Understanding the settings of the ZTE ZXHN F670L AC1200 Wi-Fi 5 GPON Optical Network Terminal (ONT)

The ZTE ZXHN F670L is a dual-band AC1200 Wi-Fi 5 GPON Optical Network Terminal (ONT) / home gateway designed for Fiber-to-the-Home (FTTH) deployments. It functions as a triple-play device, delivering high-speed internet, VoIP telephony, and wireless connectivity in a single unit for residential or small-office use.

Product Overview

ZTE positions the ZXHN F670L as an entry-to-mid-level AC1200 dual-band Gigabit Premium GPON gateway. It terminates a GPON fiber connection (typically 2.488 Gbps downstream / 1.244 Gbps upstream per ITU-T G.984 standards) and distributes services over Ethernet, Wi-Fi, and a phone port. It is widely deployed by internet service providers (ISPs) globally and is also available as aftermarket units (often with English firmware).

Key strengths include dual-band concurrent Wi-Fi up to ~1.2 Gbps, flexible ISP management options, and reliability features such as dual firmware images. It supports modes like router, bridge, and access point.

Key Technical Specifications

Specifications can vary slightly by hardware revision (e.g., V1.1 vs. V9.0) and ISP customization. The following draws primarily from official product parameters and datasheets:

Category	Details
WAN / Optical	GPON (SC/APC or SC/UPC connector); Downstream ~2.488 Gbps, Upstream ~1.244 Gbps; Wavelengths: 1490 nm down / 1310 nm up; Sensitivity typically -28 dBm
LAN Ports	4 × Gigabit Ethernet (GE) RJ-45 (some variants listed as mixed GE/FE)
Voice	1 × FXS / POTS (RJ-11) for VoIP (SIP, codecs including G.711, G.729, G.722; features like call waiting, forwarding, 3-way conference)
USB	1 × USB 2.0 (some listings show 2); supports file/printer sharing, DLNA, config backup
Wi-Fi	Dual-band concurrent: 2×2 802.11b/g/n @ 2.4 GHz (~300 Mbps) + 2×2 802.11a/n/ac @ 5 GHz (~866 Mbps) = up to 1.2 Gbps; External antennas (often 2 or 4 × 5 dBi); Band steering, beamforming (5 GHz), up to 4 SSIDs per band; WPA/WPA2
Buttons	Wi-Fi, WPS, Reset, Power On/Off
LEDs	Power, PON, LOS, Internet, LAN1–4, Phone/TEL, Wi-Fi, WPS, USB
Power	12 V DC, 1.0–1.5 A adapter; Consumption ~6–9 W
Dimensions	Approx. 210 × 130 × 35 mm (varies by version; some ~205 × 120 × 28 mm or larger)
Weight	~200–350 g
Environment	Operating 0°C to +40°C (some to 45°C or -5°C); Humidity 5–95% non-condensing
Memory	Reported 256 MB RAM / 128 MB Flash in some datasheets
Management	Full OMCI (ITU-T G.988), TR-069 (BBF TR-142), local Web GUI; Remote upgrade, logs/statistics
Networking	IPv4/IPv6 dual stack, NAT, DHCP server/client, VLAN (802.1Q/p/ad), QoS (queues, SP/WRR, WMM), IGMP/MLD, static/dynamic routing, VPN passthrough
Certifications	CE, Wi-Fi

Features and Highlights

• Ultimate Wi-Fi Experience: Concurrent dual-band operation supports multiple HD video streams, gaming, and browsing. Band steering and smart roaming help optimize client connections and Quality of Service (QoS).
• Flexible Management: Service providers can use pure OMCI, or OMCI + TR-069. Local web interface allows end-user configuration of SSIDs, security, and basic settings (ISP firmware often restricts advanced options).
• High Reliability: Dual firmware images enable safer upgrades without service interruption. Heat dissipation design and lightning/surge protection (up to 6 kV on the adapter in some descriptions) support stable operation.
• Mature IPv6 and Multi-Play: Full dual-stack support aids future-proofing. QoS prioritizes voice, IPTV, and data. USB enables media sharing.
• GPON Details: Supports multiple T-CONTs and GEM ports; compatible with major OLTs (ZTE, Huawei, Nokia, etc.).

Hardware Versions and Variants

• V1.1 / Earlier: Mature hardware; still common.
• V8.0 / V9.0: Updated chipsets (CPU and Wi-Fi), often preferred for newer deployments; minor differences in power draw, dimensions, antenna count, and web interface.
• Port and antenna variations appear across resellers (e.g., 4GE vs. mixed ports; 2 vs. 4 antennas). English-firmware “unlocked” or neutral units are popular in secondary markets (priced roughly $10–30).

Some ISP-locked versions limit features such as bridge mode or firmware changes.

Setup, Login, and Configuration

1. Connect the fiber to the PON port, power adapter, and devices via LAN or Wi-Fi.
2. Access the web interface at the common gateway http://192.168.1.1 (confirm via your device’s default gateway if different).
3. Credentials are not universal—they depend on the ISP firmware and are often printed on the device label. Common pairs include admin/admin, user/user, or ISP-specific ones (e.g., involving “Web@0063”). Factory reset (hold the reset button ~10 seconds) restores defaults if accessible.
4. Typical tasks: Change Wi-Fi SSID/password, enable band steering, configure WAN (PPPoE or DHCP, often pre-provisioned by the ISP via OMCI/TR-069), port binding (some units dedicate a LAN port to IPTV by default), and basic firewall/QoS.

ISPs usually handle initial provisioning remotely. End users can often adjust Wi-Fi and basic settings; advanced options may require super-admin access or ISP support.

User Experiences and Common Feedback

• Strengths: Reliable fiber termination, solid for ISP-provided triple-play service, good value in secondary markets, and adequate for typical home speeds (hundreds of Mbps). Many resellers and users report high satisfaction for basic connectivity.
• Weaknesses: Wi-Fi range and consistency draw mixed comments—some users report weaker 5 GHz coverage or intermittent connection issues compared with higher-end routers. Performance can depend on antenna placement, environment, and firmware. ISP locks frustrate advanced users wanting bridge mode or custom configs.
• Overall, it is viewed as a capable, cost-effective ONT rather than a premium consumer router. Wired Gigabit performance is strong when all ports are true GE.

Summary

The ZTE ZXHN F670L is a widely deployed, reliable AC1200 dual-band GPON ONT well-suited for standard FTTH internet + voice + Wi-Fi needs. Its strengths lie in standardized management, dual-image reliability, and concurrent dual-band Wi-Fi rather than cutting-edge wireless performance. Exact behavior depends heavily on the specific hardware revision and ISP firmware—check the device label and provider documentation for your unit.

Internet page

1. Status

1.1) PON Information Page

This page displays real-time status of the optical module that connects the ONU/ONT to the ISP’s GPON fiber network. It is diagnostic only (read-only in normal user views). Click Refresh to update the readings.

Parameter	Value	Meaning and Typical Healthy Range
ONU state	Operation State (o5)	GPON activation state. O5 means the device has completed discovery, serial-number exchange, ranging (timing equalization), and is in full operational mode with the OLT. It can send and receive PON traffic. This is the normal, desired state.
Optical Module Input Power (dBm)	-21.9382	Received (downstream/RX) optical power from the OLT at 1490 nm. For common GPON Class B+ modules the acceptable window is roughly -8 dBm to -27/-28 dBm. Ideal operational range for most links is about -15 to -25 dBm. Your reading is solidly healthy with good margin.
Optical Module Output Power (dBm)	2.6164	Transmitted (upstream/TX) optical power toward the OLT at 1310 nm. Typical ONU TX range is approximately +0.5 dBm to +5 dBm. Your value is normal.
Optical Module Supply Voltage (mV)	3237	Internal supply voltage to the optical transceiver (nominal ~3.3 V / 3300 mV). 3.237 V is within normal tolerance.
Optical Transmitter Bias Current (mA)	14.25	Current driving the laser diode for upstream transmission. Values in the low-to-mid teens of milliamps are typical for these modules.
Operating Temperature of the Optical Module (°C)	43.089	Internal temperature of the optical module. Most ZTE F670L units are rated for roughly 0–40 °C ambient; module temperatures in the 40s are common under load. Ensure the router has airflow and is not enclosed in a hot cabinet.

1.2) Overview of the WAN Status Page

This page lists every WAN connection the router has defined. Each connection can serve a different purpose (internet, VoIP, remote management, bridging, etc.). The values shown are the current live status after the last refresh.

Field	Meaning
Connection Name	The label of the WAN service (set by the ISP or in the WAN configuration page).
Type	How the connection is established: Static (manually assigned IP), PPPoE (username/password dial-up), DHCP, or Bridge.
IP Version	IPv4 only, IPv6 only, or dual-stack (IPv4/v6).
NAT	Network Address Translation. On means private LAN devices share the public IP (normal for internet). Off means the connection is used in a more transparent/bridged fashion (common for VoIP or management).
IP Address	The IPv4 address currently assigned to this WAN, followed by the subnet mask.
DNS	DNS servers received or configured for this connection (IPv4). Zeros mean none are set or the connection is inactive.
IPv4 Gateway	The next-hop router used to reach the internet or the ISP network.
IPv4 Connection Status	Connected / Disconnected.
Disconnect Reason	Why the link is down (e.g., “WAN Connection Disabled”, authentication failure, etc.). “None” means it is up or was cleanly disconnected.
WAN MAC	The MAC address the router is using on this particular WAN interface.
IPv4 Online Duration	How long the IPv4 session has been continuously up.
LLA	Link-Local Address (IPv6). Always starts with fe80:: and is used only on the local link.
GUA	Global Unicast Address (public IPv6 address).
DNS (IPv6 section)	IPv6 DNS servers.
IPv6 Connection Status	Connected / Disconnected for the IPv6 side.
IPv6 Online Duration	How long the IPv6 session has been up.

2. Internet → WAN configuration page

Common Fields Explained (Appear on Most Connections)

Field	Meaning
Connection Name	Friendly name of the WAN service (e.g., WAN-VOIP, Static, WAN-TR069_INTERNET, Bridge).
Type	Routing = the ONT performs routing/NAT. Bridge Connection = pure layer-2 bridge (no routing by the ONT).
Service List	What the connection is used for: VoIP (phone), INTERNET_TR069 (internet + remote management), INTERNET, TR069, IPTV, etc.
MTU	Maximum Transmission Unit (packet size). Common values: 1500 (standard Ethernet), 1480 or 1492 (PPPoE).
Link Type	IP = plain IP connection. PPP = uses PPP encapsulation (required for PPPoE).
IP Version	IPv4, IPv6, or IPv4/v6 (dual-stack).
IP Type	Static (manual IP) or DHCP (automatic).
IP Address / Subnet Mask / Gateway / DNS1–3	IPv4 addressing details. Zeros in DNS usually mean “not used” or “obtain automatically.”
NAT	On = Network Address Translation is enabled (normal for internet so many LAN devices share one public IP). Off = no translation (common for VoIP or pure bridge).
VLAN	On/Off — whether 802.1Q VLAN tagging is applied.
VLAN ID	The VLAN number the ISP expects (e.g., 660 for voice, 100 for internet).
802.1p	Priority (QoS) value 0–7. 0 is the lowest/default priority.

3. Internet → Security

3.1 Firewall

Firewall Section

Setting	Current Value	Meaning
Enable	Checked (On)	Turns the router’s firewall on or off. When enabled, the device filters traffic between the internet (WAN) and your local network (LAN) according to the chosen level and any custom rules.
Firewall Level	Middle (Recommended)	Controls how strict the firewall is. • High — Most restrictive. Blocks more incoming and sometimes outgoing traffic. Can interfere with online games, certain apps, VoIP, or remote access. • Middle (Recommended) — Balanced protection. Blocks unsolicited incoming connections while allowing normal internet use. This is the setting most home users should keep. • Low — Least restrictive. Allows more traffic through and offers weaker protection.

Anti-DoS Attack → Anti-hacking

Setting	Current Value	Meaning
Enable	Checked (On)	Activates protection against denial-of-service / flooding attacks aimed at the router itself.
Threshold	60	Maximum number of TCP or UDP connection attempts allowed from a single host on the internet (WAN) to the router (CPE) every 3 seconds. If this limit is exceeded, the router treats the traffic as an attack and drops further packets from that source.

2. Filter Criteria page

Filter Switch And Mode Configuration

This section turns the three types of filters on or off and sets their operating mode.

Setting	Current Value	Meaning
MAC Filter	Off	Controls whether filtering by device MAC address is active. When Off, no MAC-based rules are enforced.
Mode (MAC Filter)	Black List	Defines the logic when the filter is turned On. • Black List — Devices/addresses you add are blocked; everything else is allowed. • White List — Only the devices/addresses you add are allowed; everything else is blocked.
URL Filter	Off	Controls whether website/URL blocking is active.
Mode (URL Filter)	Black List	Same logic as above: Black List blocks the URLs you add; White List allows only the URLs you add.

IP Filter

Used to create rules that allow or block traffic based on IP addresses, ports, and protocols.

Field	Meaning
New Item (On/Off)	Enables or disables the individual rule you are creating.
Name	A descriptive label for the rule (e.g., “Block Game Server”).
Target	Allow = permit matching traffic. Discard = drop/block matching traffic.
Order	Priority of the rule (lower numbers are evaluated first).
IP Version	Any, IPv4, or IPv6 — which address family the rule applies to.
Source IP	The originating IP address (or range). The second box is usually for the prefix length or mask.
Destination IP	The target IP address (or range).
Protocol	TCP, UDP, ICMP, or Any.
Ingress	Interface where the traffic enters the router (e.g., WAN, LAN, or Any).
Egress	Interface where the traffic leaves the router.
DSCP	Differentiated Services Code Point — used for QoS marking (optional; leave blank for normal use).

MAC Filter

Filters traffic based on the hardware (MAC) address of devices.

Field	Meaning
Name	Label for the rule.
Type	Routing — applies to routed traffic. Other options (if present) may include bridge mode.
Protocol	Any, or a specific protocol the rule should match.
Source MAC Address	The MAC address of the device to allow or block. You can type it manually or click “Select from the associated devices” to pick a currently connected device.

This filter only takes effect when the main MAC Filter switch above is set to On.

URL Filter

Blocks or allows access to specific websites.

Field	Meaning
Name	Label for the rule.
URL	The website address or keyword to match (e.g., example.com or a partial string).

This filter only takes effect when the main URL Filter switch above is set to On.

How the Modes Work in Practice

• Black List mode (current setting for both MAC and URL filters):
  Add the items you want to block. Everything not listed is allowed.
• White List mode:
  Add the items you want to allow. Everything not listed is blocked. This is more restrictive and is sometimes used for parental controls or locked-down networks.

3. Local Service Control page

This page controls which management and diagnostic services (web interface, FTP, ping, etc.) can be reached from the internet (WAN) or local network, and which ports those services use.

Service Control – IPv4

Creates rules that allow or block specific services based on source IP range and direction.

Field	Meaning
New Item (On/Off)	Enables or disables the individual rule.
Name	Descriptive label for the rule.
Target	Allow = permit the selected services. Discard = block them.
Ingress	Direction the traffic arrives from. Common options: WAN (from the internet) or LAN (from your local network).
IP Range	Source IP range the rule applies to (start ~ end). 0.0.0.0 ~ 0.0.0.0 usually means “any.”
Service Type	Which services the rule covers: • HTTP — web interface on port 80 • FTP — file transfer on port 21 • HTTPS — secure web interface on port 443 • PING — ICMP echo requests (used for connectivity testing)

Click Create New Item to add more rules. Use the trash icon to delete a rule.

Service Control – IPv6

Same purpose as the IPv4 section, but for IPv6 traffic.

Field	Meaning
New Item (On/Off)	Enables or disables the rule.
Name	Label for the rule.
Target	Allow or Discard.
Ingress	WAN or LAN.
Prefix	IPv6 source prefix (address + prefix length).
Service Type	HTTP, HTTPS, or PING.

Remote Service Port Control – IPv4

Sets the TCP ports the router listens on for remote (WAN-side) management services. Changing these ports can reduce the chance of automated scans finding the default ports, but you must remember the new ports when connecting from outside.

Service	Default Port	Meaning
HTTP	80	Port for the unencrypted web management interface.
FTP	21	Port for FTP file access (rarely used on home routers).
TELNET	23	Port for Telnet remote command-line access (insecure; usually left disabled).
HTTPS	443	Port for the encrypted (secure) web management interface.

After changing any port, click Apply. You will then need to include the new port in the browser address (e.g., https://your-public-ip:8443).

Practical Notes

• By default, most ZTE ONTs block or heavily restrict WAN access to the management interface for security. Rules under Service Control are used when an ISP or advanced user wants to allow remote login from specific IPs.
• Leaving Service Control rules Off (as shown) is the safer everyday setting.
• Changing the remote service ports is optional and mainly useful if you intentionally enable remote management.
• Always prefer HTTPS over HTTP or Telnet if remote access is required.

4. ALG page

What ALG Does

ALG (Application Layer Gateway) is a feature that inspects and modifies certain application protocols so they work correctly through NAT (Network Address Translation). Some protocols embed IP addresses or port numbers inside the data payload; without an ALG the router’s NAT would break those connections. Enabling the relevant ALG lets the router rewrite those embedded addresses so the application continues to function.

All ALGs are currently set to Off, which is common and fine for most modern applications (many no longer need ALGs).

Individual ALG Settings

Setting	Meaning and Typical Use
FTP ALG	Helps active-mode FTP work through NAT by rewriting the IP/port information in the FTP control channel. Needed only if you use classic FTP clients in active mode. Passive FTP usually works without it.
H323 ALG	Supports H.323 multimedia and video-conferencing protocols (older VoIP/video systems). Rarely required today.
PPTP ALG	Assists PPTP VPN connections by handling the GRE protocol and control channel. Enable only if you use a PPTP VPN and it fails to connect.
RTSP ALG	Helps Real Time Streaming Protocol (used by some older media players and IPTV clients) work through NAT.
SIP ALG	Supports SIP-based VoIP by rewriting SIP signaling messages. Many modern SIP providers recommend disabling SIP ALG because it can cause one-way audio or registration problems.
TFTP ALG	Assists Trivial File Transfer Protocol (often used for firmware upgrades or network booting). Needed only for specific TFTP applications.

5. DMZ-IPv4 Section

DMZ (Demilitarized Zone) forwards all unsolicited incoming traffic from the internet to one specific device on your local network. It is a broad form of port forwarding that opens essentially every port to the chosen host.

Setting	Meaning
DMZ	Master switch. When On, all incoming connections that are not already handled by other rules are sent to the selected LAN host. When Off (current state), DMZ is inactive.
WAN Connection	Chooses which WAN interface the DMZ applies to. Auto lets the router pick the main internet connection. You can also select a specific WAN (e.g., the PPPoE internet connection) if you have multiple.
LAN Host	The local IP address of the device that will receive all forwarded traffic. You can type the IP manually or click “Select from the associated devices” to choose a currently connected computer, console, camera, etc.

Important Considerations

• Security risk: Enabling DMZ exposes the selected device directly to the internet. Any vulnerability on that device becomes reachable from outside. Use it only when necessary (for example, certain games, servers, or devices that require many open ports) and only on a trusted host.
• Preferred alternative: For most needs, use Port Forwarding (the next tab) to open only the specific ports required instead of everything.
• Current status: DMZ is Off, which is the recommended and safest default for normal home use.
• After enabling and choosing a LAN host, click Apply for the change to take effect. The device must have a fixed local IP (DHCP reservation or static IP) so the rule remains reliable.

6. Port Forwarding page

Port Forwarding Overview

Port Forwarding lets you open specific ports on the router so that incoming traffic from the internet is directed to a particular device on your local network. It is more precise and safer than DMZ because only the ports you choose are exposed.

Fields in a Port Forwarding Rule

Field	Meaning
New Item (On/Off)	Turns this individual rule on or off. Set to On for the rule to be active.
Name	A descriptive label for the rule (e.g., “Game Server”, “Camera”, “Remote Desktop”). Required.
Protocol	The type of traffic to forward. • TCP — reliable, connection-oriented (web, most apps) • UDP — faster, connectionless (games, streaming, DNS) • TCP/UDP or Both — forwards both protocols on the same ports
WAN Connection	Which internet connection the rule applies to. Auto uses the main internet WAN; you can also pick a specific one if you have multiple.
WAN Host IP Address	Restricts the rule so it only accepts traffic from a specific external IP range. Leave as 0.0.0.0 ~ 0.0.0.0 to allow any source on the internet.
LAN Host	The local IP address of the device that should receive the forwarded traffic (e.g., 192.168.1.50). The device should have a fixed IP (DHCP reservation or static).
WAN Port	The external port (or port range) that the internet will use to reach you. Format: start port ~ end port. For a single port, enter the same number in both boxes (e.g., 25565 ~ 25565).
LAN Host Port	The internal port (or range) on the LAN device. Often the same as the WAN port, but can be different if you want to remap the port.

How to Use It

1. Click Create New Item if you need another rule.
2. Fill in the fields above.
3. Set New Item to On.
4. Click Apply.

Tips and Warnings

• Only open the ports you actually need. Every open port increases the attack surface.
• Prefer Port Forwarding over DMZ whenever possible.
• The target device must be powered on and listening on the specified LAN port.
• Some applications also require the device’s firewall to allow the traffic.
• The link “What should be noticed when configuring port forwarding?” usually reminds you that the LAN host should have a static IP and that conflicting rules can cause problems.

7. Port Trigger page

What Port Trigger Does

Port Trigger (also called Port Triggering) is a dynamic form of port forwarding. Instead of keeping ports open all the time, the router watches for outgoing traffic on a specific “trigger” port. When that traffic is detected, it temporarily opens a defined range of incoming ports. After a timeout with no activity, the ports close again. This is more secure than static port forwarding for applications that only need open ports occasionally (certain games, VoIP clients, peer-to-peer apps).

Custom Rule Fields (New Item)

Field	Meaning
New Item (On/Off)	Enables or disables this custom trigger rule.
Name	Descriptive label for the rule (required).
Trigger IP Address	The local IP of the device that will send the trigger traffic. 0.0.0.0 means any LAN device.
Service Type	Protocol of the outgoing trigger traffic (TCP or UDP).
Trigger Port	The outgoing port (or port the application uses) that activates the rule. When the router sees traffic leaving on this port, it opens the WAN ports below.
Connect Type	Protocol of the incoming ports that will be opened (TCP or UDP).
WAN Port Range	The external ports that are temporarily opened when the trigger fires (start ~ end).
Timeout	How long (in seconds) the ports stay open after the last matching activity. Default shown is 1200 s (20 minutes).

How It Works (Example)

1. A game on your PC sends a packet out on the Trigger Port.
2. The router detects it and opens the WAN Port Range for the duration of the Timeout.
3. Incoming traffic on those ports is forwarded to the device.
4. If no further trigger traffic is seen before the timeout expires, the ports close automatically.

When to Use Port Trigger vs Port Forwarding

• Port Trigger — Better when the application initiates the connection and only needs ports open temporarily.
• Port Forwarding — Better when a server or device must be reachable at any time (cameras, game servers, remote desktop).

Internet → Parental Controls page

What Parental Controls Do

This page lets you create time-based rules that restrict internet access for specific devices. Rules are identified by the device’s MAC address (User Identity) and can block internet during chosen days and hours.

Fields in a Parental Control Rule

Field	Meaning
New Item (On/Off)	Master switch for this individual rule. Set to On for the restriction to take effect.
Name	A descriptive label for the rule (e.g., “Kids Tablet”, “Homework Time”).
User Identity	The MAC address of the device you want to control. You can type the six pairs manually or click “Select from the associated devices” to pick a currently connected device.
Time Policy → Days	Which days the rule applies. • Check Everyday for all seven days, or • Select individual days (Sun.–Sat.).
Duration	The time window during which the action is enforced. Format: start hour:minute ~ end hour:minute. The example shows 00:00 ~ 23:59 (All Day). You can set narrower windows such as 21:00 ~ 07:00 for bedtime blocking.
Action	What happens during the selected time window. The visible option is Ban Internet Access (blocks all internet traffic for that device while the rule is active).

How to Create a Rule

1. Click Create New Item if you need a new blank rule.
2. Give it a Name.
3. Enter or select the device’s User Identity (MAC address).
4. Choose the Days and Duration.
5. Confirm the Action (Ban Internet Access).
6. Set New Item to On.
7. Click Apply.

Tips

• The controlled device must stay connected long enough for its MAC address to appear in the “associated devices” list, or you can look up the MAC in the device’s network settings.
• Rules are evaluated by MAC address, so they continue to work even if the device’s IP address changes.
• You can create multiple rules for different devices or different time windows.
• To temporarily disable a restriction, set that item’s switch to Off or delete the rule with the trash icon.

Internet → DDNS page

What DDNS Does

DDNS (Dynamic Domain Name System) lets you reach your home network using a fixed hostname (for example myhome.dyndns.org) even when your public IP address changes. The router periodically tells a DDNS provider your current public IP so the hostname always points to the right address. This is useful for remote access to cameras, NAS devices, or home servers.

Settings Explained

Setting	Meaning
WAN Connection	Chooses which WAN interface’s public IP address is registered with the DDNS provider. Auto uses the main internet connection. You can also select a specific WAN if you have more than one.
Provider	Selects the DDNS service. Common options include DynDNS, No-IP, and others supported by the firmware. The choice determines the server the router contacts.
DDNS	Master switch. When On, the router starts updating the DDNS provider. When Off (current state), no updates are sent.
Provider URL	The update server address for the selected provider. This field is usually filled automatically when you choose a provider and is rarely edited.
Username	The account username you registered with the DDNS provider.
Password	The account password for the DDNS provider.
Host Name	The hostname you created at the provider (e.g., myhome.dyndns.org). This is the name you will use to reach your network.

How to Enable DDNS

1. Create a free or paid account at the chosen provider (DynDNS or another supported service) and register a hostname.
2. Select the Provider.
3. Enter your Username, Password, and Host Name.
4. Set DDNS to On.
5. Click Apply.

Notes

• Many modern ISPs use CGNAT (Carrier-Grade NAT), which means your router does not receive a true public IP. In that case DDNS alone will not allow inbound connections; you would also need the ISP to provide a public IP or use a VPN/tunnel service.
• After enabling, the router will update the provider whenever the WAN IP changes and at regular intervals.
• Keep your DDNS password secure; anyone with it can update your hostname.

Internet → SNTP page

What SNTP Does

SNTP (Simple Network Time Protocol) keeps the router’s internal clock accurate by synchronizing it with internet time servers. Correct time is important for logs, scheduled rules (parental controls, firewall), certificates, and some VoIP features.

Settings Explained

Setting	Meaning
Current Date And Time	Read-only display of the router’s present date and time (shown in the selected time zone).
Time Zone	Sets the local time zone. The router applies the correct offset from UTC and handles daylight-saving rules if the selected zone uses them.
Primary NTP Server	The first time server the router contacts. The Asia NTP pool is a good choice for users in the GMT+8 region.
Secondary NTP Server	Backup time server used if the primary server is unreachable.
Poll Interval	How often (in seconds) the router re-synchronizes its clock. 86400 seconds = 24 hours, which is a normal and efficient interval.
DSCP	Optional Differentiated Services Code Point value that marks the NTP packets for Quality of Service. Leave blank for normal priority; only set a value if your network specifically requires QoS marking for NTP traffic.

Internet → Port Binding page

What Port Binding Does

Port Binding assigns specific LAN ports and Wi-Fi SSIDs to particular WAN connections. Traffic from a bound port or SSID is forced to use only the selected WAN. This is useful when you have multiple WAN services (internet, IPTV, VoIP, a secondary connection, etc.) and want certain devices to use a specific one.

Layout of the Page

Each WAN connection appears as its own expandable section. Under every WAN you see checkboxes for:

• LAN1 – LAN4 (the four Ethernet ports)
• SSID1 – SSID8 (the wireless networks)

Checking a box binds that port or SSID to the WAN.
All On / All Off quickly selects or clears every checkbox in that section.
Click Apply under each section to save its bindings.

How Binding Works in Practice

• A device connected to a bound port/SSID will have its traffic routed through the corresponding WAN.
• If a port is not bound to any WAN, it typically follows the default route (usually the main internet WAN).
• Binding is evaluated per interface; a single port is normally bound to only one WAN at a time.

Internet → Dynamic Routing page

What Dynamic Routing Does

Dynamic routing protocols allow routers to automatically exchange network reachability information and update their routing tables. On a typical home GPON ONT these features are almost never needed, because the ISP handles all routing and the device simply uses a default gateway.

RIP Section (Routing Information Protocol – IPv4)

Setting	Current Value	Meaning
RIP	Off	Master switch for the RIP protocol. When On, the router advertises and learns IPv4 routes from other RIP-enabled routers on the local network.
RIP Version	RIP v2	Chooses the protocol version. • RIP v1 — older, classful, no authentication support. • RIP v2 — classless (supports subnet masks), multicast updates, and optional authentication. RIP v2 is the preferred choice if you ever enable RIP.
Authentication Type	None	How RIP updates are authenticated. • None — no authentication (updates are accepted from any neighbor). • Other options (if available) usually include simple password or MD5. Only relevant when RIP is turned On.

RIPng Section (RIP next generation – IPv6)

Setting	Current Value	Meaning
RIPng	Off	Master switch for the IPv6 version of RIP (RIPng). When On, the router exchanges IPv6 routes with other RIPng routers.

Internet → Multicast pages

Multicast is used mainly for IPTV and other one-to-many streams. These settings control how the router handles multicast traffic so that video streams are delivered efficiently only to devices that request them.

Multicast Mode Tab

Setting	Current Value	Meaning
Multicast Mode	Snooping	Chooses how the router processes multicast traffic. • Snooping — The router listens to IGMP/MLD join/leave messages and forwards multicast streams only to the ports/devices that requested them. This is the recommended and most common setting for home IPTV. • Other modes (if available in the dropdown) may include Proxy or Disabled. Proxy makes the router act as a multicast proxy; Disabled turns multicast handling off.

IGMP Tab (Internet Group Management Protocol – IPv4)

Setting	Meaning
WAN Connection	Selects which WAN interface is used for IPv4 multicast (IGMP). The main internet connection is normally chosen so IPTV streams arriving on that link can be processed.

IGMP is the protocol that IPv4 devices use to tell the network “I want to receive this multicast stream.”

MLD Tab (Multicast Listener Discovery – IPv6)

Setting	Meaning
WAN Connection	Selects which WAN interface is used for IPv6 multicast (MLD). Same purpose as the IGMP setting, but for IPv6.

MLD is the IPv6 equivalent of IGMP.

Basic Tab

Setting	Meaning
Aging Time	How long (in seconds) the router keeps a multicast group membership active after the last join or report message. After this timer expires without a refresh, the router stops forwarding that stream to the device. 360 seconds (6 minutes) is a typical default.

VLAN Configuration Tab

This page lets you assign a specific Multicast VLAN to individual LAN ports. Some ISPs send IPTV traffic on a separate VLAN (different from the internet VLAN). Mapping that VLAN to a port ensures the set-top box or TV connected to that port receives the correct streams.

Field	Meaning
Port	The LAN port you want to configure (LAN1, LAN2, LAN3, or LAN4).
MultiCast VLAN	The VLAN ID that carries the multicast/IPTV traffic. Enter the VLAN number supplied by your ISP (if they use a dedicated IPTV VLAN). Leave blank if IPTV is delivered on the same VLAN as internet or if you do not use IPTV.

• Click Create New Item to add a mapping for another port.
• Use the trash icon to delete a mapping.
• Click Apply to save.

If no Multicast VLAN is configured, the router uses the default behavior defined by the Multicast Mode (Snooping) and the WAN connection selected on the IGMP/MLD tabs.

Maximum Address Configuration Tab

This page sets the maximum number of multicast group addresses (i.e., simultaneous IPTV channels or streams) that each LAN port and each Wi-Fi SSID is allowed to join.

Interface	Current Value	Meaning
LAN1 – LAN4	1024	Maximum multicast groups the wired port can join at the same time.
SSID1 – SSID8	1024	Maximum multicast groups each wireless network (SSID) can join at the same time.

• 1024 is a high default that is more than enough for normal home use (even multiple TVs and devices).
• Lowering the number can help prevent a single device or port from consuming excessive multicast bandwidth, but it is rarely necessary.
• After changing any value, click Apply.

Internet → Port Locating page

What Port Locating Does

Port Locating (also called DHCP Option 82 or PPPoE intermediate-agent insertion) lets the router add identifying information about which LAN port (or SSID) a client is connected to when that client requests an IP address or starts a PPPoE session. This information is inserted into DHCP or PPPoE packets so the ISP’s server can see exactly which port the subscriber device is using. It is mainly used by ISPs for subscriber management, troubleshooting, or service differentiation; ordinary home users almost never need to change these settings.

Settings Explained

Setting	Meaning
DHCP Port Locating	When On, the router inserts port-identification information (Option 82) into IPv4 DHCP requests. When Off, no extra information is added.
PPPoE Port Locating	When On, the router inserts port-identification information into PPPoE discovery packets. When Off, PPPoE packets are left unchanged.
DHCPv6 Port Locating	Controls the same function for IPv6 DHCP (DHCPv6). Disabled means no port information is inserted. Other options (if available) would enable it.
Port Locating Format	Chooses the format of the identification string that is inserted. • Custom — uses the string you define in the field below. • Other presets (if present) may include standard formats such as “slot/port” or vendor-specific templates.
Custom Format	The actual identification string that will be inserted when Custom format is selected. The slashes typically separate fields such as chassis, slot, port, etc. The exact meaning depends on the ISP’s expectations.

Internet → PON Information

These pages hold the registration credentials the Optical Network Unit (ONU) uses to authenticate with the ISP’s Optical Line Terminal (OLT). They are normally set by the ISP and should not be changed unless the ISP instructs you to do so.

Field	Meaning
LOID	Logical ONU Identifier — a username-like string that the ISP uses to identify and authorize your device on the GPON network. It is often a subscriber ID or account number.
Password	The password that accompanies the LOID. Together they form the LOID+Password authentication method used by many ISPs.

After entering or changing values, click Apply. Incorrect LOID or password will prevent the ONU from registering (the PON LED may stay blinking or the ONU state will not reach O5).

SN Tab (Serial Number)

Field	Meaning
SN	GPON Serial Number — a unique hardware identifier burned into the device (usually starts with the vendor code “ZTEG” for ZTE). The OLT uses this serial number for authentication and provisioning.
Password	Optional password associated with the serial-number authentication method (sometimes called PLOAM password).

Local Network settings

Local Network → WLAN → WLAN Basic page

WLAN On/Off Configuration

This section controls whether the wireless radios are active and how they are turned on.

Setting	Detailed Explanation
Mode	Determines how the Wi-Fi radios are controlled. • Manual — You turn the 2.4 GHz and 5 GHz radios on or off yourself using the switches below. The radios stay in the state you set until you change them. • Scheduled Power On — The radios turn on and off automatically according to a schedule you define (the schedule options appear when this mode is selected). Useful for turning Wi-Fi off at night or during certain hours.
WLAN (2.4GHz)	Master switch for the 2.4 GHz radio. • On — The 2.4 GHz wireless network is broadcasting. Devices can connect to any enabled 2.4 GHz SSIDs. • Off — The 2.4 GHz radio is completely disabled. No 2.4 GHz networks are available, which can reduce interference and power use but limits compatibility with older devices.
WLAN (5GHz)	Master switch for the 5 GHz radio. • On — The 5 GHz wireless network is broadcasting. Devices can connect to any enabled 5 GHz SSIDs. • Off — The 5 GHz radio is completely disabled. Only 2.4 GHz remains available (if it is on).

Practical Notes

• Turning a radio Off immediately disconnects every client on that band.
• If you enable Scheduled Power On, you must also define the on/off times; otherwise the radios may stay off unexpectedly.
• After any change, click Apply to save. The radios may briefly restart.

WLAN Global Configuration Overview

These settings apply to the entire radio (all SSIDs on that band). They control channel selection, wireless standard, regulatory domain, channel width, and transmit power. Changes usually cause a brief Wi-Fi restart.

2.4 GHz Settings

Setting	Current Value	Detailed Explanation
Channel	Auto	Selects the operating channel (1–13 in most regions). Auto lets the router pick the least congested channel. Manual selection is useful only when you know a specific channel is quieter.
Mode	IEEE 802.11n Only	Forces the radio to use only 802.11n. Older 802.11b/g devices cannot connect. This gives better performance and security but reduces compatibility. Mixed modes (b/g/n) are usually available in the dropdown if needed.
Country/Region	United Kingdom	Sets the regulatory domain. This determines allowed channels, maximum transmit power, and DFS rules. Must match your physical location for legal compliance.
Band Width	20 MHz	Channel width. 20 MHz is the standard and most compatible width on 2.4 GHz. 40 MHz can increase speed but causes more interference and is often avoided in crowded areas.
SGI	Off	Short Guard Interval. When On, reduces the guard interval from 800 ns to 400 ns, slightly increasing throughput. Off is safer and more compatible; On can help in clean environments.
Beacon Interval	200 ms	How often (in milliseconds) the router sends beacon frames that advertise the network. 100–200 ms is normal. Lower values improve roaming responsiveness but increase overhead.
Transmitting Power	100%	Radio output power. 100% gives maximum range. Lowering it reduces coverage and interference to neighbors (useful in dense apartments).

5 GHz Settings

Setting	Current Value	Detailed Explanation
Channel	Auto	Same as 2.4 GHz. On 5 GHz the available channels are wider (36–165 depending on region). Auto is recommended unless you need a fixed channel.
Mode	IEEE 802.11ac Only	Forces 802.11ac only. 802.11a/n devices cannot connect. Provides the highest speeds and best efficiency on 5 GHz. Mixed a/n/ac modes are usually available if older devices must be supported.
Country/Region	United Kingdom	Same regulatory setting as 2.4 GHz. Ensures the correct 5 GHz channels and power limits are used.
Band Width	80 MHz	Channel width on 5 GHz. 80 MHz is the common high-speed setting for 802.11ac (gives higher throughput). 40 MHz or 20 MHz reduce speed but improve reliability in noisy environments. 160 MHz may appear on some models but is less common.
SGI	Off	Short Guard Interval for 5 GHz. Same meaning as on 2.4 GHz. Off is the safer default; On can give a small speed boost in good conditions.
Beacon Interval	200 ms	Identical function to the 2.4 GHz setting.
Transmitting Power	100%	Maximum transmit power for the 5 GHz radio. 5 GHz already has shorter range than 2.4 GHz, so 100% is normally preferred unless you need to limit coverage.

WLAN SSID Configuration Overview

Each SSID (Service Set Identifier) is a separate wireless network name. The F670L supports multiple SSIDs per band (typically up to 4 on 2.4 GHz and 4 on 5 GHz). You can enable or disable each one independently and give them different names, passwords, and rules.

Settings for Each SSID

Setting	Meaning and Options
SSID On/Off (radio button at the top of each entry)	Turns that individual network on or off.
SSID Name	The network name that appears in the Wi-Fi list on devices.
SSID Hide	On = the network name is hidden (devices must type it manually to connect). Off = the name is broadcast and visible.
Encryption Type	Security protocol used to protect the network. Common options include: • WPA2-PSK-AES (recommended, shown) • WPA/WPA2 mixed • WPA3 (if supported) • Open (no password — insecure)
WPA Passphrase	The Wi-Fi password. The page shows password strength rules: 1. At least 8 characters 2. Mix of digits, letters, and special symbols 3. Should not be related to the username
SSID Isolation	On = devices connected to this SSID cannot communicate with each other (guest-network style isolation). Off = devices can see and talk to one another.
Maximum Clients	Maximum number of devices allowed to connect to this SSID at the same time.

Practical Tips

• Using the same SSID name on both bands is fine; many devices prefer the stronger signal automatically. You can also give them different names (e.g., ZTE_WiFi_2.4 and ZTE_WiFi_5) if you want to force a band.
• Keep Encryption Type at WPA2-PSK-AES (or WPA3 if available and all your devices support it). Avoid Open or WEP.
• Turn SSID Isolation On only for a guest network.
• After changing the name or password, click Apply; connected devices will need to reconnect with the new credentials.

Local Network → WLAN → WLAN Advanced page

Access Control–Mode Configuration

This section sets the MAC-address filtering mode for each SSID independently.

SSID	Current Mode	Meaning
SSID1 – SSID8	No Filter	No MAC filtering is applied. Any device that knows the password can connect.

Mode options (available for every SSID):

• No Filter — MAC address is ignored. Anyone with the correct Wi-Fi password can join. This is the normal everyday setting.
• Black List — Devices whose MAC addresses you add in the rule section below are blocked. All other devices are allowed.
• White List — Only devices whose MAC addresses you add are allowed. All other devices are blocked even if they have the password. This is the most restrictive option (useful for locked-down or guest networks).

After changing any mode, click Apply.

Access Control–Rule Configuration

This is where you create the actual MAC-address rules that the modes above use.

Field	Meaning
New Item	The form for adding one rule. Use the trash icon to delete an existing rule.
Name	A descriptive label for the rule (e.g., “Kids Tablet”, “Blocked Phone”).
SSID	Which wireless network the rule applies to (SSID1–SSID8). The rule only takes effect if that SSID’s mode is set to Black List or White List.
MAC Address	The hardware address of the device (six pairs of hexadecimal characters, e.g., AA:BB:CC:DD:EE:FF). You can type it manually or sometimes select from connected devices.

Local Network → WLAN → WPS page

What WPS Is

WPS (Wi-Fi Protected Setup) is a convenience feature that lets you connect a device to the wireless network without manually typing the password. It can work via a physical button on the router, a PIN, or a push-button method on the client device. While convenient, WPS has known security weaknesses, which is why many users leave it disabled.

Settings on the Page

Band	Setting	Detailed Explanation
2.4 GHz	WPS Mode	Controls WPS for the 2.4 GHz radio. Typical options in the dropdown: • Disabled — WPS is turned off. Devices must use the normal password method. This is the most secure choice. • Enabled or PBC (Push Button Configuration) — WPS is active. You can connect a device by pressing the WPS button on the router (or using the virtual button) and then activating WPS on the client within a short time window (usually 2 minutes). • Some firmwares also offer PIN mode, where you enter an 8-digit PIN.
5 GHz	WPS Mode	Identical control for the 5 GHz radio. Can be enabled or disabled independently of the 2.4 GHz band.

Practical Advice

• Keep WPS Disabled unless you specifically need the one-touch convenience and understand the security trade-off.
• If you enable it, use it only temporarily to connect a device, then disable it again.
• The physical WPS button on the router (if present) only works when WPS Mode is enabled for the corresponding band.
• After enabling, click Apply. The router may briefly restart the wireless interface.

Local Network → WLAN → WLAN Band Steering page

What Band Steering Does

Band Steering encourages dual-band capable devices (phones, laptops, etc. that support both 2.4 GHz and 5 GHz) to connect to the faster, less-congested 5 GHz band when the signal is strong enough, and to fall back to 2.4 GHz when the 5 GHz signal becomes weak. For this to work smoothly, the 2.4 GHz and 5 GHz networks normally use the same SSID name and password.

On-Screen Notice

The page displays an important warning:

• When Band Steering is enabled, the 5 GHz SSID name and password are automatically changed to match the 2.4 GHz SSID. Any device currently connected to the old 5 GHz SSID will be disconnected and must reconnect to the unified SSID.
• The 2.4 GHz RSSI threshold should be at least 10 dBm higher (less negative) than the 5 GHz threshold.

Settings Explained

Setting	Detailed Explanation
Bandsteering Enable	Master switch. • On — The router actively steers capable clients toward 5 GHz when conditions allow. • Off — No steering occurs. Devices choose the band themselves (or stay on whichever SSID they joined).
RSSI threshold (2.4g)	Signal-strength threshold for the 2.4 GHz band. RSSI (Received Signal Strength Indicator) is measured in dBm (more negative = weaker signal). When a client’s 2.4 GHz signal is better than this value, the router may prefer to keep or move the client to 2.4 GHz.
RSSI threshold (5g)	Signal-strength threshold for the 5 GHz band. When a client’s 5 GHz signal is stronger than this value (i.e., better than -80 dBm), the router tries to steer the client onto 5 GHz. The recommended relationship is that the 2.4 GHz threshold should be roughly 10 dBm higher than the 5 GHz threshold (your settings of -70 and -80 satisfy this).

How the Thresholds Work Together

• If a device sees a strong 5 GHz signal (better than -80 dBm), it is steered to 5 GHz.
• If the 5 GHz signal becomes weak and the 2.4 GHz signal is still acceptable (better than -70 dBm), the device is allowed (or steered) onto 2.4 GHz for better range.
• The 10 dBm difference helps prevent rapid bouncing between bands.

Practical Tips

• For Band Steering to function, the active 2.4 GHz and 5 GHz SSIDs should share the same name and password (the router may force this when you enable the feature).
• After enabling or changing thresholds, click Apply. Devices may briefly disconnect and reconnect.
• If some devices stubbornly stay on 2.4 GHz or have trouble roaming, you can slightly adjust the thresholds or temporarily turn Band Steering off to test.
• Older devices that support only 2.4 GHz are unaffected; they simply stay on 2.4 GHz.

Local Network → LAN

Local Network → LAN → IPv4 page

Allocated Address (DHCP)

This is a read-only status table that lists every device currently holding an IPv4 address from the router’s DHCP server.

Column	Meaning
Host Name	The name the device reported when it requested an address (e.g., ArcherAX53, POCO-X6-Pro-5G, I2207). Blank if the device did not send a hostname.
MAC Address	The unique hardware address of the device’s network interface.
IP Address	The IPv4 address the router assigned to that device (all in the 192.168.1.x range in your screenshot).
Port	The interface the device is connected through: • LAN1, LAN2, LAN4 = wired Ethernet ports • SSID2 = the wireless network named under SSID2
Remaining Lease	How much time is left before the device must renew its DHCP lease. • “Infinity” = permanent / static lease (often created by a DHCP Binding / reservation) • A countdown (e.g., 16 h 31 min 59 s) = normal dynamic lease that will expire and be renewed

DHCP Server

This section configures how the router automatically assigns IPv4 addresses to devices on your local network.

Setting	Current Value	Detailed Explanation
DHCP Server	On	Master switch. When On, the router hands out IP addresses automatically. When Off, devices must be configured with static IPs manually.
LAN IP Address	192.168.1.1	The router’s own address on the local network. This is also the default gateway that clients use. Changing it requires you to reconnect using the new address.
Subnet Mask	255.255.255.0	Defines the size of the local network (standard /24 network allowing addresses 192.168.1.1–192.168.1.254).
DHCP Start IP Address	192.168.1.2	First address in the pool that can be assigned to clients.
DHCP End IP Address	192.168.1.254	Last address in the pool. Addresses outside this range (or reserved) will not be given out by DHCP.
ISP DNS	Off	When On, the router distributes the DNS servers it received from the ISP. When Off (current), it uses the DNS servers you specify below.
Primary DNS	192.168.1.1	Primary DNS server given to clients. Setting it to the router’s own IP means clients use the router as their DNS resolver (the router then forwards queries).
Secondary DNS	0.0.0.0	Backup DNS server. 0.0.0.0 means none is configured.
Lease Time Mode	Custom	Chooses how long an address remains assigned. • Preset options (if available) might include 1 hour, 1 day, 1 week, etc. • Custom lets you enter an exact value.
Custom Lease Time	86400 s	Lease duration in seconds (86400 s = 24 hours). After this time the client must renew the address.

Click Apply (usually at the bottom of the section) to save changes. Changing the LAN IP or subnet will briefly interrupt connectivity.

Second IP

Optional secondary IP address and subnet on the LAN side. Useful in advanced scenarios (for example, connecting devices that must stay on a different subnet).

Setting	Detailed Explanation
Second IP	Master switch for the secondary address. Off = feature disabled.
Second IP Address	The additional IP address the router would use on the LAN.
Subnet Mask	Subnet mask for the secondary network.
Start IP Address	Beginning of the DHCP pool for the secondary subnet (if DHCP is also served there).
End IP Address	End of the secondary DHCP pool.

DHCP Binding

DHCP Binding (also called DHCP Reservation or Static DHCP) permanently associates a device’s MAC address with a specific IP address. The device always receives the same IP, which is why some leases earlier showed “Infinity.

New Item fields:

Field	Meaning
Name	A friendly label for the reservation (e.g., “Living Room TV”, “NAS”).
MAC Address	The hardware address of the device (six pairs of hex digits). You can type it or often select it from currently connected devices.
IP Address	The fixed IPv4 address you want that device to always receive (must be inside the DHCP pool or at least on the same subnet).

• Click Create New Item to add another reservation.
• Use the trash icon to delete an existing binding.
• Click Apply to save.

DHCP Port Control

This section controls whether devices connected to each LAN port or SSID are allowed to obtain an IP address via DHCP, and from which source.

Interface	Current Setting	Options and Meaning
LAN1 – LAN4 SSID1 – SSID8	No Control	• No Control — Normal behavior. The port/SSID can receive DHCP addresses from the router’s own DHCP server (and any upstream DHCP if applicable). • Internet — Typically restricts the port so it only accepts DHCP from the WAN/internet side (rare for home use; more common in bridge or special ISP setups). • Local — Restricts the port so it only accepts DHCP from the local router’s DHCP server.

Local Network → LAN → IPv6 page

Allocated Address (DHCPv6)

This read-only table shows devices that have received an IPv6 address from the router’s DHCPv6 server.

Column	Meaning
DUID	DHCP Unique Identifier — a persistent identifier the client uses for DHCPv6 (similar in purpose to a MAC address but longer and more stable).
IP Address	The global IPv6 address assigned to the device.
Remaining Lease	Time left before the address must be renewed.

Two devices are currently listed, each with roughly 16 hours remaining on their leases.
Click Refresh to update the list.

LAN Address Management

Setting	Detailed Explanation
LAN IPv6 Address	The router’s link-local IPv6 address on the LAN. Link-local addresses always start with fe80:: and are used only for communication on the local network segment. fe80::1 is a common, simple choice. Clients use this (or the router’s global address) as their default gateway for IPv6.

Click Apply if you change it (rarely necessary).

Static Prefix

This section lets you manually define an IPv6 prefix for the LAN (instead of, or in addition to, the prefix delegated by the ISP).

Field	Meaning
Name	A label for the static prefix entry.
Prefix	The IPv6 network prefix you want to advertise on the LAN, followed by the prefix length (the /64 box). A typical LAN prefix length is /64.

• Click Create New Item (or use the form shown) to add a prefix.
• Use the trash icon to delete an entry.
• Click Apply to save.

In most home setups the router receives a prefix automatically from the ISP via Prefix Delegation (PD) and advertises it to the LAN, so a static prefix is optional and usually left empty.

DHCPv6 Server

This section controls the router’s DHCPv6 service, which can assign IPv6 addresses and DNS information to devices on the local network.

Setting	Current Value	Detailed Explanation
DHCPv6 Server	On	Master switch. When On, the router can hand out IPv6 addresses and options via DHCPv6. When Off, clients must rely solely on SLAAC (Stateless Address Autoconfiguration) or static configuration.
DNS Delegate Type	Auto	How DNS server information is provided to clients. • Auto — The router automatically uses the DNS servers it learned from the ISP (or its own address). • Manual — You specify the DNS servers yourself (additional fields usually appear).
DNS Address Specified	(dropdown visible)	Further refines DNS behavior when relevant. “DNS Address Specified” typically means the router will advertise specific DNS addresses rather than only the prefix.
DNS Refresh Time	86400 s	How long (in seconds) clients should cache the DNS information received via DHCPv6. 86400 s = 24 hours, a normal value.
Prefix Delegate Type	Auto	How the IPv6 prefix for the LAN is obtained. • Auto — The router uses the prefix delegated by the ISP (Prefix Delegation / PD). This is the correct and recommended setting for almost all home connections. • Manual options (if available) would let you set a static prefix.

What RA Service Does

RA (Router Advertisement) is the core IPv6 mechanism that lets the router tell devices on the LAN:

• That it is a router (default gateway)
• Which IPv6 prefixes they can use
• Whether they should also use DHCPv6
• The MTU and other parameters

Without RA, most IPv6 clients cannot configure themselves.

Settings Explained

Setting	Current Value	Detailed Explanation
RA Service	On	Master switch. When On, the router sends Router Advertisement messages. When Off, IPv6 autoconfiguration on the LAN stops working.
Specify MTU	On	When On, the router includes an MTU value in the RA so clients know the maximum packet size to use.
MTU	1300	The Maximum Transmission Unit advertised to clients. 1300 is a safe value that works even when the WAN path has overhead (common with PPPoE). Typical Ethernet MTU is 1500; lower values prevent fragmentation.
Preference	Middle	Router preference flag in the RA. • High — clients prefer this router. • Middle — normal preference (default). • Low — clients prefer other routers if available. Middle is correct when this is the only router.
Minimum Retry Interval	200 s	Shortest time between unsolicited RA messages.
Maximum Retry Interval	600 s	Longest time between unsolicited RA messages. The router sends RAs at a random interval between these two values.
M	On	Managed address configuration flag. • On — clients should use DHCPv6 to obtain IPv6 addresses. • Off — clients should use only SLAAC (stateless autoconfiguration).
O	On	Other configuration flag. • On — clients should use DHCPv6 to obtain other information (DNS servers, etc.) even if they use SLAAC for addresses. • Off — no DHCPv6 for other options.
Prefix Delegate Type	Auto	How the prefix included in the RA is chosen. • Auto — use the prefix delegated by the ISP (recommended). • Manual options would let you specify a static prefix.

How the Flags Work Together

• M = On and O = On (your current setting) means clients are told to use DHCPv6 for both addresses and other options. This matches the DHCPv6 Server being enabled on the previous page.
• Many modern networks use M = Off and O = On so clients generate their own addresses via SLAAC while still getting DNS from DHCPv6. Both approaches are valid; yours is fully functional.

Port Control

This section lets you enable or disable IPv6 services on a per-interface basis. Each LAN port and each Wi-Fi SSID has two independent checkboxes:

Checkbox	Meaning
DHCPv6	When checked, devices connected to that port/SSID are allowed to obtain IPv6 addresses and options from the router’s DHCPv6 server.
RA	When checked, the router sends Router Advertisement messages on that port/SSID so devices can learn the default gateway, prefixes, and other IPv6 parameters.

What This Means in Practice

• With both boxes checked (current state), every wired port and every wireless network fully supports IPv6. Devices can receive Router Advertisements and use DHCPv6.
• Unchecking RA on an interface stops IPv6 autoconfiguration on that port/SSID (devices will not learn a gateway or prefix).
• Unchecking DHCPv6 prevents address assignment via DHCPv6 on that interface, but SLAAC can still work if RA remains enabled.
• These controls are rarely changed in a normal home setup. The present “everything enabled” configuration is the correct default so all devices can use IPv6.

Local Network → Routing

IPv4 page

Default Routing

Setting	Current Value	Meaning
WAN Connection	WAN-INTERNET	Selects which WAN interface is used as the default gateway for all internet-bound traffic. Traffic that does not match a more specific route is sent out this connection.

This is the normal setting — your main internet WAN is chosen as the default route. Click Apply only if you change it.

Network Address	Subnet Mask	Gateway	Interface	Explanation
0.0.0.0	0.0.0.0	10.240.12.100	WAN-INTERNET	Default route. All traffic not matching a more specific route is sent to the ISP gateway 10.240.12.100 via the main internet connection.
10.155.188.0	255.255.252.0	0.0.0.0	WAN-VOIP	Directly connected route for the VoIP WAN subnet. Gateway 0.0.0.0 means the network is local to that interface.
10.240.12.100	255.255.255.255	0.0.0.0	WAN-INTERNET	Host route for the ISP gateway itself (reachable directly on the internet WAN).
192.168.1.0	255.255.255.0	0.0.0.0	LAN	Directly connected route for your local network. All devices in 192.168.1.0/24 are reachable via the LAN interface.

Static Routing

Static routes are manually created paths that tell the router how to reach specific networks that are not covered by the default route or by directly connected networks. They are rarely needed in a typical home setup.

New Item Fields

Field	Meaning
Name	A descriptive label for the route (e.g., “Office VPN”, “Printer Subnet”).
Egress	The outgoing interface or next-hop type the traffic should use (usually a WAN connection or LAN). Select the appropriate interface from the dropdown.
Network Address	The destination network you want to reach (e.g., 192.168.10.0).
Subnet Mask	The subnet mask that defines the size of that destination network (e.g., 255.255.255.0).
Gateway	The IP address of the next-hop router that knows how to forward traffic to the destination network. This gateway must itself be reachable.

Click Create New Item to add another static route.

Use the trash icon to delete a route.

Click Apply to save.

When You Might Add a Static Route

• You have a second router or a VPN that creates an additional private network you need to reach.
• An ISP or corporate network requires a specific route for certain services.
• You are connecting two separate LAN subnets.

For ordinary internet access and local device communication, leave Static Routing empty.

Policy Routing

Policy Routing (also called Policy-Based Routing) lets you create rules that send traffic out a specific interface based on criteria other than just the destination network. For example, you can force traffic from a particular device, IP range, or protocol to use a chosen WAN connection. It is an advanced feature and is not required for normal home use.

New Item Fields

Field	Meaning
Name	A descriptive label for the policy (e.g., “Gaming via WAN2”, “IoT devices”).
Egress	The outgoing interface the matching traffic should use (select a WAN connection from the dropdown).
Source IP Address	The source IP (or start of a range) that the rule applies to. Leave blank or 0.0.0.0 to match any source.
Source Mask	Subnet mask for the source address, defining how large a source range is matched.
Destination IP Address	Optional destination IP (or start of a range) the rule applies to. Leave blank to match any destination.
Destination Mask	Subnet mask for the destination address.
Protocol	Limits the rule to a specific protocol. • Any — matches all protocols • TCP, UDP, ICMP, etc. (if available in the dropdown)
Source MAC Address	Matches traffic coming from a specific device by its hardware address. You can type the MAC or click “Select from the associated devices” to pick a currently connected device.

How It Differs from Static Routing

• Static Routing decides the path based only on the destination network.
• Policy Routing can decide the path based on source IP, source MAC, protocol, destination, or a combination of these.

When You Might Use Policy Routing

• You have two internet connections and want certain devices or applications to use a specific one.
• You want to send traffic from a particular machine through a VPN or secondary WAN.
• An advanced multi-homed or segmented network requires selective routing.

For ordinary use, leave Policy Routing empty.

IPv6 page

Default Routing

Setting	Current Value	Meaning
WAN Connection	WAN-INTERNET	Selects which WAN interface is used as the default route for IPv6 traffic. All IPv6 packets that do not match a more specific route are sent out this connection.

Routing Table

This read-only table lists the IPv6 routes the router currently has. The gateway column shows :: (the IPv6 unspecified address) for directly connected networks, meaning no next-hop router is needed.

Static Routing (IPv6)

Static routes manually tell the router how to reach specific IPv6 networks that are not covered by the default route or directly connected prefixes.

Field	Meaning
Name	A descriptive label for the route.
Egress	The outgoing interface the traffic should use (select a WAN or LAN from the dropdown).
Prefix	The destination IPv6 network in prefix form, plus the prefix length (e.g., 2001:db8:1:: / 64).
Gateway	The IPv6 address of the next-hop router that can forward traffic to that prefix. The gateway must itself be reachable.

Policy Routing (IPv6)

Policy Routing lets you send IPv6 traffic out a chosen interface based on source address, destination address, protocol, or source MAC address — not only on the destination prefix.

Field	Meaning
Name	A descriptive label for the policy.
Egress	The outgoing interface matching traffic should use.
Source IP Address	Source IPv6 address (or prefix) the rule matches, with prefix length (default /128 = single host). Leave blank to match any source.
Destination IP Address	Destination IPv6 address (or prefix) the rule matches, with prefix length. Leave blank to match any destination.
Protocol	Limits the rule to a protocol (Any, TCP, UDP, ICMPv6, etc.).
Source MAC Address	Matches traffic from a specific device by its MAC address. You can type it or select from associated devices.

When These Features Are Useful

• You have multiple IPv6-capable WANs and want certain devices or traffic to use a specific one.
• You need to reach an additional IPv6 network through a particular gateway.
• Advanced segmentation or VPN scenarios require selective routing.

For ordinary internet and local IPv6 use, leave both sections empty.

Local Network → FTP page

FTP

This page configures the built-in FTP server on the router. When enabled, you can access files stored on a USB drive attached to the router (or other supported storage) using an FTP client.

Setting	Detailed Explanation
Server	Master switch for the FTP server. • On — The router starts accepting FTP connections. • Off — FTP server is disabled (current and recommended state if you do not need it).
Security	Enables additional security restrictions for the FTP service (exact behavior depends on firmware; commonly limits access or enforces stronger authentication). Leaving it On is safer.
Username	The username required to log in to the FTP server.
Password	The password required to log in to the FTP server. Change it from the default for better security if you enable the server.

Important Notes

• The FTP server is mainly useful when a USB storage device is plugged into the router and you want to share its files over the network (or remotely if port forwarding is also configured).
• Leaving the server Off is the secure default. FTP transmits credentials in clear text unless additional protections are in place, so enable it only when needed.
• If you turn the server On, use a strong password and consider whether you also need to open the FTP port (usually 21) via Port Forwarding or Local Service Control for remote access.
• Related pages (USB, Samba Service) control other ways to share the same storage.

Local Network → UPnP page

What UPnP Does

UPnP (Universal Plug and Play) allows compatible applications and devices on your local network to automatically request port forwards on the router. This is commonly used by game consoles, peer-to-peer software, media servers, and some smart-home devices so they can accept incoming connections without you manually creating port-forwarding rules.

Settings Explained

Setting	Current Value	Detailed Explanation
UPnP	On	Master switch. • On — Devices and applications can automatically open ports on the router. • Off — UPnP is disabled; only manually configured port forwards (or DMZ) will allow incoming connections.
Advertisement Period	30 min	How often (in minutes) the router broadcasts its UPnP presence on the local network so devices can discover it. 30 minutes is a typical default.
Advertisement Time To Live	4 hop	The TTL (Time To Live / hop count) of the UPnP advertisement packets. A value of 4 means the advertisements stay within a small local network and are not forwarded far. This is normal and safe.

Security Consideration

UPnP is convenient but has a security trade-off: any device or malware on your LAN can potentially open ports without your knowledge.

• Many users leave it On for gaming and ease of use.
• Security-conscious users turn it Off and create only the specific port forwards they need.

Local Network → BPDU page

What BPDU Is

BPDU (Bridge Protocol Data Unit) messages are used by the Spanning Tree Protocol (STP) and its variants (RSTP, MSTP). Switches and bridges exchange BPDUs to detect loops in a network and block redundant paths so that a broadcast storm cannot occur.

Setting Explained

Setting	Current Value	Detailed Explanation
BPDU Forwarding	On	Controls whether the router forwards BPDU frames between its LAN ports (and sometimes between LAN and WAN). • On — BPDU packets are forwarded. This allows proper Spanning Tree operation if you have managed switches or multiple bridges connected to the router’s LAN ports. It helps prevent network loops. • Off — BPDU packets are dropped. This can be useful in simple home networks where no Spanning Tree devices are present, or if you want to stop BPDU traffic for security or compatibility reasons.

Current Status and Recommendation

BPDU Forwarding is On. This is a safe and common default, especially if you ever connect additional switches to the LAN ports.

For a typical home network with only the router and ordinary devices (PCs, phones, TVs, etc.), either setting usually works. Leaving it On is the more compatible choice and prevents problems if a loop is accidentally created with extra switches or cables.

No change is required unless you have a specific reason to block BPDU traffic.

Local Network → DMS/DLNA page

What DMS/DLNA Does

DMS (Digital Media Server) / DLNA lets the router share media files (videos, music, photos) stored on an attached USB drive so that DLNA-compatible devices on your local network (smart TVs, media players, phones, game consoles) can discover and play them.

Settings Explained

Setting	Current Value	Detailed Explanation
DMS	Off	Master switch for the Digital Media Server. • On — The router advertises itself as a DLNA media server and shares the configured media folders. • Off — Media server is disabled (current state).
DMS Name	Media Server	The name that appears when DLNA clients browse for media servers on the network. You can change it to something more descriptive (e.g., “Living Room Router”).
Library Rescan Method	Auto	How the server updates its media library when files are added or removed. • Auto — The server periodically rescans the media folders automatically. • Manual options (if available) require you to trigger a rescan yourself.
Media Source1	/mnt	Path to the first folder that will be shared. /mnt is the typical mount point for USB storage on this router. Click Browse to select a specific folder on the USB drive.
Media Source2	(empty)	Optional second media folder.
Media Source3	(empty)	Optional third media folder.
Media Source4	(empty)	Optional fourth media folder.

Requirements and Notes

• A USB storage device must be plugged into the router and properly mounted for media sharing to work.
• Only files in the folders you list under Media Source will be shared.
• DLNA clients must be on the same local network.
• Leaving DMS Off is fine if you do not need to stream media from a USB drive attached to the router.

Local Network → Samba Service page

What Samba Service Does

Samba lets computers on your local network access files stored on a USB drive attached to the router using the standard Windows file-sharing protocol (SMB). You can browse the shared folders from Windows, macOS, Linux, or other devices that support SMB.

Settings Explained

Setting	Current Value	Detailed Explanation
Samba Service	Off	Master control with three options: • On — Samba is always enabled. • Off — Samba is disabled (current state). • Auto On After Detecting USB Storage Plugged — Samba starts automatically only when a USB drive is inserted and stops when it is removed.
Host Name	smbshare	The NetBIOS / hostname that identifies the Samba server on the network. Clients may see the share as \\smbshare (Windows) or smb://smbshare (other systems).
Anonymous	Off	Controls guest access. • On — Anyone on the local network can access the share without a username/password. • Off — Authentication is required (more secure).
Samba Username	samba	The username required to log in when Anonymous is Off.
Samba Password	(masked)	The password required to log in when Anonymous is Off. Change it from the default for better security if you enable the service.

Requirements and Notes

• A USB storage device must be plugged into the router for shares to contain files.
• With the current settings (Off + Anonymous Off), the service is inactive and would require credentials if turned on.
• Samba shares are normally accessible only on the local network. Remote access would require additional port forwarding and is generally not recommended for security reasons.
• Related pages (FTP, DMS/DLNA, USB) offer other ways to access the same storage.

Local Network → DNS page

Domain Name

Setting	Current Value	Meaning
Domain Name	(empty)	Optional local domain suffix (e.g., home or lan). When set, devices can be reached by names such as printer.home instead of only by IP address. Leave blank if you do not need a local domain.

Host Name

This section creates static hostname-to-IP mappings (local DNS records) so specific devices can be reached by a friendly name.

Field	Meaning
Host Name	The name you want to assign (e.g., nas, printer, camera).
IP Address	The IPv4 address that name should resolve to.

• Click Create New Item to add another mapping.
• Use the trash icon to delete an entry.
• Click Apply to save.

These entries are useful when you want reliable local names for devices that have reserved IP addresses.

DNS

This section sets the DNS servers that the router itself uses for resolving internet names (and that it may also distribute to clients, depending on other DHCP settings).

Setting	Current Value	Meaning
IPv4 DNS Server1	0.0.0.0	Primary IPv4 DNS server. 0.0.0.0 means none is manually configured (the router will use DNS servers obtained from the ISP or its own resolver).
IPv4 DNS Server2	0.0.0.0	Secondary IPv4 DNS server.
IPv6 DNS Server1	(empty)	Primary IPv6 DNS server.
IPv6 DNS Server2	(empty)	Secondary IPv6 DNS server.

Click Apply to save.

Notes

• Leaving the DNS server fields at 0.0.0.0 / empty is normal; the router typically receives DNS information automatically from the ISP via the WAN connection.
• You can enter public DNS servers here (for example 8.8.8.8 and 1.1.1.1 for IPv4, or their IPv6 equivalents) if you want the router to use specific resolvers.
• The Domain Name and Host Name entries affect only local name resolution on your network.
• Related DHCP settings (under LAN → IPv4) control which DNS servers are actually given to client devices.

Local Network → USB page

USB

This page controls USB-related sharing features on the router.

Setting

Detailed Explanation

USB Printer

Enables or disables USB printer sharing. • On — If you plug a compatible USB printer into the router’s USB port, the router can share that printer with computers on the local network. Devices can then add the network printer and print to it. • Off — USB printer sharing is disabled (current state). The USB port can still be used for storage (Samba, FTP, DLNA) if those services are enabled, but printer sharing is not active.