Huawei HG8245H5

Complete Login & Admin Guide for Huawei HG8245H5 GPON Terminal

Understanding the HG8245H5: ISP vs User Access Levels

The Huawei HG8245H5 is a GPON Optical Network Terminal (ONT) commonly deployed by fiber ISPs. It has two admin levels: the standard user account (username: admin, password varies by ISP) and the telecom/provider administrator account (username: telecomadmin). The telecom admin account has full access to advanced WLAN, VLAN, and TR-069 settings. Many ISPs restrict user access to the telecomadmin credentials — contact your ISP if access is denied.

How to Log In to the Huawei HG8245H5

1. Connect via Ethernet: Plug an Ethernet cable from your PC into any of the LAN ports on the HG8245H5. Alternatively, connect wirelessly to the default SSID printed on the device's label.

1. Access the Web Interface: Open a browser and navigate to http://192.168.100.1. The Huawei ONT login page will load.

1. Choose Your Account Level:

- Standard user: Username admin, password as printed on the device label (varies by ISP — common defaults: admin, 1234, or the last 8 digits of the serial number).
- Full telecom admin: Username telecomadmin, password admintelecom (may be ISP-customized — check with your ISP).

1. Click Log In to enter the web management interface.

ISP-Specific Default Credentials

| ISP | Username | Password | Notes |
|---|---|---|---|
| Generic Huawei | telecomadmin | admintelecom | Full admin access |
| Starhub (SG) | admin | Printed on label | User-level only |
| PLDT (PH) | pldt | pldtadmin1234 | Check label first |
| TM (MY) | tmadmin | Various | ISP-assigned |
| STC (SA) | telecomadmin | admintelecom | Full access |

WLAN Configuration — 2.4GHz and 5GHz Setup

1. After logging in, click the WLAN tab in the top navigation bar.

1. Select WLAN Basic Configuration from the left panel.

1. Click the WLAN Switch toggle to ensure Wi-Fi is enabled.

1. Click on SSID1 (primary 2.4GHz network) to expand its configuration:

- SSID Name: Enter your desired network name.
- Authentication Mode: Select WPA2 Pre-Shared Key for maximum security on standard clients.
- Encryption Mode: Select AES.
- WPA Pre-Shared Key: Enter a strong Wi-Fi password (minimum 12 characters).

1. For the 5GHz band, look for SSID configurations under the 5GHz WLAN interface (may appear as SSID5 or under a separate 5GHz tab depending on firmware version).

1. Click Apply to save changes.

Advanced Wireless Optimization

Channel Width: For 2.4GHz, set channel width to 40MHz for higher throughput. For 5GHz, configure to 80MHz for maximum speed.

Channel Selection: Set both bands to Auto so the ONT scans and selects the least congested frequency.

Transmit Power: Set to Maximum for larger home coverage areas.

DTIM Period: Set to 1 for real-time gaming applications to reduce beacon latency.

Huawei AI Life App Integration

The HG8245H5 supports integration with the Huawei AI Life app (formerly HiLink) on Android and iOS:

1. Download the Huawei AI Life app.

1. Connect your smartphone to the HG8245H5's default Wi-Fi.

1. Open the app — it auto-detects the gateway.

1. Manage Wi-Fi settings, view connected devices, enable parental controls, and check ONT signal levels from your smartphone.

Firmware Update Procedure

The HG8245H5 is typically managed via the ISP's TR-069 Auto-Configuration Server (ACS), meaning firmware is pushed by the ISP automatically over the WAN. Manual firmware updates are generally not available to end users to prevent configuration conflicts with ISP provisioning. If you need a firmware update:

1. Contact your ISP's technical support.

1. Request a firmware push or TR-069 configuration refresh.

1. ISPs typically schedule firmware updates during maintenance windows.

Security Hardening for HG8245H5

1. Change the default WLAN password from the factory preset immediately after ISP installation.

1. Disable WPS: Navigate to WLAN > WPS Settings and set WPS Mode to Disabled. WPS PIN attacks are a significant risk on older GPON terminals.

1. Enable MAC Address Filtering: Under WLAN > WLAN MAC Filtering, add your trusted device MAC addresses and set the mode to Allow Only Listed MACs.

1. Change User Admin Password: Under the Security tab or System > User Management, change the standard user password. Note: the telecomadmin password may be ISP-controlled and cannot always be changed.

1. Disable Remote Management: Ensure the WAN-facing HTTP/Telnet management interfaces are disabled. This is usually configured by the ISP via TR-069 but verify under System > Remote Management.

Port Forwarding on HG8245H5

1. Assign a static IP to your target device. Navigate to LAN > DHCP Static Address and bind the device MAC to a fixed local IP (e.g., 192.168.100.50).

1. Navigate to Application > Port Mapping or Forwarding > Port Mapping.

1. Click New to add a rule:

- WAN Interface: Select your active WAN profile.
- Protocol: TCP, UDP, or Both.
- Start/End External Port: Enter the port range to forward.
- Internal Host IP: Enter the static IP of your device.
- Start/End Internal Port: Usually same as external port range.

1. Click Apply to save the port forwarding rule.

1. Common port forwarding scenarios: PS5 gaming (TCP/UDP 1935, 3478-3480), HTTP server (TCP 80), FTP server (TCP 21).

TR-069 and ISP Auto-Configuration

The HG8245H5 uses the TR-069 CWMP protocol to communicate with your ISP's Auto-Configuration Server. This allows ISPs to:

Push configuration updates remotely

Perform remote diagnostics

Update firmware

Apply service provisioning changes

Important: After a factory reset, the ISP's TR-069 server will automatically re-provision the device with your service profile. This means your ISP-specific settings (VLAN IDs, PPPoE profiles) will be restored automatically — but your custom WLAN names and passwords will NOT be re-applied.