Industrial 4G LTE Cellular Router 0 0 : 8VHU 0DQXDO Version 1.1.
Table of Contents Introduction ....................................................................................................................... 6 Features ...................................................................................................................... 6 Specifications .............................................................................................................. 7 Mechanical Dimensions (M330-W) ......................................................................
Configuration > LTE ........................................................................................................ 39 LTE > LTE Config ...................................................................................................... 40 7.1.1 LTE Configuration .............................................................................................. 40 7.1.2 LTE Ping Health.................................................................................................
Firewall > Port Forwarding ...................................................................................... 111 Firewall > DMZ ........................................................................................................ 112 Firewall > IP Filter ................................................................................................... 113 Firewall > MAC Filter ............................................................................................... 117 Firewall > URL Filter .
16.5.4 Open VPN 1:1 NAT ......................................................................................... 151 16.5.5 Open VPN with third-party server .................................................................... 152 16.5.6 Install Open VPN Access Server on Docker .................................................... 154 16.5.7 Install Pritunl Open VPN server on Docker ...................................................... 159 VRRP Topology ......................................................
Introduction M330 and M330-W, compact, lightweight and cost-effective Industrial 4G LTE Cellular Routers, are built in 2-port fast Ethernet connection as well as support 2G/3G/4G mobile networks for wired and wireless communication in harsh environments. Equipped with RS232 serial port and digital input/output interfaces, the M330 and M330-W are simple to configure and collect real-time data transmission quickly for Industrial IoT and machine-to-machine applications.
Specifications Cellular Interface Power Supply z Standards: z Power Consumption 7 Watts(Max) (Please see ordering information for optional band) z Power Input 8 ~ 48VDC ▪ 4G: FDD LTE, TDD LTE Software ▪ 3G: WCDMA z IPv4, IPv6, IPv4/IPv6 dual stack, DHCP server and client, ▪ 2G: GSM/EDGE z Network Protocols: PPPoE, Static IP, SNTP, GPS sync time, DNS Proxy, LTE Data Rate: Cat 4, 150Mbps (DL), 50Mbps (UL) VRRP, OSPF, Message Queue Telemetry Transport Wi-Fi Interface (M330-W Model) (MQTT Bro
Mechanical Dimensions (M330-W) Ordering Information Model Name Description M330 Compact Industrial 4G LTE Cellular Router ( 1 x WAN, 1 x LAN, 1 x RS232 , 1 x DI, 1 x DO, 1 x micro SIM Slot, GPSx1, -30 ~ +70°C ) M330-W Compact Industrial Wi-Fi 4G LTE Cellular Router ( 1 x WAN, 1 x LAN, 1 x RS232 , 1 x DI, 1 x DO, 1 x micro SIM Slot, GPSx1, Wi-Fi, -30 ~ +70°C ) Hardware Installation This chapter introduces how to install and connect the hardware.
Ethernet Port (1) 10/100 Mbps Ethernet LAN/WAN The LAN and WAN interface are standard RJ45 connectors. Pin 1 2 3 4 5 6 7 8 Description TX+ TXRX+ N/A N/A RXN/A N/A Function 10/100 Mbps, TX+ Pin 10/100 Mbps, TX- Pin 10/100 Mbps, RX+ Pin N/A N/A 10/100 Mbps, RX- Pin N/A N/A (2) LED Indicator of Ethernet Port Each Ethernet port has one LED indicators. The Green LED indicates Link/ACT. LED Status Off Green (Link/ACT) Blink On Description Connection is down. Data is being transmitted.
Pin Assignments Power Input (V+, V-) / DI / DO / UART RS-232 (TXD, RXD, GND) Connecting the Power Supply The router requires a DC power supply in the range of 8~48V DC. Pin VV+ Power (8~48VDC) Negative Positive Connecting I/O Ports (1) Digital Input (DI) The unit has two terminals on the terminal block for the digital inputs. Pin DI DI_GND Description Digital Input z DI: Low (+0 to +5V) / High (+8 to +40V) 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
(2) Digital Output (DO) The unit has 2 terminals on the terminal block for the digital outputs. Pin DO DO_GND Description Digital Output z DO: Open Collect (maximum 30V/300mA) 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
UART (RS-232) The port is a standard RS-232 signal level interface. Pin TXD RXD GND Signal Transmit Data Receive Data Signal Ground Direction Output Input - Install the SIM Card Insert and Remove SIM Card (1) Before inserting or removing the SIM card, ensure that the power has been turned off and the power connector has been removed from Cellular Router. (2) Insert the SIM card with right direction. Push the SIM card in to the slot, and lightly press it to lock it in the slot.
Reset Button Function Operation WPS Processing Press the button less than 5 seconds. Reset Press the button for 5-10 seconds. Reset to default setting Press the button for more than 10 seconds. External Antenna Each unit has three antenna connectors, MAIN, GPS, AUX (SMA). For M330-W, there will be five antenna connectors and extra two antennas for Wi-Fi (RP-SMA). Connect the antenna to MAIN when you have only one antenna. Please tighten the connecting nut properly to ensure good connection.
Configuration via Web Browser Access the Web Configurator The web configuration is an HTML-based management interface for quick and easy to set up of the cellular router. Monitoring of the status, configuration and administration of the router can be done via the Web interface. After properly connecting the hardware of cellular router as previously explained. web browser and enter http://192.168.1.1 as URL. Launch your The default IP address and sub net-mask of the cellular router are 192.168.1.1 and 255.
Navigate the Web Configurator The main screen is divided into three parts as below. A -Title Bar, B - Navigation Panel and C - Main Window. (1) A : Title Bar The title bar provides some useful instructions that appear the situation of router. Item RSSI Uptime WAN Priority Location Google Maps Language Login/Logout ? Title Bar Description Show if the SIM card is inserted in the slot.
(2) B : Navigation Panel-Main Menu and Sub Menu The menu items are divided into main and sub menu to configure the settings and get the status of connectivity on the navigation panel. (3) C : Main Window This section shows the information or setting fields from main menu and sub menu. Status When you enter the web browser in the beginning and have not log in, the first item of main menu shows your status that you are a guest. This status only can view status page without any permission to log in.
4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
Status > GPS Item Attribute Latitude Longitude Horizontal Altitude Date (UTC) Satellite Description Show the latitude information of location. Show the longitude information of location. Show the horizontal information of location. Show the altitude information of location. Show the date information of location. Show the satellite information of location. Status > WAN LTE Item Description Attribute Modem Status The status of LTE. Operator Modem Access Display the name of operator.
Status > WAN DNS Item Attribute IPv4 DNS Server #1 IPv4 DNS Server #2 IPv4 DNS Server #3 IPv6 DNS Server #1 IPv6 DNS Server #2 IPv6 DNS Server #3 Item Attribute IPv4 Address IPv4 Mask Default Gateway IPv6 Conn Time Item Attribute IPv4 Address IPv4 Mask IPv6 Address IPv6 Conn Time Uplink Speed Kbps Downlink Speed Kbps Tx/Rx KBytes TX/RX Dropped Packets Description Show the address of IPv4 DNS Server #1. Show the address of IPv4 DNS Server #2. Show the address of IPv4 DNS Server #3.
Status > GPS For those GPS enabled router, you can see Location on the right-top banner of web interface when connecting your GPS function. After clicking Google Maps banner, a map will automatically display the current information of map according to location of router. Configuration > System This system section provides you to configure the following items, including Time and Date, Logging, Alarm, Ethernet Ports, and Client List.
I. Get from Time Server z Set up the time servers of IPv4 and IPv6. z Select your local time zone. z Click Apply to keep your configuration settings. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
II. Manual z Set up the information of time and date, including year, month, date, and hour, minute, and second. z Set up your local time zone. z Click Apply to submit your configuration changes. III. Time Zone Setup z Set up Daylight Savings as On. z Set up Ahead of standard time. z Set up the information of Start Date/Time, including Month, Week, Day, Hour and Minute. z Set up the information of End Date/Time, including Month, Week, Day, Hour and Minute.
System > Time Zone Setup > Daylight Savings Item Description Turn on/off the Daylight Savings feature. Select from Off or On. Daylight Saving The default is Off. The forward/backward minutes when enter/leave Daylight Ahead of standard time Savings duration. Default is 60 minus. Time to enter Daylight Savings duration. The Month range is 1~12. 1 - ġ Jan. 7 - Jul. 2 - Feb. 8 - Aug. 3 - Mar. 9 - Sep. 4 - Apr. 10 - Oct. 5 - May 11 - Nov. 6 - Jun. 12 - Dec.
IV. Time Server The Time server feature allows user to set a time server for LAN side client to get the time through NTP/SNTP protocol. System > Time Server Description Turn on/off the time server. The UDP port listened by time server. Item Server mode Server port System > Logging This section allows cellular router to record the data and display the status of data. 5.2.1 Logging > Logging (1) Logging section provides you to control all logging records.
5.2.2 Logging > Log This section displays all data status. (1) You can choose Filter function to quickly search for your data. (2) When you click Clear, all of the data that displays on the interface will be totally cleared without any backup. (3) When you click Refresh, the system will update and display the latest data from your cellular router. (4) When you click Download Logs, the system will download the latest data from your cellular router.
System > Alarm This section allows you to configure the alarm. Note: (1) If you select SMS in Alarm input/output, you need to add the trust phone number into Contracts/ On Duty. (2) If you select SNMP trap in Alarm output, you need to set up SNMP trap configuration from Service SNMP. (3) If you select E-Mail in Alarm output, you need to set up SMTP configuration from Service SMTP. (4) If you select TR069 in Alarm output, you need to set up TR069 configuration from Service TR069.
High: SW is On to trigger. Low: SW is OFF to trigge. z Always: Pull DO high. z Pulse: High and Low continuously. z Pulse Time Length: Pulse time length (mini seconds). Write your messages and limit 150 English characters for the messages to deliver. z z DO behavior SMS/E-mail 5.3.1 Alarm > Contacts > Create and name the Group z Click trusted and on duty members for naming and the interface will show the group’s name in the Group setting as below.
z You can click or button to edit or delete the group. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
5.3.2 Alarm > Contacts > Add User z Select your naming group and click + Add User button to add your user’s information, including Name, Phone and E-mail. z After filling in your information for each row, chose your naming group and click to submit your settings. z After submitting your setting, the interface returns to Group window setting. Now you can see your naming group and the user’s information that you have added. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
z You can click button to edit the user’s information or click the check box and to delete the user. 5.3.3 Alarm > Duty Schedule z Select Duty Schedule to edit the schedule of the on duty group. System > Ethernet Ports This section allows you to configure the Ethernet. For Flow Control, it allows you to configure the Ethernet and solve unstable throughput under heavy loading.
System > Ethernet Ports Item Description Ethernet Ports Status Show the connectivity status of LAN and WAN. Select from Auto, 100M Full, 100M Half, 10M Full, 10M Half Ethernet Ports Configurations and Disable. MTU is the Maximum Transmission Unit that can be sent WAN Ethernet over the WAN Ethernet interface. It allows users to adjust the MTU size to fit into their existing network environment. Allow users to control the traffic ingress from Ethernet LAN Flow Control or WAN.
System > Client List This section allows you to understand how many devices have been connected and their status from the router. There are two types, one is DHCP Client and the other is Online. The default is both types to show all status when the router is on DHCP Client and Online. System > Client List Item List Type Description z z DHCP Client: List all clients’ information when it is via DHCP. Online: List the information when it is online.
WAN > Priority Description Item z Priority z z z LTE Net Mode (The priority is LTE Only) z z z Auto (ETH -> LTE): WAN Ethernet is first priority and the second priority is LTE. LTE Only: The priority is only LTE. ETH Only: The priority is only WAN Ethernet. Bridge + Router: APN1 act as bridge for internet access. APN2 act as router for management from WAN site which like TR069, ssh... Bridge Only: APN1 act as bridge for internet access. Router Only: APN1 act as router for internet access.
WAN > Ethernet Description Item WAN Ethernet There are three options to obtain the IP of WAN Ethernet. z DHCP Client: DHCP server-assigned IP address, netmask, gateway, and DNS. z PPPoE Client: Your ISP will provide you with a username and password. This option is typically used for DSL services. z Static IPv4: User-defined IP address, netmask, and gateway address. When selecting “DHCP Client”, you can set up DNS Server Configuration.
When you select PPPoE Client, the interface shows the item of configuration to fill in your User Name and Password. When you select Static IPv4, the interface shows the information of configuration, including IP Address, IP Mask and Gateway Address. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
WAN > Ethernet > Static IPv4 Description Item Static IPv4 Configuration IP Address Fill in the IP Address. IP Mask Fill in the IP Mask. Gateway Address Fill in Gateway Address. DNS Server Configuration IPv4 DNS Server #1 The IPv4 DNS server IP is input by user. IPv4 DNS Server #2 IPv4 DNS Server #3 6.2.2 Ethernet Ping Health If you configure “WAN Priority” to “Auto” mode, the system would choose the cost effective connection first such as Ethernet.
Item Ethernet Ping Health Interval IPv4 Host 1 IPv4 Host 2 IPv6 Host 1 IPv6 Host 2 Hint WAN > Ethernet > Ethernet Ping Health Description Select from Disable or Enable. The default is Enable. The interval is from 1 to 60 seconds. Input the address of IPv4 Host 1. Input the address of IPv4 Host 2. Input the address of IPv6 Host 1. Input the address of IPv6 Host 2. Show the usage descriptions. In addition, you can check which WAN is actually using from “Status” page.
WAN > IPv6 DNS This section allows you to set up IPv6 DNS Server Configuration. For IPv6 DNS Server, it provides three options to set up and each option has provided with “From ISP”, “User Defined” and “None” to configure. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
WAN > IPv6 DNS Description Item DNS Server Configuration z Each setting DNS Server has three options, including From ISP, User Defined and None. IPv6 DNS Server #1 z When you select From ISP, the IPv6 DNS server IP is obtained IPv6 DNS Server #2 from ISP. IPv6 DNS Server #3 z When you select User Defined, the IPv6 DNS server IP is input by user. Configuration > LTE This section allows you to configure LTE Config, GPS Config, Dual APN, APN Usage, SMS, Serving Cell, and DNS.
LTE > LTE Config 7.1.1 LTE Configuration You can set up the LTE Configuration and LTE Ping Health. Item LTE Config MTU LTE > LTE Config Description z Auto: Automatically connect the possible band. z 4G Only: Connect to 4G network only. z 3G Only: Connect to 3G network only. z 2G Only: Connect to 2G network only. MTU is the Maximum Transmission Unit that can be sent over the LTE interface. It allows user to adjust the MTU size to fit into their existing network environment.
7.1.2 LTE Ping Health For LTE connection, you can enable “LTE Ping Health” to keep alive to avoid base station kicking out the device in idle time. Item LTE > LTE Config > LTE Ping Health Description LTE Ping Health Select from Disable or Enable. Interval Input the interval seconds of ping. IPv4 Host 1 Input the address of IPv4 Host 1. IPv4 Host 2 Input the address of IPv4 Host 2. IPv6 Host 1 Input the address of IPv6 Host 1. IPv6 Host 2 Input the address of IPv6 Host 2.
4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
LTE > Dual APN This section allows you to understand the status of connectivity for Dual APN. z SIM PIN: If you have configured SIM PIN code into SIM card, please type SIM PIN code in Dual SIM configuration to make unlock successfully. z SIM PUK: If you have typed wrong SIM PIN code and retried more than 3 times, the SIM Card will become the blocked mode. In this case, you have to type PUK and new SIM code to unlock SIM Card. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
z Change SIM PIN烉 烉If you want to change SIM PIN code, you can click Change button and type old SIM PIN code and new SIM PIN code. Please aware not to exceed the retry number (PIN remaining number and PUN remaining number). LTE > Dual SIM Item Description Connect Policy Connect Action Disable Roaming z Connect: After manually disconnect, it will show Connect button. Click to get connection or reboot the device to make it automatically connect.
PIN remaining number Display the allowed remaining PIN retry number. PUK remaining number Display the allowed remaining PUK retry number. APN1 / APN2 APN The Access Point Name (APN) is the name of the setting that set up a connection to the gateway between your carrier's cellular network and the public Internet. Leaving it empty will search internally database automatically by SIM card for connection.
LTE > Usage Display This section shows the status of current SIM card, operator, IMSI and the charts for Real Time, Hourly, Daily, Weekly, and Monthly. (1) Real-Time Usage: It displays accumulated real-time Download/Upload/Total MB for 10 seconds period. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
(2) Hourly Usage: It displays Download/Upload/Total MB per hour in one day for current using SIM card and the view window size is 24 hours. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
(3) Daily Usage: It displays Download/Upload/Total MB per day in one month for current using SIM card and the view window size is 31 days. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
(4) Weekly Usage: It displays Download/Upload/Total MB per day in one week for current using SIM card and the view window size is 7 days. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
(5) Monthly Usage: It displays Download/Upload/Total MB per month in one year for current using SIM card and the view window size is 12 months. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
LTE > SMS This section provides two settings, one is SMS Action and the other is View SMS. (1) When enabling SMS Action, it allows trust phone number which in Contacts/On Duty list by sending key words SMS to trigger device setting/action/query status. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
(2) View SMS allows you to review the information of SMS that you have received, including the state, phone and date and time. You can click button to clear all messages, and 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.8 view button to review all messages, button to reload all messages.
LTE > Serving Cell This section displays all parameters, including the following items: LTE > Serving Cell Item Description RSRP Reference Signal Received Power. RSRQ Reference Signal Received Quality. SINR Loarithmic value of SINR. RSCP The Received Signal Code Power Level of the cell that was scanned. ECIO Carrier to noise ratio in dB = measured Ec/lo value in dB. Cell Identity eNB ID (20 Bits) + Cell ID (8 Bits). eNB ID eNB ID. Cell ID Cell ID. PCI ID Physical Cell ID.
LTE > DNS This section allows you to setup LTE specific DNS setting. LTE > DNS Item Description 1. Each setting DNS Server has three options, including From IPv4 DNS Server #1 IPv4 DNS Server #2 IPv4 DNS Server #3 ISP, User Defined and None. 2. When you select From ISP, the IPv4 DNS server IP is obtained from ISP. 3. When you select User Defined, the IPv4 DNS server IP is input by user. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
Configuration > WiFi (M330-W) This section allows you to set up the WiFi configuration. WiFi > WiFi Config This section allows you to set up the Wi-Fi configuration. WiFi > Config Item Description AP Enable Turn on/off the Wi-Fi Network. Select from Disable or Enable. The default is Enable. AP Isolate AP isolation is a technique for preventing mobile devices connected to an AP from communicating directly with each other.
WiFi > Config Item Description Name(SSID) SSID is Wi-Fi identification. The maximum length is 32 Hidden SSID SSID hiding is the process of hiding the network name from being publicly broadcast. Channel Auto (Automatically select the best channel) or manually select channel number. Security Option None / WPA2-PSK(AES). Passphrase The legal length is 8 ~ 63. The string should belong to [0-9 A-F a-f]. Key Update 0 means no update or 30~86400 seconds update period.
After clicking edit button, you can edit your MAC address. WiFi > MAC Filter Item Description Mode Select from Disable. The default is Disable. MAC Address Fill in your MAC address. WiFi > Client List This section allows you to see all the Connected WiFi Client List. Item Description MAC Address MAC Address IP Address Client IP Address Connected Time Connected Time in Seconds. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
Configuration > LAN This section allows you to configure LAN IPv4, LAN IPv6, VLAN and Subnet. LAN > IPv4 Set up your IP Address and IP Mask. Also, fill in the information of DHCP Server Configuration. LAN > IPv4 Item Description IP Address:192.168.1.1 z IP Mask:255.255.255.0 Both of them are default, you can change them according to your local IP Address and IP Mask. z Enable to make router can lease IP address to DHCP clients which connect to LAN.
LAN > IPv6 Select your type of IPv6, which shows Delegate Prefix from WAN or Static, and then set up DHCP Server Configuration, including Address Assign, DNS Assign and DNS Server. LAN > IPv6 Item Description z Delegate Prefix from WAN Select this option to automatically obtain an IPv6 network prefix from the service provider or an uplink router. Type z Static Select this option to configure a fixed IPv6 address for the cellular router’s LAN IPv6 address.
When VLAN Mode is set to Tag Base, the VLAN setting window will appear as shown below. The VLAN Isolation function allows administrator to separate the different Subnet (VLAN). When it is on, the different Subnet (VLAN) user cannot communication each other. For each row, the settings can be enabled or disabled by checkbox and select the Subnet and the VLAN ID (VID).
LAN > Subnet This section allows you to get the information of IP Address and IP Mask and edit for the VLAN Subnets from DHCP Server Configuration. This Subnet setting is the same as LAN > IPv4 setting and follows with Tag Base Mode of VLAN to enable the function. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
IP Routing This section allows you to configure the Static Route, RIP, OSPF, and BGP. IP Routing > Static Route This section allows you to configure the Static Route. A static route is a pre-determined path that network information must follow to reach a specific host or network. Item Mode Settings Mode IP Routing > Static Route > Settings Description The setting is for full network. Select from Off or On. The setting is for the specific network. Select from Off or On.
Name Destination Gateway Interface Set up each name for your running host or network. Fill in the destination of a specific subnet or IP from network. Fill in the gateway address of your router. Select the interface from LAN or Ethernet. Note: z The destination field is required to fill in. The format of destination is IPv4 or IPv6. z The address of gateway or the type of interface can be chosen one or both to fill in the field.
The status tab shows the information from the settings of static route. Item Mode Status Destination Gateway Interface Protocol IP Routing > Static Route > Status Description The setting is open for full network. Select from Off or On. Show the status of destination from the setting section. Show the status of gateway from the setting section. Show the status of interface from the setting section. Show the status of protocol from the setting section.
IP Routing > RIP This section allows you to configure RIP and select the mode from Disable or Enable. The default is Disable. Note: RIP (Routing Information Protocol, RFC 2453) is an Interior Gateway Protocol (IGP) and is commonly used in internal networks. It allows a router to exchange its routing information automatically with other routers, and allows it to dynamically adjust its routing tables and adapt to changes in the network.
Item Interfaces Mode Interface Authentication Key Key ID Passive IP Routing > RIP > Interfaces Description Select from Off or On to use or not to use the RIP function in the interface. Select from eth1 (WAN Ethernet) or LAN. Select from none or md5 to approve authentication. Note: Please offer Key and Key ID when you select md5 to use HMAC-MD5. The key used for authentication (maxlength=16). The ID of the key used for authentication (1-255).
IP Routing > OSPF This section allows you to set up OSPF with three sub configurations, including General, Interfaces and Networks configuration. (1) General Configuration IP Routing > OSPF > General Item Description Mode Select from Off or On to open or close OSPF function. Select from Off or On to open or close redistribute local Redistribute local routes routes. Select from Off or On to open or close redistribute Redistribute connected routes connected routes.
(2) Interfaces Configuration There are 2 parts for OSPF Interfaces configuration. z OSPF Interfaces Summary Click Edit button to edit the existed interface. Click Delete button to delete the existed interface. z Add/Edit OSPF Interface Note: This interface can be added at maximum is 2. IP Routing > OSPF > Interfaces Description Select from Off or On to use or not to use the OSPF function in the interface. Select from eth1 (WAN Ethernet) or LAN. Select from none or md5 to approve authentication.
(3) Networks Configuration There are 2 parts for OSPF Networks configuration. z OSPF Networks Summary You can edit and delete the existed OSPF networks. z OSPF Networks Add/Edit This sub configuration is used to configure all the networks, the maximum is 2. Item Mode Prefix Prefix Length Area IP Routing > OSPF > Networks Description Select from Off or On to enable the network setting.
IP Routing > BGP This section allows you to set up BGP with three sub configurations, including General, Neighbors and Networks configuration. (1) General Configuration IP Routing > BGP > General Description Item General Mode AS Number Redistribute local routes Redistribute connected routes Off: BGP function is off. On: BGP function is on. The number of the autonomous system (1 ~ 4294967295) z Off: Not redistribute local routes from the device's own routing table.
(2) Neighbor Configuration The neighbors sub configuration is used to configure all the BGP routers to peer with and the maximum neighbors is 16. Item Mode IP Address AS Number Multihop Update Source Mode Update Source Address IP Routing > BGP > Neighbors Description Select from Off or On to enable the neighbor setting. Set IP address of the peer router. Autonomous system number of the peer router. Allow multiple hops between this router and the peer router.
(3) Networks Configuration The networks sub configuration allows to add IP network prefixes that shall be distributed via BGP in addition to the networks that are redistributed from other sources as defined on the general sub configuration and the maximum neighbors is 16. Item Mode Prefix Prefix Length IP Routing > BGP > Networks Description Select from Off or On to enable the network Set Prefix of the network Set Length of the prefix 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
Configuration > VPN This section allows you to configure Open VPN, IPsec, GRE, PPTP Server, and L2TP. VPNġġ> Open VPN This section allows you to set up the connection of Open VPN. The default mode is Disable. From Log tab, the interface will show the status of connection to make you follow the situation whenever it is successful or fail connection. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
11.1.1 Open VPN Common Setting (1) Click button to edit Open VPN Connection. (2) From Setting tab, you can set up the connection of Open VPN. VPN > Open VPN > Setting Item Mode Description Turn on/off Open VPN to select Disable or Enable. z z VPN Mode VPN Type z z z Server: Tick to enable Open VPN server tunnel. Client: Tick to enable Open VPN client tunnel. The default is Client. Custom: This option allows user to use the .
Protocol Select from UDP or TCP Client which depends on the application. The default is UDP. Port Enter the listening port of remote side Open VPN server. VPN Compression Authentication 11.1.2 Select Disable or Enable to compress the data stream. The default is Disable. z Select from two different kinds of authentication ways: Certificate or pkcs#12 Certificate. z The pkcs#12 option is only available on the VPN client mode.
routing rules. Local Network Network Netmask The local network option blank, the automatically. The local netmask option blank, the automatically. exported by OpenVPN. When keeping this OpenVPN will export the LAN network exported by OpenVPN. When keeping this OpenVPN will export the LAN netmask NAT z 1:1 NAT z z Tick to enable NAT Traversal for Open VPN. This item must be enabled when the router under NAT environment. Select from Off or On.
4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
Item Server VPN Network VPN Netmask Roadwarrior: Route Client Networks VPN > Open VPN > Server VPN Mode Description The network ID for Open VPN virtual network. The netmask for Open VPN virtual network. Select from Off or On. The Open VPN server will route the client traffic or not. User should fill in the client IP and netmask when this option is enabled. Local Network Network Netmask The local network option blank, the automatically. The local netmask option blank, the automatically.
Item Mode VPN Mode Custom Config VPN > Open VPN > Custom VPN Mode Description Select from Disable or Enable. The default is Disable. Select from custom mode. Import Open VPN configuration. Username Fill in the username if the imported file has already set up the username. Password Fill in the password if the imported file has already set up the password. Status Display the connection status of Open VPN, such as IP address and the connected time.
VPN > IPsec This section allows you to set up IPsec Tunnel. The setting has four tags, Connections, Authentication IDs, X.509 Certificates, and CA Certificates. For the IPsec connection which be authenticated by pre-shared key, it only need to setup the Connections and Authentication IDs. For the IPsec connection which be authenticated by RSA or TLS, the settings must cover the four parts. Item Mode VPN > IPsec > General setting Description Select from Disable or Enable. The default is Disable. 11.2.
(1) IPsec Phase 1 Setting VPN > IPsec > Connections > Phrase 1 setting Item Description Mode Select from Disable or Enable. The default is Disable. Name Short name or description. Protocol Select from IKEv1 or IKEv2. The default is IKEv1. Select from Disable or Enable. The default is Disable. When this option be enabled, the connection will be running on IKEv1 Aggressive mode Aggressive mode. (Note: This option only work on IKEv1.) Select from PSK (default), RSA, EAP-TLS.
Local Host Local ID Remote Host Remote ID The IP address of the router's public network interface. If this value is blank, the connection will automatically detect the correct IP address. The identification for authentication on local peer. Select from the created authentication IDs or empty. The IP address of the peer gateway's public network interface. If this value is blank, the connection will act the server role to wait the incoming request. The identification for authentication on remote peer.
Remote Subnet Service Note: This option only work on Policy-based IPsec VPN type. The private subnet behind the peer gateway. The available formats are A.B.C.D, A.B.C.D/M, A.B::C.D or A.B::C.D/M If this value is blank, the connection will set it as the “Remote Host” of Phase 1 setting. Note: This option only work on Policy-based IPsec VPN type. Restrict the VPN traffic to the particular protocol only. Select from the Any, TCP, UDP or L2TP.
11.2.2 IPsec > Authentication IDs This section provides the authentication ID set to authenticate the IPsec connections. In the default setting, the list of authentication ID is empty. You can create the new authentication ID by click + Add Authentication ID button. Note: Please apply the changes before editing the connection settings. Item ID Type Pre-shared Key / X.509 Certificate VPN > IPsec > Authentication IDs Description The identification for authentication. It only work on PSK type.
11.2.3 IPsec > X.509 Certificates This section provides the certificates setting which could be used by IPsec authentication ID. Each certificate will show the State and Subject information and provide the controlling buttons to let user import, download or edit the certificate/key files. Note: Please apply the changes before editing the Authentication IDs settings. 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
11.2.4 IPsec > CA Certificates This section provides the CA certificates setting which could check whether the X.509 certificate is valid or not. There is one self-signed CA (generated by the router), and it supports the user import the selfsigned CAs to the router. The self-signed CA will help the router to verify the self-signed X.509 certificate which is imported on X.509 Certificates section.
3. Add the new X.509 certificate by + Add X.509 button. (If it’s not existed.) 4. Click the Edit button to navigate the Certificate Setting page. 5. Fill up the information of the X.509 certificate. 6. Click the Generate Certificate button and Save. 7. Click the Apply button to apply the changes. Certificate Setting Item Country Name State Location Organization Name Organization Unit Name Common Name E-mail VPN > IPsec > CA Certificates Description The 2-letter country code. e.g.
4. When the file be selected and everything all right, the newly CA certificate will show the CA certificate list with Imported state. To import the X.509 certificate: 1. Navigate to X.509 Certificates tab. 2. Click the + Add X.509 button. The list will pop up the blank X.509 entry. 3. Click the Cert Import button. 4. Select the X.509 certificate file from browser window. 5. When the file be selected and everything all right, the state should be Cert or Key is missed. 6. Click the Key Import button. 7.
4. Apply the changes 5. Navigate to the Connections tab. 6. Add IPsec connection (1) Edit the phase 1 setting (2) Change Mode from Disable to Enable. (3) Save the changes. (4) Edit the phase 2 setting (5) Fill up the Local Subnet and Remote Subnet. y e.g. Local Subnet: 192.168.100.0/24, Remote Subnet: 192.168.200.0/24 (6) Save the changes 7. Apply the changes 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
Configure Net-to-Net VPN Client 1. Change Mode from Disable to Enable. 2. Navigate to the Authentication IDs tab. 3. Add the authentication ID y Keep ID as blank, Type as PSK and fill the password to Pre-shared Key field. 4. Apply the changes 5. Navigate to the Connections tab. 6. Add IPsec connection (1) Edit the phase 1 setting (2) Change Mode from Disable to Enable. (3) Fill the IP address of VPN server to Remote Host Field. y e.g. Remote Host: 10.0.0.
4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
IPsec Net-to-Net with Pre-shared Key result y Server y Client z RSA authentication - Server Prepare the self-signed CA certificate 1. Navigate to the CA Certificates tab. 2. Edit the self-signed CA. (Skip it if the self-signed CA is generated.) (1) Fill the information of the self-signed CA (2) Country Name: CN (3) Organization Name: Company (4) Common Name: IPsec.ca (5) Click the Generate Certificate button (6) Save the changes 3. The State of self-signed CA will be Waiting Apply 4. Apply the changes 5.
6. Refresh the page Prepare the X.509 certificates 1. Navigate to the X.509 Certificates tab. 2. Click the add button to add the X.509 certificate 3. Edit the newly X.509 certificate for the local router. (1) Fill the information of the X.509 certificate (2) Country Name: CN (3) Organization Name: Company (4) Common Name: local.IPsec (5) Click the Generate Certificate button (6) Save the changes 4. Click the add button to add the X.509 certificate 5. Edit the newly X.509 certificate for the remote router.
7. Waiting for the State of X.509 Certificate become generated 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
Prepare the authentication IDs 1. Navigate to the Authentication IDs tab. 2. Add tow authentication IDs y Keep first one's ID as blank, Type as RSA and select the C=CN, O=Company, CN=local.IPsec X.509 certificate. y Keep second one's ID as blank, Type as RSA and select the C=CN, O=Company, CN=remote.IPsec X.509 certificate. 3. Apply the changes Setup the connection on VPN server 1. Change Mode from Disable to Enable. 2. Navigate to the Connections tab. 3.
4. Apply the changes 4G LTE COMPACT INDUSTRIAL CELLULAR ROUTER_M330/M330-W - UM V1.1.
z RSA authentication – Client Prerequisite for VPN Client with RSA authentication 1. The self-signed CA certificate which generated by VPN server 2. The X.509 certificate and key for remote router which generated by VPN server These files could be downloaded from VPN server. The detail could reference “ How to download the certificate section ” of user manual. Import the CA certificate and the X.509 certificate Please refer the Certificate Importing section of user manual to import the required files.
Setup the connection on VPN client 1. Change Mode from Disable to Enable. 2. Navigate to the Authentication IDs tab. 3. Add one authentication ID y Keep second one's ID as blank, Type as RSA and select the C=CN, O=Company, CN=remote.IPsec X.509 certificate. 4. Apply the changes 5. Navigate to the Connections tab. 6. Add IPsec connection (1) Edit the phase 1 setting (2) Change Mode from Disable to Enable. (3) Change Auth Type from PSK to RSA. (4) Change the Local ID and select the remote.
