Industrial 4G LTE Cellular Router M300 / M301 M300-G / M301-G / M301-TG M301-TPG / M301-GW User Manual Version 1.1.
Table of Contents Introduction ....................................................................................................................... 6 Features ...................................................................................................................... 6 Specifications .............................................................................................................. 7 Mechanical Dimensions ...............................................................................
Configuration > WAN ...................................................................................................... 41 WAN > Priority........................................................................................................... 41 WAN > Ethernet ........................................................................................................ 42 6.2.1 WAN Ethernet Configuration .................................................................................. 42 6.2.
11.2.1 IPsec > Connections ............................................................................................ 92 11.2.2 IPsec > Authentication IDs ................................................................................... 95 11.2.3 IPsec > X.509 Certificates.................................................................................... 97 11.2.4 IPsec > CA Certificates ........................................................................................ 97 11.2.
Management > Firmware ........................................................................................ 168 Management > Configuration .................................................................................. 168 Management > Load Factory .................................................................................. 168 Management > Restart ............................................................................................ 168 Management > Schedule Reboot .......................
Introduction Industrial 4G LTE Cellular Router series are highly reliable and secure wireless communications gateway designed for enabling mission-critical applications and enhancing machine-to-machine connectivity for Industrial Internet of Things (IIoT).
Specifications Cellular Interface Power Supply Standards: (Please see ordering information for optional band) 4G: FDD LTE, TDD LTE 3G: WCDMA 2G: GSM/EDGE GNSS: GPS LTE Data Rate: Cat 4, 150Mbps (DL), 50Mbps (UL) Wi-Fi Interface (M301-GW) Compliant with IEEE 802.11 b/g/n Wi-Fi standards 2.4 GHz - 2.
Mechanical Dimensions (1) M300 model: 1 x WAN, 1 x LAN, 2 x RS232, 1 x RS485, 2 x DI, 1 x DO, 2 x SIM Card Slots, -20 ~ +70°C (2) M301 model: 1 x WAN, 3 x LANs, 2 x RS232, 1 x RS485, 2 x DI, 1 x DO, 2 x SIM Card Slots, -20 ~ +70°C (3) M300-G model: 1 x WAN, 1 x LAN, 1 x GPS, 2 x RS232, 1 x RS485, 2 x DI, 1 x DO, 2 x SIM Card Slots, -20 ~ +70°C INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
(4) M301-G / M301-TG model: 1 x WAN, 3 x LANs, 1 x GPS, 2 x RS232, 1 x RS485, 2 x DI, 1 x DO, 2 x SIM Card Slots, -20 ~ +70°C (M301-G), -40 ~ +75°C (M301-TG) (5) M301-TPG model: 1 x WAN with IEEE 802.3at/af PoE PD, 3 x LANs, 2 x RS232, 1 x RS485, 2 x DI, 1 x DO, 2 x SIM Card Slots, 1 x GPS, -40 ~ +75°C (6) M301-GW model: 1 x WAN, 3 x LANs, 2 x RS232, 1 x RS485, 2 x DI, 1 x DO, 2 x SIM Card Slots, 1 x GPS, 1 x Wi-Fi, -20 ~ +70°C INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Ordering Information Model Name Description Industrial 4G LTE Cellular Router M300 ( 1 x WAN, 1 x LAN, 2 x RS232, 1 x RS485, 2 x DI, 1 x DO, 2 x SIM Card Slots, -20 ~ +70°C ) Industrial 4G LTE Cellular Router M301 ( 1 x WAN, 3 x LANs, 2 x RS232, 1 x RS485, 2 x DI, 1 x DO, 2 x SIM Card Slots, -20 ~ +70°C ) M300-G M301-G M301-TG M301-TPG M301-GW Industrial 4G LTE Cellular Router ( 1 x WAN, 1 x LAN, 1 x GPS, 2 x RS232, 1 x RS485, 2 x DI, 1 x DO, 2 x SIM Card Slots, -20 ~ +70°C ) Industrial 4G LTE Cellu
Ethernet Port (1) 10/100 Mbps Ethernet LAN/WAN (M300/M300-G model) The LAN and WAN interface are standard RJ45 connectors. Pin 1 2 3 4 5 6 7 8 Description WAN TX+ WAN TXWAN RX+ N/A N/A WAN RXN/A N/A Function 10/100 Mbps WAN, TX+ Pin 10/100 Mbps WAN, TX- Pin 10/100 Mbps WAN, RX+ Pin N/A N/A 10/100 Mbps WAN, RX- Pin N/A N/A (2) 10/100 Mbps Ethernet LAN1~LAN3/WAN (M301/M301-G/M301-TG model) The Ethernet LAN1~3 and WAN interfaces are standard RJ45 connectors.
(3) 10/100 Mbps Ethernet LAN1~LAN3/WAN (M301-TPG model) The Ethernet LAN1~3 interfaces are standard RJ45 connectors. The WAN interface is a standard RJ45 connector with IEEE 802.3at/af PoE PD. (4) LED Indicator of Ethernet Port Each Ethernet port has two LED indicators. The Green LED indicates Link/ACT, and the Yellow LED indicates Speed.
Install the SIM Card 1. SIM1/SIM2 Card Drawers and Eject Buttons 2. Insert and Remove SIM1/SIM2 Card (1) Before inserting or removing the SIM card, ensure that the power has been turned off and the power connector has been removed from Cellular Router. (2) Press the button with a paper clip or suitable tool to eject the SIM card from the drawer. (3) Insert the SIM card with the contacts facing up and align it properly into the drawer. Make sure your direction of SIM Card and put it into the tray.
Reset Button Reset button allows you to reboot the unit or restore to factory default setting. Function Operation Reboot Press the button for 1 second Restore to factory default setting Press the button for 5 seconds Note: Press the Reset button and count the time around 5 seconds. The LED Indicators will be blinking to show you have activated the setting successfully. External Antenna Each unit has two antenna connectors (SMA), MAIN and AUX.
Grounding the Router To prevent the noise and surge effect, please connect the router to the site ground wire by the ground screw before turning on the router. Pin Assignments DI1/DI2 / Alarm Contacts / COM2 (RS-232) / COM3 (RS-485) INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Connecting I/O Ports (1) Digital Input DI1 & DI2 The unit has four terminals on the terminal block for the Digital inputs. Pin DI1_I1 DI1_COM DI2_I2 DI2_COM Description Digital INPUT 1 Digital INPUT 2 INPUT : +10 to +30V for state "1" (Q1 On) INPUT : +0 to +3V for state "0" (Q1 Off) Note: Q1 is a bidirectional component. (2) Digital Output – Alarm Contacts The unit has 2 terminals on the terminal block for the Alarm Contacts. Photo relay output with current capacity of 500mA/50VDC maximum.
Serial Port COM2 (RS-232) The serial port COM2 is a RS-232 interface. Pin RXD TXD GND ※ Description COM2 Serial Port, RXD Signal (INPUT) COM2 Serial Port, TXD Signal (OUTPUT) COM2 Serial Port, Signal Ground（※） Both connectors (RS-232 and RS-485) have a common ground connection. Serial Port COM3 (RS-485) The serial port COM3 is a RS-485 interface. Pin DD+ INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
DIP Switch A built-in 120 ohm terminal resistor can be activated by DIP switch. Pull high or Pull low resistor adjustments are also available. It improves the communication on RS-485 networks for specific application. Switch 1 and 2 set the pull high/low resistor Switch 3 enables or disables the termination resistor Pull High (510 ohm) / Pull Low (510 ohm) Bias Resistor Enable Disable (Default) Termination Resistor (120 ohm) Enable Disable (Default) INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Configuration via Web Browser Access the Web Configurator The web configuration is an HTML-based management interface for quick and easy set up of the cellular router. Monitoring of the status, configuration and administration of the router can be done via the Web interface. After properly connecting the hardware of cellular router as previously explained. web browser and enter http://192.168.1.1 as URL. Launch your The default IP address and sub net-mask of the cellular router are 192.168.1.1 and 255.
Navigate the Web Configurator The main screen is divided into three parts as below. A -Title Bar, B-Navigation Panel and C -Main Window. (1) A : Title Bar The title bar provides some useful instructions that appear the situation of router. Uptime Title Bar Description Show if the SIM card is inserted in the slot. If yes, RSSI (Received Signal Strength Indicator) shows the current signal strength in a wireless network and the name of telecommunication operator.
(2) B : Navigation Panel-Main Menu and Sub Menu The menu items are divided into main and sub menu to configure the settings and get the status of connectivity on the navigation panel. (3) C : Main Window This section shows the information or setting fields from main menu and sub menu. Status When you enter the web browser in the beginning and have not log in, the first item of main menu shows your status that you are a guest. This status only can view status page without any permission to log in.
INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Item Attribute Alarm OFF Alarm ON Alarm PULSE Force ON Force OFF Force PULSE Status > DO Description Alarm configured to be disabled. Alarm configured to be enabled. Alarm configured to be enabled and DO in pulse mode. DO is force ON and in always mode by SMS/HTTPS. DO is force OFF by SMS/HTTPS. DO is force ON and in pulse mode by SMS/HTTPS. Status > WAN LTE Description Item Attribute WAN LTE The status of LTE. Operator Modem Access Display the name of operator. Show the router to access protocol type.
Status > LAN Ethernet Description Item Attribute IPv4 Address IPv4 Mask IPv6 Address IPv6 Conn Time Ethernet LAN is assigned IPv4 Address. Ethernet LAN is assigned IPv4 Mask. Ethernet LAN is assigned IPv6 Address. IPv6 Connected Time. Status > WiFi Item Attribute Connected Clients Attribute Latitude Longitude Horizontal Altitude Date (UTC) Satellite Description Show the clients who have connected to the device. Status > GPS Item Description Show the latitude information of location.
Status > GPS For those GPS enabled router, you can see Location on the right-top banner of web interface when connecting your GPS function. After clicking Google Maps banner, a map will automatically display the current information of map according to location of router. Configuration > System This system section provides you to configure the following items, including Time and Date, COM Ports, Logging, Alarm, Ethernet, Modbus, and Client List. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
System > Time and Date This section allows you to set up the time and date of router and NTP server. There are two modes at Time and Date Setup, including Get from Time Server and Manual. The default mode is Get from Time Server. If the router has GPS function, you can turn on "GPS Time" for sync time from GPS server.
II. Manual Set up the information of time and date, including year, month, date, and hour, minute, and second. Set up your local time zone. Click Apply to submit your configuration changes. III. Time Zone Setup Set up Daylight Savings as On. Set up Ahead of standard time. Set up the information of Start Date/Time, including Month, Week, Day, Hour and Minute. Set up the information of End Date/Time, including Month, Week, Day, Hour and Minute.
System > Time Zone Setup > Daylight Savings Item Description Turn on/off the Daylight Savings feature. Select from Off or On. Daylight Saving The default is Off. The forward/backward minutes when enter/leave Daylight Ahead of standard time Savings duration. Default is 60 minus. Time to enter Daylight Savings duration. The Month range is 1~12. 1 - Jan. 7 - Jul. 2 - Feb. 8 - Aug. 3 - Mar. 9 - Sep. 4 - Apr. 10 - Oct. 5 - May 11 - Nov. 6 - Jun. 12 - Dec.
IV. Time Server The Time server feature allows user to set a time server for LAN side client to get the time through NTP/SNTP protocol. Server mode Server port Item System > Time Server Description Turn on/off the time server. The UDP port listened by time server. System > COM Ports This section provides you to configure the COM port settings and remotely manage the device through the virtual COM setting.
(3) The console is the command-line interface (CLI) management option for cellular router. You can assign the COM port to be a management port by this option. Note: We suggest to enable at least 1 COM port as your console port and the default console port is COM 1. (4) The interface shows the setting information and click Item Edit Configuration Baud Rate Data Parity to configure. System > COM Ports Description Select from the current Baud Rate. Select from 7 bit or 8 bit.
Select from 1 bit or 2 bit. Select from none, Xon/Xoff or hardware. Stop Flow Control Virtual COM Mode Protocol Select from Disable, Server or Client. Select from TCP or UDP. The host address is only available on client mode. Specify what the domain name or IP address (IPv4 or IPv6) to be connected. Host Address Redirect Port Server Mode: This network package of cellular router is on this port. Client Mode: The network package of remote device is on the remote host.
5.3.2 Logging > Log This section displays all data status. (1) You can choose Filter function to quickly search for your data. (2) When you click Clear, all of the data that displays on the interface will be totally cleared without any backup. (3) When you click Refresh, the system will update and display the latest data from your cellular router. (4) When you click Download Logs, the system will download the latest data from your cellular router.
System > Alarm This section allows you to configure the alarm. Note: (1) If you select SMS in Alarm input/output, you need to add the trust phone number into Contracts/ On Duty. (2) If you select SNMP trap in Alarm output, you need to set up SNMP trap configuration from Service SNMP. (3) If you select E-Mail in Alarm output, you need to set up SMTP configuration from Service SMTP. (4) If you select TR069 in Alarm output, you need to set up TR069 configuration from Service TR069.
Item Mode Alarm Input Alarm Output DI 1 / 2 Trigger DO behavior SMS/E-mail 5.4.1 System > Alarm Description Turn on/off the Alarm configuration. Select from Disable or Enable. The default is Enable. Select from SMS, DI 1, DI 2, VPN disconnect and WAN disconnect as input to trigger alarm. SMS: It means on duty team members on Contacts / On Duty can send SMS to the phone number of using SIM card to trigger alarm. DI 1/2: IO to trigger alarm.
You can click or button to edit or delete the group. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
5.4.2 Alarm > Contacts > Add User Select your naming group and click + Add User button to add your user’s information, including Name, Phone and E-mail. After filling in your information for each row, chose your naming group and click to submit your settings. After submitting your setting, the interface returns to Group window setting. Now you can see your naming group and the user’s information that you have added. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
You can click button to edit the user’s information or click the check box and to delete the user. 5.4.3 Alarm > Duty Schedule Select Duty Schedule to edit the schedule of the on duty group. System > Ethernet This section allows you to configure the Ethernet. For Flow Control, it allows you to configure the Ethernet and solve unstable throughput under heavy loading. Sending 64 Bytes with bandwidth 100M bps traffic to LAN and WAN at the same time, the throughput may drop to zero at either side.
For one LAN port (M300/M300-G/) For three LAN ports (M301/M301-G/M301-TG/M301-TPG/M301-GW) INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
System > Ethernet Ports Item Description Ethernet Ports Status Show the connectivity status of LAN and WAN. Select from Auto, 100M Full, 100M Half, 10M Full, 10M Half Ethernet Ports Configurations and Disable. MTU is the Maximum Transmission Unit that can be sent WAN Ethernet over the WAN Ethernet interface. It allows users to adjust the MTU size to fit into their existing network environment. Allow user to control the traffic ingress from Ethernet LAN Flow Control or WAN.
For Online type, the information shows IP address and MAC address when the client is online. System > Client List Item Description List Type DHCP Client: List all clients’ information when it is via DHCP. Online: List the information when it is online. System > LED This section allows you to set up the function led. System > Client List Item Description Function LED Default: - ON: VPN connected. - Slow Blinking: WAN connected. - OFF: No WAN connection.
Configuration > WAN This section allows you to configure WAN, including Priority, Ethernet and IPv6 DNS. WAN > Priority You can set up the priority of WAN. WAN > Priority Description Item Priority ETH First: WAN Ethernet is first priority and the second priority is LTE. The default is ETH First. LTE Only: The priority is only LTE. ETH Only: The priority is only Ethernet. LTE First: WAN LTE is first priority and the second priority is Ethernet. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
WAN > Ethernet 6.2.1 WAN Ethernet Configuration This section provides three options, including DHCP Client, PPPoE Client and Static IPv4. The default is DHCP Client. WAN > Ethernet Description Item There are three options to obtain the IP of WAN Ethernet. WAN Ethernet DHCP Client: DHCP server-assigned IP address, netmask, gateway, and DNS. PPPoE Client: Your ISP will provide you with a username and password. This option is typically used for DSL services.
When selecting “DHCP Client”, you can set up DNS Server Configuration. For IPv4 DNS Server, it provides three options to set up and each option has provided with “From ISP”, “User Defined” and “None” to configure. Item IPv4 DNS Server #1 IPv4 DNS Server #2 IPv4 DNS Server #3 WAN > Ethernet > DHCP Client Description Each setting DNS Server has three options, including From ISP, User Defined and None. When you select From ISP, the IPv4 DNS server IP is obtained from ISP.
When you select Static IPv4, the interface shows the information of configuration, including IP Address, IP Mask and Gateway Address. WAN > Ethernet > Static IPv4 Description Item Static IPv4 Configuration IP Address Fill in the IP Address. IP Mask Fill in the IP Mask. Gateway Address Fill in Gateway Address. DNS Server Configuration IPv4 DNS Server #1 IPv4 DNS Server #2 The IPv4 DNS server IP is input by user. IPv4 DNS Server #3 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
6.2.2 Ethernet Ping Health If you configure “WAN Priority” to “Auto” mode, the system would choose the cost effective connection first such as Ethernet. However, in case the Ethernet connection exist but it is unable to access internet; you can enable “Ethernet Ping Health” and the system would switch to LTE connection and switch back whenever Ethernet is able to access internet again. WAN > Ethernet > Ethernet Ping Health Item Description Ethernet Ping Health Select from Disable or Enable.
In addition, you can check which WAN is actually using from “Status” page. The interface will be shown check mark (✓ symbol) on the connection title. For IPv6 address, the status will be displayed on LAN Etherent Interface when IPv6 is using as WAN connection. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
WAN > IPv6 DNS This section allows you to set up IPv6 DNS Server Configuration. For IPv6 DNS Server, it provides three options to set up and each option has provided with “From ISP”, “User Defined” and “None” to configure. WAN > IPv6 DNS Item DNS Server Configuration IPv6 DNS Server #1 IPv6 DNS Server #2 IPv6 DNS Server #3 Description Each setting DNS Server has three options, including From ISP, User Defined and None. When you select From ISP, the IPv6 DNS server IP is obtained from ISP.
Configuration > LTE This section allows you to configure LTE Config, GPS Config, Dual SIM, Usage Display, SMS, Engineer Info, and DNS. LTE > LTE Config 7.1.1 LTE Configuration You can set up the LTE Configuration and LTE Ping Health. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Item LTE Config MTU 7.1.2 LTE > LTE Config Description Auto: Automatically connect the possible band. 4G Only: Connect to 4G network only. 3G Only: Connect to 3G network only. 2G Only: Connect to 2G network only. MTU is the Maximum Transmission Unit that can be sent over the LTE interface. It allows user to adjust the MTU size to fit into their existing network environment.
IPv4 Host 2 Input the address of IPv4 Host 2. IPv6 Host 1 Input the address of IPv6 Host 1. IPv6 Host 2 Input the address of IPv6 Host 2. Hint Show the usage descriptions. LTE > GPS This section shows the status of GPS and allows you to set up GPS Configuration and connect RS232 from the used router to have more detailed information for your specific purpose. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Note: You have to select RS232 item and the interface shows the options of COM Port. You can download software from internet and activate the GPS Configuration to display what information you need from your software. LTE > GPS Config Description Item Report to Select from RS232 and LOG. COM Port Select from COM1 and COM2. NMEA Type Select from GSV, GGA, RMC and GSA.
LTE > Dual SIM This section allows you to understand the status of connectivity for Dual SIM, SIM1 and SIM2. The Used SIM item has three options and the default is on Dual SIM when first connection. The Connect Retry Number field can set up the re-connecting time if your one of the SIM cards on Dual SIM mode can’t connect successfully. The default of Connect Retry Number is 3 minutes. For Roaming Switch, it means Switch to another SIM when roaming is detected.
If you have selected either SIM1 or SIM2 for the Used SIM to connect, the Roaming Switch and Connect Retry Number would not to be shown in the interface. You can set up the SIM cards, SIM1 Configurations or SIM2 Configurations. SIM PIN: If you have configured SIM PIN code into SIM card, please type SIM PIN code in Dual SIM configuration to make unlock successfully. SIM PUK: If you have typed wrong SIM PIN code and retried more than 3 times, the SIM Card will become the blocked mode.
Change SIM PIN：If you want to change SIM PIN code, you can click Change button and type old SIM PIN code and new SIM PIN code. Please aware not to exceed the retry number (PIN remaining number and PUN remaining number). Note: The interface will be shown the tick symbol at the same time when each SIM Card has been connected. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
LTE > Dual SIM Item Description Connect Policy Current SIM Card Display which SIM slot is using. Status of SIM Card Connectivity Disable Roaming NO: Make the connection even the device is in roaming state. YES: No connection when the device in roaming state. Dual SIM: Automatically switch SIM card when the current SIM card fail to make connection. SIM1: Only use SIM1 card slot. SIM2: Only use SIM2 card slot.
Password The password can be input by user or the system will search from internal database if the password is blank. Confirm Password Double confirm password. Auth (NONE/PAP/CHAP) Configure Authentication mode with three modes, including NONE, PAP, and CHAP. If Auth mode is not None, most servers require username and password above. Change SIM PIN When you change the SIN PIN, please aware not to exceed the retry number (PIN remaining number and PUN remaining number).
LTE > Usage Display This section shows the status of current SIM card, operator, IMSI and the charts for Real Time, Hourly, Daily, Weekly, and Monthly. (1) Real-Time Usage: It displays accumulated real-time Download/Upload/Total MB for 10 seconds period. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
(2) Hourly Usage: It displays Download/Upload/Total MB per hour in one day for current using SIM card and the view window size is 24 hours. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
(3) Daily Usage: It displays Download/Upload/Total MB per day in one month for current using SIM card and the view window size is 31 days. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
(4) Weekly Usage: It displays Download/Upload/Total MB per day in one week for current using SIM card and the view window size is 7 days. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
(5) Monthly Usage: It displays Download/Upload/Total MB per month in one year for current using SIM card and the view window size is 12 months. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
LTE > SMS This section provides two settings, one is SMS Action and the other is View SMS. (1) When enabling SMS Action, it allows trust phone number which in Contacts/On Duty list by sending key words SMS to trigger device setting/action/query status. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
(2) View SMS allows you to review the information of SMS that you have received, including the state, phone and date and time. You can click button to clear all messages, and INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 view button to review all messages, button to reload all messages.
LTE > Serving Cell This section displays all parameters, including the following items: LTE > Serving Cell Item RSRP RSRQ Description Reference Signal Received Power. Reference Signal Received Quality. SINR Loarithmic value of SINR. RSCP The Received Signal Code Power Level of the cell that was scanned. ECIO Carrier to noise ratio in dB = measured Ec/lo value in dB. Cell Identity eNB ID (20 Bits) + Cell ID (8 Bits). eNB ID eNB ID. Cell ID Cell ID. PCI ID Physical Cell ID.
LTE > Lock PCIs This section allows you to search neighbors, lock/unlock PCIs and save locked PCIs. 7.7.1 Neighbors LTE > Lock PCIs > Neighbors Item Description Search Search Neighbors from the Air for further action. Lock Select multiple PCIs (Physical Cell ID) from Neighbor List to lock. Unlock Unlock all. Save for bootup locked Save selected locked PCIs for next boot up. 7.7.2 Locked PCIs Click Refresh button to get all the most recent locked PCIs (Physical Cell ID) information. 7.7.
LTE > Lock Bands Please check Hint for module support bands and then select your desired multiple bands to lock for use. LTE > DNS This section allows you to setup LTE specific DNS setting. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
LTE > DNS Item Description 1. Each setting DNS Server has three options, including From ISP, IPv4 DNS Server #1 IPv4 DNS Server #2 IPv4 DNS Server #3 User Defined and None. 2. When you select From ISP, the IPv4 DNS server IP is obtained from ISP. 3. When you select User Defined, the IPv4 DNS server IP is input by user. Configuration > WiFi (M301-GW) WiFi > WiFi Config This section allows you to set up the Wi-Fi configuration. Item Description AP Enable Turn on/off the Wi-Fi Network.
Item Description Security Option None / WPA-PSK(TKIP) / WPA-PSK(AES) / WPA2-PSK (TKIP) / WPA2-PSK(AES)/ WPA2(MIX). Passphrase The legal length is 8 ~ 63. The string should belong to [0-9 A-F a-f]. Key Update 0 means no update or 30~86400 seconds update period. WiFi > Client List This section allows you to see all the Connected WiFi Client List. Item Description MAC Address MAC Address IP Address Client IP Address Connected Time Connected Time in Seconds.
Configuration > LAN This section allows you to configure LAN IPv4, LAN IPv6, VLAN and Subnet. LAN > IPv4 Set up your IP Address and IP Mask. Also, fill in the information of DHCP Server Configuration. Item LAN > IPv4 Description IP Address:192.168.1.1 IP Mask:255.255.255.0 Both of them are default, you can change them according to your local IP Address and IP Mask. Turn on/off DHCP Server Configuration. Enable to make router can lease IP address to DHCP clients which connect to LAN.
LAN > IPv6 Select your type of IPv6, which shows Delegate Prefix from WAN or Static, and then set up DHCP Server Configuration, including Address Assign, DNS Assign and DNS Server. LAN > IPv6 Item Description Delegate Prefix from WAN Select this option to automatically obtain an IPv6 network prefix from the service provider or an uplink router. Static Select this option to configure a fixed IPv6 address for the cellular router’s LAN IPv6 address.
When VLAN Mode is set to Tag Base, the VLAN setting window will appear as shown below. For each row, the settings can be enabled or disabled by checkbox and select the Subnet and the VLAN ID (VID). The Subnet sets up the IP address and IP mask for the router, so this router can communicate with the third party by this IP address and IP mask on this VLAN. (Note: The NET1 can’t remove it and fixes in the first row.
Type 2: For 3-port LANs, the VLAN Mode allows you to select Off, Tag Base (802.1p) or Port Base. When VLAN Mode is set to Tag Base, the VLAN setting window will appear as shown below. The VLAN Isolation function allows administrator to separate the different Subnet (VLAN). When it is on, the different Subnet (VLAN) user cannot communication each other. For each row, the settings can be enabled or disabled by checkbox and select the Subnet and the VLAN ID (VID).
which is a gate allows those ports to access internet or the router. The PVID and Tag Mode are for LAN1, LAN2 and LAN3 ports. The PVID provides the untagged devices to communicate with third-party devices. (Note: The untagged devices mean not to support 802.1p VLANs.) The Tag Mode can be Trunk or Access. The Trunk allows to carry multiple 802.1p VLANs traffic. The Access allows the untagged devices to communicate with a specific 802.1p VLAN by assigned PVID.
Item Mode Enable Port LAN > VLAN (3-port LANs) > Port Base Description The VLAN mode is Off, Tag Base (802.1p VLAN) or Port Base. The assigned row of setting is enabled. The port is shown to assign the port to a VLAN which the device is connected from LAN 1, LAN2, LAN3 and Router. LAN > Subnet This section allows you to get the information of IP Address and IP Mask and edit for the VLAN Subnets from DHCP Server Configuration.
IP Routing This section allows you to configure the Static Route, RIP, OSPF, and BGP. IP Routing > Static Route This section allows you to configure the Static Route. A static route is a pre-determined path that network information must follow to reach a specific host or network. Item Mode Settings Mode IP Routing > Static Route > Settings Description The setting is for full network. Select from Off or On. The setting is for the specific network. Select from Off or On.
Name Destination Gateway Interface Set up each name for your running host or network. Fill in the destination of a specific subnet or IP from network. Fill in the gateway address of your router. Select the interface from LAN or Ethernet. Note: The destination field is required to fill in. The format of destination is IPv4 or IPv6. The address of gateway or the type of interface can be chosen one or both to fill in the field.
The status tab shows the information from the settings of static route. IP Routing > Static Route > Status Description Item Mode The setting is open for full network. Select from Off or On. Status Destination Show the status of destination from the setting section. Gateway Show the status of gateway from the setting section. Interface Show the status of interface from the setting section. Protocol Show the status of protocol from the setting section.
Item IP Routing > RIP > General Description General Mode Select from Off or On to open or close RIP function. Redistribute local routes Redistribute connected routes Redistribute OSPF routes Select from Off or On to open or close redistribute local routes. Select from Off or On to open or close redistribute connected routes. Select from Off or On to open or close redistribute OSPF routes. Redistribute BGP routes Select from Off or On to open or close redistribute BGP routes.
IP Routing > RIP > Interfaces Description Item Interfaces Mode Interface Authentication Key Key ID Passive Select from Off or On to use or not to use the RIP function in the interface. Select from eth1 (WAN Ethernet) or LAN. Select from none or md5 to approve authentication. Note: Please offer Key and Key ID when you select md5 to use HMAC-MD5. The key used for authentication (maxlength=16). The ID of the key used for authentication (1-255).
Redistribute RIP routes Redistribute BGP routes On: Redistribute connected routes to networks which are directly connected to the device. Off: Not redistribute RIP routes learned via the RIP routing protocol. On: Redistribute RIP routes learned via the RIP routing protocol. Off: Not redistribute BGP routes learned via the RIP routing protocol. On: Redistribute BGP routes learned via the RIP routing protocol. (2) Interfaces Configuration There are 2 parts for OSPF Interfaces configuration.
IP Routing > OSPF > Interfaces Item Description Mode Select from Off or On to use or not to use the OSPF function in the interface. Interface Select from eth1 (WAN Ethernet) or LAN. Select from none or md5 to approve authentication. Authentication Note: Please offer Key and Key ID when you select md5 to use HMAC-MD5. Key The key used for authentication (maxlength=16). Key ID The ID of the key used for authentication (1-255). Cost The cost for sending packets via this interface (0: OSPF defaults).
Item Mode Prefix Prefix Length Area IP Routing > OSPF > Networks Description Select from Off or On to enable the network setting. Set Prefix of the network Set Length of the prefix Routing area to which this interface belongs (0-65535, 0 means backbone) IP Routing > BGP This section allows you to set up BGP with three sub configurations, including General, Neighbors and Networks configuration.
(2) Neighbor Configuration The neighbors sub configuration is used to configure all the BGP routers to peer with and the maximum neighbors is 16. Item Mode IP Address AS Number Multihop Update Source Mode Update Source Address IP Routing > BGP > Neighbors Description Select from Off or On to enable the neighbor setting. Set IP address of the peer router. Autonomous system number of the peer router. Allow multiple hops between this router and the peer router.
(3) Networks Configuration The networks sub configuration allows to add IP network prefixes that shall be distributed via BGP in addition to the networks that are redistributed from other sources as defined on the general sub configuration and the maximum neighbors is 16. Item Mode Prefix Prefix Length IP Routing > BGP > Networks Description Select from Off or On to enable the network Set Prefix of the network Set Length of the prefix INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Configuration > VPN This section allows you to configure Open VPN, IPsec, GRE, PPTP Server, and L2TP. VPN > Open VPN 11.1.1 Open VPN Common Setting (1) This section allows you to configure the Open VPN parameters. The default mode is Disable. Click button to edit Open VPN Connection. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
(2) From Setting tab, you can set up the connection of Open VPN. (3) From Log tab, the interface will be shown the status of connection to make you follow the suitation whenever is successful or fail connection. VPN > Open VPN > Setting Item Mode Description Turn on/off Open VPN to select Disable or Enable. VPN Mode Server: Tick to enable Open VPN server tunnel. Client: Tick to enable Open VPN client tunnel. The default is Client. Custom: This option allows user to use the .
Roadwarrior (default) Bridging: Bridging the VPN tunnel and LAN/VLAN VPN Type Status Display the status of Open VPN. TLS Mode Select from Disable or Enable for data security. The default is Disable. Cipher The Open VPN format of data transmission. IPv6 Mode Select from Disable or Enable. The default is Disable. Device Select from TUN or TAP. The default is TUN. Protocol Select from UDP or TCP Client which depends on the application. The default is UDP.
11.1.2 Open VPN Client Setting Select option “Client” from VPN Mode, and this section allows you configure the Open VPN client route and authentication files. The files could be imported by clicking Import button and the file should be downloaded from Open VPN server. Item Client Server Address Route Client Networks VPN > Open VPN > Client VPN Mode Description Fill in WAN IP of Open VPN server. Select from Off or On. This setting needs to match the server side.
11.1.3 Open VPN Server Setting Select option “Server” from VPN Mode, and this section allows you to configure the server status of VPN Mode. Note: When selecting the On option of Route Client Networks, the Open VPN server will route the client traffic or not. You should fill in the client IP and netmask when this option is enabled. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Item Server VPN Network VPN Netmask Roadwarrior: Route Client Networks VPN > Open VPN > Server VPN Mode Description The network ID for Open VPN virtual network. The netmask for Open VPN virtual network. Select from Off or On. The Open VPN server will route the client traffic or not. User should fill in the client IP and netmask when this option is enabled. NAT 1:1 NAT Server- Server Security Root CA Cert, Key and DH Server- User Security User 1 - User 8 11.1.
Item Mode VPN Mode Custom Config VPN > Open VPN > Custom VPN Mode Description Select from Disable or Enable. The default is Disable. Select from custom mode. Import Open VPN configuration. Username Fill in the username if the imported file has already set up the username. Password Fill in the password if the imported file has already set up the password. Status Display the connection status of Open VPN, such as IP address and the connected time. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
VPN > IPsec This section allows you to set up IPsec Tunnel. The seting has four tags, Connections, Authentication IDs, X.509 Certificates, and CA Certificates. For the IPsec connection which be authenticated by pre-shared key, it only need to setup the Connections and Authentication IDs. For the IPsec connection which be authenticated by RSA or TLS, the settings must cover the four parts. Item Mode VPN > IPsec > General setting Description Select from Disable or Enable. The default is Disable.
(1) IPsec Phase 1 Setting VPN > IPsec > Connections > Phrase 1 setting Item Description Mode Select from Disable or Enable. The default is Disable. Name Short name or description. Protocol Select from IKEv1 or IKEv2. The default is IKEv1. Select from Disable or Enable. The default is Disable. When this option be enabled, the connection will be running on IKEv1 Aggressive mode Aggressive mode. (Note: This option only work on IKEv1.) Select from PSK (default), RSA, EAP-TLS.
Local Host Local ID Remote Host Remote ID The IP address of the router's public network interface. If this value is blank, the connection will automatically detect the correct IP address. The identification for authentication on local peer. Select from the created authentication IDs or empty. The IP address of the peer gateway's public network interface. If this value is blank, the connection will act the server role to wait the incoming request. The identification for authentication on remote peer.
Note: (1) This option only work on Policy-based IPsec VPN type. (2) This option will be setup as 0.0.0.0/0 automatically on IPsec Route-based VPN. (3) This option will be omitted when the service option is L2TP. (For host-to-host connection only) The private subnet behind the peer gateway. The available formats are A.B.C.D, A.B.C.D/M, A.B::C.D or A.B::C.D/M If this value is blank, the connection will set it as the `Remote Host` of Phase 1 setting.
Item ID Type Pre-shared Key / X.509 Certificate VPN > IPsec > Authentication IDs Description The identification for authentication. It only work on PSK type. Select from PSK or RSA. The default is PSK. PSK: Use the pre-shared key to authenticate the connection. RSA: Use the certificate to authenticate the connection. The X.509 certificate for authentication. The certificate could be generated or imported by X.509 Certificates section.
11.2.3 IPsec > X.509 Certificates This section provides the certificates setting which could be used by IPsec authentication ID. Each certificate will show the State and Subject information and provide the controlling buttons to let user import, download or edit the certificate/key files. Note: Please apply the changes before editing the Authentication IDs settings. 11.2.4 IPsec > CA Certificates This section provides the CA certificates setting which could check whether the X.
Certificate Generation There are two kinds of certificate could generated by router, one is self-signed CA, the other is X.509. To generate the self-signed CA certificate: 1. Navigate to CA Certificates tab. 2. Click the edit button to navigate the Certificate Setting page. 3. Fill up the informations of the CA certificate. 4. Click the Generate Certificate button and Save. 5. Click the Apply button to apply the changes. To generate the X.509 certificate: 1.
Certificate Setting Item Country Name State Location Orgnization Name Orgnization Unit Name Common Name E-mail VPN > IPsec > CA Certificates Description The 2-letter country code. e.g. US This option is required for certificate generation. The state name. e.g. Some-State The location name. e.g. city-name The orgnization name. e.g. company-name This option is required for certificate generation. The orgnization unit name. The host name associated with the certificate. e.g. example.
2. Click the + Add X.509 button. The list will pop up the balnk X.509 entry. 3. Click the Cert Import button. 4. Select the X.509 certificate file from browser window. 5. When the file be selected and everything all right, the state should be Cert or Key is missed. 6. Click the Key Import button. 7. Select the X.509 key file from browser window. 8. When the state shown Imported, the importing procedure is completed.
5. Navigate to the Connections tab. 6. Add IPsec connection (1) Edit the phase 1 setting (2) Change Mode from Disable to Enable. (3) Save the changes. (4) Edit the phase 2 setting (5) Fill up the Local Subnet and Remote Subnet. e.g. Local Subnet: 192.168.100.0/24, Remote Subnet: 192.168.200.0/24 (6) Save the changes 7. Apply the changes INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Configure Net-to-Net VPN Client 1. Change Mode from Disable to Enable. 2. Navigate to the Authentication IDs tab. 3. Add the authentication ID Keep ID as blank, Type as PSK and fill the password to Pre-shared Key field. 4. Apply the changes 5. Navigate to the Connections tab. 6. Add IPsec connection (1) Edit the phase 1 setting (2) Change Mode from Disable to Enable. (3) Fill the IP address of VPN server to Remote Host Field. e.g. Remote Host: 10.0.0.
INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
IPsec Net-to-Net with Pre-shared Key result Server Client RSA authentication - Server Prepare the self-signed CA certificate 1. Navigate to the CA Certificates tab. 2. Edit the self-signed CA. (Skip it if the self-signed CA is generated.) (1) Fill the information of the self-signed CA (2) Country Name: CN (3) Orgnization Name: Company (4) Common Name: IPsec.ca (5) Click the Generate Certificate button (6) Save the changes 3. The State of self-signed CA will be Waiting Apply 4. Apply the changes 5.
Prepare the X.509 certificates 1. Navigate to the X.509 Certificates tab. 2. Click the add button to add the X.509 certificate 3. Edit the newly X.509 certificate for the local router. (1) Fill the information of the X.509 certificate (2) Country Name: CN (3) Orgnization Name: Company (4) Common Name: local.IPsec (5) Click the Generate Certificate button (6) Save the changes 4. Click the add button to add the X.509 certificate 5. Edit the newly X.509 certificate for the remote router.
INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Prepare the authentication IDs 1. Navigate to the Authentication IDs tab. 2. Add tow authentication IDs Keep first one's ID as blank, Type as RSA and select the C=CN, O=Company, CN=local.IPsec X.509 certificate. Keep second one's ID as blank, Type as RSA and select the C=CN, O=Company, CN=remote.IPsec X.509 certificate. 3. Apply the changes Setup the connection on VPN server 1. Change Mode from Disable to Enable. 2. Navigate to the Connections tab. 3.
INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
RSA authentication – Client Prerequisite for VPN Client with RSA authentication 1. The self-signed CA certificate which generated by VPN server 2. The X.509 certificate and key for remote router which generated by VPN server These files could be downloaded from VPN server. The detail could reference “ How to download the certificate section ” of user manual. Import the CA certificate and the X.509 certificate Please refer the Certificate Importing section of user manual to import the required files.
Setup the connection on VPN client 1. Change Mode from Disable to Enable. 2. Navigate to the Authentication IDs tab. 3. Add one authentication ID Keep second one's ID as blank, Type as RSA and select the C=CN, O=Company, CN=remote.IPsec X.509 certificate. 4. Apply the changes 5. Navigate to the Connections tab. 6. Add IPsec connection (1) Edit the phase 1 setting (2) Change Mode from Disable to Enable. (3) Change Auth Type from PSK to RSA. (4) Change the Local ID and select the remote.
INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
IPsec Net-to-Net with RSA authentication result Server Client INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
11.2.6 IPsec > Hub-Spoke Topology This section explains how to set Hub-Spoke Topology and connect two (or more) gateways to a central one. This requires one connection between each spoke and the central hub (n - 1 connections for n gateways) For example, in the Hub-and-Spoke topology, we want to send the essential traffic through IPsec VPN tunnel. Thus, we will set the Route-based VPN and Static Route to handle this situation.
Hub configuration Hub IPsec configuration In this example, we have two spokes on the topology. Thus, the Hub needs to set two IPsec connections for each spoke. 1. Change Mode from Disable to Enable. 2. Change Type from Policy-based to Route-based. 3. Navigate to the Authentication IDs tab. 4. Add the default pre-shared key ID: (The ID is blank.) Type: PSK Pre-shared Key: defaultpsk 5. Add the authentication ID for Spoke 1 ID: spoke1 Type: PSK Pre-shared Key: testspoke1 6.
INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Hub Static Route configuration 1. Navigate to the IP Routing > Static Route page 2. Add the static route for IPsec Spoke 1 connection Mode: On Destination: 192.168.100.0/24 Interface: Select the IPsec interface by connection number e.g. If your IPsec connection is #1 then the interface should be IPsec#1. 3. Add the static route for IPsec Spoke 2 connection Mode: On Destination: 192.168.200.0/24 Interface: Select the IPsec interface by connection number e.g.
Spoke 1 configuration Spoke 1 IPsec configuration 1. Change Mode from Disable to Enable. 2. Change Type from Policy-based to Route-based. 3. Navigate to the Authentication IDs tab. 4. Add default pre-shared key (1) ID: (2) Type: PSK (3) Pre-shared Key: defaultpsk 5. Add one authentication ID (4) ID: spoke1 (5) Type: PSK (6) Pre-shared Key: testspoke1 6. Apply the changes 7. Navigate to the Connections tab. 8. Add IPsec connection (7) Edit the phase 1 setting (8) Change Mode from Disable to Enable.
INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Spoke 1 Static Route configurtation 1. Navigate to the IP Routing > Static Route page 2. Add the static route for IPsec connection Mode: On Destination: 192.168.200.0/24 Interface: Select the IPsec interface by connection number e.g. If your IPsec connection is #1 then the interface should be IPsec#1. 3. Apply the changes INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Spoke 2 configuration Spoke 2 IPsec configuration 1. Change Mode from Disable to Enable. 2. Change Type from Policy-based to Route-based. 3. Navigate to the Authentication IDs tab. 4. Add default pre-shared key ID: (The ID is blank.) Type: PSK Pre-shared Key: defaultpsk 5. Add one authentication ID ID: spoke2 Type: PSK Pre-shared Key: testspoke2 6. Apply the changes 7. Navigate to the Connections tab. 8.
INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Spoke 2 Static Route configurtation 1. Naviagte to the IP Routing > Static Route page 2. Add the static route for IPsec connection Mode: On Destination: 192.168.100.0/24 Interface: Select the IPsec interface by connection number e.g. If your IPsec connection is #1 then the interface should be IPsec#1. 3. Apply the changes INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
VPN > GRE This section allows you to set GRE configuration. The default mode is off. Generic Routing Encapsulation (GRE) is one of the available tunneling mechanisms which uses IP as the transport protocol and can be used for carrying many different passenger protocols. The tunnels behave as virtual point-to-point links that have two endpoints identified by the tunnel source and tunnel destination addresses at each endpoint. The GRE Mode is on.
VPN > PPTP Server This section provides 2 sub configurations, including General Configuration and Clients Configuration. (1) General Configuration VPN > PPTP Server > General Item Mode Server Address Client Address Range Description Select from Off or On to enable PPTP Server. IP addresses to be used at the local end of the tunneled PPP links between the server and the client. A list of IP addresses to assign to remote PPTP clients. (2) Clients Configuration There are two parts for Clients configuration.
INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
VPN > L2TP This section allows you to set up L2TP and provides three modes for configuration, including Off, Server, and Client Mode. (1) Genernal Mode: The defualt mode is Off as shown in the following interface. (2) Server Mode: Choose the Server mode and the interface will be changed as below. VPN> L2TP > Server Mode Item Description Mode Select from Off or On to set the client setting. The authentication method for L2TP connection.
Fill in the username and password and click the and manage them under server mode. button, you can create the L2TP client (3) Client Mode: Choose the Client mode and the interface will be changed as below. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Item Mode Server Auth Username Password NAT Default route VPN> L2TP > Client Mode Description Turn on/off this L2TP connection The L2TP server address or hostname. The authentication method for L2TP connection. Should same as L2TP server's auth type. The username for L2TP authentication. The password for L2TP authentication. Turn on to translate the LAN subnet IP to L2TP virtual IP. Turn on to redirect all traffic to L2TP tunnel.
Configuration > Firewall This section allows you to configurate Port Forwarding, DMZ, IP Filter, MAC Filter, URL Filter, NAT and IPS. Firewall > Port Forwarding This section allows you to set up Port Forwarding and click INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.8 edit button to configure.
Firewall > Port Forwarding Item Description Description Turn on/off Port Forwarding to select Disable or Enable. The default is Disable. Descript the name of Port Forwarding. Protocol Select from UDP or TCP Client which depends on the application. Source Port Begin Fill in the beginning of source port. Source Port End Fill in the end of source port. Mode Destination IP Fill in the current private destination IP. Destination Port Begin Fill in the beginning of private destination port.
Firewall > IP Filter This section allows you to configure IP Filter. After clicking button, you can edit your IP protocol, source/port and destination/port. The default is Disable mode and Black list. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Black List: When set as Black List, the specific IP address/port in rule will be blocked. White List: When set as White List, the specific IP address/port in rule will be accepted. Management IP Address: For White List only. Since White List will block all user communication except those has been assigned by rules, it is better to assign a specific IP address for the administrator to access the Router which is Management IP Address. Service Ports: For White List only.
Edit Black/White List (1) Click button to edit Black/White list. (2) The default is Disable mode as the following interface (Black/White). INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Firewall > IP Filter Item Mode Protocol Source IP Source Port Destination IP Destination Port Description Select from Disable or Enable. The default is Disable. Select from All, ICMP, TCP or UDP. Fill in your source IP address. Fill in your source port. Fill in your destination IP address. Fill in your destination port. (3) When selecting Enable Mode, the protocol is TCP. The source IP has IPv4 and IPv6 setting formats.
Firewall > MAC Filter This section allows you to set up MAC Filter. After clicking address. Item Mode MAC Address button, you can edit your MAC Service > MAC Filter Description Select from Disable or Enable. The default is Disable. Fill in your MAC address. Note: Setting up MAC address, please use: colon symbol (e.g. xx : xx : xx : xx) or – hyphen symbol to mark (e.g. xx-xx-xx-xx). INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Firewall > URL Filter This section allows you to set up URL Filter. After clicking filter and information. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Note: Please not include “https://” or “http://” for the URL address in the Full Filter. Item Mode Filter Key / Full Firewall > URL Filter Description Select from Disable or Enable. The default is Disable. Select from Key or Full. The default is Key. Fill in your Key / Full information. Firewall > NAT This section allows you to set NAT configuration.
Firewall > IPS This section allows you to set IPS configuration. IPS prevents the system from being attacked by the Internet. The system allows to limit the max incoming connection number from WAN per source IP address to prevent system resource exhausted. Also, the system allows to limit the max incoming connection retry number during a specific time period from WAN per source IP address to prevent too many unexpected connections retry event from causing system busy.
Configuration > Service This section allows you to configure the SNMP, TR069, Dynamic DNS, VRRP, MQTT, UPnP, SMTP, and IP Alias. Service > SNMP 13.1.1 Community This section allows you to set the SNMP configuration. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Service > SNMP > Community Item Description Mode Select from Disable or Enable to configure SNMP. Community Configure community setting with three options, including # 1, # 2 and #3. Mode Select from Disable or Enable. Name Name each community. Access Select from Read-Only or Read-Write. 13.1.2 SNMP v3 User configuration For SNMP version 3, you need to register authentication and allow a receiver that confirm the packet was not modified in transit.
13.1.3 SNMP trap configuration This section allows you to set up the SNMP trap configuration when you select the SNMP trap function from Alarm output of system for your router. With SNMP trap setting, you can know the status of remote device. Service > SNMP > SNMP trap configuration Item Description Mode Select from Disable or Enable. The default is Disable. Community Name Fill in your community name. Destination The destination (domain name/IP) of remote SNMP trap server.
Service > TR069 This section allows you to set up TR069 client configuration. You can get information how to install TR069 Server (GenieACS Installation) from the application configuration chapter. Item Mode ACS URL ACS Username ACS Password Periodic Inform Periodic Inform Interval(Sec) Connection Request Username Connection Request Password Service > TR069 Description Select from Disable or Enable. The default is Disable. Fill in the URL address of ACS (Auto-Configuration Server).
Service > Dynamic DNS This section allows you to set up Dynamic DNS. Item Mode Service Provider Host Name Token ID Host Secret ID Username Password Update Period Time (Sec) IP Address Selection Service > Dynamic DNS Description Turn on/off this function to select Disable or Enable. The default is Disable. Select the Service Provider of Dynamic DNS. Fill in your registered Host Name from Service Provider. Fill in your Token ID from Service Provider. Fill in your Secret ID from Service Provider.
Note: There are six options of Service Provider as below to explain the information. Service Provider dynv6.com Host Name Register hostname, e.g. tester.dynv6.net Token ID The token ID, e.g. v_ABjMMQxeAnWv5UwtuVn1QBriynzq Service Provider www.nsupdate.info Host Name Register hostname, e.g. tester.nsupdate.info Host Secret ID The Host Secret ID, e.g. e2AMDsLmVF Service Provider www.duckdns.org Host Name Register hostname, e.g. tester.duckdns.org Token ID The token ID, e.g.
Service > VRRP This section allows you to configure VRRP. Item Mode Group ID Priority Virtual IP Service > VRRP Description Select from Disable or Enable. The default is Disable. Specify which VRRP group of this router belong to (1-255). The default is 1. Enter the priority value from 1 to 254. The larger value has higher priority. The default is 100. Each router in the same VRRP group must have the same virtual IP address. The default is 0.0.0.0.
Service > MQTT This section makes you configure MQTT which allows the MQTT client to send the message within specific topic or channel. By default, the router does not allow anonymous to read/write the MQTT topic or channel. Thus, you need to create the account with username and password for MQTT client in the web UI. Mode Port Item Manage Users Username Password ACLs User Topic Service > MQTT Description Select from Disable or Enable. The default is Disable. Fill in the port number of MQTT application.
Take for example, the interface is shown as below. The Manage Users section will show all users that you create. Moreover, each user can use the delete button to delete it. For the ACLs control, user can specify what topic should be limited. In this case, we set up the publisher pub1 to write the critical topic. Additionally, we also allow the subscribers sub1 and sub2 to read the critical topic. Thus, only the sub1 and sub2 can receive it when pub1 sending the message.
Service > UPnP This section allows you to set up UPnP confirguration to select the mode from Disable or Enable. The default UPnP is enabled for the cellular router. Note: UPnP™ (Universal Plug and Play) is a set of protocols that allows a PC to automatically discover other UPnP devices (anything from an Internet gateway device to a light switch), retrieve an XML description of the device and its services, control the device, and subscribe to real-time event notification.
Service > IP Alias This section allows you to set IP Alias configuration. IP Alias is associating more than one IP address to a network interface. With IP Alias, one node on a network can build multiple connections with the network, each serving a different purpose. IP Alias can be used to provide multiple network addresses on a single physical interface. Mode Entries Item Add / Edit IP Alias Entry Service > IP Alias Description Select from Off or On to enable the IP Alias.
Service > QoS (Quality of Service) QoS (Quality of Service) refers to a network's ability to achieve maximum bandwidth and allow minimum bandwidth. It guarantees the minimum and limit the maximum bandwidth for certain class of traffic. The QoS configuration has three parts, including ISP bandwidth, QoS and Status. ISP bandwidth allows user to configure the max bandwidth for upstream and downstream of specific WAN interface. Upstream means from LAN to WAN. Downstream means WAN to LAN.
13.9.2 QoS You can select QoS tab and show a overall view for QoS configuration. At right side of window, there are three buttons. botton allows you to edit QoS Entry and configure QoS settings. button allows you to adjust priority of the QoS entry. The first QoS entry is the highest priority. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
The QoS entry configuration page has three parts for classify traffic, assign bandwidth, and group IP address bandwidth. 1. Classify traffic by following items: Mode Name Item Interface Direction IPv4v6 Address Protocol Port Begin/Port End VLAN follow vid of Service > QoS > Edit QoS Entry Description Select from Disable or Enable QoS. The setting can be edited or deleted the existed entries. The interface of QoS entry is either WAN Ethernet or LTE and both options.
2. Assign bandwidth by following items: Min Rate / Max Rate: The unit is kilobits per second. Min Rate guarantee the minimum bandwidth and Max Rate is the limit bandwidth. 3. Assign group IP bandwidth by following items: Bandwidth divided for each IP Address: When this feature is selected, the bandwidth assigned by Min Rate / Max Rate will be divided by the number of IP addresses. The available IP type is Subnet and Range. User needs to calculate the Min Rate and Max Rate for those IP addresses.
13.9.3 Status 1. Refresher Setting select the showed content of bandwidth usage by following items: Refresh rate: how long the browser will update the showed content once. Direct: show Upstream or Downstream. Show detail bandwidth for each IP address: show the group IP bandwidth usage. Apply Refresh Setting button: press this button to take above new setting effect. 2. Data part is the content of bandwidth usage. 13.9.
Step 3: Set QoS Entry #2 Step 3.1: Set Mode as Enable Step 3.2: Set Name as Internet Browse DS. Step 3.3: Select Interface LTE. Step 3.4: Select Downstream. Step 3.5: Set Port Begin/End as 443/443. Step 3.6: Set Min/Max Rate as 300/600. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Step 4: Apply Step 5: Check the internet access is ok through LTE. (Since we selected LTE interface.) Step 6: Start browse the internet from LAN PC. Step 7: Check Upstream Status. The traffic in entry “Internet Browse US” is Upstream, LAN to WAN, and send request to public Web Server with destination port number 443. The base of percentage is ISP Bandwidth > LTE > Upstream setting. It is 1000 kbps in our case. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Step 8: Check Status Downstream. The traffic in entry “ Internet Browse DS ” is Downstream, WAN to LAN, and send response from public Web Server with source port number 443. The base of percentage is ISP Bandwidth > LTE > Downstream setting. It is 1000 kbps in our example. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
13.9.5 Bandwidth divided for each IP address There are ten number of IP addresses. The most left different octet is “ 11 ” in 192.168.1.11 and “ 2 ” in 192.168.1.2, so number of IP addresses is calculated by 11 minus 2 and plus one for boundary. The Min rate will be divided by ten, 100/10=10 kbit/s for each IP address 192.168.1.2 to 192.168.1.11. The Max rate is same with configuration for all IP addresses, 192.168.1.2 to 192.168.1.
Configuration > Management This section provides you to manage the router, set up your administration and know about the status of current software and firmware. Also, you can back up and restore the configuration. Management > Identification This section allows you to confirm the profile of router, current software, firmware version and system uptime. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Management > Identification Item Description Model Name Show the model name of cellular router. LAN Ethernet MAC Address Show the LAN Ethernet MAC address. WAN Ethernet MAC Address Show the WAN Ethernet MAC address. Bootloader Version Show the bootloader version currently running on the device. Software Version Show the software version currently running on the device Serial Number Show the product serial number.
INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Management > Contacts / On Duty This section allows you to create the groups, add the usersFor more detailed instruction, please navigate to System > Alarm. 14.3.1 Contacts + Add Group: Please fill out group name. + Add User: Please fill out Name/Phone/E-Mail/Groups. 14.3.2 Duty Schedule Please select duty date for every group. The trust and responsible groups can control/receive alarms and SMS. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Management > SSH Secure Shell (SSH) allows user to configure system via a secure channel. User can configure system from either public domain or local LAN. Item Mode Server Port Access Control Management > SSH Description Select from Disable or Enable SSH function. The port number is where SSH server works on. Allow All: Any client who own the IPv4v6 Address can reach system is able to connect system.
Management > Web This section allows user to change the HTTP port via HTTP. As long as pressing Apply, the web daemon will restart the new configuration, and you won’t see the response at the web browser. We need a way to reply immediately and apply the configuration latter. By using fork, we can make parent process reply immediately and the child process execute the configuration. Note: Remember close the file descriptor stdin and stdout within the child process context.
Management > Firmware This section provides you to upgrade the firmware of router. (1) Click (2) Select button to choose your current firmware version in your PC. button to update. (3) After upgrading successfully, please reboot the router. Management > Configuration This section supports you to export or import the configuration file. (1) Click button to export your current configurations. (2) Click button to import the configuration file.
Management > Schedule Reboot The setting allows you to schedule the reboot time regularly. Schedule Type – Interval Schedule Type - Per Day Schedule Type - Per Week Schedule Type - Per Month INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Configuration > Diagnosis This section allows you to diagnose Ping and Traceroute for your Host (IP address or Domain Name). Diagnosis > Ping Please assign the Host you want to ping. The result of the ping is as below. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Diagnosis > Traceroute Please assign the Host **you want to** traceroute. The result of the traceroute is as below. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Configuration Applications This section explains specific examples how to configure your applications. WAN Priority You can select from ETH First, LTE Only, ETH Only or LTE First. (1) WAN Priority > ETH First: In case both Ethernet and LTE can access Internet, the router would route network packages through Ethernet. The reason is Ethernet that is low price and stable.
(3) WAN Priority > ETH Only: In this mode, the router only routes network packages through Ethernet. (4) WAN Priority > LTE First: In case both Ethernet and LTE can access Internet, the router would route network packages through LTE. However, in case LTE is unplug or not able to access Internet (check by ping), the router would route network packages through Ethernet network. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
LAN > IPv4/IPv6 Dual Stack The router supports IPv4/IPv6 dual stack by default, it means IPv4 packages route to IPv4 network and IPv6 route to IPv6 network. Since IPv6 is global IP, there is no NAT between WAN site and LAN site. One device only needs one global IPv6. There is IPv6 firewall protection in the router by default. Only the IPv6 packages come from LAN site device and got reply back. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
The router automatically detects IPv6 environment and query IP. After the IP is obtained successfully, it will distribute to LAN site hosts. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
MQTT Broker The cellular router provides the MQTT broker feature which allow the MQTT client sending the message within specific topic (channel). By default, the cellular router does not allow anonymous to read/write the MQTT topic (channel). Thus, you need to create the account with username and password for MQTT client in the web UI. The Manage Users section will show all created users. Each user can use the delete button to delete it. For the ACL control, you can specify what topic should be limited.
For example, we set the publisher pub2 to write the critical topic. Additionally, we also the subscribers sub1 and sub3 can read the critical topic. Thus, when pub2 is sending the message only the sub1, the sub3 can receive it. Virtual COM > Remote Management You can access the remote serial device (e.g. Console) by the Virtual COM server feature. When you set up the above environment, use the Virtual COM software (e.g. USR-VCOM) to simulate the COM device.
You can click the Edit button to configure COM2 setting. The configuration UI shows the following picture. The configuration UI provides the serial setting and the Virtual COM setting. (1) For the serial setting, you need to change the setting like baud rate to fit the connected device. (2) For the Virtual COM, you need to change the mode to Server and specify the Protocol, Port to reach the remote management feature. (Note: In this case, we use the TCP and port 6000 to be the Virtual COM server settings.
Remote Port 6000 as the following picture. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Virtual COM > Remote Alarm When the router connected with the alarm device, the alarming data from the device can be forwarded by the router to the warning center. Same as the remote management, the serial settings of connected COM port need to be configured properly. And the virtual should be opened and run as Client mode. Also, you need to specify the remote host and the port. The web UI of router shows the below picture.
Virtual COM > Modbus RTU over TCP For the industrial products, the Modbus protocol is the most popular industrial control protocol. If the Modbus software/SCADA supported the Modbus RTU over TCP, the Virtual COM server feature of router could handle it. You need to configure the RS-485(COM3) like the remote management (serial settings, Virtual COM settings). After above setup, you can use the Modbus software which supported the Modbus RTU over TCP to control the Modbus sensor/device.
Modbus Gateway The Modbus gateway feature of router could convert the Modbus TCP to the Modbus RTU protocol and send it to the connected RS-485 device. This feature depends on the COM3 setting, you need to configure the serial setting in the System -> COM ports web UI and set up this feature in the System -> Modbus web UI. After above setup, the Modbus software can use the Modbus TCP protocol to control the Modbus sensor/device.
(2) Alarm Output: In case of SMS is selected then only user’s phone number is in selected group and on selected working day would receive alarm SMS. In case of DO is selected, please make sure your DO is connected to your alarm device. In case of SNMP trap is selected, please make sure you enable SNMP trap (Service -> SNMP) and fill our server IP. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Open VPN Configuration Generic setup For Open VPN configuration, use the certificate to authenticate the VPN connection. Thus, you need to generate the required files for Open VPN server or import the required file to Open VPN client. 16.9.1 Open VPN Server Mode Open VPN server certificate generation For the Open VPN server mode, the Open VPN web UI provides the buttons to generate the required files. The files include Root CA, Cert, Key and Open VPN client files.
And you can click the info button to show the detail for each files, or click the download button to download the file to PC. 16.9.2 Open VPN Client Mode Open VPN client certificate import For the Open VPN client mode, the Open VPN web UI provides the buttons to import the required files. The Open VPN client can use the Root CA, User Key and User Cert files from Open VPN server to authenticate the VPN tunnel. Or just only use the PKCS#12 (P12) file from Open VPN server to authenticate it.
16.9.3 Open VPN Net-to-Net You can use the Open VPN VPN tunnel to make the PC1 and PC2 communicate each other. (1) Open VPN server configuration For the Open VPN server side, the basic setting is as shown in below figure. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
The VPN Network and VPN Netmask are required fields. Note: The VPN Network should be network ID (e.g. 192.168.30.1 is invalid setting.) When PC1 and PC2 communicate each other, the Route Client Networks should be enabled. And add the LAN information of Open VPN client side, in this case the #1 route will be 10.0.0.0 and 255.255.255.0 Note: The #1 route means the routing information for User 1.
(2) Open VPN client configuration For the Open VPN client side, the basic setting is as below figure. The Server Address is required field, which indicate the Open VPN server address which Open VPN client try to connect. And the PKCS12 Password only works when selected the pkcs #12 Certificate authentication option. This option requires the P12 file which generated from Generic Setup Open VPN server part. The password also be set on the Generic Setup Open VPN server part.
16.9.4 Open VPN 1:1 NAT For the net-to-net part, the Open VPN server LAN network and the Open VPN client LAN network are different. But some time, the LAN network will be same for both sides. When this situation occurred, the routing rules will be ambiguous that will result in the PC1 and the PC2 can't communicate each other. Thus, the router Open VPN provides the 1:1 NAT feature. The feature will convert the conflict subnet to different subnet.
For the Open VPN client side, same as server side but we fill up the Network as 192.168.11.0. The setting will make router convert the Open VPN client side LAN network from 192.168.1.0/24 to 192.168.11.0/24 when the VPN traffic is coming. 16.9.5 Open VPN with third-party server A VPN enables you to send and receive data across shared networks. For some users, they will use the VPN to access the limited network service from the different country.
For example, use the Japan Open VPN server which provided by http://www.vpngate.net/en/ . Firstly, download the ovpn configuration files from vpngate.net. Additionally, use the Open VPN custom import button to import it. The result is as the below figure. If the .ovpn configuration file is correct, the web UI will show Apply OK. If the third-party Open VPN server is reachable, the VPN tunnel will be established.
16.9.6 Install Open VPN Access Server on Docker Open VPN Access Server on Docker installation Open VPN Access Server is a full featured secure network tunneling VPN software solution that integrates Open VPN server capabilities, enterprise management capabilities, simplified Open VPN Connect UI, and Open VPN Client software packages that accommodate Windows, MAC, Linux, Android, and iOS environments.
Install Docker CE sudo apt-get update sudo apt-get install docker-ce Install Open VPN Access Server by docker image Reference: https://hub.docker.com/r/linuxserver/Open VPN-as/ sudo mkdir -p /Open VPN-as sudo docker create --name=Open VPN-as \ -v /Open VPN-as:/config \ -e TZ="Asia/Taipei" \ -e INTERFACE=enp3s0 \ --net=host --privileged linuxserver/Open VPN-as sudo docker start Open VPN-as Check the Open VPN Access Server by visiting https://:943 Setup Open VPN Access Server for Cellular
And switch to the User Permission page to create the user for Cellular Router. (In this case, we use the test/test to be the example.) INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Also check the Access from all other VPN clients to make the Cellular Router could be reachable. Setup Cellular Router Open VPN client INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Use the user test/test to login https://:943 Please make sure to change the type from Connect to Login. After logged, please download the .ovpn configuration by click the user-locked profile. Upload the .ovpn configuration to Cellular Router Open VPN custom mode, and input the username and password. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
When the VPN tunnel established, the Cellular Router can be managed/accessed by the other VPN clients. 16.9.7 Install Pritunl Open VPN server on Docker Pritunl Open VPN server on Docker installation Pritunl is a distributed enterprise vpn server built using the Open VPN protocol. Quick Installation Prerequisites Ubuntu 16.04 curl or wget should be installed Install via curl sh -c "$(curl -fsSL https://bit.ly/2IpJN1X)" Install via wget sh -c "$(wget https://bit.
sudo apt-get update sudo apt-get install \ apt-transport-https \ ca-certificates \ curl \ software-properties-common curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add sudo add-apt-repository \ "deb [arch=amd64] https://download.docker.com/linux/ubuntu \ $(lsb_release -cs) \ stable" Install Docker CE sudo apt-get update sudo apt-get install docker-ce Install Docker compose sudo apt-get install docker-compose Install Pritunl Open VPN Server by docker compose (1) Set up the basic envir
- "443:443/tcp" volumes: mongo: pritunl: (3) Run the command docker-compose up -d to start the server (4) Check the Pritunl Open VPN Server by visiting https:// Setup Pritunl Open VPN Server for Cellular Router The server will running on https://. The default username/password is pritunl/pritunl. Login Page: After logged, the server will ask you to do the initial setup. You can change the username and the password setting in this page.
Open VPN user setup Please navigate to the User page to setup the Open VPN user account. Add the organization by click the Add Organization button. (In this document, we use the MR to be the organization example.) When the organization be created, the Users page should be like the following figure. Then add the Open VPN user by click the Add User button. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Note: In this Open VPN server, the PIN must contain only digits. Note: In this document, we use the test/123456 Open VPN user to be the example. Open VPN server setup Please navigate to the Server page to setup the Open VPN server. And click the Add Server button to create the Open VPN server. Note: Please click the Advanced tab and make sure the Inter-Client Communication be checked INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
When the Open VPN server created, the Servers page should like the following figure. And click Attach Organization button to setup the Open VPN server. Start the Open VPN server by click Start Server button. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Cellular Router setup First, please navigate to the Users page and download the user configuration file and extract it. Note: In this document, you should get the MR_test_router.ovpn file. And visit the Cellular Router Open VPN custom page then import the .ovpn file. Fill up the username/password which be setup in Open VPN user setup part. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
When the Cellular Router Open VPN connected, the Pritunl Open VPN server also update the user status. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
VRRP Topology Basic VRRP Topology Base on this topology and VRRP Parameter settings, Router A and Router B will offer a virtual router service with virtual IP = 192.168.1.200 for the client. TR069 Server (GenieACS Installation) Server OS: Ubuntu 14.04 on Virtualbox Installation: 1) Login ubuntu 2) Change to root by 'su -' and enter your root password.
./configure make && make install ruby -v ruby 2.4.1p111 (2017-03-22 revision 58053) [i686-linux] cd /opt gem install rails --no-ri --no-rdoc gem install bundle --no-ri --no-rdoc 7) Install node.js cd /opt wget http://nodejs.org/dist/v8.2.1/node-v8.2.1.tar.gz tar zxvf node-v8.2.1.tar.gz cd node-v8.2.1 ./configure make && make install node -v v8.2.1 8) Install redis cd /opt wget http://download.redis.io/releases/redis-4.0.1.tar.gz tar zxvf redis-4.0.1.tar.gz cd redis-4.0.
Modify FS_HOSTNAME field in genieacs/config/config.json for device retrieve firmware file Original configuration: "FS_HOSTNAME" : "acs.example.com" New configuration example.: "FS_HOSTNAME" : "192.168.0.199" Note: It is the place where the device firmware file stored. Generally, it is the IP address on where your GenieACS server installed. Modify connect request username/password in genieacs/config/auth.
#!/bin/sh GENIE_PATH=/opt/genieacs/bin GENIE_GUI_PATH=/opt/genieacs-gui echo "start mongod." pidof mongod if [ $? != 0 ]; then /opt/mongodb-linux-i686-3.3.3/bin/mongod --dbpath /data/db --journal --storageEngine=mmapv1 --fork --syslog fi echo "start North Bound/RESTful Interface service." $GENIE_PATH/genieacs-nbi & echo "start ACS/CWMP service." $GENIE_PATH/genieacs-cwmp & echo "start HTTP/File streaming service." $GENIE_PATH/genieacs-fs & echo "start GenieACS/WebUI." cd $GENIE_GUI_PATH rails server -b 0.0.
2.1) Login Username and Password are admin/admin. 3) Device information Press Devices tab Move mouse to line end of your device, the Show link show up. Press Show link, the device information shows up. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
4) Access parameters Scroll up/down on Device parameters list, the Refresh and Edit link show up at line end of parameter. For Readable parameter For Readable and Writable parameter 4.1) Get parameter value Press on the Refresh link, the Pending tasks window will pop up on right top to ask you to allow or Cancel this action. Press Commit to get this parameter value. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Note: If the GenieACS can reach the device, the parameter value will be updated immediately. Otherwise, this request will be queued on Task queue list until next time device connect to GenieACS. Note: To update the whole tree, refresh the root parameter (InternetGatewayDevice.). Note: To update partial tree, refresh the parent node of the partial tree. 4.2) Set parameter value Press on the Edit link, editing window will pop up to ask you to change the value of this parameter. Input new value and press OK.
Press Commit to set this parameter value. Note: If the GenieACS can reach the device, the parameter value will be set immediately. Otherwise, this request will be queued on Task queue list until next time device connect to GenieACS. 5) Reboot device Press on Reboot link. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
The Pending tasks window will pop up to ask you to allow or Cancel this action. Press Commit to reboot device. Note: If the GenieACS can reach the device, the device will reboot immediately. Otherwise, this request will be queued on Task queue list until next time device connect to GenieACS. 6) Reset to default Similar to Reboot device except pressing on Factory reset link. 7) Firmware Upgrade 7.
Press File: browse button, select the firmware, and then press Upload button. The firmware will be added to listing files as below. 7.2) Upgrade Move mouse to the Push file>> link, the upgrade firmware name will pop up as below picture. Move mouse to the upgrade firmware name and press it. The Pending tasks window will pop up to ask you to allow or Cancel this action. Press Commit, then firmware upgrade started. Note: If the GenieACS can reach the device, the firmware upgrade will be started immediately.
Test Case Example VLAN Topology This VLAN Topology for 3-port LANs shows different PCs how to configure VLAN settings with different LAN ports and has two results for this configuration. (1) PC-A sends ICMP packet to PC-B IP (192.168.2.20) and captures traffic on PC-B. Thus, PCB will receive Tag20 traffic. (2) PC-B sends ICMP packet to PC-A IP (192.168.1.20) and captures traffic on PC-A. Thus, PCA will receive untag traffic. Note: PC-A and PC-B are on Ubuntu OS.
Note: Different PCs have different interface of network cards, like PC-A network card is eth1.10 for example 1 and PC-B network card is eth1.20 for example 2. How to find out the terminal and the interface of network cards based on different PCs. From the following picture, you can click the finding your computer icon and input the terminal letters. Then, the interface will show the terminal icon and click to open it. Next, it shows the information when you click the terminal icon.
There are two examples to explain how configure VLAN settings. Example 1: PC-A pings PC-B (Access to Trunk) For PC-A, add default gateway and LAN's MAC to ARP. Load VLAN and create VLAN interface, command as below: sudo modprobe 8021q sudo vconfig rem eth1.20 sudo vconfig add eth1.10 Configure VLAN interface as below: sudo ifconfig eth1.10 192.168.1.20 netmask 255.255.255.0 up sudo ifconfig eth1 0.0.0.0 sudo route add default gw 192.168.1.1 eth1.10 sudo arp -s 192.168.1.
MQTT Topology This MQTT Topology shows the cellular router to connect PC-A and PC-B’s LANs and have two results are as below. Expect Result: (1) PC-A sends message to PC-B and PC-B should not receive any message. (2) PC-B sends message to PC-A and PC-A should receive message. Note: PC-A and PC-B should install MQTT Client software. There is a process to explain the steps and result. Step1: Install mosquitto-clients on ubuntu or windows.
Step2: Configure MQTT for the Cellular Router You need to add two users. For example, we create the users for test and test2. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
You need to add two ACLs based on the users you created. For instance, we create two ACLs for test user and test2 user. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Note: For Receive message command format: Mosquitto_sub -h -t -u -P For Send message command format: Mosquitto_pub -h -t -u -P -m INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Step3: There are two test MQTT examples. Example 1: PC-A sends message to PC-B and PC-B should not receive any message. For PC-B, command "mosquitto_sub -h 192.168.1.1 -t abc -u test2 -P test2". For PC-A, command "mosquitto_pub -h 192.168.1.1 -t abc -u test -P test -m test" and confirm the message on PC-B. It won’t receive any message on PC-B. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Example 2: PC-B sends message to PC-A and PC-A should receive message. For PC-A, command "mosquitto_sub -h 192.168.1.1 -t abc -u test -P test" For PC-B, command "mosquitto_pub -h 192.168.1.1 -t abc -u test2 -P test2 -m test" and confirm the message on PC-A. It will receive test message on PC-A. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Modbus Topology There is an example for Modbus Topology that you can configure Modbus gateway to observe the temperature, voltage and current from Modbus meter on PC-A. The settings of Modbus is shown as below. The mode is Enable. The default port is 502. Please confirm the interface of COM Port 3 that the mode is Disable.
Note 1: There is a reference for Modbus poll software to download and install on PC. http://www.tucows.com/preview/502459/Modbus-Poll Note 2: You can purchase a meter of DC voltage and current supporting Modbus protocol with RS485 serial for test and connection to COM Port 3. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
The following picture shows how connect the ports and the lines between a cellular router and a meter. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
IP Routing Topology This IP Routing topology that the cellular router connects Router-1 and Router-2 will have two results. (1) PC-A sends ICMP packet to Router-1 LAN and WAN IP and they should have response. (2) PC-A sends ICMP packet to Router-2 LAN and WAN IP and they should have response. Note: Router-1 and Router-2 are pure routers and should be supported "NAT enable / disable". LAN configuration: WAN configuration: INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
There are two examples to introduce how to work for routing. Example 1: Add IP Routing on LAN interface Step 1: The cellular router for Static Route configuration The Mode is on at the settings section and add the routing. Step 2: Router-1 configuration is as below. (1) Login to the Router-1 web site, and then "NAT disable". (2) Configure LAN IP: 192.168.10.1 (3) Configure WAN IP: 192.168.1.50 Result: PC-A sends ICMP packet to Router-1 LAN and WAN IP and they should have response.
Example 2: Add IP Routing on WAN interface Step1: The cellular router for Static Route configuration The Mode is on at the settings section and add the routing. Step2: Router-2 configuration is as below. (1) Login to the Router-2 web site, and then "NAT disable". (2) Configure LAN IP: 192.168.20.1 (3) Configure WAN IP: 192.168.2.2 INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Result: PC-A sends ICMP packet to Router-2 LAN and WAN IP and they should have response. INDUSTRIAL 4G LTE CELLULAR ROUTER - UM V1.1.
Safety Notice * 第十二條 經型式認證合格之低功率射頻電機，非經許可，公司、商號或使用者均不得擅自變更 頻率加大功率或變更原設計之特性及功能。 * 第十四條 低功率射頻電機之使用不得影響飛航安全及干擾合法通信；經發現有干擾現象時，應 立即停用並改善至無干擾時方得繼續使用。 前項合法通信，指依電信法規定作業之無線電通信。 低功率射頻電機忍受合法通信或工業、科學及醫療用電波輻射性電機設備之干擾。 * 減少電磁波影響，請妥適使用。 * 本器材須經專業工程人員安裝及設定，始得設置使用，且得直接販售給一般消費者。 ------------------------------------------------------------------------------------------------------------------------------- * FCC 15.19: THIS DEVICE COMPLIES WITH PART 15 OF THE FCCRULES.
* RF exposure warning This equipment must be installed and operated in accordance with provided instructions and the antenna(s) used for this transmitter must be installed to provide a separation distance of at least 20 cm from all persons and must not be co-located or operating in conjunction with any other antenna or transmitter. End-users and installers must be provide with antenna installation instructions and transmitter operating conditions for satisfying RF exposure compliance.
