/22.0 dB

环路衰减 下/上行(dB) 33.0 dB/16.5 dB

CRC 下/上行 2/0

FEC 下/上行 0/0

HEC 下/上行 0/0

版权 © 2005 保留所有权利.

业务信息

LAN接口

IP地址 子网掩码 MAC地址 速率 双工模式 状态

192.168.1.1 255.255.255.0 00:18:02:3B:D6:1D 100BT 全双工

WAN接口

PVC VPI/VCI IP地址 子网掩码 网关 连接方式 状态

PVC-0 8/32 0.0.0.0 0.0.0.0 0.0.0.0 桥接

PVC-1 0/35 0.0.0.0 0.0.0.0 0.0.0.0 桥接

PVC-2 1/39 0.0.0.0 0.0.0.0 0.0.0.0 RM

PVC-3 0/16 0.0.0.0 0.0.0.0 0.0.0.0 Ilmi

版权 © 2005 保留所有权利.

流量统计

流量方向 统计信息

ADSL发送 102292 数据包

ADSL接收 58213 数据包

LAN发送 77450 数据包

LAN接收 119665 数据包

版权 © 2005 保留所有权利.

SmartAX MT800

状态信息

基本配置

LAN配置

WAN配置

ADSL模式

工具

LAN配置

注意:在提交之后,如果没有显示网页,

请确认计算机的IP地址是否和终端LAN接口相同网段

LAN接口

IP地址 . . .

子网掩码 . . .

版权 © 2005 保留所有权利.

WAN配置

PVC

VPI/VCI IP地址 子网掩码 网关 连接方式 封装 状态

PVC-0 8/32 0.0.0.0 0.0.0.0 0.0.0.0 2684桥接 LLC

PVC-1 0/35 0.0.0.0 0.0.0.0 0.0.0.0 2684桥接 LLC

PVC-2 1/39 0.0.0.0 0.0.0.0 0.0.0.0 RM RM

PVC-3 0/16 0.0.0.0 0.0.0.0 0.0.0.0 Ilmi Ilmi

版权 © 2005 保留所有权利.

ADSL模式

注意:更改模式后,请至保存复位页面,

保存并重新启动,设定才会生效

项目

描述

标准

版权 © 2005 保留所有权利.

SmartAX MT800

状态信息

基本配置

工具

诊断测试

保存复位

系统管理

软件升级

诊断测试

项目

描述

PVC

终端连接测试

以太网连接测试 -----

ADSL线路测试 -----

以太网和ADSL间连接测试 -----

ATM连接测试

ATM OAM分段测试 -----

ATM OAM端到端测试 -----

版权 © 2005 保留所有权利.

保存复位

操作

保存 重启 恢复出厂默认配置

版权 © 2005 保留所有权利.

系统管理

用户名

权限 操作

admin 管理员

点击 '新建' 以创建新用户

版权 © 2005 保留所有权利.

软件升级

项目

描述

软件版本 V100R001B013

发布日期 (2006-11-21)

请选择升级软件

升级新软件

请勿中断此升级程序, 系统将会重启. 请开新的网页继续使用.

Many thanks for a great site and for any help you might offer.

Posted

1) Your ISP might be blocking/throttling, it might not. The Great Firewall of China is probably screwing with speeds/connections of international peers+seeds. Glasnost is not a reliable test, because ISPs know ways to confuse/fake it. Check Chinese message forums about ISP throttling/disruption/blocking in your area. And/or it could be the Huawei at fault.

2) No, I don't even have extended character font sets installed in Win XP...not that I could read it even if I did.

3) I don't know, and it'd probably be slightly risky to attempt. If it fails in the middle of flashing, it can render the modem or router useless. (Some models can be reset to factory settings if/when that happens, but good luck figuring out how to do that!)

4) ISPs often have strict limitations about what modems they support. You should ask them.

5) Possibly not...and there's no guarantees you're not firewalled simply because you don't have a unique internet ip address. Many smaller ISPs in Asia give out only LAN ips to customers, unless they pay (a LOT) extra.

Posted

Thank you for your timely answer.

I translated the Chinese interface, and will give that at the end. In the instructions I found for port forwarding specifically the MT800 it talks about going to "other settings", Choosing the NAT menu, clicking "Add", and entering data into a page entitled "NAT Rule - Add" (rule type = redirect, Protocol = any, local IP = the one we want, etc...). I do not see anything like this on the Chinese version. I went to the huawei website and saw several relevant questions. The person who wanted an English version of his Chinese unit was told to contact his ISP. The person who wanted to do port forwarding was told:

"Firstly you must ensure your MT800 support routing mode and there's NAT setting in your modem's web-based management. If you confirm it you can configure the ports forwarding follow the guidance described as below:

log in the MT800 through web-based management , enter the NAT menu, add a new rule named "REDIRECT" ,what you need to do is to input the private IP Address and TCP/UDP ports."

I saw a lot of evasive answers to many questions and it caused me to tentatively conclude that the modems are programmed according to their customer's specific requirements and that they do not dare give the actual users of these products any ability to upgrade. My guess is that the modem is perfectly capable of port forwarding but that the ISP specified that they wanted this functionality suppressed in the units they purchased to give to their customers.

1) Have I read between the lines accurately?

2) Is there any way of getting around this? For example, can one send instructions to the modem some other way, or can one find a different version of the software online?

Here is the english translation of the interface:

First Big Heading: Status Information

Screen A, System Information

lists Product (MT800), Mac Address, Software Version, Firmware Version, Release Date, Batch number, ADSL Status (active), Fast Channel Mode (rapid), Standard (G.dmt), Activation Rate/Uplink (2048/512), noise margin down/upstream (27.0 dB/22.0 dB), loop attenuation down/uplink (33.0 dB/16.5 dB), CRC Down/upstream (2/0), FEC Down/upstream (0/0), HEC Down/upstream (0/0).

Screen B, Business Information

LAN Interface: IP address (192.168.1.1) subnet mask (255.255.255.0) MAC address (00:18:02:3B:D6:1D), speed 100BT, duplex mode full-duplex

WAN Interface

PVC (shows PVC-0 through PVC-3), VPI/VCI (8/32;0/35;1/39;0/16), IP Address, subnet mask and gateway (these three columns all zeros), Connection (Bridged; Bridged; RM; Ilmi) and status (all checked)

Screen C, Traffic Statistics (lists ADSL and LAN packets sent and received)

Second Big Heading: Basic Configuration

Screen A: LAN Configuration

Note: After submission, if not display the page,

Make sure the computer's IP address is similar screen and the terminal section of LAN interfaces

LAN Interface (can change these)

IP Address...(192.168.168.1)

Subnet Mask...(255.255.255.0)

Screen B: WAN Configuration

gives the ability to change what was earlier displayed, ie, PVC-0 through PVC-3

Screen C: ADSL

ADSL Mode

Note: Changing the mode, please reset the page to save,

Save and restart, set to take effect

Project

Description

Standard

Third and final Big Heading: Tools

Screen A: Diagnostic Test

has a drop down menu for PVC, followed by the following tests:

Terminal Connection Test

Ethernet connectivity test

ADSL line test

Connection between the Ethernet and ADSL testing

ATM Connection Test

Testing ATM OAM segment

ATM OAM end to end test

Screen B:Save Reset

Gives three Operations, being: Save, reboot, or restore the factory default configuration

Screen C is System Management. It gives the ability to add new users. It currently has "admin" with administrative privileges.

Screen D: Software upgrade

Project

Description

Software Version V100R001B013

Release Date (2006-11-21)

Please select the software upgrade

New software upgrade

Do not interrupt the upgrade process, the system will reboot. Please continue to use to open a new page

Posted

1) Probably

2) Not if they don't want you to.

"LAN Interface: IP address (192.168.1.1) subnet mask (255.255.255.0)"

Looks like the modem-router definitely has the router side active. Bridge mode might help, if you have a router you can hook to it.

If your ISP has locked you out of configuring the routing of the modem-router, about your only chance is to replace it with a modem + router of your own. I strongly suggest getting a separate modem and router if you do that.

Did you check "local" message boards/forums for details about that ISP's allowed modem types and configuring the modems that come with it?

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...