all | frequencies |
|
|
|
|
|
exhibits | applications |
---|---|---|---|---|---|---|---|---|
manuals | photos | label |
app s | submitted / available | |||||||
---|---|---|---|---|---|---|---|---|
1 2 3 |
|
User-Manual | Users Manual | 4.47 MiB | ||||
1 2 3 |
|
User Manual | Users Manual | 4.69 MiB | ||||
1 2 3 |
|
Internal Photos | Internal Photos | 2.61 MiB | ||||
1 2 3 |
|
External Photos | External Photos | 2.41 MiB | ||||
1 2 3 |
|
Label and Label Location | ID Label/Location Info | 155.69 KiB | ||||
1 2 3 |
|
Agent Authorization | Cover Letter(s) | 13.61 KiB | ||||
1 2 3 | RF Exposure Info | |||||||
1 2 3 | Test Report | |||||||
1 2 3 |
|
FCC Short & Long Term Confidentiality Request | Cover Letter(s) | 13.75 KiB | ||||
1 2 3 |
|
Model Difference Declaration | Cover Letter(s) | 2.91 MiB | ||||
1 2 3 | Test Setup Photos | |||||||
1 2 3 | Cover Letter(s) | |||||||
1 2 3 | Test Report | |||||||
1 2 3 | Test Setup Photos | |||||||
1 2 3 | Cover Letter(s) | |||||||
1 2 3 | Test Report | |||||||
1 2 3 | Test Report | |||||||
1 2 3 | Test Report | |||||||
1 2 3 | Test Report | |||||||
1 2 3 | ID Label/Location Info | |||||||
1 2 3 | Test Setup Photos |
1 2 3 | User-Manual | Users Manual | 4.47 MiB |
Industrial 4G LTE Cellular Router
Version 1.1.8 Table of Contents Introduction ....................................................................................................................... 6 Features ...................................................................................................................... 6 Specifications .............................................................................................................. 7 Mechanical Dimensions (M330-W) .............................................................................. 8 Ordering Information ................................................................................................... 8 Hardware Installation ........................................................................................................ 8 LED Indicators ............................................................................................................. 8 Ethernet Port ............................................................................................................... 9 Grounding the Router .................................................................................................. 9 Pin Assignments ........................................................................................................ 10 Connecting the Power Supply ................................................................................... 10 Connecting I/O Ports ................................................................................................. 10 UART (RS-232) ......................................................................................................... 12 Install the SIM Card ................................................................................................... 12 Reset Button ............................................................................................................. 13 External Antenna ....................................................................................................... 13 Configuration via Web Browser ..................................................................................... 14 Access the Web Configurator .................................................................................... 14 Navigate the Web Configurator ................................................................................. 15 Status ............................................................................................................................... 16 Status > GPS ............................................................................................................ 20 Configuration > System .................................................................................................. 20 System > Time and Date ........................................................................................... 20 System > Logging ..................................................................................................... 24 Logging > Logging ............................................................................................. 24 Logging > Log.................................................................................................... 25 System > Alarm ......................................................................................................... 26 Alarm > Contacts > Create and name the Group ............................................... 27 Alarm > Contacts > Add User ............................................................................ 29 Alarm > Duty Schedule ...................................................................................... 30 System > Ethernet Ports ........................................................................................... 30 System > Client List .................................................................................................. 32 Configuration > WAN ...................................................................................................... 32 WAN > Priority ........................................................................................................... 32 WAN > Ethernet ........................................................................................................ 33 6.2.1 WAN Ethernet Configuration .............................................................................. 33 6.2.2 Ethernet Ping Health ......................................................................................... 36 WAN > IPv6 DNS ...................................................................................................... 38 5.2.1 5.2.2 5.3.1 5.3.2 5.3.3 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 II 7.1.1 7.1.2 Configuration > LTE ........................................................................................................ 39 LTE > LTE Config ...................................................................................................... 40 LTE Configuration .............................................................................................. 40 LTE Ping Health ................................................................................................. 41 LTE > GPS Config ..................................................................................................... 41 LTE > Dual APN ........................................................................................................ 43 LTE > Usage Display ................................................................................................. 46 LTE > SMS ................................................................................................................ 51 LTE > Serving Cell .................................................................................................... 53 LTE > DNS ................................................................................................................ 54 Configuration > WiFi (M330-W) ...................................................................................... 55 WiFi > WiFi Config .................................................................................................... 55 WiFi > MAC Filter ...................................................................................................... 56 WiFi > Client List ....................................................................................................... 57 Configuration > LAN ....................................................................................................... 58 LAN > IPv4 ................................................................................................................ 58 LAN > IPv6 ................................................................................................................ 59 LAN > VLAN .............................................................................................................. 59 LAN > Subnet ............................................................................................................ 61 IP Routing .................................................................................................................... 62 IP Routing > Static Route .......................................................................................... 62 IP Routing > RIP ....................................................................................................... 65 IP Routing > OSPF .................................................................................................... 67 IP Routing > BGP ...................................................................................................... 70 Configuration > VPN ....................................................................................................... 73 VPN> Open VPN ...................................................................................................... 73 11.1.1 Open VPN Common Setting .............................................................................. 74 11.1.2 Open VPN Client Setting ................................................................................... 75 11.1.3 Open VPN Server Setting .................................................................................. 76 11.1.4 Set up Open VPN Custom ................................................................................. 78 VPN > IPsec .............................................................................................................. 80 IPsec > Connections .......................................................................................... 80 IPsec > Authentication IDs ................................................................................. 84 IPsec > X.509 Certificates ................................................................................. 85 IPsec > CA Certificates ...................................................................................... 86 IPsec > Net-to-Net Configuration ....................................................................... 88 VPN > GRE ............................................................................................................. 103 VPN > PPTP Server ................................................................................................ 104 VPN > L2TP ............................................................................................................ 106 Configuration > Firewall ........................................................................................... 110 Firewall > Basic Rules ............................................................................................. 110 11.2.1 11.2.2 11.2.3 11.2.4 11.2.5 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 III Firewall > Port Forwarding ...................................................................................... 111 Firewall > DMZ ........................................................................................................ 112 Firewall > IP Filter ................................................................................................... 113 Firewall > MAC Filter ............................................................................................... 117 Firewall > URL Filter ................................................................................................ 118 Firewall > NAT ......................................................................................................... 119 Firewall > IPS .......................................................................................................... 120 Configuration > Service ............................................................................................ 121 Service > SNMP ...................................................................................................... 121 13.1.1 Community ...................................................................................................... 121 13.1.2 SNMP v3 User Configuration ........................................................................... 122 13.1.3 SNMP trap configuration .................................................................................. 123 Service > TR069 ..................................................................................................... 124 Service > Dynamic DNS .......................................................................................... 125 Service > VRRP ...................................................................................................... 127 Service > MQTT ...................................................................................................... 127 Service > UPnP ....................................................................................................... 130 Service > SMTP ...................................................................................................... 130 Service > IP Alias .................................................................................................... 131 Configuration > Management ................................................................................... 132 Management > Identification ................................................................................... 132 Management > Administration ................................................................................. 133 Management > Contacts / On Duty ......................................................................... 134 14.3.1 Contacts .......................................................................................................... 134 14.3.2 Duty Schedule ................................................................................................. 134 Management > SSH ................................................................................................ 135 Management > Firmware ........................................................................................ 136 Management > Configuration .................................................................................. 136 Management > Load Factory .................................................................................. 136 Management > Restart ............................................................................................ 137 Configuration > Diagnosis ........................................................................................ 137 Diagnosis > Ping ..................................................................................................... 137 Diagnosis > Traceroute ........................................................................................... 138 Configuration Applications ...................................................................................... 139 WAN Priority ............................................................................................................ 139 LAN > IPv4/IPv6 Dual Stack .................................................................................... 141 MQTT Broker .......................................................................................................... 143 Alarm Configuration................................................................................................. 144 Open VPN Configuration ......................................................................................... 146 16.5.1 Open VPN Server Mode .................................................................................. 146 16.5.2 Open VPN Client Mode ................................................................................... 147 16.5.3 Open VPN Net-to-Net ...................................................................................... 148 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 IV 16.5.4 Open VPN 1:1 NAT ......................................................................................... 151 16.5.5 Open VPN with third-party server .................................................................... 152 Install Open VPN Access Server on Docker .................................................... 154 16.5.6 16.5.7 Install Pritunl Open VPN server on Docker ...................................................... 159 VRRP Topology ....................................................................................................... 167 TR069 Server (GenieACS Installation) .................................................................... 167 Test Case Example .................................................................................................... 177 VLAN Topology ....................................................................................................... 177 MQTT Topology ....................................................................................................... 180 IP Routing Topology ................................................................................................ 186 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 V Introduction M330 and M330-W, compact, lightweight and cost-effective Industrial 4G LTE Cellular Routers, are built in 2-port fast Ethernet connection as well as support 2G/3G/4G mobile networks for wired and wireless communication in harsh environments. Equipped with RS232 serial port and digital input/output interfaces, the M330 and M330-W are simple to configure and collect real-time data transmission quickly for Industrial IoT and machine-to-machine applications. The M330-W is also compliant with IEEE 802.11b/g/n Wi-Fi connectivity. Featuring VPN Tunnels, Firewall, TR069, and SNMP Trap, M330 and M330-W Industrial 4G LTE Cellular Routers enhance highly secure authentication, encryption and management to protect your data efficiently between public and private networking. Supporting -30~+70C wide temperature operation and flexible input voltage range of 8-48VDC for diverse environments and various applications. M330 and M330-W Industrial 4G LTE Cellular Routers are suitable and reliable choices for fast deployment and easy configuration to simplify your complicated solutions and fit your services for industrial networking and smart city. Features
Highly reliable and secure for mission-critical cellular communications
Compact and lightweight design with 2-port Ethernet interfaces
Support multi-band connectivity with FDD LTE/ TDD LTE/ WCDMA/ GSM/ LTE Cat 4
Provide IEEE 802.11b/g/n Wi-Fi standards (M330-W Model)
Built-in micro SIM connector, RS232 serial port, and DI/DO interfaces
Integrated detachable antenna against radio interference
LED indicators for connection and data transmission status
Industrial rated from -30 to +70C for use in harsh environments
IPv6/IPv4 dual stack and all applications are IPv6 ready
Support serial communication protocols for rich connectivity
Enhance security and encryption for authentication and transmission 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 6 Specifications Cellular Interface
Standards:
(Please see ordering information for optional band) 4G: FDD LTE, TDD LTE 3G: WCDMA 2G: GSM/EDGE
LTE Data Rate: Cat 4, 150Mbps (DL), 50Mbps (UL) Wi-Fi Interface (M330-W Model)
Compliant with IEEE 802.11 b/g/n Wi-Fi standards
2.4 GHz radio band for wireless
2T2R 300 Mbps wireless operation rate
Wireless security with WPA2-PSK(AES)
Multiple SSIDs
Wireless MAC Filtering
Wireless client isolation Hardware Interface
High Performance 550 MHz SoC with 128MByte Flash
1 x Micro SIM Connector (push-push type)
1 x LAN 10/100 Mbps Ethernet port
1 x WAN 10/100 Mbps Ethernet port
WPS / RESET Button
1 x RS232 (TXD/RXD/GND)
1 x DI (Non-Isolated), 1 x DO (Non-Isolated)
2 x SMA connectors for detachable LTE Antenna
2 x RP-SMA connectors for detachable Wi-Fi Antenna
(M330-W Model)
1 x SMA connector for detachable GPS antenna Physical Characteristics
EnclosureMetal Case
Dimensions (W x H x D)91mm x 28mm x 74mm
Weight250 g (0.5512 lb) InstallationDIN Rail (Default) / Wall Mount (Optional)
LED Display
1 x Power LED
1 x Ethernet LED for each port (LAN/WAN)
1 x RSSI LTE LED
1 x Function LED (User define by Web) IPv4, IPv6, IPv4/IPv6 dual stack, DHCP server and client, PPPoE, Static IP, SNTP, GPS sync time, DNS Proxy, VRRP, OSPF, Message Queue Telemetry Transport
(MQTT Broker), BGP, Flow (Modbus master MQTT client) Power Supply
Power Consumption 7 Watts(Max)
Power Input 8 ~ 48VDC Software
Network Protocols:
Routing/Firewall:
VPN:
OpenVPN, IPSec (3DES, AES128, AES196, AES256, MD5, SHA-1, SHA256), GRE, PPTP, L2TP
Wireless Connectivity:
NAT, Virtual Server, DMZ, MAC Filter, URL Filter, IP Filter, VLAN, Static Routing and RIP-1/2, IPS, Policy Route WAN WiFi Client DI, DO, SMS, VPN/WAN Disconnect, SNMP Trap, E-mail, TR069 DDNS, QoS, UPnP, SMS Action, GPS Track Drawing,
Others:
GPS TCP Push
Alarm:
Management Software
Web GUI for remote and local management, CLI
Syslog monitor
SNMP, TR069
FOTA (Firmware over the Air)
Remote management via SSH v2, HTTPS
Local management via Telnet, SSH v2, HTTP/HTTPS Environment
Operating Temperature -30 ~ +70C
Storage Temperature -40 ~ +85C
Ambient Relative Humidity 10 ~ 95% (non-condensing)
Humidity 0 ~ 95% (non-condensing) Standards and Certifications
EMCCE, FCC
EMIEN 301489 , FCC Part 15B Class B
EMSEN 301489
VibrationIEC60068-2-6
Radio : EN 301511, EN 301908-1, EN 301908-2, EN 301908-13, EN 300328, EN 303413, EN 62311 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 7 Mechanical Dimensions (M330-W) Ordering Information Model Name Description M330 Compact Industrial 4G LTE Cellular Router
( 1 x WAN, 1 x LAN, 1 x RS232 , 1 x DI, 1 x DO, 1 x micro SIM Slot, GPSx1, -30 ~ +70C ) M330-W Compact Industrial Wi-Fi 4G LTE Cellular Router
( 1 x WAN, 1 x LAN, 1 x RS232 , 1 x DI, 1 x DO, 1 x micro SIM Slot, GPSx1, Wi-Fi,
-30 ~ +70C ) Hardware Installation This chapter introduces how to install and connect the hardware. LED Indicators LED ON FN RSSI VPN Connected High Signal Slow Blinking Internet Connected / Reset Medium Signal / Reset Fast Blinking System Booting /
Reset to Default Low Signal / Reset to Default PWR Power ON N/A N/A OFF N/A Error Power OFF Heart Beat Wi-Fi Connected WPS Processing N/A 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 8 Ethernet Port
(1) 10/100 Mbps Ethernet LAN/WAN
The LAN and WAN interface are standard RJ45 connectors. Description Function 10/100 Mbps, TX+ Pin 10/100 Mbps, TX- Pin 10/100 Mbps, RX+ Pin N/A N/A 10/100 Mbps, RX- Pin N/A N/A Pin 1 2 3 4 5 6 7 8 TX+
TX-
RX+
N/A N/A RX-
N/A N/A
(2) LED Indicator of Ethernet Port Each Ethernet port has one LED indicators. The Green LED indicates Link/ACT. LED Green (Link/ACT) Status Off Blink On Description Connection is down. Data is being transmitted. Connection is up. Grounding the Router To prevent the noise and surge effect, please connect the router to the site ground wire by the ground screw before turning on the router.
(M330-W) 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 9 Pin Assignments Power Input (V+, V-) / DI / DO / UART RS-232 (TXD, RXD, GND) Connecting the Power Supply The router requires a DC power supply in the range of 8~48V DC. Pin V -
V+
Power (8~48VDC) Negative Positive Connecting I/O Ports
(1) Digital Input (DI) The unit has two terminals on the terminal block for the digital inputs. Pin DI DI_GND Digital Input
DI: Low (+0 to +5V) / High (+8 to +40V) Description 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 10
(2) Digital Output (DO) The unit has 2 terminals on the terminal block for the digital outputs. Pin DO DO_GND Digital Output
DO: Open Collect (maximum 30V/300mA) Description 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 11 UART (RS-232) The port is a standard RS-232 signal level interface. Pin TXD RXD GND Signal Transmit Data Receive Data Signal Ground
Install the SIM Card Direction Output Input
-
Insert and Remove SIM Card
(1) Before inserting or removing the SIM card, ensure that the power has been turned off and the power connector has been removed from Cellular Router. Insert the SIM card with right direction. Push the SIM card in to the slot, and lightly press it to lock it in the slot.
(2)
(3) To remove the SIM card, lightly press the SIM card, and it will pop out. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 12 Reset Button Function WPS Processing Reset Reset to default setting External Antenna Operation Press the button less than 5 seconds. Press the button for 5-10 seconds. Press the button for more than 10 seconds. Each unit has three antenna connectors, MAIN, GPS, AUX (SMA). For M330-W, there will be five antenna connectors and extra two antennas for Wi-Fi (RP-SMA). Connect the antenna to MAIN when you have only one antenna. Please tighten the connecting nut properly to ensure good connection.
(M330-W) 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 13 Configuration via Web Browser Access the Web Configurator The web configuration is an HTML-based management interface for quick and easy to set up of the cellular router. Monitoring of the status, configuration and administration of the router can be done via the Web interface. After properly connecting the hardware of cellular router as previously explained. Launch your web browser and enter http://192.168.1.1 as URL. The default IP address and sub net-mask of the cellular router are 192.168.1.1 and 255.255.255.0. Because the cellular router acts as DHCP server in your network, the cellular router will automatically assign IP address for PC or NB in the network. Title Bar Panel > Selecting Language You can choose the languages, including English and Taiwan. Logging in the Router In this section, please fill in the default User Name root and the default Password 2wsx#EDC and then click Login. For the system security, suggest changing them after configuration. After clicking, the interface shows Login ok. Note: After changing the User Name and Password, strongly recommend you to save them becauseanother time when you log in, the User Name and Password have to be used the new one you changed. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 14 Navigate the Web Configurator The main screen is divided into three parts as below. A -Title Bar, B - Navigation Panel and C - Main Window.
(1) A : Title Bar The title bar provides some useful instructions that appear the situation of router. Item Title Bar Description RSSI Show if the SIM card is inserted in the slot. If yes, RSSI (Received Signal Strength Indicator) shows the current signal strength in a wireless network and the name of telecommunication operator. Uptime Show the time starting turn on the router until current using. WAN Priority Show the three mode of WAN status, which is first to use. Location Show the position of router from Google Maps. Note: This function is for GPS spec. Google Maps Display Google Map according to location. Language Choose your language from the drop-down list on the upper right corner of the title bar. Login/Logout Click to log in or log out of the web configurator.
?
Online Manual 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 15
(2) B : Navigation Panel-Main Menu and Sub Menu The menu items are divided into main and sub menu to configure the settings and get the status of connectivity on the navigation panel.
(3) C : Main Window This section shows the information or setting fields from main menu and sub menu. Status When you enter the web browser in the beginning and have not log in, the first item of main menu shows your status that you are a guest. This status only can view status page without any permission to log in. The interface of main window displays the status of router to show about information, including Cellular Attribute, the current connectivity of WAN Ethernet and LAN Ethernet. If the router has GPS function, the GPS interface is shown. Note: After logging in the system, you can set up the status of user and divide into three levels for setting users authority, including Super User, Administrator, and Read Only. For Guest, this status is without any authority. All users log in or log out and they need to have Web UI log records. Status Super User User name system account (root/admin) Administrator only Super User can modify only Super User can modify Read Only Guest Password configurable configurable configurable Permission
Add/Delete/Modify all users accounts except Super User.
Read/Write Configuration Read/Write Configuration only Read Configuration N/A N/A N/A 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 16 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 17 Item Status > GPS Description Attribute Latitude Longitude Horizontal Altitude Date (UTC) Satellite Item Attribute Modem Status Operator Modem Access IMSI Phone Number Band EARFCN PLMN Roaming Uplink Speed Kbps Downlink Speed Kbps Tx/Rx KBytes Tx/Rx Droppes Packets LTE Net Mode Item Attribute IPv4 Address IPv4 Mask Default Gateway Connected IPv4 Conn Time Uplink Speed Kbps Downlink Speed Kbps Tx/Rx KBytes Tx/Rx Droppes Packets Show the latitude information of location. Show the longitude information of location. Show the horizontal information of location. Show the altitude information of location. Show the date information of location. Show the satellite information of location. Status > WAN LTE Description The status of LTE. Display the name of operator. The router to access protocol type. The IMSI number of the SIM card. The phone number of the SIM card. The current connected Band. Absolute radio-frequency channel number. Public LAN Mobile Network ID. Roaming status. Uplink Speed in Kbps. Downlink Speed in Kbps. Accumulated TX/RX in KBytes. TX/RX Dropped Packets. LTE Network Mode for both APNs. Status > LTE APN1 / LTE APN2 Description Ethernet WAN obtain IPv4 Address. Ethernet WAN obtain IPv4 Mask. Ethernet WAN IPv4 Default Gateway. Yes: Connected; No: Disconnected. Ethernet WAN IPv4 Connected Time. Uplink Speed in Kbps. Downlink Speed in Kbps. Accumulated TX/RX in KBytes. TX/RX Dropped Packets. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 18 Item Attribute IPv4 DNS Server #1 IPv4 DNS Server #2 IPv4 DNS Server #3 IPv6 DNS Server #1 IPv6 DNS Server #2 IPv6 DNS Server #3 Item Attribute IPv4 Address IPv4 Mask Default Gateway IPv6 Conn Time Item Attribute IPv4 Address IPv4 Mask IPv6 Address IPv6 Conn Time Uplink Speed Kbps Downlink Speed Kbps Tx/Rx KBytes TX/RX Dropped Packets Item Attribute Open VPN IPSec GRE PPTP Server L2TP Status > WAN DNS Description Show the address of IPv4 DNS Server #1. Show the address of IPv4 DNS Server #2. Show the address of IPv4 DNS Server #3. Show the address of IPv6 DNS Server #1. Show the address of IPv6 DNS Server #2. Show the address of IPv6 DNS Server #3. Status > WAN Ethernet Description Ethernet WAN obtain IPv4 Address. Ethernet WAN obtain IPv4 Mask. Ethernet WAN IPv4 Default Gateway. Ethernet WAN IPv4 Connected Time. Status > LAN Ethernet Description LAN is assigned IPv4 Address. LAN is assigned IPv4 Mask. LAN is assigned IPv6 Address. IPv6 Connected Time. Uplink Speed in Kbps. Downlink Speed in Kbps. Accumulated TX/RX in KBytes. TX/RX Dropped Packets. Status > GPS Description Open VPN connected number IPSec connected number GRE connected number PPTP server connected number L2TP connected number 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 19 Status > GPS For those GPS enabled router, you can see Location on the right-top banner of web interface when connecting your GPS function. After clicking Google Maps banner, a map will automatically display the current information of map according to location of router. Configuration > System This system section provides you to configure the following items, including Time and Date, Logging, Alarm, Ethernet Ports, and Client List. System > Time and Date This section allows you to set up the time and date of router and NTP server. There are two modes at Time and Date Setup, including Get from Time Server and Manual. The default mode is Get from Time Server. If the router has GPS function, you can turn on "GPS Time" for sync time from GPS server. For Time Zone Setup, the Daylight Savings Time allows the device to forward/backward the amount of time from Ahead of standard time setting automatically when the time is at the Daylight Savings duration that you have set up before. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 20 I. Get from Time Server
Set up the time servers of IPv4 and IPv6.
Select your local time zone.
Click Apply to keep your configuration settings. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 21 II. Manual
Set up the information of time and date, including year, month, date, and hour, minute, and second.
Set up your local time zone.
Click Apply to submit your configuration changes. III. Time Zone Setup
Set up Daylight Savings as On.
Set up Ahead of standard time.
Set up the information of Start Date/Time, including Month, Week, Day, Hour and Minute.
Set up the information of End Date/Time, including Month, Week, Day, Hour and Minute.
Click Apply to submit your configuration changes. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 22 System > Time Zone Setup > Daylight Savings Description Item Daylight Saving Ahead of standard time Start Date / Start Time End Date / End Time 7 8 9 10 11 12
- Jan.
- Feb.
- Mar.
- Apr.
- May
- Jun. forward/backward minutes when enter/leave Daylight Turn on/off the Daylight Savings feature. Select from Off or On. The default is Off. The Savings duration. Default is 60 minus. Time to enter Daylight Savings duration. The Month range is 1~12. 1
- Jul.
- Aug. 2
- Sep. 3
- Oct. 4 5
- Nov. 6
- Dec. The Week range is 1~5.
The Day range is 0~6. 0 - Sunday (The start day of a week) 1- Monday 2 - Tuesday 3 - Wednesday 4 - Thursday 5 - Friday 6 - Saturday The Hour range is 0~23. The Min range is 0~59. Time to leave Daylight Savings duration. Same with Start Date/Start Time. 1 - first week in month. 2 - second week in month 3 - third week in month 4 - fourth week in month 5- fifth week in month 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 23 IV. Time Server The Time server feature allows user to set a time server for LAN side client to get the time through NTP/SNTP protocol. Item Server mode Server port System > Logging System > Time Server Description Turn on/off the time server. The UDP port listened by time server. This section allows cellular router to record the data and display the status of data. 5.2.1 Logging > Logging
(1) Logging section provides you to control all logging records.
(2) Users need to select Apply to confirm your settings. Item Mode Remote Log Log Server Address System > Logging > Logging Description Turn on/off the logging configuration. Select from Disable or Enable. The default is Enable. The logging messages send to remote log or not. Select from Disable or Enable. The default is Disable. When you choose Enable on Remote Log, you should input IP address to save and receive all logging data.
(Note: This server should have installed Log software.) 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 24 5.2.2 Logging > Log This section displays all data status.
(1) You can choose Filter function to quickly search for your data.
(2) When you click Clear, all of the data that displays on the interface will be totally cleared without any backup.
(3) When you click Refresh, the system will update and display the latest data from your cellular router.
(4) When you click Download Logs, the system will download the latest data from your cellular router. Item Filter Date Group Module Message System > Logging > Log Description Filter the required data quickly. Show the date of log for each logging data. Show the group of software functions. Show the module of group of software functions. Show the messages for each logging data. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 25 System > Alarm This section allows you to configure the alarm. Note:
(1) If you select SMS in Alarm input/output, you need to add the trust phone number into Contracts/ On Duty.
(2) If you select SNMP trap in Alarm output, you need to set up SNMP trap configuration from Service SNMP.
(3) If you select E-Mail in Alarm output, you need to set up SMTP configuration from Service SMTP.
(4) If you select TR069 in Alarm output, you need to set up TR069 configuration from Service TR069. Item Mode Alarm Input System > Alarm Description Turn on/off the Alarm configuration. Select from Disable or Enable. The default is Enable. Select from SMS, DI 1, DI 2, VPN disconnect and WAN disconnect as input to trigger alarm.
SMS: It means on duty team members on Contacts / On Duty can send SMS to the phone number of using SIM card to trigger alarm.
DI: IO to trigger alarm.
VPN disconnect: All tunnels get disconnected then trigger alarm.
WAN disconnect: WAN connections get disconnected then trigger alarm.
LAN disconnect: LAN connection get disconnected then trigger alarm.
Reboot: Reboot then trigger alarm. Alarm Output Select from SMS, DO, SNMP trap and E-mail as alarm output. DI 1 / 2 Trigger Select from High or Low. The default is High Trigger. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 26
High: SW is On to trigger.
Low: SW is OFF to trigge.
Always: Pull DO high.
Pulse: High and Low continuously.
Pulse Time Length: Pulse time length (mini seconds). Write your messages and limit 150 English characters for the messages to deliver. DO behavior SMS/E-mail 5.3.1 Alarm > Contacts > Create and name the Group
Click trusted and on duty members for naming and the interface will show the groups name in the Group setting as below. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 27
You can click or button to edit or delete the group. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 28 5.3.2 Alarm > Contacts > Add User
Select your naming group and click + Add User button to add your users information, including Name, Phone and E-mail.
After filling in your information for each row, chose your naming group and click to submit your settings.
After submitting your setting, the interface returns to Group window setting. Now you can see your naming group and the users information that you have added. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 29
You can click button to edit the users information or click the check box and to delete the user. 5.3.3 Alarm > Duty Schedule
Select Duty Schedule to edit the schedule of the on duty group. System > Ethernet Ports This section allows you to configure the Ethernet. For Flow Control, it allows you to configure the Ethernet and solve unstable throughput under heavy loading. Sending 64 Bytes with bandwidth 100M bps traffic to LAN and WAN at the same time, the throughput may drop to zero at either side. When the system is very busy or buffer is exhausted, the flow control packet will be sent out to indicate that the link party has stopped to send the packet to system. The flow control packet will be sent out again once the system goes back to normal to indicate the link party that it can send packet again. Note: The LAN port of Ethernet has different layout based on which router model you use. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 30 Item System > Ethernet Ports Description WAN Ethernet Show the connectivity status of LAN and WAN. Ethernet Ports Status Ethernet Ports Configurations Select from Auto, 100M Full, 100M Half, 10M Full, 10M Half and Disable. MTU is the Maximum Transmission Unit that can be sent over the WAN Ethernet interface. It allows users to adjust the MTU size to fit into their existing network environment. Allow users to control the traffic ingress from Ethernet LAN or WAN. Allow users to setup the WAN/LAN2 Port function as Auto, LAN, or WAN. WAN/LAN2 Port Function Flow Control 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 31 System > Client List This section allows you to understand how many devices have been connected and their status from the router. There are two types, one is DHCP Client and the other is Online. The default is both types to show all status when the router is on DHCP Client and Online. Item List Type System > Client List Description
DHCP Client: List all clients information when it is via DHCP.
Online: List the information when it is online. Configuration > WAN This section allows you to configure WAN, including Priority, Ethernet and IPv6 DNS. WAN > Priority You can set up the priority of WAN. The default is Auto. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 32 Item Priority LTE Net Mode
(The priority is LTE Only) WAN > Priority Description
Auto (ETH -> LTE): WAN Ethernet is first priority and the second priority is LTE.
LTE Only: The priority is only LTE.
ETH Only: The priority is only WAN Ethernet.
Bridge + Router: APN1 act as bridge for internet access. APN2 act as router for management from WAN site which like TR069, ssh...
Bridge Only: APN1 act as bridge for internet access.
Router Only: APN1 act as router for internet access.
Router + Router: APN1 act as router for internet access. APN2 act as router for management from WAN site which like TR069, ssh WAN > Ethernet 6.2.1 WAN Ethernet Configuration This section provides three options, including DHCP Client, PPPoE Client and Static IPv4. The default is DHCP Client. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 33 WAN > Ethernet Description There are three options to obtain the IP of WAN Ethernet.
DHCP Client: DHCP server-assigned IP address, netmask, gateway, and DNS.
PPPoE Client: Your ISP will provide you with a username and password. This option is typically used for DSL services.
Static IPv4: User-defined IP address, netmask, and gateway address. Item WAN Ethernet When selecting DHCP Client, you can set up DNS Server Configuration. For IPv4 DNS Server, it provides three options to set up and each option has provided with From ISP, User Defined and None to configure. Item WAN > Ethernet > DHCP Client Description IPv4 DNS Server #1 IPv4 DNS Server #2 IPv4 DNS Server #3
Each setting DNS Server has three options, including From ISP, User Defined and None.
When you select From ISP, the IPv4 DNS server IP is obtained from ISP.
When you select User Defined, the IPv4 DNS server IP is input by user. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 34 When you select PPPoE Client, the interface shows the item of configuration to fill in your User Name and Password. When you select Static IPv4, the interface shows the information of configuration, including IP Address, IP Mask and Gateway Address. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 35 Item WAN > Ethernet > Static IPv4 Description Fill in the IP Address. Fill in the IP Mask. Fill in Gateway Address. Static IPv4 Configuration IP Address IP Mask Gateway Address DNS Server Configuration IPv4 DNS Server #1 IPv4 DNS Server #2 IPv4 DNS Server #3 The IPv4 DNS server IP is input by user. 6.2.2 Ethernet Ping Health If you configure WAN Priority to Auto mode, the system would choose the cost effective connection first such as Ethernet. However, in case the Ethernet connection exist but it is unable to access internet; you can enable Ethernet Ping Health and the system would switch to LTE connection and switch back whenever Ethernet is able to access internet again. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 36 Item WAN > Ethernet > Ethernet Ping Health Description Select from Disable or Enable. The default is Enable. The interval is from 1 to 60 seconds. Input the address of IPv4 Host 1. Input the address of IPv4 Host 2. Input the address of IPv6 Host 1. Input the address of IPv6 Host 2. Show the usage descriptions. Ethernet Ping Health Interval IPv4 Host 1 IPv4 Host 2 IPv6 Host 1 IPv6 Host 2 Hint In addition, you can check which WAN is actually using from Status page. The interface will be shown check mark ( symbol) on the connection title. For IPv6 address, the status will be displayed on LAN Etherent Interface when IPv6 is using as WAN connection. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 37 WAN > IPv6 DNS This section allows you to set up IPv6 DNS Server Configuration. For IPv6 DNS Server, it provides three options to set up and each option has provided with From ISP, User Defined and None to configure. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 38 Item DNS Server Configuration WAN > IPv6 DNS Description
Each setting DNS Server has three options, including From ISP, IPv6 DNS Server #1 IPv6 DNS Server #2 IPv6 DNS Server #3
When you select From ISP, the IPv6 DNS server IP is obtained User Defined and None. from ISP.
When you select User Defined, the IPv6 DNS server IP is input by user. Configuration > LTE This section allows you to configure LTE Config, GPS Config, Dual APN, APN Usage, SMS, Serving Cell, and DNS. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 39 LTE > LTE Config 7.1.1 LTE Configuration You can set up the LTE Configuration and LTE Ping Health. Item LTE > LTE Config Description LTE Config MTU
Auto: Automatically connect the possible band.
4G Only: Connect to 4G network only.
3G Only: Connect to 3G network only.
2G Only: Connect to 2G network only. MTU is the Maximum Transmission Unit that can be sent over the LTE interface. It allows user to adjust the MTU size to fit into their existing network environment. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 40 7.1.2 LTE Ping Health For LTE connection, you can enable LTE Ping Health to keep alive to avoid base station kicking out the device in idle time. Item LTE Ping Health Interval IPv4 Host 1 IPv4 Host 2 IPv6 Host 1 IPv6 Host 2 Hint LTE > LTE Config > LTE Ping Health Description Select from Disable or Enable. Input the interval seconds of ping. Input the address of IPv4 Host 1. Input the address of IPv4 Host 2. Input the address of IPv6 Host 1. Input the address of IPv6 Host 2. Show the usage descriptions. LTE > GPS Config This section allows you to set up GPS Configuration and connect RS232 from the used router to have more detailed information for your specific purpose. You can download software from internet and activate the GPS Configuration to display what information you need from your software. Item Report to NMEA Type LTE > GPS Config Description Select from RS232 and LOG. Select from GSV, GGA, RMC and GSA. For example, you can use some software depending on your requirements and activate the GPS Configuration to display what information you need from your selecting software. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 41 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 42 LTE > Dual APN This section allows you to understand the status of connectivity for Dual APN.
SIM PIN: If you have configured SIM PIN code into SIM card, please type SIM PIN code in Dual SIM configuration to make unlock successfully.
SIM PUK: If you have typed wrong SIM PIN code and retried more than 3 times, the SIM Card will become the blocked mode. In this case, you have to type PUK and new SIM code to unlock SIM Card. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 43
Change SIM PINIf you want to change SIM PIN code, you can click Change button and type old SIM PIN code and new SIM PIN code. Please aware not to exceed the retry number (PIN remaining number and PUN remaining number). Item Connect Policy Connect Action Disable Roaming SIM Configurations Status SIM PIN Enable SIM PIN Confirmed SIM PIN SIM PUK Confirmed SIM PUK Change SIM PIN Old PIN New PIN LTE > Dual SIM Description
Connect: After manually disconnect, it will show Connect button. Click to get connection or reboot the device to make it automatically connect.
Disconnect: When getting connection, the Disconnect button appear. After manually click Disconnect, the system would not automatically get connection until next reboot.
NO: Make the connection even the device is in roaming state.
YES: No connection when the device in roaming state. Display the status of SIM Card.
Enable to display SIM PIN setting.
Disable to hide SIM PIN setting. A personal identification number (PIN) for ordinary use to protect your SIM card. Double confirm SIM PIN. If user input the wrong SIM PIN more than 3 times, the user needs another password personal unblocking code (PUK) for PIN unlocking. Please check your operator for forgotten PUK number. Double confirm SIM PUK. When you change the SIN PIN, please aware not to exceed the retry number (PIN remaining number and PUN remaining number). Please input the current SIM PIN. Please input the newly update SIM PIN. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 44 PIN remaining number Display the allowed remaining PIN retry number. PUK remaining number Display the allowed remaining PUK retry number. APN1 / APN2 The Access Point Name (APN) is the name of the setting that set up a connection to the gateway between your carrier's cellular network and the public Internet. Leaving it empty will search internally database automatically by SIM card for connection. However, please notice APN1 and APN2 must be manually configured different setting while concurrently use. The username can be input by user or the system will search from internal database if the APN setting is empty. The password can be input by user or the system will search from internal database if the APN setting is empty. Double confirm password. If Auth mode is not None, most servers require username and password above. APN Username Password Confirm Password Auth
(None/PAP/CHAP) 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 45 LTE > Usage Display This section shows the status of current SIM card, operator, IMSI and the charts for Real Time, Hourly, Daily, Weekly, and Monthly.
(1) Real-Time Usage:
It displays accumulated real-time Download/Upload/Total MB for 10 seconds period. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 46
(2) Hourly Usage:
It displays Download/Upload/Total MB per hour in one day for current using SIM card and the view window size is 24 hours. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 47
(3) Daily Usage:
It displays Download/Upload/Total MB per day in one month for current using SIM card and the view window size is 31 days. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 48
(4) Weekly Usage:
It displays Download/Upload/Total MB per day in one week for current using SIM card and the view window size is 7 days. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 49
(5) Monthly Usage:
It displays Download/Upload/Total MB per month in one year for current using SIM card and the view window size is 12 months. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 50 LTE > SMS This section provides two settings, one is SMS Action and the other is View SMS.
(1) When enabling SMS Action, it allows trust phone number which in Contacts/On Duty list by sending key words SMS to trigger device setting/action/query status. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 51
(2) View SMS allows you to review the information of SMS that you have received, including the state, phone and date and time. You can click view button to review all messages, button to clear all messages, and button to reload all messages. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 52 LTE > Serving Cell This section displays all parameters, including the following items:
Item RSRP RSRQ SINR RSCP ECIO Cell Identity eNB ID Cell ID PCI ID EARFCN UL Bandwidth DL Bandwidth RSSI LTE > Serving Cell Description Reference Signal Received Power. Reference Signal Received Quality. Loarithmic value of SINR. The Received Signal Code Power Level of the cell that was scanned. Carrier to noise ratio in dB = measured Ec/lo value in dB. eNB ID (20 Bits) + Cell ID (8 Bits). eNB ID. Cell ID. Physical Cell ID. The E-UTRA-ARFCN of the cell that was scanned. Up Link Bandwidth. Down Link Bandwidth. Received Signal Strength Indication. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 53 LTE > DNS This section allows you to setup LTE specific DNS setting. Item LTE > DNS Description IPv4 DNS Server #1 IPv4 DNS Server #2 IPv4 DNS Server #3 1. Each setting DNS Server has three options, including From ISP, User Defined and None. 2. When you select From ISP, the IPv4 DNS server IP is obtained from ISP. 3. When you select User Defined, the IPv4 DNS server IP is input by user. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 54 Configuration > WiFi (M330-W) This section allows you to set up the WiFi configuration. WiFi > WiFi Config This section allows you to set up the Wi-Fi configuration. WiFi > Config Description Item AP Enable Turn on/off the Wi-Fi Network. Select from Disable or Enable. The default is Enable. AP isolation is a technique for preventing mobile devices connected to an AP from communicating directly with each other. AP Isolate HT Mode (HT Capability) 20M: Only 20MHz Operation is Supported,40M: Both 20MHz and Country Code 40MHz Operation is Supported. Select Country Area for supported Channels 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 55 Item Name(SSID) Hidden SSID Channel Security Option Passphrase Key Update WiFi > Config Description SSID is Wi-Fi identification. The maximum length is 32 SSID hiding is the process of hiding the network name from being publicly broadcast. Auto (Automatically select the best channel) or manually select channel number. None / WPA2-PSK(AES). The legal length is 8 ~ 63. The string should belong to [0-9 A-F a-f]. 0 means no update or 30~86400 seconds update period. WiFi > MAC Filter This section allows you to set up MAC Filter. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 56 After clicking edit button, you can edit your MAC address. WiFi > MAC Filter Description Select from Disable. The default is Disable. Fill in your MAC address. Item Mode MAC Address WiFi > Client List This section allows you to see all the Connected WiFi Client List. Item MAC Address IP Address Connected Time Description MAC Address Client IP Address Connected Time in Seconds. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 57 Configuration > LAN This section allows you to configure LAN IPv4, LAN IPv6, VLAN and Subnet. LAN > IPv4 Set up your IP Address and IP Mask. Also, fill in the information of DHCP Server Configuration. Item LAN IPv4 DHCP Server Configuration IP Address Pool LAN > IPv4 Description
IP Address:192.168.1.1
IP Mask:255.255.255.0 Both of them are default, you can change them according to your local IP Address and IP Mask.
Enable to make router can lease IP address to DHCP clients which connect to LAN.
Define the beginning and the end of the pool of IP addresses which will lease to DHCP clients. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 58 LAN > IPv6 Select your type of IPv6, which shows Delegate Prefix from WAN or Static, and then set up DHCP Server Configuration, including Address Assign, DNS Assign and DNS Server. Item Type LAN > IPv6 Description
Delegate Prefix from WAN Select this option to automatically obtain an IPv6 network prefix from the service provider or an uplink router.
Static Select this option to configure a fixed IPv6 address for the cellular routers LAN IPv6 address. Static Address DHCP Server Configuration You need to input the static address when you select the static type. Select how you obtain an IPv6 address.
Stateless: The cellular router uses IPv6 stateless auto configuration. RADVD (Router Advertisement Daemon) is enabled to have the cellular router send IPv6 prefix information in router advertisements periodically and in response to router solicitations.
Stateful: The cellular router uses IPv6 stateful auto configuration. The LAN IPv6 clients can obtain IPv6 addresses through DHCPv6. Address Assign LAN > VLAN This section allows you to set up VLAN that provides a network segmentation system to distinguish the LAN clients and separate them into different LAN subnet for enhancing security and controlling traffic. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 59 When VLAN Mode is set to Tag Base, the VLAN setting window will appear as shown below. The VLAN Isolation function allows administrator to separate the different Subnet (VLAN). When it is on, the different Subnet (VLAN) user cannot communication each other. For each row, the settings can be enabled or disabled by checkbox and select the Subnet and the VLAN ID (VID). The Subnet sets up the IP address and IP mask for the router, so this router can communicate with the third party by this IP address and IP mask on this VLAN.
(Note: The NET1 cant remove it and fixes in the first row.) Furthermore, the Subnet provides DHCP Server function to allow the third party for the same VLAN to get IP address and IP mask. Therefore, you do not need to configure manually.
(Note: The subnet information window will show from LAN > Subnet.) LAN > VLAN (1-port LANs) Description The VLAN mode is Off or Tag Base (802.1p VLAN). The VLAN Isolation is Off or On. The assigned row of setting is enabled. The subnet provides IP address and IP mask for the router. The VLAN ID range is from 1 to 4094. The Interface name and LAN feature. Item Mode VLAN Isolation Enable Subnet VID Name 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 60 LAN > Subnet This section allows you to get the information of IP Address and IP Mask and edit for the VLAN Subnets from DHCP Server Configuration. This Subnet setting is the same as LAN > IPv4 setting and follows with Tag Base Mode of VLAN to enable the function. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 61 IP Routing This section allows you to configure the Static Route, RIP, OSPF, and BGP. IP Routing > Static Route This section allows you to configure the Static Route. A static route is a pre-determined path that network information must follow to reach a specific host or network. Item Mode Settings Mode IP Routing > Static Route > Settings Description The setting is for full network. Select from Off or On. The setting is for the specific network. Select from Off or On. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 62 Set up each name for your running host or network. Name Destination Fill in the destination of a specific subnet or IP from network. Gateway Interface Note:
Fill in the gateway address of your router. Select the interface from LAN or Ethernet.
The destination field is required to fill in. The format of destination is IPv4 or IPv6.
The address of gateway or the type of interface can be chosen one or both to fill in the field.
There are two fail situations when you fill in the incorrect type for the field.
(1) Input the invalid format of destination. The interface is shown in Apply fail to notice.
(2) Input the IP address of destination/gateway from IPv4 and IPv6 at the same time. The interface is shown in Apply fail to notice. You should select either IPv4 or IPv6 as the address of destination/gateway. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 63 The status tab shows the information from the settings of static route. Item Mode Status Destination Gateway Interface Protocol IP Routing > Static Route > Status Description The setting is open for full network. Select from Off or On. Show the status of destination from the setting section. Show the status of gateway from the setting section. Show the status of interface from the setting section. Show the status of protocol from the setting section. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 64 IP Routing > RIP This section allows you to configure RIP and select the mode from Disable or Enable. The default is Disable. Note:
RIP (Routing Information Protocol, RFC 2453) is an Interior Gateway Protocol (IGP) and is commonly used in internal networks. It allows a router to exchange its routing information automatically with other routers, and allows it to dynamically adjust its routing tables and adapt to changes in the network. Item IP Routing > RIP > General Description General Mode Redistribute local routes Redistribute connected routes Redistribute OSPF routes Select from Off or On to open or close redistribute OSPF routes. Redistribute BGP routes Select from Off or On to open or close redistribute BGP routes. Select from Off or On to open or close RIP function. Select from Off or On to open or close redistribute local routes. Select from Off or On to open or close redistribute connected routes. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 65 IP Routing > RIP > Interfaces Description Select from Off or On to use or not to use the RIP function in the interface. Select from eth1 (WAN Ethernet) or LAN. Select from none or md5 to approve authentication. Note:
Please offer Key and Key ID when you select md5 to use HMAC-MD5. The key used for authentication (maxlength=16). The ID of the key used for authentication (1-255). Select from Off or On to send out or not to send out RIP packets on this interface. Item Interfaces Mode Interface Authentication Key Key ID Passive 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 66 IP Routing > OSPF This section allows you to set up OSPF with three sub configurations, including General, Interfaces and Networks configuration.
(1) General Configuration Item IP Routing > OSPF > General Description Select from Off or On to open or close OSPF function. Select from Off or On to open or close redistribute local routes. Mode Redistribute local routes Redistribute connected routes Select from Off or On to open or close redistribute connected routes. Select from Off or On to open or close redistribute RIP routes. Select from Off or On to open or close redistribute BGP routes. Redistribute BGP routes Redistribute RIP routes 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 67
(2) Interfaces Configuration There are 2 parts for OSPF Interfaces configuration.
OSPF Interfaces Summary Click Edit button to edit the existed interface. Click Delete button to delete the existed interface.
Add/Edit OSPF Interface Note: This interface can be added at maximum is 2. Item Mode Interface Authentication Key Key ID Cost Passive IP Routing > OSPF > Interfaces Description Select from Off or On to use or not to use the OSPF function in the interface. Select from eth1 (WAN Ethernet) or LAN. Select from none or md5 to approve authentication. Note:
Please offer Key and Key ID when you select md5 to use HMAC-MD5. The key used for authentication (maxlength=16). The ID of the key used for authentication (1-255). The cost for sending packets via this interface (0: OSPF defaults). Select from Off or On to send out or not to send out OSPF packets on this interface. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 68
(3) Networks Configuration There are 2 parts for OSPF Networks configuration.
OSPF Networks Summary You can edit and delete the existed OSPF networks.
OSPF Networks Add/Edit This sub configuration is used to configure all the networks, the maximum is 2. Item Mode Prefix Prefix Length Area IP Routing > OSPF > Networks Description Select from Off or On to enable the network setting. Set Prefix of the network Set Length of the prefix Routing area to which this interface belongs (0-65535, 0 means backbone) 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 69 IP Routing > BGP This section allows you to set up BGP with three sub configurations, including General, Neighbors and Networks configuration.
(1) General Configuration IP Routing > BGP > General Description
Off: BGP function is off.
On: BGP function is on. The number of the autonomous system (1 ~ 4294967295)
Off: Not redistribute local routes from the device's own routing table.
On: Redistribute local routes from the device's own routing table.
Off: Not redistribute connected routes to networks which are directly connected to the device.
On: Redistribute connected routes to networks which are directly connected to the device. Item General Mode AS Number Redistribute local routes Redistribute connected routes 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 70
(2) Neighbor Configuration The neighbors sub configuration is used to configure all the BGP routers to peer with and the maximum neighbors is 16. Item IP Routing > BGP > Neighbors Description Mode IP Address AS Number Multihop Update Source Mode Update Source Address The source address to this neighbor. Select from Off or On to enable the neighbor setting. Set IP address of the peer router. Autonomous system number of the peer router. Allow multiple hops between this router and the peer router. Whether to specify the source address to this neighbor. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 71
(3) Networks Configuration The networks sub configuration allows to add IP network prefixes that shall be distributed via BGP in addition to the networks that are redistributed from other sources as defined on the general sub configuration and the maximum neighbors is 16. Item Mode Prefix Prefix Length IP Routing > BGP > Networks Description Select from Off or On to enable the network Set Prefix of the network Set Length of the prefix 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 72 Configuration > VPN This section allows you to configure Open VPN, IPsec, GRE, PPTP Server, and L2TP. VPN> Open VPN This section allows you to set up the connection of Open VPN. The default mode is Disable. From Log tab, the interface will show the status of connection to make you follow the situation whenever it is successful or fail connection. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 73 11.1.1 Open VPN Common Setting
(1) Click button to edit Open VPN Connection.
(2) From Setting tab, you can set up the connection of Open VPN. VPN > Open VPN > Setting Description Turn on/off Open VPN to select Disable or Enable.
Server: Tick to enable Open VPN server tunnel.
Client: Tick to enable Open VPN client tunnel. The default is Client.
Custom: This option allows user to use the .ovpn configuration file to quickly set up VPN tunnel with third-party server or use the Open VPN advanced options to be compatible with other servers.
Roadwarrior (default)
Bridging: Bridging the VPN tunnel and LAN/VLAN Display the status of Open VPN. Select from Disable or Enable for data security. The default is Disable. The Open VPN format of data transmission. Select from Disable or Enable. The default is Disable. Select from TUN or TAP. The default is TUN. Item Mode VPN Mode VPN Type Status TLS Mode Cipher IPv6 Mode Device 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 74 Protocol Select from UDP or TCP Client which depends on the application. The default is UDP. Enter the listening port of remote side Open VPN server. Port VPN Compression Select Disable or Enable to compress the data stream. The default is Disable.
Select from two different kinds of authentication ways: Certificate Authentication or pkcs#12 Certificate.
The pkcs#12 option is only available on the VPN client mode. 11.1.2 Open VPN Client Setting Select option Client from VPN Mode, and this section allows you configure the Open VPN client route and authentication files. The files could be imported by clicking Open VPN server. button and the file should be downloaded from Item VPN > Open VPN > Client VPN Mode Description Client Server Address Route Client Networks Select from Off or On. This setting needs to match the server side. When enabled, the cellular router will auto apply the properly Fill in WAN IP of Open VPN server. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 75 Local Network routing rules. Network Netmask NAT 1:1 NAT Client-Security Root CA Cert Key P12 The local network exported by OpenVPN. When keeping this option blank, the OpenVPN will export the LAN network automatically. The local netmask exported by OpenVPN. When keeping this option blank, the OpenVPN will export the LAN netmask automatically.
Tick to enable NAT Traversal for Open VPN. This item must be enabled when the router under NAT environment.
Select from Off or On.
When two routers LAN Subnet are same and create Open VPN tunnels, this function should be turned on. The Certificate Authority file of Open VPN server could be downloaded from Open VPN server. The certification file is for Open VPN client, which could be downloaded from Open VPN server. The private key file is for Open VPN client, which could be downloaded from Open VPN server. The PKCS#12 file is for Open VPN client, which could be downloaded from Open VPN server. 11.1.3 Open VPN Server Setting Select option Server from VPN Mode, and this section allows you to configure the server status of VPN Mode. Note: When selecting the On option of Route Client Networks, the Open VPN server will route the client traffic or not. You should fill in the client IP and netmask when this option is enabled. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 76 77 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 Item Server VPN Network VPN Netmask Roadwarrior:
Route Client Networks Local Network Network Netmask NAT 1:1 NAT Server- Server Security Root CA Cert, Key and DH Server- User Security User 1 - User 8 VPN > Open VPN > Server VPN Mode Description The network ID for Open VPN virtual network. The netmask for Open VPN virtual network. Select from Off or On. The Open VPN server will route the client traffic or not. User should fill in the client IP and netmask when this option is enabled. the OpenVPN will export The local network exported by OpenVPN. When keeping this option blank, the LAN network automatically. The local netmask exported by OpenVPN. When keeping this option blank, the OpenVPN will export the LAN netmask automatically.
Tick to enable NAT Traversal for Open VPN. This item must be enabled when router under NAT environment.
Select from Off or On. The default is Off.
When two routers LAN Subnet are same and create Open VPN tunnels, this function is turned on. Create Root CA key. Create Cert, Key and DH key. According to your requirement, you can create different kinds of user security key from User 1 to User 8. 11.1.4 Set up Open VPN Custom For Custom of VPN Mode, this section helps you use the .ovpn configuration file to quickly set up VPN tunnel with third-party server or use the Open VPN advance options to be compatible with other servers. Note:
When clicking the button, you can import third-party Open VPN configuration that find out from Internet and save the document into your server or PC.
After importing the file, the interface will show button. Click for displaying the information and for downloading the file.
For third-party Open VPN configuration, suggest from http://www.vpngate.net/en/
4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 78 Item Mode VPN Mode Custom Config Username Password Status VPN > Open VPN > Custom VPN Mode Description Select from Disable or Enable. The default is Disable. Select from custom mode. Import Open VPN configuration. Fill in the username if the imported file has already set up the username. Fill in the password if the imported file has already set up the password. Display the connection status of Open VPN, such as IP address and the connected time. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 79 VPN > IPsec This section allows you to set up IPsec Tunnel. The setting has four tags, Connections, Authentication IDs, X.509 Certificates, and CA Certificates. For the IPsec connection which be authenticated by pre-shared key, it only need to setup the Connections and Authentication IDs. For the IPsec connection which be authenticated by RSA or TLS, the settings must cover the four parts. VPN > IPsec > General setting Description Select from Disable or Enable. The default is Disable. Item Mode 11.2.1 IPsec > Connections This section provides the information of the IPsec connections. Each connection will show the State, IKE information and Tunnel information.
In the default setting, the list of connections is empty. You can create the new connection by click + Add Connection button.
For the edit, you can click the phase 2 setting respectively. and buttons to edit IPsec phase 1 and
For the advance settings, like Dead Peer Detection, a.k.a DPD, you can click the button to edit it. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 80
(1) IPsec Phase 1 Setting Item Mode Name Protocol Aggressive mode Auth Type Encryption Hash DH Group Lifetime VPN > IPsec > Connections > Phrase 1 setting Description Select from Disable or Enable. The default is Disable. Short name or description. Select from IKEv1 or IKEv2. The default is IKEv1. Select from Disable or Enable. The default is Disable. When this option be enabled, the connection will be running on IKEv1 Aggressive mode.
(Note: This option only work on IKEv1.) Select from PSK (default), RSA, EAP-TLS.
(Note: The EAP-TLS is for IKEv2 only.) The encryption algorithm. Select from AES128 (default), AES192, AES256 or 3DES. The integrity algorithm. Select from MD5, SHA1 (default) or SHA256. The Diffie Hellman Group. Select from 1(768 bit), 2(1024 bit), 5(1536 bit) (default), 14(2048 bit), 15(3072 bit), 16(4096 bit), 17(6144 bit) or 18(8192 bit). The length of the keying channel of a connection. Select from 30 minutes, 1 hour, 2 hours, 3 hours, 6 hours, 12 hours or 24 hours. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 81 Local Host Local ID Remote Host Remote ID The IP address of the router's public network interface. If this value is blank, the connection will automatically detect the correct IP address. The identification for authentication on local peer. Select from the created authentication IDs or empty. The IP address of the peer gateway's public network interface. If this value is blank, the connection will act the server role to wait the incoming request. The identification for authentication on remote peer. Select from the created authentication IDs or empty.
(2) IPsec Phase 2 Setting Item Protocol Encryption Hash DH Group Lifetime Local Subnet VPN > IPsec > Connections > Phrase 2 setting Description Only support ESP. The encryption algorithm. Select from AES128 (default), AES192, AES256 or 3DES. The integrity algorithm. Select from MD5, SHA1 (default) or SHA256. The Diffie Hellman Group. Select from 1(768 bit), 2(1024 bit), 5(1536 bit) (default), 14(2048 bit), 15(3072 bit), 16(4096 bit), 17(6144 bit) or 18(8192 bit). The length of a particular instance of a connection. Select from 30 minutes, 1 hour, 2 hours, 3 hours, 6 hours, 12 hours or 24 hours. The private subnet behind the router. The available formats are A.B.C.D, A.B.C.D/M, A.B::C.D or A.B::C.D/M If this value is blank, the connection will set it as the Local Host of Phase 1 setting. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 82 Note: This option only work on Policy-based IPsec VPN type. The private subnet behind the peer gateway. The available formats are A.B.C.D, A.B.C.D/M, A.B::C.D or A.B::C.D/M If this value is blank, the connection will set it as the Remote Host of Phase 1 setting. Note: This option only work on Policy-based IPsec VPN type. Restrict the VPN traffic to the particular protocol only. Select from the Any, TCP, UDP or L2TP. Remote Subnet Service
(3) IPsec Advance Setting Item DPD interval DPD retry VPN > IPsec > Connections > Advance Setting Description The period time interval to detect dead peers. The default is 30 seconds. The max number of retry of dead peer detection. The default is 5 times. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 83 11.2.2 IPsec > Authentication IDs This section provides the authentication ID set to authenticate the IPsec connections. In the default setting, the list of authentication ID is empty. You can create the new authentication ID by click + Add Authentication ID button. Note: Please apply the changes before editing the connection settings. Item VPN > IPsec > Authentication IDs Description ID Type The identification for authentication. It only work on PSK type. Select from PSK or RSA. The default is PSK.
PSK: Use the pre-shared key to authenticate the connection.
RSA: Use the certificate to authenticate the connection. Pre-shared Key /
The X.509 certificate for authentication. X.509 Certificate The certificate could be generated or imported by X.509 Certificates section. According to the above options, there are some combinations to authenticate the IPsec connection.
#
1 ID Type PSK VPN > IPsec > Authentication IDs Pre-shared Key / X.509 Certificate password Comment 2 remote.ipsec PSK 2wsx#EDC 3 4 local.ipsec PSK test RSA created X.509 The default password for the PSK connections. The password only for the PSK connection with remote.IPsec ID. Normally, this case will be used to authenticate peer gateway. The identification for the connection. Normally, this case will be used to announce the ID of the router. The ID field will be omitted, and use the common name(CN) of X.509 as the ID field. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 84 11.2.3 IPsec > X.509 Certificates This section provides the certificates setting which could be used by IPsec authentication ID. Each certificate will show the State and Subject information and provide the controlling buttons to let user import, download or edit the certificate/key files. Note: Please apply the changes before editing the Authentication IDs settings. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 85 11.2.4 IPsec > CA Certificates This section provides the CA certificates setting which could check whether the X.509 certificate is valid or not. There is one self-signed CA (generated by the router), and it supports the user import the self-
signed CAs to the router. The self-signed CA will help the router to verify the self-signed X.509 certificate which is imported on X.509 Certificates section. Each CA certificate will show the State and Subject information and provide the controlling buttons to let user could download or edit the certificate / key files. Certificate Generation There are two kinds of certificate generated by router, one is self-signed CA, the other is X.509. To generate the self-signed CA certificate:
1. Navigate to CA Certificates tab. edit button to navigate the Certificate Setting page. 2. Click the 3. Fill up the information of the CA certificate. 4. Click the Generate Certificate button and Save. 5. Click the Apply button to apply the changes. To generate the X.509 certificate:
1. Make sure the self-signed CA certificate generated. 2. Navigate to X.509 Certificates tab. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 86 3. Add the new X.509 certificate by + Add X.509 button. (If its not existed.) 4. Click the Edit button to navigate the Certificate Setting page. 5. Fill up the information of the X.509 certificate. 6. Click the Generate Certificate button and Save. 7. Click the Apply button to apply the changes. Certificate Setting Item Country Name State Location Organization Name Organization Unit Name Common Name E-mail VPN > IPsec > CA Certificates Description The 2-letter country code. e.g. US This option is required for certificate generation. The state name. e.g. Some-State The location name. e.g. city-name The organization name. e.g. company-name This option is required for certificate generation. The organization unit name. The host name associated with the certificate. e.g. example.com This option is required for certificate generation. The maintainer's E-mail. Certificate Importing Same as the Certificate Generation, the router supports the CA and X.509 certificate importing. To import the CA certificate:
1. Navigate to CA Certificates tab. 2. Click the + Add CA certificate button. 3. Select the CA certificate file from browser window. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 87 4. When the file be selected and everything all right, the newly CA certificate will show the CA certificate list with Imported state. To import the X.509 certificate:
1. Navigate to X.509 Certificates tab. 2. Click the + Add X.509 button. The list will pop up the blank X.509 entry. 3. Click the Cert Import button. 4. Select the X.509 certificate file from browser window. 5. When the file be selected and everything all right, the state should be Cert or Key is missed. 6. Click the Key Import button. 7. Select the X.509 key file from browser window. 8. When the state shown Imported, the importing procedure is completed. Download the certificate If the certificate is generated or imported, there will be the download button to download each certificate and key file. Note: When the connection is authenticated by RSA or EAP-TLS, the user must download the X.509 certificate, key and CA certificate, and import the files to the remote gateway. 11.2.5 IPsec > Net-to-Net Configuration In this case, the IPsec VPN tunnel uses the two LAN side subnet clouds and makes them communicate each other. There are two part settings for the Cellular router IPsec feature.
Pre-shared Key authentication Configure Net-to-Net VPN Server 1. Change Mode from Disable to Enable. 2. Navigate to the Authentication IDs tab. 3. Add the authentication ID
Keep ID as blank, Type as PSK and fill the password to Pre-shared Key field. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 88 4. Apply the changes 5. Navigate to the Connections tab. 6. Add IPsec connection
(1) Edit the phase 1 setting
(2) Change Mode from Disable to Enable.
(3) Save the changes.
(4) Edit the phase 2 setting
(5) Fill up the Local Subnet and Remote Subnet.
e.g. Local Subnet: 192.168.100.0/24, Remote Subnet: 192.168.200.0/24
(6) Save the changes 7. Apply the changes 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 89 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 90 Configure Net-to-Net VPN Client 1. Change Mode from Disable to Enable. 2. Navigate to the Authentication IDs tab. 3. Add the authentication ID
Keep ID as blank, Type as PSK and fill the password to Pre-shared Key field. 4. Apply the changes 5. Navigate to the Connections tab. 6. Add IPsec connection
(1) Edit the phase 1 setting
(2) Change Mode from Disable to Enable.
(3) Fill the IP address of VPN server to Remote Host Field.
e.g. Remote Host: 10.0.0.1
(4) Save the changes
(5) Edit the phase 2 setting
(6) Fill up the Local Subnet and Remote Subnet.
e.g. Local Subnet: 192.168.200.0/24, Remote Subnet: 192.168.100.0/24
(7) Save the changes 7. Apply the changes 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 91 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 92 IPsec Net-to-Net with Pre-shared Key result
Server
Client
RSA authentication - Server Prepare the self-signed CA certificate 1. Navigate to the CA Certificates tab. 2. Edit the self-signed CA. (Skip it if the self-signed CA is generated.)
(1) Fill the information of the self-signed CA
(2) Country Name: CN
(3) Organization Name: Company
(4) Common Name: IPsec.ca
(5) Click the Generate Certificate button
(6) Save the changes 3. The State of self-signed CA will be Waiting Apply 4. Apply the changes 5. Waiting for the State of self-signed CA become generated 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 93 6. Refresh the page Prepare the X.509 certificates 1. Navigate to the X.509 Certificates tab. 2. Click the add button to add the X.509 certificate 3. Edit the newly X.509 certificate for the local router.
(1) Fill the information of the X.509 certificate
(2) Country Name: CN
(3) Organization Name: Company
(4) Common Name: local.IPsec
(5) Click the Generate Certificate button
(6) Save the changes 4. Click the add button to add the X.509 certificate 5. Edit the newly X.509 certificate for the remote router.
(1) Fill the information of the X.509 certificate
(2) Country Name: CN
(3) Organization Name: Company
(4) Common Name: remote.IPsec
(5) Click the Generate Certificate button
(6) Save the changes 6. Apply the changes 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 94 7. Waiting for the State of X.509 Certificate become generated 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 95 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 96 Prepare the authentication IDs 1. Navigate to the Authentication IDs tab. 2. Add tow authentication IDs
Keep first one's ID as blank, Type as RSA and select the C=CN, O=Company, CN=local.IPsec X.509 certificate.
Keep second one's ID as blank, Type as RSA and select the C=CN, O=Company, CN=remote.IPsec X.509 certificate. 3. Apply the changes Setup the connection on VPN server 1. Change Mode from Disable to Enable. 2. Navigate to the Connections tab. 3. Add IPsec connection
(1) Edit the phase 1 setting
(2) Change Mode from Disable to Enable.
(3) Change Auth Type from PSK to RSA.
(4) Change the Local ID and select the local.IPsec (RSA) authentication ID.
(5) Save the changes
(6) Edit the phase 2 setting
(7) Fill up the Local Subnet and Remote Subnet.
e.g. Local Subnet: 192.168.100.0/24, Remote Subnet: 192.168.200.0/24
(8) Save the changes 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 97 4. Apply the changes 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 98
RSA authentication Client Prerequisite for VPN Client with RSA authentication 1. The self-signed CA certificate which generated by VPN server 2. The X.509 certificate and key for remote router which generated by VPN server These files could be downloaded from VPN server. The detail could reference How to download the certificate section of user manual. Import the CA certificate and the X.509 certificate Please refer the Certificate Importing section of user manual to import the required files. 99 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 Setup the connection on VPN client 1. Change Mode from Disable to Enable. 2. Navigate to the Authentication IDs tab. 3. Add one authentication ID
Keep second one's ID as blank, Type as RSA and select the C=CN, O=Company, CN=remote.IPsec X.509 certificate. 4. Apply the changes 5. Navigate to the Connections tab. 6. Add IPsec connection
(1) Edit the phase 1 setting
(2) Change Mode from Disable to Enable.
(3) Change Auth Type from PSK to RSA.
(4) Change the Local ID and select the remote.IPsec (RSA) authentication ID.
(5) Fill the IP address of VPN server to Remote Host field.
e.g. Remote Host: 10.0.0.1
(6) Save the changes
(7) Edit the phase 2 setting
(8) Fill up the Local Subnet and Remote Subnet.
e.g. Local Subnet: 192.168.200.0/24, Remote Subnet: 192.168.100.0/24
(9) Save the changes 7. Apply the changes 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 100
1 2 3 | User Manual | Users Manual | 4.69 MiB |
4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 101
IPsec Net-to-Net with RSA authentication result
Server
Client 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 102 VPN > GRE This section allows you to set GRE configuration. The default mode is off. Generic Routing Encapsulation (GRE) is one of the available tunneling mechanisms which uses IP as the transport protocol and can be used for carrying many different passenger protocols. The tunnels behave as virtual point-to-point links that have two endpoints identified by the tunnel source and tunnel destination addresses at each endpoint. The GRE Mode is on. Item VPN > GRE Description Mode Select from Off or On to enable GRE. Local Address Set local address of the GRE tunnel. Remote Address Set remote address of the GRE tunnel. Tunnel Device Address Set IP address of this GRE tunnel device. Tunnel Device Address Prefix Set Prefix of the Tunnel Device Address. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 103 VPN > PPTP Server This section provides 2 sub configurations, including General Configuration and Clients Configuration.
(1) General Configuration Item Mode Server Address Client Address Range
(2) Clients Configuration VPN > PPTP Server > General Description Select from Off or On to enable PPTP Server. IP addresses to be used at the local end of the tunneled PPP links between the server and the client. A list of IP addresses to assign to remote PPTP clients. There are two parts for Clients configuration.
Summary part: User can delete and edit the existed PPTP clients.
Add/Edit part:
VPN > PPTP Server > Clients Item Description Mode Username Password Select from Off or On to set the client setting. The username of this client. The password of this client. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 104 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 105 VPN > L2TP This section allows you to set up L2TP and provides three modes for configuration, including Off, Server, and Client Mode.
(1) General Mode: The default mode is Off as shown in the following interface.
(2) Server Mode:
Choose the Server mode and the interface will be changed as below. Item Mode Auth Local IP VPN> L2TP > Server Mode Description Select from Off or On to set the client setting. The authentication method for L2TP connection. Available options: PAP, CHAP, MS-CHAP, MS-CHAPv2 The virtual IP for L2TP server. Remote begin IP The begin address of L2TP client's IP pool. Remote end IP The end address of L2TP client's IP pool. The L2TP client's username. Could be used to add the newly client or update existed client. Username 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 106 Password The L2TP client's password. Could be used to add the newly client or update existed client. Fill in the username and password and click the and manage them under server mode. button, you can create the L2TP client 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 107
(3) Client Mode:
Choose the Client mode and the interface will be changed as below. Item Mode Server Auth Username Password NAT Default route VPN> L2TP > Client Mode Description Turn on/off this L2TP connection The L2TP server address or hostname. The authentication method for L2TP connection. Should same as L2TP server's auth type. The username for L2TP authentication. The password for L2TP authentication. Turn on to translate the LAN subnet IP to L2TP virtual IP. Turn on to redirect all traffic to L2TP tunnel. Fill in the required parameters and click the manage the L2TP connection under client mode. button to create the L2TP connection and 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 108 Click the button and edit the parameters to update the L2TP connection. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 109 Configuration > Firewall This section allows you to configure Basic Rules, Port Forwarding, DMZ, IP Filter, MAC Filter, URL Filter, NAT and IPS. Firewall > Basic Rules This section allows you to set the Basic Rules configuration. WAN Ping Blocking Item Description Check IPv4 or IPv6 for blocking Firewall > Basic Rules 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 110 Firewall > Port Forwarding This section allows you to set up Port Forwarding and click edit button to configure. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 111 Firewall > Port Forwarding Description Item Mode Turn on/off Port Forwarding to select Disable or Enable. The default is Disable. Descript the name of Port Forwarding. Select from UDP or TCP Client which depends on the application. Fill in the beginning of source port. Fill in the end of source port. Fill in the current private destination IP. Description Protocol Source Port Begin Source Port End Destination IP Destination Port Begin Fill in the beginning of private destination port. Destination Port End Fill in the end of private destination port. Firewall > DMZ This section allows you to set the DMZ configuration. Item Mode Host IP Address Firewall > DMZ Description Select from Disable or Enable. The default is Disable. Fill in your Host IP Address. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 112 Firewall > IP Filter This section allows you to configure IP Filter. After clicking protocol, source/port and destination/port. The default is Disable mode and Black list. button, you can edit your IP 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 113
Black List: When set as Black List, the specific IP address/port in rule will be blocked.
White List: When set as White List, the specific IP address/port in rule will be accepted. Management IP Address:
For White List only. Since White List will block all user communication except those has been assigned by rules, it is better to assign a specific IP address for the administrator to access the Router which is Management IP Address. Service Ports:
For White List only. The setting is specified for Router access only. The user can set it to allow Router access outside WAN or inside LAN Service. For example, access outside WAN DNS service. It also allows user to access Router service from outside WAN or inside LAN. For example, access Router Web service. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 114 Edit Black/White List
(1) Click
(2) The default is Disable mode as the following interface (Black/White). button to edit Black/White list. 115 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 Item Firewall > IP Filter Description Mode Protocol Source IP Source Port Destination IP Destination Port
(3) When selecting Enable Mode, the protocol is TCP. The source IP has IPv4 and IPv6 setting Select from Disable or Enable. The default is Disable. Select from All, ICMP, TCP or UDP. Fill in your source IP address. Fill in your source port. Fill in your destination IP address. Fill in your destination port. formats.
(4) For Source IP, there are three types to input your source IP that depends on your requirement, including single IP, IP with Mask or giving a range of IP. The following table provides some examples. Firewall > Edit IP Filter > Source IP IP Format IPv4 Single IP 192.168.0.123 IP with Mask 192.168.1.0/24 192.168.1.0/255.255.255. Ranged IP 192.168.1.1-
192.168.1.123 2607:f0d0:1002:51::4-
2607:f0d0:1002:51::aaaa IPv6 Note: Setting up a range of IP, please use hyphen symbol to mark your ranged IP. 2607:f0d0:1002:51::4 2607:f0d0:1002:51::0/64
(5) For Source Port, there are two types to input your source port that depends on your requirement, including single port (e.g.1234) or giving a range of ports (e.g.1234:5678). Note: Setting up a range of source ports, please use: colon symbol to mark your ranged ports. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 116 Firewall > MAC Filter This section allows you to set up MAC Filter. After clicking address. button, you can edit your MAC Item Service > MAC Filter Description Mode MAC Address Note: Setting up MAC address, please use : colon symbol (e.g. xx : xx : xx : xx) or - hyphen symbol to mark (e.g. xx - xx - xx - xx). Select from Disable or Enable. The default is Disable. Fill in your MAC address. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 117 Firewall > URL Filter This section allows you to set up URL Filter. After clicking filter and information. button, you can edit the type of 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 118 Note: Please not include https:// or http:// for the URL address in the Full Filter. Firewall > URL Filter Description Select from Disable or Enable. The default is Disable. Select from Key or Full. The default is Key. Fill in your Key / Full information. Item Mode Filter Key / Full Firewall > NAT This section allows you to set NAT configuration. When NAT mode is Enable, the router will replace the source private IP address by its Internet public address for outgoing packets, and replace the destination Internet public address by private IP address for incoming packets. When NAT mode is Disable, the router will send the source LAN private IP address for outgoing packets and allow to receive the destination LAN private IP address for incoming packets. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 119 Firewall > IPS This section allows you to set IPS configuration. IPS prevents the system from being attacked by the Internet. The system allows to limit the max incoming connection number from WAN per source IP address to prevent system resource exhausted. Also, the system allows to limit the max incoming connection retry number during a specific time period from WAN per source IP address to prevent too many unexpected connections retry event from causing system busy. Firewall > IPS Item Description Turn on / off IPS function (default: Off) Mode Total allow incoming connection number Select the checkbox to enable or disable the function. The default number is 10. Select the checkbox to enable or disable the function. The default number is 20. The default time is 120 seconds. Max incoming connection retry number Duration time 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 120 Configuration > Service This section allows you to configure the SNMP, TR069, Dynamic DNS, VRRP, MQTT, UPnP, SMTP, and IP Alias. Service > SNMP This section allows you to set the SNMP configuration. 13.1.1 Community 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 121 Item Mode Community Mode Name Access Service > SNMP > Community Description Select from Disable or Enable to configure SNMP. Configure community setting with three options, including # 1, # 2 and #3. Select from Disable or Enable. Name each community. Select from Read-Only or Read-Write. 13.1.2 SNMP v3 User Configuration For SNMP v3 User Configuration, you need to register authentication and allow a receiver that confirm the packet was not modified in transit. There are three options to set up SNMP v3 Configuration. Item Service > SNMP > SNMP v3 User configuration Description Select from Disable or Enable to configure SNMP. Mode The default is Disable. Name Fill in your name. Auth Mode Select from Authentication or Privacy. Authentication Password Fill in your authentication password. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 122 Authentication Protocol Privacy Password Privacy Protocol Access Select from MD5 or SHA. Fill in your privacy password. Select from DES or AES. Select from Read-Only or Read-Write. 13.1.3 SNMP trap configuration This section allows you to set up the SNMP trap configuration when you select the SNMP trap function from Alarm output of system for your router. With SNMP trap setting, you can know the status of remote device. Service > SNMP > SNMP trap configuration Item Description Mode Community Name Destination Select from Disable or Enable. The default is Disable. Fill in your community name. The destination (domain name/IP) of remote SNMP trap server. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 123 Service > TR069 This section allows you to set up TR069 client configuration. You can get information how to install TR069 Server (GenieACS Installation) from the application configuration chapter. Item Mode ACS URL ACS Username ACS Password Periodic Inform Periodic Inform Interval (Sec) Connection Request Username Connection Request Password Connection Request Port Service > TR069 Description Select from Disable or Enable. The default is Disable. Fill in the URL address of ACS (Auto-Configuration Server). Fill in the ACS username to authenticate the CPE (this router) when connecting to the ACS. Fill in the ACS password to authenticate the CPE (this router) when connecting to the ACS. Select from Disable or Enable. The default is Disable. The CPE reports the status to the ACS when enabling a period of time set. Fill in the periodic time. The CPE reports to ACS the status according to your duration in seconds of the interval set. Fill in the connection request username to authenticate the ACS if the ACS attempts to communicate with the CPE. Fill in the connection request password to authenticate the ACS if the ACS attempts to communicate with the CPE. Fill in the connection request port to authenticate the ACS if the ACS attempts to communicate with the CPE. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 124 Service > Dynamic DNS This section allows you to set up Dynamic DNS. Item Service > Dynamic DNS Description Mode Service Provider Host Name Token ID Host Secret ID Username Password Update Period Time (Sec) Fill in 0 to mean 30 days. IP Address Selection Turn on/off this function to select Disable or Enable. The default is Disable. Select the Service Provider of Dynamic DNS. Fill in your registered Host Name from Service Provider. Fill in your Token ID from Service Provider. Fill in your Secret ID from Service Provider. Fill in your registered username from Service Provider. Fill in your registered password from Service Provider. Select either Internet IP or WAN IP. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 125 Note: There are six options of Service Provider as below to explain the information. Service Provider Host Name Token ID dynv6.com Register hostname, e.g. tester.dynv6.net The token ID, e.g. v_ABjMMQxeAnWv5UwtuVn1QBriynzq Service Provider Host Name Host Secret ID www.nsupdate.info Register hostname, e.g. tester.nsupdate.info The Host Secret ID, e.g. e2AMDsLmVF Service Provider Host Name Token ID www.duckdns.org Register hostname, e.g. tester.duckdns.org The token ID, e.g.12345678-de49-4e97-a33c-98b159aead2b Service Provider Host Name Username Password Service provider Host Name Username Password Service provider Host Name Username Password no-ip.com Register hostname, e.g. tester.hopto.org Register username. Register password. freedns.afraid.org Register hostname, e.g. tester.mooo.com Register username. Register password. dyndns.org Register hostname, e.g. tester.dyns.com Register username. Register password. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 126 Service > VRRP This section allows you to configure VRRP. Service > VRRP Description Select from Disable or Enable. The default is Disable. Specify which VRRP group of this router belong to (1-255). The default is 1. Enter the priority value from 1 to 254. The larger value has higher priority. The default is 100.
Each router in the same VRRP group must have the same virtual IP address. The default is 0.0.0.0.
This virtual IP address must belong to the same address range as the real IP address of the interface. Item Mode Group ID Priority Virtual IP Service > MQTT This section makes you configure MQTT which allows the MQTT client to send the message within specific topic or channel. By default, the router does not allow anonymous to read/write the MQTT topic or channel. Thus, you need to create the account with username and password for MQTT client in the web UI. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 127 Item Service > MQTT Description Select from Disable or Enable. The default is Disable. Fill in the port number of MQTT application. Create the users and show all users names. Allow each user to delete their name. Fill in the username of manage user. Fill in the password of manage user. Allow to specify what topic should be limited. Select the users and identify their authority to read or write the MQTT topic/channel. Name the topic of MQTT message. Mode Port Manage Users Username Password ACLs User Topic Take for example, the interface is shown as below. The Manage Users section will show all users that you create. Moreover, each user can use the delete button to delete it. For the ACLs control, user can specify what topic should be limited. In this case, we set up the publisher pub1 to write the critical topic. Additionally, we also allow the subscribers sub1 and sub2 to read the critical topic. Thus, only the sub1 and sub2 can receive it when pub1 sending the message. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 128 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 129 Service > UPnP This section allows you to set up UPnP confirguration to select the mode from Disable or Enable. The default UPnP is enabled for the cellular router. Note:
UPnP (Universal Plug and Play) is a set of protocols that allows a PC to automatically discover other UPnP devices (anything from an Internet gateway device to a light switch), retrieve an XML description of the device and its services, control the device, and subscribe to real-time event notification. PCs using UPnP can retrieve the cellular router's WAN IP address, and automatically create NAT port maps. This means that applications that support UPnP, and are used with UPnP enabled cellular router, will not need application layer gateway support on the cellular router to work through NAT. Service > SMTP This section provides you to send your email for the server. For instance, the email will be sent to notify when the Alarm has a nofitication by the server. Item Mode Server Port Service > SMTP Description Select from Disable or Enable. The default is Disable. The email will be sent through the server. There are three ports for SMTP communication between mail servers.
Port 25Use TCP port 25 without encryption.
Port 465SMTP connections secured by SSL.
Port 587SMTP connections secured by TLS. Username / Password Fill in your username and password as the same your server. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 130 Service > IP Alias This section allows you to set IP Alias configuration. IP Alias is associating more than one IP address to a network interface. With IP Alias, one node on a network can build multiple connections with the network, each serving a different purpose. IP Alias can be used to provide multiple network addresses on a single physical interface. Item Mode Entries Add / Edit IP Alias Entry Service > IP Alias Description Select from Off or On to enable the IP Alias. The setting can be edited or deleted the existed entries.
Mode: select from Off or On to use or not use this entry.
Interface: the interface you want to provide the additional address.
Addr: the IP address.
Mask: the network mask. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 131 Configuration > Management This section provides you to manage the router, set up your administration and know about the status of current software and firmware. Also, you can back up and restore the configuration. Management > Identification This section allows you to confirm the profile of router, current software, firmware version and system uptime. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 132 Item Management > Identification Description Model Name The model name of cellular router. LAN Ethernet MAC Address The LAN Ethernet MAC address. WAN Ethernet MAC Address The WAN Ethernet MAC address. Software Version Firmware Version Hardware Version Software MCSV Hardware MCSV Serial Number Modem Firmware Version IMEI Uptime The software version currently running on the device. The firmware version of the device. The hardware version of the device. Show the software MCSV of the running firmware Show the current hardware MCSV of the device. Show the product serial number. Show the modem firmware version of the device Show the IMEI (International Mobile Equipment Identity number). Show the current system uptime.
Management > Administration This section allows you to set up the name of the device and change your new password. For the Session TTL, you can set up what duration of time will be logout. If you dont need to have this timeout limitation, you can fill in 0(Zero). The default timeout is 5 minutes. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 133
Management > Contacts / On Duty This section allows you to create the groups, add the usersFor more detailed instruction, please navigate to System > Alarm. 14.3.1 Contacts
+ Add Group: Please fill out group name.
+ Add User: Please fill out Name/Phone/E-Mail/Groups. 14.3.2 Duty Schedule Please select duty date for every group. The trust and responsible groups can control/receive alarms and SMS. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 134 Management > SSH Secure Shell (SSH) allows user to configure system via a secure channel. User can configure system from either public domain or local LAN. 135 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 Item Mode LAN Server Port WAN Server Port Access Control Management > SSH Description Select from Disable or Enable SSH function. The LAN side TCP port number listened by SSH server. The WAN side TCP port number listened by SSH server.
Allow All: Any client who own the IPv4v6 Address can reach system is able to connect system.
Allow specified IPv4v6 Address below: Only those configured IPv4v6 Address client are allowed to connect system. Management > Firmware This section provides you to upgrade the firmware of router.
(1) Click button to choose your current firmware version in your PC.
(2) Select
(3) After upgrading successfully, please reboot the router. button to update.
Management > Configuration This section supports you to export or import the configuration file.
(1) Click button to export your current configurations.
(2) Click button to import the configuration file.
Management > Load Factory This section supports you to load the factory default configuration and restart the device immediately. You can click the button. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 136
Management > Restart This section allows you to click button and the router will restart immediately. Configuration > Diagnosis This section allows you to diagnose Ping and Traceroute for your Host (IP address or Domain Name). Diagnosis > Ping Please assign the Host you want to ping. Item Use Interface As Source Use Interface Host Diagnosis > Ping Description Use or not use the Interface as source APN1 / APN2 The host name or the host IP address 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 137 Diagnosis > Traceroute Please assign the Host **you want to** traceroute. The result of the traceroute is as below. Item Use Interface As Source Use Interface Host Diagnosis > Ping Description Use or not use the Interface as source APN1 / APN2 The host name or the host IP address 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 138 Configuration Applications This section explains specific examples how to configure your applications. WAN Priority You can select from ETH First, LTE Only, ETH Only or LTE First.
(1) WAN Priority > ETH First:
In case both Ethernet and LTE can access Internet, the router would route network packages through Ethernet. The reason is Ethernet that is low price and stable. However, in case Ethernet is unplug or not able to access Internet (check by ping), the router would route network packages through LTE network.
(2) WAN Priority > LTE Only:
In this mode, the router only routes network packages through LTE. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 139
(3) WAN Priority > ETH Only:
In this mode, the router only routes network packages through Ethernet.
(4) WAN Priority > LTE First:
In case both Ethernet and LTE can access Internet, the router would route network packages through LTE. However, in case LTE is unplug or not able to access Internet (check by ping), the router would route network packages through Ethernet network. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 140 LAN > IPv4/IPv6 Dual Stack The router supports IPv4/IPv6 dual stack by default, it means IPv4 packages route to IPv4 network and IPv6 route to IPv6 network. Since IPv6 is global IP, there is no NAT between WAN site and LAN site. One device only needs one global IPv6. There is IPv6 firewall protection in the router by default. Only the IPv6 packages come from LAN site device and got reply back. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 141 The router automatically detects IPv6 environment and query IP. After the IP is obtained successfully, it will distribute to LAN site hosts. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 142 MQTT Broker The cellular router provides the MQTT broker feature which allow the MQTT client sending the message within specific topic (channel). By default, the cellular router does not allow anonymous to read/write the MQTT topic (channel). Thus, you need to create the account with username and password for MQTT client in the web UI. The Manage Users section will show all created users. Each user can use the delete button to delete it. For the ACL control, you can specify what topic should be limited. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 143 For example, we set the publisher pub2 to write the critical topic. Additionally, we also the subscribers sub1 and sub3 can read the critical topic. Thus, when pub2 is sending the message only the sub1, the sub3 can receive it. Alarm Configuration After you enable alarm, all the selected alarm input events would trigger selected alarm output.
(1) Alarm Input:
The alarm would be triggered when DI1/DI2 show(s) high signal.
The users phone number is in device contact phone book can send a SMS to device SIM card to trigger alarm.
VPN / WAN disconnect would trigger alarm no matter which interface is currently using. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 144
(2) Alarm Output:
In case of SMS is selected then only users phone number is in selected group and on selected working day would receive alarm SMS.
In case of DO is selected, please make sure your DO is connected to your alarm device.
In case of SNMP trap is selected, please make sure you enable SNMP trap (Service ->
SNMP) and fill our server IP. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 145 Open VPN Configuration Generic setup For Open VPN configuration, use the certificate to authenticate the VPN connection. Thus, you need to generate the required files for Open VPN server or import the required file to Open VPN client. 16.5.1 Open VPN Server Mode Open VPN server certificate generation For the Open VPN server mode, the Open VPN web UI provides the buttons to generate the required files. The files include Root CA, Cert, Key and Open VPN client files. The file will be generated when you click the corresponded Create button. Note: The Cert, Key generation will take around 10 minutes. To generate the Open VPN client files, you need to type the password to create it. The password will be used in the Open VPN client when the client uses PKCS#12 to authenticate the VPN connection. After the generation, the web UI shows the below picture. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 146 And you can click the info button to show the detail for each files, or click the download button to download the file to PC. 16.5.2 Open VPN Client Mode Open VPN client certificate import For the Open VPN client mode, the Open VPN web UI provides the buttons to import the required files. The Open VPN client can use the Root CA, User Key and User Cert files from Open VPN server to authenticate the VPN tunnel. Or just only use the PKCS#12 (P12) file from Open VPN server to authenticate it. Note: The PKCS#12 files will contain the Root CA, User Key and User Cert. When the files are imported, the web UI is as shown in the right-bottom picture. Same as Open VPN server part, you can use the info/download buttons to get the information of file or download the file to PC. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 147 16.5.3 Open VPN Net-to-Net You can use the Open VPN VPN tunnel to make the PC1 and PC2 communicate each other.
(1) Open VPN server configuration For the Open VPN server side, the basic setting is as shown in below figure. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 148 The VPN Network and VPN Netmask are required fields. Note: The VPN Network should be network ID (e.g. 192.168.30.1 is invalid setting.) When PC1 and PC2 communicate each other, the Route Client Networks should be enabled. And add the LAN information of Open VPN client side, in this case the #1 route will be 10.0.0.0 and 255.255.255.0 Note: The #1 route means the routing information for User 1. If all settings set up properly, the web UI will show the Apply OK and the Open VPN server status should be Running. When Open VPN Client mode is connected, the status will show the information which client is connected, IP address and connected time. In the status, the CN field will indicate which client is connected and the user-00-00@Open VPN value is from the User 1 certificate information. You can check it by clicking the information button, the web UI will display the window as the below figure. The CN information of user certificate is as shown in the subject field. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 149
(2) Open VPN client configuration For the Open VPN client side, the basic setting is as below figure. The Server Address is required field, which indicate the Open VPN server address which Open VPN client try to connect. And the PKCS12 Password only works when selected the pkcs #12 Certificate authentication option. This option requires the P12 file which generated from Generic Setup Open VPN server part. The password also be set on the Generic Setup Open VPN server part. If you use the Certificate authentication option, the Open VPN client will require the Root CA, User cert and User key files. Same as the Open VPN server configuration part, Open VPN client web UI also provides the status information. When all settings set up properly, the status will change from Idle to Running. When Open VPN tunnel is created, the status shows Connected and the information for IP address and the time. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 150 16.5.4 Open VPN 1:1 NAT For the net-to-net part, the Open VPN server LAN network and the Open VPN client LAN network are different. But some time, the LAN network will be same for both sides. When this situation occurred, the routing rules will be ambiguous that will result in the PC1 and the PC2 can't communicate each other. Thus, the router Open VPN provides the 1:1 NAT feature. The feature will convert the conflict subnet to different subnet. In this case, you can use 1:1 NAT feature to convert the Open VPN server and client side LAN network. For the Open VPN server side, we fill up the Network be 192.168.10.0 and Netmask 255.255.255.0. The setting will make the router convert the Open VPN server side LAN network from 192.168.1.0/24 to 192.168.10.0/24 when the VPN traffic is coming. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 151 For the Open VPN client side, same as server side but we fill up the Network as 192.168.11.0. The setting will make router convert the Open VPN client side LAN network from 192.168.1.0/24 to 192.168.11.0/24 when the VPN traffic is coming. 16.5.5 Open VPN with third-party server A VPN enables you to send and receive data across shared networks. For some users, they will use the VPN to access the limited network service from the different country. But normally, the third-party Open VPN server will provide the .ovpn configuration files for the Open VPN client. The .ovpn is hard to convert to the cellular router Open VPN client configuration. So, we provide the Custom mode to make the user can easy use the .ovpn to set up the cellular router Open VPN client. The Custom mode provide the import button to allow user import the third-party Open VPN server .ovpn configurations file. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 152 For example, use the Japan Open VPN server which provided by http://www.vpngate.net/en/. Firstly, download the ovpn configuration files from vpngate.net. Additionally, use the Open VPN custom import button to import it. The result is as the below figure. If the .ovpn configuration file is correct, the web UI will show Apply OK. If the third-party Open VPN server is reachable, the VPN tunnel will be established. When the Open VPN VPN tunnel is established, the status shows Connected and the information for IP address and the time. In this moment, the PC1 can visit the http://www.vpngate.net and the web UI should indicate the PC1 in the Japan at now as the below figure. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 153 16.5.6 Install Open VPN Access Server on Docker Open VPN Access Server on Docker installation Open VPN Access Server is a full featured secure network tunneling VPN software solution that integrates Open VPN server capabilities, enterprise management capabilities, simplified Open VPN Connect UI, and Open VPN Client software packages that accommodate Windows, MAC, Linux, Android, and iOS environments. Open VPN Access Server supports a wide range of configurations, including secure and granular remote access to internal network and/ or private cloud network resources and applications with fine-grained access control. All Open VPN Access Server downloads come with 2 free client connections for testing purposes.
$15.00 License Fee Per Client Connection Per Year. Support & Updates included. 10 Client minimum purchase. The detail please look https://Open VPN.net/index.php/access-server/pricing.html Quick Installation
Prerequisites
Ubuntu 16.04
curl or wget should be installed Install via curl sh -c "$(curl -fsSL https://bit.ly/2GrzYyS)"
Install via wget sh -c "$(wget https://bit.ly/2GrzYyS -O -)"
Install Docker on Ubuntu 16.04 64bit Reference: https://docs.docker.com/engine/installation/linux/docker-ce/ubuntu/
Set up the repository sudo apt-get remove docker docker-engine docker.io sudo apt-get update sudo apt-get install \
apt-transport-https \
ca-certificates \
curl \
software-properties-common curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -
sudo add-apt-repository \
"deb [arch=amd64] https://download.docker.com/linux/ubuntu \
$(lsb_release -cs) \
stable"
4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 154 Install Docker CE sudo apt-get update sudo apt-get install docker-ce Install Open VPN Access Server by docker image Reference: https://hub.docker.com/r/linuxserver/Open VPN-as/
sudo mkdir -p /Open VPN-as sudo docker create --name=Open VPN-as \
-v /Open VPN-as:/config \
-e TZ="Asia/Taipei" \
-e INTERFACE=enp3s0 \
--net=host --privileged linuxserver/Open VPN-as sudo docker start Open VPN-as Check the Open VPN Access Server by visiting https://<server_ip_or_domain>:943 Setup Open VPN Access Server for Cellular Router The admin page is https://<server_ip_or_domain>:943/admin The default administrator username and password is admin/password. Login page:
After logged, please change the user authentication type to Local like the following figure. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 155 And switch to the User Permission page to create the user for Cellular Router.
(In this case, we use the test/test to be the example.) 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 156 Also check the Access from all other VPN clients to make the Cellular Router could be reachable. Setup Cellular Router Open VPN client 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 157 Use the user test/test to login https://<server_ip_or_domain>:943 Please make sure to change the type from Connect to Login. After logged, please download the .ovpn configuration by click the user-locked profile. Upload the .ovpn configuration to Cellular Router Open VPN custom mode, and input the username and password. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 158 When the VPN tunnel established, the Cellular Router can be managed/accessed by the other VPN clients. 16.5.7 Install Pritunl Open VPN server on Docker Pritunl Open VPN server on Docker installation Pritunl is a distributed enterprise vpn server built using the Open VPN protocol. Quick Installation
Prerequisites
Ubuntu 16.04
curl or wget should be installed
Install via curl sh -c "$(curl -fsSL https://bit.ly/2IpJN1X)"
Install via wget sh -c "$(wget https://bit.ly/2IpJN1X -O -)"
Install Docker on Ubuntu 16.04 64bit Reference: https://docs.docker.com/engine/installation/linux/docker-ce/ubuntu/
Set up the repository sudo apt-get remove docker docker-engine docker.io 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 159 sudo apt-get update sudo apt-get install \
apt-transport-https \
ca-certificates \
curl \
software-properties-common curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -
sudo add-apt-repository \
"deb [arch=amd64] https://download.docker.com/linux/ubuntu \
$(lsb_release -cs) \
stable"
Install Docker CE sudo apt-get update sudo apt-get install docker-ce Install Docker compose sudo apt-get install docker-compose Install Pritunl Open VPN Server by docker compose
(1) Set up the basic environment by the following commands. mkdir ~/pritunl cd ~/pritunl touch docker-compose.yml
(2) Copy and paste the following content to docker-compose.yml. version: '2'
services:
pritunl:
image: jippi/pritunl volumes:
- pritunl:/var/lib/pritunl
- mongo:/var/lib/mongodb privileged: true network_mode: "host"
ports:
- "1194:1194/tcp"
- "1194:1194/udp"
- "80:80/tcp"
4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 160
- "443:443/tcp"
volumes:
mongo:
pritunl:
(3) Run the command docker-compose up -d to start the server
(4) Check the Pritunl Open VPN Server by visiting https://<server_ip_or_domain>
Setup Pritunl Open VPN Server for Cellular Router The server will running on https://<server_ip_or_domain>. The default username/password is pritunl/pritunl. Login Page:
After logged, the server will ask you to do the initial setup. You can change the username and the password setting in this page. Initial Setup:
4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 161 Open VPN user setup Please navigate to the User page to setup the Open VPN user account. Add the organization by click the Add Organization button.
(In this document, we use the MR to be the organization example.) When the organization be created, the Users page should be like the following figure. Then add the Open VPN user by click the Add User button. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 162 Note: In this Open VPN server, the PIN must contain only digits. Note: In this document, we use the test/123456 Open VPN user to be the example. Open VPN server setup Please navigate to the Server page to setup the Open VPN server. And click the Add Server button to create the Open VPN server. Note: Please click the Advanced tab and make sure the Inter-Client Communication be checked 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 163 When the Open VPN server created, the Servers page should like the following figure. And click Attach Organization button to setup the Open VPN server. Start the Open VPN server by click Start Server button. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 164 Cellular Router setup First, please navigate to the Users page and download the user configuration file and extract it. Note: In this document, you should get the MR_test_router.ovpn file. And visit the Cellular Router Open VPN custom page then import the .ovpn file. Fill up the username/password which be setup in Open VPN user setup part. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 165 When the Cellular Router Open VPN connected, the Pritunl Open VPN server also update the user status. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 166 VRRP Topology Basic VRRP Topology Base on this topology and VRRP Parameter settings, Router A and Router B will offer a virtual router service with virtual IP = 192.168.1.200 for the client. TR069 Server (GenieACS Installation) Server OS: Ubuntu 14.04 on Virtualbox Installation:
1) Login ubuntu 2) Change to root by 'su -' and enter your root password. 3) Install required package as below command:
>apt install gcc openssl-devel zlib-devel readline-devel sqlite-devel 4) Make a directory for application installation
>mkdir /opt 5) Install yaml cd /opt wget http://pyyaml.org/download/libyaml/yaml-0.1.7.tar.gz tar xvzf yaml-0.1.7.tar.gz cd yaml-0.1.7
./configure make && make install 6) Install ruby cd /opt wget http://cache.ruby-lang.org/pub/ruby/2.4/ruby-2.4.1.tar.gz tar xvzf uby-2.4.1.tar.gz cd ruby-2.4.1 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 167
./configure make && make install ruby -v ruby 2.4.1p111 (2017-03-22 revision 58053) [i686-linux]
cd /opt gem install rails --no-ri --no-rdoc gem install bundle --no-ri --no-rdoc 7) Install node.js cd /opt wget http://nodejs.org/dist/v8.2.1/node-v8.2.1.tar.gz tar zxvf node-v8.2.1.tar.gz cd node-v8.2.1
./configure make && make install node -v v8.2.1 8) Install redis cd /opt wget http://download.redis.io/releases/redis-4.0.1.tar.gz tar zxvf redis-4.0.1.tar.gz cd redis-4.0.1 make make test All tests passed without errors!
make install
#Start redis server redis-server 9) Install mongodb cd /opt wget https://fastdl.mongodb.org/linux/mongodb-linux-i686-3.3.3.tgz tar zxvf mongodb-linux-i686-3.3.3.tgz cd mongodb-linux-i686-3.3.3 mkdir -p /data/db 10) Install genieACS cd /opt git clone https://github.com/zaidka/genieacs.git cd genieacs npm install npm run configure npm run compile 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 168 Modify FS_HOSTNAME field in genieacs/config/config.json for device retrieve firmware file Original configuration:
"FS_HOSTNAME" : "acs.example.com"
New configuration example.:
"FS_HOSTNAME" : "192.168.0.199"
Note: It is the place where the device firmware file stored. Generally, it is the IP address on where your GenieACS server installed. Modify connect request username/password in genieacs/config/auth.js to stimulate connection Original configuration:
function connectionRequest(deviceId, url, username, password, callback) {
return callback(username || deviceId, password || "");
}
New configuration example:
function connectionRequest(deviceId, url, username, password, callback) {
return callback('tr069','tr069');
}
Note: The hard code username/password MUST same with device's connection request username/password, otherwise the ACS stimulate connection will fail. 11) Install genieACS-Gui git clone https://github.com/zaidka/genieacs-gui cd genieacs-gui bundle gem install json bundle update rm -f db/*.sqlite3 rake db:create RAILS_ENV=development rake db:migrate cd /opt cd genieacs-gui/config cp index_parameters-sample.yml index_parameters.yml cp parameter_renderers-sample.yml parameter_renderers.yml cp parameters_edit-sample.yml parameters_edit.yml cp roles-sample.yml roles.yml cp summary_parameters-sample.yml summary_parameters.yml cp users-sample.yml users.yml cp graphs-sample.json.erb graphs.json.erb GenieACS startup script:
4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 169
#!/bin/sh GENIE_PATH=/opt/genieacs/bin GENIE_GUI_PATH=/opt/genieacs-gui echo "start mongod."
pidof mongod if [ $? != 0 ]; then
/opt/mongodb-linux-i686-3.3.3/bin/mongod --dbpath /data/db --journal --storageEngine=mmapv1
--fork --syslog fi echo "start North Bound/RESTful Interface service."
$GENIE_PATH/genieacs-nbi &
echo "start ACS/CWMP service."
$GENIE_PATH/genieacs-cwmp &
echo "start HTTP/File streaming service."
$GENIE_PATH/genieacs-fs &
echo "start GenieACS/WebUI."
cd $GENIE_GUI_PATH rails server -b 0.0.0.0 GenieACS stop:
Ctrl-C Usage:
1) Device Configuration Fill in the ACS URL field as http://GenieACS server IP:7547 Fill in the Connection Request Username and Connection Request Password fields to same with the configuration in genieacs/config/auth.js. 2) GenieACS Operation Input http://GenieACS server IP:3000 on browser url bar and Enter. Press Home tab to refresh Online devices status. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 170 2.1) Login Username and Password are admin/admin. 3) Device information Press Devices tab Move mouse to line end of your device, the Show link show up. Press Show link, the device information shows up. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 171 4) Access parameters Scroll up/down on Device parameters list, the Refresh and Edit link show up at line end of parameter. For Readable parameter For Readable and Writable parameter 4.1) Get parameter value Press on the Refresh link, the Pending tasks window will pop up on right top to ask you to allow or Cancel this action. Press Commit to get this parameter value. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 172 Note: If the GenieACS can reach the device, the parameter value will be updated immediately. Otherwise, this request will be queued on Task queue list until next time device connect to GenieACS. Note: To update the whole tree, refresh the root parameter (InternetGatewayDevice.). Note: To update partial tree, refresh the parent node of the partial tree. 4.2) Set parameter value Press on the Edit link, editing window will pop up to ask you to change the value of this parameter. Input new value and press OK. The Pending tasks window will pop up to ask you to allow or Cancel this action. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 173 Press Commit to set this parameter value. Note: If the GenieACS can reach the device, the parameter value will be set immediately. Otherwise, this request will be queued on Task queue list until next time device connect to GenieACS. 5) Reboot device Press on Reboot link. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 174 The Pending tasks window will popup to ask you to allow or Cancel this action. Press Commit to reboot device. Note: If the GenieACS can reach the device, the device will reboot immediately. Otherwise, this request will be queued on Task queue list until next time device connect to GenieACS. 6) Reset to default Similar to Reboot device except pressing on Factory reset link. 7) Firmware Upgrade 7.1) Upload Firmware Press Add Firmware link The link will redirect to Files tab 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 175 Press File: browse button, select the firmware, and then press Upload button. The firmware will be added to listing files as below. 7.2) Upgrade Move mouse to the Push file>> link, the upgrade firmware name will pop up as below picture. Move mouse to the upgrade firmware name and press it. The Pending tasks window will pop up to ask you to allow or Cancel this action. Press Commit, then firmware upgrade started. Note: If the GenieACS can reach the device, the firmware upgrade will be started immediately. Otherwise, this request will be queued on Task queue list until next time device connect to GenieACS. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 176 Test Case Example VLAN Topology This VLAN Topology for 3-port LANs shows different PCs how to configure VLAN settings with different LAN ports and has two results for this configuration.
(1) PC-A sends ICMP packet to PC-B IP (192.168.2.20) and captures traffic on PC-B. Thus, PC-
B will receive Tag20 traffic.
(2) PC-B sends ICMP packet to PC-A IP (192.168.1.20) and captures traffic on PC-A. Thus, PC-
A will receive untag traffic. Note:
PC-A and PC-B are on Ubuntu OS.
PC-A and PC-B should install vlan on Ubuntu.
PC-A and PC-B should command this order sudo apt-get install vlan. The following interface shows VLAN settings for the cellular router. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 177 Note:
Different PCs have different interface of network cards, like PC-A network card is eth1.10 for example 1 and PC-B network card is eth1.20 for example 2.
How to find out the terminal and the interface of network cards based on different PCs.
From the following picture, you can click the finding your computer icon and input the terminal letters. Then, the interface will show the terminal icon and click to open it.
Next, it shows the information when you click the terminal icon. From the following picture, it shows the interface of network card, enp7s0. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 178 There are two examples to explain how configure VLAN settings. Example 1: PC-A pings PC-B (Access to Trunk) For PC-A, add default gateway and LAN's MAC to ARP.
Load VLAN and create VLAN interface, command as below:
sudo modprobe 8021q sudo vconfig rem eth1.20 sudo vconfig add eth1.10
Configure VLAN interface as below:
sudo ifconfig eth1.10 192.168.1.20 netmask 255.255.255.0 up
sudo ifconfig eth1 0.0.0.0
sudo route add default gw 192.168.1.1 eth1.10
sudo arp -s 192.168.1.1 LAN's MAC
eth1 is network interface on PC-A Therefore, PC-B will receive Tag20 traffic when PC-A sends ICMP packet to PC-B IP
(192.168.2.20) and captures traffic on PC-B. Example 2: PC-A ping PC-B (Trunk to Access) For PC-B, add default gateway and LAN's MAC to ARP
Load VLAN and create VLAN interface, command as below:
sudo modprobe 8021q sudo vconfig rem eth1.10 sudo vconfig add eth1.20
Configure VLAN interface as below:
sudo ifconfig eth1.20 192.168.2.20 netmask 255.255.255.0 up sudo ifconfig eth1 0.0.0.0
sudo route add default gw 192.168.2.1 eth1.20
sudo arp -s 192.168.2.1 LAN's MAC
eth1 is network interface on PC-B Therefore, PC-A will receive untag traffic when PC-B sends ICMP packet to PC-A IP
(192.168.1.20) and captures traffic on PC-A. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 179 MQTT Topology This MQTT Topology shows the cellular router to connect PC-A and PC-Bs LANs and have two results are as below. Expect Result:
(1) PC-A sends message to PC-B and PC-B should not receive any message.
(2) PC-B sends message to PC-A and PC-A should receive message. Note: PC-A and PC-B should install MQTT Client software. There is a process to explain the steps and result.
Step1: Install mosquitto-clients on ubuntu or windows. If your OS system is Ubuntu, you should install as below steps:
4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 180
Step2: Configure MQTT for the Cellular Router You need to add two users. For example, we create the users for test and test2. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 181 You need to add two ACLs based on the users you created. For instance, we create two ACLs for test user and test2 user. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 182 Note:
Mosquitto_sub -h <M300 IP> -t <Topic> -u <username> -P <password>
Mosquitto_pub -h <M300 IP> -t <Topic> -u <username> -P <password> -m <message>
For Receive message command format:
For Send message command format:
4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 183
Step3: There are two test MQTT examples. Example 1: PC-A sends message to PC-B and PC-B should not receive any message. For PC-B, command "mosquitto_sub -h 192.168.1.1 -t abc -u test2 -P test2". For PC-A, command "mosquitto_pub -h 192.168.1.1 -t abc -u test -P test -m test" and confirm the message on PC-B. It wont receive any message on PC-B. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 184 Example 2: PC-B sends message to PC-A and PC-A should receive message. For PC-A, command "mosquitto_sub -h 192.168.1.1 -t abc -u test -P test"
For PC-B, command "mosquitto_pub -h 192.168.1.1 -t abc -u test2 -P test2 -m test" and confirm the message on PC-A. It will receive test message on PC-A. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 185 IP Routing Topology This IP Routing topology that the cellular router connects Router-1 and Router-2 will have two results.
(1) PC-A sends ICMP packet to Router-1 LAN and WAN IP and they should have response.
(2) PC-A sends ICMP packet to Router-2 LAN and WAN IP and they should have response. Note: Router-1 and Router-2 are pure routers and should be supported "NAT enable / disable".
LAN configuration:
WAN configuration:
There are two examples to introduce how to work for routing. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 186 Example 1: Add IP Routing on LAN interface
Step 1: The cellular router for Static Route configuration The Mode is on at the settings section and add the routing.
Step 2: Router-1 configuration is as below.
(1) Login to the Router-1 web site, and then "NAT disable".
(2) Configure LAN IP: 192.168.10.1
(3) Configure WAN IP: 192.168.1.50
Result: PC-A sends ICMP packet to Router-1 LAN and WAN IP and they should have response. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 187 Example 2: Add IP Routing on WAN interface
Step1: The cellular router for Static Route configuration The Mode is on at the settings section and add the routing.
Step2: Router-2 configuration is as below.
(1) Login to the Router-2 web site, and then "NAT disable".
(2) Configure LAN IP: 192.168.20.1
(3) Configure WAN IP: 192.168.2.2 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 188
Result: PC-A sends ICMP packet to Router-2 LAN and WAN IP and they should have response. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 189 C 0 2
1 2 3 | Internal Photos | Internal Photos | 2.61 MiB |
Test ModelM330W Photo 1 Photo 2 Photo 3 Photo 4 Photo 5 Photo 6 Photo 7 Photo 8
1 2 3 | External Photos | External Photos | 2.41 MiB |
Test ModelM330W Photo 1 Photo 2 Photo 3 Photo 4 Photo 5 Photo 6 Photo 7 Photo 8 3G/4GANT WIFIANT GPSANT
1 2 3 | Label and Label Location | ID Label/Location Info | 155.69 KiB |
FCCIDLABEL:
FCC ID: 2AUAEM3300001 Model Name: M330W Ca.5mmx10mm Includeinmanual:
Thisdevicecomplieswithpart15oftheFCCRules.Operationissubjecttothefollowingtwo conditions:(1)Thisdevicemaynotcauseharmfulinterference,and(2)thisdevicemust acceptanyinterferencereceived,includinginterferencethatmaycauseundesiredoperation. LabelLocation
1 2 3 | Agent Authorization | Cover Letter(s) | 13.61 KiB |
Proscend Communications Inc Agent Authorization Company: Proscend Communications Inc Address: 2F, No. 36, Industry E. Rd. IV, Hsinchu Science Park, Hsinchu, Taiwan, R.O.C Product Name: Industrial 4G LTE Cellular Router Model Number(s): M330-W, MXXX-XXXXX-XX(Where X can be used as A-Z, or 0-
9, or -, or blank for hardware/software changes/applications or marketing purpose only) Product Description: Industrial 4G LTE Cellular Router We authorize MiCOM Labs Inc., 575 Boulder Court, Pleasanton, California 94566, USA, to act on our behalf on all matters concerning the certification of above named equipment. We declare that MiCOM Labs Inc. is allowed to forward all information related to the approval and certification of equipment to the regulatory agencies as required and to discuss any issues concerning the approval application. Any and all acts carried out by MiCOM Labs on our behalf shall have the same effect as acts of our own. Signature:
Name:
Morris Lai Title:
Manager Company: Proscend Communications Inc Date: Oct. 09, 2019
1 2 3 | FCC Short & Long Term Confidentiality Request | Cover Letter(s) | 13.75 KiB |
Proscend Communications Inc Office of Engineering Technology Federal Communications Commission 7435 Oakland Mills Road Columbia, MD 21046 USA Date: Oct. 09, 2019 Subject; Request for Confidentiality FCC ID: 2AUAE-M3300001 To Whom It May Concern, Pursuant to the provisions of the Commissions rules Title 47 Sections 0.457 and 0.459, we are requesting the Commission to withhold the following attachment(s) as confidential documents from public disclosure indefinitely. These documents contain detailed system and equipment descriptions and are considered as proprietary information in operation of the equipment. The public disclosure of these documents might be harmful to our company and would give competitors an unfair advantage in the market. Schematic Diagram Block Diagram Parts List Operational Description Tune-up Procedure It is our understanding that all measurement test reports, FCC ID label format and correspondence during the certification review process cannot be granted as confidential documents and this information will be available for public review once the grant of equipment authorization is issued. Sincerely, Signature:
Name: Morris Lai Title: Manager.
1 2 3 | Model Difference Declaration | Cover Letter(s) | 2.91 MiB |
Model Difference Declaration To Whom It May Concern, We, Proscend Communications Inc(Industrial 4G LTE Cellular Router) Trademark:Proscend; Model Number: M330-W, MXXX-
XXXXX-XX(Where X can be used as A-Z, or 0-9, or -, or blank for hardware/software changes/applications or marketing purpose only); All models the function, software and electric circuit are the same, only with a product color and model named different for commercial purpose. Test sample model: M330-W. Please contact me if you have any question. Name: Morris Lai Title: Manager Signature of applicant:
Date: Oct. 09, 2019
frequency | equipment class | purpose | ||
---|---|---|---|---|
1 | 2019-10-16 | JBP - Part 15 Class B Computing Device Peripheral | Original Equipment | |
2 | 2412 ~ 2462 | DTS - Digital Transmission System | ||
3 | 1860 ~ 1900 | PCB - PCS Licensed Transmitter |
app s | Applicant Information | |||||
---|---|---|---|---|---|---|
1 2 3 | Effective |
2019-10-16
|
||||
1 2 3 | Applicant's complete, legal business name |
Proscend Communications Inc.
|
||||
1 2 3 | FCC Registration Number (FRN) |
0028724177
|
||||
1 2 3 | Physical Address |
2F, No.36, Industry E. Rd. IV, Hsinchu Science Park
|
||||
1 2 3 |
2F, No.36, Industry E. Rd. IV
|
|||||
1 2 3 |
Hsinchu
|
|||||
1 2 3 |
Hsinchu, N/A
|
|||||
1 2 3 |
Taiwan
|
|||||
app s | TCB Information | |||||
1 2 3 | TCB Application Email Address |
c******@micomlabs.com
|
||||
1 2 3 | TCB Scope |
A1: Low Power Transmitters below 1 GHz (except Spread Spectrum), Unintentional Radiators, EAS (Part 11) & Consumer ISM devices
|
||||
1 2 3 |
A4: UNII devices & low power transmitters using spread spectrum techniques
|
|||||
1 2 3 |
B1: Commercial mobile radio services equipment in the following 47 CFR Parts 20, 22 (cellular), 24,25 (below 3 GHz) & 27
|
|||||
app s | FCC ID | |||||
1 2 3 | Grantee Code |
2AUAE
|
||||
1 2 3 | Equipment Product Code |
M3300001
|
||||
app s | Person at the applicant's address to receive grant or for contact | |||||
1 2 3 | Name |
M**** L******
|
||||
1 2 3 | Title |
Senior Manager
|
||||
1 2 3 | Telephone Number |
03-56********
|
||||
1 2 3 | Fax Number |
03-56********
|
||||
1 2 3 |
m******@proscend.com
|
|||||
app s | Technical Contact | |||||
1 2 3 | Firm Name |
Proscend Communications Inc
|
||||
1 2 3 | Physical Address |
Taiwan
|
||||
1 2 3 |
m******@proscend.com
|
|||||
app s | Non Technical Contact | |||||
n/a | ||||||
app s | Confidentiality (long or short term) | |||||
1 2 3 | Does this application include a request for confidentiality for any portion(s) of the data contained in this application pursuant to 47 CFR § 0.459 of the Commission Rules?: | Yes | ||||
1 2 3 | Long-Term Confidentiality Does this application include a request for confidentiality for any portion(s) of the data contained in this application pursuant to 47 CFR § 0.459 of the Commission Rules?: | No | ||||
if no date is supplied, the release date will be set to 45 calendar days past the date of grant. | ||||||
app s | Cognitive Radio & Software Defined Radio, Class, etc | |||||
1 2 3 | Is this application for software defined/cognitive radio authorization? | No | ||||
1 2 3 | Equipment Class | JBP - Part 15 Class B Computing Device Peripheral | ||||
1 2 3 | DTS - Digital Transmission System | |||||
1 2 3 | PCB - PCS Licensed Transmitter | |||||
1 2 3 | Description of product as it is marketed: (NOTE: This text will appear below the equipment class on the grant) | Industrial 4G LTE Cellular Router | ||||
1 2 3 | Related OET KnowledgeDataBase Inquiry: Is there a KDB inquiry associated with this application? | No | ||||
1 2 3 | Modular Equipment Type | Does not apply | ||||
1 2 3 | Purpose / Application is for | Original Equipment | ||||
1 2 3 | Composite Equipment: Is the equipment in this application a composite device subject to an additional equipment authorization? | Yes | ||||
1 2 3 | Related Equipment: Is the equipment in this application part of a system that operates with, or is marketed with, another device that requires an equipment authorization? | No | ||||
1 2 3 | Grant Comments | Output power listed is maximum combined conducted power. Device is a 2x2 MIMO as is described in the filing. This device contains 20 and 40 MHz signal bandwidth. The antennas used with this transmitter must be installed to provide a minimum separation distance of at least 20 cm from all persons and must not be co-located or operating in conjunction with any other antenna or transmitter, except in accordance with FCC multi- transmitter product procedures. End-users must be provided with operating procedures for satisfying RF exposure compliance. | ||||
1 2 3 | Power output listed is ERP for frequencies below 1GHz and EIRP for frequencies above 1GHz. The antenna used with this transmitter must be installed to provide a minimum separation distance of at least 20 cm from all persons and must not be co-located or operating in conjunction with any other antenna or transmitter, except in accordance with FCC multi- transmitter product procedures. End-users must be provided with operating procedures for satisfying RF exposure compliance. | |||||
1 2 3 | Is there an equipment authorization waiver associated with this application? | No | ||||
1 2 3 | If there is an equipment authorization waiver associated with this application, has the associated waiver been approved and all information uploaded? | No | ||||
app s | Test Firm Name and Contact Information | |||||
1 2 3 | Firm Name |
Shenzhen HUAK Testing Technology Co., Ltd.
|
||||
1 2 3 | Name |
J******** Z******
|
||||
1 2 3 | Telephone Number |
+86-7********
|
||||
1 2 3 |
j******@cer-mark.com
|
|||||
Equipment Specifications | |||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Line | Rule Parts | Grant Notes | Lower Frequency | Upper Frequency | Power Output | Tolerance | Emission Designator | Microprocessor Number | |||||||||||||||||||||||||||||||||
1 | 1 | 15B | CC | ||||||||||||||||||||||||||||||||||||||
Line | Rule Parts | Grant Notes | Lower Frequency | Upper Frequency | Power Output | Tolerance | Emission Designator | Microprocessor Number | |||||||||||||||||||||||||||||||||
2 | 1 | 15C | CC MO | 2412.00000000 | 2462.00000000 | 0.0272900 | |||||||||||||||||||||||||||||||||||
Line | Rule Parts | Grant Notes | Lower Frequency | Upper Frequency | Power Output | Tolerance | Emission Designator | Microprocessor Number | |||||||||||||||||||||||||||||||||
3 | 1 | 22H | 826.4 | 846.6 | 0.59566 | 0.002808 ppm | 4M18F9W | ||||||||||||||||||||||||||||||||||
3 | 2 | 24E | 1852.4 | 1907.6 | 0.19907 | 0.004837 ppm | 4M18F9W | ||||||||||||||||||||||||||||||||||
3 | 3 | 24E | 1860 | 1900 | 0.14125 | 0.004803 ppm | 18M0G7D | ||||||||||||||||||||||||||||||||||
3 | 4 | 27 | 1720 | 1745 | 0.15031 | 0.004793 ppm | 18M0G7D | ||||||||||||||||||||||||||||||||||
3 | 5 | 27 | 704 | 711 | 0.13646 | 0.008747 ppm | 9M00G7D |
some individual PII (Personally Identifiable Information) available on the public forms may be redacted, original source may include additional details
This product uses the FCC Data API but is not endorsed or certified by the FCC