all | frequencies |
|
|
|
|
exhibits | applications |
---|---|---|---|---|---|---|---|
manual | photos | label |
app s | submitted / available | |||||||
---|---|---|---|---|---|---|---|---|
1 |
|
User Manual | Users Manual | 3.90 MiB | ||||
1 |
|
Internal Photos | Internal Photos | 1.02 MiB | ||||
1 |
|
External Photos | External Photos | 533.53 KiB | ||||
1 |
|
ID Label and Location | ID Label/Location Info | 162.52 KiB | ||||
1 |
|
Confidentiality Request Letter | Cover Letter(s) | 257.15 KiB | ||||
1 |
|
Power of Attorney Letter | Cover Letter(s) | 246.53 KiB | ||||
1 | RF Exposure Info | |||||||
1 | Test Report | |||||||
1 | Test Setup Photos |
1 | User Manual | Users Manual | 3.90 MiB |
Industrial 4G LTE Cellular Router M300 / M301 M300-G / M301-G / M301-TG M301-TPG / M301-GW User Manual Version 1.1.8 Table of Contents Introduction ....................................................................................................................... 6 Features ...................................................................................................................... 6 Specifications .............................................................................................................. 7 Mechanical Dimensions .............................................................................................. 8 Ordering Information ................................................................................................. 10 Hardware Installation ...................................................................................................... 10 LED Indicators ........................................................................................................... 10 Ethernet Port ............................................................................................................. 11 Serial Port COM1 (Console-RS232) .......................................................................... 12 Install the SIM Card ................................................................................................... 13 Reset Button ............................................................................................................. 14 External Antenna ....................................................................................................... 14 Connecting the Power Supply ................................................................................... 14 Grounding the Router ................................................................................................ 15 Pin Assignments ........................................................................................................ 15 Connecting I/O Ports ................................................................................................. 16 Serial Port COM2 (RS-232) ....................................................................................... 17 Serial Port COM3 (RS-485) ....................................................................................... 17 DIP Switch ................................................................................................................ 18 Configuration via Web Browser ..................................................................................... 19 Access the Web Configurator .................................................................................... 19 Navigate the Web Configurator ................................................................................. 20 Status ............................................................................................................................... 21 Status > GPS ............................................................................................................ 25 Configuration > System .................................................................................................. 25 System > Time and Date ........................................................................................... 26 System > COM Ports ................................................................................................ 29 System > Logging ..................................................................................................... 31 5.3.1 Logging > Logging ................................................................................................. 31 5.3.2 Logging > Log ........................................................................................................ 32 System > Alarm ......................................................................................................... 33 5.4.1 Alarm > Contacts > Create and name the Group ................................................... 34 5.4.2 Alarm > Contacts > Add User ................................................................................ 36 5.4.3 Alarm > Duty Schedule .......................................................................................... 37 System > Ethernet ..................................................................................................... 37 System > Modbus ..................................................................................................... 39 System > Client List .................................................................................................. 39 System > LED ........................................................................................................... 40 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 II 7.7.1 7.7.2 7.7.3 Configuration > WAN ...................................................................................................... 41 WAN > Priority ........................................................................................................... 41 WAN > Ethernet ........................................................................................................ 42 6.2.1 WAN Ethernet Configuration .................................................................................. 42 6.2.2 Ethernet Ping Health ............................................................................................. 45 WAN > IPv6 DNS ...................................................................................................... 47 Configuration > LTE ........................................................................................................ 48 LTE > LTE Config ...................................................................................................... 48 7.1.1 LTE Configuration .................................................................................................. 48 7.1.2 LTE Ping Health ..................................................................................................... 49 LTE > GPS ................................................................................................................ 50 LTE > Dual SIM ......................................................................................................... 52 LTE > Usage Display ................................................................................................. 57 LTE > SMS ................................................................................................................ 62 LTE > Serving Cell .................................................................................................... 64 LTE > Lock PCIs ....................................................................................................... 65 Neighbors .......................................................................................................... 65 Locked PCIs ...................................................................................................... 65 Saved Locked PCIs ........................................................................................... 65 LTE > Lock Bands ..................................................................................................... 66 LTE > DNS ................................................................................................................ 66 Configuration > WiFi (M301-GW) ................................................................................... 67 WiFi > WiFi Config .................................................................................................... 67 WiFi > Client List ....................................................................................................... 68 Configuration > LAN ....................................................................................................... 69 LAN > IPv4 ................................................................................................................ 69 LAN > IPv6 ................................................................................................................ 70 LAN > VLAN .............................................................................................................. 70 LAN > Subnet ............................................................................................................ 74 IP Routing .................................................................................................................... 75 IP Routing > Static Route .......................................................................................... 75 IP Routing > RIP ....................................................................................................... 77 IP Routing > OSPF .................................................................................................... 79 IP Routing > BGP ...................................................................................................... 82 Configuration > VPN ....................................................................................................... 85 VPN > Open VPN ...................................................................................................... 85 11.1.1 Open VPN Common Setting ................................................................................ 85 11.1.2 Open VPN Client Setting...................................................................................... 88 11.1.3 Open VPN Server Setting .................................................................................... 89 11.1.4 Set up Open VPN Custom ................................................................................... 90 VPN > IPsec .............................................................................................................. 92 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 III 11.2.1 IPsec > Connections ............................................................................................ 92 11.2.2 IPsec > Authentication IDs ................................................................................... 95 11.2.3 IPsec > X.509 Certificates .................................................................................... 97 11.2.4 IPsec > CA Certificates ........................................................................................ 97 11.2.5 IPsec > Net-to-Net Configuration ....................................................................... 100 11.2.6 IPsec > Hub-Spoke Topology ............................................................................. 115 VPN > GRE ............................................................................................................. 126 VPN > PPTP Server ................................................................................................ 127 VPN > L2TP ............................................................................................................ 129 Configuration > Firewall ........................................................................................... 132 Firewall > Port Forwarding ...................................................................................... 132 Firewall > DMZ ........................................................................................................ 133 Firewall > IP Filter ................................................................................................... 134 Firewall > MAC Filter ............................................................................................... 138 Firewall > URL Filter ................................................................................................ 139 Firewall > NAT ......................................................................................................... 140 Firewall > IPS .......................................................................................................... 141 Configuration > Service ............................................................................................ 142 Service > SNMP ...................................................................................................... 142 13.1.1 Community ........................................................................................................ 142 13.1.2 SNMP v3 User configuration .............................................................................. 143 13.1.3 SNMP trap configuration .................................................................................... 144 Service > TR069 ..................................................................................................... 145 Service > Dynamic DNS .......................................................................................... 146 Service > VRRP ...................................................................................................... 148 Service > MQTT ...................................................................................................... 149 Service > UPnP ....................................................................................................... 151 Service > SMTP ...................................................................................................... 151 Service > IP Alias .................................................................................................... 152 Service > QoS (Quality of Service) .......................................................................... 153 13.9.1 ISP Bandwidth ................................................................................................... 153 13.9.2 QoS ................................................................................................................... 154 13.9.3 Status ................................................................................................................ 157 13.9.4 The case of Internet Web site access ................................................................ 157 13.9.5 Bandwidth divided for each IP address .............................................................. 161 Configuration > Management ................................................................................... 162 Management > Identification ................................................................................... 162 Management > Administration ................................................................................. 163 Management > Contacts / On Duty ......................................................................... 165 14.3.1 Contacts .......................................................................................................... 165 14.3.2 Duty Schedule ................................................................................................. 165 Management > SSH ................................................................................................ 166 Management > Web ................................................................................................ 167 IV INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 Management > Firmware ........................................................................................ 168 Management > Configuration .................................................................................. 168 Management > Load Factory .................................................................................. 168 Management > Restart ............................................................................................ 168 Management > Schedule Reboot ........................................................................ 169 Configuration > Diagnosis ........................................................................................ 170 Diagnosis > Ping ..................................................................................................... 170 Diagnosis > Traceroute ........................................................................................... 171 Configuration Applications ...................................................................................... 172 WAN Priority ............................................................................................................ 172 LAN > IPv4/IPv6 Dual Stack .................................................................................... 174 MQTT Broker .......................................................................................................... 176 Virtual COM > Remote Management ....................................................................... 177 Virtual COM > Remote Alarm .................................................................................. 180 Virtual COM > Modbus RTU over TCP .................................................................... 181 Modbus Gateway .................................................................................................... 182 Alarm Configuration................................................................................................. 182 Open VPN Configuration ......................................................................................... 184 16.9.1 Open VPN Server Mode .................................................................................... 184 16.9.2 Open VPN Client Mode ..................................................................................... 185 16.9.3 Open VPN Net-to-Net ........................................................................................ 186 16.9.4 Open VPN 1:1 NAT............................................................................................ 189 16.9.5 Open VPN with third-party server ...................................................................... 190 16.9.6 Install Open VPN Access Server on Docker ...................................................... 192 16.9.7 Install Pritunl Open VPN server on Docker ........................................................ 197 VRRP Topology ................................................................................................... 205 TR069 Server (GenieACS Installation) ................................................................ 205 Test Case Example .................................................................................................... 215 VLAN Topology ....................................................................................................... 215 MQTT Topology ....................................................................................................... 218 Modbus Topology .................................................................................................... 224 IP Routing Topology ................................................................................................ 227 Safety Notice ............................................................................................................. 231 Wi-Fi Specifications .................................................................................................. 232 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 V Introduction Industrial 4G LTE Cellular Router series are highly reliable and secure wireless communications gateway designed for enabling mission-critical applications and enhancing machine-to-machine connectivity for Industrial Internet of Things (IIoT). Features Highly reliable and secure for mission-critical cellular communications Provide flexible options to configure LAN/ WAN ports Support multi-band connectivity with FDD LTE/ TDD LTE/ WCDMA/ GSM/ LTE Cat 4 Provide IEEE 802.11 b/g/n Wi-Fi standards (M301-GW) Built-in dual SIM for network redundancy Equipped with DI/DO and RS-232/RS-485 serial ports Integrated dual detachable antenna against radio interference LED indicators for connection and data transmission status A flexible input voltage range of 10-32V DC Industrial rated from -40C to +75C for use in harsh environments (M301-TG/M301-TPG) Metal Housing with IP40 industrial grade protection IPv6/IPv4 dual stack and all applications are IPv6 ready Support various serial communication protocols for connectivity Enhance security and encryption for authentication and transmission INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 6 Specifications Cellular Interface Standards:
(Please see ordering information for optional band) 4G: FDD LTE, TDD LTE 3G: WCDMA 2G: GSM/EDGE GNSS: GPS LTE Data Rate: Cat 4, 150Mbps (DL), 50Mbps (UL) Wi-Fi Interface (M301-GW) Compliant with IEEE 802.11 b/g/n Wi-Fi standards 2.4 GHz - 2.484 GHz radio band for wireless 1T1R 150 Mbps wireless operation rate Wireless security with WPA-PSK, WPA2-PSK support Multiple SSIDs Wireless MAC Filtering Wireless client isolation Processor & I/O Interface High performance 528 MHz CPU with 512 Mbytes of DDR3 memory 2 x SIM Card Slots 1 x LAN 10/100 Mbps Ethernet port (M300/M300-G) 3 x LAN 10/100 Mbps Ethernet ports (M301/M301-
G/M301-TG/M301-TPG/M301-GW) 1 x WAN 10/100 Mbps Ethernet port 1 x WAN 10/100 Mbps Ethernet port with IEEE 802.3at/af PoE PD (M301-TPG) Reset Button Console: 1 x RS232 (9-pin Sub-D) 2 x SMA connectors for detachable LTE antenna 1 x GPS detachable antenna (M300-G/M301-G/M301-
TG/M301-TPG/M301-GW) 1 x RP-SMA for Wi-Fi antenna (M301-GW) 1 x RS485 (D+/D-) 1 x RS232 (TXD/RXD) 2 x DI, 1 x DO (Alarm +/-) Physical Characteristics EnclosureAluminum Case HousingIP40 Protection Weight 451 g (M300/M300-G) 452 g
(M301/M301-G/M301-TG/M301-TPG/M301-GW) Dimensions (W x H x D)60 x 110 x 106 mm InstallationDIN Rail (Default) or Wall Mount
(Optional) LED Display 1 x System status LED (Green) 1 x VPN status LED (Green)
(M300/M301/M300-G/M301-G/M301-TG/M301-TPG) 1 x FN status LED (Green) (M301-GW) 1 x SIM1 status LED (Green) 1 x SIM2 status LED (Green) Ethernet status LEDs
(Green for LINK/ACT, Yellow for SPEED) 2 x Mobile connection strength LEDs (Green) Power Supply Power Consumption 7 Watts (Max) Power Input 10 ~ 32V DC MTBF (Mean Time Between Failures) M300/M300-G: 155,899 hrs. (MIL-HDBK-217-FN2) M301/M301-G/M301-TG/M301-TPG/M301-GW:
148,930 hrs. (MIL-HDBK-217-FN2) Software Network Protocols:
IPv4, IPv6, IPv4/IPv6 dual stack, DHCP server and client, PPPoE, Static IP, SNTP, GPS sync time, DNS Proxy, Modbus, VRRP, OSPF, Message Queue Telemetry Transport (MQTT Broker), BGP Routing/Firewall:
NAT, Virtual Server, DMZ, MAC Filter, URL Filter, IP Filter, VLAN, Static Routing and RIP-1/2 VPN:
Open VPN, IPsec (3DES, AES128, AES196, AES256, MD5, SHA-1, SHA256), GRE, PPTP, L2TP Wireless Connectivity:
Two SIM for failover/ roaming over/ back up Two SIM data usage control Seamless multi WAN connections switch Others:
DDNS, QoS, Virtual COM, UPnP Alarm:
DI, DO, SMS, VPN/WAN Disconnect, SNMP Trap, E-mail Management Software Web GUI for remote and local management, CLI Dual Image firmware upgrade by Web GUI Syslog monitor SNMP, TR069 Remote management via SSH v2, HTTPS Local management via Telnet, SSH v2, HTTP/HTTPS Environment Operating Temperature -20 ~ +70C
(M300/M301/M300-G/M301-G/M301-GW) Operating Temperature -40 ~ +75C (M301-TG/M301-
TPG) Storage Temperature -40 ~ +85C Ambient Relative Humidity 10 ~ 95% (non-condensing) Humidity 0 ~ 95% (non-condensing) Standards and Certifications EMCCE, FCC EMIEN 55032 Class A, FCC Part 15 Subpart B Class A EMSEN 55024 / EN 61000-4-2 (ESD) Level 3 /
EN 61000-4-3 (RS) Level 3 / EN 61000-4-4 (EFT) Level 4 /
EN 61000-4-5 (Surge) Level 3 / EN 61000-4-6 (CS) Level 3 / EN 61000-4-8 (PFMF) Level 4 / EN 61000-4-11 /
EN 61000-6-2 (Industrial) / EN 61000-6-4 (Industrial) Rail TrafficEN50121-4 VibrationIEC60068-2-6 Safety: EN60950-1 Highly Accelerated Life Test (HALT) INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 7 Mechanical Dimensions
(1) M300 model:
1 x WAN, 1 x LAN, 2 x RS232, 1 x RS485, 2 x DI, 1 x DO, 2 x SIM Card Slots, -20 ~ +70C
(2) M301 model:
1 x WAN, 3 x LANs, 2 x RS232, 1 x RS485, 2 x DI, 1 x DO, 2 x SIM Card Slots, -20 ~ +70C
(3) M300-G model:
1 x WAN, 1 x LAN, 1 x GPS, 2 x RS232, 1 x RS485, 2 x DI, 1 x DO, 2 x SIM Card Slots,
-20 ~ +70C INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 8
(4) M301-G / M301-TG model:
1 x WAN, 3 x LANs, 1 x GPS, 2 x RS232, 1 x RS485, 2 x DI, 1 x DO, 2 x SIM Card Slots,
-20 ~ +70C (M301-G), -40 ~ +75C (M301-TG)
(5) M301-TPG model:
1 x WAN with IEEE 802.3at/af PoE PD, 3 x LANs, 2 x RS232, 1 x RS485, 2 x DI, 1 x DO, 2 x SIM Card Slots, 1 x GPS, -40 ~ +75C
(6) M301-GW model:
1 x WAN, 3 x LANs, 2 x RS232, 1 x RS485, 2 x DI, 1 x DO, 2 x SIM Card Slots, 1 x GPS, 1 x Wi-Fi, -20 ~ +70C INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 9 Ordering Information Model Name Description M300 M301 M300-G M301-G M301-TG M301-TPG M301-GW Industrial 4G LTE Cellular Router
( 1 x WAN, 1 x LAN, 2 x RS232, 1 x RS485, 2 x DI, 1 x DO, 2 x SIM Card Slots,
-20 ~ +70C ) Industrial 4G LTE Cellular Router
( 1 x WAN, 3 x LANs, 2 x RS232, 1 x RS485, 2 x DI, 1 x DO, 2 x SIM Card Slots,
-20 ~ +70C ) Industrial 4G LTE Cellular Router
( 1 x WAN, 1 x LAN, 1 x GPS, 2 x RS232, 1 x RS485, 2 x DI, 1 x DO, 2 x SIM Card Slots, -20 ~ +70C ) Industrial 4G LTE Cellular Router
( 1 x WAN, 3 x LANs, 1 x GPS, 2 x RS232, 1 x RS485, 2 x DI, 1 x DO, 2 x SIM Card Slots, -20 ~ +70C ) Industrial 4G LTE Cellular Router
( 1 x WAN, 3 x LANs, 1 x GPS, 2 x RS232, 1 x RS485, 2 x DI, 1 x DO, 2 x SIM Card Slots, -40 ~ +75C ) Industrial 4G LTE Cellular Router
( 1 x WAN with IEEE 802.3at/af PoE PD, 3 x LANs, 2 x RS232, 1 x RS485, 2 x DI, 1 x DO, 2 x SIM Card Slots, 1 x GPS, -40 ~ +75C ) Industrial 4G LTE Cellular Router
(1 x WAN, 3 x LANs, 2 x RS232, 1 x RS485, 2 x DI, 1 x DO, 2 x SIM Card Slots, 1 x GPS, 1 x Wi-Fi, -20 ~ +70C) Hardware Installation This chapter introduces how to install and connect the hardware. LED Indicators
(M301-GW) RSSI High LED SYS System Normal RSSI Low Low VPN VPN SIM1 SIM2 Connected Connected UP Signal Signal Connected Booting N/A N/A WAN Connected Connecting Connecting FN
(M301-GW) VPN Connected WAN Connected N/A N/A N/A N/A Power Down N/A N/A NO WAN Connection Error Not Working Error N/A Not NO WAN Working Connection N/A N/A N/A N/A Reading Reading ON Slow Blinking Fast Blinking OFF Heart Beat WiFi Connected 10 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 Ethernet Port
(1) 10/100 Mbps Ethernet LAN/WAN (M300/M300-G model) The LAN and WAN interface are standard RJ45 connectors. Pin Description Function 1 2 3 4 5 6 7 8 WAN TX+
WAN TX-
WAN RX+
N/A N/A WAN RX-
N/A N/A 10/100 Mbps WAN, TX+ Pin 10/100 Mbps WAN, TX- Pin 10/100 Mbps WAN, RX+ Pin N/A N/A 10/100 Mbps WAN, RX- Pin N/A N/A
(2) 10/100 Mbps Ethernet LAN1~LAN3/WAN (M301/M301-G/M301-TG model) The Ethernet LAN1~3 and WAN interfaces are standard RJ45 connectors. Pin Description 1 2 3 4 5 6 7 8 LAN TX+
LAN TX-
LAN RX+
N/A N/A LAN RX-
N/A N/A Function 10/100 Mbps LAN, TX+ Pin 10/100 Mbps LAN, TX- Pin 10/100 Mbps LAN, RX+ Pin N/A N/A 10/100 Mbps LAN, RX- Pin N/A N/A INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 11
(3) 10/100 Mbps Ethernet LAN1~LAN3/WAN (M301-TPG model) The Ethernet LAN1~3 interfaces are standard RJ45 connectors. The WAN interface is a standard RJ45 connector with IEEE 802.3at/af PoE PD.
(4) LED Indicator of Ethernet Port Each Ethernet port has two LED indicators. The Green LED indicates Link/ACT, and the Yellow LED indicates Speed. LED Status Description Green (Link/ACT) Blink Data is being transmitted Off Connection is down Yellow (Speed) On Off On Connection is up 10 Mbps Mode 100 Mbps Mode Serial Port COM1 (Console-RS232) The serial port COM1 is a standard Sub-D connector. Pin Description Direction 1 2 3 4 5 6 7 8 9 N/A RXD TXD N/A GND N/A RTS CTS N/A INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 N/A In Out N/A Ground N/A Out In N/A 12 Install the SIM Card 1. SIM1/SIM2 Card Drawers and Eject Buttons 2. Insert and Remove SIM1/SIM2 Card
(1) Before inserting or removing the SIM card, ensure that the power has been turned off and the power connector has been removed from Cellular Router.
(2) Press the button with a paper clip or suitable tool to eject the SIM card from the drawer.
(3) Insert the SIM card with the contacts facing up and align it properly into the drawer. Make sure your direction of SIM Card and put it into the tray.
(4) Slide the drawer back and locks it in place. Note:
Please make sure the direction first. When pulling into the SIM tray without putting the correct direction, the tray will be stuck inside. Please turn off your router before taking the SIM card. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 13 Reset Button Reset button allows you to reboot the unit or restore to factory default setting. Function Operation Reboot Press the button for 1 second Restore to factory default setting Press the button for 5 seconds Note:
Press the Reset button and count the time around 5 seconds. The LED Indicators will be blinking to show you have activated the setting successfully. External Antenna Each unit has two antenna connectors (SMA), MAIN and AUX. Connect the antenna to MAIN when you have only one antenna. Please tighten the connecting nut properly to ensure good connection. Connecting the Power Supply The router requires a DC power supply in the range of 10~32V DC. Please ensure all components are earthed to a common ground before connecting any wiring. Pin V -
V+
Power (10~32VDC) FRAME GROUND Negative Positive INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 14 Grounding the Router To prevent the noise and surge effect, please connect the router to the site ground wire by the ground screw before turning on the router. Pin Assignments DI1/DI2 / Alarm Contacts / COM2 (RS-232) / COM3 (RS-485) INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 15 Connecting I/O Ports
(1) Digital Input DI1 & DI2 The unit has four terminals on the terminal block for the Digital inputs. DI1_I1 DI1_COM DI2_I2 DI2_COM Pin Description Digital INPUT 1 Digital INPUT 2 INPUT : +10 to +30V for state "1" (Q1 On) INPUT : +0 to +3V for state "0" (Q1 Off) Note: Q1 is a bidirectional component.
(2) Digital Output Alarm Contacts The unit has 2 terminals on the terminal block for the Alarm Contacts. Photo relay output with current capacity of 500mA/50VDC maximum. Pin Description Alarm -
Alarm negative signal output Alarm +
Alarm positive signal output INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 16 Serial Port COM2 (RS-232) The serial port COM2 is a RS-232 interface. Pin RXD TXD GND Description COM2 Serial Port, RXD Signal (INPUT) COM2 Serial Port, TXD Signal (OUTPUT) COM2 Serial Port, Signal Ground Both connectors (RS-232 and RS-485) have a common ground connection. Serial Port COM3 (RS-485) The serial port COM3 is a RS-485 interface. Pin D -
D +
Description COM3 Serial Port, Data- (B) wire COM3 Serial Port, Data+ (A) wire INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 17 DIP Switch A built-in 120 ohm terminal resistor can be activated by DIP switch. Pull high or Pull low resistor adjustments are also available. It improves the communication on RS-485 networks for specific application. Switch 1 and 2 set the pull high/low resistor Switch 3 enables or disables the termination resistor Pull High (510 ohm) /
Pull Low (510 ohm) Bias Resistor Enable Disable (Default) SW 1 (Pull Low) SW 2 (Pull High) ON OFF ON OFF Termination Resistor (120 ohm) Enable Disable (Default) SW 3 ON OFF INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 18 Configuration via Web Browser Access the Web Configurator The web configuration is an HTML-based management interface for quick and easy set up of the cellular router. Monitoring of the status, configuration and administration of the router can be done via the Web interface. After properly connecting the hardware of cellular router as previously explained. Launch your web browser and enter http://192.168.1.1 as URL. The default IP address and sub net-mask of the cellular router are 192.168.1.1 and 255.255.255.0. Because the cellular router acts as DHCP server in your network, the cellular router will automatically assign IP address for PC or NB in the network. Title Bar Panel > Selecting Language You can choose the languages, including English and Taiwan. Logging in the Router In this section, please fill in the default User Name root and the default Password 2wsx#EDC and then click Login. For the system security, suggest changing them after configuration. After clicking, the interface shows Login ok. Note: After changing the User Name and Password, strongly recommend you to save them because another time when you login, the User Name and Password have to be used the new one you changed. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 19 Navigate the Web Configurator The main screen is divided into three parts as below. A -Title Bar, B-Navigation Panel and C -Main Window.
(1) A : Title Bar The title bar provides some useful instructions that appear the situation of router. Item RSSI Uptime WAN Priority SIM Slot Location Google Maps Language Login/Logout
?
Title Bar Description Show if the SIM card is inserted in the slot. If yes, RSSI (Received Signal Strength Indicator) shows the current signal strength in a wireless network and the name of telecommunication operator. Show the time starting turn on the router until current using. Show the three mode of WAN status, which is first to use. Show the current using of SIM Slot that inserts into SIM1 or SIM2. Show the position of router from Google Maps. Note: This function is for GPS spec. Display Google Map according to location. Choose your language from the drop-down list on the upper right corner of the title bar. Click to log in or log out of the web configurator. Online Manual INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 20
(2)
(3) B : Navigation Panel-Main Menu and Sub Menu The menu items are divided into main and sub menu to configure the settings and get the status of connectivity on the navigation panel. C : Main Window This section shows the information or setting fields from main menu and sub menu. Status When you enter the web browser in the beginning and have not log in, the first item of main menu shows your status that you are a guest. This status only can view status page without any permission to log in. The interface of main window displays the status of router to show about information, including Cellular Attribute, Dual SIM information, the current connectivity of WAN Ethernet and LAN Ethernet. If the router has GPS function, the GPS interface is shown. Note: After logging in the system, you can set up the status of user and divide into three levels for setting users authority, including Super User, Administrator, and Read Only. For Guest, this status is without any authority. All users log in or log out and they need to have Web UI log records. Status Super User Administrator Read Only Guest User name system account (root/admin) only Super User only Super User can modify can modify N/A Password configurable configurable configurable N/A Permission Add/Delete/Modify all users accounts except Super User. Read/Write Configuration Read/Write only Read Configuration Configuration N/A INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 21 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 22 Item Attribute Alarm OFF Alarm ON Alarm PULSE Force ON Force OFF Force PULSE Item Attribute WAN LTE Operator Modem Access IMSI Phone Number Band EARFCN PLMN IPv4 Address IPv4 Mask Default Gateway IPv4 Conn Time Roaming Item Attribute IPv4 Address IPv4 Mask Default Gateway IPv4 Conn Time Item Attribute IPv4 DNS Server #1 IPv4 DNS Server #2 IPv4 DNS Server #3 IPv6 DNS Server #1 IPv6 DNS Server #2 IPv6 DNS Server #3 Status > DO Description Alarm configured to be disabled. Alarm configured to be enabled. Alarm configured to be enabled and DO in pulse mode. DO is force ON and in always mode by SMS/HTTPS. DO is force OFF by SMS/HTTPS. DO is force ON and in pulse mode by SMS/HTTPS. Status > WAN LTE Description The status of LTE. Display the name of operator. Show the router to access protocol type. Show the IMSI number of the current SIM cards. Show the phone number of the current SIM or Backup SIM. Show current connected Band. Absolute radio-frequency channel number. Public LAN Mobile Network ID. LTE obtain IPv4 address. LTE IPv4 mask. LTE WAN IPv4 Default Gateway. LTE WAN IPv4 Connected Time. Roaming status. Status > WAN Ethernet Description Ethernet WAN obtain IPv4 Address. Ethernet WAN obtain IPv4 Mask. Ethernet WAN IPv4 Default Gateway. Ethernet WAN IPv4 Connected Time. Status > WAN DNS Description Show the address of IPv4 DNS Server #1. Show the address of IPv4 DNS Server #2. Show the address of IPv4 DNS Server #3. Show the address of IPv6 DNS Server #1. Show the address of IPv6 DNS Server #2. Show the address of IPv6 DNS Server #3. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 23 Item Attribute IPv4 Address IPv4 Mask IPv6 Address IPv6 Conn Time Item Attribute Connected Clients Status > LAN Ethernet Description Ethernet LAN is assigned IPv4 Address. Ethernet LAN is assigned IPv4 Mask. Ethernet LAN is assigned IPv6 Address. IPv6 Connected Time. Status > WiFi Description Show the clients who have connected to the device. Item Status > GPS Description Show the latitude information of location. Show the longitude information of location. Show the horizontal information of location. Show the altitude information of location. Show the date information of location. Show the satellite information of location. Attribute Latitude Longitude Horizontal Altitude Date (UTC) Satellite Item Status > System Description Attribute Modem Firmware Version LTE IMEI Software Version Serial Number LAN Ethernet MAC Address Show the MAC address of LAN interface. WAN Ethernet MAC Address Show the MAC address of WAN interface. Show the modem firmware version of the device. Show the IMEI - International Mobile Equipment Identity. Show the software version currently running on the device. Show the serial number of the device. Item Attribute Open VPN IPSec GRE PPTP Server L2TP Status > Connected VPN Connection Description Open VPN connected number. IPSec connected number. GRE connected number. PPTP server connected number. L2TP connected number. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 24 Status > GPS For those GPS enabled router, you can see Location on the right-top banner of web interface when connecting your GPS function. After clicking Google Maps banner, a map will automatically display the current information of map according to location of router. Configuration > System This system section provides you to configure the following items, including Time and Date, COM Ports, Logging, Alarm, Ethernet, Modbus, and Client List. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 25 System > Time and Date This section allows you to set up the time and date of router and NTP server. There are two modes at Time and Date Setup, including Get from Time Server and Manual. The default mode is Get from Time Server. If the router has GPS function, you can turn on "GPS Time" for sync time from GPS server. For Time Zone Setup, the Daylight Savings Time allows the device to forward/backward the amount of time from Ahead of standard time setting automatically when the time is at the Daylight Savings duration that you have set up before. I. Get from Time Server Set up the time servers of IPv4 and IPv6. Select your local time zone. Click Apply to keep your configuration settings. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 26 II. Manual Set up the information of time and date, including year, month, date, and hour, minute, and second. Set up your local time zone. Click Apply to submit your configuration changes. III. Time Zone Setup Set up Daylight Savings as On. Set up Ahead of standard time. Set up the information of Start Date/Time, including Month, Week, Day, Hour and Minute. Set up the information of End Date/Time, including Month, Week, Day, Hour and Minute. Click Apply to submit your configuration changes. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 27 System > Time Zone Setup > Daylight Savings Item Daylight Saving Ahead of standard time Start Date / Start Time End Date / End Time Description forward/backward minutes when enter/leave Daylight Turn on/off the Daylight Savings feature. Select from Off or On. The default is Off. The Savings duration. Default is 60 minus. Time to enter Daylight Savings duration. The Month range is 1~12. 1
- Jul.
- Aug. 2
- Sep. 3 4
- Oct.
- Nov. 5 6
- Dec. The Week range is 1~5. 1 - first week in month. 2 - second week in month 3 - third week in month 4 - fourth week in month 5- fifth week in month
- Jan.
- Feb.
- Mar.
- Apr.
- May
- Jun. 7 8 9 10 11 12 The Day range is 0~6. 0 - Sunday (The start day of a week) 1- Monday 2 - Tuesday 3 - Wednesday 4 - Thursday 5 - Friday 6 - Saturday The Hour range is 0~23. The Min range is 0~59. Time to leave Daylight Savings duration. Same with Start Date/Start Time. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 28 IV. Time Server The Time server feature allows user to set a time server for LAN side client to get the time through NTP/SNTP protocol. Item Server mode Server port System > COM Ports System > Time Server Description Turn on/off the time server. The UDP port listened by time server. This section provides you to configure the COM port settings and remotely manage the device through the virtual COM setting. For the remote management, the managed device should be connected to the cellular router by serial interface either RS232 or RS485. Note: The COM 1 and COM 2 are RS232 interface, and the COM 3 is RS485 interface.
(1) The default is Disable. You can click edit button to configure your settings.
(2) Set up the configuration and Virtual COM. After configuring, click to confirm your settings. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 29
(3) The console is the command-line interface (CLI) management option for cellular router. You can assign the COM port to be a management port by this option. Note: We suggest to enable at least 1 COM port as your console port and the default console port is COM 1.
(4) The interface shows the setting information and click to configure. Item Edit Configuration Baud Rate Data Parity System > COM Ports Description Select from the current Baud Rate. Select from 7 bit or 8 bit. Select from the information of Parity. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 30 Stop Flow Control Virtual COM Mode Protocol Host Address Redirect Port Select from 1 bit or 2 bit. Select from none, Xon/Xoff or hardware. Select from Disable, Server or Client. Select from TCP or UDP. The host address is only available on client mode. Specify what the domain name or IP address (IPv4 or IPv6) to be connected. Server Mode: This network package of cellular router is on Client Mode: The network package of remote device is on the this port. remote host. System > Logging This section allows cellular router to record the data and display the status of data. 5.3.1 Logging > Logging
(1) Logging section provides you to control all logging records.
(2) Users need to select Apply to confirm your settings. Item Mode Remote Log Log Server Address System > Logging > Logging Description Turn on/off the logging configuration. Select from Disable or Enable. The default is Enable. The logging messages send to remote log or not. Select from Disable or Enable. The default is Disable. When you choose Enable on Remote Log, you should input IP address to save and receive all logging data.
(Note: This server should have installed Log software.) INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 31 5.3.2 Logging > Log This section displays all data status.
(1) You can choose Filter function to quickly search for your data.
(2) When you click Clear, all of the data that displays on the interface will be totally cleared without any backup.
(3) When you click Refresh, the system will update and display the latest data from your cellular router.
(4) When you click Download Logs, the system will download the latest data from your cellular router. Item Filter Date Group Module Message System > Logging > Log Description Filter the required data quickly. Show the date of log for each logging data. Show the group of software functions. Show the module of group of software functions. Show the messages for each logging data. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 32 System > Alarm This section allows you to configure the alarm. Note:
(1) If you select SMS in Alarm input/output, you need to add the trust phone number into Contracts/ On Duty.
(2) If you select SNMP trap in Alarm output, you need to set up SNMP trap configuration from Service SNMP.
(3) If you select E-Mail in Alarm output, you need to set up SMTP configuration from Service SMTP.
(4) If you select TR069 in Alarm output, you need to set up TR069 configuration from Service TR069. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 33 Item Mode Alarm Input Alarm Output DI 1 / 2 Trigger DO behavior SMS/E-mail System > Alarm Description Turn on/off the Alarm configuration. Select from Disable or Enable. The default is Enable. Select from SMS, DI 1, DI 2, VPN disconnect and WAN disconnect as input to trigger alarm. SMS: It means on duty team members on Contacts / On Duty can send SMS to the phone number of using SIM card to trigger alarm. DI 1/2: IO to trigger alarm. VPN disconnect: All tunnels get disconnected then trigger alarm. WAN disconnect: WAN connections get disconnected then trigger alarm. alarm. LAN disconnect: LAN connection get disconnected then trigger Reboot: Reboot then trigger alarm. Select from SMS, DO, SNMP trap and E-mail as alarm output. Select from High or Low. The default is High Trigger. High: SW is On to trigger. Low: SW is OFF to trigge. Always: Pull DO high. Pulse: High and Low continuously. Pulse Time Length: Pulse time length (mini seconds). Write your messages and limit 150 English characters for the messages to deliver. 5.4.1 Alarm > Contacts > Create and name the Group Click trusted and on duty members for naming and the interface will show the groups name in the Group setting as below. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 34 35 You can click or button to edit or delete the group. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 5.4.2 Alarm > Contacts > Add User Select your naming group and click + Add User button to add your users information, including Name, Phone and E-mail. After filling in your information for each row, chose your naming group and click to submit your settings. After submitting your setting, the interface returns to Group window setting. Now you can see your naming group and the users information that you have added. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 36 You can click button to edit the users information or click the check box and to delete the user. 5.4.3 Alarm > Duty Schedule Select Duty Schedule to edit the schedule of the on duty group. System > Ethernet This section allows you to configure the Ethernet. For Flow Control, it allows you to configure the Ethernet and solve unstable throughput under heavy loading. Sending 64 Bytes with bandwidth 100M bps traffic to LAN and WAN at the same time, the throughput may drop to zero at either side. When the system is very busy or buffer is exhausted, the flow control packet will be sent out to indicate that the link party has stopped to send the packet to system. The flow control packet will be sent out again once the system goes back to normal to indicate the link party that it can send packet again. Note: The LAN port of Ethernet has different layout based on which router model you use. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 37 For one LAN port (M300/M300-G/) For three LAN ports (M301/M301-G/M301-TG/M301-TPG/M301-GW) INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 38 Item Ethernet Ports Status Ethernet Ports Configurations WAN Ethernet Flow Control System > Ethernet Ports Description Show the connectivity status of LAN and WAN. Select from Auto, 100M Full, 100M Half, 10M Full, 10M Half and Disable. MTU is the Maximum Transmission Unit that can be sent over the WAN Ethernet interface. It allows users to adjust the MTU size to fit into their existing network environment. Allow user to control the traffic ingress from Ethernet LAN or WAN. System > Modbus This section allows you to configure the Modbus. Note: This configuration is for Modbus TCP and the function is only for COM 3 (RS485). Item Mode Port System > Modbus Description Select from Disable or Enable. The listening port of Modbus TCP. System > Client List This section allows you to understand how many devices have been connected and their status from the router. There are two types, one is DHCP Client and the other is Online. The default is both types to show all status when the router is on DHCP Client and Online. For DHCP Client type, the information shows IP address, MAC address, Hostname and the expiry time of IP (Start/End). INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 39 For Online type, the information shows IP address and MAC address when the client is online. System > Client List Description DHCP Client: List all clients information when it is via DHCP. Online: List the information when it is online. Item List Type System > LED This section allows you to set up the function led. Item Function LED System > Client List Description Default:
- ON: VPN connected.
- Slow Blinking: WAN connected.
- OFF: No WAN connection. WiFi AP:
- Heart Beat Blinking:
WiFi clients connected and it takes precedence.
- Otherwise as default behavior. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 40 Configuration > WAN This section allows you to configure WAN, including Priority, Ethernet and IPv6 DNS. WAN > Priority You can set up the priority of WAN. Item Priority WAN > Priority Description ETH First: WAN Ethernet is first priority and the second priority is LTE. The default is ETH First. LTE Only: The priority is only LTE. ETH Only: The priority is only Ethernet. LTE First: WAN LTE is first priority and the second priority is Ethernet. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 41 WAN > Ethernet 6.2.1 WAN Ethernet Configuration This section provides three options, including DHCP Client, PPPoE Client and Static IPv4. The default is DHCP Client. Item WAN > Ethernet Description WAN Ethernet There are three options to obtain the IP of WAN Ethernet. DHCP Client: DHCP server-assigned IP address, netmask, gateway, and DNS. PPPoE Client: Your ISP will provide you with a username and password. This option is typically used for DSL services. Static IPv4: User-defined IP address, netmask, and gateway address. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 42 When selecting DHCP Client, you can set up DNS Server Configuration. For IPv4 DNS Server, it provides three options to set up and each option has provided with From ISP, User Defined and None to configure. Item IPv4 DNS Server #1 IPv4 DNS Server #2 IPv4 DNS Server #3 WAN > Ethernet > DHCP Client Description Each setting DNS Server has three options, including From ISP, User Defined and None. When you select From ISP, the IPv4 DNS server IP is obtained When you select User Defined, the IPv4 DNS server IP is input from ISP. by user. When you select PPPoE Client, the interface shows the item of configuration to fill in your User Name and Password. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 43 When you select Static IPv4, the interface shows the information of configuration, including IP Address, IP Mask and Gateway Address. WAN > Ethernet > Static IPv4 Description Fill in the IP Address. Fill in the IP Mask. Fill in Gateway Address. The IPv4 DNS server IP is input by user. Item Static IPv4 Configuration IP Address IP Mask Gateway Address DNS Server Configuration IPv4 DNS Server #1 IPv4 DNS Server #2 IPv4 DNS Server #3 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 44 6.2.2 Ethernet Ping Health If you configure WAN Priority to Auto mode, the system would choose the cost effective connection first such as Ethernet. However, in case the Ethernet connection exist but it is unable to access internet; you can enable Ethernet Ping Health and the system would switch to LTE connection and switch back whenever Ethernet is able to access internet again. Item WAN > Ethernet > Ethernet Ping Health Description Ethernet Ping Health Select from Disable or Enable. The default is Enable. Interval IPv4 Host 1 IPv4 Host 2 IPv6 Host 1 IPv6 Host 2 Hint The interval is from 1 to 60 seconds. Input the address of IPv4 Host 1. Input the address of IPv4 Host 2. Input the address of IPv6 Host 1. Input the address of IPv6 Host 2. Show the usage descriptions. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 45 In addition, you can check which WAN is actually using from Status page. The interface will be shown check mark ( symbol) on the connection title. For IPv6 address, the status will be displayed on LAN Etherent Interface when IPv6 is using as WAN connection. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 46 WAN > IPv6 DNS This section allows you to set up IPv6 DNS Server Configuration. For IPv6 DNS Server, it provides three options to set up and each option has provided with From ISP, User Defined and None to configure. Item DNS Server Configuration IPv6 DNS Server #1 IPv6 DNS Server #2 IPv6 DNS Server #3 WAN > IPv6 DNS Description Each setting DNS Server has three options, including From ISP, User Defined and None. When you select From ISP, the IPv6 DNS server IP is When you select User Defined, the IPv6 DNS server IP is obtained from ISP. input by user. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 47 Configuration > LTE This section allows you to configure LTE Config, GPS Config, Dual SIM, Usage Display, SMS, Engineer Info, and DNS. LTE > LTE Config 7.1.1 LTE Configuration You can set up the LTE Configuration and LTE Ping Health. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 48 Item LTE Config MTU LTE > LTE Config Description Auto: Automatically connect the possible band. 4G Only: Connect to 4G network only. 3G Only: Connect to 3G network only. 2G Only: Connect to 2G network only. MTU is the Maximum Transmission Unit that can be sent over the LTE interface. It allows user to adjust the MTU size to fit into their existing network environment. 7.1.2 LTE Ping Health For LTE connection, you can enable LTE Ping Health to keep alive to avoid base station kicking out the device in idle time. Note: In 'Dual SIM' mode and both SIM are ready, all URL ping fail would jump into another SIM slot for connection. Item LTE Ping Health Interval IPv4 Host 1 LTE > LTE Config > LTE Ping Health Description Select from Disable or Enable. Input the interval seconds of ping. Input the address of IPv4 Host 1. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 49 IPv4 Host 2 IPv6 Host 1 IPv6 Host 2 Hint LTE > GPS Input the address of IPv4 Host 2. Input the address of IPv6 Host 1. Input the address of IPv6 Host 2. Show the usage descriptions. This section shows the status of GPS and allows you to set up GPS Configuration and connect RS232 from the used router to have more detailed information for your specific purpose. 50 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 Note: You have to select RS232 item and the interface shows the options of COM Port. You can download software from internet and activate the GPS Configuration to display what information you need from your software. Item Report to COM Port NMEA Type LTE > GPS Config Description Select from RS232 and LOG. Select from COM1 and COM2. Select from GSV, GGA, RMC and GSA. For example, you can use some software depending on your requirements and activate the GPS Configuration to display what information you need from your selecting software. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 51 LTE > Dual SIM This section allows you to understand the status of connectivity for Dual SIM, SIM1 and SIM2. The Used SIM item has three options and the default is on Dual SIM when first connection. The Connect Retry Number field can set up the re-connecting time if your one of the SIM cards on Dual SIM mode cant connect successfully. The default of Connect Retry Number is 3 minutes. For Roaming Switch, it means Switch to another SIM when roaming is detected. System will switch SIM slot when current SIM is in roaming state and another SIM slot is in READY state. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 52 If you have selected either SIM1 or SIM2 for the Used SIM to connect, the Roaming Switch and Connect Retry Number would not to be shown in the interface. You can set up the SIM cards, SIM1 Configurations or SIM2 Configurations. SIM PIN: If you have configured SIM PIN code into SIM card, please type SIM PIN code in Dual SIM configuration to make unlock successfully. SIM PUK: If you have typed wrong SIM PIN code and retried more than 3 times, the SIM Card will become the blocked mode. In this case, you have to type PUK and new SIM code to unlock SIM Card. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 53 Change SIM PINIf you want to change SIM PIN code, you can click Change button and type old SIM PIN code and new SIM PIN code. Please aware not to exceed the retry number (PIN remaining number and PUN remaining number). Note:
The interface will be shown the tick symbol at the same time when each SIM Card has been connected. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 54 Item Connect Policy Current SIM Card Status of SIM Card Connectivity Disable Roaming Used SIM SIM Priority Roaming Switch Connect Retry Number LTE > Dual SIM Description Display which SIM slot is using. Connect: After manually disconnect, user can only click Connect button to get connection or reboot the device to make it automatically connect. Disconnect: If there is one SIM slot get connection, the Disconnect button appear. After manually click Disconnect, the system would not automatically get connection until next reboot. NO: Make the connection even the device is in roaming state. YES: No connection when the device in roaming state. Dual SIM: Automatically switch SIM card when the current SIM card fail to make connection. SIM1: Only use SIM1 card slot. SIM2: Only use SIM2 card slot. Dual SIM: Automatically switch SIM card when the current SIM card fail to make connection. SIM1: Use SIM1 card slot as the first priority for connection. SIM2: Use SIM2 card slot as the first priority for connection. Switch to another SIM when roaming is detected. System will switch SIM slot when current SIM is in roaming state and another SIM slot is in READY state. After timeout, the router attempts to switch another SIM Slot. The default timeout is three minutes. This option is only for Dual SIM mode. SIM1 or SIM2 Configurations Status SIM PIN Confirmed SIM PIN SIM PUK Confirmed SIM PUK APN Username Display the status of Dual SIM. A personal identification number (PIN) for ordinary use to protect your SIM card. Double confirm SIM PIN. If user input the wrong SIM PIN more than 3 times, the user needs another password personal unblocking code (PUK) for PIN unlocking. Please check your operator for forgotten PUK number. Double confirm SIM PUK. The Access Point Name (APN) is the name for the settings to set up a connection to the gateway between your carrier's cellular network and the Public Internet. Leave it empty will search internally database automatically by SIM card for connection; however, please notice APN1 and APN2 must be manually configured different setting while concurrently use. The username can be input by user or the system will search from internal database if the username is blank. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 55 Password Confirm Password Auth
(NONE/PAP/CHAP) Change SIM PIN The password can be input by user or the system will search from internal database if the password is blank. Double confirm password. Configure Authentication mode with three modes, including NONE, PAP, and CHAP. If Auth mode is not None, most servers require username and password above. When you change the SIN PIN, please aware not to exceed the retry number (PIN remaining number and PUN remaining number). Old PIN New PIN Please input the current SIM PIN code. Please input the newly update SIM PIN code. PIN remaining number Display the allowed remaining PIN code retry number. Turn on/off the Data Limitation to disable or enable. PUK remaining number Display the allowed remaining PUK code retry number. Data Limitation Mode Already Used Data
(MB) Max Data Limitation
(MB) Monthly Reset Now Time Set up the reset time during the month. Show the current time of system. Display current used throughput since last reset. Configure max throughput. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 56 LTE > Usage Display This section shows the status of current SIM card, operator, IMSI and the charts for Real Time, Hourly, Daily, Weekly, and Monthly.
(1) Real-Time Usage:
It displays accumulated real-time Download/Upload/Total MB for 10 seconds period. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 57
(2) Hourly Usage:
It displays Download/Upload/Total MB per hour in one day for current using SIM card and the view window size is 24 hours. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 58
(3) Daily Usage:
It displays Download/Upload/Total MB per day in one month for current using SIM card and the view window size is 31 days. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 59
(4) Weekly Usage:
It displays Download/Upload/Total MB per day in one week for current using SIM card and the view window size is 7 days. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 60
(5) Monthly Usage:
It displays Download/Upload/Total MB per month in one year for current using SIM card and the view window size is 12 months. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 61 LTE > SMS This section provides two settings, one is SMS Action and the other is View SMS.
(1) When enabling SMS Action, it allows trust phone number which in Contacts/On Duty list by sending key words SMS to trigger device setting/action/query status. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 62
(2) View SMS allows you to review the information of SMS that you have received, including the state, phone and date and time. You can click view button to review all messages, button to clear all messages, and button to reload all messages. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 63 LTE > Serving Cell This section displays all parameters, including the following items:
Item RSRP RSRQ SINR RSCP ECIO Cell Identity eNB ID Cell ID PCI ID EARFCN UL Bandwidth DL Bandwidth LTE > Serving Cell Description Reference Signal Received Power. Reference Signal Received Quality. Loarithmic value of SINR. The Received Signal Code Power Level of the cell that was scanned. Carrier to noise ratio in dB = measured Ec/lo value in dB. eNB ID (20 Bits) + Cell ID (8 Bits). eNB ID. Cell ID. Physical Cell ID. The E-UTRA-ARFCN of the cell that was scanned. Up Link Bandwidth. Down Link Bandwidth. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 64 LTE > Lock PCIs This section allows you to search neighbors, lock/unlock PCIs and save locked PCIs. 7.7.1 Neighbors Item LTE > Lock PCIs > Neighbors Description Search Lock Unlock Save for bootup locked Save selected locked PCIs for next boot up. Search Neighbors from the Air for further action. Select multiple PCIs (Physical Cell ID) from Neighbor List to lock. Unlock all. 7.7.2 Locked PCIs Click Refresh button to get all the most recent locked PCIs (Physical Cell ID) information. 7.7.3 Saved Locked PCIs Click Refresh button to get all the most recent saved locked PCIs (Physical Cell ID) information. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 65 LTE > Lock Bands Please check Hint for module support bands and then select your desired multiple bands to lock for use. LTE > DNS This section allows you to setup LTE specific DNS setting. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 66 Item IPv4 DNS Server #1 IPv4 DNS Server #2 IPv4 DNS Server #3 LTE > DNS Description 1. Each setting DNS Server has three options, including From ISP, User Defined and None. 2. When you select From ISP, the IPv4 DNS server IP is obtained from ISP. 3. When you select User Defined, the IPv4 DNS server IP is input by user. Configuration > WiFi (M301-GW) WiFi > WiFi Config This section allows you to set up the Wi-Fi configuration. Item AP Enable HT Mode (HT Capability) Country Code Name(SSID) Channel Description Turn on/off the Wi-Fi Network. Select from Disable or Enable. The default is Enable. 20M: Only 20MHz Operation is Supported,40M: Both 20MHz and 40MHz Operation is Supported. Select Country Area for supported Channels SSID is Wi-Fi identification. The maximum length is 32 Auto (Automatically select the best channel) or manually select channel number. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 67 Item Description Security Option Passphrase Key Update None / WPA-PSK(TKIP) / WPA-PSK(AES) / WPA2-PSK (TKIP) /
WPA2-PSK(AES)/ WPA2(MIX). The legal length is 8 ~ 63. The string should belong to [0-9 A-F a-f]. 0 means no update or 30~86400 seconds update period. WiFi > Client List This section allows you to see all the Connected WiFi Client List. Item MAC Address IP Address Connected Time Description MAC Address Client IP Address Connected Time in Seconds. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 68 Configuration > LAN This section allows you to configure LAN IPv4, LAN IPv6, VLAN and Subnet. LAN > IPv4 Set up your IP Address and IP Mask. Also, fill in the information of DHCP Server Configuration. Item LAN IPv4 DHCP Server Configuration IP Address Pool Static IP Addresses LAN > IPv4 Description IP Address:192.168.1.1 IP Mask:255.255.255.0 Both of them are default, you can change them according to your local IP Address and IP Mask. Turn on/off DHCP Server Configuration. Enable to make router can lease IP address to DHCP clients which connect to LAN. Define the beginning and the end of the pool of IP addresses which will lease to DHCP clients. DHCP server support static IP address assignment. The static IP address can be added by clicking the + Add Static IP Address button. Each static IP consist of mode(on/off), MAC and IP address. Mode: Turn on/off the static IP address MAC: The MAC address of target host or PC IP: The desired IP address for target host or PC INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 69 LAN > IPv6 Select your type of IPv6, which shows Delegate Prefix from WAN or Static, and then set up DHCP Server Configuration, including Address Assign, DNS Assign and DNS Server. Item Type LAN > IPv6 Description Delegate Prefix from WAN Select this option to automatically obtain an IPv6 network prefix from the service provider or an uplink router. Static Select this option to configure a fixed IPv6 address for the cellular routers LAN IPv6 address. Static Address DHCP Server Configuration You need to input the static address when you select the static type. Address Assign Select how you obtain an IPv6 address. Stateless: The cellular router uses IPv6 stateless auto configuration. RADVD (Router Advertisement Daemon) is enabled to have the cellular router send IPv6 prefix information in router advertisements periodically and in response to router solicitations. Stateful: The cellular router uses IPv6 stateful auto configuration. The LAN IPv6 clients can obtain IPv6 addresses through DHCPv6. LAN > VLAN This section allows you to set up VLAN that provides a network segmentation system to distinguish the LAN clients and separate them into different LAN subnet for enhancing security and controlling traffic. There are two router models based on the numbers of LAN ports to have two setting types of VLAN and communicate with your devices, one is 1-port LAN and the other is 3-port LANs. Type 1:
For 1-port LAN router model, you can use the Type 1 to configure VLAN. First, the VLAN Mode allows you to select Off or Tag Base (802.1p). INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 70 When VLAN Mode is set to Tag Base, the VLAN setting window will appear as shown below. For each row, the settings can be enabled or disabled by checkbox and select the Subnet and the VLAN ID (VID). The Subnet sets up the IP address and IP mask for the router, so this router can communicate with the third party by this IP address and IP mask on this VLAN. (Note: The NET1 cant remove it and fixes in the first row.) Furthermore, the Subnet provides DHCP Server function to allow the third party for the same VLAN to get IP address and IP mask. Therefore, you do not need to configure manually.
(Note: The subnet information window will show from LAN > Subnet.) LAN > VLAN (1-port LANs) Description The VLAN mode is Off or Tag Base (802.1p VLAN). The assigned row of setting is enabled. The subnet provides IP address and IP mask for the router. The VLAN ID range is from 1 to 4094. Item Mode Enable Subnet VID INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 71 Type 2:
For 3-port LANs, the VLAN Mode allows you to select Off, Tag Base (802.1p) or Port Base. When VLAN Mode is set to Tag Base, the VLAN setting window will appear as shown below. The VLAN Isolation function allows administrator to separate the different Subnet (VLAN). When it is on, the different Subnet (VLAN) user cannot communication each other. For each row, the settings can be enabled or disabled by checkbox and select the Subnet and the VLAN ID (VID). The Subnet sets up the IP address and IP mask for the router so this router can communicate with the third party by this IP address and IP mask on this VLAN. (Note: The NET1 cant remove it and fixes in the first column.) Furthermore, the Subnet provides DHCP Server function to allow the third party for the same VLAN to get IP address and IP mask. Therefore, you do not need to configure manually.
(Note: The subnet information will show the Subnet window from the LAN catalogue.) There are three ports for Tag Base Mode, including LAN1, LAN2 and LAN3. And one Router port INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 72 which is a gate allows those ports to access internet or the router. The PVID and Tag Mode are for LAN1, LAN2 and LAN3 ports. The PVID provides the untagged devices to communicate with third-party devices. (Note: The untagged devices mean not to support 802.1p VLANs.) The Tag Mode can be Trunk or Access. The Trunk allows to carry multiple 802.1p VLANs traffic. The Access allows the untagged devices to communicate with a specific 802.1p VLAN by assigned PVID. Item LAN > VLAN (3-port LANs) > Tag Base Description The VLAN mode is Off or Tag Base (802.1p VLAN). Mode VLAN Isolation The VLAN Isolation is Off or On. Enable Subnet VID Port The assigned row of settings is enabled. Sets the IP address, IP mask and DHCP server. The VLAN ID range is from 1 to 4094. The port is shown to assign the port to a VLAN which the device is connected from LAN 1, LAN2, LAN3 and Router. The PVID range from 1 to 4094 Sets the default VLAN ID for untagged devices connected to the port. The Trunk port setting is connected to another 802.1p VLAN aware switch or device. The Access port setting is connected to a single untagged device. PVID Tag Mode When VLAN Mode is set to Port Base, the VLAN setting window will appear as shown below. For each row, the settings can be enabled or disabled by checkbox and assign the port to communicate each other. There are three ports for Port Base Mode, including LAN1, LAN2 and LAN3. And one Router port which is a gate allows those ports to access internet or the router. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 73 Item Mode Enable Port LAN > VLAN (3-port LANs) > Port Base Description The VLAN mode is Off, Tag Base (802.1p VLAN) or Port Base. The assigned row of setting is enabled. The port is shown to assign the port to a VLAN which the device is connected from LAN 1, LAN2, LAN3 and Router. LAN > Subnet This section allows you to get the information of IP Address and IP Mask and edit for the VLAN Subnets from DHCP Server Configuration. This Subnet setting is the same as LAN > IPv4 setting and follows with Tag Base Mode of VLAN to enable the function. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 74 IP Routing This section allows you to configure the Static Route, RIP, OSPF, and BGP. IP Routing > Static Route This section allows you to configure the Static Route. A static route is a pre-determined path that network information must follow to reach a specific host or network. Item Mode Settings Mode IP Routing > Static Route > Settings Description The setting is for full network. Select from Off or On. The setting is for the specific network. Select from Off or On. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 75 Set up each name for your running host or network. Name Destination Fill in the destination of a specific subnet or IP from network. Gateway Interface Note:
Fill in the gateway address of your router. Select the interface from LAN or Ethernet. The destination field is required to fill in. The format of destination is IPv4 or IPv6. The address of gateway or the type of interface can be chosen one or both to fill in the field. There are two fail situations when you fill in the incorrect type for the field.
(1) Input the invalid format of destination. The interface is shown in Apply fail to notice.
(2) Input the IP address of destination/gateway from IPv4 and IPv6 at the same time. The interface is shown in Apply fail to notice. You should select either IPv4 or IPv6 as the address of destination/gateway. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 76 The status tab shows the information from the settings of static route. Item Mode Status Destination Gateway Interface Protocol IP Routing > Static Route > Status Description The setting is open for full network. Select from Off or On. Show the status of destination from the setting section. Show the status of gateway from the setting section. Show the status of interface from the setting section. Show the status of protocol from the setting section. IP Routing > RIP This section allows you to configure RIP and select the mode from Disable or Enable. The default is Disable. Note:
RIP (Routing Information Protocol, RFC 2453) is an Interior Gateway Protocol (IGP) and is commonly used in internal networks. It allows a router to exchange its routing information automatically with other routers, and allows it to dynamically adjust its routing tables and adapt to changes in the network. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 77 Item General Mode Redistribute local routes Redistribute connected routes Redistribute OSPF routes Redistribute BGP routes IP Routing > RIP > General Description Select from Off or On to open or close RIP function. Select from Off or On to open or close redistribute local routes. Select from Off or On to open or close redistribute connected routes. Select from Off or On to open or close redistribute OSPF routes. Select from Off or On to open or close redistribute BGP routes. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 78 Item Interfaces Mode Interface Authentication Key Key ID Passive IP Routing > RIP > Interfaces Description Select from Off or On to use or not to use the RIP function in the interface. Select from eth1 (WAN Ethernet) or LAN. Select from none or md5 to approve authentication. Note:
Please offer Key and Key ID when you select md5 to use HMAC-MD5. The key used for authentication (maxlength=16). The ID of the key used for authentication (1-255). Select from Off or On to send out or not to send out RIP packets on this interface. IP Routing > OSPF This section allows you to set up OSPF with three sub configurations, including General, Interfaces and Networks configuration.
(1) General Configuration Item General Mode Redistribute local routes IP Routing > OSPF > General Description OffOSPF function is off. OnOSPF function is on. OffNot redistribute local routes from the device's own routing On: Redistribute local routes from the device's own routing table. table. Redistribute routes connected OffNot redistribute connected routes to networks which are directly connected to the device. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 79 On: Redistribute connected routes to networks which are directly connected to the device. Off: Not redistribute RIP routes learned via the RIP routing On: Redistribute RIP routes learned via the RIP routing Off: Not redistribute BGP routes learned via the RIP routing On: Redistribute BGP routes learned via the RIP routing Redistribute RIP routes Redistribute BGP routes
(2) Interfaces Configuration protocol. protocol. protocol. protocol. There are 2 parts for OSPF Interfaces configuration. OSPF Interfaces Summary Click Edit button to edit the existed interface. Click Delete button to delete the existed interface. Add/Edit OSPF Interface Note: This interface can be added at maximum is 2. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 80 Item IP Routing > OSPF > Interfaces Description Authentication Mode Interface Select from Off or On to use or not to use the OSPF function in the interface. Select from eth1 (WAN Ethernet) or LAN. Select from none or md5 to approve authentication. Note:
Please offer Key and Key ID when you select md5 to use HMAC-MD5. The key used for authentication (maxlength=16). The ID of the key used for authentication (1-255). The cost for sending packets via this interface (0: OSPF defaults). Select from Off or On to send out or not to send out OSPF packets on this interface.
(3) Networks Configuration Key Key ID Cost Passive There are 2 parts for OSPF Networks configuration. OSPF Networks Summary You can edit and delete the existed OSPF networks. OSPF Networks Add/Edit This sub configuration is used to configure all the networks, the maximum is 2. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 81 Item Mode Prefix Prefix Length Area IP Routing > OSPF > Networks Description Select from Off or On to enable the network setting. Set Prefix of the network Set Length of the prefix Routing area to which this interface belongs (0-65535, 0 means backbone) IP Routing > BGP This section allows you to set up BGP with three sub configurations, including General, Neighbors and Networks configuration.
(1) General Configuration Item General Mode AS Number Redistribute local routes Redistribute connected routes Redistribute RIP routes Redistribute OSPF routes IP Routing > BGP > General Description Off: BGP function is off. On: BGP function is on. The number of the autonomous system (1 ~ 4294967295) Off: Not redistribute local routes from the device's own routing table. On: Redistribute local routes from the device's own routing table. Off: Not redistribute connected routes to networks which are directly On: Redistribute connected routes to networks which are directly connected to the device. connected to the device. Off: Not redistribute RIP routes learned via the RIP routing protocol. On: Redistribute RIP routes learned via the RIP routing protocol. Off: Not redistribute OSPF routes learned via the OSPF routing protocol. On: Redistribute OSPF routes learned via the OSPF routing protocol. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 82
(2) Neighbor Configuration The neighbors sub configuration is used to configure all the BGP routers to peer with and the maximum neighbors is 16. Item IP Routing > BGP > Neighbors Description Mode IP Address AS Number Multihop Update Source Mode Update Source Address The source address to this neighbor. Select from Off or On to enable the neighbor setting. Set IP address of the peer router. Autonomous system number of the peer router. Allow multiple hops between this router and the peer router. Whether to specify the source address to this neighbor. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 83
(3) Networks Configuration The networks sub configuration allows to add IP network prefixes that shall be distributed via BGP in addition to the networks that are redistributed from other sources as defined on the general sub configuration and the maximum neighbors is 16. Item Mode Prefix Prefix Length IP Routing > BGP > Networks Description Select from Off or On to enable the network Set Prefix of the network Set Length of the prefix INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 84 Configuration > VPN This section allows you to configure Open VPN, IPsec, GRE, PPTP Server, and L2TP. VPN > Open VPN 11.1.1 Open VPN Common Setting
(1) This section allows you to configure the Open VPN parameters. The default mode is Disable. Click button to edit Open VPN Connection. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 85
(2) From Setting tab, you can set up the connection of Open VPN.
(3) From Log tab, the interface will be shown the status of connection to make you follow the suitation whenever is successful or fail connection. Item Mode VPN Mode VPN > Open VPN > Setting Description Turn on/off Open VPN to select Disable or Enable. Server: Tick to enable Open VPN server tunnel. Client: Tick to enable Open VPN client tunnel. The default is Client. Custom: This option allows user to use the .ovpn configuration file to quickly set up VPN tunnel with third-party server or use the Open VPN advanced options to be compatible with other servers. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 86 VPN Type Status TLS Mode Cipher IPv6 Mode Device Protocol Port VPN Compression Authentication Roadwarrior (default) Bridging: Bridging the VPN tunnel and LAN/VLAN Display the status of Open VPN. Select from Disable or Enable for data security. The default is Disable. The Open VPN format of data transmission. Select from Disable or Enable. The default is Disable. Select from TUN or TAP. The default is TUN. Select from UDP or TCP Client which depends on the application. The default is UDP. Enter the listening port of remote side Open VPN server. Select Disable or Enable to compress the data stream. The default is Disable. Select from two different kinds of authentication ways: Certificate or pkcs#12 Certificate. The pkcs#12 option is only available on the VPN client mode. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 87 11.1.2 Open VPN Client Setting Select option Client from VPN Mode, and this section allows you configure the Open VPN client route and authentication files. The files could be imported by clicking Import button and the file should be downloaded from Open VPN server. Item Client Server Address Route Client Networks VPN > Open VPN > Client VPN Mode Description Fill in WAN IP of Open VPN server. Select from Off or On. This setting needs to match the server side. When enabled, the cellular router will auto apply the properly routing rules. NAT 1:1 NAT Client-Security Root CA Cert Key P12 Tick to enable NAT Traversal for Open VPN. This item must be enabled when the router under NAT environment. Select from Off or On. When two routers LAN Subnet are same and create Open VPN tunnels, this function should be turned on. The Certificate Authority file of Open VPN server could be downloaded from Open VPN server. The certification file is for Open VPN client, which could be downloaded from Open VPN server. The private key file is for Open VPN client, which could be downloaded from Open VPN server. The PKCS#12 file is for Open VPN client, which could be downloaded from Open VPN server. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 88 11.1.3 Open VPN Server Setting Select option Server from VPN Mode, and this section allows you to configure the server status of VPN Mode. Note: When selecting the On option of Route Client Networks, the Open VPN server will route the client traffic or not. You should fill in the client IP and netmask when this option is enabled. 89 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 Item Server VPN Network VPN Netmask Roadwarrior:
Route Client Networks NAT 1:1 NAT Server- Server Security Root CA Cert, Key and DH Server- User Security User 1 - User 8 VPN > Open VPN > Server VPN Mode Description The network ID for Open VPN virtual network. The netmask for Open VPN virtual network. Select from Off or On. The Open VPN server will route the client traffic or not. User should fill in the client IP and netmask when this option is enabled. Tick to enable NAT Traversal for Open VPN. This item must be enabled when router under NAT environment. Select from Off or On. The default is Off. When two routers LAN Subnet are same and create Open VPN tunnels, this function is turned on. Create Root CA key. Create Cert, Key and DH key. According to your requirement, you can create different kinds of user security key from User 1 to User 8. 11.1.4 Set up Open VPN Custom For Custom of VPN Mode, this section helps you use the .ovpn configuration file to quickly set up VPN tunnel with third-party server or use the Open VPN advance options to be compatible with other servers. Note:
When clicking the button, you can import third-party Open VPN configuration that find out from Internet and save the document into your server or PC. After importing the file, the interface will show button. Click for displaying the information and for downloading the file. For third-party Open VPN configuration, suggest from http://www.vpngate.net/en/
INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 90 Item Mode VPN Mode Custom Config Username Password Status VPN > Open VPN > Custom VPN Mode Description Select from Disable or Enable. The default is Disable. Select from custom mode. Import Open VPN configuration. Fill in the username if the imported file has already set up the username. Fill in the password if the imported file has already set up the password. Display the connection status of Open VPN, such as IP address and the connected time. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 91 VPN > IPsec This section allows you to set up IPsec Tunnel. The seting has four tags, Connections, Authentication IDs, X.509 Certificates, and CA Certificates. For the IPsec connection which be authenticated by pre-shared key, it only need to setup the Connections and Authentication IDs. For the IPsec connection which be authenticated by RSA or TLS, the settings must cover the four parts. VPN > IPsec > General setting Description Select from Disable or Enable. The default is Disable. Select from Policy-based or Route-based. The default is Policy-based. Policy-based: transmit traffic that meet the IPsec phase 2 local/remote subnet. Route-based: transmit traffic that match routing table. Item Mode Type 11.2.1 IPsec > Connections This section provides the information of the IPsec connections. Each connection will show the State, IKE information and Tunnel information. In the default setting, the list of connections is empty. You can create the new connection by click + Add Connection button. For the edit, you can click the phase 2 setting respectively. and buttons to edit IPsec phase 1 and For the advance settings, like Dead Peer Detection, a.k.a DPD, you can click the to edit it. button INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 92
(1) IPsec Phase 1 Setting Item Mode Name Protocol Aggressive mode Auth Type Encryption Hash DH Group Lifetime VPN > IPsec > Connections > Phrase 1 setting Description Select from Disable or Enable. The default is Disable. Short name or description. Select from IKEv1 or IKEv2. The default is IKEv1. Select from Disable or Enable. The default is Disable. When this option be enabled, the connection will be running on IKEv1 Aggressive mode.
(Note: This option only work on IKEv1.) Select from PSK (default), RSA, EAP-TLS.
(Note: The EAP-TLS is for IKEv2 only.) The encryption algorithm. Select from AES128 (default), AES192, AES256 or 3DES. The integrity algorithm. Select from MD5, SHA1 (default) or SHA256. The Diffie Hellman Group. Select from 1(768 bit), 2(1024 bit), 5(1536 bit) (default), 14(2048 bit), 15(3072 bit), 16(4096 bit), 17(6144 bit) or 18(8192 bit). The length of the keying channel of a connection. Select from 30 minutes, 1 hour, 2 hours, 3 hours, 6 hours, 12 hours or 24 hours. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 93 Local Host Local ID Remote Host Remote ID The IP address of the router's public network interface. If this value is blank, the connection will automatically detect the correct IP address. The identification for authentication on local peer. Select from the created authentication IDs or empty. The IP address of the peer gateway's public network interface. If this value is blank, the connection will act the server role to wait the incoming request. The identification for authentication on remote peer. Select from the created authentication IDs or empty.
(2) IPsec Phase 2 Setting Item Protocol Encryption Hash DH Group Lifetime Local Subnet VPN > IPsec > Connections > Phrase 2 setting Description Only support ESP. The encryption algorithm. Select from AES128 (default), AES192, AES256 or 3DES. The integrity algorithm. Select from MD5, SHA1 (default) or SHA256. The Diffie Hellman Group. Select from 1(768 bit), 2(1024 bit), 5(1536 bit) (default), 14(2048 bit), 15(3072 bit), 16(4096 bit), 17(6144 bit) or 18(8192 bit). The length of a particular instance of a connection. Select from 30 minutes, 1 hour, 2 hours, 3 hours, 6 hours, 12 hours or 24 hours. The private subnet behind the router. The available formats are A.B.C.D, A.B.C.D/M, A.B::C.D or A.B::C.D/M If this value is blank, the connection will set it as the Local Host of Phase 1 setting. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 94 Note:
(1) This option only work on Policy-based IPsec VPN type.
(2) This option will be setup as 0.0.0.0/0 automatically on IPsec Route-based
(3) This option will be omitted when the service option is L2TP.
(For host-to-host connection only) The private subnet behind the peer gateway. The available formats are A.B.C.D, A.B.C.D/M, A.B::C.D or A.B::C.D/M If this value is blank, the connection will set it as the `Remote Host` of Phase 1 setting. Note:
(1) This option only work on Policy-based IPsec VPN type.
(2) This option will be setup as 0.0.0.0/0 automatically on IPsec Route-based VPN. VPN. Remote Subnet
(3) This option will be omitted when the service option is L2TP.
(for host-to-host connection only) Service Restrict the VPN traffic to the particular protocol only. Select from the Any, TCP, UDP or L2TP.
(3) IPsec Advance Setting VPN > IPsec > Connections > Advance Setting Description The period time interval to detect dead peers. The default is 30 seconds. The max number of retry of dead peer detection. The default is 5 times. Item DPD interval DPD retry 11.2.2 IPsec > Authentication IDs This section provides the authenticaion ID set to authenticate the IPsec connections. In the default setting, the list of authentication ID is empty. You can create the new authentication ID by click + Add Authentication ID button. Note: Please apply the changes before editing the connection settings. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 95 Item ID Type Pre-shared Key /
X.509 Certificate VPN > IPsec > Authentication IDs Description The identification for authentication. It only work on PSK type. Select from PSK or RSA. The default is PSK. PSK: Use the pre-shared key to authenticate the connection. RSA: Use the certificate to authenticate the connection. The X.509 certificate for authentication. The certificate could be generated or imported by X.509 Certificates section. According to the above options, there are some combinations to authenticate the IPsec connection. VPN > IPsec > Authentication IDs
#
1 ID Type PSK Pre-shared Key / X.509 Certificate password 2 remote.IPsec PSK 2wsx#EDC 3 4 local.IPsec PSK test RSA created X.509 Comment The default password for the PSK connections. The password only for the PSK connection with remote.IPsec ID. Normally, this case will be used to authenticate peer gateway. The identification for the connection. Normally, this case will be used to announe the ID of the router. The ID field will be omitted, and use the common name(CN) of X.509 as the ID field. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 96 11.2.3 IPsec > X.509 Certificates This section provides the certificates setting which could be used by IPsec authentication ID. Each certificate will show the State and Subject information and provide the controlling buttons to let user import, download or edit the certificate/key files. Note: Please apply the changes before editing the Authentication IDs settings. 11.2.4 IPsec > CA Certificates This section provides the CA certificates setting which could check whether the X.509 certificate is valid or not. There is one self-signed CA (generated by the router), and it supports the user import the self-
signed CAs to the router. The self-signed CA will help the router to verify the self-signed X.509 certificate which is imported on X.509 Certificates section. Each CA certificate will show the State and Subject information and provide the controlling buttons to let user could download or edit the certificate / key files. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 97 Certificate Generation There are two kinds of certificate could generated by router, one is self-signed CA, the other is X.509. To generate the self-signed CA certificate:
1. Navigate to CA Certificates tab. edit button to navigate the Certificate Setting page. 2. Click the 3. Fill up the informations of the CA certificate. 4. Click the Generate Certificate button and Save. 5. Click the Apply button to apply the changes. To generate the X.509 certificate:
1. Make sure the self-signed CA certificate generated. 2. Navigate to X.509 Certificates tab. 3. Add the new X.509 certificate by + Add X.509 button. (If its not existed.) 4. Click the Edit button to navigate the Certificate Setting page. 5. Fill up the informations of the X.509 certificate. 6. Click the Generate Certificate button and Save. 7. Click the Apply button to apply the changes. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 98 Certificate Setting VPN > IPsec > CA Certificates Description The 2-letter country code. e.g. US This option is required for certificate generation. The state name. e.g. Some-State The location name. e.g. city-name The orgnization name. e.g. company-name This option is required for certificate generation. Item Country Name State Location Orgnization Name Orgnization Unit Name The orgnization unit name. Common Name E-mail The host name associated with the certificate. e.g. example.com This option is required for certificate generation. The maintainer's E-mail. Certificate Importing Same as the Certificate Generation, the router support the CA and X.509 certificate importing. To import the CA certificate:
1. Navigate to CA Certificates tab. 2. Click the + Add CA certificate button. 3. Select the CA certificate file from browser window. 4. When the file be selected and everything all right, the newly CA certificate will shown the CA certificate list with Imported state. To import the X.509 certificate:
1. Navigate to X.509 Certificates tab. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 99 2. Click the + Add X.509 button. The list will pop up the balnk X.509 entry. 3. Click the Cert Import button. 4. Select the X.509 certificate file from browser window. 5. When the file be selected and everything all right, the state should be Cert or Key is missed. 6. Click the Key Import button. 7. Select the X.509 key file from browser window. 8. When the state shown Imported, the importing procedure is completed. How to download the certificate If the certificate is generated or imported, there will be the download button to download each certificate and key file. Note: When the connection is authenticated by RSA or EAP-TLS, the user must download the X.509 certificate, key and CA certificate, and import the files to the remote gateway. 11.2.5 IPsec > Net-to-Net Configuration In this case, the IPsec VPN tunnel uses the two LAN side subnet clouds and makes them communicate each other. There are two part settings for the Cellular router IPsec feature. Pre-shared Key authentication Configure Net-to-Net VPN Server 1. Change Mode from Disable to Enable. 2. Navigate to the Authentication IDs tab. 3. Add the authentication ID Keep ID as blank, Type as PSK and fill the password to Pre-shared Key field. 4. Apply the changes INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 100 5. Navigate to the Connections tab. 6. Add IPsec connection
(1) Edit the phase 1 setting
(2) Change Mode from Disable to Enable.
(3) Save the changes.
(4) Edit the phase 2 setting
(5) Fill up the Local Subnet and Remote Subnet. e.g. Local Subnet: 192.168.100.0/24, Remote Subnet: 192.168.200.0/24
(6) Save the changes 7. Apply the changes 101 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 102 Configure Net-to-Net VPN Client 1. Change Mode from Disable to Enable. 2. Navigate to the Authentication IDs tab. 3. Add the authentication ID Keep ID as blank, Type as PSK and fill the password to Pre-shared Key field. 4. Apply the changes 5. Navigate to the Connections tab. 6. Add IPsec connection
(1) Edit the phase 1 setting
(2) Change Mode from Disable to Enable.
(3) Fill the IP address of VPN server to Remote Host Field. e.g. Remote Host: 10.0.0.1
(4) Save the changes
(5) Edit the phase 2 setting
(6) Fill up the Local Subnet and Remote Subnet. e.g. Local Subnet: 192.168.200.0/24, Remote Subnet: 192.168.100.0/24
(7) Save the changes 7. Apply the changes INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 103 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 104 IPsec Net-to-Net with Pre-shared Key result Server Client RSA authentication - Server Prepare the self-signed CA certificate 1. Navigate to the CA Certificates tab. 2. Edit the self-signed CA. (Skip it if the self-signed CA is generated.)
(1) Fill the information of the self-signed CA
(2) Country Name: CN
(3) Orgnization Name: Company
(4) Common Name: IPsec.ca
(5) Click the Generate Certificate button
(6) Save the changes 3. The State of self-signed CA will be Waiting Apply 4. Apply the changes 5. Waiting for the State of self-signed CA become generated 6. Refresh the page INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 105 Prepare the X.509 certificates 1. Navigate to the X.509 Certificates tab. 2. Click the add button to add the X.509 certificate 3. Edit the newly X.509 certificate for the local router.
(1) Fill the information of the X.509 certificate
(2) Country Name: CN
(3) Orgnization Name: Company
(4) Common Name: local.IPsec
(5) Click the Generate Certificate button
(6) Save the changes 4. Click the add button to add the X.509 certificate 5. Edit the newly X.509 certificate for the remote router.
(1) Fill the information of the X.509 certificate
(2) Country Name: CN
(3) Orgnization Name: Company
(4) Common Name: remote.IPsec
(5) Click the Generate Certificate button
(6) Save the changes 6. Apply the changes 7. Waiting for the State of X.509 Certificate become generated INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 106 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 107 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 108 Prepare the authentication IDs 1. Navigate to the Authentication IDs tab. 2. Add tow authentication IDs Keep first one's ID as blank, Type as RSA and select the C=CN, O=Company, CN=local.IPsec X.509 certificate. Keep second one's ID as blank, Type as RSA and select the C=CN, O=Company, CN=remote.IPsec X.509 certificate. 3. Apply the changes Setup the connection on VPN server 1. Change Mode from Disable to Enable. 2. Navigate to the Connections tab. 3. Add IPsec connection
(1) Edit the phase 1 setting
(2) Change Mode from Disable to Enable.
(3) Change Auth Type from PSK to RSA.
(4) Change the Local ID and select the local.IPsec (RSA) authenticaion ID.
(5) Save the changes
(6) Edit the phase 2 setting
(7) Fill up the Local Subnet and Remote Subnet. e.g. Local Subnet: 192.168.100.0/24, Remote Subnet: 192.168.200.0/24
(8) Save the changes 4. Apply the changes INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 109 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 110 RSA authentication Client Prerequisite for VPN Client with RSA authentication 1. The self-signed CA certificate which generated by VPN server 2. The X.509 certificate and key for remote router which generated by VPN server These files could be downloaded from VPN server. The detail could reference How to download the certificate section of user manual. Import the CA certificate and the X.509 certificate Please refer the Certificate Importing section of user manual to import the required files. 111 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 Setup the connection on VPN client 1. Change Mode from Disable to Enable. 2. Navigate to the Authentication IDs tab. 3. Add one authentication ID Keep second one's ID as blank, Type as RSA and select the C=CN, O=Company, CN=remote.IPsec X.509 certificate. 4. Apply the changes 5. Navigate to the Connections tab. 6. Add IPsec connection
(1) Edit the phase 1 setting
(2) Change Mode from Disable to Enable.
(3) Change Auth Type from PSK to RSA.
(4) Change the Local ID and select the remote.IPsec (RSA) authenticaion ID.
(5) Fill the IP address of VPN server to Remote Host field. e.g. Remote Host: 10.0.0.1
(6) Save the changes
(7) Edit the phase 2 setting
(8) Fill up the Local Subnet and Remote Subnet. e.g. Local Subnet: 192.168.200.0/24, Remote Subnet: 192.168.100.0/24
(9) Save the changes 7. Apply the changes INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 112 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 113 IPsec Net-to-Net with RSA authentication result Server Client INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 114 11.2.6 IPsec > Hub-Spoke Topology This section explains how to set Hub-Spoke Topology and connect two (or more) gateways to a central one. This requires one connection between each spoke and the central hub (n - 1 connections for n gateways) For example, in the Hub-and-Spoke topology, we want to send the essential traffic through IPsec VPN tunnel. Thus, we will set the Route-based VPN and Static Route to handle this situation. The Route-based VPN will redirect the traffic which is matching the routing table only to IPsec VPN tunnel. After setting some configurations, the PC1 and PC2 could communicate each other through the Hub gateway. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 115 Hub configuration Hub IPsec configuration In this example, we have two spokes on the topology. Thus, the Hub needs to set two IPsec connections for each spoke. 1. Change Mode from Disable to Enable. 2. Change Type from Policy-based to Route-based. 3. Navigate to the Authentication IDs tab. 4. Add the default pre-shared key ID: (The ID is blank.) Type: PSK Pre-shared Key: defaultpsk 5. Add the authentication ID for Spoke 1 ID: spoke1 Type: PSK Pre-shared Key: testspoke1 6. Add the authentication ID for Spoke 2 ID: spoke2 Type: PSK Pre-shared Key: testspoke2 7. Apply the changes 8. Navigate to the Connections tab 9. Add IPsec connection for Spoke 1
(1) Edit the phase 1 setting
(2) Change Mode from Disable to Enable
(3) Change the Remote ID and select the spoke1 (PSK) authentication ID
(4) Save the changes 10. Add IPsec connection for Spoke 2
(1) Edit the phase 1 setting
(2) Change Mode from Disable to Enable.
(3) Change the Remote ID and select the spoke2 (PSK) authentication ID
(4) Save the changes 11. Apply the changes INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 116 117 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 118 Hub Static Route configuration 1. Navigate to the IP Routing > Static Route page 2. Add the static route for IPsec Spoke 1 connection Mode: On Destination: 192.168.100.0/24 Interface: Select the IPsec interface by connection number e.g. If your IPsec connection is #1 then the interface should be IPsec#1. 3. Add the static route for IPsec Spoke 2 connection Mode: On Destination: 192.168.200.0/24 Interface: Select the IPsec interface by connection number e.g. If your IPsec connection is #2 then the interface should be IPsec#2. 4. Apply the changes INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 119 Spoke 1 configuration Spoke 1 IPsec configuration 1. Change Mode from Disable to Enable. 2. Change Type from Policy-based to Route-based. 3. Navigate to the Authentication IDs tab. 4. Add default pre-shared key
(1) ID:
(2) Type: PSK
(3) Pre-shared Key: defaultpsk 5. Add one authentication ID
(4) ID: spoke1
(5) Type: PSK
(6) Pre-shared Key: testspoke1 6. Apply the changes 7. Navigate to the Connections tab. 8. Add IPsec connection
(7) Edit the phase 1 setting
(8) Change Mode from Disable to Enable.
(9) Change the Local ID and select the spoke1 (PSK) authenticaion ID.
(10) Fill the IP address of VPN server to Remote Host field. e.g. Remote Host: 10.0.0.1
(11) Save the changes 9. Apply the changes INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 120 121 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 Spoke 1 Static Route configurtation 1. Navigate to the IP Routing > Static Route page 2. Add the static route for IPsec connection Mode: On Destination: 192.168.200.0/24 Interface: Select the IPsec interface by connection number e.g. If your IPsec connection is #1 then the interface should be IPsec#1. 3. Apply the changes 122 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 Spoke 2 configuration Spoke 2 IPsec configuration 1. Change Mode from Disable to Enable. 2. Change Type from Policy-based to Route-based. 3. Navigate to the Authentication IDs tab. 4. Add default pre-shared key ID: (The ID is blank.) Type: PSK Pre-shared Key: defaultpsk 5. Add one authentication ID ID: spoke2 Type: PSK Pre-shared Key: testspoke2 6. Apply the changes 7. Navigate to the Connections tab. 8. Add IPsec connection
(1) Edit the phase 1 setting
(2) Change Mode from Disable to Enable.
(3) Change the Local ID and select the spoke2 (PSK) authenticaion ID.
(4) Fill the IP address of VPN server to Remote Host field. e.g. Remote Host: 10.0.0.1
(5) Save the changes 9. Apply the changes INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 123 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 124 Spoke 2 Static Route configurtation 1. Naviagte to the IP Routing > Static Route page 2. Add the static route for IPsec connection Mode: On Destination: 192.168.100.0/24 Interface: Select the IPsec interface by connection number e.g. If your IPsec connection is #1 then the interface should be IPsec#1. 3. Apply the changes INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 125 VPN > GRE This section allows you to set GRE configuration. The default mode is off. Generic Routing Encapsulation (GRE) is one of the available tunneling mechanisms which uses IP as the transport protocol and can be used for carrying many different passenger protocols. The tunnels behave as virtual point-to-point links that have two endpoints identified by the tunnel source and tunnel destination addresses at each endpoint. The GRE Mode is on. Item VPN > GRE Description Mode Select from Off or On to enable GRE. Local Address Set local address of the GRE tunnel. Remote Address Set remote address of the GRE tunnel. Tunnel Device Address Set IP address of this GRE tunnel device. Tunnel Device Address Prefix Set Prefix of the Tunnel Device Address. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 126 VPN > PPTP Server This section provides 2 sub configurations, including General Configuration and Clients Configuration.
(1) General Configuration VPN > PPTP Server > General Description Select from Off or On to enable PPTP Server. IP addresses to be used at the local end of the tunneled PPP links between the server and the client. A list of IP addresses to assign to remote PPTP clients. Item Mode Server Address Client Address Range
(2) Clients Configuration There are two parts for Clients configuration. Summary part: User can delete and edit the existed PPTP clients. Add/Edit part:
Item Mode Username Password VPN > PPTP Server > Clients Description Select from Off or On to set the client setting. The username of this client. The password of this client. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 127 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 128 VPN > L2TP This section allows you to set up L2TP and provides three modes for configuration, including Off, Server, and Client Mode.
(1) Genernal Mode: The defualt mode is Off as shown in the following interface.
(2) Server Mode:
Choose the Server mode and the interface will be changed as below. Item Mode Auth Local IP VPN> L2TP > Server Mode Description Select from Off or On to set the client setting. The authentication method for L2TP connection. Available options: PAP, CHAP, MS-CHAP, MS-CHAPv2 The virtual IP for L2TP server. Remote begin IP The begin address of L2TP client's IP pool. Remote end IP The end address of L2TP client's IP pool. Username Password The L2TP client's username. Could be used to add the newly client or update existed client. The L2TP client's password. Could be used to add the newly client or update existed client. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 129 Fill in the username and password and click the and manage them under server mode. button, you can create the L2TP client
(3) Client Mode:
Choose the Client mode and the interface will be changed as below. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 130 Item Mode Server Auth Username Password NAT Default route VPN> L2TP > Client Mode Description Turn on/off this L2TP connection The L2TP server address or hostname. The authentication method for L2TP connection. Should same as L2TP server's auth type. The username for L2TP authentication. The password for L2TP authentication. Turn on to translate the LAN subnet IP to L2TP virtual IP. Turn on to redirect all traffic to L2TP tunnel. Fill in the required parameters and click the manage the L2TP connection under client mode. button to create the L2TP connection and Click the button and edit the parameters to update the L2TP connection. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 131 Configuration > Firewall This section allows you to configurate Port Forwarding, DMZ, IP Filter, MAC Filter, URL Filter, NAT and IPS. Firewall > Port Forwarding This section allows you to set up Port Forwarding and click edit button to configure. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 132 Firewall > Port Forwarding Description Item Mode Turn on/off Port Forwarding to select Disable or Enable. The default is Disable. Descript the name of Port Forwarding. Select from UDP or TCP Client which depends on the application. Fill in the beginning of source port. Fill in the end of source port. Fill in the current private destination IP. Description Protocol Source Port Begin Source Port End Destination IP Destination Port Begin Fill in the beginning of private destination port. Destination Port End Fill in the end of private destination port. Firewall > DMZ This section allows you to set the DMZ configuration. Item Mode Host IP Address Firewall > DMZ Description Select from Disable or Enable. The default is Disable. Fill in your Host IP Address. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 133 Firewall > IP Filter This section allows you to configure IP Filter. After clicking protocol, source/port and destination/port. The default is Disable mode and Black list. button, you can edit your IP 134 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 Black List: When set as Black List, the specific IP address/port in rule will be blocked. White List: When set as White List, the specific IP address/port in rule will be accepted. Management IP Address:
For White List only. Since White List will block all user communication except those has been assigned by rules, it is better to assign a specific IP address for the administrator to access the Router which is Management IP Address. Service Ports:
For White List only. The setting is specified for Router access only. The user can set it to allow Router access outside WAN or inside LAN Service. For example, access outside WAN DNS service. It also allows user to access Router service from outside WAN or inside LAN. For example, access Router Web service. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 135 Edit Black/White List
(1) Click
(2) The default is Disable mode as the following interface (Black/White). button to edit Black/White list. 136 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 Item Firewall > IP Filter Description Mode Protocol Source IP Source Port Destination IP Destination Port
(3) When selecting Enable Mode, the protocol is TCP. The source IP has IPv4 and IPv6 setting Select from Disable or Enable. The default is Disable. Select from All, ICMP, TCP or UDP. Fill in your source IP address. Fill in your source port. Fill in your destination IP address. Fill in your destination port. formats.
(4) For Source IP, there are three types to input your source IP that depends on your requirement, including single IP, IP with Mask or giving a range of IP. The following table provides some examples. IP Format IPv4 Single IP 192.168.0.123 Firewall > Edit IP Filter > Source IP IP with Mask 192.168.1.0/24 192.168.1.0/255.255.255. Ranged IP 192.168.1.1-
192.168.1.123 2607:f0d0:1002:51::4-
2607:f0d0:1002:51::aaaa 2607:f0d0:1002:51::4 2607:f0d0:1002:51::0/64 IPv6 Note: Setting up a range of IP, please use hyphen symbol to mark your ranged IP.
(5) For Source Port, there are two types to input your source port that depends on your requirement, including single port (e.g.1234) or giving a range of ports (e.g.1234:5678). Note: Setting up a range of source ports, please use: colon symbol to mark your ranged ports. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 137 Firewall > MAC Filter This section allows you to set up MAC Filter. After clicking address. button, you can edit your MAC Item Service > MAC Filter Description Select from Disable or Enable. The default is Disable. Fill in your MAC address. Mode MAC Address Note: Setting up MAC address, please use: colon symbol (e.g. xx : xx : xx : xx) or hyphen symbol to mark (e.g. xx-xx-xx-xx). INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 138 Firewall > URL Filter This section allows you to set up URL Filter. After clicking filter and information. button, you can edit the type of INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 139 Note: Please not include https:// or http:// for the URL address in the Full Filter. Item Mode Filter Key / Full Firewall > URL Filter Description Select from Disable or Enable. The default is Disable. Select from Key or Full. The default is Key. Fill in your Key / Full information. Firewall > NAT This section allows you to set NAT configuration. When NAT is on, the router will replace the source private IP address by its Internet public address for outgoing packets, and replace the destination Internet public address by private IP address for incoming packets. When NAT is off, the router will send the source LAN private IP address for outgoing packets and allow to receive the destination LAN private IP address for incoming packets. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 140 Firewall > IPS This section allows you to set IPS configuration. IPS prevents the system from being attacked by the Internet. The system allows to limit the max incoming connection number from WAN per source IP address to prevent system resource exhausted. Also, the system allows to limit the max incoming connection retry number during a specific time period from WAN per source IP address to prevent too many unexpected connections retry event from causing system busy. Firewall > IPS Description Item Mode Total allow incoming connection number Max incoming connection retry number Duration time Turn on / off IPS function (default: Off) Select the checkbox to enable or disable the function. The default number is 10. Select the checkbox to enable or disable the function. The default number is 20. The default time is 120 seconds. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 141 Configuration > Service This section allows you to configure the SNMP, TR069, Dynamic DNS, VRRP, MQTT, UPnP, SMTP, and IP Alias. Service > SNMP 13.1.1 Community This section allows you to set the SNMP configuration. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 142 Item Mode Community Mode Name Access Service > SNMP > Community Description Select from Disable or Enable to configure SNMP. Configure community setting with three options, including # 1, # 2 and #3. Select from Disable or Enable. Name each community. Select from Read-Only or Read-Write. 13.1.2 SNMP v3 User configuration For SNMP version 3, you need to register authentication and allow a receiver that confirm the packet was not modified in transit. There are three options to set up SNMP v3 configuration. Item Service > SNMP > SNMP v3 User configuration Description Select from Disable or Enable to configure SNMP. Mode The default is Disable. Name Fill in your name. Auth Mode Select from Authentication or Privacy. Authentication Password Fill in your authentication password. Authentication Protocol Privacy Password Privacy Protocol Access Select from MD5 or SHA. Fill in your privacy password. Select from DES or AES. Select from Read-Only or Read-Write. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 143 13.1.3 SNMP trap configuration This section allows you to set up the SNMP trap configuration when you select the SNMP trap function from Alarm output of system for your router. With SNMP trap setting, you can know the status of remote device. Service > SNMP > SNMP trap configuration Item Description Mode Community Name Destination Select from Disable or Enable. The default is Disable. Fill in your community name. The destination (domain name/IP) of remote SNMP trap server. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 144 Service > TR069 This section allows you to set up TR069 client configuration. You can get information how to install TR069 Server (GenieACS Installation) from the application configuration chapter. Item Mode ACS URL ACS Username ACS Password Periodic Inform Periodic Inform Interval(Sec) Connection Request Username Connection Request Password Service > TR069 Description Select from Disable or Enable. The default is Disable. Fill in the URL address of ACS (Auto-Configuration Server). Fill in the ACS username to authenticate the CPE (this router) when connecting to the ACS. Fill in the ACS password to authenticate the CPE (this router) when connecting to the ACS. Select from Disable or Enable. The default is Disable. The CPE reports the status to the ACS when enabling a period of time set. Fill in the periodic time. The CPE reports to ACS the status according to your duration in seconds of the interval set. Fill in the connection request username to authenticate the ACS if the ACS attempts to communicate with the CPE. Fill in the connection request password to authenticate the ACS if the ACS attempts to communicate with the CPE. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 145 Service > Dynamic DNS This section allows you to set up Dynamic DNS. Item Service > Dynamic DNS Description Mode Service Provider Host Name Token ID Host Secret ID Username Password Update Period Time (Sec) Fill in 0 to mean 30 days. IP Address Selection Turn on/off this function to select Disable or Enable. The default is Disable. Select the Service Provider of Dynamic DNS. Fill in your registered Host Name from Service Provider. Fill in your Token ID from Service Provider. Fill in your Secret ID from Service Provider. Fill in your registered username from Service Provider. Fill in your registered password from Service Provider. Select either Internet IP or WAN IP. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 146 Note: There are six options of Service Provider as below to explain the information. Service Provider Host Name Token ID dynv6.com Register hostname, e.g. tester.dynv6.net The token ID, e.g. v_ABjMMQxeAnWv5UwtuVn1QBriynzq Service Provider Host Name Host Secret ID www.nsupdate.info Register hostname, e.g. tester.nsupdate.info The Host Secret ID, e.g. e2AMDsLmVF Service Provider Host Name Token ID www.duckdns.org Register hostname, e.g. tester.duckdns.org The token ID, e.g.12345678-de49-4e97-a33c-98b159aead2b Service Provider Host Name Username Password Service provider Host Name Username Password Service provider Host Name Username Password no-ip.com Register hostname, e.g. tester.hopto.org Register username. Register password. freedns.afraid.org Register hostname, e.g. tester.mooo.com Register username. Register password. dyndns.org Register hostname, e.g. tester.dyns.com Register username. Register password. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 147 Service > VRRP This section allows you to configure VRRP. Item Mode Group ID Priority Virtual IP Service > VRRP Description Select from Disable or Enable. The default is Disable. Specify which VRRP group of this router belong to (1-255). The default is 1. Enter the priority value from 1 to 254. The larger value has higher priority. The default is 100. Each router in the same VRRP group must have the same virtual IP address. This virtual IP address must belong to the same address range as the real The default is 0.0.0.0. IP address of the interface. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 148 Service > MQTT This section makes you configure MQTT which allows the MQTT client to send the message within specific topic or channel. By default, the router does not allow anonymous to read/write the MQTT topic or channel. Thus, you need to create the account with username and password for MQTT client in the web UI. Item Mode Port Manage Users Username Password ACLs User Topic Service > MQTT Description Select from Disable or Enable. The default is Disable. Fill in the port number of MQTT application. Create the users and show all users names. Allow each user to delete their name. Fill in the username of manage user. Fill in the password of manage user. Allow to specify what topic should be limited. Select the users and identify their authority to read or write the MQTT topic/channel. Name the topic of MQTT message. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 149 Take for example, the interface is shown as below. The Manage Users section will show all users that you create. Moreover, each user can use the delete button to delete it. For the ACLs control, user can specify what topic should be limited. In this case, we set up the publisher pub1 to write the critical topic. Additionally, we also allow the subscribers sub1 and sub2 to read the critical topic. Thus, only the sub1 and sub2 can receive it when pub1 sending the message. 150 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 Service > UPnP This section allows you to set up UPnP confirguration to select the mode from Disable or Enable. The default UPnP is enabled for the cellular router. Note:
UPnP (Universal Plug and Play) is a set of protocols that allows a PC to automatically discover other UPnP devices (anything from an Internet gateway device to a light switch), retrieve an XML description of the device and its services, control the device, and subscribe to real-time event notification. PCs using UPnP can retrieve the cellular router's WAN IP address, and automatically create NAT port maps. This means that applications that support UPnP, and are used with UPnP enabled cellular router, will not need application layer gateway support on the cellular router to work through NAT. Service > SMTP This section provides you to send your email for the server. For instance, the email will be sent to notify when the Alarm has a nofitication by the server. Item Mode Server Port Username / Password Service > SMTP Description Select from Disable or Enable. The default is Disable. The email will be sent through the server. There are three ports for SMTP communication between mail servers. Port 25Use TCP port 25 without encryption. Port 465SMTP connections secured by SSL. Port 587SMTP connections secured by TLS. Fill in your username and password as the same your server. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 151 Service > IP Alias This section allows you to set IP Alias configuration. IP Alias is associating more than one IP address to a network interface. With IP Alias, one node on a network can build multiple connections with the network, each serving a different purpose. IP Alias can be used to provide multiple network addresses on a single physical interface. Item Mode Entries Add / Edit IP Alias Entry Service > IP Alias Description Select from Off or On to enable the IP Alias. The setting can be edited or deleted the existed entries. Mode: select from Off or On to use or not use this entry. Interface: the interface you want to provide the additional address. Addr: the IP address. Mask: the network mask. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 152 Service > QoS (Quality of Service) QoS (Quality of Service) refers to a network's ability to achieve maximum bandwidth and allow minimum bandwidth. It guarantees the minimum and limit the maximum bandwidth for certain class of traffic. The QoS configuration has three parts, including ISP bandwidth, QoS and Status. ISP bandwidth allows user to configure the max bandwidth for upstream and downstream of specific WAN interface. Upstream means from LAN to WAN. Downstream means WAN to LAN. QoS configuration allows user to classify the traffic. Once classified, the traffic will have the guarantee minimum and limit maximum bandwidth. Status allows user to monitor the dynamic bandwidth usage. 13.9.1 ISP Bandwidth User can assign the Upstream and Downstream Bandwidth for each interface. The Bandwidth unit is kilobits per second. To prevent guaranteed traffic loss, the assigned bandwidth is better not to exceed the real bandwidth because the allowable traffic quantity may exceed the real bandwidth. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 153 13.9.2 QoS You can select QoS tab and show a overall view for QoS configuration. At right side of window, there are three buttons. botton allows you to edit QoS Entry and configure QoS settings. button allows you to adjust priority of the QoS entry. The first QoS entry is the highest priority. 154 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 The QoS entry configuration page has three parts for classify traffic, assign bandwidth, and group IP address bandwidth. 1. Classify traffic by following items:
Item Mode Name Interface Direction Service > QoS > Edit QoS Entry Description Select from Disable or Enable QoS. The setting can be edited or deleted the existed entries. The interface of QoS entry is either WAN Ethernet or LTE and both options. When selecting Upstream for LAN to WAN traffic, the Port When selecting Downstream for WAN to LAN traffic, the Port Begin/End is for public server. Begin/End is for public server. When selecting Upstream (LAN server) for WAN to LAN traffic, the Port Begin/End is for LAN server. When selecting Downstream (LAN server) for LAN to WAN traffic, the Port Begin/End is for LAN server. Downstream (LAN server) is for LAN to WAN traffic, and the Port Begin/End is for LAN server. Choose four types to set address format, including All, Single, Subnet, and Range. All is for none. Single is for single IP address. Subnet is for IP address with subnet mask bit. Range is for the specified range between two IP addresses. Hint:
When [RANGE] is selected, compare the difference from left to right octet and find out different octet for setting the specified range of IP address. All other parts after different octet would be ignored. All is for none. UDP is for User Datagram Protocol. TCP is for Transmission. the TCP/UDP service port NONE NET1 - NET8 Note: For NET1 to NET8, make sure the related subnet is enabled at VLANTag Base. The VLAN ID, vid, will be the VID field of the related Subnet at VLANTag Base. NONE or 0~7. It is class of service for VLAN. IPv4v6 Address Protocol Port Begin/Port End VLAN follow vid of COS
(Class of Service or 802.1q) INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 155 2. Assign bandwidth by following items:
Min Rate / Max Rate: The unit is kilobits per second. Min Rate guarantee the minimum bandwidth and Max Rate is the limit bandwidth. 3. Assign group IP bandwidth by following items:
Bandwidth divided for each IP Address: When this feature is selected, the bandwidth assigned by Min Rate / Max Rate will be divided by the number of IP addresses. The available IP type is Subnet and Range. User needs to calculate the Min Rate and Max Rate for those IP addresses. The subnet mask bit in IP Type Subnet is octet boundary and the number of IP addresses is also one octet, 256, from subnet mask bit to subnet mask plus eight bit. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 156 13.9.3 Status 1. Refresher Setting select the showed content of bandwidth usage by following items:
Refresh rate: how long the browser will update the showed content once. Direct: show Upstream or Downstream. Show detail bandwidth for each IP address: show the group IP bandwidth usage. Apply Refresh Setting button: press this button to take above new setting effect. 2. Data part is the content of bandwidth usage. 13.9.4 The case of Internet Web site access Step 1: Set Main Mode as Enable Step 2: Set QoS Entry #1 Step 2.1: Set Mode as Enable Step 2.2: Set Name as Internet Browse US. Step 2.3: Select Interface LTE. Step 2.4: Select Upstream. Step 2.5: Set Port Begin/End as 443/443. Step 2.6: Set Min/Max Rate as 100/200. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 157 Step 3: Set QoS Entry #2 Step 3.1: Set Mode as Enable Step 3.2: Set Name as Internet Browse DS. Step 3.3: Select Interface LTE. Step 3.4: Select Downstream. Step 3.5: Set Port Begin/End as 443/443. Step 3.6: Set Min/Max Rate as 300/600. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 158 Step 4: Apply Step 5: Check the internet access is ok through LTE. (Since we selected LTE interface.) Step 6: Start browse the internet from LAN PC. Step 7: Check Upstream Status. The traffic in entry Internet Browse US is Upstream, LAN to WAN, and send request to public Web Server with destination port number 443. The base of percentage is ISP Bandwidth > LTE > Upstream setting. It is 1000 kbps in our case. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 159 Step 8: Check Status Downstream. The traffic in entry Internet Browse DS is Downstream, WAN to LAN, and send response from public Web Server with source port number 443. The base of percentage is ISP Bandwidth > LTE > Downstream setting. It is 1000 kbps in our example. 160 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 13.9.5 Bandwidth divided for each IP address There are ten number of IP addresses. The most left different octet is 11 in 192.168.1.11 and 2 in 192.168.1.2, so number of IP addresses is calculated by 11 minus 2 and plus one for boundary. The Min rate will be divided by ten, 100/10=10 kbit/s for each IP address 192.168.1.2 to 192.168.1.11. The Max rate is same with configuration for all IP addresses, 192.168.1.2 to 192.168.1.11, since we don't want to waste the bandwidth when there is just one IP address in use. For example, if only 192.168.1.2 have traffic to send/receive, then it can use all of the 200 kbit/s. In the same case except changing IPv4v6 address field to 192.168.1.0~192.168.2.0, there are two number of IP addresses. The most left different octet is 2 in 192.168.2.0 and 1 in 192.168.1.0, so number of IP addresses is calculated by 2 minus 1 and plus one for boundary. The Min rate will be divided by two, 100/2=50 kbit/s for IP address 192.168.2.0 and 192.168.1.0. The Max rate is same with configuration for both IP addresses, 192.168.1.0 and 192.168.2.0, since we don't want to waste the bandwidth when there is just one IP address in using. For example, if only 192.168.1.0 have traffic to send/receive, then it can use all of the 200 kbit/s. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 161 Configuration > Management This section provides you to manage the router, set up your administration and know about the status of current software and firmware. Also, you can back up and restore the configuration. Management > Identification This section allows you to confirm the profile of router, current software, firmware version and system uptime. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 162 Item Management > Identification Description Model Name Show the model name of cellular router. LAN Ethernet MAC Address Show the LAN Ethernet MAC address. WAN Ethernet MAC Address Show the WAN Ethernet MAC address. Bootloader Version Software Version Serial Number Software MCSV Hardware MCSV Modem Firmware Version IMEI Uptime Show the bootloader version currently running on the device. Show the software version currently running on the device Show the product serial number. Show the software MCSV of the running firmware Show the current hardware MCSV of the device. Show the modem firmware version of the device Show the IMEI (International Mobile Equipment Identity number). Show the current system uptime. Management > Administration This section allows you to set up the name of router and change your new password. For the Session TTL, you can set up what duration of time will be logout. If you dont need to have this timeout limitation, you can fill in 0(Zero). The default timeout is 5 minutes. After logging in the system, you can set up the status of user and divide into three levels for setting users authority, including Super User, Administrator, and Read Only. For Guest, this status is without any authority. All users log in or log out and they need to have Web UI log records. User Level Status User name Password Permission Super User Administrator Read Only Guest System Account only Super User only Super User
(root / admin) configurable
(1) Add/Delete/Modify all users accounts except Super User.
(2) Read/Write Configuration can modify can modify N/A configurable configurable N/A Read / Write Configuration only Read Configuration N/A INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 163 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 164 Management > Contacts / On Duty This section allows you to create the groups, add the usersFor more detailed instruction, please navigate to System > Alarm. 14.3.1 Contacts
+ Add Group: Please fill out group name.
+ Add User: Please fill out Name/Phone/E-Mail/Groups. 14.3.2 Duty Schedule Please select duty date for every group. The trust and responsible groups can control/receive alarms and SMS. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 165 Management > SSH Secure Shell (SSH) allows user to configure system via a secure channel. User can configure system from either public domain or local LAN. Item Mode Server Port Access Control Management > SSH Description Select from Disable or Enable SSH function. The port number is where SSH server works on. Allow All: Any client who own the IPv4v6 Address can reach system is able to connect system. Allow specified IPv4v6 Address below: Only those configured IPv4v6 Address client are allowed to connect system. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 166 Management > Web This section allows user to change the HTTP port via HTTP. As long as pressing Apply, the web daemon will restart the new configuration, and you wont see the response at the web browser. We need a way to reply immediately and apply the configuration latter. By using fork, we can make parent process reply immediately and the child process execute the configuration. Note: Remember close the file descriptor stdin and stdout within the child process context. Management > Web Item Description HTTP Port HTTPS Port After pressing Apply button, the device will apply immediately and give you some hints Please use new port to access latter. For example, set the HTTP Port as 3000. The TCP port listened by HTTP daemon. The TCP port listened by HTTPS daemon. 167 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 Management > Firmware This section provides you to upgrade the firmware of router.
(1) Click button to choose your current firmware version in your PC.
(2) Select
(3) After upgrading successfully, please reboot the router. button to update. Management > Configuration This section supports you to export or import the configuration file.
(1) Click button to export your current configurations.
(2) Click button to import the configuration file. Management > Load Factory This section supports you to load the factory default configuration and restart the device immediately. You can click the button. Management > Restart This section allows you to click button and the router will restart immediately. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 168 Management > Schedule Reboot The setting allows you to schedule the reboot time regularly. Schedule Type Interval Schedule Type - Per Day Schedule Type - Per Week Schedule Type - Per Month INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 169 Configuration > Diagnosis This section allows you to diagnose Ping and Traceroute for your Host (IP address or Domain Name). Diagnosis > Ping Please assign the Host you want to ping. The result of the ping is as below. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 170 Diagnosis > Traceroute Please assign the Host **you want to** traceroute. The result of the traceroute is as below. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 171 Configuration Applications This section explains specific examples how to configure your applications. WAN Priority You can select from ETH First, LTE Only, ETH Only or LTE First.
(1) WAN Priority > ETH First:
In case both Ethernet and LTE can access Internet, the router would route network packages through Ethernet. The reason is Ethernet that is low price and stable. However, in case Ethernet is unplug or not able to access Internet (check by ping), the router would route network packages through LTE network.
(2) WAN Priority > LTE Only:
In this mode, the router only routes network packages through LTE. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 172
(3) WAN Priority > ETH Only:
In this mode, the router only routes network packages through Ethernet.
(4) WAN Priority > LTE First:
In case both Ethernet and LTE can access Internet, the router would route network packages through LTE. However, in case LTE is unplug or not able to access Internet (check by ping), the router would route network packages through Ethernet network. 173 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 LAN > IPv4/IPv6 Dual Stack The router supports IPv4/IPv6 dual stack by default, it means IPv4 packages route to IPv4 network and IPv6 route to IPv6 network. Since IPv6 is global IP, there is no NAT between WAN site and LAN site. One device only needs one global IPv6. There is IPv6 firewall protection in the router by default. Only the IPv6 packages come from LAN site device and got reply back. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 174 The router automatically detects IPv6 environment and query IP. After the IP is obtained successfully, it will distribute to LAN site hosts. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 175 MQTT Broker The cellular router provides the MQTT broker feature which allow the MQTT client sending the message within specific topic (channel). By default, the cellular router does not allow anonymous to read/write the MQTT topic (channel). Thus, you need to create the account with username and password for MQTT client in the web UI. The Manage Users section will show all created users. Each user can use the delete button to delete it. For the ACL control, you can specify what topic should be limited. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 176 For example, we set the publisher pub2 to write the critical topic. Additionally, we also the subscribers sub1 and sub3 can read the critical topic. Thus, when pub2 is sending the message only the sub1, the sub3 can receive it. Virtual COM > Remote Management You can access the remote serial device (e.g. Console) by the Virtual COM server feature. When you set up the above environment, use the Virtual COM software (e.g. USR-VCOM) to simulate the COM device. After the simulation, the user can use the terminal tool (e.g. putty, tera term) to access the remote serial device Console. How to set up The router provides RS-232 (COM1, COM2) and RS-458 (COM3). You can choose one serial port to connect the device. For example, if you use COM2 to connect the serial device, you need to adjust the setting like baud rate, date bits to fit the device. You can use the web UI to set up the serial settings and open the Virtual COM server feature for COM2. First, you need to navigate to the System -> COM ports. The web UI shows the following picture. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 177 You can click the Edit button to configure COM2 setting. The configuration UI shows the following picture. The configuration UI provides the serial setting and the Virtual COM setting.
(1) For the serial setting, you need to change the setting like baud rate to fit the connected device.
(2) For the Virtual COM, you need to change the mode to Server and specify the Protocol, Port to reach the remote management feature. (Note: In this case, we use the TCP and port 6000 to be the Virtual COM server settings.)
(3) Click the Close and the Apply button. If all settings are correct, the web UI will display Apply OK.
(4) Then you can open the Virtual COM software on PC. (Note: In this case, we use the USR-
VCOM to be the Virtual COM software.)
(5) And set up the virtual serial port by 192.168.1.1 (The default is LAN IP), TCP client and INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 178 Remote Port 6000 as the following picture. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 179 Virtual COM > Remote Alarm When the router connected with the alarm device, the alarming data from the device can be forwarded by the router to the warning center. Same as the remote management, the serial settings of connected COM port need to be configured properly. And the virtual should be opened and run as Client mode. Also, you need to specify the remote host and the port. The web UI of router shows the below picture. After the above setup, the warning center will receive the data when the alarm device sent the data/message. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 180 Virtual COM > Modbus RTU over TCP For the industrial products, the Modbus protocol is the most popular industrial control protocol. If the Modbus software/SCADA supported the Modbus RTU over TCP, the Virtual COM server feature of router could handle it. You need to configure the RS-485(COM3) like the remote management (serial settings, Virtual COM settings). After above setup, you can use the Modbus software which supported the Modbus RTU over TCP to control the Modbus sensor/device. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 181 Modbus Gateway The Modbus gateway feature of router could convert the Modbus TCP to the Modbus RTU protocol and send it to the connected RS-485 device. This feature depends on the COM3 setting, you need to configure the serial setting in the System -> COM ports web UI and set up this feature in the System -> Modbus web UI. After above setup, the Modbus software can use the Modbus TCP protocol to control the Modbus sensor/device. Alarm Configuration After you enable alarm, all the selected alarm input events would trigger selected alarm output.
(1) Alarm Input:
The alarm would be triggered when DI1/DI2 show(s) high signal. The users phone number is in device contact phone book can send a SMS to device SIM card to trigger alarm. VPN / WAN disconnect would trigger alarm no matter which interface is currently using. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 182
(2) Alarm Output:
In case of SMS is selected then only users phone number is in selected group and on selected working day would receive alarm SMS. In case of DO is selected, please make sure your DO is connected to your alarm device. In case of SNMP trap is selected, please make sure you enable SNMP trap (Service ->
SNMP) and fill our server IP. 183 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 Open VPN Configuration Generic setup For Open VPN configuration, use the certificate to authenticate the VPN connection. Thus, you need to generate the required files for Open VPN server or import the required file to Open VPN client. 16.9.1 Open VPN Server Mode Open VPN server certificate generation For the Open VPN server mode, the Open VPN web UI provides the buttons to generate the required files. The files include Root CA, Cert, Key and Open VPN client files. The file will be generated when you click the corresponded Create button. Note: The Cert, Key generation will take around 10 minutes. To generate the Open VPN client files, you need to type the password to create it. The password will be used in the Open VPN client when the client uses PKCS#12 to authenticate the VPN connection. After the generation, the web UI shows the below picture. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 184 And you can click the info button to show the detail for each files, or click the download button to download the file to PC. 16.9.2 Open VPN Client Mode Open VPN client certificate import For the Open VPN client mode, the Open VPN web UI provides the buttons to import the required files. The Open VPN client can use the Root CA, User Key and User Cert files from Open VPN server to authenticate the VPN tunnel. Or just only use the PKCS#12 (P12) file from Open VPN server to authenticate it. Note: The PKCS#12 files will contain the Root CA, User Key and User Cert. When the files are imported, the web UI is as shown in the right-bottom picture. Same as Open VPN server part, you can use the info/download buttons to get the information of file or download the file to PC. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 185 16.9.3 Open VPN Net-to-Net You can use the Open VPN VPN tunnel to make the PC1 and PC2 communicate each other.
(1) Open VPN server configuration For the Open VPN server side, the basic setting is as shown in below figure. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 186 The VPN Network and VPN Netmask are required fields. Note: The VPN Network should be network ID (e.g. 192.168.30.1 is invalid setting.) When PC1 and PC2 communicate each other, the Route Client Networks should be enabled. And add the LAN information of Open VPN client side, in this case the #1 route will be 10.0.0.0 and 255.255.255.0 Note: The #1 route means the routing information for User 1. If all settings set up properly, the web UI will show the Apply OK and the Open VPN server status should be Running. When Open VPN Client mode is connected, the status will show the information which client is connected, IP address and connected time. In the status, the CN field will indicate which client is connected and the user-00-00@Open VPN value is from the User 1 certificate information. You can check it by clicking the information button, the web UI will display the window as the below figure. The CN information of user certificate is as shown in the subject field. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 187
(2) Open VPN client configuration For the Open VPN client side, the basic setting is as below figure. The Server Address is required field, which indicate the Open VPN server address which Open VPN client try to connect. And the PKCS12 Password only works when selected the pkcs #12 Certificate authentication option. This option requires the P12 file which generated from Generic Setup Open VPN server part. The password also be set on the Generic Setup Open VPN server part. If you use the Certificate authentication option, the Open VPN client will require the Root CA, User cert and User key files. Same as the Open VPN server configuration part, Open VPN client web UI also provides the status information. When all settings set up properly, the status will change from Idle to Running. When Open VPN tunnel is created, the status shows Connected and the information for IP address and the time. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 188 16.9.4 Open VPN 1:1 NAT For the net-to-net part, the Open VPN server LAN network and the Open VPN client LAN network are different. But some time, the LAN network will be same for both sides. When this situation occurred, the routing rules will be ambiguous that will result in the PC1 and the PC2 can't communicate each other. Thus, the router Open VPN provides the 1:1 NAT feature. The feature will convert the conflict subnet to different subnet. In this case, you can use 1:1 NAT feature to convert the Open VPN server and client side LAN network. For the Open VPN server side, we fill up the Network be 192.168.10.0 and Netmask 255.255.255.0. The setting will make the router convert the Open VPN server side LAN network from 192.168.1.0/24 to 192.168.10.0/24 when the VPN traffic is coming. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 189 For the Open VPN client side, same as server side but we fill up the Network as 192.168.11.0. The setting will make router convert the Open VPN client side LAN network from 192.168.1.0/24 to 192.168.11.0/24 when the VPN traffic is coming. 16.9.5 Open VPN with third-party server A VPN enables you to send and receive data across shared networks. For some users, they will use the VPN to access the limited network service from the different country. But normally, the third-party Open VPN server will provide the .ovpn configuration files for the Open VPN client. The .ovpn is hard to convert to the cellular router Open VPN client configuration. So, we provide the Custom mode to make the user can easy use the .ovpn to set up the cellular router Open VPN client. The Custom mode provide the import button to allow user import the third-party Open VPN server .ovpn configurations file. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 190 For example, use the Japan Open VPN server which provided by http://www.vpngate.net/en/ . Firstly, download the ovpn configuration files from vpngate.net. Additionally, use the Open VPN custom import button to import it. The result is as the below figure. If the .ovpn configuration file is correct, the web UI will show Apply OK. If the third-party Open VPN server is reachable, the VPN tunnel will be established. When the Open VPN VPN tunnel is established, the status shows Connected and the information for IP address and the time. In this moment, the PC1 can visit the http://www.vpngate.net and the web UI should indicate the PC1 in the Japan at now as the below figure. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 191 16.9.6 Install Open VPN Access Server on Docker Open VPN Access Server on Docker installation Open VPN Access Server is a full featured secure network tunneling VPN software solution that integrates Open VPN server capabilities, enterprise management capabilities, simplified Open VPN Connect UI, and Open VPN Client software packages that accommodate Windows, MAC, Linux, Android, and iOS environments. Open VPN Access Server supports a wide range of configurations, including secure and granular remote access to internal network and/ or private cloud network resources and applications with fine-grained access control. All Open VPN Access Server downloads come with 2 free client connections for testing purposes.
$15.00 License Fee Per Client Connection Per Year. Support & Updates included. 10 Client minimum purchase. The detail please look https://Open VPN.net/index.php/access-server/pricing.html Quick Installation Prerequisites Ubuntu 16.04 curl or wget should be installed Install via curl sh -c "$(curl -fsSL https://bit.ly/2GrzYyS)"
Install via wget sh -c "$(wget https://bit.ly/2GrzYyS -O -)"
Install Docker on Ubuntu 16.04 64bit Reference: https://docs.docker.com/engine/installation/linux/docker-ce/ubuntu/
Set up the repository sudo apt-get remove docker docker-engine docker.io sudo apt-get update sudo apt-get install \
apt-transport-https \
ca-certificates \
curl \
software-properties-common curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -
sudo add-apt-repository \
"deb [arch=amd64] https://download.docker.com/linux/ubuntu \
$(lsb_release -cs) \
stable"
INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 192 Install Docker CE sudo apt-get update sudo apt-get install docker-ce Install Open VPN Access Server by docker image Reference: https://hub.docker.com/r/linuxserver/Open VPN-as/
sudo mkdir -p /Open VPN-as sudo docker create --name=Open VPN-as \
-v /Open VPN-as:/config \
-e TZ="Asia/Taipei" \
-e INTERFACE=enp3s0 \
--net=host --privileged linuxserver/Open VPN-as sudo docker start Open VPN-as Check the Open VPN Access Server by visiting https://<server_ip_or_domain>:943 Setup Open VPN Access Server for Cellular Router The admin page is https://<server_ip_or_domain>:943/admin The default administrator username and password is admin/password. Login page:
After logged, please change the user authentication type to Local like the following figure. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 193 And switch to the User Permission page to create the user for Cellular Router.
(In this case, we use the test/test to be the example.) INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 194 Also check the Access from all other VPN clients to make the Cellular Router could be reachable. Setup Cellular Router Open VPN client INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 195 Use the user test/test to login https://<server_ip_or_domain>:943 Please make sure to change the type from Connect to Login. After logged, please download the .ovpn configuration by click the user-locked profile. Upload the .ovpn configuration to Cellular Router Open VPN custom mode, and input the username and password. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 196 When the VPN tunnel established, the Cellular Router can be managed/accessed by the other VPN clients. 16.9.7 Install Pritunl Open VPN server on Docker Pritunl Open VPN server on Docker installation Pritunl is a distributed enterprise vpn server built using the Open VPN protocol. Quick Installation Prerequisites Ubuntu 16.04 curl or wget should be installed Install via curl sh -c "$(curl -fsSL https://bit.ly/2IpJN1X)"
Install via wget sh -c "$(wget https://bit.ly/2IpJN1X -O -)"
Install Docker on Ubuntu 16.04 64bit Reference: https://docs.docker.com/engine/installation/linux/docker-ce/ubuntu/
Set up the repository sudo apt-get remove docker docker-engine docker.io INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 197 sudo apt-get update sudo apt-get install \
apt-transport-https \
ca-certificates \
curl \
software-properties-common curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -
sudo add-apt-repository \
"deb [arch=amd64] https://download.docker.com/linux/ubuntu \
$(lsb_release -cs) \
stable"
Install Docker CE sudo apt-get update sudo apt-get install docker-ce Install Docker compose sudo apt-get install docker-compose Install Pritunl Open VPN Server by docker compose
(1) Set up the basic environment by the following commands. mkdir ~/pritunl cd ~/pritunl touch docker-compose.yml
(2) Copy and paste the following content to docker-compose.yml. version: '2'
services:
pritunl:
image: jippi/pritunl volumes:
- pritunl:/var/lib/pritunl
- mongo:/var/lib/mongodb privileged: true network_mode: "host"
ports:
- "1194:1194/tcp"
- "1194:1194/udp"
- "80:80/tcp"
INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 198
- "443:443/tcp"
volumes:
mongo:
pritunl:
(3) Run the command docker-compose up -d to start the server
(4) Check the Pritunl Open VPN Server by visiting https://<server_ip_or_domain>
Setup Pritunl Open VPN Server for Cellular Router The server will running on https://<server_ip_or_domain>. The default username/password is pritunl/pritunl. Login Page:
After logged, the server will ask you to do the initial setup. You can change the username and the password setting in this page. Initial Setup:
INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 199 Open VPN user setup Please navigate to the User page to setup the Open VPN user account. Add the organization by click the Add Organization button.
(In this document, we use the MR to be the organization example.) When the organization be created, the Users page should be like the following figure. Then add the Open VPN user by click the Add User button. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 200 Note: In this Open VPN server, the PIN must contain only digits. Note: In this document, we use the test/123456 Open VPN user to be the example. Open VPN server setup Please navigate to the Server page to setup the Open VPN server. And click the Add Server button to create the Open VPN server. Note: Please click the Advanced tab and make sure the Inter-Client Communication be checked INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 201 When the Open VPN server created, the Servers page should like the following figure. And click Attach Organization button to setup the Open VPN server. Start the Open VPN server by click Start Server button. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 202 Cellular Router setup First, please navigate to the Users page and download the user configuration file and extract it. Note: In this document, you should get the MR_test_router.ovpn file. And visit the Cellular Router Open VPN custom page then import the .ovpn file. Fill up the username/password which be setup in Open VPN user setup part. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 203 When the Cellular Router Open VPN connected, the Pritunl Open VPN server also update the user status. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 204 VRRP Topology Basic VRRP Topology Base on this topology and VRRP Parameter settings, Router A and Router B will offer a virtual router service with virtual IP = 192.168.1.200 for the client. TR069 Server (GenieACS Installation) Server OS: Ubuntu 14.04 on Virtualbox Installation:
1) Login ubuntu 2) Change to root by 'su -' and enter your root password. 3) Install required package as below command:
>apt install gcc openssl-devel zlib-devel readline-devel sqlite-devel 4) Make a directory for application installation
>mkdir /opt 5) Install yaml cd /opt wget http://pyyaml.org/download/libyaml/yaml-0.1.7.tar.gz tar xvzf yaml-0.1.7.tar.gz cd yaml-0.1.7
./configure make && make install 6) Install ruby cd /opt wget http://cache.ruby-lang.org/pub/ruby/2.4/ruby-2.4.1.tar.gz tar xvzf uby-2.4.1.tar.gz cd ruby-2.4.1 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 205
./configure make && make install ruby -v ruby 2.4.1p111 (2017-03-22 revision 58053) [i686-linux]
cd /opt gem install rails --no-ri --no-rdoc gem install bundle --no-ri --no-rdoc 7) Install node.js cd /opt wget http://nodejs.org/dist/v8.2.1/node-v8.2.1.tar.gz tar zxvf node-v8.2.1.tar.gz cd node-v8.2.1
./configure make && make install node -v v8.2.1 8) Install redis cd /opt wget http://download.redis.io/releases/redis-4.0.1.tar.gz tar zxvf redis-4.0.1.tar.gz cd redis-4.0.1 make make test All tests passed without errors!
make install
#Start redis server redis-server 9) Install mongodb cd /opt wget https://fastdl.mongodb.org/linux/mongodb-linux-i686-3.3.3.tgz tar zxvf mongodb-linux-i686-3.3.3.tgz cd mongodb-linux-i686-3.3.3 mkdir -p /data/db 10) Install genieACS cd /opt git clone https://github.com/zaidka/genieacs.git cd genieacs npm install npm run configure npm run compile INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 206 Modify FS_HOSTNAME field in genieacs/config/config.json for device retrieve firmware file Original configuration:
"FS_HOSTNAME" : "acs.example.com"
New configuration example.:
"FS_HOSTNAME" : "192.168.0.199"
Note: It is the place where the device firmware file stored. Generally, it is the IP address on where your GenieACS server installed. Modify connect request username/password in genieacs/config/auth.js to stimulate connection Original configuration:
function connectionRequest(deviceId, url, username, password, callback) {
return callback(username || deviceId, password || "");
}
New configuration example:
function connectionRequest(deviceId, url, username, password, callback) {
return callback('tr069','tr069');
}
Note: The hard code username/password MUST same with device's connection request username/password, otherwise the ACS stimulate connection will fail. 11) Install genieACS-Gui git clone https://github.com/zaidka/genieacs-gui cd genieacs-gui bundle gem install json bundle update rm -f db/*.sqlite3 rake db:create RAILS_ENV=development rake db:migrate cd /opt cd genieacs-gui/config cp index_parameters-sample.yml index_parameters.yml cp parameter_renderers-sample.yml parameter_renderers.yml cp parameters_edit-sample.yml parameters_edit.yml cp roles-sample.yml roles.yml cp summary_parameters-sample.yml summary_parameters.yml cp users-sample.yml users.yml cp graphs-sample.json.erb graphs.json.erb GenieACS startup script:
INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 207
#!/bin/sh GENIE_PATH=/opt/genieacs/bin GENIE_GUI_PATH=/opt/genieacs-gui echo "start mongod."
pidof mongod if [ $? != 0 ]; then
/opt/mongodb-linux-i686-3.3.3/bin/mongod --dbpath /data/db --journal --storageEngine=mmapv1
--fork --syslog fi echo "start North Bound/RESTful Interface service."
$GENIE_PATH/genieacs-nbi &
echo "start ACS/CWMP service."
$GENIE_PATH/genieacs-cwmp &
echo "start HTTP/File streaming service."
$GENIE_PATH/genieacs-fs &
echo "start GenieACS/WebUI."
cd $GENIE_GUI_PATH rails server -b 0.0.0.0 GenieACS stop:
Ctrl-C Usage:
1) Device Configuration Fill in the ACS URL field as http://GenieACS server IP:7547 Fill in the Connection Request Username and Connection Request Password fields to same with the configuration in genieacs/config/auth.js. 2) GenieACS Operation Input http://GenieACS server IP:3000 on browser url bar and Enter. Press Home tab to refresh Online devices status. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 208 2.1) Login Username and Password are admin/admin. 3) Device information Press Devices tab Move mouse to line end of your device, the Show link show up. Press Show link, the device information shows up. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 209 4) Access parameters Scroll up/down on Device parameters list, the Refresh and Edit link show up at line end of parameter. For Readable parameter For Readable and Writable parameter 4.1) Get parameter value Press on the Refresh link, the Pending tasks window will pop up on right top to ask you to allow or Cancel this action. Press Commit to get this parameter value. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 210 Note: If the GenieACS can reach the device, the parameter value will be updated immediately. Otherwise, this request will be queued on Task queue list until next time device connect to GenieACS. Note: To update the whole tree, refresh the root parameter (InternetGatewayDevice.). Note: To update partial tree, refresh the parent node of the partial tree. 4.2) Set parameter value Press on the Edit link, editing window will pop up to ask you to change the value of this parameter. Input new value and press OK. The Pending tasks window will pop up to ask you to allow or Cancel this action. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 211 Press Commit to set this parameter value. Note: If the GenieACS can reach the device, the parameter value will be set immediately. Otherwise, this request will be queued on Task queue list until next time device connect to GenieACS. 5) Reboot device Press on Reboot link. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 212 The Pending tasks window will pop up to ask you to allow or Cancel this action. Press Commit to reboot device. Note: If the GenieACS can reach the device, the device will reboot immediately. Otherwise, this request will be queued on Task queue list until next time device connect to GenieACS. 6) Reset to default Similar to Reboot device except pressing on Factory reset link. 7) Firmware Upgrade 7.1) Upload Firmware Press Add Firmware link The link will redirect to Files tab INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 213 Press File: browse button, select the firmware, and then press Upload button. The firmware will be added to listing files as below. 7.2) Upgrade Move mouse to the Push file>> link, the upgrade firmware name will pop up as below picture. Move mouse to the upgrade firmware name and press it. The Pending tasks window will pop up to ask you to allow or Cancel this action. Press Commit, then firmware upgrade started. Note: If the GenieACS can reach the device, the firmware upgrade will be started immediately. Otherwise, this request will be queued on Task queue list until next time device connect to GenieACS. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 214 Test Case Example VLAN Topology This VLAN Topology for 3-port LANs shows different PCs how to configure VLAN settings with different LAN ports and has two results for this configuration.
(1) PC-A sends ICMP packet to PC-B IP (192.168.2.20) and captures traffic on PC-B. Thus, PC-
(2) PC-B sends ICMP packet to PC-A IP (192.168.1.20) and captures traffic on PC-A. Thus, PC-
B will receive Tag20 traffic. A will receive untag traffic. Note:
PC-A and PC-B are on Ubuntu OS. PC-A and PC-B should install vlan on Ubuntu. PC-A and PC-B should command this order sudo apt-get install vlan. The following interface shows VLAN settings for the cellular router. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 215 Note:
Different PCs have different interface of network cards, like PC-A network card is eth1.10 for example 1 and PC-B network card is eth1.20 for example 2. How to find out the terminal and the interface of network cards based on different PCs. From the following picture, you can click the finding your computer icon and input the terminal letters. Then, the interface will show the terminal icon and click to open it. Next, it shows the information when you click the terminal icon. From the following picture, it shows the interface of network card, enp7s0. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 216 There are two examples to explain how configure VLAN settings. Example 1: PC-A pings PC-B (Access to Trunk) For PC-A, add default gateway and LAN's MAC to ARP. Load VLAN and create VLAN interface, command as below:
sudo modprobe 8021q sudo vconfig rem eth1.20 sudo vconfig add eth1.10 Configure VLAN interface as below:
sudo ifconfig eth1.10 192.168.1.20 netmask 255.255.255.0 up sudo ifconfig eth1 0.0.0.0 sudo route add default gw 192.168.1.1 eth1.10 sudo arp -s 192.168.1.1 LAN's MAC eth1 is network interface on PC-A Therefore, PC-B will receive Tag20 traffic when PC-A sends ICMP packet to PC-B IP
(192.168.2.20) and captures traffic on PC-B. Example 2: PC-A ping PC-B (Trunk to Access) For PC-B, add default gateway and LAN's MAC to ARP Load VLAN and create VLAN interface, command as below:
sudo modprobe 8021q sudo vconfig rem eth1.10 sudo vconfig add eth1.20 Configure VLAN interface as below:
sudo ifconfig eth1.20 192.168.2.20 netmask 255.255.255.0 up sudo ifconfig eth1 0.0.0.0 sudo route add default gw 192.168.2.1 eth1.20 sudo arp -s 192.168.2.1 LAN's MAC eth1 is network interface on PC-B Therefore, PC-A will receive untag traffic when PC-B sends ICMP packet to PC-A IP
(192.168.1.20) and captures traffic on PC-A. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 217 MQTT Topology This MQTT Topology shows the cellular router to connect PC-A and PC-Bs LANs and have two results are as below. Expect Result:
(1) PC-A sends message to PC-B and PC-B should not receive any message.
(2) PC-B sends message to PC-A and PC-A should receive message. Note: PC-A and PC-B should install MQTT Client software. There is a process to explain the steps and result. Step1: Install mosquitto-clients on ubuntu or windows. If your OS system is Ubuntu, you should install as below steps:
INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 218 Step2: Configure MQTT for the Cellular Router You need to add two users. For example, we create the users for test and test2. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 219 You need to add two ACLs based on the users you created. For instance, we create two ACLs for test user and test2 user. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 220 Note:
Mosquitto_sub -h <M300 IP> -t <Topic> -u <username> -P <password>
For Receive message command format:
For Send message command format:
Mosquitto_pub -h <M300 IP> -t <Topic> -u <username> -P <password> -m <message>
INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 221 Step3: There are two test MQTT examples. Example 1: PC-A sends message to PC-B and PC-B should not receive any message. For PC-B, command "mosquitto_sub -h 192.168.1.1 -t abc -u test2 -P test2". For PC-A, command "mosquitto_pub -h 192.168.1.1 -t abc -u test -P test -m test" and confirm the message on PC-B. It wont receive any message on PC-B. 222 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 Example 2: PC-B sends message to PC-A and PC-A should receive message. For PC-A, command "mosquitto_sub -h 192.168.1.1 -t abc -u test -P test"
For PC-B, command "mosquitto_pub -h 192.168.1.1 -t abc -u test2 -P test2 -m test" and confirm the message on PC-A. It will receive test message on PC-A. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 223 Modbus Topology There is an example for Modbus Topology that you can configure Modbus gateway to observe the temperature, voltage and current from Modbus meter on PC-A. The settings of Modbus is shown as below. The mode is Enable. The default port is 502. Please confirm the interface of COM Port 3 that the mode is Disable. Next, you can connect a meter of DC voltage and current for supporting Modbus protocol with RS-485 serial to COM Port 3 from the cellular router and know the information about temperature, voltage and current. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 224 Note 1:
There is a reference for Modbus poll software to download and install on PC. http://www.tucows.com/preview/502459/Modbus-Poll Note 2:
You can purchase a meter of DC voltage and current supporting Modbus protocol with RS-
485 serial for test and connection to COM Port 3. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 225 The following picture shows how connect the ports and the lines between a cellular router and a meter. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 226 IP Routing Topology This IP Routing topology that the cellular router connects Router-1 and Router-2 will have two results.
(1) PC-A sends ICMP packet to Router-1 LAN and WAN IP and they should have response.
(2) PC-A sends ICMP packet to Router-2 LAN and WAN IP and they should have response. Note: Router-1 and Router-2 are pure routers and should be supported "NAT enable / disable". LAN configuration:
WAN configuration:
INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 227 There are two examples to introduce how to work for routing. Example 1: Add IP Routing on LAN interface Step 1: The cellular router for Static Route configuration The Mode is on at the settings section and add the routing. Step 2: Router-1 configuration is as below.
(1) Login to the Router-1 web site, and then "NAT disable".
(2) Configure LAN IP: 192.168.10.1
(3) Configure WAN IP: 192.168.1.50 Result: PC-A sends ICMP packet to Router-1 LAN and WAN IP and they should have response. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 228 Example 2: Add IP Routing on WAN interface Step1: The cellular router for Static Route configuration The Mode is on at the settings section and add the routing. Step2: Router-2 configuration is as below.
(1) Login to the Router-2 web site, and then "NAT disable".
(2) Configure LAN IP: 192.168.20.1
(3) Configure WAN IP: 192.168.2.2 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 229 Result: PC-A sends ICMP packet to Router-2 LAN and WAN IP and they should have response. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 230 Safety Notice
*
*
*
*
-------------------------------------------------------------------------------------------------------------------------------
* FCC 15.19:
THIS DEVICE COMPLIES WITH PART 15 OF THE FCCRULES. OPERATIONS IS SUBJECT TO THE FOLLOWING TWO CONDITIONS: ( 1 ) THIS DEVICE MAY NOT CAUSE HARMFUL INTERFERENCE AND ( 2 ) THIS DEVICE MUST ACCEPT ANY INTERFERENCE RECEIVED, INCLUDING INTERFEERENCE THAT MAY CAUSE UNDESIRED OPERATION (15.19)
* FCC 15.21:
The changes or modifications not expressly approved by the party responsible for compliance could void the users authority to operate the equipment.
* FCC 15.105:
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:
Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 231
* RF exposure warning This equipment must be installed and operated in accordance with provided instructions and the antenna(s) used for this transmitter must be installed to provide a separation distance of at least 20 cm from all persons and must not be co-located or operating in conjunction with any other antenna or transmitter. End-users and installers must be provide with antenna installation instructions and transmitter operating conditions for satisfying RF exposure compliance. Wi-Fi Specifications Standards
- IEEE 802.11b
- IEEE 802.11g
- IEEE 802.11n Modulations
- 802.11b: CCK/QPSK, BPSK
- 802.11g: OFDM/BPSK, QPSK, 16-QAM, 64-QAM
- 802.11n: OFDM/BPSK, QPSK, 16-QAM, 64-QAM Channels
- 11 Channels (US, Canada)
- 13 Channels (Europe, Japan) Data Rates
- 6 / 9 / 11 / 12 / 18 / 24 / 36 / 48 / 54 Mbps in 802.11g mode
- 1 / 2 / 5.5 / 11 Mbps in 802.11b mode Frequency Range
- 2.4GHz to 2.483GHz Wi-Fi Antenna Type
- One (1) detachable reverse SMA Antenna Antenna Gain in dBi
- 2.0 (Max) INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 232
1 | Internal Photos | Internal Photos | 1.02 MiB |
FCC ID: 2AUAE-M3010001 APPENDIX 3 PHOTOGRAPHS OF EUT International Standards Laboratory Corp. Report Number: ISL-19LR045FC FCC ID: 2AUAE-M3010001 EUT 1 EUT 2 International Standards Laboratory Corp. Report Number: ISL-19LR045FC FCC ID: 2AUAE-M3010001 EUT 4 EUT 5 International Standards Laboratory Corp. Report Number: ISL-19LR045FC EUT 6 EUT 7 FCC ID: 2AUAE-M3010001 International Standards Laboratory Corp. Report Number: ISL-19LR045FC FCC ID: 2AUAE-M3010001 EUT 8 EUT 9 International Standards Laboratory Corp. Report Number: ISL-19LR045FC FCC ID: 2AUAE-M3010001 EUT 10 Wifi Chip EUT 11 Wifi Chip International Standards Laboratory Corp. Report Number: ISL-19LR045FC EUT 12 Wifi Chip EUT 13 LTE Antenna FCC ID: 2AUAE-M3010001 International Standards Laboratory Corp. Report Number: ISL-19LR045FC EUT 14 WiFi Antenna EUT 15 GPS Antenna FCC ID: 2AUAE-M3010001 International Standards Laboratory Corp. Report Number: ISL-19LR045FC
1 | External Photos | External Photos | 533.53 KiB |
FCC ID: 2AUAE-M3010001 APPENDIX 2 PHOTOGRAPHS OF EUT International Standards Laboratory Corp. Report Number: ISL-19LR045FC EUT 1 FCC ID: 2AUAE-M3010001 EUT 2 International Standards Laboratory Corp. Report Number: ISL-19LR045FC EUT 3 FCC ID: 2AUAE-M3010001 EUT 4 International Standards Laboratory Corp. Report Number: ISL-19LR045FC EUT 5 FCC ID: 2AUAE-M3010001 EUT 6 International Standards Laboratory Corp. Report Number: ISL-19LR045FC EUT 7 FCC ID: 2AUAE-M3010001 International Standards Laboratory Corp. Report Number: ISL-19LR045FC
1 | ID Label and Location | ID Label/Location Info | 162.52 KiB |
FCC ID LABEL FORMAT AND LOCATION Applicant: Proscend Communications Inc. FCC ID:
2AUAE-M3010001
1 | Confidentiality Request Letter | Cover Letter(s) | 257.15 KiB |
woo pusosold@le|siJOw :|!ewy OSEE9S-C-988+ -XVA QOO06E9S-E-988+ TAL 70 ueme |
LLO0 NYDUISH Wed eoualog NYoUIsH AI PY y AYsnpul ge"On 4zZ :sseuppy OU| SUOI}EDIUNWLWOD PUusosold :eweN AuedwoD JeBeueyy Jolues / le] SIO] :aLjewen UONeWJOJU! UOSJed JoRJUCD BayUeIB 594 ery BiNfeUBIS
$JO}OCALUOD JNO 0} Sjjeusq paysniun spiAcid pue AUedwos au} 0} [NyWWeY aq jYUBiwW UOHeWLOJUI SI4} Jo Sinsojosip aijgnd aul oaijqnd ay} 0} paseaja. Ajewojysno jou ose pue uolneuuojul Auejaudoid pue sjeioes apes uleyuoo sjeveyew osoyl uondiuosep uoneledQ oe weJ6eip yoojq So}eWSYyIS e
(7 ajduexe Joy Ayyequepyuos Bupjses aie nod YyolUM JO} SJUSLUINDOP SU} S1ey JS!)
:Jeuepyuoe pjay eq sjuswNoop Buimoyjo} au}
yeu} ysenbes Aqajay am Sains SUOISSILULUOD BU} JO BGP'O PUB JGP'D SUO!}JES 0} JUeNSINd HIEHUSpyUOD 10 ysenboy LOOOLOEIN-AVNVG -dI 904 9POLZ? CIN eiquinjod peoy sili Puepjeo Ger UOISSILULUOD SUOI}EDIUNWWWOD |e1ape UOISIAIG UOHesOINY Juewdinby 9L/OL/6LOZ : ALVG CNAISO08d
1 | Power of Attorney Letter | Cover Letter(s) | 246.53 KiB |
WOd pusdsOJdMe|SWOWwW :|fewWy OSEEQS-E-988+ -XVA O006E9S--988+ - TAL O'0'"
ueMIEL Z200 NYOUISH Wed SoUs!OS NYoUISH Al PY J Aysnpul g'ON Az sseppy QU SUOTWEOIUNWIWOZ PUsdSsOJq :aWeN AUedWOD JeBeuey| soluas / 1e7] SLWJO/| :eplL/ewen uONeUWOJUI UOSJad JoRjUOD 9a}UeIB O04
| rr runny ainjeubls SN UUM SApIsel ||I}S OU] BOW ULON oyWeN Aq peyioeds SE UOIEDIJII9O JO} SUOIJIPUOD PUe SUS} SU} YPM BuIA|dwod 404 Ajiiqisuodsel |e yey SHpsjmouyoe
| 44eUaq Jno UO UOeEdIJIP80 Jo} UO!}EdI|dde oy} suBIs JUeHE pezoUjNe JNO asym SeduUe}sU! JO4 Yad IBID owen uemlel Sze AYO ueNA oe] JsIq UeL-BuNT py OH UISH O8| eUeT OZ) ON sseuppy diog Aloyeoge] spiepuejs jeuoleusoju| :oureu Auedwog UOREDIINED adA| 10) uoneoidde BulpueBas Axoid e aq 0} UosJed Bulmo}|o) ay} peysnsjue eAey Aqeley |
IS Jeeq LOOOLOeWAaVNVe -dl O04 9L/OL/6L0 - ALVd CNAIS0Gd
frequency | equipment class | purpose | ||
---|---|---|---|---|
1 | 2019-11-19 | 2412 ~ 2462 | DTS - Digital Transmission System | Original Equipment |
app s | Applicant Information | |||||
---|---|---|---|---|---|---|
1 | Effective |
2019-11-19
|
||||
1 | Applicant's complete, legal business name |
Proscend Communications Inc.
|
||||
1 | FCC Registration Number (FRN) |
0028724177
|
||||
1 | Physical Address |
2F, No.36, Industry E. Rd. IV
|
||||
1 |
Hsinchu, 30077
|
|||||
1 |
Taiwan
|
|||||
app s | TCB Information | |||||
1 | TCB Application Email Address |
s******@nemko.com
|
||||
1 | TCB Scope |
A4: UNII devices & low power transmitters using spread spectrum techniques
|
||||
app s | FCC ID | |||||
1 | Grantee Code |
2AUAE
|
||||
1 | Equipment Product Code |
M3010001
|
||||
app s | Person at the applicant's address to receive grant or for contact | |||||
1 | Name |
M**** L****
|
||||
1 | Title |
Senior Manager
|
||||
1 | Telephone Number |
03-56********
|
||||
1 | Fax Number |
03-56********
|
||||
1 |
m******@proscend.com
|
|||||
app s | Technical Contact | |||||
n/a | ||||||
app s | Non Technical Contact | |||||
n/a | ||||||
app s | Confidentiality (long or short term) | |||||
1 | Does this application include a request for confidentiality for any portion(s) of the data contained in this application pursuant to 47 CFR § 0.459 of the Commission Rules?: | Yes | ||||
1 | Long-Term Confidentiality Does this application include a request for confidentiality for any portion(s) of the data contained in this application pursuant to 47 CFR § 0.459 of the Commission Rules?: | No | ||||
if no date is supplied, the release date will be set to 45 calendar days past the date of grant. | ||||||
app s | Cognitive Radio & Software Defined Radio, Class, etc | |||||
1 | Is this application for software defined/cognitive radio authorization? | No | ||||
1 | Equipment Class | DTS - Digital Transmission System | ||||
1 | Description of product as it is marketed: (NOTE: This text will appear below the equipment class on the grant) | Industrial 4G LTE Cellular Router | ||||
1 | Related OET KnowledgeDataBase Inquiry: Is there a KDB inquiry associated with this application? | No | ||||
1 | Modular Equipment Type | Does not apply | ||||
1 | Purpose / Application is for | Original Equipment | ||||
1 | Composite Equipment: Is the equipment in this application a composite device subject to an additional equipment authorization? | No | ||||
1 | Related Equipment: Is the equipment in this application part of a system that operates with, or is marketed with, another device that requires an equipment authorization? | No | ||||
1 | Grant Comments | Output power listed is conducted. This device has 20MHz and 40 MHz bandwidth modes. The RF exposure compliance is addressed for 1.1310 and 2.1091 MPE limits - this filing complies with KDB 447498 and is approved for mobile/fixed operation. End Users must be provided with transmitter operation conditions for satisfying RF exposure compliance. This device is approved with a certified licensed transmitter (FCC ID: XMR201605EC25A). | ||||
1 | Is there an equipment authorization waiver associated with this application? | No | ||||
1 | If there is an equipment authorization waiver associated with this application, has the associated waiver been approved and all information uploaded? | No | ||||
app s | Test Firm Name and Contact Information | |||||
1 | Firm Name |
International Standards Laboratory LT lab.
|
||||
1 | Name |
B****** C********
|
||||
1 | Telephone Number |
886-3******** Extension:
|
||||
1 | Fax Number |
886-3********
|
||||
1 |
b******@isl.com.tw
|
|||||
Equipment Specifications | |||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Line | Rule Parts | Grant Notes | Lower Frequency | Upper Frequency | Power Output | Tolerance | Emission Designator | Microprocessor Number | |||||||||||||||||||||||||||||||||
1 | 1 | 15C | 2412.00000000 | 2462.00000000 | 0.1909000 |
some individual PII (Personally Identifiable Information) available on the public forms may be redacted, original source may include additional details
This product uses the FCC Data API but is not endorsed or certified by the FCC