FCC ID: XIA-NTC620002 3GM2M Router Plus

 

Us ser Gui ide NNTC-620 00 Serie es Inte elligent t M2M Router r Cop yright Cop The cons Whe The elec Plea Thi NetC NetC information containe sent of NetComm Wir d herein is proprietar reless. ry to NetComm Wirel ess. No part of this d document may be tra nslated, transcribed, reproduced, in any f form, or by any mea ns without prior writte en en this equipment has s reached the end of f its useful life, it must t be taken to a recycl ling centre and proce essed separately from m domestic waste. cardboard box, the p tronic equipment alo plastic contained in t ong with your househo he packaging, and th old waste. You may b he parts that make up be subject to penaltie p this device can be es or sanctions unde recycled in accorda er the law. Instead, as nce with regionally e sk for disposal instruc established regulation ctions from your mun ns. Never dispose of nicipal government. this yright 2013 NetCom mm Wireless Limited

. All rights reserved. Note: This d Save e our environment ocument is subject to o change without not tice. se be responsible an nd protect our enviro nment. is manual cov Comm Wireless NTC-

Comm Wireless NTC-

vers the follow

-6200-01

-6200-02 wing products s:

NetC 2 Comm Wireless Intellig gent M2M Router www.netcommwirel less.com Initial documen nt release DOCUMENT V VERSION DATE Table 1 1 - Document Revision n History T Tabl le o of Co onte ents s Ove Pro Phy Pla Ins Adv Sta Int erview ........ Introduction ............. Target audience ...... Prerequisites ........... Notation ................... oduct introduc Product overview .... Package contents ... Product features ...... ysical dimensi Physical dimensions LED indicators ......... Ethernet port LED in Interfaces ................ acement of the Mounting options .... tallation and Powering the router . Power consumption Installing the router . vanced config atus ............ ernet .......... Data Connection ..... Connect on Demand Operator Settings .... SIM security settings LAN ......................... Routing .................... VPN ......................... rvices .......... Dynamic DNS .......... Network time (NTP) . Data stream manage Watchdogs .............. SNMP ...................... TR-069 ..................... GPS ......................... SMS messaging ...... Diagnostics ............. Sending an SMS Dia stem ........... Log .......................... System Configuratio HTTPS key managem SSH Key Manageme pendix A: Tab pendix B: Dev pendix C: Mou pendix D: Def Restoring factory de Recovery mode ....... pendix E: HTT pendix F: RJ-4 fety and produ

................. ..................................... ..................................... ..................................... ..................................... ction .......... ..................................... ..................................... ..................................... ions and indic s .................................... ..................................... dicators ........................ ..................................... e router ...... ..................................... configuration

...................................... .................................... ..................................... guration ....... ................ ................ ..................................... d .................................... ..................................... s .................................... ..................................... ..................................... ..................................... ................ ..................................... ..................................... er .................................. ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... agnostic Command ...... ................ ..................................... on ................................... ment ............................. ent ................................. bles ............ vice Mounting unting Bracket fault Settings. efault settings ................ ..................................... TPS - Uploadin 45 connector uct care ...... ............... .................................... .................................... .................................... .................................... ............... .................................... .................................... .................................... cators ......... .................................... .................................... .................................... .................................... ............... .................................... of the Intelli

..................................... .................................... .................................... ............... ............... ............... .................................... .................................... .................................... .................................... .................................... .................................... .................................... ............... .................................... .................................... .................................... .................................... .................................... .................................... .................................... .................................... .................................... .................................... ............... .................................... .................................... .................................... .................................... ............... Dimensions .. t ............... ............... .................................... .................................... ng a self-signe

................ ............... ................ ..................................... ..................................... ..................................... ..................................... ................ ..................................... ..................................... ..................................... ................ ..................................... ..................................... ..................................... ..................................... ................ ..................................... gent M2M Rou

...................................... ..................................... ..................................... ................ ................ ................ ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ................ ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ................ ..................................... ..................................... ..................................... ..................................... ................ ................ ................ ................ ..................................... ..................................... ed certificate . ................ ................ ................ ..................................... ..................................... ..................................... ..................................... ................ ..................................... ..................................... ..................................... ................ ..................................... ..................................... ..................................... ..................................... ................ ..................................... uter ............ ..................................... ..................................... ..................................... ................ ................ ................ ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ................ ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ................ ..................................... ..................................... ..................................... ..................................... ................ ................ ................ ................ ..................................... ..................................... ................ ................ ................ ............... .................................... .................................... .................................... .................................... ............... .................................... .................................... .................................... ............... .................................... .................................... .................................... .................................... ............... .................................... ............... .................................... .................................... .................................... ............... ............... ............... .................................... .................................... .................................... .................................... .................................... .................................... .................................... ............... .................................... .................................... .................................... .................................... .................................... .................................... .................................... .................................... .................................... .................................... ............... .................................... .................................... .................................... .................................... ............... ............... ............... ............... .................................... .................................... ............... ............... ............... ................ ..................................... ..................................... ..................................... ..................................... ................ ..................................... ..................................... ..................................... ................ ..................................... ..................................... ..................................... ..................................... ................ ..................................... ................ ..................................... ..................................... ..................................... ................ ................ ................ ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ................ ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ................ ..................................... ..................................... ..................................... ..................................... ................ ................ ................ ................ ..................................... ..................................... ................ ................ ................ ................ ..................................... ..................................... ..................................... ..................................... ................ ..................................... ..................................... ..................................... ................ ..................................... ..................................... ..................................... ..................................... ................ ..................................... ................ ..................................... ..................................... ..................................... ................ ................ ................ ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ................ ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ..................................... ................ ..................................... ..................................... ..................................... ..................................... ................ ................ ................ ................ ..................................... ..................................... ................ ................ ................ ................ .................................... .................................... .................................... .................................... ................ .................................... .................................... .................................... ................ .................................... .................................... .................................... .................................... ................ .................................... ................ .................................... .................................... .................................... ................ ................ ................ .................................... .................................... .................................... .................................... .................................... .................................... .................................... ................ .................................... .................................... .................................... .................................... .................................... .................................... .................................... .................................... .................................... .................................... ................ .................................... .................................... .................................... .................................... ................ ................ ................ ................ .................................... .................................... ................ ................ ................ Ser

.. 5

........ 5

........ 5

........ 5

........ 5

.. 6

........ 6

........ 6

........ 7

.. 8

........ 8

........ 9

...... 10

...... 11

. 12

...... 12

. 17

...... 17

...... 18

...... 18

. 19

. 20

. 23

...... 23

...... 27

...... 31

...... 32

...... 36

...... 40

...... 50

. 64

...... 64

...... 65

...... 66

...... 67

...... 70

...... 72

...... 73

...... 74

...... 78

...... 81

. 88

...... 88

...... 92

...... 99

.... 103 107 108 109 110

.... 111

.... 112 113 115 116

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 3 Sys App App App App App App Saf www NetComm Wireless Intelligent M2M Router 4 www.netcommwireless.com O Ove ervie ew In ntroduc document provides This ction you all the informatio on you need to set up p, configure and use the NetComm Wirele ess NTC-6200 Intellig ent M2M Router. Ta arget a document is intende This audienc ed for system integra ce tors or experienced h hardware installers w who understand telec communications term inology and concept ts. Pr rerequ ore continuing with th Befo A dev A web A flath uisites e installation of your vice with a working Et b browser such as In head screwdriver if fi hat have the following g:

Intelligent M2M Rout thernet network adap ternet Explorer, Mozi eld terminated powe ter, please confirm th pter. lla Firefox or Google r is required. Chrome. Notation N n re used in this user g following symbols ar The uide:

The following g note requires atten ntion. The followin ng note provides a w warning. The followin ng note provides usef ful information. www

.netcommwireless.com NetComm Wire eless Intelligent M2M RRouter 5 Product introduction Product overview Penta-band 3G with quad-band 2G auto-fallback Ethernet port with full passive Power over Ethernet (PoE) support (802.3af) (NTC-6200-01 only) Integrated ZigBee multipoint mesh wireless networking (NTC-6200-01 only) HSPA+ up to 14.4 Mbps DL RS232/RS422/RS485 Port and USB 2.0 OTG port Built in GPS supporting an active or passive GPS Antenna via external SMA connector Three multi-purpose I/O ports One dedicated ignition input Internal diversity antennas with option for external main antenna (autosensing) Intelligent, Tri-Colour LED display for clear, easy to read modem status information Extensive device management with support for TR-069, Web GUI and full feature management with SMS Flexible mounting suitable for in-home use or industrial applications with built-in wall mount and DIN rail mounting options Package contents The NetComm Wireless Intelligent M2M Router package consists of:

1 x Intelligent M2M Router 2 x 3G antennas 1 x 1.5m yellow Ethernet cable 8P8C 1 x DIN rail mounting bracket 1 x six-way terminal block 1 x quick start guide and safety manual If any of these items are missing or damaged, please contact NetComm Wireless Support immediately. The NetComm Wireless Support website can be found at:

http://support.netcommwireless.com. NetComm Wireless Intelligent M2M Router 6 www.netcommwireless.com Pr roduct NetComm Wireless N The e-of-the-art features a state conn nection via the use of The TR-0 allow The Intelligent M2M Rout 069 support for easy ws you to expand the NetComm Wireless I feature NTC-6200 Intelligent and versatility at an a f SMS diagnostics an es M2M Router is an M2 affordable price. Com nd commands. 2M device designed mpatible with network by NetComm Wirele k worldwide, the Intell ess to address the rap igent M2M Router ca pid growth in M2M de an be managed remo eployments. It has be otely even when it do een designed to prov es not have an Intern vide net ter includes many fea management of a gr e feature set by produ atures such as Dial o roup of Intelligent M2 ucing your own custo n Demand which pro M Routers; and the a om software applicati ovides a means to se ability to function as a ions. eamlessly connect or an SSH server to sec disconnect the mob ure communications. bile broadband conne

. Additionally, the op ection to conserve us en management syst sage;

tem ntelligent M2M Route er meets the global d demand for a reliable e and cost-effective M M2M device that succ cessfully caters to ma ass deployment acro oss businesses. www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 7 Physical dimensions and indicators Physical dimensions Below is a list of the physical dimensions of the Intelligent M2M Router. Figure 1 Intelligent M2M Router Dimensions INTELLIGENT M2M ROUTER

(WITHOUT EXTERNAL ANTENNAS ATTACHED) Length Depth Height Weight 143 mm 107 mm 34 mm 180g Table 2 - Device Dimensions NetComm Wireless Intelligent M2M Router 8 www.netcommwireless.com dicators s splay the current sys ter uses 7 LEDs to di stem and connection status. LE ED ind Intelligent M2M Rout The Figure 2 - Inte telligent M2M Router LED Indicators LE ED ICON NAME COLOUR STATE DESCRIPTIO ON Off Double f flash On On Power off Powering up Power on Power on in recover ry mode Slow flas shing Hardware error On Blinking1 1 Connected via WWA AN Traffic via WWAN Slow flas shing Connecting PDP On Slow flas shing Slow flas shing Fast flas shing On On On On Registered network Registering network SIM PIN locked SIM PUK locked Cant connect 3G 2G GPRS GSM only (no GPRS S) T Table 3 - LED Indicato ors Power Networ rk Signal strength e term blinking means s that the LED may puls e, with the intervals that 1 The www

.netcommwireless.com t the LED is on and off n not being equal. The te rm flashing means tha at the LED turns on and d off at equal intervals. NetComm Wire eless Intelligent M2M R Router 9 Signal strength LEDs The following table lists the signal strength range corresponding with the number of lit signal strength LEDs. NUMBER OF LIT LEDS SIGNAL STRENGTH All LEDs unlit 1 2 3 4 5

< -109 dBm

-109 dBm to -101dBm

-101 dBm to -91 dBm

-91 dBm to -85 dBm

-85 dBm to -77 dBm

> -77 dBm Table 4 - Signal strength LED descriptions LED update interval The signal strength LEDs update within a few seconds with a rolling average signal strength reading. When selecting a location for the router or connected or positioning an external antenna, please allow up to 20 seconds for the signal strength LEDs to update before repositioning. Ethernet port LED indicators The Ethernet port of the Intelligent M2M Router has two LED indicators on it. The table below describes the statuses of each light and their meanings. Figure 3 - Ethernet port LED indicators LED STATUS DESCRIPTION On There is a valid network link. Blinking There is activity on the network link. On Off The Ethernet port is operating at a speed of 100Mbps. The Ethernet port is operating at a speed of 10Mbps or no Ethernet cable is connected. Table 5 - Ethernet port LED indicators description Green Amber NetComm Wireless Intelligent M2M Router 10 www.netcommwireless.com In nterface following interfaces a The es are available on the I ntelligent M2M Route er:

Figure 4 - Interfaces s ITEM D DESCRIPTION Main ant tenna socket SMA female connec tor for main antenna. Auxiliary y antenna socket SMA female connec tor for auxiliary antenna. GPS ante enna socket SMA female connec tor for GPS antenna. Six-way terminal block connector Reset bu utton Connect power sour Refer to the diagram rce, ignition and I/O wires h m and table on under Step 3 here. Power, ignition and I/

3 of the Installing your dev

/O wires may be terminated ice section for correct wirin d on optional terminal block ng of the terminal block. Op k and connected to DC inp perates in the 8-40V DC ra put jack. nge. Press and hold for le Press and hold for 5 Press and hold for 1 ess than 5 seconds to rebo to 15 seconds to reboot to 5 to 20 seconds to reset th oot to normal mode. o recovery mode. he router to factory default settings. SIM card d slot Insert SIM card here e. RJ45 Po E Ethernet port Mini USB B 2.0 OTG port Serial po ort Connect one or seve supply can serve as eral devices via a network s a backup power source if switch here. This port can f required (PoE available on also optionally receive Pow n NTC-6200-01 only). wer over Ethernet (802.3af PoE) in which case the DC C power Provides connectivit y for optional external stora age or a USB Ethernet don ngle. Supplies up to 0.5A to o connected device. Female DB9 port su pporting 9-wire RS-232, RS S-485 or RS-422 (software selectable). Table 6 Interfaces s www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 11 P Plac cem ment of t the rou uter The adju two external high-pe sting the orientation erformance antennas of the antennas. If yo supplied with the rou ou are unable to get a uter are designed to an acceptable signal provide optimum sig l, try moving the route gnal strength in a wid er to a different place e range of environme e or mounting it differ ents. If you find the s rently. ignal strength is wea ak, try Note: When s selecting a location fo or the router, allow at t least 20 seconds fo or the signal strength LEDs to update befo ore trying a different l location or connectin ng an external antenn na. M Mountin Intelligent M2M Rout The ng optio ter can be quickly an ons nd easily mounted in a variety of locations s. ounted fla en mounted flat again at against th nst the wall, the Intelli he wall gent M2M Router ha Mo Whe s a slimline form fact tor. Use appropriately y sized screws in the e mounting holes prov vided on the base of f the unit. Figure 5 - W Wall mount - Flat aga ainst the wall NetC 12 Comm Wireless Intellig gent M2M Router www.netcommwirel less.com Pe erpendicul arge surface area is If a l appr ropriately sized screw lar to the w not available, there i ws in the mounting ho wall s the option of moun oles provided on the ting the router perpe back of the unit. endicular to the wall. T This gives the router a small wall footprint t while remaining sec curely attached. Use Figure 6 - Wa all mount - Perpendicu cular to the wall C The Section DI Intelligent M2M Rout IN Rail mo ter easily slides onto ount a C Section DIN rail so that it is horizonta ally mounted. The DIN N Rail mounting brac ket is not required fo or C Section DIN rail m mounting. To m mount the unit on a C-

-Section DIN rail, slid de it on as illustrated below:

Figure e 7 - C Section DIN rai il mount Figure 8 -

- Mounting the unit on n a DIN rail www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 13 Mounting bracket The provided mounting bracket provides additional methods of mounting the Intelligent M2M Router. To attach the mounting bracket, slide it onto the rear of the router as shown in the diagram below:

To remove the bracket, press the PUSH button and slide the router off the bracket:

Figure 9 - Sliding on the mounting bracket Figure 10 - Removing the mounting bracket NetComm Wireless Intelligent M2M Router 14 www.netcommwireless.com Us By fi sing the m rst attaching the DIN mounting br N rail bracket to the w racket for wall, the Intelligent M2 wall moun 2M Router can be eas nting sily attached and rem moved from the brack ket. Figure 11 Wal all mount - Mounted via ia DIN rail bracket sing the m Intelligent M2M Rout mounting br ter may be vertically racket for mounted to the wall w Top hat D with the bracket by s DIN rail mo sliding the bracket on ounting nto a top hat DIN rail Figure re 12 - Top hat DIN rail il mount rnatively, you can atta ach it to the DIN Rail by using the V bend d in the bracket as illu ustrated below:

Us The Alter Figur re 13 - Attaching the m mounting bracket to t the DIN rail using the V V bend www

.netcommwireless.com NetComm Wireeless Intelligent M2M RRouter 15 Desk mount In situations where wall mounts and DIN rails are not required, you can simply place the Intelligent M2M Router on a desk using its rubber feet to prevent it from slipping. Figure 14 - Desk mount NetComm Wireless Intelligent M2M Router 16 www.netcommwireless.com I nsta o of th alla he In tion ntel n an llige nd c ent onfi M2M igur M R rati Rout on ter Po owerin Intelligent M2M Rout The Power over 1. DC power i 2. 3. DC power i green power LED on ng the r ter can be powered i r Ethernet (802.3af Po input via 6-pin conne input via field termina n the router lights up router n one of three ways:

NTC-6200-01 only) oE) (available on the ector (8-40V DC) ated power source (8 when a power source 8-40V DC) e is connected. The Po ower over er over Ethernet (PoE Pow ering the device if Po pow Ther re are 5 power classe To u Ethernet (

E) is a method of con oE is available, or if it es defined in the IEEE

(802.3af Po nnecting network dev ts most convenient in E 802.3-2005 standa oE) (availa vices through Etherne n the desired installat rd, of which the Intel able on the et cable where powe tion environment to o ligent M2M Router is e NTC-620 r and data are passe only have a single ca s a class 3 device. 00-01 only)

) ble. This may be a de esirable method of ed along a single cab ble running to the Int telligent M2M Router

. CLASS 3 CLASSIFICA ATION CURRENT POW WER RANGE CLASS DE ESCRIPTION 26

-30 mA 6.49 Tab able 7 - PoE power clas 12.95 W sses Mid power se PoE to power the Intelligent M2M Rout ter, simply connect y your router to a PoE in njector or PoE netwo rk switch using the b undled yellow Ethern net cable 8P8C. onnector separately sold DC p via 6-pin co ccept power from a s accessories. DC Power via the 6-p C power v DC DC input jack can ac The lable to purchase as avai To p power the device via jack

. ower supply. Both a standard temperatur re range DC power s upply and an extend ded temperature rang ge DC power supply are pin connector, remov ve the attached green n terminal block from your router and con nect the external DC C power supply to the e routers green DC p power DC If an scre C power v existing 8-40V DC p ws and secure the p via field ter power supply is availa power wires, making s rminated p able, you can insert t sure the polarity of th power sou the wires into the sup e wires are correctly urce pplied terminal block y matched, as illustra to power your router ted below. Use a No. 3 flathead d screwdriver to tigh ten the terminal bloc ck TERMINAL Figure 15 5 - Locking Power Term DESCR minal Block RIPTION

Positive wire for power r. Ground wire. www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 17 i I/O Dedicated terminal for ignition detection. Three terminals used for input/output detection. (Please refer to the User Guide). Table 8 - Locking power block pin outs Failover power support (NTC-6200-01 only) The Intelligent M2M Router includes support for connection of two power sources at the same time. When a PoE Ethernet cable is connected and DC power is also supplied to the DC input jack of the router, the router will source power exclusively from the PoE source. In the event that power from the PoE cable is lost, the router will automatically switch to source power from the DC input jack, without affecting the routers operation. When PoE power is restored, the router automatically switches back to receive power from the PoE input source. Viewing power source information You can view the current power input mode in the Advanced status section of the devices web user interface. This is useful for remotely monitoring the device. You can also use the Software Development Kit to access this information for advanced purposes (e.g. configuring SMS alerts to inform you of the power status of the router). To view the routers power source information, log in to the router and expand the Advanced status box on the status page. See the Status section of this manual for more information on the status page. Power consumption To assist with power consumption planning, the following table summarises average power consumption during the various states of the Intelligent M2M Router under normal usage conditions. Its important to note that this table serves as an indication only as the power consumed by the device is affected by many variables including signal strength, network type, and network activity. Average power consumption figures STATE POWER CONSUMPTION Powered on, idle and connected to packet data Powered on, connected to packet data with average load Powered on, connected to packet data with heavy traffic Peak power draw at maximum 3G module transmission power Table 9 - Average power consumption figures 1.2W 2.0W 4.0W 5.0W Installing the router After you have mounted the router and connected a power source, follow these steps to complete the installation process. 1. 2. Connect equipment that requires network access to the Ethernet port of your router. This may be your computer for advanced configuration purposes, or your end equipment which requires data access via the Intelligent M2M Router. You can connect one device directly, or several devices using a network switch. If youre using PoE as the power source, you need to connect any devices via an available data Ethernet port on your PoE power source (be it a PoE network switch or PoE power injector). Ensure the external power source is switched on and wait 2 minutes for your Intelligent M2M Router to start up. To check the status of your router, compare the LED indicators on the device with those listed on page 8 of this guide. NetComm Wireless Intelligent M2M Router 18 www.netcommwireless.com A Adv vanc ced con nfig gura ation n at should suit most cu ustomers. For advanc ced configuration, log g in to the web-based d user interface of th e router. The To lo Intelligent M2M Rout og in to the web-base Open a we ter comes with preco ed user interface rout b browser (e.g. Inter onfigured settings tha ter:

net Explorer, Firefox, 1. Safari), type http://1 92.168.1.1 into the a ddress bar and pres s Enter. The web-ba ased user interface lo g in screen is display yed. 2. Figure 16 Log in n prompt for the web-b based user interface Enter the lo use one of ogin username and p the default account d password. If this is the details to log in. e first time you are log gging in or you have not previously config gured the password f for the root or adm min accounts, you ca an ADMI N MANAGER ACCO OUNT ROOT MANAGER A ACCOUNT Username:

Password:

ad dmin Use ername:

Pas ad dmin Management account Table 10 - M ssword:

t login details roo ot ad dmin Note: To acce For security re then Administ ess all features of the easons, we highly re tration page. e router, you must us commend that you c e the root manager a hange the password account. ds for the root and ad dmin accounts upon i nitial installation. You u can do so by navig ating to the System a and The Status page is displa ayed when you log in n successfully. www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 19 Status The status page of the web interface provides system related information and is displayed when you log in to the Intelligent M2M Router management console. The status page shows System information, LAN details, Cellular connection status, Packet data connection status and Advanced status details. You can toggle the sections from view by clicking the buttons to show or hide them. Extra status boxes will appear as additional software features are enabled (e.g. VPN connectivity). or Figure 17 - The Status page NetComm Wireless Intelligent M2M Router 20 www.netcommwireless.com ITEM DEFINITION System information System up time Board version Serial Number Software Model Firmware version IMEI LAN IP MAC Address Ethernet Port Status Cellular connection statu s SIM Status Signal strength (dBm) Network registration statu us Operator selection Current operator Roaming status Allowed bands Current band Coverage WWAN Connection Statu us Profile name Status Default profile WWAN IP DNS server APN Connection uptime Advanced status Mobile country code Mobile network code Signal quality (Ec/N0) Received signal code po ower (RSCP) Power input mode HSUPA category HSDPA category SIM ICCID Primary scrambling code e (PSC) DC input voltage Location area code (LAC C) www.netcommwireless.com The current upti me of the router. The hardware ve ersion of the router. The serial numb ber of the router. The software ve rsion number running on th he router. The type of pho ne module and the firmwar re version of the module. The firmware rev vision of the phone module e. The Internationa al Mobile Station Equipmen nt Identity number used to u uniquely identify a mobile d device. The IP address and subnet mask of the rou uter. The MAC addre ss of the router. Displays the cur rrent status of the Ethernet port and its operating spe eed. Displays the act tivation status of the router on the carrier network. The current sign nal strength measured in d Bm The status of the e routers registration for th he current network. The mode used to select an operator netw work. The current ope rator network in use. The roaming sta atus of the router. The bands to wh hich the router may connec ct. The current ban d being used by the router r. The mobile equ ipment identifier (MEID) of the router, a unique code for identifying devices on a a CDMA network. The name of the e active profile. The connection status of the active profile. Indicates wheth er the current profile in use e is the default profile. The IP address assigned by the mobile bro roadband carrier network. The primary and d secondary DNS servers f for the WWAN connection. The Access Poin nt Name currently in use. The length of tim me of the current mobile co onnection session. The Mobile Cou ntry Code (MCC) of the rou uter. The Mobile Netw work Code (MNC) of the ro outer. A measurement of the portion of the receiv ved signal that is usable. T his is the signal strength m minus the signal noise level. The power level of the signal on the curren nt connections particular c channel. Displays whethe er power is currently being sourced from the PoE Eth ernet port or from the DC in nput jack (PoE available on n NTC-6200-01 only) Displays the HS UPA category (1-9) for the e current uplink Displays the HS DPA category (1-8) for the e current downlink. The Integrated C Circuit Card Identifier of the e SIM card used with the ro outer, a unique number up to 19 digits in length. The Primary scr ambling code for the curre ent signal. Displays the cur rrent voltage of the power i input source provided via t the DC Input jack The ID of the ce ll tower grouping the curre ent signal is broadcasting f from. NetComm Wire eless Intelligent M2M RRouter 21 IMSI Cell ID The International mobile subscriber identity is a unique identifier of the user of a cellular network. A unique code that identifies the base station from within the location area of the current mobile network signal. Channel number (UARFCN) The channel number of the current 3G/2G connection. Table 11 - Status page item details NetComm Wireless Intelligent M2M Router 22 www.netcommwireless.com I nter rne t The Internet section prov vides configuration op ptions for Wireless W WAN, LAN, Routing an nd VPN connectivity. onnectio ge allows you to conf on igure and enable/dis D Data Co data connection pag The a Connection item. Data able the connection profile. To access th is page, click on the Networking menu, an nd under the Wireles ss WAN menu, select t the www

.netcommwireless.com Figure 1 18 Data connection n settings NetComm Wire eless Intelligent M2M R Router 23 ITEM Data connection Transparent Bridge (PPPoE) Profile name list Default Status APN Username Roaming settings Allow data roaming DEFINITION Toggles the transparent bridge function on and off. Sets the corresponding profile to be the default gateway for all outbound traffic except traffic for which there are configured static route rules or profile routing settings. Toggles the corresponding profile on and off. If your carrier supports it, two profiles may be turned on simultaneously. The APN configured for the corresponding profile. The username used to log on to the corresponding APN. When set to ON, the router will allow local devices to access the Wireless WAN network when the MachineLink 3G is roaming onto a foreign network. When set to OFF, the router will deny network access to data services when roaming onto a foreign network. This setting is ON by default. Table 12 - Data connection item details Connecting to the mobile broadband network The router supports the configuration of up to six APN profiles; these profiles allow you to configure the settings that the router will use to connect to the 2G/3G network and switch easily between different connection settings. For advanced networking purposes, you may activate a maximum of two profiles simultaneously (dependant on network support). When activating two connection profiles, you should avoid selecting two profiles with the same APN as this can cause only one profile to connect. Similarly, activating two profiles which are both configured to automatically determine an APN can cause a conflict and result in neither profile establishing a connection. We recommend that the two active connection profiles have differing, manually configured APNs to avoid connection issues and ensure smooth operation. Manually configuring a connection profile To manually configure a connection profile:

1. Click the Edit button corresponding to the Profile that you wish to modify. The data connection profile settings page is displayed. Figure 19 - Data connection profile settings NetComm Wireless Intelligent M2M Router 24 www.netcommwireless.com 2. Click the Pr rofile toggle key to tu urn the profile on. Add ditional settings appe ear. Figure 20 - Data a connection settings

- Profile turned on 9. 8. 3. 4. 5. 6. 7. In the Profil Ensure that In the APN Next to Aut The Reconn to wait up t The Reconn router to att The Metric aware of th 10. The MTU fi 11. Use the NA devices to that packet route config For advanc custom add you do not configuring le name field, enter a t the Automatic APN field, enter the APN thentication type, sele nect delay field spec o 65535 seconds if y nect retries field spec tempt to reconnect in value is used by rout e effect your change eld allows you to mo AT Masquerading tog appear as a single W ts originating from a m guration is required a ced networking such dress and mask of tra want to use this featu g Profile routing settin a name for the profile selection toggle key Name (Access Point ect the either CHAP o cifies the number of s you wish. cifies the number of t ndefinitely. ter to prioritise routes es will have on the se dify the Maximum Tr ggle key to turn NAT M WAN IP via network a machine behind the and local devices req as using dual simulta affic to send via that ure, or are unsure, pl ngs, see the Setting a 12. e. This name is only u is set to off. If it is no t Name) and if require or PAP depending on econds to wait betwe used to identify the pr ot, click it to toggle it ed, use the Usernam n the type of authenti een connection attem rofile on the router. to the off position. me and Password field ication used by your mpts. The default sett n credentials. ds to enter your login provider. ting of 30 seconds is s sufficient in most ca ases but you may mo dify it times to attempt to co onnect to the networ k if the router fails to establish a connectio on. It is set to 0 by de efault which causes t the lable) and is set to 20 0 by default. This valu ue is sufficient in mos st cases but you may y modify it if you are s (if multiple are avail rvice. ansmission Unit used Masquerading on or ddress translation. In router actually origina quire WAN IP address aneous PDP contexts profile. To do this, in ease leave these fiel a default gateway wit d on the connection. off. NAT masquerad n this mode, the route ated from the WAN IP ses. s, you may wish to co the Profile routing se lds blank, which will th two active connect Do not change this u ing, also known simp er modifies network t P address of the rout unless instructed to b ply as NAT is a comm raffic sent and receiv ters internal NAT IP a by your carrier. mon routing feature w ved to inform remote address. This may be which allows multiple LAN computers on the int ternet d e disabled if a framed profile to route only c onfigure a particular the Network address ettings section, enter not designate any pa articular traffic to be r

. tion profiles example certain traffic via that s and Network mask routed via this profile profile by configurin of the remote netwo e. For more informatio g a rk. If on on www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 25 13. Click the Save button when you have finished entering the profile details. Confirming a successful connection After configuring the packet data session, and ensuring that it is enabled, click on the Status menu item at the top of the page to return to the Status page. When there is a mobile broadband connection, the WWAN section is expanded showing the details of the connection and the Status field displays Connected. To see details on the connected session, you can click the Show data usage button. Figure 21 - Packet data connection status section NetComm Wireless Intelligent M2M Router 26 www.netcommwireless.com C Connect connect on demand The nection to the mobile conn Whe en the data connectio t on De feature keeps the Pa broadband network on is established, the emand PDP) context deactiv acket Data Protocol (

nterest arrives or an S

. When a packet of in router monitors traffi c and terminates the vated by default whil SMS wake-up comma e link when it is idle. e making it appear to and is received, the r o locally connected d router attempts to est devices that the route tablish a mobile broa er has a permanent adband data connec tion. Note: When i nteresting packets a rrive, the recovery tim me for the wireless W WAN connection is ap pproximately 20-30 se econds. Co To c onfiguring onfigure Connect on Click the N 1. On the Con 2. g Connect demand:

etworking menu item nnect on demand pag on Deman nd m from the top menu b ge, click the Connect bar. t on demand toggle key so that it is ON. E Extra options appear

. See the following su ub-sections for furthe er instructions. Figure 22 - Con nnect on demand conf figuration options www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 27 Setting the router to dial a connection when traffic is detected on specific ports In some situations, you may wish to have the internet connection disabled except at times when outbound traffic to a particular external hosts port or range of ports is sent to the router. To use this feature, click Enable dial port filter and enter the port number or list of port numbers separated by commas. When you select this option, all outbound ICMP/TCP/UDP packets to any remote host on the specified port(s) will trigger the connection to dial. Note that when this feature is enabled, the options to ignore specific packet types are not available. Figure 23 Dial on demand - Data activity triggered connection You can allow Microsoft network awareness (NCSI) traffic through but if you prefer that they do not trigger the connection, click the Ignore Microsoft network awareness (NCSI) traffic toggle key to set it to ON. Figure 24 - DIal on demand - Ignore NCSI traffic Excluding certain packet types from triggering the connection to dial Depending on your environment, you might prefer to exclude certain types of traffic passing through the router from triggering the data connection. You can tell the router to ignore outbound TCP, UDP or ICMP packets. When any of these options are checked the router will not dial a connection when that type of outbound destined data packet reaches the router from a locally connected device. Figure 25 Dial on demand - Excluding IP protocols Excluding certain application types from triggering the connection to dial Some devices may generate general traffic as a part of normal operation which you may not want to trigger the data connection. You can set the router to ignore Domain Name System (DNS), Network Time Protocol (NTP) or Microsoft network awareness (NCSI) traffic from devices behind the router. When you check the box for these options, it tells the router to ignore the request from that application type and will not dial a connection when this data type is received. Figure 26 - Dial on demand - Excluding application types NetComm Wireless Intelligent M2M Router 28 www.netcommwireless.com Se etting time router has a number The ers for conn r of timer settings whi nection an ch let you determine nd disconn when a connection i nection is dialled and when i t is disconnected. OPTION On data activity

, stay online for at least After connecting g, stay online for at least After hanging up p, dont redial for Disconnect rega ardless of traffic after Figure 27 Dial on n demand - Connect an and disconnect timers DESCRIPT ION When traffic as per the con for the specified time perio data activity is detected m nfigured settings above ap od (min. 1 minute, max. 1 h matching the rules above. ppear, the router will either hour). This timer is continuo continue to stay online, or ously reset throughout the d dial a connection and will duration of a dial-up sessio not disconnect it on, whenever This timer configures the r be less than the keep onlin router to not hang-up the c ne period above. This time onnection for the specified er affects the connection on time period after initially d nly once per dial up session dialling the connection. This on, at the beginning of the s s setting cannot session. After a connection has bee en disconnected, you can tell the router to rest for a p period of time before re-dia alling. Forces the router to discon nnect the connection rega rdless of the traffic passing g through it. The default set etting is never. Connect regular up to rly, every / Randomise con nect frequency by gular intervals, use Connec ct regularly, every to specif ify the interval between dia als. Setting this to If you want to have the rou never effectively disables The router also features th have numerous routers in routers are powered on so When it is set to at least 2 the initial dial after the unit randomised dial time of 1 the router will dial the conn uter dial a connection at re this option. he ability to randomise the t an area where a power ou o they do not all try to conn minutes, you are able to c t powers on or after the set minute, the router will dial nection exactly every 2 min time at which the first dial a tage has occurred. Setting nect simultaneously. onfigure the router to rand ttings are saved. For exam the initial connection at a t nutes. Table e 13 - Connect on dem mand - Connect and dis isconnect timers descr criptions action is performed. This is g a random dial time helps s useful in situations such a to reduce network conges as where you stion when all the omise the time it begins to ple, if you configure the rou ime greater than 2 minutes dial. The randomised dial uter to dial every 2 minutes s, but less than 3 minutes. timer only affects s with a After the first dial, erbose mo router provides the o demand feature, click ode option of logging all t k the Enable verbose Ve The on d he data activity whic mode toggle key to h matches the setting switch it ON. See the gs for the Dial on dem e System log section mand feature for adv anced troubleshootin for more information

. ng purposes. To ena ble the logging of the e Dial Figure 28 Dial on n demand - Verbose lo ogging configuration www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 29 Manually connecting/disconnecting There may be times when you need to either force a connection to be made or force a disconnection manually. You can use the Manual connect and Manual disconnect buttons to do this whenever necessary. The online status of the connection is displayed above the buttons. Figure 29 - Dial on demand - Online/Offline control When you have finished configuring the options for the Dial on demand feature, click the Save button at the bottom to save your changes. SMS Wake up The router can also be woken up by means of an SMS message using the SMS diagnostics feature by sending a zero byte class 1 flash SMS. See the Diagnostics section for details on using the SMS Wake up function. NetComm Wireless Intelligent M2M Router 30 www.netcommwireless.com O Operato Operator settings pa The or Settin age enables you to se ngs elect which frequenc y band you will use f for your connection a and enables you to sc can for available netw work operators in you ur area. Fi Figure 30 - Band settin ngs Note: In orde er to change the cellu ve. already activ ular band settings, th he data connection m must be disabled. Wh hen you access this p page, you are prompt ted to disable the da ta connection if it is multiple frequency n networks that may no ot all support High Sp peed Packet Access

(HSPA). You can sel ect the router to only y uter in a country with your requirements. ct the band you wish t able:

to use. You conn Use The if youre using the rou may want to do this i frequencies that suit y nect on the network f rop down list to selec the Change band dr ngs options are availa following band settin ands All Ba All GSM A WCDM MA All 850 GSM 900 GSM 1800 GSM 1900 GSM DA 850 WCM WCDM MA 900 MA 800 WCDM MA 1900 WCDM WCDM MA 2100 ange the default settin not necessary to cha no longer available. ed band selection is en All bands is selecte ed, the router attemp CDMA all options allow GSM All and the WC k the Save button to s save and apply your perator se operator settings fea ect operator mode fro ettings ature allows you perfo om automatic to Manu It is force Whe The Click Op The Sele ng of All bands in mo ost cases. In fact, loc cking to a particular b band can cause conn nection difficulties if th he device is moved t to a location where th he pts to find the most su w you to force the de selection. uitable band based o evice to lock to either on the available netw r 2G networks only, o works for the inserted r 3G networks only. SIM card. orm a scan of availab ual then click the sca ble networks, and to o an button. This opera optionally lock to a p ation can take a few m articular network retu minutes and requires urned by the network that the packet data k scan. To scan for av a session be disconne vailable networks, se ected prior to scanni t the ng. www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 31 A list of the detected 3G service carriers in your area is displayed. Figure 31 - Operator settings Select the most appropriate 3G service from the list shown and click Apply. When Select operator mode is set to Automatic, the router selects the most appropriate operator based on the inserted SIM card. This is the default option and is sufficient for most users. Figure 32 - Detected operator list SIM security settings The SIM security settings page can be used for authenticating SIM cards that have been configured with a security PIN. Unlocking a PIN locked SIM If the SIM card is locked, you will receive a notice when you access the Status page after which you will be directed to the PIN settings page to enter the PIN. The PIN settings page lists the status of the SIM at the top of the page. If you are not redirected to the PIN settings page, to unlock the SIM:

a) Click on the Networking menu from the top menu bar, and then click SIM security settings. NetComm Wireless Intelligent M2M Router 32 Figure 33 - SIM security settings - SIM PIN locked www.netcommwireless.com b) c) d) When this f PIN, the rou When this f unattended Note: Select Enter the P If you are p SIM each ti connect to IN in the Current PIN placing the router in a ime the SIM asks for the cellular service. N field and then enter a remote, unattended it (usually at power u r it again in the Confir d location, you may w up). This enables the rm current PIN field t wish to check the Rem SIM to be PIN locke to confirm the PIN. member PIN option. T d (to prevent unautho This feature allows th orised re-use of the S he router to automatic SIM elsewhere), while cally send the PIN to e still allowing the rou the uter to feature is enabled, th uter decrypts the PIN he PIN you enter whe N and automatically s n setting the Remem ends it to the SIM wit mber PIN feature is en ncrypted and stored on. thout user interventio locally on the router. The next time the SI M asks the router for r the feature is disabled an nd the SIM is PIN loc e. d, this is not desirable ked and the PIN mus st be manually entere ed via the routers co nfiguration interface. In situations where t the router will be t Remember PIN if yo ou do not want to ent ter the PIN code each h time the SIM is inse erted. Click the Sa ave button. If succes ssful, the router displa ays the following scre een:

nabling/Di security PIN protecti isabling SI on can be turned on IM PIN pro or off using the PIN otection protection toggle key y. En The Figure 34 - PIN Setting F ngs www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 33 Changing the SIM PIN code If you would like to change the PIN, click the Change PIN button and enter the current PIN into the Current PIN and Confirm current PIN fields, then enter the desired PIN into the New PIN and Confirm new PIN fields and click the Save button. When the PIN has been changed successfully, the following screen is displayed:

Figure 35 - PIN settings - Change PIN Figure 36 - SIM security settings PIN unlock successful NetComm Wireless Intelligent M2M Router 34 www.netcommwireless.com Un After You Click nlocking a r three incorrect attem a PUK locke mpts at entering the ed SIM PIN, the SIM card be ecomes PUK (Person nal Unblocking Key) l ocked and you are re equested to enter a P PUK code to unlock i t. ain the PUK unlock co ode, you must contac ct Vodafone. Note: To obta will be issued a PUK k the Save button wh K to enable you to unl hen you have finished lock the SIM and ente d entering the new PI er a new PIN. Enter t N and PUK codes. the new PIN and PUK K codes. www

.netcommwireless.com Figure 37 7 - SIM security - SIM P PUK locked NetComm Wire eless Intelligent M2M R Router 35 LA AN AN configu LA The LAN configuration pa uration age is used to config gure the LAN settings s of the router and to enable or disable DN NS Masquerading. Figure 3 38 LAN configuration on settings default IP of the Ethe on. ernet port is 192.168. 1.1 with subnet mask k 255.255.255.0. To c change the IP addre ss or Subnet mask, e enter the new IP Addr ress and/or Subnet m mask and click the Sa ave Note: If you c change the IP addre ss, remember to rebo oot the router and en nter the new IP addre ess into your browser address bar. NS masquerad S masquerading allow er without needing to DNS masquerading nstream clients then DNS masquerading tream DNS servers w may also override th DHCP server assigns ost cases, it is not ne ding ws the router to proxy o know the dynamica ON, the DHCP serve send DNS requests OFF, the DHCP serv without being proxied e DNS Masqueradin s downstream device ecessary to disable D y DNS requests from ally assigned cellular er embedded in the I to the Intelligent M2M ver hands out the up by the Intelligent M2 g option by specifyin es the manually config DNS masquerading b LAN clients to dynam mically assigned DNS s. network DNS servers er hands out its own Intelligent M2M Route M Router which proxi ies them to the upstre P addresses to down stream DNS server IP 2M Router. ng custom DNS Serve gured addresses and but if you need to, clic er IP addresses in th d the DNS Masquera ck the DNS masquer S servers. When ena bled, clients on the ro routers LAN can then n use the router as a DNS IP address (e.g. 192 eam DNS servers. nstream clients direct

.168.1.1) as the DNS S server address to L LAN clients. The tly, so that downstrea am clients send DNS requests directly to the e DHCP Server confi ading option is ignore rading toggle key to t guration mentioned i ed. urn it OFF and then c click the Save button n. in the next section of f this guide. In this ca ase The butto DN DNS serv With dow With upst You the D In m www.netcommwirel less.com NetC 36 Comm Wireless Intellig gent M2M Router HCP DHCP page is used DH The to adjust the settings s used by the routers s built in DHPC Serve er which assigns IP a addresses to locally c connected devices. DH In ad conn broa To c disa HCP relay con dvanced networks co nection, the clients be adcast messages and onfigure the router to bled by default. nfiguration onfigurations where t ehind the Intelligent M d to forward them on o act as a DHCP rela he Intelligent M2M R M2M Router are able to another subnet. y agent click the DHC outer should not be r e to communicate wit responsible for DHCP th the DHCP server w P assignment, but ins when DHCP relay is e stead an existing DH nabled. This enables HCP server is located s the Intelligent M2M N on the Wireless WAN Router to accept clie ent CP relay toggle key t to turn it ON and ent er the DHCP server a address into the DHC CP server address fie eld. DHCP relay is Figure 3 39 DHCP relay conf figuration HCP configura can manually set the ondary DNS server, th ation e start and end addre he primary and seco DH You seco ess range to be used ndary WINS server, a to automatically ass as well as the advanc sign addresses within ced DHCP settings s n, the lease time of th such as NTP, TFTP an e assigned address, nd Option 150/Option name suffix, primary

, the default domain n 160 (VoIP options). and Figu ure 40 - DHCP configu uration www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 37 OPTION DESCRIPTION DHCP start range DHCP end range DHCP lease time (seconds) Default domain name suffix DNS server 1 IP address DNS server 2 IP address WINS server 1 IP address WINS server 2 IP address NTP server (Option 42) TFTP Server (Option 66) DHCP option 150 DHCP option 160 Sets the first IP address of the DHCP range Sets the last IP address of the DHCP range The length of time in seconds that DHCP allocated IP addresses are valid Specifies the default domain name suffix for the DHCP clients. A domain name suffix enables users to access a local server, for example, server1, without typing the full domain name server1.domain.com Specifies the primary DNS (Domain Name System) servers IP address. Specifies the secondary DNS (Domain Name System) servers IP address. Specifies the primary WINS (Windows Internet Name Service) server IP address Specifies the secondary WINS (Windows Internet Name Service) server IP address Specifies the IP address of the NTP (Network Time Protocol) server Specifies the TFTP (Trivial File Transfer Protocol) server This is used to configure Cisco IP phones. When a Cisco IP phone starts, if it is not pre-configured with the IP address and TFTP address, it sends a request to the DHCP server to obtain this information. Specify the string which will be sent as a reply to the option 150 request. This is used to configure Polycom IP phones. When a Polycom IP phone starts, if it is not pre-configured with the IP address and TFTP address, it sends a request to the DHCP server to obtain this information. Specify the string which will be sent as a reply to the option 160 request. Enter the desired DHCP options and click the Save button. Address reservation list DHCP clients are dynamically assigned an IP address as they connect, but you can reserve an address for a particular device using the address reservation list. To add a device to the address reservation list:

Figure 41 DHCP Address reservation list 1. 2. 3. 4. 5. 6. Click the +Add button. In the Computer Name field enter a name for the device. In the MAC Address field, enter the devices MAC address. In the IP Address fields, enter the IP address that you wish to reserve for the device. If the Enable toggle key is not set to ON, click it to switch it to the ON position. Click the Save button to save the settings. NetComm Wireless Intelligent M2M Router 38 www.netcommwireless.com Dy The rese ynamic DHCP Dynamic DHCP clien rvation list fields. Rem client list nt list displays a list o member to click the S of the DHCP clients. I Save button under th f you want to reserve he Address reservatio e the current IP addre on list section to conf ess for future use, cli ck the Clone button a n. firm the configuration and the details will be e copied to the addre ess www

.netcommwireless.com Figure e 42 - Dynamic DHCP c client list NetComm Wire eless Intelligent M2M R Router 39 Routing Static Static routing is the alternative to dynamic routing used in more complex network scenarios and is used to facilitate communication between devices on different networks. Static routing involves configuring the routers in your network with all the information necessary to allow the packets to be forwarded to the correct destination. If you change the IP address of one of the devices in the static route, the route will be broken. Some routes are added by default by the router on initialization such as the Ethernet subnet route for routing to a device on the Ethernet subnet. Figure 43 - Static routing list Adding Static Routes To add a new route to the static routing list, click the +Add button. The Static routes page appears. 1. 2. 3. 4. 5. 6. 7. In the Route name field, type a name for the route so that it can be identified in the static routing list. From the Network interface drop down list, select the interface for which you would like to create a static route. In the Destination IP address field, enter the IP address of the destination of the route. In the IP subnet mask field, enter the subnet mask of the route. In the Gateway IP address field, enter the IP address of the gateway that will facilitate the route. In the Metric field enter the metric for the route. The metric value is used by the router to prioritise routes. The lower the value, the higher the priority. To give the route the highest priority, set it to 0. Click the Save button to save your settings. NetComm Wireless Intelligent M2M Router 40 www.netcommwireless.com Ac Stati tive routing li c routes are displaye ist ed in the Active routin ng list. Figur re 44 - Adding a static c route Fig gure 45 - Active routing ng list eleting static r m the static routing lis routes st, click the De From ico on to the right of the e entry you wish to dele ete. Figure re 46 - Deleting a stati tic route www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 41 RI RIP for th route P

(Routing Information he routers Ethernet s es must be added m Protocol) is used for subnet could be adve anually according to r advertising routes to ertised to a router on your requirements. S o other routers. Thus the PPP interface sid See Adding Static Ro all the routes in the r de so that a router on outes. routers routing table n this network will kno will be advertised to ow how to route to a d other nearby routers device on the router s. For example, the ro s Ethernet subnet. St oute tatic Note: Some r routers will ignore RIP P. Fig gure 47 - RIP configura ration To e nable Routing Inform Click the R 1. Using the V 2. Select the i 3. 4. Click the Sa mation Protocol (RIP) IP toggle key to switc Version drop down lis nterface for which yo ave button to confirm ch it to the ON positio st, select the version ou want RIP to apply. m your settings. on. of RIP that you would You can choose the d like to use. e LAN interface, the W WWAN interface or B oth. NetC 42 Comm Wireless Intellig gent M2M Router www.netcommwirel less.com Re Virtu incre phys routi of th Mas A vir This To c edundancy ual Router Redundanc eased reliability is ac sical router. Two or m ng the data on beha e virtual router is cal configurati y (VRRP) c s a non-proprietary re cy Protocol (VRRP) is g a virtual router (a chieved by advertising are then configured more physical routers r fails, an arrangemen lf of the virtual router led the master router r. ion edundancy protocol n abstract represent to stand for the virtu nt is made for anothe designed to increase tation of master and b al router, with only on er physical router to a e the availability of th backup routers acting ne doing the actual r automatically replace e default gateway se g as a group) as a de outing at any given ti it. The physical route ervicing hosts on the efault gateway to the ime. If the current ph ter that is currently fo same subnet. This e host(s) instead of on ne hysical router that is rwarding data on beh half ter routers have a pri iority of 255 and bac kup router(s) can hav ve a priority between n 1 and 254. rtual router must use address is used by o 00-00-5E-00-01-XX a only one physical rou as its (MAC) address uter at a time, and is s. The last byte of the the only way that oth e address (XX) is the her physical routers c Virtual Router Identif can identify the maste ier (VRID), which is d er router within a virtu different for each virtu ual router. ual router in the netwo ork. Figu ure 48 - VRRP configur uration onfigure VRRP, confi Click the R 1. In the Virtua 2. 3. In the Rout The Virtual 4. 5. Click the Sa igure multiple device edundancy (VRRP) t al ID field, enter an ID er priority field, enter IP address field is us ave button to save th es as follows and con toggle key to activate D between 1 and 255 r a value for the prior sed to specify the VR he new settings. nnect them all via an e VRRP. 5. This is the VRRP ID ity a higher value is RRP IP address this Ethernet network swi itch to downstream d devices. D which is different fo s a higher priority. s is the virtual IP add or each virtual router on the network. ress that both virtual routers share. Note: Configu on a comman arp d uring VRRP changes nd prompt type:

<ip addres s the MAC address of f the Ethernet port an nd therefore if you wa ant to resume with the e web configuration y you must use the new w IP address (VRRP I IP) or ss> (i.e. arp d 192.168 8.1.1) to clear the arp cache.(old M MAC address). www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 43 Port Forwarding The Port forwarding list is used to configure the Network Address Translation (NAT) rules currently in effect on the router. The purpose of the port forwarding feature is to allow mapping of inbound requests to a specific port on the WAN IP address to a device connected on the Ethernet interface. Figure 49 Port forwarding list Adding a port forwarding rule To create a new port forwarding rule:

1. 2. 3. 4. 5. 6. 7. Click the +Add button. The port forwarding settings screen is displayed. Use the Protocol drop down list to select the type of protocol you want to use for the rule. The protocols selections available are TCP, UDP and All. In the Source IP Address field, enter a friendly address that is allowed to access the router or a wildcard IP address (0.0.0.0) that allows all IP addresses to access the router. The Source Port Range (From) and (To) fields are used to specify the port(s) on the source side that are to be forwarded. This allows you to send a range of consecutive port numbers by entering the first in the range in the (From) field and the last in the range in the (To) field. To forward a single port, enter the port in the (From) field and repeat it in the

(To) field. In the Destination network adress field, enter the IP address of the client to which the traffic should be forwarded. The Destination Port Range (From) and (To) fields are used to specify the port(s) on the destination side that are to be forwarded. If the Source port range specifies a single port then the destination port may be configured to any port. If the Source port range specifies a range of port numbers then the Destination port range must be the same as the Source port range. Click the Save button to confirm your settings. NetComm Wireless Intelligent M2M Router 44 www.netcommwireless.com Figure e 50 - Port forwarding s settings delete a port forwardin ng rule, click the To d button on the Port t forwarding list for th he corresponding rule e that you would like to delete. www

.netcommwireless.com NetComm Wire eless Intelligent M2M RRouter 45 DMZ The Demilitarized Zone (DMZ) allows you to configure all incoming traffic on all protocols to be forwarded to a selected device behind the router. This feature can be used to avoid complex port forwarding rules, but it exposes the device to untrusted networks as there is no filtering of what traffic is allowed and what is denied. The DMZ configuration page is used to specify the IP Address of the device to use as the DMZ host. Figure 51 - DMZ configuration 1. 2. 3. Click the DMZ toggle key to turn the DMZ function ON. Enter the IP Address of the device to be the DMZ host into the DMZ IP Address field. Click the Save button to save your settings. NetComm Wireless Intelligent M2M Router 46 www.netcommwireless.com Ro The and With outer Firew Router firewall page blocks all unknown s respect to the other DMZ > MA ther words, the firewa s. When DMZ is enab ministration Settings. wall is used to enable or services, that is, all se Routing options on t C/IP/Port filtering rule all is of the lowest prio bled, MAC/IP/Port filte In ot rules Adm disable the in-built fi ervices not listed on the Networking page es > MAC/IP/Port filte ority when compared ering rules and the ro rewall on the router. the Services configu

, the firewall takes a ering default rule > Ro d to other manual rou outer firewall are igno When enabled, the f uration page of the ro low priority. The prio outer firewall rules uting configurations. T ored but the router wi eful packet inspection n on inbound traffic f from the wireless WA AN irewall performs state uter. rity of the firewall can n be described as:

Therefore, a MAC/IP/

ill still honour the con Port filtering rule take nfiguration of the Rem es priority in the even mote router access co nt that there is a conf ontrol settings listed flict of under www

.netcommwireless.com Figure 5 52 - Router Firewall to oggle key NetComm Wire eless Intelligent M2M R Router 47 MA The enab Dro AC / IP / P MAC/IP/Port filter fea bled with a default ru opped, all connectio Port filterin ature allows you appl le of Accepted, all ns are denied excep ng y a policy to the traff connections will be a pt for those listed in th ic that passes throug allowed except those he filtering rules list. gh the router, both in e listed in the Curren bound and outbound nt MAC / IP / Port filte d, so that network acc ring rules in effect li cess can be controlle ist. Conversely, when ed. When the filter is n the default rule is se et to enabling MAC / IP /

ccess the router, othe Port filtering and sett erwise you will not be Figure ting the default rule to e able to access the u e 53 - MAC / IP / Port o Dropped, you sho user interface of the t filtering ould ensure that you router without resettin have first added a fil ng the router to facto ltering rule which allo ory default settings. ows at least one know wn Note: When MAC/IP to ac

/ Port filter ring rule Cr To c 1. 2. MAC / IP / Port filterin reating a M MAC / IP /

reate a filtering rule:

Click the M Using the D change this Click the Sa In the Curre Default rule (inbound/

s to Dropped, you sho ave button to confirm ent MAC / IP / Port filt 3. 4. ng toggle key to switc

/forward) drop down ould first configure a m the default rule. tering rules in system ch it to the ON positio list, select the defau filter rule that allows on. lt action for the route at least one device a m section, click the +A Add button. er to take when traffic access to the router, reaches it. By defau otherwise you will eff ult, this is configured ffectively be locked o to Accepted. If you out of the router. 5. Enter the d Figure 54 - Curren ent MAC / IP/ Port filte tering rules in effect etails of the rule in th he section that is disp played and click the S Save button. NetC 48 Comm Wireless Intellig gent M2M Router www.netcommwirel less.com Figure 55 -

- MAC / IP / Port filte ering settings OPTION DESCRIPTIO ON U se the drop down list to se ro outer including data enterin th he WAN and traffic leaving op pposite end. elect the direction of the tra ng from the WAN and the L in the direction of the LAN affic for which you want to a LAN. Outbound refers to all

. Forward specifies traffic t apply to the rule. Inbound re traffic exiting the router inc that enters on the LAN or W refers to all traffic that is en cluding traffic leaving in th WAN side and is forwarded tering the e direction of d to the U se the drop down list to se elect the protocol for the ru le. You can have the rule a pply to All protocols, TCP,

, UDP, UDP/TCP or ICMP. E nter the MAC address in si ix groups of two hexadecim mal digits separated by co ons (:). e.g. 00:40:F4:CE:F FA:1E E nter the IPv4 address that t the traffic originates from a and the subnet mask using CIDR notation. E nter the IPv4 address that t the traffic is destined for a nd the subnet mask using CIDR notation. S elect the action to take for yo ou cannot create a rule with a Drop action. traffic which meets the abo th an Accept action since th ove criteria. You can choos he rule is redundant. Likew se to Accept or Drop packe wise, if the default rule is set ets. When the default rule i t to Dropped you cannot c s set to Accept, reate a rule with

[O Optional] Use this field to e enter a comment as a mean ningful description of the ru ule. Table 14 - Curren nt MAC / IP / Port filte ering rules in effect Bound Protocol Source MAC A Address Source IP Add dress Destination IP Address Action Comment 6. The new ru le is displayed in the e filtering rules list. Yo ou can edit the rule b by clicking the Edit button or delete the rule by clicking t the Figure e 56 - Completed filter ering rule www

.netcommwireless.com button. NetComm Wire eless Intelligent M2M R Router 49 oviding a private link between two networ rks or devices over a public network. Data a to be sent via a VPN N needs to be encap psulated and as such h is V VPN A Vir gene The rtual Private Network erally not visible to th advantages of a VPN Data P Acces Data O Data I

(VPN) is a tunnel pro he public network. N connection include e:

Protection ss Control Origin Authentication n Integrity Each h VPN connection ha as different configurat tion requirements. Th he following pages de etail the configuratio n options available fo or the different VPN c connection types. llowing descriptions are an overview of th he various VPN option ns available. More de etailed instructions a re available in separa ate whitepapers on t he NetComm Wireles ss Note: The fo website. r 3 of the OSI model a ts and can be config and as such can prot ured with Site to Site tect higher layered p VPN tunnels with thi protocols. IPSec is us ed for both site to sit s. rd party VPN routers e VPN and Remote A Access VPN. The Inte elligent M2M Router onfiguring m the menu at the top g an IPSec p of the screen, click VPN Networking and und er the VPN section, c click IPSec. A list of configured IPSec VP PN connections is dis splayed. Sec ec operates on Layer ports IPsec end point IPS IPSe supp Co From Fig Figure 57 - IPSec VPN L List begin configuring an n IPSec VPN connect tion. www.netcommwirel less.com k the +Add button to Click NetC 50 Comm Wireless Intellig gent M2M Router Figugure 58 IPSec profilee edit www

.netcommwireless.com NetComm Wire eless Intelligent M2M RRouter 51 NetComm Wireless Intelligent M2M Router 52 www.netcommwireless.com following table descr ribes each of the field ds of the IPSec VPN Connection Settings page. The IT TEM IPSec profile Profile name Enables or disables s the VPN profile. DEFINITION A name used to ide entify the VPN connection p profile. Remote IPSec server add dress The IP address of th he IPSec server. Remote LAN address Remote LAN subnet mas sk Local LAN address Local LAN subnet mask Encapsulation type IKE mode PFS IKE encryption IKE hash IPSec encryption IPSec hash DH group DPD action DPD keep alive time DPD timeout IKE re-key time SA life time Key mode Pre-shared key Remote ID Local ID Update Time Local RSA Key Upload Remote RSA Key Upload d Private key Passphrase Key / Certificate IPSec Certificate Upload Enter the IP addres s of the remote network for r use on the VPN connectio on. Enter the subnet ma ask in use on the remote ne etwork. Enter the IP addres s of the local network for u se on the VPN connection

. Enter the subnet ma ask in use on the local netw work. Select the encapsu lation protocol to use with t the VPN connection. You c can choose ESP, AH or An y. Select the IKE mod e to use with the VPN conn nection. You can choose M Main, Aggressive or Any. Choose whether Pe erfect Forward Secrecy is O ON or OFF for the VPN con nection. Select the cipher ty pe to use for the Internet K Key Exchange. Select the IKE Hash h type to use for the VPN co onnection. The hash is use ed for authentication of pac ckets for the key exchange e. Select the IPSec en cryption type to use with th he VPN connection. Select the IPSec ha ash type to use for the VPN connection. The hash is u sed for authentication of p ackets for the VPN connec ction. Select the desired D Diffie-Hellman group to use e. Higher groups are more secure but also require lon nger to generate a key. Select the desired D Dead Peer Detection action n. This is the action to take when a dead Internet Key y Exchange Peer is detecte ed. Enter the time in se conds for the interval betw ween Dead Peer Detection keep alive messages. Enter the time in se conds of no response from m a peer before Dead Peer Detection times out. Enter the time in se conds between changes o of the encryption key. To di sable changing the key, se et this to 0. Enter the time in se conds for the security asso ociation lifetime. Select the type of k ey mode in use for the VPN N connection. You can sele ect from:

Pr re Shared Key RS SA keys C ertificates The pre-shared key y is the key that peers used d to authenticate each othe er for Internet Key Exchang e. Specifies the doma in name of the remote netw work. Specifies the doma in name of the local netwo rk. Displays the last tim me the key was updated. Select the RSA key file for the local router here e by clicking the Browse b utton. Select the RSA key file for the remote router he ere by clicking the Browse e button. The Private key pas ssphrase of the router is the e passphrase used when g generating the routers priv ate key using OpenSSL CA A. Select the type of k ey or certificate to use for a authentication. You can se lect Local private key, Loca al public certificate, Remot te public certificate, CA cer rtificate, CRL certificate. Select the IPSec ce ertificate to upload by clicki ing the Browse button. Table 1 15 - IPSec Configurati ion Items www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 53 penVPN nVPN is an open sou slation (NAT) and fire sports. Support for O Op Ope trans trans Co From urce virtual private ne ewalls and allows aut OpenVPN is available etwork (VPN) program thentication by certific on several operating m for creating point-to cate, pre-shared key g systems, including o-point or server-to-m y or username and pa Windows, Linux, Mac multi-client encrypted assword. OpenVPN w c OS, Solaris, OpenB d tunnels between ho works well through pr BSD, FreeBSD, NetBS ost computers. It can roxy servers and can SD and QNX. traverse network add n run over TCP and U dress DP onfiguring m the menu at the top g an Open p of the screen, click VPN serve Networking and from er m the VPN section on the left, click OpenV VPN. A list of configur red OpenVPN VPN c connections is display yed. Click k the +Add button for r the type of OpenVP Figu gure 59 - OpenVPN VPN PN List N server/client you w would like to configure e. le key to switch it to t server profile you are ect a port number and the ON position. e creating. d then use the drop d Op To c penVPN Se onfigure an OpenVP Click the O 1. 2. Type a nam Use the Se 3. default pac In the VPN differs from Next to Diff Under Serv the Genera Under the S erver N Server:

OpenVPN profile togg me for the OpenVPN s erver port field to sele cket type is UDP. network address an m your existing addres fie-Hellman paramete ver Certificates, enter ate CA certificate butt Server certificates se 5. 6. 4. 7. d VPN network subn ss scheme. ers, click the Generat r the required details ton to generate the C ection, select the Auth down list to select a p packet type to use fo r your OpenVPN Ser rver. The default Ope enVPN port is 1194 an nd net mask fields, enter r the IP address and network subnet mas k to assign to your VP PN. This is ideally an internal IP address w which te DH button. This wi

. All fields must be co Certificate Authority (C hentication type that y ill create an encryptio ompleted. The Count CA) certificate based you would like to use on key to secure you try field must consist d on this information. e for the OpenVPN Se erver. r OpenVPN connecti of two characters on ion. nly. When the details have been entered, click Note: The D Diffie-Hellman parame eters can take up to 1 10 minutes to genera ate. Please be patient t. www.netcommwirel less.com NetC 54 Comm Wireless Intellig gent M2M Router Ce In th ertificate Auth e Certificate Manage hentication ement section, enter the required details t to create a client cert tificate. All fields are required. When you have finished enterin ng the details, click th he Generate button. Fi Figure 60 - OpenVPN se server configuration Certificate manageme ment en it is done, you can work has been compr click the Download romised, you can retu P12 button or the Do urn to this screen and ownload TGZ button t d use the Certificate to save the certificate drop down list to sele e file depending on w ect the certificate and which format you wou d then press the Rev uld like. If for some re voke button to disable eason the integrity of e it. your onal: To inform the O k the Set network info re of the remote clien OpenVPN server of th ormation button. If yo nts subnet. e network address s ou do not enter the re cheme of the current mote subnet here, an tly selected certificat ny packet requests f te, enter the network rom the server to the address and network client will not be rec k subnet mask in the ceived by the client n d respective fields and etwork because it is not Whe netw Optio click awa www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 55 NetComm Wireless Intelligent M2M Router 56 Figure 61 OpenVPN server profile settings www.netcommwireless.com Use In th ca.c ername / Pass e Username/Passwo rt file. This file will ne sword Authen ord section, enter the ed to be provided to ntication username and pass the client. word you would like t to use for authentica tion on the OpenVPN N Server. Click the Do ownload CA certificat te button to save the Note: If yo ou wish to have more on. connectio e than one client conn nect to this OpenVPN N server, you must us se Certificate authent tication mode as Use ername/Password on ly allows for a single client Optio click awa Whe Co Figure 62 - OpenVP PN Server Username e / Password section onal: To inform the O k the Set Network Info re of the remote clien OpenVPN server of th ormation button. If yo nts subnet. e network address s ou do not enter the re cheme of the current emote subnet here, a tly selected certificat any packet requests f te, enter the network from the server to the address and network e client will not be rec k subnet mask in the ceived by the client n d respective fields and network because it is not en you have finished e entering all the requi red information, click k Save to finish config guring the OpenVPN server. packet type to use fo r the OpenVPN serve er. The default Open VPN port is 1194 and d nt VPN Clien le key to switch it to t the ON position. VPN client profile you name for the OpenV ress of the OpenVPN ype the WAN IP add ect a port number and d then use the drop d are creating. N server. down list to select a p 1. 2. 3. 4. onfiguring Click the O In the Profil In the Serve Use the Se default pac If the Defau selected, th Use the Au g an OpenV OpenVPN profile togg le name field, type a er IP address field, ty erver port field to sele cket type is UDP. ult gateway option is he OpenVPN connec thentication type opt 5. 6. applied on the Open ction allows for secure ions to select the Aut nVPN client page, the e communication link thentication type that e OpenVPN server wi ks between this route t you would like to us ill enable connection er and the remote Op se for the OpenVPN c s to be made to othe enVPN server only. client. er client networks con nnected to it. If it is no ot www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 57 Certificate Authentication In the Certificate upload section at the bottom of the screen, click the Browse button and locate the certificate file you downloaded when you configured the OpenVPN server. When it has been selected, click the Upload button to send it to the router. Figure 63 - OpenVPN client - Certificate upload Username / Password Authentication Enter the username and password to authenticate with the OpenVPN server. Figure 64 - OpenVPN Client - Username/Password section Use the Browse button to locate the CA certificate file you saved from the OpenVPN Server and then press the Upload button to send it to the router. Click the Save button to complete the OpenVPN Client configuration. Configuring an OpenVPN P2P Connection To configure an OpenVPN peer-to-peer connection:

1. 2. 3. Set the OpenVPN profile toggle key to switch it to the ON position. In the Profile name field, type a name for the OpenVPN P2P profile you are creating. On the router designated as the master, leave the Server IP address field empty. On the router designated as the slave, enter the WAN IP address of the master. NetComm Wireless Intelligent M2M Router 58 www.netcommwireless.com 4. 5. 6. 7. 8. 9. Figure 65 65 - OpenVPN P2P mod de settings erver port field to sele Use the Se cket type is UDP. default pac al IP Address and Re In the Loca settings of t the master. Remote network sect Under the R cheme of the slave. address sc Press the G Generate button to cr r. other router have saved the secre When you h e same for the other r Perform the When they are uploaded click th ect a port number and d then use the drop d down list to select a p packet type to use fo r the OpenVPN serve er. The default Open VPN port is 1194 and d mote IP Address fiel ds, enter the respect tive local and remote e IP addresses to use e for the OpenVPN tun nnel. The slave shou ld have the reverse tion, enter the networ rk Address and netwo ork Subnet mask. Th e Network Address a and Network Mask fie elds inform the Maste er node of the LAN reate a secret key to be shared with the sl lave. When the times stamp appears, you c can click the Downloa ad button to save the e file to exchange with h the et key file on each ro router, uploading the he Save button to co uter, use the Browse slaves secret key fil mplete the peer-to-p button to locate the le to master. peer OpenVPN config guration. secret key file for the e master and then pre ess the Upload butto n to send it to the sla ave. www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 59 PPTP-Client The Point-to-Point Tunnelling Protocol (PPTP) is a method for implementing virtual private networks using a TCP and GRE tunnel to encapsulate PPP packets. PPTP operates on Layer 2 of the OSI model and is included on Windows computers. Configuring the PPTP Client To configure the PPTP client:

1. From the menu bar at the top of the screen, click Networking and then from the VPN section on the left side of the screen, click PPTP client. The PPTP client list is displayed. Figure 66 - PPTP client list 2. Click the +Add button to begin configuring a new PPTP client profile. The PPTP client edit screen is displayed. NetComm Wireless Intelligent M2M Router 60 Figure 67 - VPN PPTP client edit www.netcommwireless.com 3. 4. 5. 6. 7. nable PPTP client to Click the En le name list, enter a In the Profil sername and Passwo Use the Us P server address fiel In the PPTP uthentication type dr From the A determine the correc attempt to d P uses a three way CHAP HAP v1 This is the MS-C HAP v2 - This is the M MS-C y. today The Password Auth PAP mits passwords unen transm EAP Extensible Authentic value helps the route The metric changes will have. effect your The Use pe eer DNS option allow required. 10. NAT masqu actually orig Set default The Verbos The Reconn wait is 30 s The Reconn indefinitely, 15. Click the Sa and monito uerading allows the r ginated from the WA route to PPTP sets a se logging option sets nect delay is the time econds so as to not nect retries is the num

, otherwise the maxim ave button to save th or the VPNs connecti 11. 12. 13. 14. 8. 9. ggle key to switch it profile name for the t ord fields to enter the d, enter the IP addre rop down list, select t ct authentication type handshake to authen Microsoft implement Microsoft implementa to the ON position. anything you like and tunnel. This may be a sword for the PPTP ac username and pass er. ess of the PPTP serve pe used on the serve the Authentication typ authentication types for you. There are 5 nticate the identity of a client. ge Handshake Authen ation of the Challeng ation of the Challenge e Handshake Authen d is used to identify th ccount. he tunnel on the route er. the authentication m er. If you do not know s you can choose from m:

method used, select a any and the router wi ill ntication Protocol for ntication Protocol whi which support was d ch was introduced in dropped in Windows n Windows NT 4.0 a Vista. and is still supported entication Protocol u ncrypted and is not se cation Protocol. An A er to prioritise routes ses a password as a ecure. Authentication protoco and must be a numb a means of authentica ation and as such, is commonly supported d. PAP is not recomm mended because it ol commonly used in ber between 0 and 65 wireless networks. 5535. The default val ue is 30 and should n not be modified unle ss you are aware of t the ws you to select wheth her the remote clients s will use the Domain n Name Server of the PPTP server. Click th he toggle key to set t this to ON or OFF as router to modify the p N IP address of the r all outbound data pa s the router to output e in seconds that the flood the PPTP serve mber of connection a mum number of times he changes. The VPN on state. packets sent and rece routers internal NAT ckets to go out throu t detailed logs regard router will wait befor er with connection req attempts that the rout s to retry cannot be g N will attempt to conn eived to inform remot IP address. Click the ugh the PPTP tunnel. ding the PPTP conne re attempting to conn quests, while the max ter will make in the ev greater than 65335. nect after your click S te computers on the e toggle key to switch Click the toggle key ction in the System L nect to the PPTP serv ximum time to wait is vent that the PPTP co internet that packets h this to the ON positi to switch this to the O Log section of the rou er in the event that th 65335 seconds. onnection goes down s originating from a m tion if you want to use ON position if you wa uter interface. he connection is brok outer machine behind the ro e this feature. ant to use this feature e. ken. The minimum tim me to n. If set to 0, the route er will retry the conne ection Save. Click the Status button at the top left ft of the interface to re eturn to the status win ndow www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 61 GRE tunnelling The Generic Route Encapsulation (GRE) protocol is used in addition to Point-to-Point Tunnelling Protocol (PPTP) to create VPNs (virtual private networks) between clients and servers or between clients only. Once a PPTP control session establishes the VPN tunnel GRE is used to securely encapsulate the data or payload. Configuring GRE tunnelling To configure GRE tunnelling:

1. From the menu bar at the top of the screen, click Networking and then from the VPN section on the left side of the screen, click GRE. The GRE client list is displayed. 2. Click the +Add button to begin configuring a new GRE tunnelling client profile. The GRE Client Edit screen is displayed. Figure 68 - GRE client list 3. Click the Enable GRE Tunnel toggle key to switch it to the ON position. Figure 69 GRE client edit NetComm Wireless Intelligent M2M Router 62 www.netcommwireless.com nnel. 4. 5. 6. 7. 8. 9. 10. In the Profil In the GRE In the Loca In the Rem In the Rem In the Rem The TTL (T of 255 is th datagrams The Verbos The Reconn wait is 30 s The Reconn indefinitely, 14. Click the Sa and monito le name, enter a prof server address field al tunnel address field ote tunnel address fi ote network address ote network subnetm Time To Live) field is a e upper limit on the t s destination. If the TT se logging option sets nect delay is the time econds so as to not nect retries is the num

, otherwise the maxim ave button to save th or the VPNs connecti file name for the tunn d, enter the IP addres d, enter the IP addres eld, enter the IP add field, enter the IP ad mask field, enter the s an 8-bit field used to time that an IP datag TL field reaches zero s the router to output e in seconds that the flood the GRE server mber of connection a mum number of times he changes. The VPN on state. 11. 12. 13. thing you like and is u nel. This may be anyt ss of the GRE server. n the tunnel locally. ss you want to assign ress you want to ass sign to the remote tun e remote network. ddress scheme of the emote network. subnet mask of the re remove an undeliver rable data packet fro alue is reduced by at ram can exist. The va m arrives at its destin o before the datagram ding the GRE tunnel i t detailed logs regard router will wait befor re attempting to conn quests, while the max r with connection req ter will make in the ev attempts that the rout s to retry cannot be g greater than 65335. nect after your click S N will attempt to conn used to identify the tu unnel on the router. om a network to avoid t least one for each h ation the data packe n the System Log se nect to the GRE serve ximum time to wait is vent that the GRE co d unnecessary netwo hop the data packet t t is discarded and an ction of the router int er in the event that the 65335 seconds. nnection goes down. ork traffic across the i takes to the next rout n error message is se terface. e connection is brok value nternet. The default v ter on the route to the e ent back to the sende er. en. The minimum tim me to

. If set to 0, the route r will retry the connec ction Save. Click the Status button at the top left ft of the interface to re eturn to the status win ndow www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 63 Services Dynamic DNS The DDNS page is used to configure the Dynamic DNS feature of the router. A number of Dynamic DNS hosts are available from which to select. Dynamic DNS provides a method for the router to update an external name server with the current WAN IP address. To configure dynamic DNS:

Figure 70 Dynamic DNS settings 1. 2. 3. 4. Click the DDNS configuration toggle key to switch it to the ON position. From the Dynamic DNS drop down list, select the Dynamic DNS service that you wish to use. The available DDNS services available are:

In the Username and Password fields, enter the logon credentials for your DDNS account. Enter the password for the account again in the Verify password field. Click the Save button to save the DDNS configuration settings. www.dhs.org www.dyndns.org www.dyns.cx www.easydns.com www.justlinux.com www.ods.org www.tzo.com www.zoneedit.com NetComm Wireless Intelligent M2M Router 64 www.netcommwireless.com N Network NTP (Network Time P The ocation of the router. the l Any NTP server available k time (

Protocol) settings pag

. This provides an ac e publicly on the inter

(NTP) ge allows you to con ccurate timekeeping f rnet may be used. Th figure the Intelligent function for features s he default NTP server M2M Router to synch such as System Log r is 0.netcomm.pool.n hronize its internal clo entries and Firewall ntp.org. ock with a global Inte settings where the cu ernet Time server and urrent system time is d specify the time zo displayed and recor ne for rded. Figure 71 - NTP setting F ngs e time and date conf ht savings time, a Day igured on the router. ylight savings time sc If this is not accurate chedule link appears e, use the Time zone s below the drop dow e drop down list to se wn list. Click the link to elect the correct time o see the start and e zone for the router. I f the nd times for daylight have selected the co rrect time zone, click k the Save button to s save the settings. oggle key to switch it he address of the NT N connection toggle k to the ON position. TP server you wish to key enables or disabl use. es the router from pe erforming a synchron ization of the time ea ach time a mobile bro oadband connection is e key enables or disa uring NTP settings, c ables the router from lick the Save button t m performing a synchr to save the settings. ronization of the time each day. www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 65 e settings g Timezone ettings:

nt time field shows the one observes dayligh Co To c onfiguring onfigure time zone s The Curren 1. selected zo savings. When you h 2. Co To c ngs onfiguring g NTP setti s:

onfigure NTP setting etwork time (NTP) to Click the N 1. service field, enter th 2. In the NTP The Synchr 3. ronization on WWAN d. established The Daily s synchronisation toggl have finished configu When you h 4. 5. Data stream manager The data stream manager provides you with the ability to create mappings between input ports and output ports (e.g. Serial Port, SMS, GPS, USB) and performs any required translation or data processing by each virtual data tunnel. Customers interested in developing their own applications to create custom mappings can contact NetComm Wireless about our Software Development Kit. To add a new data stream:

1. Click the +Add button on the right side of the page. 2. Click the Activate toggle key so that it is in the ON position. Figure 72 - Data stream list Figure 73 - Activate button 3. 4. 5. 6. In the Data stream name field, enter a name to identify the mapping on the Data stream list. Under the Endpoint A section, use the Type drop down list to select the input port. In the Mode drop down list, select the mode of the input port. If Endpoint A is set to Serial, use the displayed drop down lists to specify further parameters about the serial port settings and PAD settings if required. Under the Endpoint B section, use the Type drop down list to select the output port. Use the Mode drop down list to select the mode of the output port. Enter any other details as required for the type of output you have selected. Click the Save button to confirm your settings. NetComm Wireless Intelligent M2M Router 66 www.netcommwireless.com W Watchdo ccess the Watchdog To a ogs gs page, click the Se rvices menu item, the en select the Watchd dogs menu item on th e left. Figu ure 74 - Watchdogs Se ettings chdogs are features w trolled ping packets t oot the device in a las which monitor the ro to 1 or 2 user specifie st resort attempt to re uter for anomalies an ed IP addresses to c estore connectivity. nd restart the router if onfirm an active conn f an anomaly occurs nection. If the watchd preventing its norma dog does not receive al operation. When co e responses to the pin onfigured, the watchd ngs after a specified ts dogs feature transmit number of failures, i t will enting this feature in s able to access the in situations where the d nternet at all times, an device is intentionally nd will always eventu y offline for a particula ally reboot the router ar reason, for examp r if access isn't restor ple, when Dial-on-dem red by the time the v mand has been enab arious timers expire a bled. and Watc cont rebo We r This the f It is d the m be in aution when impleme recommend using ca is because the watc chdog expects to be a fail count is reached. due to the nature of t mobile broadband co ntentionally disconne the watchdog being a onnection is disabled ected on occasion. a last resort standalo d by the user. Therefo one backup mechanis ore, we recommende sm that it will continu ed that you disable th ue to do its job and re his feature if Dial-on-d eboot the device even demand is configured n when the Dial-on-d d or if the mobile bro demand session is idl le, or adband connection w will www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 67 The watchdog works as f The router s If all 3 ping If all 3 ping If all 3 acce If all 3 acce When the n a) b) c) d) e) f) follows:

sends 3 consecutive s to the first destinat s to the second dest elerated pings to the elerated pings to the number of failures rea pings to the first des ion address fail, the r tination address fail, t first destination addr second destination a aches the number co stination address at t router sends 3 conse the router sends 3 pi ress fail, the router se address fail, the route onfigured in the Fail c the interval specified ecutive pings to the s ngs to the first destin ends 3 pings to the s er registers this as a count field, the router in the Periodic Ping second destination ad nation address using second destination ad fail and returns to ste r reboots. If any ping timer field. ddress at the Periodic the Periodic Ping ac ddress at the Periodic ep C. succeeds, the router c Ping timer interval. ccelerated timer inter rval. mer interval. c Ping accelerated ti r returns to step A an nd does not reboot. Note: The Pe eriodic Ping timer sho ould not be set to a v value of less than 210 0 seconds to allow th e router time to reco nnect to the cellular n network following a r eboot. disable the periodic p ping reset monitor, se et Fail count to 0. To d Figure e 75 Ping watchdog s settings NetC 68 Comm Wireless Intellig gent M2M Router www.netcommwirel less.com Co The To c Co The rebo 1. 2. 3. onfiguring Periodic Ping setting g Periodic gs configure the route Ping settin er to transmit controll ngs ed ping packets to 2 2 specified IP addres ses. If the router doe s not receive respon nses to the pings, the e router will reboot. onfigure the ping wa In the First 1. In the Seco 2. 3. In the Perio watchdog f In the Perio to the seco In the Fail c watchdog f atchdog:

destination address ond destination addre odic Ping timer field, function. odic Ping accelerated nd destination addre count field, enter an i function. 4. 5. field, enter a website ess field, enter a web enter an integer betw e address or IP addre bsite address or IP ad ween 300 and 65535 ess to which the rout ddress to which the r for the number of se er should send the fi outer should send th econds the router sho rst round of ping req e second round of pi ould wait between pin uests. ing requests. ng attempts. Setting this to 0 disables the e ping d timer field, enter an ess. Setting this to 0 d integer between 1 an integer between 60 disables the ping wat nd 65535 for the num and 65535 for the nu tchdog function mber of times an acce umber of seconds the e router should wait b between accelerated d ping attempts, i.e. p pings elerated ping should fail before the router reboots. Setting this to 0 disables the pin ng Di To d isabling th disable the Periodic P he Periodic Ping reset function, se c Ping rese et Fail count to 0. et function n fic generated by the periodic ping feature e is usually counted a as chargeable data u usage. Please keep t his in mind when sele ecting how often to p ping. Note: The traff onfiguring router can be config oot if some anomaly o g a Periodi ured to automatically occurs. ic reboot y reboot after a period d of time specified in n minutes. While this is not necessary, it d oes ensure that in the e case of remote ins tallations, the router w will In the Force reboots is 5 If you have preventing time and th Click the Sa e reboot every field, 5 minutes while the m configured a forced a large number of de hen randomly reboot w ave button to save th enter the time in min maximum value is 655 reboot time, you can evices from rebooting within the configured he settings. utes between forced 535 minutes. n use the Randomise g simultaneously and d Randomise reboot t e reboot time drop do d flooding the networ time. reboots. The default t value is 0 which dis ables the Periodic re eboot function. The m minimum period betwe een own list to select a ra rk with connection att ndom reboot timer. R empts. The router wi Randomising the rebo ill wait for the configu oot time is useful for ured Force reboot ev ery www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 69 SNMP SNMP configuration The SNMP page is used to configure the SNMP features of the router. Figure 76 - SNMP configuration SNMP (Simple Network Management Protocol) is used to remotely monitor the router for conditions that may warrant administrative attention. It can be used to retrieve information from the router such as the signal strength, the system time and the interface status. To configure SNMP:

1. 2. Click the SNMP toggle key to switch it to the ON position. Enter Read-only community name and Read-write community name which are used for client authentication. Community names are used as a type of security to prevent access to reading and/or writing to the routers configuration. It is recommended that you change the Community names to something other than the default settings when using this feature. 3. Click the Save button to save any changes to the settings. The Download button displays the Management information base (MIB) of the router. The MIB displays all the objects of the router that can have their values set or report their status. The MIB is formatted in the SNMP-related standard RFC1155. NetComm Wireless Intelligent M2M Router 70 www.netcommwireless.com To s the Network Manage ement System sent as s UDP packets. They y are often used to no otify the management t system of any signi ficant events such as s NMP traps SN es from the router to MP traps are message SNM whet ther the link is up or d down. Co To c onfiguring g SNMP tra s:

onfigure SNMP traps destination field, ent In the Trap 1. 2. In the Hear rtbeat interval field, e ap persistence field to Use the Tra 3. 4. Use the Tra ap retransmission tim aps ter the IP address to nter the number of se o specify the time in me to specify the leng which SNMP data is econds between SNM seconds that an SNM gth of time in seconds to be sent. MP heartbeats. MP trap persists. s between SNMP trap p retransmissions. end a manual SNMP P Heartbeat, click the Send heartbeat butt on. When you have f finished configuring t the SNMP traps, click k the Save button to s save the settings. Figure 77 - SNMP trap F ps www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 71 TR R-069 ccess the TR-069 co To a onfiguration page, clic ck the Services men u item, then select th he TR-069 menu item on the left. Figure re 78 - TR-069 configu guration s a technical specific stomer-premises equ cation also known as uipment (CPE) and A CPE WAN Managem Auto Configuration Se ment Protocol (CWMP ervers (ACS). It is par P). It is a framework fo rticularly efficient in a for remote managem applying configuratio ent and auto-

n updates across er protocol and prov ides several benefits for the maintenance e of a field of CPEs:

Report 069) protocol i TR-069 (Technical R r devices such as cu figuration of end-user Es. works to multiple CPE The conf netw TR-0 069 uses a bi-directio Simpl Enabl Firmw Diagn sed protocol based o onal SOAP/HTTP-bas uration of a device d ifies the initial config of service after a facto es easy restoration o rsion management ware and software ver g nostics and monitorin n the application laye uring installation ory reset or replacem ment of a faulty devic e ust have your own co ompatible ACS infras tructure to use TR-06 69.In order to access s and configure the T R-069 settings you m must be logged into th he router as the root user. Note: You mu figuration R-069 confi TR onfigure TR-069:

To c 1. 2. 3. 4. 5. 6. 7. Click the En nable TR-069 toggle In the ACS URL field, enter the Use the AC CS username field to In the ACS password and Verify In the Conn nection Request Use In the Conn nection Request Pas The inform message acts as a b messages. In the Inform m Period field, enter Click the Sa ave button to save th 8. 9. NetC 72 Comm Wireless Intellig gent M2M Router key to switch it to th Auto Configuration S specify the usernam y ACS password field rname field, enter the sword and Verify pas beacon to inform the e ON position. Servers full domain n e for the Auto Config ds, enter the Auto Co e username to use fo ssword fields, enter th ACS of the existence name or IP address. guration Server. onfiguration Server pa or the connection req he connection reque e of the router. Click t assword. uests. st password. the Enable periodic A the number of secon he settings. nds between the infor rm messages. ACS informs toggle k key to turn on the per riodic ACS inform www.netcommwirel less.com G GPS The the c To u se the GPS function, built-in GPS module current location and t allows you to use loc the current GPS sign cation-based service al conditions (positio s, monitor field deplo on dilution of precisio oyed hardware or find on (PDOP), horizontal d your current locatio dilution of precision on. The GPS Status w

(HDOP) and vertical window provides up t l dilution of precision o date information ab bout er.

(VDOP)) of the route set the GPS operati on toggle key to ON and click the Save b button. The infor avai Google map button p rmation about your lo lable. provides a quick sho ocation, the Clock Syn ort cut to show your ro nc button allows you outers current positio to quickly set the rou on on a map and bec uter clock to the corre cause GPS positionin ect time. This ensure ng relies on accurate s you will always hav clock settings to obt ve the correct GPS p tain the correct osition information www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 73 SMS messaging The Intelligent M2M Router offers an advanced SMS feature set, including sending messages, receiving messages, redirecting incoming messages to another destination, as well as supporting remote commands and diagnostics messages. Some of the functions supported include:

Ability to send a text message via a CDMA network and store it in permanent storage. Ability to receive a text message via a CDMA network and store it in permanent storage. Ability to forward incoming text messages via a CDMA network to another remote destination which may be a TCP/UDP server or other mobile devices. Ability to receive run-time variables from the device (e.g. uptime) on request via SMS Ability to change live configuration on the device (e.g. network username) via SMS. Ability to execute supported commands (e.g. reboot) via SMS Ability to trigger the Intelligent M2M Router to download and install a firmware upgrade Ability to trigger the Intelligent M2M Router to download and apply a configuration file To access the SMS messaging functions of the Intelligent M2M Router, click on the Services menu item from the top menu bar, and then select one of the options under the SMS messaging section on the left hand menu. Setup The Setup page provides the options to enable or disable the SMS messaging functionality and SMS forwarding functionalities of the router. SMS messaging is enabled by default. Figure 79 - General SMS Configuration NetComm Wireless Intelligent M2M Router 74 www.netcommwireless.com OPTION Gene eral SMS configuration SMS S messaging Mess sages per page (10-50) Enco oding scheme SMS S forwarding configuration Forw warding Redi rect to mobile TCP address TCP port UDP P address UDP P port DEFINITION To ggles the SMS functionality y of the router on and off. Th e number of SMS message es to display per page. Mu ust be a value between 10 and 50. e encoding method used f Th aracters if the message inc ch e up to 50 characters in len be for outbound SMS messag cludes special characters. ngth. es. GSM 7-bit mode permi UCS-2 mode allows the se ts up to 160 characters pe ending of Unicode charact 0 er message but drops to 50 ters and permits a messag e to To ggles the SMS forwarding function of the router on a nd off. En ter a mobile number as the e destination for forwarded d SMS messages. En ter an IP address or doma ain name as the destination n for forwarded SMS messa ages using TCP. Th e TCP port on which to con nnect to the remote destina ation. En ter an IP address or doma ain name as the destination n for forwarded SMS messa ages using UDP. Th e UDP port on which to co onnect to the remote destin ation. Tabl ble 16 - SMS Setup Set ettings ding config can be redirected to guration o another mobile dev ice and/or a TCP/UD DP message server. edirect to m can forward incomin Example:

meone sends a text m disable redirection to MS forward SM Inco ming text messages Re You For E If so To d Re You mes The For E If so 200 To d edirect to T can also forward inc sages. an be an IP address TCP/UDP address ca Example:

meone sends a text m message and TCP a 02 at the same time. a TCP or UDP addre disable redirection to mobile ng text messages to a a different destination n number. This destin nation number can b e another mobile pho one or a 3G router ph hone number. message and Redire a mobile, clear the R ect to mobile is set to Redirect to mobile fie

+61412345678, th ld and click the Save he text message is sto e button. ored on the router an nd forwarded to +61 412345678 at the sa ame time. TCP / UDP coming text message P address s to a TCP/UDP base ed destination. The T TCP or UDP server ca an be any kind of pub blic or private server if the server accepts s incoming text-based d or domain name. Th e port number range e is from 1 to 65535. P Please refer to your T TCP/UDP based SMS S server configuration n for which port to us e. address is set to 192

.168.20.3 and TCP port is set to 2002,

, this text message is stored in the router a and forwarded to 19 92.168.20.3 on port ess, clear the TCP ad ddress and UDP addr ress fields and click the Save button. www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 75 New message The New message page can be used to send SMS text messages to a single or multiple recipients. A new SMS message can be sent to a maximum of 100 recipients at the same time. After sending the message, the result is displayed next to the destination number as Success or Failure if the message failed to send. By default, only one destination number field is displayed. Additional destination numbers may be added one at a time after entering a valid number for the current destination number field. To add a destination number, click the button and to remove the last destination in the list, click the button. Figure 80 - SMS - New Message Destination numbers should begin with the + symbol followed by the country calling code. To send a message to a destination number, enter the + symbol followed by the country calling code and then the destination number. For example:

To send a message to the mobile destination number 0412345678 in Australia (country calling code 61), enter +61412345678. After entering the required recipient numbers, type your SMS message in the New message field. As you type your message, a counter shows how many characters you have entered out of the total number available for your chosen encoding scheme. When you have finished typing your message and you are ready to send it, click the Send button. NetComm Wireless Intelligent M2M Router 76 www.netcommwireless.com Inb The box / Outb Inbox displays all rec box ceived messages tha at are stored on the r outer while the Outbo ox displays all sent m messages. ICON www

.netcommwireless.com Figure 81 - SMS Inbo ox F Figure 82 - SMS Outb box DESC RIPTION Forw ward button. Click this butt ton to open a new messag e window where you can f orward the corresponding message to another recipi ient. Rep ply button. Click this button n to open a new message w window where you can rep ly to the sender. Add d to White list. Click this bu tton to add the senders m mobile number to the white list on the router. Del ete button. Click this butto n to delete the correspond ding message. Ref fresh button. Click this butto on to refresh the inbox or o outbox to see new messag es. Tabl ble 17 - Inbox/Outbox x icons NetComm Wire eless Intelligent M2M RRouter 77 D Diagnos Diagnostics page is The us of the router via SM statu To a ccess the Diagnostic stics used to configure the MS commands. cs page, click on the e SMS diagnostics a nd command execut tion configuration. Th his allows you to chan nge the configuration n, perform functions r remotely and check o on the Services menu item then select the SMS S menu on the left and d finally select Diagn ostics beneath it. F Figure 83 - SMS diagn nostics and command d execution configurati tion MS diagno SM The options on this page stics and c command w. e are described below execution n configura ation able remote d bles or disables the r diagnostics an remote diagnostics fe nd command eature. If this setting execution is enabled all incomi ing text messages ar re parsed and tested for remote diagnosti ics commands. En Enab If rem Note: It is p restore norm We highly re ossible to adjust sett mal operation. mote diagnostics com mmands are found, t he router executes th hose commands. This s feature is enabled by default. All remote e diagnostic comman nds that are received d are stored in the Inb box. tings and prevent you ur router from functio oning correctly using remote diagnostics. If this occurs, you wi ill need to perform a factory reset in order r to ecommended that yo ou use the white list a and a password when n utilising this feature e to prevent unauthor ised access. See the e White list descriptio on for more informatio on. NetC 78 Comm Wireless Intellig gent M2M Router www.netcommwirel less.com On Enab If au pass If the This Sen The optio disa been This Sen This If a f ackn Fix This Fixe Sen Enab Sen Whe Num to th Sen You The The nly accept auth bles or disables chec henticated SM cking the senders ph MS messages t the allowed sender hone number against white list for incomin g diagnostics and co ommand execution S SMS messages. thentication is enable sword in the white list ed, the router will che t for the correspondin eck if the senders nu ng sending number. umber exists in the w If they match, the dia white list. If it exists, th agnostic or command he router then checks d is executed. s the password (if con nfigured) in the incom ming message again st the e number does not ex is enabled by defau xist in the white list o lt and it is strongly ad r the password does dvised that you leave not match, the route e this feature enabled he incoming diagnos er does not execute t y. d to maintain security stic or command in th he SMS message. nd Set comma Intelligent M2M Rout onal with set comman bled, the router does n sent. and acknowle ter will automatically nds and the Wakeup s not send any ackno edgement rep reply to certain types command. This opti owledgement after ex plies s of commands recei on Enables or disabl xecution of a set com ived, such as get com les sending an ackno mmand or SMS Wakeu mmands, or execute owledgment messag up command. All ack commands. Howeve e after execution of a knowledgment replies er replies from the Int a set command or SM es are stored in the O are elligent M2M Router MS Wakeup comman d. If e utbox after they have can be useful to det ermine if a command d was received and e executed by the route er. This option is disa abled by default. nd acknowled option allows you to dgement repl specify where to sen lies to nd acknowledgment messages after the e execution of a set, or r exec command. fixed number is selec nowledgement messa cted, the acknowledg age will be sent to th gement message will e number that the SM be sent to the numb MS diagnostic or com ber defined in the Fixe mmand message orig ed number to send re ginated from. The def eplies to field. If the s fault setting is to use selected, the senders number is s the senders numbe r. xed number to field defines the des d Number. o send replies stination number to w s to which error messages s are sent after the ex xecution of a get, set

, or exec command. This field is only disp played when Send E Error SMS to is set to nd command bles or disables the s error replies s message resulting fro sending of an error m m the execution of a get, set, or exec com mmand. All error repl ies are stored in the Outbox after they ha ave been sent. his option is used to the originating numb specify where the er ber of the SMS diagn rror SMS is sent. Use ostic or command. W the radio buttons to When set to Fixed Nu select either Fixed N mber the router will s Number or SMS Send send the error messa der ages r messages sent whe en an SMS diagnostic c or command is exe cuted. The maximum m limit can be set per r hour, day, week or m month. nd error repli en Send Error SMS fo mber. When set to SM e number specified i ies to mmand is set to ON, t or Get/Set/Exec Com MS Sender Number th he router will reply to in the following field. nd a maximum can set the maximum router will send a ma m number of m number of acknow aximum of 100 replies wledgement and error s by default. number of messages s sent is shown below w the options. The to tal transmitted messa age count resets afte er a reboot or at the b beginning of the time frame specified. www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 79 White List for diagnostic or execution SMS The white list is a list of mobile numbers that you can create which are considered friendly to the router. If Only accept authenticated SMS messages is enabled in the diagnostics section, the router will compare the mobile number of all incoming diagnostic and command messages against this white list to determine whether the diagnostic or command should be executed. You may optionally configure a password for each number to give an additional level of security. When a password is specified for a number, the SMS diagnostic or command message is parsed for the password and will only be executed if the number and password match. A maximum of 20 numbers can be stored on the router in the white list. To add a number to the white list, click the +Add button. Figure 84 - White list for diagnostic or execution SMS Figure 85 Adding a number to the SMS white list The White List numbers and passwords can be cleared by pressing the optionally define a password in the Password field. When you have finished adding numbers click the Save button to save the entries. button to the right of each entry. To add a number to the white list, enter it in the Destination number field and NetComm Wireless Intelligent M2M Router 80 www.netcommwireless.com If au The Se ending ow the steps below to Follo Navigate to Confirm tha If you wish for diagnos you wish to If you would g an SM o configure the router o the Services > SMS at the Enable remote to have the router on stic or execution SMS o also configure a pas d prefer to accept SM MS Diag r to optionally accept S messaging > Diagn diagnostics and com nly accept command S messages section, ssword, enter the pas MS diagnostic comm gnostic t SMS diagnostic com nostics page mmand execution tog s from authenticated click the +Add butto ssword in the Passwo ands from any sende 1. 2. 3. 4. Comm mmands only from au mand uthenticated senders and learn how to se end SMS diagnostic c commands to the rou ter. ggle key is set to the senders, ensure tha n and enter the send word field correspond er, set the Only acce ON position. If it is se at Only accept authen ders number in intern ing to the destination pt authenticated SMS et to OFF click the to nticated SMS messag national format into th n number. S messages toggle k oggle key to switch it ges is set to the ON p he Destination numbe to the ON position. position. In the White e list If er field that appears. key to the OFF positio on. ernative method of ad to the message whic dding a number to th ch corresponds to the he white list is to send e senders number. Note: An alte button next t d an SMS message t o the router, navigate e to Services > SMS messaging > Inbox and then click the 5. Click the Sa ave button. stic comma be sent; execute, get ands t and set. The basic ypes of SM Ty Ther re are three types of c execu get VA set VA MS diagnos commands that can ute COMMAND ARIABLE ARIABLE=VALUE syntax is as follows:

thentication is enable PASS PASS PASS must be preceded by ed, each command m MMAND WORD execute COM LE WORD get VARIABL WORD set VARIABL E=VALUE y the password:

examples of SMS diag following are some e passw word6657 execute re ssi get rs pn1=testAPNvalue set ap gnostic commands:

boot wledgmen replies to get comma ment replies toggle ke ample, due to misspe t replies ands with a value and ey is set to ON. If the elling. SM MS acknow router automatically The mand acknowledgem com value e is incorrect, for exa d execute commands e Send command erro s with either a succes or replies toggle key ss or error response. is set to ON, the rou Set commands will o ter will send a reply if only be responded to if the command is co o if the Send Set orrect but a variable o or www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 81 SMS command format Generic Format for reading variables:

get VARIABLE PASSWORD get VARIABLE Generic Format for writing to variables:

set VARIABLE=VALUE PASSWORD set VARIABLE=VALUE Generic Format for executing a command:

Execute COMMAND PASSWORD execute COMMAND Replies Upon receipt of a successfully formatted, authenticated (if required) command, the gateway will reply to the SMS in the following format:

TYPE SMS CONTENTS NOTES get command set command execute command VARIABLE=VALUE Successfully set VARIABLE to VALUE Only sent if the acknowledgment message function is enabled Successfully executed command COMMAND Table 18 - SMS Diagnostic Command Syntax Where VARIABLE is the name of the value to be read Where VARIABLE (x) is the name of another value to be read Where VALUE is the content to be written to the VARIABLE Where COMMAND is a supported command to be executed by the device (e.g. reboot) Where PASSWORD is the password (if configured) for the corresponding sender number specified in the White List Multiple commands can be sent in the same message, if separated by a semicolon. For Example:

get VARIABLE1; get VARIABLE2; get VARIABLE3 PASSWORD get VARIABLE1; get VARIABLE2 set VARIABLE=VALUE1 ; set VARIABLE2=VALUE2 PASSWORD set VARIABLE1=VALUE1; set VARIABLE2=VALUE2; set VARIABLE3=VALUE3 If required, values can also be bound by an apostrophe, double apostrophe or back tick. For Example:

set VARIABLE=VALUE set VARIABLE=VALUE set VARIABLE=`VALUE`

get VARIABLE NetComm Wireless Intelligent M2M Router 82 www.netcommwireless.com www

.netcommwireless.com NetComm Wireeless Intelligent M2M RRouter 83 A pa PAS PAS If the rebo For E PAS PAS Lis A lis pdp profi assword (if required),

, only needs to be sp pecified once per SM S, but can be prefixe ed to each command d if desired. SSWORD get Variabl SSWORD set VARIAB 2 e1; get VARIABLE2 BLE1=VALUE1; set t VARIABLE2=VALUE E2 e command sent incl oot with this same pas udes the reboot co ssword. ommand and has alre eady passed the whit te list password chec ck, the device keeps this password and ex executes the remainin ng command line afte er the Example:

SSWORD execute reb SSWORD execute reb boot; getVariable1;

boot; PASSWORD ge get VARABLE2 et Variable1; get VA ARABLE2 Note: Comm ands, variables and values are case sens sitive. st of valid t of valid commands pcycle, pdpdown ile list page of the We command which can be used i and pdpup comma eb-UI. ds in conjunction with th ands can have a pro he execute command file number suffix x a d are listed below:

added. Without the s suffix specified, the c ommand operates ag gainst the default pro ofile configured on th he

COMMAND D NAME DESCR RIPTION 1 2 3 4 5 re boot pd dpcycle pd dpdown pd dpup Immediately performs a soft reboot. Disconnects (if connecte specified profile in case profile number is selecte ted) and reconnects the da e the profile is active. If no p ed and there is no currentl ata connection. If a profile n profile number is selected, y activated profile. number is selected in the c try to disconnect/reconnec command, try to disconnec ct the current active profile ct/reconnect the e. Reports an error if no Disconnects the PDP. If profile number is selecte profile. f a profile number is selecte ed, try to disconnect the cu ed in the command, the rou urrent active profile. Repor uter tries to disconnect the ts an error if no profile num e specified profile in case t mber is selected and there he profile is active. If no is no currently activated Reconnects the PDP. If selected, the router tries executing the command a profile number is selecte s to connect to the last acti d. The router reports an err ed in the command, the rou ve profile. The gateway wi ror if no profile number is se uter tries to connect with the ll check the currently activa elected and there is no sto he specified profile. If no pr ated profile and disconnec ored last active profile num rofile number is ct this profile before ber. fac ctorydefaults Performs a factory reset t on the router. Performs a download an If the file is a firmware im location is specified imm If the file is a .tar.gz file, If the file is a .pdf, the ro on the Web-UI. Note: If your download U ftp://username:password Note: Authenticated FTP ftp://username:password nd install of a Firmware Up mage as in the case of a .c mediately after the comman the router will apply the fil outer will assume this is a u grade (.cdi), Config File (.t cdi file, the router will apply nd and may be from an HT e as a configuration file up user guide document and s ar.gz) or a help document the recovery image first an TTP or FTP source URL. date for the device and reb save it to the router and ma t (.pdf) file. nd then the main firmware image. The download boot afterwards. ake the file available for vie ewing via the help menu URL includes any space c d@serveraddress/directory P addresses may be used d@serveraddress/directory haracters, please encode t y%20with%20spaces/filena following the format as def y/filename.cdi these prior to transmission ame.cdi fined in RFC1738, for exam mple:

according to RFC1738, fo or example:

Table 19 - List st of Valid SMS diagno ostic commands www.netcommwirel less.com 6 do ownload NetC 84 Comm Wireless Intellig gent M2M Router The varia following table lists v ables are read from o valid variables where or written to for the sp x is a profile numb pecified profile numb ber (1-6). If no profile er (x). is specified, variable es are read from or w written to for the curre ent active profile. If a profile is specified,

RDB VARIABLE NA AME SMS VARIABLE NAME READ/W WRIT E DESCR RIPTION EXAM MPLE VALUE link.profile.1.en able link.profile.1.ap pn link.profile.1.use er link.profile.1.pa ass th_type link.profile.1.aut ocal link.profile.1.iplo link.profile.1.sta atus link.profile.1.use er ass link.profile.1.pa link.profile.1.aut th_type link.profile.1.iplo ocal wwan.0.radio.in nformation.signal_strength wwan.0.meid e_current statistics.usage e_current statistics.usage

/proc/uptime profile username password authtype wanip rssi meid usage wanuptime deviceuptime wwan.0.system _network_status.current_b band band RW Profile

,auth,iplocal,status) rd, chap,202.44.185.111,u p ad:

Rea

(pro ofile no,atd#xxx,user,pass, atd#777,username,passwor 1,at ite:

Writ

(atd d#xxx, user, pass,auth) d#777,username,password atd#

RW RW RW R R R R R R R 3G username 3G password Gue est, could also return null Gue est, could also return null 3G Authenticat ion type pa ap orchap WAN IP addres ss 202 2.44.185.111 3G signal stren gth

-65 5 dBm MEID number 0x0 00A1000021D003BB 3G data usage session of current Rx byte x 500 bytes, Tx 1024 bytes te, Total 0 byte when wwa

, Total 1524 bytes or Rx 0 n down 0 byte, Tx 0 Up time of curr ent 3G session 1 d days 02:30:12 or 0 days 00

:00:00 when wwan down Device up time 1 d days 02:30:12 Current Freque band ncy channel &

CH H:425 PCS-B Band Table 20 -

List of SMS diagnosti tics variables 0 2 3 4 5 6 7 8 9 10 11 SM MS diagno examples below dem The stics exam monstrate various com mples mbinations of suppor rted commands. This s is not an exhaustive e list and serves as a n example of possibi ilities only. D DESCRIPTION AUT THENTICATION INPUT EXAMPLE Send SMS to chan nge the data connection us sername Send SMS to chan nge the data connection pa assword Send SMS to chan authentication nge the data connection Send SMS to rebo oot Send SMS to chec ck the WAN IP address Send SMS to chec ck the mobile signal streng gth Not require ed Required Not require ed Required Not require ed Required Not require ed Required Not require ed Required Not require ed Required set username=NetCo mm PASSWORD set usern name= NetComm set password= `NetCo omm`

PASSWORD set passw word= `NetComm`

set authtype= pap PASSWORD set autht type = pap execute reboot PASSWORD execute r reboot get wanip PASSWORD get wanip p get rssi PASSWORD get rssi www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 85 Send SMS to check the MEID number Send SMS to check the current band Send SMS to Disconnect (if connected) and reconnect the data connection Send SMS to disconnect the data connection Send SMS to connect the data connection Send multiple get command Send multiple set command Send SMS to reset to factory default settings Send SMS to retrieve status of router Send SMS to retrieve the history of the session, including start time, end time and total data usage Send SMS to configure the router to send syslog to a remote syslog server Send SMS to wake up the router, turn on the default gateway and trigger the connect on demand profile if in waiting state. Send SMS to perform firmware upgrade when firmware is located on HTTP server Send SMS to perform firmware upgrade when firmware is located on FTP server Send SMS to turn off PPPoE Send SMS to turn on PPPoE and set dialstring and service name Send SMS to retrieve the PPPoE status, currently configured dial string and service name Send SMS to set the LED mode timeout to 10 minutes Send SMS to retrieve the current LED mode Retrieve current SSH protocol Not required Required Not required Required Not required Required Not required Required Not required Required Not required Required Not required Required Not required Required Not required Required Not required Required Not required Required Not required Required Not required Required Not required Required Not required Required Not required Required Not required Required Not required Required Not required Required Not required Required get meid PASSWORD get meid get band PASSWORD get band execute pdpcycle PASSWORD execute pdpcycle execute pdpdown PASSWORD execute pdpdown execute pdpup PASSWORD execute pdpup get wanip; get rssi PASSWORD get wanip; get rssi set ssh.genkeys=1; set username=test; set auth=pap PASSWORD set ssh.genkeys=1; set username=test; set auth=pap execute factorydefaults PASSWORD execute factorydefaults get status PASSWORD get status get sessionhistory PASSWORD get sessionhistory set syslogserver PASSWORD set syslogserver execute wakeup PASSWORD execute wakeup execute download http://download.com:8080/firmware_image.cdi execute download http://download.com:8080/firmware_image_r.cdi PASSWORD execute download http://download.com:8080/firmware_image.cdi PASSWORD execute download http://download.com:8080/firmware_image_r.cdi execute download ftp://username:password@download.com/firmware_image.cdi execute download ftp://username:password@ download.com/firmware_image_r.cdi PASSWORD execute download ftp://username:password@ download.com/firmware_image.cdi PASSWORD execute download ftp://username:password@ download.com/firmware_image_r.cdi set pppoe=0 PASSWORD set pppoe=0 set pppoe=1,atd#777, Test PASSWORD set pppoe=1,atd#777, Test get pppoe PASSWORD get pppoe set ledmode=10 PASSWORD set ledmode=10 get ledmode PASSWORD get ledmode get ssh.proto PASSWORD get ssh.proto NetComm Wireless Intelligent M2M Router 86 www.netcommwireless.com Select SSH protoc col Retrieve password d authentication status Enable/disable pa assword authentication on h host Generate set of pu ublic/private keys on the ho ost Clear client public c keys stored on host Retrieve the MEID D of the router Not require ed Required Not require ed Required Not require ed Required Not require ed Required Not require ed Required Not require ed Required set ssh.proto=1 PASSWORD set ssh.p proto=1 get ssh.passauth PASSWORD get.ssh.p passauth set ssh.passauth=1 or r set ssh.passauth=0 PASSWORD set ssh.p passauth=1 or PASSWORD set ssh.passauth=0 execute ssh.genkeys PASSWORD execute s ssh.genkeys execute ssh.clearkeys s PASSWORD execute s ssh.clearkeys get MEID PASSWORD get MEID D Table 21 - SM MS diagnostics examp ple commands www

.netcommwireless.com NetComm Wireeless Intelligent M2M RRouter 87 System Log The Log pages are used to display or download the System log and IPSec logs on the router. System log The System Log enables you to troubleshoot any issues you may be experiencing with your Intelligent M2M Router. To access the System Log page, click on the System menu. The System Log is displayed. Figure 86 - System log file Log file Use the Display level drop-down list to select a message level to be displayed. The message levels are described in the table below. To download the System log for offline viewing, right-click the Download button and choose Save as.. to save the file. To clear the System log, click the Clear button. The downloaded log file is in Linux text format with carriage return (CR) only at the end of a line, therefore in order to be displayed correctly with new lines shown, it is recommended to use a text file viewer which displays this format correctly (e.g. Notepad++). Log data is stored in RAM and therefore, when the unit loses power or is rebooted, it will lose any log information stored in RAM. To ensure that log information is accessible between reboots of the router there are two options:

1. Enable the Log to file option NetComm Wireless Intelligent M2M Router 88 www.netcommwireless.com 2. Use a remo ote syslog server www.netcommwireless.com NetComm Wireeless Intelligent M2M RRouter 89 Enable the log to file option When the router is configured to log to a file, the log data is stored in flash memory, making it accessible after a reboot of the router. Up to 512kb of log data will be stored before it is overwritten by new log data. Flash memory has a finite number of program-erase operations that it may perform to the blocks of memory. While this number of program-erase operations is quite large, we recommend that you do not enable this option for anything other than debugging to avoid excessive wear on the memory. Use a remote syslog server The router can be configured to output log data to a remote syslog server. This is an application running on a remote computer which accepts and displays the log data. Most syslog servers can also save the log data to a file on the computer on which it is running allowing you to ensure that no log data is lost between reboots. To configure the Intelligent M2M Router to output log data to a remote syslog server:

1. 2. 3. Click on the System menu from the top menu bar. The System log item is displayed. Under the Remote syslog server section, enter the IP address or hostname of the syslog server in the IP / Hostname [:PORT] field. You can also specify the port number after the IP or hostname by entering a semi-colon and then the port number e.g. 192.168.1.102:514. If you do not specify a port number, the router will use the default UDP port 514. Click the Save button to save the configuration. Figure 87 - System log All Debug Info Notice Warning Error ITEM DEFINITION Display all system log messages. Show extended system log messages with full debugging level details. Show informational messages only. Show normal system logging information. Show warning messages only. Show error condition messages only. Table 22 - System log detail levels NetComm Wireless Intelligent M2M Router 90 www.netcommwireless.com IPS The Sec log IPSec log section pro ovides the ability for you to download the log for the IPSec VP PN function. This can assist in troubleshoo oting any problems yo ou may have with the e IPSec VPN. Figure 88 - IPSec log g the Log level drop d disconnected as a ch own list to specify th hange in logging leve e type of detail you w el requires the IPSec want to capture in the service to be restarte e log and then click t ed. he Save button. Whe n you change the log gging level, any activ ve IPSec VPN tunnels s will Use be d To d download the IPSec lo og, click the Downloa ad IPSec log button a and you will be prom mpted to save the file. www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 91 Sy ystem C ettings bac Se The settings backup / res rface as root usin inter red settings, backing desi Config ckup and r store page is used to ng the password ad g them up to a file an guration n restore o backup or restore th dmin. The backup d then restoring that he routers configurat

/ restore functions ca file to multiple Intellig tion or to reset it to fa an be used to easily c gent M2M Routers. actory defaults. In ord configure a large num der to view the setting mber of Intelligent M2 gs page you must be 2M Router by configu e logged into the web uring one router with b user your Figure 89 89 Settings backup a and restore Bac Log If yo your ck up your ro in to the web configu u want to password p r files, just click on Sa outers configu uration interface, clic protect your backup ave. The router will th uration k on the System men configuration files, e hen prompt you to se nu and select Setting nter your password i lect a location to sav e. gs backup and restore n the fields under Sa ave a copy of current ve the settings file. t settings and click on n Save. If you dont w want to password pro otect Note: The foll lowing conditions ap ply:-

It is NOT po You may ch ossible to edit the co hange the name of th ntents of the file dow he file if you wish but wnloaded; if you modi the filename extensio ify the contents of the on must remain as . e configuration file in cfg any way you will not t be able to restore it later. Res store your ba In the web From the R Click Resto 1. 2. 3. ackup configu configuration interfac Restore saved setting ore to copy the setting uration ce click on the Syste s section, click on Br gs to the new Intellig m menu and select S rowse or Choose a fi ent M2M Router. The Settings backup and ile and select the bac e router will apply the restore. ckup configuration fil ese settings and infor e on your computer. click on OK. rm you it will reboot -

Res Click resto storing the ro k the Restore Default oring of factory defau outers factory ts button to restore th ults, click OK. y default confi he factory default con iguration nfiguration. The route er asks you to confirm m that you wish to res store factory default s settings. If you wish t o continue with the Note: All curr root and d rent settings on the ro default password ad outer will be lost whe dmin will be config n performing a restor gured. re of factory default s settings. The device IP address will chang ge to 192.168.1.1 an d the default usernam me NetC 92 Comm Wireless Intellig gent M2M Router www.netcommwirel less.com pload ccess the Upload pa Upload page allows be installed from this more information on a Up To a The also For m age, click on the Syst you to upload firmwa s page. PDF files, su application developm tem menu, then Syst are files, HTTPS certi ch as this user guide ment, contact NetCom em Configuration and ficates or user create e may also be upload mm Wireless about o d then Upload. ed application packa ded for access on the ur Software Develop ages to the Intelligent t M2M Router. When e routers help page. ment Kit. firmware files have b been uploaded, they can Figure 90 - Upload pag F age Up The pdating the firmware update pro e Firmwar cess involves first up re pdating the recovery image firmware and then updating the m ain firmware image. er to perform an upda ate, you must be logg ged into the router wit th the root manager account (see the Adv vanced configuration n section for more de etails). Note: In orde To u pdate the Intelligent Power on th 1. Log in to th 2. 3. Select the S Under the F 4. ntc_nwl12_ Click the U M2M Routers firmwa he router as describe he router with the root System item from the File uploads section, _x.xx.xx.x_r.cdi while pload button. The firm are:

ed in the Installing the t user account (See t e top menu bar, selec click the Browse but the main system firm mware image is uploa 5. e router section. the Advanced config ct the System configu tton. Locate the reco mware image is name aded to the storage o uration section for de uration item from the overy firmware image ed ntc_nwl12_x.xx.xx on the router. etails) menu on the left and file on your compute x.x.cdi. d then select the Uplo er and click Open. Th oad menu item. he recovery image is named www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 93 Figure 91 - File upload 6. 7. Repeat steps 4 and 5 for the main system firmware image. The uploaded firmware images are listed in the Uploaded files section. Click the Install link next to the recovery image to begin installing the recovery firmware image and then click OK on the confirmation window that appears. 8. The recovery firmware image is flashed and when it is complete, the router displays The firmware update was successful and returns to the main Upload screen. Figure 92 - Uploaded files Figure 93 - Recovery firmware flash process NetComm Wireless Intelligent M2M Router 94 www.netcommwireless.com 9. 10. Click the In nstall link to the right o of the main firmware image you uploaded d and then click OK t to confirm that you wa ant to continue with t the installation. Note: Do not remove the power w when the routers LED Ds are flashing as this s is when the firmwar e update is in proces ss. The installa ation is complete whe en the countdown rea aches zero. The route er attempts to redirec ct you to the Status p age. Figure 94 -

- Installing main firm mware image the reset button on t 11. Hold down

. information the router for 15-20 s econds to reboot and d restore the factory default settings of th e router. See the Res storing factory defau lt settings section for r more www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 95 Package manager The Package Manager page is used to provide details of any user installed packages on the router and allow them to be uninstalled. For more information on application development, contact NetComm Wireless about our Software Development Kit. Figure 95 Software applications manager The Application name, Version number of the application, the architecture type and time of installation are all displayed. Clicking the Package details link will display a pop-up window with further details of the package. To uninstall any software applications, click the Uninstall link. NetComm Wireless Intelligent M2M Router 96 www.netcommwireless.com Ad To a The dministrati ccess the Administra Administration settin ion setting ation Settings page, c gs page is used to e gs click on the System m nable or disable prot menu then the Admin tocols used for remot nistration menu on the te access and config e left and then click o gure the passwords f on Administration Set or the user accounts ttings. s used to log in to the e router. www

.netcommwireless.com Figur ure 96 - Administration n page NetComm Wire eless Intelligent M2M R Router 97 D DEFINITION Enable or disa able remote HTTP access t to the router. You can also set the port you would like e remote HTTP access to b e available on. Enter a port nu umber between 1 and 655 34 to use when accessing the router remotely. Enable or disa able remote HTTPS access s to the router using a secu ure connection. Enter a port nu umber between 1 and 655 34 to use when accessing the router remotely over a secure HTTPS connection

. Enable or disa able remote telnet (comma nd line) access to the route er. Enable or disa able Secure Shell on the ro uter. Enter the port number for remote SSH ac ccess. Must be a port num ber between 1 and 65534. Enable or disa able remote ping response s on the WWAN connectio on. Use the drop down list to select the root or admin account to chang ge its web user interface p password. Enter the desi red web user interface pas ssword. Re-enter the d desired web user interface password. Displays the T Telnet/SSH.username. This may not be changed. Enter the desi red Telnet/SSH password. Re-enter the d desired Telnet/SSH passw ord. Table 23 - Ad Administration configu uration options OPTION Remote router access co ontrol Enable HTTP HTTP management port Enable HTTPS Remote HTTPS access p port Enable Telnet Enable SSH Remote SSH Access Port rt Enable Ping Web User Interface acco ount Username Password Confirm password Telnet/SSH account Username Password Confirm password Note: You can To a 2. ccess the routers co Open a new 1. onfiguration pages re w browser window an emotely:

nd navigate to the WA AN IP address and a assigned port numbe r of the router, for ex ample http://123.209 9.130.249:8080 n find the routers WA AN IP address by clic king on the Status m menu. The WWAN IP P field in the WWAN C Connection Status se ection shows the route ers WAN IP address

. Enter the us sername and passwo ord to login to the rou uter and click Log in. Note: To perfo account. orm functions like Firm mware upgrade, devi ice configuration bac ckup and to restore a and reset the router to o factory defaults, yo ou must be logged in with the root manage er www.netcommwirel less.com NetC 98 Comm Wireless Intellig gent M2M Router ment SL/TLS protocol. It is u wish to have a secu Sign. When a web b d certificate authoritie onnections work:

efault. ed is encrypted with d private keys on both only to those who ha to decrypt informatio ate which is identical erate your own self-si H HTTPS k What is HTT W P Secure or HTTPS is HTT site t to which it is connect ertificates issued by t of ce n verify the authentic it ca Ther re are two main differ HTTPS use 1. Over an HT 2. encryption is achieve rmation (encrypt it), m rmation and can be d h Intelligent M2M Rou ue key. Additionally, e certificates to the r nagem key ma

TP Secure?

P protocol over an SS s the use of the HTTP ted. This is especially y important when you thorities such as Veri trusted certificate aut a built-in list of trusted city of the site using a rences between how HTTPS and HTTP co TP uses port 80 by de s port 443 while HTT data sent and receiv TTPS connection, all d of a pair of public and ed through the use o making the informatio on secure and visible e private key is used distributed freely. The signed digital certifica uter contains a self-s you may use third pa arty software to gene router. The infor infor Each uniq thos Ge To g enerating generate your own se Click the Sy Enter the ce self-signe your own elf-signed certificate:

top menu bar, then A ystem item from the t ertificate details usin g the appropriate fie 1. 2. ed certifica ate used primarily to pro ure connection over a rowser makes a conn es. otect against eavesdr a public network suc nection attempt to a s ropping of communic h as the internet. HTT secured web site, a d cation between a web TPS connections are digital certificate is s eb b browser and the we e secured through the e use o that ent to the browser so SSL while over an H h sides of the connec ave the correspondin on and must be secre on all Intelligent M2M igned digital certifica TTP connection, all d ction. In cryptograph ng key to recover (de et by its owner. M Routers. For a grea ate or purchase a sig data is sent unencryp y, a key refers to a nu crypt) the information pted. umerical value used n. The public key is u by an algorithm to a used to encrypt lter ater level of security, ned certificate from a the router also supp a trusted certificate a ports generating your authority and then up r own load Administration from th lds. Each field must b he side menu bar and be completed in orde d then HTTPS key m er to generate a certi anagement. ficate. Figure 97 - Ge Generate self signed HT TTPS certificate Note: The C Country field must con ntain a code for the d desired country from the list below. www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 99 CODE COUNTRY CODE COUNTRY CODE COUNTRY CODE COUNTRY AX AD AE AF AG AI AL AM AN AO AQ AR AS AT AU AW AZ BA BB BD BE BF BG BH BI BJ BM BN BO BR BS BT BV BW BZ CA CC CF CH CI CK CL CM CN CO CR CS CV CX CY CZ DE DJ DK DM DO DZ EC EE EG EH land Islands Andorra United Arab Emirates Afghanistan Antigua and Barbuda Anguilla Albania Armenia Netherlands Antilles Angola Antarctica Argentina American Samoa Austria Australia Aruba Azerbaijan Bosnia and Herzegovina Barbados Bangladesh Belgium Burkina Faso Bulgaria Bahrain Burundi Benin Bermuda Brunei Darussalam Bolivia Brazil Bahamas Bhutan Bouvet Island Botswana Belize Canada Cocos (Keeling) Islands Central African Republic Switzerland Cote D'Ivoire (Ivory Coast) Cook Islands Chile Cameroon China Colombia Costa Rica Czechoslovakia (former) Cape Verde Christmas Island Cyprus Czech Republic Germany Djibouti Denmark Dominica Dominican Republic Algeria Ecuador Estonia Egypt Western Sahara ER ES ET FI FJ FK FM FO FR FX GA GB GD GE GF GG GH GI GL GM GN GP GQ GR GS GT GU GW GY HK HM HN HR HT HU ID IE IL IM IN IO IS IT JE JM JO JP KE KG KH KI KM KN KR KW KY KZ LA LC LI LK Eritrea Spain Ethiopia Finland Fiji Falkland Islands (Malvinas) Micronesia Faroe Islands France France, Metropolitan Gabon Great Britain (UK) Grenada Georgia French Guiana Guernsey Ghana Gibraltar Greenland Gambia Guinea Guadeloupe Equatorial Guinea Greece S. Georgia and S. Sandwich Isls. Guatemala Guam Guinea-Bissau Guyana Hong Kong Heard and McDonald Islands Honduras Croatia (Hrvatska) Haiti Hungary Indonesia Ireland Israel Isle of Man India British Indian Ocean Territory Iceland Italy Jersey Jamaica Jordan Japan Kenya Kyrgyzstan Cambodia Kiribati Comoros Saint Kitts and Nevis Korea (South) Kuwait Cayman Islands Kazakhstan Laos Saint Lucia Liechtenstein Sri Lanka LS LT LU LV LY MA MC MD ME MG MH MK ML MM MN MO MP MQ MR MS MT MU MV MW MX MY MZ NA NC NE NF NG NI NL NO NP NR NT NU NZ OM PA PE PF PG PH PK PL PM PN PR PS PT PW PY QA RE RO RS RU RW Lesotho Lithuania Luxembourg Latvia Libya Morocco Monaco Moldova Montenegro Madagascar Marshall Islands Macedonia Mali Myanmar Mongolia Macau Northern Mariana Islands Martinique Mauritania Montserrat Malta Mauritius Maldives Malawi Mexico Malaysia Mozambique Namibia New Caledonia Niger Norfolk Island Nigeria Nicaragua Netherlands Norway Nepal Nauru Neutral Zone Niue New Zealand (Aotearoa) Oman Panama Peru French Polynesia Papua New Guinea Philippines Pakistan Poland St. Pierre and Miquelon Pitcairn Puerto Rico Palestinian Territory Portugal Palau Paraguay Qatar Reunion Romania Serbia Russian Federation Rwanda SA SB SC SE SG SH SI SJ SK SL SM SN SR ST SU SV SZ TC TD TF TG TH TJ TK TM TN TO TP TR TT TV TW TZ UA UG UM US UY UZ VA VC VE VG VI VN VU WF WS YE YT ZA ZM COM EDU GOV INT MIL NET ORG ARPA Saudi Arabia Solomon Islands Seychelles Sweden Singapore St. Helena Slovenia Svalbard and Jan Mayen Islands Slovak Republic Sierra Leone San Marino Senegal Suriname Sao Tome and Principe USSR (former) El Salvador Swaziland Turks and Caicos Islands Chad French Southern Territories Togo Thailand Tajikistan Tokelau Turkmenistan Tunisia Tonga East Timor Turkey Trinidad and Tobago Tuvalu Taiwan Tanzania Ukraine Uganda US Minor Outlying Islands United States Uruguay Uzbekistan Vatican City State (Holy See) Saint Vincent and the Grenadines Venezuela Virgin Islands (British) Virgin Islands (U.S.) Viet Nam Vanuatu Wallis and Futuna Islands Samoa Yemen Mayotte South Africa Zambia US Commercial US Educational US Government International US Military Network Non-Profit Organization Old style Arpanet NetComm Wireless Intelligent M2M Router 100 www.netcommwireless.com www

.netcommwireless.com NetComm Wireeless Intelligent M2M RRouter 101 3. When you have entered all the required details, press the Generate button. The certificate takes several minutes to generate. When the certificate has been generated, you are informed that it has been successfully generated and installed. The web server on the router restarts and you are logged out of the router. Click OK to be taken back to the login screen. Figure 98 - New certificate successfully generated message NetComm Wireless Intelligent M2M Router 102 www.netcommwireless.com SS SH Key ure Shell (SSH) is UN Secu betw ween machines. It wa SSH uses RSA public key Use a Use a y Manag NIX-based command as designed as a rep gemen nt rk protocol used to g interface and netwo lacement for Telnet a and other insecure re gain secure access to emote shell protocols o a remote computer which send informat

, execute commands tion, including passw s on a remote machin words, as plain text. ne or to transfer files y cryptography for bo automatically generat a manually generated oth connection and a ted public-private key d public-private key p authentication. Two c y pairs to encrypt the pair to perform the au common ways of usin e network connection uthentication and allo ng SSH are:

n and then use passw ow users or programs word authentication to s to log in without usin o log on. ng a password. Figure 9 99 - SSH Server Confi figuration ation SH Server C SS onfigure the SSH ser To c Use the SS 1. Select the t 2. authenticat Click the Sa Configura rver settings:

H Protocol drop dow types of authenticatio tion methods on but y ave button to confirm 3. wn list to select the pr on you want to use by you may not turn them m your settings. rotocol that you want y clicking the Enable m both off. to use. Protocol 2 is e password authentic more recent and is c ation and Enable key considered more sec y authentication togg cure. gle keys on or off. Not te that you may have both www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 103 Host key management SSH keys provide a means of identification using public key cryptography and challenge response authentication. This means that a secure connection can be established without transmitting a password, thereby greatly reducing the threat of someone eavesdropping and guessing the correct credentials. SSH Keys always come in pairs with one being a public key and the other a private key. The public key may be shared with any server to which you want to connect. When a connection request is made, the server uses the public key to encrypt a challenge (a coded message) to which the correct response must be given. Only the private key can decrypt this challenge and produce the correct response. For this reason, the private key should not be shared with those who you do not wish to give authorization. The Host key management section displays the current public keys on the router and their date and timestamp. These public keys are provided in different formats, including DSA, RSA and ECDSA. Each format has advantages and disadvantages in terms of signature generation speed, validation speed and encryption/decryption speed. There are also compatibility concerns to consider with older clients when using ECDSA, for example. Generating new keys The complete set of keys can be re-generated by selecting the Generate keys button. This key generation process takes approximately 30 seconds to complete. Downloading keys The Get keys button allows you to download the complete set of public and private keys while the Get public keys button will download only the set of public keys. Uploading your own key files Click the Upload keys button to upload your own public key to the router. Client key management The Client Key Management section is used for uploading the public key file of clients. To upload a client public key, click the Upload button, browse to the file and click Open. When the file is uploaded, it is examined for validity. If the key file is not a valid public key, it will not be uploaded. NetComm Wireless Intelligent M2M Router 104 www.netcommwireless.com LE ED operati 7 front LED indicator The on th he left and finally sele ion mode rs may be turned off a ect LED Operation M after a timeout period Mode. d for aesthetic or pow wer saving reasons. T To access the LED O Operation Mode page e, click the System m enu, then Administra ation Figure re 100 - LED Operation n Mode Mode drop down list cified period, select T cators. The LED Powe t sets the operation m Turn off after timeout er Off Timer must be mode of the LEDs on t. When configured to an integer between the front panel of the o turn off after timeou 1 and 65535. e router. To set the lig ut, use the LED powe ghts to operate at all t er off timer field to sp times, set this to Alwa ecify the time in minu ways on. To set the lig utes to wait before tu hts to turn off after a rning off the LED wait period begins fr and wait for the config rom the time the Save gured time before tur e button is clicked. W rning off again. When the wait period expires, the LEDs wi ill turn off. If the route er is rebooted, the LE ED power off timer is reset. The router will boot The spec indic The up a www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 105 Re The To re eboot reboot option in the S eboot the router:

System section perfo orms a soft reboot of the router. This can b be useful if you have made configuration changes you want to o implement. Click the Sy Click the R ystem menu item from eboot button from the m the top menu bar. e menu on the left sid de of the screen. Figure re 101 - Reboot menu u option The router d displays a warning th hat you are about to p perform a reboot. If y you wish to proceed, click the Reboot but ton then click OK on the confirmation win ndow which appears. Figure re 102 - Reboot confir rmation Note: It can take up to 2 minutes s for the router to reb oot. 1. 2. 3. t ogging out Lo To lo og out of the router, c click the icon at the top right corner o of the web user interf face. NetC Comm Wireless Intellig 106 gent M2M Router www.netcommwirel less.com A App pend dix A: T Tab les ble 1 - Document ble 2 - Device Dim ble 3 - LED Indica ble 4 - Signal stre ble 5 Interfaces ble 6 - PoE power ble 7 - Locking po ble 8 - Average po ble 9 - Manageme ble 10 - Status pa ble 11 - Data conn ble 12 - Connect o ble 13 - Current M ble 14 - IPSec Co ble 15 - SMS Setu ble 16 - Inbox/Out ble 17 - SMS Diag ble 18 - List of Val ble 19 - List of SM ble 22 - SMS diag ble 23 - System lo ble 24 - Administr ble 25 - LAN Mana ble 26 - Web Inter ble 27 - Telnet Ac ble 28 - RJ-45 con Revision History . mensions ............. ators ..................... ngth LED descrip

............................ r classes .............. ower block pin ou ower consumptio ent account login ge item details ... nection item deta on demand - Con MAC / IP / Port filte nfiguration Items up Settings .......... tbox icons ........... gnostic Command lid SMS diagnost MS diagnostics va gnostics example og detail levels .... ration configuratio agement Default rface Default Sett cess .................... nnector pin outs .. ........................... ........................... ........................... ptions .................. ........................... ........................... uts ........................ on figures ............. details ............... ........................... ails ....................... nnect and discon ering rules in effe

........................... ........................... ........................... d Syntax .............. ic commands ..... ariables ................ commands ........ ........................... on options ........... Settings ............. tings .................... ........................... ........................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... nect timers desc ct ........................ .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... riptions ............... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... .......................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... ........................... .... 3

..... 8

..... 9

... 10

... 11

... 17

... 18

... 18

... 19

... 22

... 24

... 29

... 49

... 53

... 75

... 77

... 82

... 84

... 85

... 87

... 90

... 98

. 110

. 110

. 110

. 115 Tab Tab Tab Tab Tab Tab Tab Tab Tab Tab Tab Tab Tab Tab Tab Tab Tab Tab Tab Tab Tab Tab Tab Tab Tab Tab www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 107 Appendix B: Device Mounting Dimensions The image below is at 100% scale and may be used as a template for mounting the device. All dimensions shown are in millimetres. Figure 103 - Device mounting dimensions NetComm Wireless Intelligent M2M Router 108 www.netcommwireless.com A App B Brac dix pend cket t C: M Mou unti ng The image below is at 10 00% scale and may b be used as a template e for mounting the br racket. All dimension ns shown are in millim metres. Figu ure 104 - Mounting br racket www

.netcommwireless.com NetComm Wireeless Intelligent M2M RRouter 109 A App pend dix D: D Defa ault t Set tting gs following tables list th he default settings fo or the Intelligent M2M M Router. The Static IP Address:

Subne et Mask:

Defau lt Gateway:

LAN (MANAGEMENT T) 192.168

.1.1 255.255

.255.0 192.168 LAN Management Def

.1.1 fault Settings Table 24 - L ADMI N MANAGER ACCO OUNT R ROOT MANAGER ACC COUNT Username:

Password:

admi in Userna ame:

Passw admi in 5 - Web Interface Defau Table 25 word:

ult Settings root admi n Note: The to factory e admin manager acc default settings, whi count allows you to m ch are privileged onl manage all settings of y to the root manage f the router except fu er account. unctions such as firmw ware upgrade, devic ce configuration back kup and restore and r reset INTELLIGENT T M2M ROUTER TEL LNET ACCESS Username:

Password:

r root a admin ess T Table 26 - Telnet Acce NetC Comm Wireless Intellig 110 gent M2M Router www.netcommwirel less.com Ther estorin R toring factory defaults Rest M2M M Router such as:

ng facto s will reset the Intellig ory def gent M2M Router to i fault se ts factory default con ttings nfiguration. You may You h You a ave lost your userna are asked to perform me and password an a factory reset by su nd are unable to login pport staff. n to the web configur ration page;

re are two methods y Using Using you can use to restore g the web-based user g the reset button on t e factory default setti r interface the interface panel o f the router ngs on your Intellige nt M2M Router:

encounter a situation n where you need to restore the factory de efaults on your Intelli gent Us To re 1. sing the we estore your router to Open a bro the passwo Click the S Under the R router sets When the P eb-based its factory default set owser window and na ord. ystem item from the Restore factory defau all settings to default Power light returns to 2. 3. 4. user inter ttings, please follow t avigate to the IP addr rface these steps:

ress of the router (de top menu bar, then S ults section, click the t. Click OK again to r a steady red, the res System configuration e Restore Defaults bu reboot the router. set is complete. The d efault address is http:

://192.168.1.1). Login n to the router using r root as the User Name and admin n as on the left menu and utton. The router asks d then click Settings s you to confirm that y backup and restore. you wish to restore fa actory defaults. Click k OK to continue. The e default settings are n now restored. eset button e Reset button on the n on the int e device for 15-20 se terface pa conds. The router wi anel of the ll restore the factory router default settings and reboot. outer to its default set ttings you will be able e to access the devic ces configuration we b interface using http p://192.168.1.1 with u username admin or sing the re a pen to depress the Us Use Whe en you have reset you roo ot and password a ur Intelligent M2M Ro admin. www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 111 Recovery mode The Intelligent M2M Router features two independent operating systems, each with its own file systems. These two systems are referred to as 'Main' and 'Recovery'. It is always possible to use one in order to restore the other in the event that one system becomes damaged or corrupted (such as during a firmware upgrade failure). Both systems have Web interfaces that can be used to manipulate the other inactive system. The Intelligent M2M Router starts up by default in the Main system mode, however the router may be triggered to start in recovery mode if desired. To start the router in recovery mode:

1. 2. Press and hold the physical reset button on the interface panel of the router for 5 to 15 seconds. When the LEDs on the front panel change to amber and countdown in a sequence, release the reset button. The router then boots into recovery mode. In your browser, navigate to http://192.168.1.1. The routers recovery mode is hardcoded to use this address regardless of the IP address that was configured in the main system. The routers recovery console is displayed. Figure 105 - Recovery console The recovery console provides limited functionality. Basic status information is available, as well as access to the System log for troubleshooting. The Application Installer can be used to upload and install different firmware, allowing you to roll back to a previous firmware in the event that an upgrade fails. The Settings menu provides the ability to reset the router to factory default settings and the Reboot tab allows you to perform a soft reboot of the router. NetComm Wireless Intelligent M2M Router 112 www.netcommwireless.com A App U Uplo c cert pend oad ifica E: H dix g a s ding ate HTT elf-

TPS -

ned

-sign d If yo u have your own self f-signed certificate or r one purchased else ewhere and signed b by a Certificate Autho rity, you can upload it to the Intelligent M2 2M Router using the Upload page. Note: Your ke ey and certificate file es must be named se rver.key and server.c crt respectively other rwise they will not wo rk. To u e:

pload your certificate Click on the 1. e System item from th he top menu bar. Fro om the side menu bar r, select System Con nfiguration and then U Upload. The file uploa ad screen is displaye ed. Fi Figure 106 - Upload pa age hoose a File button a and locate your serve er certificate file and click Open. 2. Click the C Figure re 107 - Browse for se erver.crt www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 113 3. Click the Upload button to begin uploading it to the router. The file appears in the list of files stored on the router. Figure 108 - Server certificate file uploaded 4. 5. Repeat steps 2 and 3 for the server key file. Click the Install link next to the server.crt file then click OK on the prompt that is displayed. The certificate file is installed. Repeat this for the key file. When each file is installed it is removed from the list of stored files. Figure 109 - Installing the server.crt file NetComm Wireless Intelligent M2M Router 114 www.netcommwireless.com A App pend dix F: R RJ-45 5 co onn ecto or The RJ-45 connector pro ovides an interface fo or a data connection a and for device input Pin: 8 1 power using the pin layout shown below. Figure re 110 -The RJ-45 con nnector PI IN COLOU UR SIGNA AL (802.3AF MODE A A) SIGNA AL (802.3AF MODE B B) 1 1 2 2 3 3 4 4 5 5 6 6 7 7 8 8 White/Ora ange e stripe Orange S Solid White/Green n stripe Blue so lid White/Blue stripe Green so olid White/Brown n stripe Brown so olid Rx +

Rx -

Tx +

DC +

DC +

Tx -

DC -

DC -

Rx + DC +

Rx - DC +

Tx + DC -

unused unused Tx - DC -

unused unused Ta able 27 - RJ-45 connec ector pin outs www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 115 Safety and product care RF Exposure Your device contains a transmitter and a receiver. When it is on, it receives and transmits RF energy. When you communicate with your device, the system handling your connection controls the power level at which your device transmits. This device meets the governments requirements for exposure to radio waves. This device is designed and manufactured not to exceed the emission limits for exposure to radio frequency (RF) energy set by the Federal Communications Commission of the U.S. Government. This device complies with FCC radiation exposure limits set forth for an uncontrolled environment. To ensure compliance with RF exposure guidelines the device must be used with a minimum of 20cm separation from the body. Failure to observe these instructions could result in your RF exposure exceeding the relevant guideline limits. External antenna Any optional external antenna used for this transmitter must be installed to provide a separation distance of at least 20 cm from all persons and must not be co-located or operated in conjunction with any other antenna or transmitter. Please consult the health and safety guide of the chosen antenna for specific body separation guidelines as a greater distance of separation may be required for high-gain antennas. Any external antenna gain must meet RF exposure and maximum radiated output power limits of the applicable rule section. The maximum antenna gain for this device as reported to the FCC is:

0.2 dBi (850MHz) and 2.7 dBi (1900MHz). CE Approval This device has been tested to and conforms to the regulatory requirements of the European Union and attained CE Marking. The CE Mark is a conformity marking consisting of the letters CE. The CE Mark applies to the products regulated by the central European health, safety and environmental protection legislation. The CE Mark is obligatory for products it applies to: the manufacturer affixes the marking in order to be allowed to sell their product in the European market. The wireless device is approved to be used in the member states of the EU. NetComm Wireless declares that the wireless device is in compliance with the essential requirements and other relevant provisions of the Radio and Telecommunications Terminal Equipment Directive 1999/5/EC (R&TTE Directive). Compliance with this directive implies conformity to the following European Norms N 60950 Product Safety, EN 301 489 EMC, EN301511 GSM RF, EN301908 UMTS RF, EN 62311 SAR Technical requirement for radio equipment. A notified body has determined that this device has properly demonstrated that the requirements of the directive have been met and has issued a favourable certificate of expert opinion. As such the device will bear the notified body number 0682 after the CE mark. The CE Marking is not a quality mark. Foremost, it refers to the safety rather than to the quality of the product. Secondly, CE Marking is mandatory for the product it applies to whereas most quality markings are voluntary. Marking: The product shall bear the CE mark, the notified body number(s) as depicted to the right. CE0682. This product has also passed the following certification standards CE SAR- EN62311/EN50385 CE RF EN301511, EN301908-1/-2, CE EMC EN301489-1/-7/-24, EN55022/EN55024 CE Safety EN60950 NOTE: It is highly recommended that the device must be kept at least 20cm away from the human body. This is a regulatory requirement and applies to all 3G capable devices meeting standard regulatory compliance such as the compliance standards listed above. NetComm Wireless Intelligent M2M Router 116 www.netcommwireless.com

(United States): Befo pted requirement for s ore a wireless device safe exposure. e model is available f for sale to the public, it must be tested and d certified to the FCC C that it does not exc ceed FC CC Sta atemen t iance s Commission Notice he government-adop tions CC compli FC Fede eral Communications imit established by th the l

5.21 nges or modifications FC CC regulat 5.19 (a)(3) 15 device complies with This inter rference received, inc 15 Cha

15 This agai may inter follow Re Inc Co Co 5.105 (b) equipment has been nst harmful interferen cause harmful interf rference to radio or te wing measures:

eorient or relocate the crease the separatio onnect the equipmen onsult the dealer or a RF This and h part 15 of the FCC cluding interference t Rules. Operation is s that may cause unde subject to the followin esired operation. ng two conditions: (1

) This device may no ot cause harmful inter rference, and (2) this s device must accept t any s not expressly appro oved by the party res sponsible for complia ance could void the u users authority to op erate the equipment.

n tested and found to nce in a residential in ference to radio comm elevision reception, w o comply with the lim nstallation. This equip munications. Howeve which can be determi its for a Class B digit pment generates, use er, there is no guaran ned by turning the e tal device, pursuant t es and can radiate ra ntee that interference quipment off and on to part 15 of the FCC adio frequency energ e will not occur in a pa

, the user is encourag Rules. These limits a gy and, if not installed articular installation. I ged to try to correct t are designed to prov d and used in accord If this equipment doe the interference by o ide reasonable prote dance with the instruc es cause harmful ne or more of the ection ctions, e receiving antenna. pment and receiver. n between the equip circuit different from nt into an outlet on a c an experienced radio o/TV technician for he that to which the rece elp. eiver is connected. Exposure Inf equipment complies operated with minim formation (MP s with radio frequenc um distance 20 cm b PE) y (RF) exposure limit between the radiator ts adopted by the Fed

& your body. deral Communication ns Commission for an n uncontrolled enviro onment. This equipme ent should be installe ed www

.netcommwireless.com NetComm Wire eless Intelligent M2M R Router 117 IC Regulations:

RSS-Gen 7.1.3 This device complies with Industry Canada license-exempt RSS standard(s). Operation is subject to the following two conditions:

(1) this device may not cause interference, and

(2) this device must accept any interference, including interference that may cause undesired operation of the device. Le prsent appareil est conforme aux CNR d'Industrie Canada applicables aux appareils radio exempts de licence. L'exploitation est autorise aux deux conditions suivantes:

(1) l'appareil ne doit pas produire de brouillage, et

(2) l'utilisateur de l'appareil doit accepter tout brouillage radiolectrique subi, mme si le brouillage est susceptible d'en compromettre le fonctionnement."

ICES-003 CAN ICES-3(B)/ NMB-3(B)

RSS-Gen 7.1.2 This radio transmitter has been approved by Industry Canada to operate with the antenna types listed below with the maximum permissible gain and required antenna impedance for each antenna type indicated. Antenna types not included in this list, having a gain greater than the maximum gain indicated for that type, are strictly prohibited for use with this device. Antenna types: Dipole Antenna gain: 850MHz: 0.2dBi; 1900MHz: 2.7dBi

IC RF Exposure Statement (MPE) This equipment complies with IC RSS-102 RF exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20 cm between the radiator & your body. NetComm Wireless Intelligent M2M Router 118 www.netcommwireless.com E lectrica al safet ty Ac Only Do n s ccessories y use approved acce essories. ompatible products o not connect with inco r accessories. to a car e when connecting a ion handli ing le for how you use yo off your device where Use of your device is and its accessories ce or its accessories ce or its accessories to bend your device cals, cleaning solvent or its accessories. emble your device or product in extremely onnection k professional advice Co Seek D Distracti perating m attention must be giv Op Full a Pr roduct You alone are responsibl You must always switch o while e using the device. U Alwa ays treat your device Do n not expose your devic Do n not expose your devic Do n not drop, throw or try Do n not use harsh chemic Do n not paint your device Do n not attempt to disasse Do n not use or install this p C) 65C not use your device in Do n matic shutdown of yo auto befo ore turning it on. se check local regula Plea not operate the devic Do n Insta allation and configura not use or install this p Do n nge power and Ether Arra Ensu ure that the voltage a Sm mall childr not leave your device Do n y could hurt themselv They Your r device contains sm www

.netcommwireless.com device interface to th he vehicle electrical s system. machinery machinery in order to ven to operating the m o reduce the risk of an n accident. p-on covers attached d, and do not remove e or change the cove rs use. ted. Do not use the d protect users and the t-free place. device without the clip eir environment. onsequences of its u bile phone is prohibit asures designed to p t in a clean and dust tobacco products. r high humidity. our device and any c ever the use of a mob subject to safety mea with care and keep i to open flames or lit to liquid, moisture o or its accessories. ts, or aerosols to clea an the device or its a ccessories. r its accessories, only y hot or cold areas. En y authorised personn nsure that the device nel must do so. e is installed in an are ea where the tempera ature is within the sup pported operating te mperature range (-20 0C to n an enclosed enviro our device or the disc onment or where heat connection of the mo t dissipation is poor. obile network connec Prolonged use in suc ction for your safety. T ch space may cause To use your device n excessive heat and ormally again after su raise ambient tempe uch shutdown, cool i erature, which will lea t in a well-ventilated ad to place ations for disposal of ce where ventilation is ation should be perfo product near water to rnet cables in a man and rated current of th f electronic products

. s restricted ormed by trained pers o avoid fire or shock ner such that they ar he power source mat sonnel only. hazard. Avoid expos e not likely to be step tch the requirements sing the equipment to pped on or have item s of the device. Do no o rain or damp areas

. ms placed on them. ot connect the device e to an inappropriate power source. ren e and its accessories ves or others, or coul all parts with sharp e within the reach of s d accidentally dama edges that may cause mall children or allow ge the device. e an injury or which c w them to play with it. could become detach hed and create a cho oking hazard. NetComm Wire eless Intelligent M2M R Router 119 Emergency situations This device, like any wireless device, operates using radio signals, which cannot guarantee connection in all conditions. Therefore, you must never rely solely on any wireless device for emergency communications. Device heating Your device may become warm during normal use. Faulty and damaged products Do not attempt to disassemble the device or its accessories. Only qualified personnel must service or repair the device or its accessories. If your device or its accessories have been submerged in water punctured or subjected to a severe fall, do not use until they have been checked at an authorised service centre. Interference Care must be taken when using the device in close proximity to personal medical devices, such as pacemakers and hearing aids. Pacemakers Pacemaker manufacturers recommend that a minimum separation of 15cm be maintained between a device and a pacemaker to avoid potential interference with the pacemaker. Hearing aids People with hearing aids or other cochlear implants may experience interfering noises when using wireless devices or when one is nearby. The level of interference will depend on the type of hearing device and the distance from the interference source, increasing the separation between them may reduce the interference. You may also consult your hearing aid manufacturer to discuss alternatives. Medical devices Please consult your doctor and the device manufacturer to determine if operation of your device may interfere with the operation of your medical device. Hospitals Switch off your wireless device when requested to do so in hospitals, clinics or health care facilities. These requests are designed to prevent possible interference with sensitive medical equipment. Interference in cars Please note that because of possible interference to electronic equipment, some vehicle manufacturers forbid the use of devices in their vehicles unless an external antenna is included in the installation. Explosive environments Petrol stations and explosive atmospheres In locations with potentially explosive atmospheres, obey all posted signs to turn off wireless devices such as your device or other radio equipment. Areas with potentially explosive atmospheres include fuelling areas, below decks on boats, fuel or chemical transfer or storage facilities, areas where the air contains chemicals or particles, such as grain, dust, or metal powders. Blasting caps and areas Turn off your device or wireless device when in a blasting area or in areas posted turn off two-way radios or electronic devices to avoid interfering with blasting operations. NetComm Wireless Intelligent M2M Router 120 www.netcommwireless.com

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

=> NetCommWireless ee Federal Communication Commission Authorization and Evaluation Division Re: Class Il Permissive Change FCC ID: XIA-NTC620002 To Whom It May Concern, Pursuant to part 2.1043 of CFR 47 NetComm Wireless Limited is requesting a Class II permissive change for the use of an alternate antenna. Note that there are no changes to the NTC-6200-02 print circuit board assembly. In addition an alternate model will be part of the permissive change. The NTC-6200-02 was originally certified with A-Lead antenna P.N. AAL-TT42UM70J9. The alternate antenna P.N. ANT-

0050-2/ANT-0050-8 uses either a 2 foot coax cable or an 8 foot coax cable in a magnetic mount type assembly. The new antenna also requires the use of an SMA to SMB adapter as show below. The adapter simply connects to the SMA on the NTC-6200-02 router and the antenna coax cable plugs into the other end of the adapter connecting the antenna to the NTC-6200-02 router The other part of this permissive change is to add model MAX 6200-V1. This is for marketing purposes only. Sincerely, pJS Bud Sundeen Compliance Director North America

 

 

Power of Attorney Date: November 3, 2016 To whom it may concern, Please be notified that I, Casey Mak, have designated Bud Sundeen in NetComm Wireless USA office as the person being responsible for this project and to sign the form 731 and other documentation. Any and all acts carried out by Bud Sundeen in NetComm Wireless USA office on the matters of relating to all processes required in the FCC approval and any communication needed with the national authority, shall have the same legal authority as acts on our own behalf. I further certify that neither the applicant nor any party to this application, as defined in 47 CFR Ch. 1.2002

(b), is subject to a denial to Federal benefits, that include FCC benefits, pursuant to section 5301 of the Anti-Drug Abuse Act of 1998, 21 U.S.C. 835(a). This authorization is limited to the product of as following:

FCC ID: XIA-NTC620002 Please send any acknowledgement and response to Bud Sundeen directly. Should you have any questions or comments regarding this matter, please have my best attention. Sincerely, Casey Mak Production Manager NetComm Wireless Limited E-mail: casey.mak@netcommwireless.com

 

 

Date: September 20, 2013 Federal Communications Commission Authorization and Evaluation Division Permanent Confidentiality Request regarding application for certification of FCC ID: XIA-NTC620002 Pursuant to Sections 0.457 and 0.459 of the Commissions Rules, we hereby request Permanent Confidential treatment of information accompanying this application as outlined below:

Schematics Block Diagram Parts List Operation Description Tune up Procedure The above materials contain trade secrets and proprietary information not customarily released to the public. The public disclosure of these materials may be harmful to the applicant and provide unjustified benefits to its competitors. Sincerely, ________________________ Casey Mak Production Manager, NetComm Wireless Limited casey.mak@netcommwireless.com

 

 

Date: September 20, 2013 We, NetComm Wireless Limited, hereby attest to the fact that we will apply the Declaration of Conformity procedure to the class B computer peripheral portion of this composite filing. Federal Communications Commission Authorization and Evaluation Division 1435 Oakland Mills Road Columbia, MD 21046 SUBJECT: FCC Application for FCC ID: XIA-NTC620002 To Whom It May Concern:

Sincerely, ________________________ Casey Mak Production Manager, NetComm Wireless Limited casey.mak@netcommwireless.com

 

 

Date: September 20, 2013 Federal Communications Commission Authorization and Evaluation Division RE:

Certification Application FCC ID: XIA-NTC620002 To Whom It May Concern, External Photos Internal Photos Test Setup Photos User Manual Sincerely, ________________________ Casey Mak Production Manager, NetComm Wireless Limited casey.mak@netcommwireless.com Pursuant to sections 0.457 and 0.459 of CFR 47 and to avoid premature release of sensitive information prior to marketing or release of the product to the public, the applicant requests the following documents contained in this certification application be temporarily withheld from public disclosure for an initial period of 180 days:

The application contains technical information, which the applicant deems to be trade secrets and proprietary. If made public, the information might be used to the disadvantage of the applicant in the market place.