NetComm Wireless NTC620002 3G M2M ROUTER PLUS User Manual

NetComm Wireless Limited 3G M2M ROUTER PLUS

User Manual

Download: NetComm Wireless NTC620002 3G M2M ROUTER PLUS User Manual
Mirror Download [FCC.gov]NetComm Wireless NTC620002 3G M2M ROUTER PLUS User Manual
Document ID2087028
Application IDSuxAwoI3iFUrUtEYVTbevw==
Document DescriptionUser Manual
Short Term ConfidentialNo
Permanent ConfidentialNo
SupercedeNo
Document TypeUser Manual
Display FormatAdobe Acrobat PDF - pdf
Filesize283.93kB (3549172 bits)
Date Submitted2013-09-30 00:00:00
Date Available2014-03-29 00:00:00
Creation Date2017-10-25 15:55:42
Producing SoftwareGPL Ghostscript 9.18
Document Lastmod2017-10-25 15:55:42
Document TitleUser Manual
Document CreatorPScript5.dll Version 5.2.2

Usser Guiide
NTC-620
00 Serie
es – Inte
elligentt M2M Routerr
Copyright
Copyright© 2013 NetCom
mm Wireless Limited. All rights reserved.
The information contained herein is proprietarry to NetComm Wireless. No part of this ddocument may be translated, transcribed, reproduced, in any fform, or by any means without prior writteen
conssent of NetComm Wirreless.
Note: This document is subject too change without nottice.
Savee our environment
Wheen this equipment hass reached the end off its useful life, it mustt be taken to a recyclling centre and proceessed separately from
m domestic waste.
The cardboard box, the pplastic contained in the packaging, and thhe parts that make upp this device can be recycled in accordance with regionally eestablished regulationns. Never dispose of this
b subject to penaltiees or sanctions undeer the law. Instead, assk for disposal instrucctions from your munnicipal government.
electronic equipment aloong with your househoold waste. You may be
Please be responsible annd protect our environment.
Thiis manual cov
vers the follow
wing productss:
NetCComm Wireless NTC--6200-01
NetCComm Wireless NTC--6200-02
NetCComm Wireless Intelliggent M2M Router
www.netcommwirelless.com
DOCUMENT VVERSION
DATE
Initial documennt release
Table 1 - Document Revisionn History
Tabl
T le of
o Co
onte
entss
Ove
erview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Introduction .................................................................................................................................................................................................................................................................................................................................. 5
Target audience ........................................................................................................................................................................................................................................................................................................................... 5
Prerequisites ................................................................................................................................................................................................................................................................................................................................ 5
Notation ........................................................................................................................................................................................................................................................................................................................................ 5
Pro
oduct int roducct ion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Product overview ......................................................................................................................................................................................................................................................................................................................... 6
Package contents ........................................................................................................................................................................................................................................................................................................................ 6
Product features........................................................................................................................................................................................................................................................................................................................... 7
Phy
ysical dimensiions and indiccat ors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Physical dimensionss ................................................................................................................................................................................................................................................................................................................... 8
LED indicators.............................................................................................................................................................................................................................................................................................................................. 9
Ethernet port LED indicators..................................................................................................................................................................................................................................................................................................... 10
Interfaces ................................................................................................................................................................................................................................................................................................................................... 11
Pla
acement of t he
e rout er . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Mounting options ....................................................................................................................................................................................................................................................................................................................... 12
Inst allat ion and conf igurat ion of t he Int elli gent M2M Rou
ut er . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Powering the router .................................................................................................................................................................................................................................................................................................................... 17
Power consumption .................................................................................................................................................................................................................................................................................................................. 18
Installing the router .................................................................................................................................................................................................................................................................................................................... 18
Adv
vanced conf ig
gurat ion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
St at
a us . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Int ernet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Data Connection ........................................................................................................................................................................................................................................................................................................................ 23
Connect on Demandd ................................................................................................................................................................................................................................................................................................................. 27
Operator Settings ....................................................................................................................................................................................................................................................................................................................... 31
SIM security settingss ................................................................................................................................................................................................................................................................................................................. 32
LAN ............................................................................................................................................................................................................................................................................................................................................ 36
Routing ....................................................................................................................................................................................................................................................................................................................................... 40
VPN ............................................................................................................................................................................................................................................................................................................................................ 50
Serrvices. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
Dynamic DNS............................................................................................................................................................................................................................................................................................................................. 64
Network time (NTP) .................................................................................................................................................................................................................................................................................................................... 65
Data stream manageer ............................................................................................................................................................................................................................................................................................................... 66
Watchdogs ................................................................................................................................................................................................................................................................................................................................. 67
SNMP ......................................................................................................................................................................................................................................................................................................................................... 70
TR-069 ........................................................................................................................................................................................................................................................................................................................................ 72
GPS ............................................................................................................................................................................................................................................................................................................................................ 73
SMS messaging ......................................................................................................................................................................................................................................................................................................................... 74
Diagnostics ................................................................................................................................................................................................................................................................................................................................ 78
Sending an SMS Diaagnostic Command ................................................................................................................................................................................................................................................................................... 81
Sys
st em . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
Log ............................................................................................................................................................................................................................................................................................................................................. 88
System Configuratioon ................................................................................................................................................................................................................................................................................................................ 92
ment .......................................................................................................................................................................................................................................................................................................... 99
HTTPS key managem
SSH Key Managemeent............................................................................................................................................................................................................................................................................................................ 103
App
pendix
App
pendix
App
pendix
App
pendix
A:
B:
C:
D:
Tab
bles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
Devvice Mount ing Dimensions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108
Mou
unt ing Brackett . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
Deff ault Set t ings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
Restoring factory deefault settings ........................................................................................................................................................................................................................................................................................... 111
Recovery mode ........................................................................................................................................................................................................................................................................................................................ 112
App
pendix E: HTT
TPS - Uploadin
ng a self -signe
ed cert if icat e . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
App
pendix F: RJ-4
45 connect or . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
Saff et y and produ
uct care . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
NetComm Wireless Intelligent M2M Router
www.netcommwireless.com
Ove
O ervie
ew
In
ntroduc
ction
This document provides you all the informatioon you need to set upp, configure and use the NetComm Wireleess NTC-6200 Intelligent M2M Router.
Ta
arget a
audienc
ce
This document is intendeed for system integrators or experienced hardware
installers wwho understand teleccommunications terminology and conceptts.
Prrerequ
uisites
Befoore continuing with the installation of your Intelligent M2M Routter, please confirm thhat have the followingg:
A devvice with a working Etthernet network adappter.
A webb browser such as Internet Explorer, Mozilla Firefox or Google Chrome.
A flathhead screwdriver if field terminated power is required.
Notation
The following symbols arre used in this user guide:
The followingg note requires attenntion.
The followinng note provides a warning.
The followinng note provides usefful information.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
Product introduction
Product overview
Penta-band 3G with quad-band 2G auto-fallback
HSPA+ up to 14.4 Mbps DL
Ethernet port with full passive Power over Ethernet (PoE) support (802.3af) (NTC-6200-01 only)
RS232/RS422/RS485 Port and USB 2.0 OTG port
Integrated ZigBee multipoint mesh wireless networking (NTC-6200-01 only)
Built in GPS supporting an active or passive GPS Antenna via external SMA connector
Three multi-purpose I/O ports
One dedicated ignition input
Internal diversity antennas with option for external main antenna (autosensing)
Intelligent, Tri-Colour LED display for clear, easy to read modem status information
Extensive device management with support for TR-069, Web GUI and full feature management with SMS
Flexible mounting suitable for in-home use or industrial applications with built-in wall mount and DIN rail mounting options
Package contents
The NetComm Wireless Intelligent M2M Router package consists of:
1 x Intelligent M2M Router
2 x 3G antennas
1 x 1.5m yellow Ethernet cable 8P8C
1 x DIN rail mounting bracket
1 x six-way terminal block
1 x quick start guide and safety manual
If any of these items are missing or damaged, please contact NetComm Wireless Support immediately. The NetComm Wireless Support website can be found at:
http://support.netcommwireless.com.
NetComm Wireless Intelligent M2M Router
www.netcommwireless.com
Prroduct feature
es
The NetComm Wireless NNTC-6200 Intelligent M2M Router is an M22M device designed by NetComm Wireleess to address the rappid growth in M2M deeployments. It has beeen designed to provvide
price. Com
mpatible with networkk worldwide, the Intelligent M2M Router caan be managed remootely even when it does not have an Internnet
statee-of-the-art features aand versatility at an affordable
connnection via the use off SMS diagnostics annd commands.
The Intelligent M2M Routter includes many feaatures such as Dial on Demand which proovides a means to seeamlessly connect or disconnect the mobbile broadband conneection to conserve ussage;
TR-0069 support for easy management of a grroup of Intelligent M2M Routers; and the aability to function as an
a SSH server to secure communications.. Additionally, the open management systtem
allowws you to expand thee feature set by produucing your own custoom software applicatiions.
The NetComm Wireless Intelligent M2M Routeer meets the global demand
for a reliablee and cost-effective M2M
M device that succcessfully caters to maass deployment acrooss businesses.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
Physical dimensions and
indicators
Physical dimensions
Below is a list of the physical dimensions of the Intelligent M2M Router.
Figure 1 – Intelligent M2M Router Dimensions
INTELLIGENT M2M ROUTER
(WITHOUT EXTERNAL ANTENNAS ATTACHED)
Length
143 mm
Depth
107 mm
Height
34 mm
Weight
180g
Table 2 - Device Dimensions
NetComm Wireless Intelligent M2M Router
www.netcommwireless.com
LE
ED ind
dicatorss
The Intelligent M2M Routter uses 7 LEDs to display the current sysstem and connection status.
Figure 2 - Inte
telligent M2M Router LED Indicators
LEED ICON
NAME
Power
COLOUR
STATE
DESCRIPTIOON
Off
Power off
Double fflash
Powering up
On
Power on
On
Power on in recoverry mode
Slow flasshing
Hardware error
On
Connected via WWA
AN
Blinking
Traffic via WWAN
Slow flasshing
Connecting PDP
On
Registered network
Slow flasshing
Registering network
Slow flasshing
SIM PIN locked
Fast flasshing
SIM PUK locked
On
Can’t connect
On
3G
On
2G GPRS
On
GSM only (no GPRSS)
Networrk
Signal strength
TTable 3 - LED Indicatoors
Thee term “blinking” meanss that the LED may pulse, with the intervals thatt the LED is on and off nnot being equal. The term “flashing” means thaat the LED turns on andd off at equal intervals.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M RRouter
Signal strength LEDs
The following table lists the signal strength range corresponding with the number of lit signal strength LEDs.
NUMBER OF LIT LEDS
SIGNAL STRENGTH
All LEDs unlit
< -109 dBm
-109 dBm to -101dBm
-101 dBm to -91 dBm
-91 dBm to -85 dBm
-85 dBm to -77 dBm
> -77 dBm
Table 4 - Signal strength LED descriptions
LED update interval
The signal strength LEDs update within a few seconds with a rolling average signal strength reading. When selecting a location for the router or connected or positioning an external antenna,
please allow up to 20 seconds for the signal strength LEDs to update before repositioning.
Ethernet port LED indicators
The Ethernet port of the Intelligent M2M Router has two LED indicators on it.
Figure 3 - Ethernet port LED indicators
The table below describes the statuses of each light and their meanings.
LED
STATUS
DESCRIPTION
On
There is a valid network link.
Blinking
There is activity on the network link.
On
The Ethernet port is operating at a speed of 100Mbps.
Off
The Ethernet port is operating at a speed of 10Mbps or no Ethernet cable is connected.
Green
Amber
Table 5 - Ethernet port LED indicators description
NetComm Wireless Intelligent M2M Router
10
www.netcommwireless.com
In
nterface
es
The following interfaces aare available on the Intelligent M2M Routeer:
Figure 4 - Interfacess
ITEM
DESCRIPTION
Main anttenna socket
SMA female connector for main antenna.
Auxiliaryy antenna socket
SMA female connector for auxiliary antenna.
GPS anteenna socket
SMA female connector for GPS antenna.
Six-way terminal block connector
Connect power sourrce, ignition and I/O wires hhere. Power, ignition and I//O wires may be terminatedd on optional terminal blockk and connected to DC inpput jack.
Refer to the diagram
m and table on under Step 3 of the Installing your device section for correct wirinng of the terminal block. Opperates in the 8-40V DC range.
Press and hold for leess than 5 seconds to rebooot to normal mode.
Reset buutton
Press and hold for 5 to 15 seconds to reboot too recovery mode.
Press and hold for 15 to 20 seconds to reset thhe router to factory default settings.
SIM cardd slot
Insert SIM card heree.
RJ45 PoE Ethernet port
Connect one or seveeral devices via a network sswitch here. This port can also optionally receive Pow
wer over Ethernet (802.3af PoE) in which case the DC
C power
supply can serve as a backup power source iff required (PoE available onn NTC-6200-01 only).
Mini USBB 2.0 OTG port
Provides connectivity for optional external storaage or a USB Ethernet donngle. Supplies up to 0.5A too connected device.
Serial poort
Female DB9 port supporting 9-wire RS-232, RSS-485 or RS-422 (software selectable).
Table 6 – Interfacess
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
11
Plac
P cem
ment of tthe rou
uter
The two external high-peerformance antennas supplied with the rouuter are designed to provide optimum siggnal strength in a wide range of environmeents. If you find the signal strength is weaak, try
a acceptable signall, try moving the routeer to a different placee or mounting it differrently.
adjusting the orientation of the antennas. If yoou are unable to get an
Note: When sselecting a location foor the router, allow att least 20 seconds foor the signal strength LEDs to update befoore trying a different llocation or connectinng an external antennna.
Mountin
ng optio
ons
The Intelligent M2M Routter can be quickly annd easily mounted in a variety of locationss.
Mo
ounted fla
at against th
he wall
Wheen mounted flat againnst the wall, the Intelligent M2M Router has a slimline form facttor. Use appropriatelyy sized screws in thee mounting holes provvided on the base off the unit.
Figure 5 - W
Wall mount - Flat agaainst the wall
NetCComm Wireless Intelliggent M2M Router
12
www.netcommwirelless.com
Pe
erpendicullar to the wall
If a large surface area is not available, there is the option of mounting the router perpeendicular to the wall. This
T gives the router a small wall footprintt while remaining seccurely attached. Use
apprropriately sized screwws in the mounting hooles provided on the back of the unit.
Figure 6 - Waall mount - Perpendicu
cular to the wall
C Section DIIN Rail mo
ount
The Intelligent M2M Routter easily slides onto a C Section DIN rail so that it is horizontaally mounted. The DINN Rail mounting bracket is not required foor C Section DIN rail mounting.
Figuree 7 - C Section DIN raiil mount
To mount
m the unit on a C--Section DIN rail, slidde it on as illustrated below:
Figure 8 - Mounting the unit onn a DIN rail
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
13
Mounting bracket
The provided mounting bracket provides additional methods of mounting the Intelligent M2M Router.
To attach the mounting bracket, slide it onto the rear of the router as shown in the diagram below:
Figure 9 - Sliding on the mounting bracket
To remove the bracket, press the PUSH button and slide the router off the bracket:
Figure 10 - Removing the mounting bracket
NetComm Wireless Intelligent M2M Router
14
www.netcommwireless.com
Ussing the m
mounting brracket for wall moun
nting
By first attaching the DINN rail bracket to the wall,
w the Intelligent M22M Router can be eassily attached and rem
moved from the brackket.
Figure 11 – Wal
all mount - Mounted via
ia DIN rail bracket
Ussing the m
mounting brracket for Top hat D
DIN rail mo
ounting
The Intelligent M2M Routter may be vertically mounted to the wall with
w the bracket by ssliding the bracket onnto a top hat DIN rail
Figure
re 12 - Top hat DIN railil mount
Alterrnatively, you can attaach it to the DIN Rail by using the V bendd in the bracket as illuustrated below:
Figurre 13 - Attaching the m
mounting bracket to the
t DIN rail using the V bend
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
15
Desk mount
In situations where wall mounts and DIN rails are not required, you can simply place the Intelligent M2M Router on a desk using its rubber feet to prevent it from slipping.
Figure 14 - Desk mount
NetComm Wireless Intelligent M2M Router
16
www.netcommwireless.com
Insta
allation
n an
nd confiigurration
of
o th
he In
ntelllige
ent M2M
MR
Routter
Po
owerin
ng the router
The Intelligent M2M Routter can be powered in one of three ways:
1.
Power overr Ethernet (802.3af PooE) (available on the NTC-6200-01 only)
2.
DC power iinput via 6-pin conneector (8-40V DC)
3.
DC power iinput via field terminaated power source (88-40V DC)
The green power LED onn the router lights up when a power sourcee is connected.
Po
ower over Ethernet (802.3af
Po
oE) (availaable on the
e NTC-620
00-01 only))
Power over Ethernet (PoEE) is a method of connnecting network devvices through Etherneet cable where power and data are passeed along a single cabble. This may be a deesirable method of
o have a single cable running to the Inttelligent M2M Router.
powering the device if PooE is available, or if itt’s most convenient inn the desired installattion environment to only
Therre are 5 power classees defined in the IEEEE 802.3-2005 standard, of which the Intel ligent M2M Router iss a class 3 device.
CLASS
CLASSIFICAATION CURRENT
POW
WER RANGE
CLASS DEESCRIPTION
26-30 mA
6.49 – 12.95 W
Mid power
Tab
able 7 - PoE power classses
y router to a PoE innjector or PoE network switch using the bundled yellow Ethernnet cable 8P8C.
To use PoE to power the Intelligent M2M Routter, simply connect your
DC
C power v
via 6-pin co
onnector
The DC input jack can acccept power from a separately
sold DC power supply. Both a standard temperaturre range DC power supply and an extendded temperature rangge DC power supply are
available to purchase as accessories.
To power
the device via DC Power via the 6-ppin connector, removve the attached greenn terminal block from your router and connect the external DCC power supply to thee router’s green DC power
jack.
DC
C power v
via field terrminated power
sou
urce
If an existing 8-40V DC ppower supply is availaable, you can insert the
t wires into the suppplied terminal block to power your router. Use a No. 3 flatheadd screwdriver to tighten the terminal blocck
s the polarity of the wires are correctlyy matched, as illustrated below.
screws and secure the ppower wires, making sure
Figure 155 - Locking Power Term
minal Block
TERMINAL
www.netcommwireless.com
DESCRRIPTION
Positive wire for powerr.
Ground wire.
NetComm Wireeless Intelligent M2M Router
17
i
I/O
Dedicated terminal for ignition detection.
Three terminals used for input/output detection. (Please refer to the User Guide).
Table 8 - Locking power block pin outs
Failover power support (NTC-6200-01 only)
The Intelligent M2M Router includes support for connection of two power sources at the same time. When a PoE Ethernet cable is connected and DC power is also supplied to the DC input jack
of the router, the router will source power exclusively from the PoE source. In the event that power from the PoE cable is lost, the router will automatically switch to source power from the DC
input jack, without affecting the router’s operation. When PoE power is restored, the router automatically switches back to receive power from the PoE input source.
Viewing power source information
You can view the current power input mode in the Advanced status section of the device’s web user interface. This is useful for remotely monitoring the device. You can also use the Software
Development Kit to access this information for advanced purposes (e.g. configuring SMS alerts to inform you of the power status of the router).
To view the router’s power source information, log in to the router and expand the Advanced status box on the status page. See the Status section of this manual for more information on the
status page.
Power consumption
To assist with power consumption planning, the following table summarises average power consumption during the various states of the Intelligent M2M Router under normal usage conditions.
It’s important to note that this table serves as an indication only as the power consumed by the device is affected by many variables including signal strength, network type, and network activity.
Average power consumption figures
STATE
POWER CONSUMPTION
Powered on, idle and connected to packet data
1.2W
Powered on, connected to packet data with average load
2.0W
Powered on, connected to packet data with heavy traffic
4.0W
Peak power draw at maximum 3G module transmission power
5.0W
Table 9 - Average power consumption figures
Installing the router
After you have mounted the router and connected a power source, follow these steps to complete the installation process.
1.
Connect equipment that requires network access to the Ethernet port of your router. This may be your computer for advanced configuration purposes, or your end equipment which
requires data access via the Intelligent M2M Router. You can connect one device directly, or several devices using a network switch.
If you’re using PoE as the power source, you need to connect any devices via an available data Ethernet port on your PoE power source (be it a PoE network switch or PoE power
injector).
2.
Ensure the external power source is switched on and wait 2 minutes for your Intelligent M2M Router to start up. To check the status of your router, compare the LED indicators on
the device with those listed on page 8 of this guide.
NetComm Wireless Intelligent M2M Router
18
www.netcommwireless.com
Adv
A vanc
ced con
nfig
gura
ation
The Intelligent M2M Routter comes with precoonfigured settings thaat should suit most cuustomers. For advancced configuration, logg in to the web-basedd user interface of the router.
To loog in to the web-baseed user interface routter:
1.
Open a web browser (e.g. Internet Explorer, Firefox, Safari), type http://1 92.168.1.1 into the address bar and press Enter. The web-baased user interface log in screen is displayyed.
Figure 16 – Log inn prompt for the web-bbased user interface
2.
Enter the loogin username and password.
If this is thee first time you are loggging in or you have not previously configgured the password ffor the “root” or “adm
min” accounts, you caan
use one of the default account details
to log in.
ADMIN MANAGER ACCOOUNT
ROOT MANAGER ACCOUNT
Username:
addmin
Useername:
rooot
Password:
addmin
Passsword:
addmin
Table 10 - M
Management accountt login details
Note: To acceess all features of thee router, you must use the root manager aaccount.
For security reeasons, we highly recommend that you change the passwordds for the root and addmin accounts upon initial installation. Youu can do so by navigating to the System and
then Administtration page.
The Status page is displaayed when you log inn successfully.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
19
Status
The status page of the web interface provides system related information and is displayed when you log in to the Intelligent M2M Router management console. The status page shows System
information, LAN details, Cellular connection status, Packet data connection status and Advanced status details. You can toggle the sections from view by clicking the
show or hide them. Extra status boxes will appear as additional software features are enabled (e.g. VPN connectivity).
or
buttons to
Figure 17 - The Status page
NetComm Wireless Intelligent M2M Router
20
www.netcommwireless.com
ITEM
DEFINITION
System information
System up time
The current uptime of the router.
Board version
The hardware veersion of the router.
Serial Number
The serial numbber of the router.
Software
The software version number running on thhe router.
Model
The type of phone module and the firmwarre version of the module.
Firmware version
The firmware revvision of the phone modulee.
IMEI
The Internationaal Mobile Station Equipmennt Identity number used to uniquely
identify a mobile device.
LAN
IP
The IP address and subnet mask of the rouuter.
MAC Address
The MAC address of the router.
Ethernet Port Status
Displays the currrent status of the Ethernet port and its operating speeed.
Cellular connection status
SIM Status
Displays the acttivation status of the router on the carrier network.
Signal strength (dBm)
The current signnal strength measured in d Bm
Network registration statuus
The status of thee router’s registration for thhe current network.
Operator selection
The mode used to select an operator netwwork.
Current operator
The current operator network in use.
Roaming status
The roaming staatus of the router.
Allowed bands
The bands to whhich the router may connecct.
Current band
The current band being used by the routerr.
Coverage
The mobile equipment identifier (MEID) of the router, a unique code for identifying devices on a CDMA network.
WWAN Connection Statuus
Profile name
The name of thee active profile.
Status
The connection status of the active profile..
Default profile
Indicates whether the current profile in usee is the default profile.
WWAN IP
The IP address assigned by the mobile bro
roadband carrier network.
DNS server
The primary andd secondary DNS servers ffor the WWAN connection.
APN
The Access Poinnt Name currently in use.
Connection uptime
The length of tim
me of the current mobile coonnection session.
Advanced status
Mobile country code
The Mobile Country Code (MCC) of the rouuter.
Mobile network code
The Mobile Netw
work Code (MNC) of the roouter.
Signal quality (Ec/N0)
A measurement of the portion of the receivved signal that is usable. This is the signal strength minus
m the signal noise level..
Received signal code poower (RSCP)
The power level of the signal on the currennt connection’s particular channel.
Power input mode
Displays whetheer power is currently being sourced from the PoE Ethernet port or from the DC innput jack (PoE available onn NTC-6200-01 only)
HSUPA category
Displays the HSUPA category (1-9) for thee current uplink
HSDPA category
Displays the HSDPA category (1-8) for thee current downlink.
SIM ICCID
The Integrated Circuit
Card Identifier of thee SIM card used with the roouter, a unique number up to 19 digits in length.
Primary scrambling codee (PSC)
The Primary scrambling code for the curreent signal.
DC input voltage
Displays the currrent voltage of the power iinput source provided via the
t DC Input jack
Location area code (LACC)
The ID of the cell tower grouping the curreent signal is broadcasting from.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
21
IMSI
The International mobile subscriber identity is a unique identifier of the user of a cellular network.
Cell ID
A unique code that identifies the base station from within the location area of the current mobile network signal.
Channel number (UARFCN)
The channel number of the current 3G/2G connection.
Table 11 - Status page item details
NetComm Wireless Intelligent M2M Router
22
www.netcommwireless.com
Interrnet
The Internet section provvides configuration opptions for Wireless WAN,
W LAN, Routing annd VPN connectivity.
Data
Co
onnectio
on
The data connection pagge allows you to configure and enable/disable the connection profile. To access this page, click on the Networking menu, annd under the Wirelesss WAN menu, selectt the
Dataa Connection item.
Figure 118 – Data connectionn settings
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
23
ITEM
DEFINITION
Data connection
Transparent Bridge (PPPoE)
Toggles the transparent bridge function on and off.
Profile name list
Default
Sets the corresponding profile to be the default gateway for all outbound traffic except traffic for which there are configured static route rules or profile routing settings.
Status
Toggles the corresponding profile on and off. If your carrier supports it, two profiles may be turned on simultaneously.
APN
The APN configured for the corresponding profile.
Username
The username used to log on to the corresponding APN.
Roaming settings
Allow data roaming
When set to ON, the router will allow local devices to access the Wireless WAN network when the MachineLink 3G is roaming onto a foreign network. When set to OFF, the
router will deny network access to data services when roaming onto a foreign network. This setting is ON by default.
Table 12 - Data connection item details
Connecting to the mobile broadband network
The router supports the configuration of up to six APN profiles; these profiles allow you to configure the settings that the router will use to connect to the 2G/3G network and switch easily
between different connection settings.
For advanced networking purposes, you may activate a maximum of two profiles simultaneously (dependant on network support). When activating two connection profiles, you should avoid
selecting two profiles with the same APN as this can cause only one profile to connect. Similarly, activating two profiles which are both configured to automatically determine an APN can cause a
conflict and result in neither profile establishing a connection. We recommend that the two active connection profiles have differing, manually configured APNs to avoid connection issues and
ensure smooth operation.
Manually configuring a connection profile
To manually configure a connection profile:
1.
Click the Edit button corresponding to the Profile that you wish to modify. The data connection profile settings page is displayed.
Figure 19 - Data connection profile settings
NetComm Wireless Intelligent M2M Router
24
www.netcommwireless.com
2.
Click the Prrofile toggle key to tuurn the profile on. Addditional settings appeear.
Figure 20 - Dataa connection settings - Profile turned on
3.
In the Profille name field, enter a name for the profilee. This name is only uused to identify the prrofile on the router.
4.
Ensure thatt the Automatic APN selection toggle key is set to off. If it is noot, click it to toggle it to the off position.
5.
In the APN field, enter the APN Name (Access Pointt Name) and if requireed, use the Usernam
me and Password fieldds to enter your loginn credentials.
6.
Next to Autthentication type, seleect the either CHAP or
o PAP depending onn the type of authentiication used by your provider.
7.
The Reconnnect delay field speccifies the number of seconds to wait betweeen connection attem
mpts. The default settting of 30 seconds iss sufficient in most caases but you may modify it
to wait up to 65535 seconds if you
y wish.
8.
The Reconnnect retries field speccifies the number of times
to attempt to coonnect to the network if the router fails to establish a connectioon. It is set to 0 by deefault which causes the
router to atttempt to reconnect inndefinitely.
9.
The Metric value is used by routter to prioritise routess (if multiple are availlable) and is set to 200 by default. This valuue is sufficient in mosst cases but you mayy modify it if you are
aware of the effect your changees will have on the service.
10.
The MTU field allows you to modify the Maximum Transmission Unit usedd on the connection. Do not change this unless
instructed to bby your carrier.
11.
Use the NAAT Masquerading togggle key to turn NAT Masquerading
on or off. NAT masquerading, also known simpply as NAT is a commmon routing feature which
w allows multiple LAN
devices to appear as a single WAN
W IP via network address translation. Inn this mode, the routeer modifies network traffic sent and receivved to inform remote computers on the intternet
behind the router actually originaated from the WAN IPP address of the routter’s internal NAT IP aaddress. This may bee disabled if a framedd
that packetts originating from a machine
route configguration is required and
a local devices reqquire WAN IP addressses.
12.
For advancced networking such as using dual simultaaneous PDP contextss, you may wish to coonfigure a particular profile to route only ccertain traffic via that profile by configuring a
custom adddress and mask of traaffic to send via that profile. To do this, in the Profile routing seettings section, enter the Network addresss and Network mask of the remote network. If
you do not want to use this featuure, or are unsure, please leave these fiellds blank, which will not designate any paarticular traffic to be rrouted via this profilee. For more informatioon on
configuringg Profile routing settinngs, see the Setting a default gateway witth two active connecttion profiles example.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
25
13.
Click the Save button when you have finished entering the profile details.
Confirming a successful connection
After configuring the packet data session, and ensuring that it is enabled, click on the Status menu item at the top of the page to return to the Status page. When there is a mobile broadband
connection, the WWAN section is expanded showing the details of the connection and the Status field displays Connected. To see details on the connected session, you can click the Show data
usage button.
Figure 21 - Packet data connection status section
NetComm Wireless Intelligent M2M Router
26
www.netcommwireless.com
Connect
t on De
emand
The connect on demand feature keeps the Paacket Data Protocol (PDP) context deactivvated by default while making it appear too locally connected ddevices that the routeer has a permanent
attempts to esttablish a mobile broaadband data connection.
connnection to the mobile broadband network. When a packet of innterest arrives or an SSMS wake-up commaand is received, the router
Wheen the data connectioon is established, the router monitors traffic and terminates thee link when it is idle.
Note: When interesting packets arrive, the recovery tim
me for the wireless W
WAN connection is appproximately 20-30 seeconds.
Co
onfiguring
g Connect on Deman
nd
To configure Connect on demand:
1.
Click the Networking menu item
m from the top menu bar.
2.
On the Connnect on demand pagge, click the Connectt on demand toggle key so that it is ON. Extra
E options appear. See the following suub-sections for furtheer instructions.
Figure 22 - Connnect on demand conffiguration options
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
27
Setting the router to dial a connection when traffic is detected on specific ports
In some situations, you may wish to have the internet connection disabled except at times when outbound traffic to a particular external host’s port or range of ports is sent to the router. To use
this feature, click Enable dial port filter and enter the port number or list of port numbers separated by commas. When you select this option, all outbound ICMP/TCP/UDP packets to any remote
host on the specified port(s) will trigger the connection to dial. Note that when this feature is enabled, the options to ignore specific packet types are not available.
Figure 23 – Dial on demand - Data activity triggered connection
You can allow Microsoft network awareness (NCSI) traffic through but if you prefer that they do not trigger the connection, click the Ignore Microsoft network awareness (NCSI) traffic toggle key
to set it to ON.
Figure 24 - DIal on demand - Ignore NCSI traffic
Excluding certain packet types from triggering the connection to dial
Depending on your environment, you might prefer to exclude certain types of traffic passing through the router from triggering the data connection. You can tell the router to ignore outbound
TCP, UDP or ICMP packets. When any of these options are checked the router will not dial a connection when that type of outbound destined data packet reaches the router from a locally
connected device.
Figure 25 – Dial on demand - Excluding IP protocols
Excluding certain application types from triggering the connection to dial
Some devices may generate general traffic as a part of normal operation which you may not want to trigger the data connection. You can set the router to ignore Domain Name System (DNS),
Network Time Protocol (NTP) or Microsoft network awareness (NCSI) traffic from devices behind the router. When you check the box for these options, it tells the router to ignore the request from
that application type and will not dial a connection when this data type is received.
Figure 26 - Dial on demand - Excluding application types
NetComm Wireless Intelligent M2M Router
28
www.netcommwireless.com
Se
etting time
ers for conn
nection an
nd disconn
nection
The router has a numberr of timer settings which let you determine when a connection iis dialled and when it is disconnected.
Figure 27 – Dial onn demand - Connect and
an disconnect timers
OPTION
DESCRIPTION
On data activity, stay online for at least
When traffic as per the connfigured settings above apppear, the router will either continue to stay online, or dial a connection and will not disconnect it
for the specified time periood (min. 1 minute, max. 1 hour).
This timer is continuoously reset throughout the dduration of a dial-up sessioon, whenever
data activity is detected mmatching the rules above.
After connectingg, stay online for at least
This timer configures the rrouter to not hang-up the connection for the specified time period after initially ddialling the connection. Thiss setting cannot
be less than the keep onlinne period above. This timeer affects the connection onnly once per dial up session
on, at the beginning of the session.
After hanging upp, don’t redial for
After a connection has beeen disconnected, you can tell the router to rest for a period
of time before re-diaalling.
Disconnect regaardless of traffic after
Forces the router to disconnnect the connection regardless of the traffic passingg through it. The default setetting is never.
If you want to have the rouuter dial a connection at regular intervals, use Connecct regularly, every to specifify the interval between diaals. Setting this to
never effectively disables this option.
Connect regularrly, every / Randomise connect frequency by
up to
The router also features thhe ability to randomise the time
t at which the first dial action
is performed. This iss useful in situations such as
a where you
have numerous routers in an area where a power outage has occurred. Settingg a random dial time helps to reduce network congesstion when all the
routers are powered on soo they do not all try to connnect simultaneously.
When it is set to at least 2 minutes, you are able to configure the router to randomise the time it begins to dial. The randomised dial timer only affects
the initial dial after the unitt powers on or after the setttings are saved. For example, if you configure the rouuter to dial every 2 minutess with a
randomised dial time of 1 minute, the router will dial the initial connection at a time greater than 2 minutess, but less than 3 minutes. After the first dial,
the router will dial the connnection exactly every 2 minnutes.
Tablee 13 - Connect on dem
mand - Connect and dis
isconnect timers descr
criptions
Ve
erbose mo
ode
The router provides the ooption of logging all the data activity which matches the settinggs for the Dial on dem
mand feature for advanced troubleshootinng purposes. To enable the logging of thee Dial
on demand
feature, clickk the Enable verbose mode toggle key to switch it ON. See thee System log section for more information.
Figure 28 – Dial onn demand - Verbose loogging configuration
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
29
Manually connecting/disconnecting
There may be times when you need to either force a connection to be made or force a disconnection manually. You can use the Manual connect and Manual disconnect buttons to do this
whenever necessary. The online status of the connection is displayed above the buttons.
Figure 29 - Dial on demand - Online/Offline control
When you have finished configuring the options for the Dial on demand feature, click the Save button at the bottom to save your changes.
SMS Wake up
The router can also be woken up by means of an SMS message using the SMS diagnostics feature by sending a zero byte class 1 flash SMS. See the Diagnostics section for details on using the
SMS Wake up function.
NetComm Wireless Intelligent M2M Router
30
www.netcommwireless.com
Operato
or Settin
ngs
The Operator settings paage enables you to seelect which frequency band you will use ffor your connection and
a enables you to sccan for available netwwork operators in youur area.
Fi
Figure 30 - Band settinngs
p you are promptted to disable the data connection if it is
Note: In ordeer to change the celluular band settings, thhe data connection mmust be disabled. Whhen you access this page,
already activve.
You may want to do this iif you’re using the rouuter in a country with multiple frequency nnetworks that may noot all support High Sppeed Packet Access (HSPA). You can select the router to onlyy
connnect on the network ffrequencies that suit your
y requirements.
Use the Change band drrop down list to selecct the band you wish to
t use.
The following band settinngs options are availaable:
All Baands
GSM AAll
WCDM
MA All
GSM 850
GSM 900
GSM 1800
GSM 1900
WCMDA 850
MA 900
WCDM
MA 800
WCDM
MA 1900
WCDM
MA 2100
WCDM
It is not necessary to chaange the default settinng of All bands in moost cases. In fact, loccking to a particular band
b can cause connnection difficulties if thhe device is moved to
t a location where thhe
forceed band selection is no longer available.
Wheen All bands is selecteed, the router attemppts to find the most suuitable band based oon the available netwworks for the inserted SIM card.
The GSM All and the WCCDMA all options alloww you to force the deevice to lock to eitherr 2G networks only, or 3G networks only.
Clickk the Save button to ssave and apply your selection.
Op
perator se
ettings
The operator settings feaature allows you perfoorm a scan of availabble networks, and to ooptionally lock to a particular network retuurned by the networkk scan. To scan for avvailable networks, set the
and requires that the packet dataa session be disconneected prior to scanning.
Seleect operator mode froom automatic to Manuual then click the scaan button. This operaation can take a few minutes
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
31
Figure 31 - Operator settings
A list of the detected 3G service carriers in your area is displayed.
Figure 32 - Detected operator list
Select the most appropriate 3G service from the list shown and click Apply.
When Select operator mode is set to Automatic, the router selects the most appropriate operator based on the inserted SIM card. This is the default option and is sufficient for most users.
SIM security settings
The SIM security settings page can be used for authenticating SIM cards that have been configured with a security PIN.
Unlocking a PIN locked SIM
If the SIM card is locked, you will receive a notice when you access the Status page after which you will be directed to the PIN settings page to enter the PIN. The PIN settings page lists the
status of the SIM at the top of the page.
If you are not redirected to the PIN settings page, to unlock the SIM:
a)
Click on the Networking menu from the top menu bar, and then click SIM security settings.
Figure 33 - SIM security settings - SIM PIN locked
NetComm Wireless Intelligent M2M Router
32
www.netcommwireless.com
b)
Enter the PIN in the Current PINN field and then enterr it again in the Confirrm current PIN field to
t confirm the PIN.
c)
member PIN option. This
T feature allows thhe router to automaticcally send the PIN to the
If you are pplacing the router in a remote, unattendedd location, you may wwish to check the Rem
SIM each tiime the SIM asks for it (usually at power up).
u This enables the SIM to be PIN locked (to prevent unauthoorised re-use of the SSIM elsewhere), whilee still allowing the rouuter to
connect to the cellular service.
When this ffeature is enabled, thhe PIN you enter when setting the Rememmber PIN feature is enncrypted and stored locally on the router. The next time the SIM asks the router forr the
PIN, the rouuter decrypts the PINN and automatically sends it to the SIM witthout user interventioon.
When this ffeature is disabled annd the SIM is PIN locked and the PIN musst be manually entereed via the router‘s configuration interface.. In situations where the
t router will be
unattendedd, this is not desirablee.
Note: Selectt Remember PIN if yoou do not want to entter the PIN code eachh time the SIM is inseerted.
d)
Click the Saave button. If successsful, the router displaays the following screeen:
En
nabling/Diisabling SIIM PIN pro
otection
The security PIN protection can be turned on or off using the PIN protection toggle keyy.
FFigure 34 - PIN Setting
ngs
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
33
Changing the SIM PIN code
If you would like to change the PIN, click the Change PIN button and enter the current PIN into the Current PIN and Confirm current PIN fields, then enter the desired PIN into the New PIN and
Confirm new PIN fields and click the Save button.
Figure 35 - PIN settings - Change PIN
When the PIN has been changed successfully, the following screen is displayed:
Figure 36 - SIM security settings – PIN unlock successful
NetComm Wireless Intelligent M2M Router
34
www.netcommwireless.com
Un
nlocking a PUK locke
ed SIM
Afterr three incorrect attem
mpts at entering the PIN, the SIM card beecomes PUK (Personnal Unblocking Key) locked and you are reequested to enter a PPUK code to unlock it.
Note: To obtaain the PUK unlock coode, you must contacct Vodafone.
You will be issued a PUKK to enable you to unllock the SIM and enteer a new PIN. Enter tthe new PIN and PUKK codes.
Clickk the Save button whhen you have finishedd entering the new PIN and PUK codes.
Figure 377 - SIM security - SIM PUK
P locked
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
35
LA
AN
LA
AN configu
uration
The LAN configuration paage is used to configgure the LAN settingss of the router and to enable or disable DNNS Masquerading.
Figure 338 – LAN configuration
on settings
The default IP of the Etheernet port is 192.168.1.1 with subnet maskk 255.255.255.0. To cchange the IP address or Subnet mask, enter
e the new IP Addrress and/or Subnet mask
m and click the Saave
buttoon.
Note: If you cchange the IP address, remember to rebooot the router and ennter the new IP addreess into your browser address bar.
DN
NS masquerad
ding
DNSS masquerading allowws the router to proxyy DNS requests from LAN clients to dynammically assigned DNSS servers. When enabled, clients on the ro
router’s LAN can thenn use the router as a DNS
server without needing too know the dynamicaally assigned cellular network DNS serverss.
M2M Routeer hands out its own IP address (e.g. 192.168.1.1) as the DNSS server address to LAN
L clients. The
With DNS masquerading ON, the DHCP serveer embedded in the Intelligent
M Router which proxiies them to the upstreeam DNS servers.
downstream clients then send DNS requests to the Intelligent M2M
With DNS masquerading OFF, the DHCP servver hands out the upstream DNS server IPP addresses to downnstream clients directtly, so that downstreaam clients send DNS requests directly to the
upsttream DNS servers wwithout being proxied by the Intelligent M22M Router.
You may also override the DNS Masquerading option by specifyinng custom DNS Serveer IP addresses in the DHCP Server configuration mentioned iin the next section off this guide. In this caase
the DHCP
server assignss downstream devicees the manually configgured addresses andd the DNS Masqueraading option is ignoreed.
In most cases, it is not neecessary to disable DNS
D masquerading but
b if you need to, clicck the DNS masquerrading toggle key to turn it OFF and then cclick the Save buttonn.
NetCComm Wireless Intelliggent M2M Router
36
www.netcommwirelless.com
DH
HCP
The DHCP page is used to adjust the settingss used by the router’ss built in DHPC Serveer which assigns IP addresses
to locally connected
devices.
DH
HCP relay con
nfiguration
In addvanced networks coonfigurations where the Intelligent M2M Router should not be rresponsible for DHCPP assignment, but insstead an existing DHHCP server is located on the Wireless WANN
connnection, the clients beehind the Intelligent M2M
M Router are ablee to communicate witth the DHCP server when
w DHCP relay is enabled. This enabless the Intelligent M2M Router to accept clieent
broaadcast messages andd to forward them onto another subnet.
To configure the router too act as a DHCP relay agent click the DHCCP relay toggle key tto turn it ON and enter the DHCP server address
into the DHCCP server address fieeld. DHCP relay is
disabled by default.
Figure 339 – DHCP relay conffiguration
DH
HCP configura
ation
You can manually set thee start and end addreess range to be used to automatically asssign addresses withinn, the lease time of the assigned address,, the default domain name suffix, primary and
secoondary DNS server, thhe primary and secondary WINS server, as
a well as the advancced DHCP settings such
s as NTP, TFTP annd Option 150/Optionn 160 (VoIP options).
Figuure 40 - DHCP configuuration
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
37
OPTION
DESCRIPTION
DHCP start range
Sets the first IP address of the DHCP range
DHCP end range
Sets the last IP address of the DHCP range
DHCP lease time (seconds)
The length of time in seconds that DHCP allocated IP addresses are valid
Default domain name suffix
Specifies the default domain name suffix for the DHCP clients. A domain name suffix enables users to access a local server, for example, server1,
without typing the full domain name server1.domain.com
DNS server 1 IP address
Specifies the primary DNS (Domain Name System) server’s IP address.
DNS server 2 IP address
Specifies the secondary DNS (Domain Name System) server’s IP address.
WINS server 1 IP address
Specifies the primary WINS (Windows Internet Name Service) server IP address
WINS server 2 IP address
Specifies the secondary WINS (Windows Internet Name Service) server IP address
NTP server (Option 42)
Specifies the IP address of the NTP (Network Time Protocol) server
TFTP Server (Option 66)
Specifies the TFTP (Trivial File Transfer Protocol) server
DHCP option 150
This is used to configure Cisco IP phones. When a Cisco IP phone starts, if it is not pre-configured with the IP address and TFTP address, it sends a
request to the DHCP server to obtain this information. Specify the string which will be sent as a reply to the option 150 request.
DHCP option 160
This is used to configure Polycom IP phones. When a Polycom IP phone starts, if it is not pre-configured with the IP address and TFTP address, it
sends a request to the DHCP server to obtain this information. Specify the string which will be sent as a reply to the option 160 request.
Enter the desired DHCP options and click the Save button.
Address reservation list
DHCP clients are dynamically assigned an IP address as they connect, but you can reserve an address for a particular device using the address reservation list.
Figure 41 – DHCP – Address reservation list
To add a device to the address reservation list:
1.
Click the +Add button.
2.
In the Computer Name field enter a name for the device.
3.
In the MAC Address field, enter the device’s MAC address.
4.
In the IP Address fields, enter the IP address that you wish to reserve for the device.
5.
If the Enable toggle key is not set to ON, click it to switch it to the ON position.
6.
Click the Save button to save the settings.
NetComm Wireless Intelligent M2M Router
38
www.netcommwireless.com
Dy
ynamic DHCP client list
The Dynamic DHCP cliennt list displays a list of
o the DHCP clients. If you want to reservee the current IP addreess for future use, click the Clone button aand the details will bee copied to the addreess
member to click the Save
S button under thhe Address reservatioon list section to conffirm the configurationn.
reservation list fields. Rem
Figuree 42 - Dynamic DHCP client
list
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
39
Routing
Static
Static routing is the alternative to dynamic routing used in more complex network scenarios and is used to facilitate communication between devices on different networks. Static routing involves
configuring the routers in your network with all the information necessary to allow the packets to be forwarded to the correct destination. If you change the IP address of one of the devices in the
static route, the route will be broken.
Figure 43 - Static routing list
Some routes are added by default by the router on initialization such as the Ethernet subnet route for routing to a device on the Ethernet subnet.
Adding Static Routes
To add a new route to the static routing list, click the +Add button. The Static routes page appears.
1.
In the Route name field, type a name for the route so that it can be identified in the static routing list.
2.
From the Network interface drop down list, select the interface for which you would like to create a static route.
3.
In the Destination IP address field, enter the IP address of the destination of the route.
4.
In the IP subnet mask field, enter the subnet mask of the route.
5.
In the Gateway IP address field, enter the IP address of the gateway that will facilitate the route.
6.
In the Metric field enter the metric for the route. The metric value is used by the router to prioritise routes. The lower the value, the higher the priority. To give the route the highest
priority, set it to 0.
7.
Click the Save button to save your settings.
NetComm Wireless Intelligent M2M Router
40
www.netcommwireless.com
Figurre 44 - Adding a staticc route
Active routing liist
Static routes are displayeed in the Active routinng list.
Figgure 45 - Active routing
ng list
De
eleting static rroutes
From
m the static routing lisst, click the
icoon to the right of the entry
e you wish to deleete.
Figure
re 46 - Deleting a statitic route
www.netcommwireless.com
NetComm Wireeless Intelligent M2M RRouter
41
RIP
RIP (Routing Information Protocol) is used forr advertising routes too other routers. Thus all the routes in the router’s
routing table will be advertised to other nearby routerss. For example, the rooute
for thhe router’s Ethernet ssubnet could be adveertised to a router on the PPP interface sidde so that a router onn this network will knoow how to route to a ddevice on the router’s Ethernet subnet. Sttatic
routees must be added manually according to your requirements. See
S Adding Static Rooutes.
Note: Some rrouters will ignore RIPP.
Figgure 47 - RIP configura
ration
To enable Routing Inform
mation Protocol (RIP)
1.
Click the RIP toggle key to switcch it to the ON positioon.
2.
Using the VVersion drop down lisst, select the version of RIP that you wouldd like to use.
3.
Select the interface for which yoou want RIP to apply. You can choose thee LAN interface, the WWAN
interface or Both.
4.
Click the Saave button to confirm
m your settings.
NetCComm Wireless Intelliggent M2M Router
42
www.netcommwirelless.com
Re
edundancy
y (VRRP) configurati
ion
Virtuual Router Redundanccy Protocol (VRRP) iss a non-proprietary reedundancy protocol designed to increasee the availability of the default gateway seervicing hosts on the same subnet. This
increeased reliability is acchieved by advertisingg a “virtual router” (an abstract representtation of master and backup
routers actingg as a group) as a deefault gateway to thee host(s) instead of onne
physsical router. Two or m
more physical routers are then configured to stand for the virtu al router, with only onne doing the actual routing at any given tiime. If the current phhysical router that is
routing the data on behalf of the virtual routerr fails, an arrangemennt is made for anotheer physical router to automatically
replace it. The physical routeter that is currently forwarding data on behhalf
of the virtual router is called the master routerr.
Master routers have a priiority of 255 and backup router(s) can havve a priority betweenn 1 and 254.
A virrtual router must use 00-00-5E-00-01-XX as
a its (MAC) addresss. The last byte of thee address (XX) is the Virtual Router Identifier (VRID), which is ddifferent for each virtuual router in the netwoork.
This address is used by oonly one physical rouuter at a time, and is the only way that othher physical routers can
c identify the masteer router within a virtuual router.
Figuure 48 - VRRP configur
uration
To configure VRRP, confiigure multiple devicees as follows and connnect them all via an Ethernet network swiitch to downstream devices.
1.
Click the Redundancy (VRRP) toggle
key to activatee VRRP.
2.
In the Virtuaal ID field, enter an IDD between 1 and 2555. This is the VRRP IDD which is different foor each virtual router on the network.
3.
In the Router priority field, enterr a value for the priority – a higher value iss a higher priority.
4.
The Virtual IP address field is ussed to specify the VRRRP IP address – thiss is the virtual IP address that both virtual routers share.
5.
Click the Saave button to save thhe new settings.
Note: Configuuring VRRP changess the MAC address off the Ethernet port annd therefore if you waant to resume with thee web configuration yyou must use the neww IP address (VRRP IP)
I or
on a commannd prompt type:
M address).
arp –d  (i.e. arp –d 192.168
8.1.1) to clear the arp cache.(old MAC
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
43
Port Forwarding
The Port forwarding list is used to configure the Network Address Translation (NAT) rules currently in effect on the router.
Figure 49 – Port forwarding list
The purpose of the port forwarding feature is to allow mapping of inbound requests to a specific port on the WAN IP address to a device connected on the Ethernet interface.
Adding a port forwarding rule
To create a new port forwarding rule:
1.
Click the +Add button. The port forwarding settings screen is displayed.
2.
Use the Protocol drop down list to select the type of protocol you want to use for the rule. The protocols selections available are TCP, UDP and All.
3.
In the Source IP Address field, enter a “friendly” address that is allowed to access the router or a wildcard IP address (0.0.0.0) that allows all IP addresses to access the router.
4.
The Source Port Range (From) and (To) fields are used to specify the port(s) on the source side that are to be forwarded. This allows you to send a range of consecutive port
numbers by entering the first in the range in the (From) field and the last in the range in the (To) field. To forward a single port, enter the port in the (From) field and repeat it in the
(To) field.
5.
In the Destination network adress field, enter the IP address of the client to which the traffic should be forwarded.
6.
The Destination Port Range (From) and (To) fields are used to specify the port(s) on the destination side that are to be forwarded. If the Source port range specifies a single port
then the destination port may be configured to any port. If the Source port range specifies a range of port numbers then the Destination port range must be the same as the Source
port range.
7.
Click the Save button to confirm your settings.
NetComm Wireless Intelligent M2M Router
44
www.netcommwireless.com
Figuree 50 - Port forwarding settings
a port forwardinng rule, click the
To delete
www.netcommwireless.com
button on the Portt forwarding list for thhe corresponding rulee that you would like to delete.
NetComm Wireeless Intelligent M2M Router
45
DMZ
The Demilitarized Zone (DMZ) allows you to configure all incoming traffic on all protocols to be forwarded to a selected device behind the router. This feature can be used to avoid complex port
forwarding rules, but it exposes the device to untrusted networks as there is no filtering of what traffic is allowed and what is denied.
The DMZ configuration page is used to specify the IP Address of the device to use as the DMZ host.
Figure 51 - DMZ configuration
1.
Click the DMZ toggle key to turn the DMZ function ON.
2.
Enter the IP Address of the device to be the DMZ host into the DMZ IP Address field.
3.
Click the Save button to save your settings.
NetComm Wireless Intelligent M2M Router
46
www.netcommwireless.com
Ro
outer Firew
wall
The Router firewall page is used to enable or disable the in-built firewall on the router. When enabled, the firewall performs stateeful packet inspectionn on inbound traffic from
f the wireless WAAN
and blocks all unknown sservices, that is, all seervices not listed on the Services configuuration page of the router.
With respect to the other Routing options on the
t Networking page, the firewall takes a low priority. The priority of the firewall cann be described as:
DMZ > MAC/IP/Port filtering rulees > MAC/IP/Port filteering default rule > Roouter firewall rules
In otther words, the firewaall is of the lowest prioority when comparedd to other manual rouuting configurations. Therefore,
a MAC/IP/Port filtering rule takees priority in the evennt that there is a confflict of
ruless. When DMZ is enabbled, MAC/IP/Port filteering rules and the roouter firewall are ignoored but the router wiill still honour the connfiguration of the Remmote router access coontrol settings listed under
Adm
ministration Settings.
Figure 552 - Router Firewall tooggle key
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
47
MA
AC / IP / P
Port filterin
ng
The MAC/IP/Port filter feaature allows you apply a policy to the traffic that passes througgh the router, both inbound and outboundd, so that network acccess can be controlleed. When the filter is
except thosee listed in the “Currennt MAC / IP / Port filtering rules in effect” liist. Conversely, whenn the default rule is seet to
enabbled with a default rule of “Accepted”, all connections will be allowed
“Droopped”, all connections are denied exceppt for those listed in thhe filtering rules list.
Figuree 53 - MAC / IP / Portt filtering
Note: When enabling MAC / IP / Port filtering and settting the default rule too “Dropped”, you shoould ensure that you have first added a filltering rule which alloows at least one knowwn
MAC/IP to acccess the router, otheerwise you will not bee able to access the uuser interface of the router without resettinng the router to factoory default settings.
Crreating a M
MAC / IP / Port filterring rule
To create a filtering rule:
1.
Click the M
MAC / IP / Port filterinng toggle key to switcch it to the ON positioon.
2.
Using the DDefault rule (inbound//forward) drop down list, select the defau lt action for the routeer to take when traffic reaches it. By defauult, this is configured to Accepted. If you
change thiss to Dropped, you shoould first configure a filter rule that allows at least one device access
to the router, otherwise you will effffectively be locked out
o of the router.
3.
Click the Saave button to confirm
m the default rule.
4.
In the Curreent MAC / IP / Port filttering rules in system
m section, click the +AAdd button.
Figure 54 - Curren
ent MAC / IP/ Port filte
tering rules in effect
5.
Enter the details of the rule in thhe section that is dispplayed and click the SSave button.
NetCComm Wireless Intelliggent M2M Router
48
www.netcommwirelless.com
Figure 55 - MAC / IP / Port filteering settings
OPTION
DESCRIPTIO
ON
Bound
Use the drop down list to seelect the direction of the traaffic for which you want to apply
a to the rule. Inbound rerefers to all traffic that is entering the
roouter including data enterinng from the WAN and the LAN.
L Outbound refers to all traffic exiting the router inccluding traffic leaving in the direction of
thhe WAN and traffic leaving in the direction of the LAN. Forward specifies traffic that
t enters on the LAN or WWAN side and is forwardedd to the
oppposite end.
Protocol
Use the drop down list to seelect the protocol for the rule. You can have the rule apply to All protocols, TCP,, UDP, UDP/TCP or ICMP.
Source MAC AAddress
Enter the MAC address in siix groups of two hexadecim
mal digits separated by co ons (:). e.g. 00:40:F4:CE:FFA:1E
Source IP Adddress
Enter the IPv4 address that tthe traffic originates from and
a the subnet mask using CIDR notation.
Destination IP Address
Enter the IPv4 address that tthe traffic is destined for and the subnet mask using CIDR notation.
Action
Select the action to take for traffic which meets the aboove criteria. You can choosse to Accept or Drop packeets. When the default rule is set to Accept,
wise, if the default rule is sett to Dropped you cannot create a rule with
yoou cannot create a rule withth an Accept action since thhe rule is redundant. Likew
a Drop action.
Comment
[O
Optional] Use this field to eenter a comment as a meanningful description of the ruule.
Table 14 - Currennt MAC / IP / Port filteering rules in effect
6.
The new rule is displayed in thee filtering rules list. Yoou can edit the rule bby clicking the
Edit button or delete the rule by clicking tthe
button.
Figuree 56 - Completed filter
ering rule
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
49
VPN
A Virrtual Private Network (VPN) is a tunnel prooviding a private link between two networrks or devices over a public network. Dataa to be sent via a VPNN needs to be encappsulated and as suchh is
geneerally not visible to thhe public network.
The advantages of a VPNN connection includee:
Data PProtection
Accesss Control
Data OOrigin Authenticationn
Data IIntegrity
Eachh VPN connection haas different configurattion requirements. Thhe following pages deetail the configuration options available foor the different VPN cconnection types.
Note: The following descriptions are an overview of thhe various VPN optionns available. More deetailed instructions are available in separaate whitepapers on the NetComm Wirelesss
website.
IPS
Sec
IPSeec operates on Layerr 3 of the OSI model and
a as such can prottect higher layered pprotocols. IPSec is used for both site to site VPN and Remote AAccess VPN. The Inteelligent M2M Router
suppports IPsec end pointts and can be configured with Site to Site VPN tunnels with thi rd party VPN routerss.
Co
onfiguring
g an IPSec VPN
From
m the menu at the topp of the screen, click Networking and under the VPN section, cclick IPSec. A list of configured IPSec VPPN connections is dissplayed.
Fig
Figure 57 - IPSec VPN List
Clickk the +Add button to begin configuring ann IPSec VPN connecttion.
NetCComm Wireless Intelliggent M2M Router
50
www.netcommwirelless.com
Figu
gure 58 – IPSec profilee edit
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
51
NetComm Wireless Intelligent M2M Router
52
www.netcommwireless.com
The following table descrribes each of the fieldds of the IPSec VPN Connection Settings page.
ITTEM
DEFINITION
IPSec profile
Enables or disabless the VPN profile.
Profile name
A name used to ideentify the VPN connection pprofile.
Remote IPSec server adddress
The IP address of thhe IPSec server.
Remote LAN address
Enter the IP address of the remote network forr use on the VPN connectioon.
Remote LAN subnet massk
Enter the subnet maask in use on the remote neetwork.
Local LAN address
Enter the IP address of the local network for u se on the VPN connection.
Local LAN subnet mask
Enter the subnet maask in use on the local netwwork.
Encapsulation type
Select the encapsulation protocol to use with tthe VPN connection. You can
c choose ESP, AH or Any.
IKE mode
Select the IKE mode to use with the VPN connnection. You can choose Main,
M Aggressive or Any.
PFS
Choose whether Peerfect Forward Secrecy is OON or OFF for the VPN connection.
IKE encryption
Select the cipher type to use for the Internet KKey Exchange.
IKE hash
Select the IKE Hashh type to use for the VPN coonnection. The hash is useed for authentication of pacckets for the key exchangee.
IPSec encryption
Select the IPSec encryption type to use with thhe VPN connection.
IPSec hash
Select the IPSec haash type to use for the VPN connection. The hash is used for authentication of packets for the VPN connecction.
DH group
Select the desired Diffie-Hellman
group to usee. Higher groups are more secure but also require lonnger to generate a key.
DPD action
Select the desired Dead
D Peer Detection actionn. This is the action to take when a dead Internet Keyy Exchange Peer is detecteed.
DPD keep alive time
Enter the time in seconds for the interval betwween Dead Peer Detection keep alive messages.
DPD timeout
Enter the time in seconds of no response fromm a peer before Dead Peer Detection times out.
IKE re-key time
Enter the time in seconds between changes oof the encryption key. To disable changing the key, seet this to 0.
SA life time
Enter the time in seconds for the security assoociation lifetime.
Select the type of key mode in use for the VPNN connection. You can seleect from:
Key mode



Prre Shared Key
RSSA keys
Certificates
Pre-shared key
The pre-shared keyy is the key that peers usedd to authenticate each otheer for Internet Key Exchange.
Remote ID
Specifies the domain name of the remote netwwork.
Local ID
Specifies the domain name of the local netwo rk.
Update Time
Displays the last tim
me the key was updated.
Local RSA Key Upload
Select the RSA key file for the local router heree by clicking the Browse button.
Remote RSA Key Uploadd
Select the RSA key file for the remote router heere by clicking the Browsee button.
Private key Passphrase
The Private key passsphrase of the router is thee passphrase used when generating
the router’s private key using OpenSSL CAA.
Key / Certificate
Select the type of key or certificate to use for aauthentication. You can select Local private key, Locaal public certificate, Remotte public certificate, CA cerrtificate, CRL certificate.
IPSec Certificate Upload
Select the IPSec ceertificate to upload by clickiing the Browse button.
Table 115 - IPSec Configuratiion Items
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
53
Op
penVPN
OpenVPN is an open souurce virtual private neetwork (VPN) program
m for creating point-too-point or server-to-m
multi-client encryptedd tunnels between hoost computers. It can traverse network adddress
w well through prroxy servers and cann run over TCP and UDP
transslation (NAT) and fireewalls and allows autthentication by certificcate, pre-shared keyy or username and paassword. OpenVPN works
transsports. Support for OOpenVPN is available on several operatingg systems, including Windows, Linux, Macc OS, Solaris, OpenBBSD, FreeBSD, NetBSSD and QNX.
Co
onfiguring
g an Open VPN serve
er
From
m the menu at the topp of the screen, click Networking and from
m the VPN section on the left, click OpenVVPN. A list of configurred OpenVPN VPN cconnections is displayyed.
Figu
gure 59 - OpenVPN VPN
PN List
Clickk the +Add button forr the type of OpenVPN server/client you would
w like to configuree.
Op
penVPN Se
erver
To configure an OpenVPN Server:
1.
Click the OOpenVPN profile toggle key to switch it to the
t ON position.
2.
Type a nam
me for the OpenVPN server
profile you aree creating.
3.
Use the Seerver port field to seleect a port number andd then use the drop ddown list to select a packet
type to use for your OpenVPN Serrver. The default OpeenVPN port is 1194 annd
default paccket type is UDP.
4.
In the VPN network address and VPN network subnnet mask fields, enterr the IP address and network subnet mask to assign to your VPPN. This is ideally an internal IP address which
differs from
m your existing addresss scheme.
5.
Next to Difffie-Hellman parameteers, click the Generatte DH button. This wiill create an encryptioon key to secure your OpenVPN connectiion.
6.
Under Servver Certificates, enterr the required details. All fields must be coompleted. The Counttry field must consist of two characters onnly. When the details have been entered, click
the Generaate CA certificate buttton to generate the Certificate
Authority (CCA) certificate basedd on this information.
7.
Under the SServer certificates seection, select the Authhentication type that yyou would like to usee for the OpenVPN Seerver.
Note: The DDiffie-Hellman parameeters can take up to 10
1 minutes to generaate. Please be patientt.
NetCComm Wireless Intelliggent M2M Router
54
www.netcommwirelless.com
Ce
ertificate Auth
hentication
In the Certificate Manageement section, enter the required details to
t create a client certtificate. All fields are required. When you have finished enterinng the details, click thhe Generate button.
Figure
Fi
60 - OpenVPN se
server configuration – Certificate manageme
ment
w format you wouuld like. If for some reeason the integrity of your
Wheen it is done, you can click the Download P12 button or the Doownload TGZ button tto save the certificatee file depending on which
netwwork has been comprromised, you can retuurn to this screen andd use the Certificate drop down list to seleect the certificate andd then press the Revvoke button to disablee it.
Optioonal: To inform the OOpenVPN server of the network address scheme of the currenttly selected certificatte, enter the network address and networkk subnet mask in the respective fields andd
clickk the Set network infoormation button. If yoou do not enter the remote subnet here, anny packet requests from the server to the client will not be recceived by the client network because it is not
aware of the remote cliennt’s subnet.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
55
Figure 61 – OpenVPN server profile settings
NetComm Wireless Intelligent M2M Router
56
www.netcommwireless.com
Use
ername / Passsword Authen
ntication
In the Username/Passwoord section, enter the username and password you would like tto use for authentication on the OpenVPN
N Server. Click the Doownload CA certificatte button to save the
ca.crt file. This file will need to be provided to the client.
Note: If yoou wish to have moree than one client connnect to this OpenVPNN server, you must usse Certificate authenttication mode as Useername/Password only allows for a single client
connectioon.
Figure 62 - OpenVPPN Server – Usernamee / Password section
Optioonal: To inform the OOpenVPN server of the network address scheme of the currenttly selected certificatte, enter the network address and networkk subnet mask in the respective fields andd
clickk the Set Network Infoormation button. If yoou do not enter the reemote subnet here, aany packet requests from
f the server to thee client will not be recceived by the client network
because it is not
aware of the remote cliennt’s subnet.
Wheen you have finished eentering all the required information, clickk Save to finish configguring the OpenVPN server.
Co
onfiguring
g an OpenV
VPN Clien
nt
1.
Click the OOpenVPN profile toggle key to switch it to the
t ON position.
2.
In the Profille name field, type a name for the OpenVVPN client profile you are creating.
3.
In the Serveer IP address field, tyype the WAN IP address of the OpenVPNN server.
4.
Use the Seerver port field to seleect a port number andd then use the drop ddown list to select a packet
type to use for the OpenVPN serveer. The default OpenVPN port is 1194 andd
default paccket type is UDP.
5.
If the Defauult gateway option is applied on the OpennVPN client page, thee OpenVPN server wiill enable connections to be made to otheer client networks connnected to it. If it is noot
selected, thhe OpenVPN connecction allows for securee communication linkks between this routeer and the remote OpenVPN server only.
6.
Use the Authentication type options to select the Autthentication type thatt you would like to usse for the OpenVPN client.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
57
Certificate Authentication
In the Certificate upload section at the bottom of the screen, click the Browse button and locate the certificate file you downloaded when you configured the OpenVPN server. When it has been
selected, click the Upload button to send it to the router.
Figure 63 - OpenVPN client - Certificate upload
Username / Password Authentication
Enter the username and password to authenticate with the OpenVPN server.
Figure 64 - OpenVPN Client - Username/Password section
Use the Browse button to locate the CA certificate file you saved from the OpenVPN Server and then press the Upload button to send it to the router.
Click the Save button to complete the OpenVPN Client configuration.
Configuring an OpenVPN P2P Connection
To configure an OpenVPN peer-to-peer connection:
1.
Set the OpenVPN profile toggle key to switch it to the ON position.
2.
In the Profile name field, type a name for the OpenVPN P2P profile you are creating.
3.
On the router designated as the master, leave the Server IP address field empty. On the router designated as the slave, enter the WAN IP address of the master.
NetComm Wireless Intelligent M2M Router
58
www.netcommwireless.com
Figure 65 - OpenVPN P2P modde settings
4.
Use the Seerver port field to seleect a port number andd then use the drop ddown list to select a packet
type to use for the OpenVPN serveer. The default OpenVPN port is 1194 andd
default paccket type is UDP.
5.
In the Locaal IP Address and Remote IP Address fields, enter the respecttive local and remotee IP addresses to usee for the OpenVPN tunnnel. The slave should have the reverse
settings of tthe master.
6.
Under the RRemote network secttion, enter the networrk Address and netwoork Subnet mask. The Network Address and
a Network Mask fieelds inform the Masteer node of the LAN
address sccheme of the slave.
7.
Press the GGenerate button to crreate a secret key to be shared with the sllave. When the timesstamp appears, you can
c click the Downloaad button to save thee file to exchange withh the
other routerr.
8.
When you hhave saved the secreet key file on each router, use the Browse button to locate the secret key file for thee master and then preess the Upload button to send it to the slaave.
Perform thee same for the other router,
uploading the slave’s secret key fille to master.
9.
When they are uploaded click thhe Save button to complete the peer-to-ppeer OpenVPN configguration.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
59
PPTP-Client
The Point-to-Point Tunnelling Protocol (PPTP) is a method for implementing virtual private networks using a TCP and GRE tunnel to encapsulate PPP packets. PPTP operates on Layer 2 of the
OSI model and is included on Windows computers.
Configuring the PPTP Client
To configure the PPTP client:
1.
From the menu bar at the top of the screen, click Networking and then from the VPN section on the left side of the screen, click PPTP client. The PPTP client list is displayed.
Figure 66 - PPTP client list
2.
Click the +Add button to begin configuring a new PPTP client profile. The PPTP client edit screen is displayed.
Figure 67 - VPN PPTP client edit
NetComm Wireless Intelligent M2M Router
60
www.netcommwireless.com
3.
Click the Ennable PPTP client toggle key to switch it to the ON position.
4.
In the Profille name list, enter a profile name for the tunnel.
This may be aanything you like andd is used to identify thhe tunnel on the routeer.
5.
Use the Ussername and Passwoord fields to enter the username and passsword for the PPTP acccount.
6.
In the PPTPP server address field, enter the IP addreess of the PPTP serveer.
7.
From the Authentication type drrop down list, select the
t Authentication typpe used on the serveer. If you do not know the authentication mmethod used, select any
a and the router wiill
m:
attempt to ddetermine the correcct authentication type for you. There are 5 authentication typess you can choose from
CHAPP – uses a three way handshake to authennticate the identity of a client.
MS-CHAP v1 – This is the Microsoft implementation of the Challengge Handshake Authenntication Protocol for which support was ddropped in Windows®
® Vista.
implementaation of the Challengee Handshake Authenntication Protocol which was introduced inn Windows® NT 4.0 and
a is still supported
MS-CHAP v2 - This is the Microsoft
todayy.
mended because it
PAP – The Password Authentication Protocol uses a password as a means of authenticaation and as such, is commonly supportedd. PAP is not recomm
transm
mits passwords unenncrypted and is not seecure.
protocool commonly used in wireless networks.
EAP – Extensible Authenticcation Protocol. An Authentication
8.
The metric value helps the routeer to prioritise routes and must be a numbber between 0 and 655535. The default value is 30 and should nnot be modified unless you are aware of the
effect your changes will have.
9.
The Use peeer DNS option allowws you to select whethher the remote clientss will use the Domainn Name Server of the PPTP server. Click thhe toggle key to set this
t to ON or OFF as
required.
10.
NAT masquuerading allows the router
to modify the packets
sent and receeived to inform remotte computers on the internet that packetss originating from a machine
behind the roouter
actually origginated from the WAN IP address of the router’s
internal NAT IP address. Click thee toggle key to switchh this to the ON positition if you want to usee this feature.
11.
Set default route to PPTP sets all
a outbound data packets to go out throuugh the PPTP tunnel. Click the toggle key to switch this to the OON position if you waant to use this featuree.
12.
The Verbosse logging option setss the router to outputt detailed logs regardding the PPTP connection in the System Log
L section of the rouuter interface.
13.
The Reconnnect delay is the timee in seconds that the router will wait beforre attempting to connnect to the PPTP server in the event that thhe connection is brokken. The minimum tim
me to
wait is 30 seconds so as to not flood the PPTP serveer with connection reqquests, while the maxximum time to wait is 65335 seconds.
14.
The Reconnnect retries is the num
mber of connection attempts
that the routter will make in the evvent that the PPTP coonnection goes downn. If set to 0, the routeer will retry the conneection
indefinitely,, otherwise the maxim
mum number of timess to retry cannot be ggreater than 65335.
15.
Click the Saave button to save thhe changes. The VPNN will attempt to connnect after your click Save.
S Click the Status button at the top leftft of the interface to reeturn to the status winndow
and monitoor the VPN’s connection state.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
61
GRE tunnelling
The Generic Route Encapsulation (GRE) protocol is used in addition to Point-to-Point Tunnelling Protocol (PPTP) to create VPNs (virtual private networks) between clients and servers or between
clients only. Once a PPTP control session establishes the VPN tunnel GRE is used to securely encapsulate the data or payload.
Configuring GRE tunnelling
To configure GRE tunnelling:
1.
From the menu bar at the top of the screen, click Networking and then from the VPN section on the left side of the screen, click GRE. The GRE client list is displayed.
Figure 68 - GRE client list
2.
Click the +Add button to begin configuring a new GRE tunnelling client profile. The GRE Client Edit screen is displayed.
Figure 69 – GRE client edit
3.
Click the Enable GRE Tunnel toggle key to switch it to the ON position.
NetComm Wireless Intelligent M2M Router
62
www.netcommwireless.com
4.
In the Profille name, enter a proffile name for the tunnnel. This may be anytthing you like and is used
u to identify the tuunnel on the router.
5.
In the GRE server address fieldd, enter the IP addresss of the GRE server.
6.
In the Locaal tunnel address fieldd, enter the IP addresss you want to assignn the tunnel locally.
7.
In the Remote tunnel address field, enter the IP address you want to asssign to the remote tunnnel.
8.
In the Remote network address field, enter the IP adddress scheme of thee remote network.
9.
In the Remote network subnetm
mask field, enter the subnet
mask of the reemote network.
10.
The TTL (TTime To Live) field is an
a 8-bit field used to remove an undeliverrable data packet froom a network to avoidd unnecessary netwoork traffic across the internet. The default value
of 255 is the upper limit on the time
t that an IP datagram can exist. The vaalue is reduced by att least one for each hop
h the data packet ttakes to the next routter on the route to thee
datagram’ss destination. If the TTTL field reaches zeroo before the datagramm arrives at its destination the data packet is discarded and ann error message is seent back to the sendeer.
11.
The Verbosse logging option setss the router to outputt detailed logs regardding the GRE tunnel in the System Log section of the router intterface.
12.
The Reconnnect delay is the timee in seconds that the router will wait beforre attempting to connnect to the GRE serveer in the event that thee connection is broken. The minimum tim
me to
wait is 30 seconds so as to not flood the GRE serverr with connection reqquests, while the maxximum time to wait is 65335 seconds.
13.
The Reconnnect retries is the num
mber of connection attempts
that the routter will make in the evvent that the GRE connection goes down.. If set to 0, the router will retry the connecction
indefinitely,, otherwise the maxim
mum number of timess to retry cannot be ggreater than 65335.
14.
Click the Saave button to save thhe changes. The VPNN will attempt to connnect after your click Save.
S Click the Status button at the top leftft of the interface to reeturn to the status winndow
and monitoor the VPN’s connection state.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
63
Services
Dynamic DNS
The DDNS page is used to configure the Dynamic DNS feature of the router. A number of Dynamic DNS hosts are available from which to select.
Figure 70 – Dynamic DNS settings
Dynamic DNS provides a method for the router to update an external name server with the current WAN IP address.
To configure dynamic DNS:
1.
Click the DDNS configuration toggle key to switch it to the ON position.
2.
From the Dynamic DNS drop down list, select the Dynamic DNS service that you wish to use. The available DDNS services available are:

www.dhs.org

www.dyndns.org

www.dyns.cx

www.easydns.com

www.justlinux.com

www.ods.org

www.tzo.com

www.zoneedit.com
3.
In the Username and Password fields, enter the logon credentials for your DDNS account. Enter the password for the account again in the Verify password field.
4.
Click the Save button to save the DDNS configuration settings.
NetComm Wireless Intelligent M2M Router
64
www.netcommwireless.com
Network
k time (NTP)
The NTP (Network Time PProtocol) settings pagge allows you to configure the Intelligent M2M Router to synchhronize its internal cloock with a global Inteernet Time server andd specify the time zone for
for features ssuch as System Log entries and Firewall settings where the cuurrent system time is displayed and recorrded.
the location of the router.. This provides an acccurate timekeeping function
Any NTP server availablee publicly on the interrnet may be used. Thhe default NTP serverr is 0.netcomm.pool.nntp.org.
FFigure 71 - NTP setting
ngs
Co
onfiguring
g Timezone
e settings
To configure time zone settings:
1.
The Currennt time field shows thee time and date configured on the router. If this is not accuratee, use the Time zonee drop down list to seelect the correct time zone for the router. If the
selected zoone observes daylighht savings time, a Dayylight savings time scchedule link appearss below the drop dow
wn list. Click the link too see the start and end times for daylight
savings.
2.
When you hhave selected the correct time zone, clickk the Save button to ssave the settings.
Co
onfiguring
g NTP settings
To configure NTP settings:
1.
Click the Network time (NTP) tooggle key to switch it to the ON position.
2.
In the NTP service field, enter thhe address of the NTTP server you wish to use.
3.
The Synchrronization on WWANN connection toggle key
k enables or disabl es the router from peerforming a synchronization of the time eaach time a mobile brooadband connection is
establishedd.
4.
The Daily ssynchronisation toggle key enables or disaables the router fromm performing a synchrronization of the time each day.
5.
When you hhave finished configuuring NTP settings, click the Save button tto save the settings.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
65
Data stream manager
The data stream manager provides you with the ability to create mappings between input ports and output ports (e.g. Serial Port, SMS, GPS, USB) and performs any required translation or data
processing by each virtual data tunnel. Customers interested in developing their own applications to create custom mappings can contact NetComm Wireless about our Software Development
Kit.
To add a new data stream:
1.
Click the +Add button on the right side of the page.
Figure 72 - Data stream list
2.
Click the Activate toggle key so that it is in the ON position.
Figure 73 - Activate button
3.
In the Data stream name field, enter a name to identify the mapping on the Data stream list.
4.
Under the Endpoint A section, use the Type drop down list to select the input port. In the Mode drop down list, select the mode of the input port. If Endpoint A is set to Serial, use
the displayed drop down lists to specify further parameters about the serial port settings and PAD settings if required.
5.
Under the Endpoint B section, use the Type drop down list to select the output port. Use the Mode drop down list to select the mode of the output port. Enter any other details as
required for the type of output you have selected.
6.
Click the Save button to confirm your settings.
NetComm Wireless Intelligent M2M Router
66
www.netcommwireless.com
Watchdo
ogs
To access the Watchdoggs page, click the Services menu item, theen select the Watchddogs menu item on the left.
Figuure 74 - Watchdogs Seettings
Watcchdogs are features wwhich monitor the router for anomalies annd restart the router iff an anomaly occurs preventing its normaal operation. When coonfigured, the watchddogs feature transmitts
conttrolled ping packets tto 1 or 2 user specifieed IP addresses to confirm an active connnection. If the watchddog does not receivee responses to the pinngs after a specified number of failures, it will
rebooot the device in a lasst resort attempt to reestore connectivity.
We recommend
using caaution when implemeenting this feature in situations
where the ddevice is intentionallyy offline for a particulaar reason, for exampple, when Dial-on-dem
mand has been enabbled.
This is because the watcchdog expects to be able
a to access the innternet at all times, annd will always eventually reboot the routerr if access isn't restorred by the time the various timers expire and
the fail
f count is reached.
d to the nature of tthe watchdog being a last resort standaloone backup mechanissm that it will continuue to do its job and reeboot the device evenn when the Dial-on-ddemand session is idlle, or
It is due
the mobile
broadband coonnection is disabledd by the user. Therefoore, we recommendeed that you disable thhis feature if Dial-on-ddemand is configuredd or if the mobile broadband connection will
be inntentionally disconneected on occasion.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
67
The watchdog works as ffollows:
a)
The router ssends 3 consecutive pings to the first desstination address at tthe interval specified in the Periodic Ping timer field.
b)
If all 3 pings to the first destination address fail, the router
sends 3 conseecutive pings to the second
destination adddress at the Periodicc Ping timer interval.
c)
If all 3 pings to the second desttination address fail, the
t router sends 3 pi ngs to the first destinnation address using the Periodic Ping acccelerated timer interrval.
d)
If all 3 acceelerated pings to the first destination addrress fail, the router seends 3 pings to the second
destination adddress at the Periodicc Ping accelerated timer interval.
e)
If all 3 acceelerated pings to the second destination address
fail, the routeer registers this as a fail and returns to steep C.
f)
When the nnumber of failures reaaches the number coonfigured in the Fail ccount field, the routerr reboots. If any ping succeeds, the routerr returns to step A annd does not reboot.
Note: The Peeriodic Ping timer shoould not be set to a value
v of less than 2100 seconds to allow the router time to reconnect to the cellular nnetwork following a reboot.
the periodic pping reset monitor, seet Fail count to 0.
To disable
Figuree 75 – Ping watchdog settings
NetCComm Wireless Intelliggent M2M Router
68
www.netcommwirelless.com
Co
onfiguring
g Periodic Ping settin
ngs
The Periodic Ping settinggs configure the routeer to transmit controlled ping packets to 2 specified IP addresses. If the router does not receive responnses to the pings, thee router will reboot.
To configure the ping waatchdog:
1.
In the First destination address field, enter a websitee address or IP addreess to which the router should send the first round of ping req uests.
2.
In the Secoond destination addreess field, enter a webbsite address or IP adddress to which the router should send the second round of piing requests.
3.
In the Perioodic Ping timer field, enter an integer betwween 300 and 65535 for the number of seeconds the router shoould wait between pinng attempts. Setting this to 0 disables thee ping
watchdog ffunction.
4.
In the Perioodic Ping acceleratedd timer field, enter an integer between 60 and 65535 for the nuumber of seconds thee router should wait bbetween acceleratedd ping attempts, i.e. pings
to the second destination addreess. Setting this to 0 disables
the ping wattchdog function
5.
In the Fail ccount field, enter an integer
between 1 annd 65535 for the nummber of times an acceelerated ping should fail before the router reboots. Setting this to 0 disables the pinng
watchdog ffunction.
Diisabling th
he Periodic
c Ping rese
et function
To disable
the Periodic PPing reset function, seet Fail count to 0.
Note: The trafffic generated by the periodic ping featuree is usually counted aas chargeable data usage.
Please keep this in mind when seleecting how often to ping.
Co
onfiguring
g a Periodiic reboot
The router can be configured to automaticallyy reboot after a periodd of time specified inn minutes. While this is not necessary, it does ensure that in thee case of remote installations, the router will
rebooot if some anomaly ooccurs.
1.
In the Forcee reboot every field, enter the time in minutes between forced reboots. The defaultt value is 0 which disables the Periodic reeboot function. The minimum
period betweeen
reboots is 5 minutes while the maximum
value is 655535 minutes.
2.
If you have configured a forced reboot time, you cann use the Randomisee reboot time drop doown list to select a random reboot timer. RRandomising the rebooot time is useful for
preventing a large number of deevices from rebootingg simultaneously andd flooding the networrk with connection attempts. The router wiill wait for the configuured Force reboot every
time and thhen randomly reboot within
w the configuredd Randomise reboot ttime.
3.
Click the Saave button to save thhe settings.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
69
SNMP
SNMP configuration
The SNMP page is used to configure the SNMP features of the router.
Figure 76 - SNMP configuration
SNMP (Simple Network Management Protocol) is used to remotely monitor the router for conditions that may warrant administrative attention. It can be used to retrieve information from the router
such as the signal strength, the system time and the interface status.
To configure SNMP:
1.
Click the SNMP toggle key to switch it to the ON position.
2.
Enter Read-only community name and Read-write community name which are used for client authentication.
Community names are used as a type of security to prevent access to reading and/or writing to the routers configuration. It is recommended that you change the Community names
to something other than the default settings when using this feature.
3.
Click the Save button to save any changes to the settings.
The Download button displays the Management information base (MIB) of the router. The MIB displays all the objects of the router that can have their values set or report their status. The MIB is
formatted in the SNMP-related standard RFC1155.
NetComm Wireless Intelligent M2M Router
70
www.netcommwireless.com
SN
NMP traps
SNM
MP traps are messagees from the router to the Network Manageement System sent ass UDP packets. Theyy are often used to nootify the managementt system of any significant events such ass
whetther the link is up or ddown.
Co
onfiguring
g SNMP tra
aps
To configure SNMP trapss:
1.
In the Trap destination field, entter the IP address to which SNMP data is to be sent.
2.
In the Hearrtbeat interval field, enter the number of seeconds between SNMMP heartbeats.
3.
Use the Traap persistence field too specify the time in seconds that an SNMMP trap persists.
4.
Use the Traap retransmission tim
me to specify the lenggth of time in secondss between SNMP trapp retransmissions.
FFigure 77 - SNMP trapps
To send a manual SNMPP Heartbeat, click the Send heartbeat button. When you have ffinished configuring the
t SNMP traps, clickk the Save button to ssave the settings.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
71
TR
R-069
To access the TR-069 coonfiguration page, clicck the Services menu item, then select thhe TR-069 menu item on the left.
Figure
re 78 - TR-069 configu
guration
The TR-069 (Technical RReport 069) protocol is a technical specificcation also known as CPE WAN Managem
ment Protocol (CWMPP). It is a framework fofor remote management and autoconffiguration of end-userr devices such as customer-premises equuipment (CPE) and AAuto Configuration Seervers (ACS). It is parrticularly efficient in aapplying configuration updates across
netwworks to multiple CPEEs.
TR-0069 uses a bi-directioonal SOAP/HTTP-bassed protocol based on the application layeer protocol and provides several benefits for the maintenancee of a field of CPEs:
Simplifies the initial configuration of a device during installation
Enables easy restoration of
o service after a factoory reset or replacemment of a faulty device
Firmwware and software verrsion management
Diagnnostics and monitoring
Note: You muust have your own coompatible ACS infrastructure to use TR-0669.In order to accesss and configure the TR-069 settings you mmust be logged into thhe router as the root user.
TR
R-069 confi
figuration
To configure TR-069:
1.
Click the Ennable TR-069 toggle key to switch it to the ON position.
2.
In the ACS URL field, enter the Auto Configuration Server’s
full domain nname or IP address.
3.
Use the ACCS username field to specify the username for the Auto Configguration Server.
4.
In the ACS password and Verifyy ACS password fieldds, enter the Auto Coonfiguration Server paassword.
5.
In the Connnection Request Username field, enter thee username to use foor the connection requests.
6.
In the Connnection Request Password and Verify passsword fields, enter thhe connection request password.
7.
The inform message acts as a beacon
to inform the ACS of the existencee of the router. Click the
t Enable periodic ACS
A informs toggle kkey to turn on the perriodic ACS inform
messages.
8.
In the Inform
m Period field, enter the number of seconnds between the inforrm messages.
9.
Click the Saave button to save thhe settings.
NetCComm Wireless Intelliggent M2M Router
72
www.netcommwirelless.com
GPS
The built-in GPS module allows you to use loccation-based services, monitor field deplooyed hardware or findd your current locatioon. The GPS Status wwindow provides up to date information abbout
location and tthe current GPS signal conditions (positioon dilution of precisioon (PDOP), horizontal dilution of precision (HDOP) and verticall dilution of precision (VDOP)) of the routeer.
the current
To use the GPS function, set the GPS operation toggle key to ON and click the Save bbutton.
The Google map button pprovides a quick shoort cut to show your roouter’s current positioon on a map and beccause GPS positioninng relies on accurate clock settings to obttain the correct
inforrmation about your loocation, the Clock Synnc button allows you to quickly set the rouuter clock to the correect time. This ensures you will always havve the correct GPS position information
available.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
73
SMS messaging
The Intelligent M2M Router offers an advanced SMS feature set, including sending messages, receiving messages, redirecting incoming messages to another destination, as well as supporting
remote commands and diagnostics messages.
Some of the functions supported include:
Ability to send a text message via a CDMA network and store it in permanent storage.
Ability to receive a text message via a CDMA network and store it in permanent storage.
Ability to forward incoming text messages via a CDMA network to another remote destination which may be a TCP/UDP server or other mobile devices.
Ability to receive run-time variables from the device (e.g. uptime) on request via SMS
Ability to change live configuration on the device (e.g. network username) via SMS.
Ability to execute supported commands (e.g. reboot) via SMS
Ability to trigger the Intelligent M2M Router to download and install a firmware upgrade
Ability to trigger the Intelligent M2M Router to download and apply a configuration file
To access the SMS messaging functions of the Intelligent M2M Router, click on the Services menu item from the top menu bar, and then select one of the options under the SMS messaging
section on the left hand menu.
Setup
The Setup page provides the options to enable or disable the SMS messaging functionality and SMS forwarding functionalities of the router. SMS messaging is enabled by default.
Figure 79 - General SMS Configuration
NetComm Wireless Intelligent M2M Router
74
www.netcommwireless.com
OPTION
DEFINITION
Geneeral SMS configuration
SMSS messaging
Toggles the SMS functionalityy of the router on and off.
Messsages per page (10-50)
The number of SMS messagees to display per page. Muust be a value between 10 and 50.
Encooding scheme
The encoding method used ffor outbound SMS messages. GSM 7-bit mode permits up to 160 characters peer message but drops to 500
characters if the message inccludes special characters. UCS-2 mode allows the seending of Unicode charactters and permits a message to
bee up to 50 characters in lenngth.
SMSS forwarding configuration
Forwwarding
Toggles the SMS forwarding function of the router on and off.
Redirect to mobile
Enter a mobile number as thee destination for forwardedd SMS messages.
TCP address
Enter an IP address or domaain name as the destinationn for forwarded SMS messaages using TCP.
TCP port
The TCP port on which to connnect to the remote destinaation.
UDPP address
Enter an IP address or domaain name as the destinationn for forwarded SMS messaages using UDP.
UDPP port
The UDP port on which to coonnect to the remote destination.
Tabl
ble 16 - SMS Setup Set
ettings
SM
MS forward
ding config
guration
Incoming text messages can be redirected too another mobile device and/or a TCP/UDDP message server.
Re
edirect to m
mobile
You can forward incominng text messages to a different destinationn number. This destinnation number can be another mobile phoone or a 3G router phhone number.
For Example:
If someone sends a text m
message and Redireect to mobile is set to “+61412345678”, thhe text message is stoored on the router annd forwarded to “+61 412345678” at the saame time.
To disable
redirection to a mobile, clear the Redirect
to mobile field and click the Savee button.
Re
edirect to T
TCP / UDP
P address
You can also forward inccoming text messages to a TCP/UDP baseed destination. The TTCP or UDP server caan be any kind of pubblic or private server if the server acceptss incoming text-basedd
messages.
The TCP/UDP address caan be an IP address or domain name. The port number rangee is from 1 to 65535. Please
refer to your TCP/UDP
based SMSS server configurationn for which port to use.
For Example:
If someone sends a text m
message and TCP address
is set to “192.168.20.3” and TCP port is set to “2002”,, this text message is stored in the router aand forwarded to “1992.168.20.3” on port
“20002” at the same time.
To disable
redirection to a TCP or UDP addreess, clear the TCP adddress and UDP addrress fields and click the Save button.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
75
New message
The New message page can be used to send SMS text messages to a single or multiple recipients.
A new SMS message can be sent to a maximum of 100 recipients at the same time. After sending the message, the result is displayed next to the destination number as “Success” or “Failure” if
the message failed to send. By default, only one destination number field is displayed. Additional destination numbers may be added one at a time after entering a valid number for the current
destination number field. To add a destination number, click the
button and to remove the last destination in the list, click the
button.
Figure 80 - SMS - New Message
Destination numbers should begin with the “+” symbol followed by the country calling code. To send a message to a destination number, enter the “+” symbol followed by the country calling
code and then the destination number.
For example:
To send a message to the mobile destination number 0412345678 in Australia (country calling code 61), enter “+61412345678”.
After entering the required recipient numbers, type your SMS message in the New message field. As you type your message, a counter shows how many characters you have entered out of the
total number available for your chosen encoding scheme. When you have finished typing your message and you are ready to send it, click the Send button.
NetComm Wireless Intelligent M2M Router
76
www.netcommwireless.com
Inb
box / Outb
box
The Inbox displays all recceived messages thaat are stored on the router while the Outboox displays all sent messages.
Figure 81 - SMS Inboox
FFigure 82 - SMS Outbbox
ICON
DESCRIPTION
Forwward button. Click this buttton to open a new messag e window where you can forward the corresponding message to another recipiient.
Repply button. Click this buttonn to open a new message wwindow where you can reply to the sender.
Addd to White list. Click this button to add the sender’s mmobile number to the white list on the router.
Delete button. Click this button to delete the correspondding message.
Reffresh button. Click this buttoon to refresh the inbox or ooutbox to see new messages.
Tabl
ble 17 - Inbox/Outboxx icons
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
77
Diagnos
stics
The Diagnostics page is used to configure thee SMS diagnostics and command executtion configuration. Thhis allows you to channge the configurationn, perform functions remotely
and check on
o the
MS commands.
statuus of the router via SM
To access the Diagnosticcs page, click on the Services menu item then select the SMSS menu on the left andd finally select Diagnostics beneath it.
Figure
83 - SMS diagnnostics and commandd execution configurati
tion
SM
MS diagnostics and command
execution
n configura
ation
The options on this pagee are described beloww.
Enable remote d
diagnostics an
nd command execution
Enabbles or disables the rremote diagnostics feeature. If this setting is enabled all incomiing text messages arre parsed and tested for remote diagnostiics commands.
If rem
mote diagnostics com
mmands are found, the router executes thhose commands. Thiss feature is enabled by default. All remotee diagnostic commannds that are receivedd are stored in the Inbbox.
Note: It is possible to adjust setttings and prevent youur router from functiooning correctly using remote diagnostics. If this occurs, you wiill need to perform a factory reset in orderr to
mal operation.
restore norm
a a password whenn utilising this featuree to prevent unauthorised access. See thee White list descriptioon for more informatioon.
We highly reecommended that yoou use the white list and
NetCComm Wireless Intelliggent M2M Router
78
www.netcommwirelless.com
On
nly accept auth
henticated SM
MS messages
Enabbles or disables checcking the sender’s phhone number againstt the allowed sender white list for incoming diagnostics and coommand execution SSMS messages.
ming message against the
If authentication is enableed, the router will cheeck if the sender’s nuumber exists in the wwhite list. If it exists, thhe router then checkss the password (if connfigured) in the incom
passsword in the white listt for the correspondinng sending number. If they match, the diaagnostic or commandd is executed.
If thee number does not exxist in the white list or the password does not match, the routeer does not execute the incoming diagnosstic or command in thhe SMS message.
This is enabled by default and it is strongly addvised that you leavee this feature enabledd to maintain securityy.
Sen
nd Set comma
and acknowle
edgement rep
plies
The Intelligent M2M Routter will automatically reply to certain typess of commands receiived, such as get com
mmands, or execute commands. Howeveer replies from the Intelligent M2M Router are
MS Wakeup command. If
optioonal with set commannds and the Wakeup command. This option Enables or disablles sending an acknoowledgment message after execution of a set command or SM
disabled, the router doess not send any acknoowledgement after exxecution of a set commmand or SMS Wakeuup command. All ackknowledgment replies
es are stored in the Outbox after they havee
beenn sent.
This can be useful to determine if a commandd was received and executed
by the routeer. This option is disaabled by default.
Sen
nd acknowled
dgement repllies to
This option allows you to specify where to sennd acknowledgment messages after the eexecution of a set, orr exec command.
f number is seleccted, the acknowledggement message will be sent to the numbber defined in the Fixeed number to send reeplies to field. If the ssender’s number is selected,
the
If a fixed
acknnowledgement messaage will be sent to the number that the SM
MS diagnostic or commmand message origginated from. The deffault setting is to use the sender’s number.
Fix
xed number to
o send repliess to
This field defines the desstination number to which
w error messagess are sent after the exxecution of a get, set, or exec command. This field is only dispplayed when Send Error
E SMS to is set to
Fixed Number.
Sen
nd command error repliess
Enabbles or disables the ssending of an error message
resulting from the execution of a get, set, or exec com
mmand. All error replies are stored in the Outbox after they haave been sent.
Sen
nd error repliies to
Wheen Send Error SMS foor Get/Set/Exec Com
mmand is set to ON, this option is used to specify where the errror SMS is sent. Use the radio buttons to select either Fixed Number
or SMS Sendder
Num
mber. When set to SM
MS Sender Number thhe router will reply to the originating numbber of the SMS diagnostic or command. When
W set to Fixed Nu mber the router will send
s the error messaages
to the number specified iin the following field.
Sen
nd a maximum
m number of
You can set the maximum
m number of acknowwledgement and errorr messages sent wheen an SMS diagnosticc or command is executed. The maximumm limit can be set perr hour, day, week or month.
The router will send a maaximum of 100 repliess by default.
The number of messagess sent is shown beloww the options. The total transmitted messaage count resets afteer a reboot or at the beginning
of the time frame specified.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
79
White List for diagnostic or execution SMS
The white list is a list of mobile numbers that you can create which are considered “friendly” to the router. If Only accept authenticated SMS messages is enabled in the diagnostics section, the
router will compare the mobile number of all incoming diagnostic and command messages against this white list to determine whether the diagnostic or command should be executed. You may
optionally configure a password for each number to give an additional level of security. When a password is specified for a number, the SMS diagnostic or command message is parsed for the
password and will only be executed if the number and password match.
Figure 84 - White list for diagnostic or execution SMS
A maximum of 20 numbers can be stored on the router in the white list. To add a number to the white list, click the “+Add” button.
Figure 85 – Adding a number to the SMS white list
The White List numbers and passwords can be cleared by pressing the
button to the right of each entry. To add a number to the white list, enter it in the Destination number field and
optionally define a password in the Password field. When you have finished adding numbers click the Save button to save the entries.
NetComm Wireless Intelligent M2M Router
80
www.netcommwireless.com
Se
ending
g an SM
MS Diag
gnostic Comm
mand
Folloow the steps below too configure the routerr to optionally acceptt SMS diagnostic commmands only from auuthenticated senders and learn how to seend SMS diagnostic commands
to the router.
1.
Navigate too the Services > SMSS messaging > Diagnnostics page
2.
Confirm thaat the Enable remote diagnostics and com
mmand execution togggle key is set to the ON position. If it is seet to OFF click the tooggle key to switch it to the ON position.
3.
If you wish to have the router onnly accept commands from authenticated senders, ensure thaat Only accept authennticated SMS messagges is set to the ON position.
In the Whitee list
for diagnosstic or execution SMSS messages section, click the +Add butto n and enter the sendder’s number in internnational format into thhe Destination numbeer field that appears. If
you wish too also configure a passsword, enter the passsword in the Passwo
word field corresponding to the destinationn number.
4.
If you wouldd prefer to accept SM
MS diagnostic commands from any sendeer, set the Only accept authenticated SMSS messages toggle kkey to the OFF positioon.
Note: An alteernative method of addding a number to thhe white list is to sendd an SMS message to the router, navigatee to Services > SMS messaging > Inbox and then click the
button next tto the message whicch corresponds to thee sender’s number.
5.
Click the Saave button.
Ty
ypes of SM
MS diagnosstic comma
ands
Therre are three types of ccommands that can be sent; execute, gett and set. The basic syntax is as follows:
execuute COMMAND
get VAARIABLE
set VAARIABLE=VALUE
If authentication is enableed, each command must
m be preceded byy the password:
MMAND
PASSWORD execute COM
PASSWORD get VARIABLLE
PASSWORD set VARIABLE=VALUE
The following are some eexamples of SMS diaggnostic commands:
passwword6657 execute reboot
get rsssi
set appn1=testAPNvalue
SM
MS acknow
wledgment replies
The router automatically replies to get commaands with a value andd execute commandss with either a successs or error response. Set commands will oonly be responded too if the Send Set
ment replies toggle keey is set to ON. If thee Send command erroor replies toggle key is set to ON, the router will send a reply if the command is coorrect but a variable or
command acknowledgem
valuee is incorrect, for exaample, due to misspeelling.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
81
SMS command format
Generic Format for reading variables:
get VARIABLE
PASSWORD get VARIABLE
Generic Format for writing to variables:
set VARIABLE=VALUE
PASSWORD set VARIABLE=VALUE
Generic Format for executing a command:
Execute COMMAND
PASSWORD execute COMMAND
Replies
Upon receipt of a successfully formatted, authenticated (if required) command, the gateway will reply to the SMS in the following format:
TYPE
SMS CONTENTS
get command
“VARIABLE=VALUE”
set command
“Successfully set VARIABLE to VALUE”
execute command
“Successfully executed command COMMAND”
NOTES
Only sent if the acknowledgment message function is enabled
Table 18 - SMS Diagnostic Command Syntax
Where “VARIABLE” is the name of the value to be read
Where “VARIABLE (x)” is the name of another value to be read
Where “VALUE” is the content to be written to the “VARIABLE”
Where “COMMAND” is a supported command to be executed by the device (e.g. reboot)
Where “PASSWORD” is the password (if configured) for the corresponding sender number specified in the White List
Multiple commands can be sent in the same message, if separated by a semicolon.
For Example:
get VARIABLE1; get VARIABLE2; get VARIABLE3
PASSWORD get VARIABLE1; get VARIABLE2
set VARIABLE=VALUE1 ; set VARIABLE2=VALUE2
PASSWORD set VARIABLE1=VALUE1; set VARIABLE2=VALUE2; set VARIABLE3=VALUE3
If required, values can also be bound by an apostrophe, double apostrophe or back tick.
For Example:
“set VARIABLE=’VALUE’”
“set VARIABLE=”VALUE””
“set VARIABLE=`VALUE`”
“get VARIABLE”
NetComm Wireless Intelligent M2M Router
82
www.netcommwireless.com
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
83
A paassword (if required),, only needs to be sppecified once per SMS, but can be prefixeed to each commandd if desired.
“PASSSWORD get Variable1”; “get VARIABLE22”
“PASSSWORD set VARIABBLE1=VALUE1”; “sett VARIABLE2=VALUEE2”
executes the remaininng command line afteer the
If thee command sent includes the “reboot” coommand and has alreeady passed the whitte list password checck, the device keeps this password and ex
rebooot with this same passsword.
For Example:
“PASSSWORD execute rebboot; getVariable1”; “get VARABLE2”
“PASSSWORD execute rebboot; PASSWORD geet Variable1”; “get VAARABLE2”
Note: Commands, variables and values are case senssitive.
Lisst of valid command
ds
A list of valid commands which can be used in
i conjunction with thhe execute commandd are listed below:
“pdppcycle”, “pdpdown” and “pdpup” commaands can have a profile number suffix ‘x’ aadded. Without the suffix
s specified, the command operates aggainst the default proofile configured on thhe
profiile list page of the Weeb-UI.
COMMANDD NAME
DESCRRIPTION
reboot
Immediately performs a soft reboot.
pddpcycle
Disconnects (if connecteted) and reconnects the daata connection. If a profile number
is selected in the ccommand, try to disconnecct/reconnect the
specified profile in casee the profile is active. If no profile
number is selected, try to disconnect/reconnecct the current active profilee. Reports an error if no
profile number is selecteed and there is no currently activated profile.
pddpdown
Disconnects the PDP. Iff a profile number is selecteed in the command, the rouuter tries to disconnect thee specified profile in case the profile is active. If no
profile number is selecteed, try to disconnect the cuurrent active profile. Reports an error if no profile nummber is selected and there is no currently activated
profile.
pddpup
Reconnects the PDP. If a profile number is selecteed in the command, the rouuter tries to connect with the
he specified profile. If no prrofile number is
selected, the router triess to connect to the last active profile. The gateway will check the currently activaated profile and disconnecct this profile before
executing the commandd. The router reports an errror if no profile number is seelected and there is no stoored last active profile number.
facctorydefaults
Performs a factory resett on the router.
Performs a download annd install of a Firmware Upgrade (.cdi), Config File (.tar.gz) or a help documentt (.pdf) file.
If the file is a firmware immage as in the case of a .ccdi file, the router will apply the recovery image first annd then the main firmware image. The download
location is specified immmediately after the commannd and may be from an HTTTP or FTP source URL.
If the file is a .tar.gz file, the router will apply the file as a configuration file update for the device and rebboot afterwards.
doownload
If the file is a .pdf, the roouter will assume this is a user
u guide document and save
s it to the router and maake the file available for vieewing via the help menu
on the Web-UI.
Note: If your download UURL includes any space characters, please encode these
prior to transmission according to RFC1738, foor example:
ftp://username:passwordd@serveraddress/directoryy%20with%20spaces/filenaame.cdi
Note: Authenticated FTPP addresses may be used following the format as deffined in RFC1738, for exammple:
ftp://username:passwordd@serveraddress/directoryy/filename.cdi
Table 19 - List
st of Valid SMS diagnoostic commands
NetCComm Wireless Intelliggent M2M Router
84
www.netcommwirelless.com
The following table lists vvalid variables where “x” is a profile numbber (1-6). If no profile is specified, variablees are read from or written
to for the curreent active profile. If a profile is specified,
variaables are read from oor written to for the sppecified profile number (‘x’).
RDB VARIABLE NAAME
SMS VARIABLE NAME
READ/W
WRIT
DESCRRIPTION
EXAM
MPLE VALUE
link.profile.1.enable
Reaad:
link.profile.1.appn
(proofile no,atd#xxx,user,pass,,auth,iplocal,status)
link.profile.1.useer
1,atatd#777,username,passworrd, chap,202.44.185.111,up
profile
link.profile.1.paass
RW
Profile
link.profile.1.autth_type
Writite:
link.profile.1.iploocal
(atdd#xxx, user, pass,auth)
link.profile.1.staatus
atd#
d#777,username,password
link.profile.1.useer
username
RW
3G username
Gueest, could also return “null””
password
RW
3G password
Gueest, could also return “null””
link.profile.1.paass
link.profile.1.autth_type
authtype
RW
3G Authentication type
”paap” or”chap”
link.profile.1.iploocal
wanip
WAN IP addresss
2022.44.185.111
wwan.0.radio.innformation.signal_strength
rssi
3G signal strength
-655 dBm
meid
MEID number
0x000A1000021D003BB
usage
3G data usage of current
session
“Rxx 500 bytes, Tx 1024 bytes, Total 1524 bytes” or “Rx 0 byte, Tx 0
bytete, Total 0 byte” when wwan down
wanuptime
Up time of current 3G session
1 ddays 02:30:12 or 0 days 00:00:00 when wwan down
wwan.0.meid
statistics.usagee_current
statistics.usagee_current
10
/proc/uptime
deviceuptime
Device up time
1 ddays 02:30:12
11
wwan.0.system_network_status.current_bband
band
Current Frequency channel &
band
CHH:425 PCS-B Band
Table 20 - List of SMS diagnostitics variables
SM
MS diagnostics exam
mples
The examples below dem
monstrate various com
mbinations of supporrted commands. Thiss is not an exhaustivee list and serves as an example of possibiilities only.
DDESCRIPTION
AUTTHENTICATION
INPUT EXAMPLE
Not requireed
set username=’NetComm’
Required
PASSWORD set usernname= ”NetComm”
Not requireed
set password= `NetCoomm`
Required
PASSWORD set passwword= `NetComm`
Not requireed
set authtype= ‘pap’
Required
PASSWORD set authttype = pap
Not requireed
execute reboot
Required
PASSWORD execute reboot
Not requireed
get wanip
Required
PASSWORD get wanipp
Not requireed
get rssi
Required
PASSWORD get rssi
Send SMS to channge the data connection ussername
Send SMS to channge the data connection paassword
Send SMS to channge the data connection
authentication
Send SMS to rebooot
Send SMS to checck the WAN IP address
Send SMS to checck the mobile signal strenggth
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
85
Not required
get meid
Required
PASSWORD get meid
Not required
get band
Required
PASSWORD get band
Not required
execute pdpcycle
Required
PASSWORD execute pdpcycle
Not required
execute pdpdown
Required
PASSWORD execute pdpdown
Not required
execute pdpup
Required
PASSWORD execute pdpup
Not required
get wanip; get rssi
Required
PASSWORD get wanip; get rssi
Not required
set ssh.genkeys=1; set username=test; set auth=pap
Required
PASSWORD set ssh.genkeys=1; set username=test; set auth=pap
Not required
execute factorydefaults
Required
PASSWORD execute factorydefaults
Not required
get status
Required
PASSWORD get status
Send SMS to retrieve the history of the session,
including start time, end time and total data usage
Not required
get sessionhistory
Required
PASSWORD get sessionhistory
Send SMS to configure the router to send syslog to a
remote syslog server
Not required
set syslogserver
Required
PASSWORD set syslogserver
Send SMS to wake up the router, turn on the default
gateway and trigger the ‘connect on demand’ profile
if in waiting state.
Not required
execute wakeup
Required
PASSWORD execute wakeup
Send SMS to check the MEID number
Send SMS to check the current band
Send SMS to Disconnect (if connected) and
reconnect the data connection
Send SMS to disconnect the data connection
Send SMS to connect the data connection
Send multiple get command
Send multiple set command
Send SMS to reset to factory default settings
Send SMS to retrieve status of router
execute download http://download.com:8080/firmware_image.cdi
Not required
execute download http://download.com:8080/firmware_image_r.cdi
Send SMS to perform firmware upgrade when
firmware is located on HTTP server
PASSWORD execute download http://download.com:8080/firmware_image.cdi
Required
PASSWORD execute download http://download.com:8080/firmware_image_r.cdi
execute download ftp://username:password@download.com/firmware_image.cdi
Not required
execute download ftp://username:password@ download.com/firmware_image_r.cdi
Send SMS to perform firmware upgrade when
firmware is located on FTP server
PASSWORD execute download ftp://username:password@ download.com/firmware_image.cdi
Required
PASSWORD execute download ftp://username:password@ download.com/firmware_image_r.cdi
Not required
set pppoe=0
Required
PASSWORD set pppoe=0
Send SMS to turn on PPPoE and set dialstring and
service name
Not required
set pppoe=1,atd#777, Test
Required
PASSWORD set pppoe=1,atd#777, Test
Send SMS to retrieve the PPPoE status, currently
configured dial string and service name
Not required
get pppoe
Required
PASSWORD get pppoe
Not required
set ledmode=10
Required
PASSWORD set ledmode=10
Not required
get ledmode
Required
PASSWORD get ledmode
Not required
get ssh.proto
Required
PASSWORD get ssh.proto
Send SMS to turn off PPPoE
Send SMS to set the LED mode timeout to 10 minutes
Send SMS to retrieve the current LED mode
Retrieve current SSH protocol
NetComm Wireless Intelligent M2M Router
86
www.netcommwireless.com
Not requireed
set ssh.proto=1
Required
PASSWORD set ssh.pproto=1
Not requireed
get ssh.passauth
Required
PASSWORD get.ssh.ppassauth
Not requireed
set ssh.passauth=1 orr set ssh.passauth=0
Required
PASSWORD set ssh.ppassauth=1 or PASSWORD set ssh.passauth=0
Not requireed
execute ssh.genkeys
Required
PASSWORD execute ssh.genkeys
Not requireed
execute ssh.clearkeyss
Required
PASSWORD execute ssh.clearkeys
Not requireed
get MEID
Select SSH protoccol
Retrieve passwordd authentication status
Enable/disable paassword authentication on host
Generate set of puublic/private keys on the hoost
Clear client publicc keys stored on host
Retrieve the MEIDD of the router
Required
PASSWORD get MEIDD
Table 21 - SM
MS diagnostics exampple commands
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
87
System
Log
The Log pages are used to display or download the System log and IPSec logs on the router.
System log
The System Log enables you to troubleshoot any issues you may be experiencing with your Intelligent M2M Router. To access the System Log page, click on the System menu. The System Log
is displayed.
Figure 86 - System log file
Log file
Use the Display level drop-down list to select a message level to be displayed. The message levels are described in the table below.
To download the System log for offline viewing, right-click the Download button and choose Save as.. to save the file. To clear the System log, click the Clear button. The downloaded log file is in
Linux text format with carriage return (CR) only at the end of a line, therefore in order to be displayed correctly with new lines shown, it is recommended to use a text file viewer which displays
this format correctly (e.g. Notepad++).
Log data is stored in RAM and therefore, when the unit loses power or is rebooted, it will lose any log information stored in RAM. To ensure that log information is accessible between reboots of
the router there are two options:
1.
Enable the Log to file option
NetComm Wireless Intelligent M2M Router
88
www.netcommwireless.com
2.
Use a remoote syslog server
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
89
Enable the log to file option
When the router is configured to log to a file, the log data is stored in flash memory, making it accessible after a reboot of the router. Up to 512kb of log data will be stored before it is overwritten
by new log data. Flash memory has a finite number of program-erase operations that it may perform to the blocks of memory. While this number of program-erase operations is quite large, we
recommend that you do not enable this option for anything other than debugging to avoid excessive wear on the memory.
Use a remote syslog server
The router can be configured to output log data to a remote syslog server. This is an application running on a remote computer which accepts and displays the log data. Most syslog servers can
also save the log data to a file on the computer on which it is running allowing you to ensure that no log data is lost between reboots.
To configure the Intelligent M2M Router to output log data to a remote syslog server:
1.
Click on the System menu from the top menu bar. The System log item is displayed.
2.
Under the Remote syslog server section, enter the IP address or hostname of the syslog server in the IP / Hostname [:PORT] field. You can also specify the port number after the
IP or hostname by entering a semi-colon and then the port number e.g. 192.168.1.102:514. If you do not specify a port number, the router will use the default UDP port 514.
3.
Click the Save button to save the configuration.
Figure 87 - System log
ITEM
DEFINITION
All
Display all system log messages.
Debug
Show extended system log messages with full debugging level details.
Info
Show informational messages only.
Notice
Show normal system logging information.
Warning
Show warning messages only.
Error
Show error condition messages only.
Table 22 - System log detail levels
NetComm Wireless Intelligent M2M Router
90
www.netcommwireless.com
IPS
Sec log
The IPSec log section proovides the ability for you to download the log for the IPSec VPPN function. This can assist in troubleshoooting any problems yoou may have with thee IPSec VPN.
Figure 88 - IPSec logg
Use the Log level drop down list to specify the type of detail you want
w to capture in thee log and then click the Save button. When you change the loggging level, any activve IPSec VPN tunnelss will
be disconnected
as a chhange in logging leveel requires the IPSec service to be restarteed.
To download
the IPSec loog, click the Downloaad IPSec log button and
a you will be prommpted to save the file.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
91
Sy
ystem C
Config
guration
Se
ettings bac
ckup and restore
The settings backup / resstore page is used too backup or restore thhe router’s configurattion or to reset it to faactory defaults. In ordder to view the settinggs page you must bee logged into the webb user
dmin. The backup / restore functions caan be used to easily configure
a large num
mber of Intelligent M22M Router by configuuring one router with your
interrface as root usinng the password ad
desired settings, backingg them up to a file and then restoring that file to multiple Intelliggent M2M Routers.
Figure 89 – Settings backup and
a restore
Bac
ck up your ro
outer’s configu
uration
Log in to the web configuuration interface, click on the System mennu and select Settinggs backup and restoree.
If you want to password pprotect your backup configuration files, enter your password i n the fields under Saave a copy of currentt settings and click onn Save. If you don’t want
w to password prootect
yourr files, just click on Saave. The router will thhen prompt you to select a location to savve the settings file.
Note: The folllowing conditions apply:

It is NOT poossible to edit the contents of the file dowwnloaded; if you modiify the contents of thee configuration file in any way you will nott be able to restore it later.
You may chhange the name of thhe file if you wish but the filename extensioon must remain as “.cfg”
Resstore your ba
ackup configu
uration
1. In the web configuration interfacce click on the System menu and select SSettings backup and restore.
2.
From the RRestore saved settings section, click on Brrowse or Choose a fiile and select the bacckup configuration file on your computer.
3.
Click Restoore to copy the settinggs to the new Intelligent M2M Router. Thee router will apply theese settings and inforrm you it will reboot - click on OK.
Resstoring the ro
outer’s factory
y default confiiguration
Clickk the Restore Defaultts button to restore thhe factory default connfiguration. The routeer asks you to confirm
m that you wish to resstore factory default ssettings. If you wish to continue with the
restooring of factory defauults, click OK.
Note: All currrent settings on the roouter will be lost when performing a restorre of factory default settings.
The device IP address will changge to 192.168.1.1 and the default usernam
me
root and ddefault password ad
dmin will be configgured.
NetCComm Wireless Intelliggent M2M Router
92
www.netcommwirelless.com
Up
pload
To access the Upload paage, click on the Systtem menu, then System Configuration andd then Upload.
The Upload page allows you to upload firmwaare files, HTTPS certificates or user createed application packaages to the Intelligentt M2M Router. When firmware files have been
b uploaded, they can
also be installed from thiss page. PDF files, such as this user guidee may also be uploadded for access on thee router’s help page.
For more
m information on aapplication developm
ment, contact NetCom
mm Wireless about o ur Software Development Kit.
FFigure 90 - Upload pag
age
Up
pdating the
e Firmwarre
The firmware update process involves first uppdating the recovery image firmware and then updating the main firmware image.
Note: In ordeer to perform an updaate, you must be loggged into the router witth the root manager account (see the Advvanced configurationn section for more deetails).
To update the Intelligent M2M Router’s firmwaare:
1.
Power on thhe router as describeed in the Installing thee router section.
2.
Log in to thhe router with the roott user account (See the
t Advanced config uration section for deetails)
3.
Select the SSystem item from thee top menu bar, selecct the System configuuration item from the menu on the left andd then select the Uplooad menu item.
4.
Under the FFile uploads section, click the Browse buttton. Locate the recoovery firmware image file on your computeer and click Open. Thhe recovery image is named
ntc_nwl12__x.xx.xx.x_r.cdi while the main system firm
mware image is nameed ntc_nwl12_x.xx.xxx.x.cdi.
5.
Click the Upload button. The firm
mware image is uploaaded to the storage oon the router.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
93
Figure 91 - File upload
6.
Repeat steps 4 and 5 for the main system firmware image.
7.
The uploaded firmware images are listed in the Uploaded files section. Click the Install link next to the recovery image to begin installing the recovery firmware image and then click
OK on the confirmation window that appears.
Figure 92 - Uploaded files
8.
The recovery firmware image is flashed and when it is complete, the router displays “The firmware update was successful” and returns to the main Upload screen.
Figure 93 - Recovery firmware flash process
NetComm Wireless Intelligent M2M Router
94
www.netcommwireless.com
9.
Click the Innstall link to the right of
o the main firmware image you uploadedd and then click OK to
t confirm that you waant to continue with tthe installation.
Note: Do not remove the power when
w the router’s LEDDs are flashing as thiss is when the firmware update is in processs.
10.
The installaation is complete wheen the countdown reaaches zero. The routeer attempts to redirecct you to the Status page.
Figure 94 --– Installing main firm
mware image
11.
Hold down the reset button on the
t router for 15-20 seconds to reboot andd restore the factory default settings of the router. See the Resstoring factory default settings section forr more
information.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
95
Package manager
The Package Manager page is used to provide details of any user installed packages on the router and allow them to be uninstalled.
For more information on application development, contact NetComm Wireless about our Software Development Kit.
Figure 95 – Software applications manager
The Application name, Version number of the application, the architecture type and time of installation are all displayed. Clicking the Package details link will display a pop-up window with
further details of the package.
To uninstall any software applications, click the Uninstall link.
NetComm Wireless Intelligent M2M Router
96
www.netcommwireless.com
Ad
dministratiion setting
gs
To access the Administraation Settings page, click
c on the System menu
m then the Adminnistration menu on thee left and then click on
o Administration Setttings.
The Administration settings page is used to enable or disable prottocols used for remotte access and configgure the passwords for the user accountss used to log in to thee router.
Figur
ure 96 - Administrationn page
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
97
OPTION
DEFINITION
Remote router access coontrol
Enable HTTP
Enable or disaable remote HTTP access to
t the router. You can also set the port you would likee remote HTTP access to be available on.
HTTP management port
Enter a port nuumber between 1 and 65534 to use when accessing the router remotely.
Enable HTTPS
Enable or disaable remote HTTPS accesss to the router using a secuure connection.
Remote HTTPS access pport
Enter a port nuumber between 1 and 65534 to use when accessing the router remotely over a secure HTTPS connection.
Enable Telnet
Enable or disaable remote telnet (command line) access to the routeer.
Enable SSH
Enable or disaable Secure Shell on the router.
Remote SSH Access Portrt
Enter the port number for remote SSH acccess. Must be a port num ber between 1 and 65534..
Enable Ping
Enable or disaable remote ping responses on the WWAN connectioon.
Web User Interface accoount
Username
Use the drop down list to select the root or admin account to changge its web user interface password.
Password
Enter the desired web user interface passsword.
Confirm password
Re-enter the desired
web user interface password.
Telnet/SSH account
Username
Displays the Telnet/SSH.username.
This may not be changed.
Password
Enter the desired Telnet/SSH password.
Confirm password
Re-enter the desired
Telnet/SSH password.
Table 23 - Ad
Administration configuuration options
To access the router’s coonfiguration pages reemotely:
1.
Open a neww browser window annd navigate to the WAAN IP address and aassigned port number of the router, for example http://123.2099.130.249:8080
Note: You cann find the router’s WAAN IP address by clicking on the “Status” mmenu. The WWAN IPP field in the WWAN Connection
Status seection shows the routeer’s WAN IP address.
2.
Enter the ussername and passwoord to login to the rouuter and click Log in.
Note: To perfoorm functions like Firm
mware upgrade, deviice configuration bacckup and to restore and
a reset the router too factory defaults, yoou must be logged in with the root manageer
account.
NetCComm Wireless Intelliggent M2M Router
98
www.netcommwirelless.com
HTTPS
key managem
ment
What
is HTT
TP Secure??
HTTP Secure or HTTPS iss the use of the HTTPP protocol over an SSSL/TLS protocol. It is used primarily to prootect against eavesdrropping of communiccation between a webb browser and the weeb
t which it is connectted. This is especiallyy important when youu wish to have a secuure connection over a public network such as the internet. HTTTPS connections aree secured through thee use
site to
of ceertificates issued by ttrusted certificate autthorities such as VeriSign. When a web b rowser makes a connnection attempt to a secured
web site, a ddigital certificate is sent to the browser soo that
it can verify the authenticcity of the site using a built-in list of trustedd certificate authoritiees.
Therre are two main differrences between how HTTPS and HTTP coonnections work:
1.
HTTPS uses port 443 while HTTTP uses port 80 by deefault.
2.
Over an HTTTPS connection, all data
d sent and received is encrypted with SSL while over an HTTP connection, all data
d is sent unencryppted.
The encryption is achieveed through the use of
o a pair of public andd private keys on bothh sides of the connecction. In cryptography, a key refers to a nuumerical value used by an algorithm to alter
making the informatioon secure and visible only to those who haave the correspondinng key to recover (decrypt) the informationn. The public key is used
u to encrypt
inforrmation (encrypt it), m
inforrmation and can be ddistributed freely. Thee private key is used to decrypt informatioon and must be secreet by its owner.
Eachh Intelligent M2M Rouuter contains a self-ssigned digital certificaate which is identical on all Intelligent M2M
M Routers. For a greaater level of security, the router also suppports generating yourr own
unique key. Additionally, you may use third paarty software to geneerate your own self-siigned digital certificaate or purchase a signed certificate from a trusted certificate authority
and then upload
those certificates to the rrouter.
Ge
enerating your own self-signe
ed certificaate
To generate
your own seelf-signed certificate:
1.
Click the Syystem item from the top
t menu bar, then Administration
from thhe side menu bar andd then HTTPS key management.
2.
Enter the ceertificate details using the appropriate fields. Each field must bbe completed in ordeer to generate a certificate.
Figure 97 - Ge
Generate self signed HTTTPS certificate
Note: The CCountry field must conntain a code for the desired
country from the list below.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
99
CODE
COUNTRY
COUNTRY
CODE
COUNTRY
CODE
COUNTRY
AX
Åland Islands
ER
Eritrea
LS
Lesotho
SA
Saudi Arabia
AD
Andorra
ES
Spain
LT
Lithuania
SB
Solomon Islands
AE
United Arab Emirates
ET
Ethiopia
LU
Luxembourg
SC
Seychelles
AF
Afghanistan
FI
Finland
LV
Latvia
SE
Sweden
AG
Antigua and Barbuda
FJ
Fiji
LY
Libya
SG
Singapore
AI
Anguilla
FK
Falkland Islands (Malvinas)
MA
Morocco
SH
St. Helena
AL
Albania
FM
Micronesia
MC
Monaco
SI
Slovenia
AM
Armenia
FO
Faroe Islands
MD
Moldova
SJ
Svalbard and Jan Mayen Islands
AN
Netherlands Antilles
FR
France
ME
Montenegro
SK
Slovak Republic
AO
Angola
FX
France, Metropolitan
MG
Madagascar
SL
Sierra Leone
AQ
Antarctica
GA
Gabon
MH
Marshall Islands
SM
San Marino
AR
Argentina
GB
Great Britain (UK)
MK
Macedonia
SN
Senegal
AS
American Samoa
GD
Grenada
ML
Mali
SR
Suriname
AT
Austria
GE
Georgia
MM
Myanmar
ST
Sao Tome and Principe
AU
Australia
GF
French Guiana
MN
Mongolia
SU
USSR (former)
AW
Aruba
GG
Guernsey
MO
Macau
SV
El Salvador
AZ
Azerbaijan
GH
Ghana
MP
Northern Mariana Islands
SZ
Swaziland
BA
Bosnia and Herzegovina
GI
Gibraltar
MQ
Martinique
TC
Turks and Caicos Islands
BB
Barbados
GL
Greenland
MR
Mauritania
TD
Chad
BD
Bangladesh
GM
Gambia
MS
Montserrat
TF
French Southern Territories
BE
Belgium
GN
Guinea
MT
Malta
TG
Togo
BF
Burkina Faso
GP
Guadeloupe
MU
Mauritius
TH
Thailand
BG
Bulgaria
GQ
Equatorial Guinea
MV
Maldives
TJ
Tajikistan
BH
Bahrain
GR
Greece
MW
Malawi
TK
Tokelau
BI
Burundi
GS
S. Georgia and S. Sandwich Isls.
MX
Mexico
TM
Turkmenistan
BJ
Benin
GT
Guatemala
MY
Malaysia
TN
Tunisia
BM
Bermuda
GU
Guam
MZ
Mozambique
TO
Tonga
BN
Brunei Darussalam
GW
Guinea-Bissau
NA
Namibia
TP
East Timor
BO
Bolivia
GY
Guyana
NC
New Caledonia
TR
Turkey
BR
Brazil
HK
Hong Kong
NE
Niger
TT
Trinidad and Tobago
BS
Bahamas
HM
Heard and McDonald Islands
NF
Norfolk Island
TV
Tuvalu
BT
Bhutan
HN
Honduras
NG
Nigeria
TW
Taiwan
BV
Bouvet Island
HR
Croatia (Hrvatska)
NI
Nicaragua
TZ
Tanzania
BW
Botswana
HT
Haiti
NL
Netherlands
UA
Ukraine
BZ
Belize
HU
Hungary
NO
Norway
UG
Uganda
CA
Canada
ID
Indonesia
NP
Nepal
UM
US Minor Outlying Islands
CC
Cocos (Keeling) Islands
IE
Ireland
NR
Nauru
US
United States
CF
Central African Republic
IL
Israel
NT
Neutral Zone
UY
Uruguay
CH
Switzerland
IM
Isle of Man
NU
Niue
UZ
Uzbekistan
CI
Cote D'Ivoire (Ivory Coast)
IN
India
NZ
New Zealand (Aotearoa)
VA
Vatican City State (Holy See)
CK
Cook Islands
IO
British Indian Ocean Territory
OM
Oman
VC
Saint Vincent and the Grenadines
CL
Chile
IS
Iceland
PA
Panama
VE
Venezuela
CM
Cameroon
IT
Italy
PE
Peru
VG
Virgin Islands (British)
CN
China
JE
Jersey
PF
French Polynesia
VI
Virgin Islands (U.S.)
CO
Colombia
JM
Jamaica
PG
Papua New Guinea
VN
Viet Nam
CR
Costa Rica
JO
Jordan
PH
Philippines
VU
Vanuatu
CS
Czechoslovakia (former)
JP
Japan
PK
Pakistan
WF
Wallis and Futuna Islands
CV
Cape Verde
KE
Kenya
PL
Poland
WS
Samoa
CX
Christmas Island
KG
Kyrgyzstan
PM
St. Pierre and Miquelon
YE
Yemen
CY
Cyprus
KH
Cambodia
PN
Pitcairn
YT
Mayotte
CZ
Czech Republic
KI
Kiribati
PR
Puerto Rico
ZA
South Africa
DE
Germany
KM
Comoros
PS
Palestinian Territory
ZM
Zambia
DJ
Djibouti
KN
Saint Kitts and Nevis
PT
Portugal
COM
US Commercial
DK
Denmark
KR
Korea (South)
PW
Palau
EDU
US Educational
DM
Dominica
KW
Kuwait
PY
Paraguay
GOV
US Government
DO
Dominican Republic
KY
Cayman Islands
QA
Qatar
INT
International
DZ
Algeria
KZ
Kazakhstan
RE
Reunion
MIL
US Military
EC
Ecuador
LA
Laos
RO
Romania
NET
Network
EE
Estonia
LC
Saint Lucia
RS
Serbia
ORG
Non-Profit Organization
EG
Egypt
LI
Liechtenstein
RU
Russian Federation
ARPA
Old style Arpanet
EH
Western Sahara
LK
Sri Lanka
RW
Rwanda
NetComm Wireless Intelligent M2M Router
100
CODE
www.netcommwireless.com
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
101
3.
When you have entered all the required details, press the Generate button. The certificate takes several minutes to generate. When the certificate has been generated, you are
informed that it has been successfully generated and installed. The web server on the router restarts and you are logged out of the router. Click OK to be taken back to the login
screen.
Figure 98 - New certificate successfully generated message
NetComm Wireless Intelligent M2M Router
102
www.netcommwireless.com
SS
SH Key
y Manag
gemen
nt
Secuure Shell (SSH) is UNNIX-based command interface and network protocol used to ggain secure access too a remote computer, execute commandss on a remote machinne or to transfer files
betwween machines. It waas designed as a replacement for Telnet and
a other insecure reemote shell protocols which send informattion, including passwwords, as plain text.
SSH uses RSA public keyy cryptography for booth connection and authentication.
Two ccommon ways of usinng SSH are:
word authentication too log on.
Use aautomatically generatted public-private keyy pairs to encrypt thee network connectionn and then use passw
p to perform the auuthentication and alloow users or programss to log in without usinng a password.
Use a manually generatedd public-private key pair
Figure 999 - SSH Server Confifiguration
SS
SH Server C
Configura
ation
To configure the SSH serrver settings:
1.
Use the SSH Protocol drop dowwn list to select the prrotocol that you want to use. Protocol 2 is more recent and is considered
more seccure.
2.
Select the ttypes of authenticatioon you want to use byy clicking the Enablee password authentication and Enable keyy authentication togggle keys on or off. Notte that you may have both
authenticattion methods on but you
y may not turn them
m both off.
3.
Click the Saave button to confirm
m your settings.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
103
Host key management
SSH keys provide a means of identification using public key cryptography and challenge response authentication. This means that a secure connection can be established without transmitting a
password, thereby greatly reducing the threat of someone eavesdropping and guessing the correct credentials.
SSH Keys always come in pairs with one being a public key and the other a private key. The public key may be shared with any server to which you want to connect. When a connection request
is made, the server uses the public key to encrypt a challenge (a coded message) to which the correct response must be given. Only the private key can decrypt this challenge and produce the
correct response. For this reason, the private key should not be shared with those who you do not wish to give authorization.
The Host key management section displays the current public keys on the router and their date and timestamp. These public keys are provided in different formats, including DSA, RSA and
ECDSA. Each format has advantages and disadvantages in terms of signature generation speed, validation speed and encryption/decryption speed. There are also compatibility concerns to
consider with older clients when using ECDSA, for example.
Generating new keys
The complete set of keys can be re-generated by selecting the Generate keys button. This key generation process takes approximately 30 seconds to complete.
Downloading keys
The Get keys button allows you to download the complete set of public and private keys while the Get public keys button will download only the set of public keys.
Uploading your own key files
Click the Upload keys button to upload your own public key to the router.
Client key management
The Client Key Management section is used for uploading the public key file of clients. To upload a client public key, click the Upload button, browse to the file and click Open.
When the file is uploaded, it is examined for validity. If the key file is not a valid public key, it will not be uploaded.
NetComm Wireless Intelligent M2M Router
104
www.netcommwireless.com
LE
ED operatiion mode
The 7 front LED indicatorrs may be turned off after
a a timeout periodd for aesthetic or powwer saving reasons. To
T access the LED Operation
Mode pagee, click the System menu, then Administraation
on thhe left and finally seleect LED Operation Mode.
Figure
re 100 - LED Operationn Mode
m of the LEDs on the front panel of thee router. To set the ligghts to operate at all times,
set this to Alwa
ways on. To set the lights to turn off after a
The Mode drop down listt sets the operation mode
speccified period, select TTurn off after timeoutt. When configured too turn off after timeouut, use the LED poweer off timer field to specify the time in minuutes to wait before turning off the LED
indiccators. The LED Poweer Off Timer must be an integer between 1 and 65535.
W the wait period expires, the LEDs wiill turn off. If the routeer is rebooted, the LEED power off timer is reset. The router will boot
The wait period begins frrom the time the Savee button is clicked. When
a wait for the configgured time before turrning off again.
up and
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
105
Re
eboot
The reboot option in the SSystem section perfoorms a soft reboot of the router. This can bbe useful if you have made configuration changes you want too implement.
To reeboot the router:
1.
Click the Syystem menu item from
m the top menu bar.
2.
Click the Reboot button from thee menu on the left sidde of the screen.
Figure
re 101 - Reboot menuu option
3.
The router ddisplays a warning thhat you are about to perform
a reboot. If yyou wish to proceed, click the Reboot button then click OK on the confirmation winndow which appears.
Figure
re 102 - Reboot confirrmation
Note: It can take up to 2 minutess for the router to reboot.
Lo
ogging outt
To loog out of the router, cclick the
icon at the top right corner of
o the web user interfface.
NetCComm Wireless Intelliggent M2M Router
106
www.netcommwirelless.com
App
A pend
dix A: T
Tables
Tabble 1 - Document Revision History ............................
.......................................................................................................................................................................... 3
Tabble 2 - Device Dim
mensions ................................................................................................................................................................................................................... 8
Tabble 3 - LED Indicaators........................................................................................................................................................................................................................... 9
Tabble 4 - Signal strength LED descripptions .......................................................................................................................................................................................... 10
Tabble 5 – Interfaces ................................................................................................................................................................................................................................ 11
Tabble 6 - PoE powerr classes .................................................................................................................................................................................................................. 17
Tabble 7 - Locking poower block pin ouuts ................................................................................................................................................................................................ 18
Tabble 8 - Average poower consumptioon figures..................................................................................................................................................................................... 18
Tabble 9 - Managemeent account login details ....................................................................................................................................................................................... 19
Tabble 10 - Status page item details ....................................................................................................................................................................................................... 22
Tabble 11 - Data connnection item detaails ............................................................................................................................................................................................... 24
Tabble 12 - Connect oon demand - Connnect and disconnect timers desc riptions ................................................................................................................................ 29
Tabble 13 - Current M
MAC / IP / Port filteering rules in effect ..................................................................................................................................................................... 49
Tabble 14 - IPSec Configuration Items ................................................................................................................................................................................................... 53
Tabble 15 - SMS Setuup Settings .............................................................................................................................................................................................................. 75
Tabble 16 - Inbox/Outtbox icons ............................................................................................................................................................................................................... 77
Tabble 17 - SMS Diaggnostic Commandd Syntax ...................................................................................................................................................................................... 82
Tabble 18 - List of Vallid SMS diagnostic commands ............................................................................................................................................................................. 84
Tabble 19 - List of SM
MS diagnostics vaariables ........................................................................................................................................................................................ 85
Tabble 22 - SMS diaggnostics example commands ................................................................................................................................................................................ 87
Tabble 23 - System loog detail levels ........................................................................................................................................................................................................ 90
Tabble 24 - Administrration configuratioon options ................................................................................................................................................................................... 98
Tabble 25 - LAN Manaagement Default Settings ................................................................................................................................................................................... 110
Tabble 26 - Web Interrface Default Setttings .......................................................................................................................................................................................... 110
Tabble 27 - Telnet Access...................................................................................................................................................................................................................... 110
Tabble 28 - RJ-45 connnector pin outs .................................................................................................................................................................................................... 115
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
107
Appendix B: Device Mounting
Dimensions
The image below is at 100% scale and may be used as a template for mounting the device. All dimensions shown are in millimetres.
Figure 103 - Device mounting dimensions
NetComm Wireless Intelligent M2M Router
108
www.netcommwireless.com
App
A pend
dix C: M
Mou
unting
Brac
B ckett
The image below is at 1000% scale and may be
b used as a templatee for mounting the brracket. All dimensionns shown are in millim
metres.
Figuure 104 - Mounting brracket
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
109
App
A pend
dix D: D
Defa
aultt Settting
gs
The following tables list thhe default settings foor the Intelligent M2M
M Router.
LAN (MANAGEMENTT)
Static IP Address:
192.168.1.1
Subneet Mask:
255.255.255.0
Default Gateway:
192.168.1.1
Table 24 - LLAN Management Deffault Settings
ADMIN MANAGER ACCOOUNT
ROOT
MANAGER ACC
COUNT
Username:
admiin
Usernaame:
root
Password:
admiin
Passwword:
admin
Table 255 - Web Interface Defauult Settings
Note: Thee admin manager acccount allows you to manage
all settings off the router except fuunctions such as firmw
ware upgrade, devicce configuration backkup and restore and reset
to factory default settings, which are privileged only to the root manageer account.
INTELLIGENTT M2M ROUTER TELLNET ACCESS
Username:
root
Password:
admin
TTable 26 - Telnet Acceess
NetCComm Wireless Intelliggent M2M Router
110
www.netcommwirelless.com
Restorin
ng facto
ory deffault settings
Resttoring factory defaultss will reset the Intelliggent M2M Router to its factory default connfiguration. You may encounter a situationn where you need to restore the factory deefaults on your Intelligent
M2M
M Router such as:
You have lost your username and password annd are unable to loginn to the web configurration page;
You aare asked to perform a factory reset by support staff.
Therre are two methods yyou can use to restoree factory default settings on your Intellige nt M2M Router:
Usingg the web-based userr interface
t interface panel of the router
Usingg the reset button on the
Ussing the we
eb-based user interrface
To reestore your router to its factory default setttings, please follow these
steps:
1.
Open a broowser window and naavigate to the IP addrress of the router (deefault address is http:://192.168.1.1). Loginn to the router using r
root as the User Name and admin
n as
the passwoord.
2.
Click the System item from the top menu bar, then System
configuration on the left menu andd then click Settings backup and restore.
3.
Under the RRestore factory defauults section, click thee Restore Defaults buutton. The router askss you to confirm that you
y wish to restore faactory defaults. Clickk OK to continue. Thee
router sets all settings to defaultt. Click OK again to reboot
the router.
4.
When the PPower light returns to a steady red, the resset is complete. The ddefault settings are now
n restored.
Ussing the re
eset button
n on the intterface paanel of the router
Use a pen to depress thee Reset button on thee device for 15-20 seconds. The router wi ll restore the factory default settings and reboot.
Wheen you have reset youur Intelligent M2M Roouter to its default setttings you will be ablee to access the devicce’s configuration web interface using httpp://192.168.1.1 with username
admin or
roo
ot and password a
admin.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
111
Recovery mode
The Intelligent M2M Router features two independent operating systems, each with its own file systems. These two systems are referred to as 'Main' and 'Recovery'. It is always possible to use
one in order to restore the other in the event that one system becomes damaged or corrupted (such as during a firmware upgrade failure).
Both systems have Web interfaces that can be used to manipulate the other inactive system. The Intelligent M2M Router starts up by default in the Main system mode, however the router may be
triggered to start in recovery mode if desired.
To start the router in recovery mode:
1.
Press and hold the physical reset button on the interface panel of the router for 5 to 15 seconds. When the LEDs on the front panel change to amber and countdown in a sequence,
release the reset button. The router then boots into recovery mode.
2.
In your browser, navigate to http://192.168.1.1. The router’s recovery mode is hardcoded to use this address regardless of the IP address that was configured in the main system.
The router’s recovery console is displayed.
Figure 105 - Recovery console
The recovery console provides limited functionality. Basic status information is available, as well as access to the System log for troubleshooting. The Application Installer can be used to upload
and install different firmware, allowing you to roll back to a previous firmware in the event that an upgrade fails. The Settings menu provides the ability to reset the router to factory default settings
and the Reboot tab allows you to perform a soft reboot of the router.
NetComm Wireless Intelligent M2M Router
112
www.netcommwireless.com
App
A pend
dix E: H
HTT
TPS Uplo
U oad
ding
g a self--sign
ned
cert
c ifica
ate
If you have your own selff-signed certificate orr one purchased elseewhere and signed bby a Certificate Authority, you can upload it to the Intelligent M22M Router using the Upload page.
Note: Your keey and certificate filees must be named server.key and server.ccrt respectively otherrwise they will not work.
To upload your certificatee:
1.
Click on thee System item from thhe top menu bar. Froom the side menu barr, select System Connfiguration and then Upload.
The file uploaad screen is displayeed.
Fi
Figure 106 - Upload paage
2.
Click the Choose a File button and
a locate your serveer certificate file and click Open.
Figure
re 107 - Browse for seerver.crt
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
113
3.
Click the Upload button to begin uploading it to the router. The file appears in the list of files stored on the router.
Figure 108 - Server certificate file uploaded
4.
Repeat steps 2 and 3 for the server key file.
5.
Click the Install link next to the server.crt file then click OK on the prompt that is displayed. The certificate file is installed. Repeat this for the key file. When each file is installed it is
removed from the list of stored files.
Figure 109 - Installing the server.crt file
NetComm Wireless Intelligent M2M Router
114
www.netcommwireless.com
App
A pend
dix F: R
RJ-45
5 co
onnecto
or
The RJ-45 connector proovides an interface foor a data connection and
a for device input power using the pin layout shown below.
Pin:
Figure
re 110 -The RJ-45 connnector
PIIN
COLOUUR
SIGNAAL (802.3AF MODE A)
SIGNAAL (802.3AF MODE BB)
White/Oraange
stripee
Rx +
Rx + DC +
Orange Solid
Rx -
Rx - DC +
White/Greenn stripe
Tx +
Tx + DC -
Blue solid
DC +
unused
White/Blue stripe
DC +
unused
Green soolid
Tx -
Tx - DC -
White/Brownn stripe
DC -
unused
Brown soolid
DC -
unused
Taable 27 - RJ-45 connec
ector pin outs
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
115
Safety and product care
RF Exposure
Your device contains a transmitter and a receiver. When it is on, it receives and transmits RF energy. When you communicate with your device, the system handling your connection controls the
power level at which your device transmits.
This device meets the government’s requirements for exposure to radio waves.
This device is designed and manufactured not to exceed the emission limits for exposure to radio frequency (RF) energy set by the Federal Communications Commission of the U.S. Government.
This device complies with FCC radiation exposure limits set forth for an uncontrolled environment. To ensure compliance with RF exposure guidelines the device must be used with a minimum of
20cm separation from the body. Failure to observe these instructions could result in your RF exposure exceeding the relevant guideline limits.
External antenna
Any optional external antenna used for this transmitter must be installed to provide a separation distance of at least 20 cm from all persons and must not be co-located or operated in conjunction
with any other antenna or transmitter. Please consult the health and safety guide of the chosen antenna for specific body separation guidelines as a greater distance of separation may be
required for high-gain antennas.
Any external antenna gain must meet RF exposure and maximum radiated output power limits of the applicable rule section. The maximum antenna gain for this device as reported to the FCC is:
0.2 dBi (850MHz) and 2.7 dBi (1900MHz).
CE Approval
This device has been tested to and conforms to the regulatory requirements of the European Union and attained CE Marking. The CE Mark is a conformity marking consisting of the letters “CE.”
The CE Mark applies to the products regulated by the central European health, safety and environmental protection legislation. The CE Mark is obligatory for products it applies to: the
manufacturer affixes the marking in order to be allowed to sell their product in the European market.
The wireless device is approved to be used in the member states of the EU. NetComm Wireless declares that the wireless device is in compliance with the essential requirements and other
relevant provisions of the Radio and Telecommunications Terminal Equipment Directive 1999/5/EC (R&TTE Directive). Compliance with this directive implies conformity to the following European
Norms – N 60950 – Product Safety, EN 301 489 EMC, EN301511 GSM RF, EN301908 UMTS RF, EN 62311 SAR Technical requirement for radio equipment. A notified body has determined that
this device has properly demonstrated that the requirements of the directive have been met and has issued a favourable certificate of expert opinion. As such the device will bear the notified
body number 0682 after the CE mark.
The CE Marking is not a quality mark. Foremost, it refers to the safety rather than to the quality of the product. Secondly, CE Marking is mandatory for the product it applies to whereas most
quality markings are voluntary.
Marking: The product shall bear the CE mark, the notified body number(s) as depicted to the right. CE0682.
This product has also passed the following certification standards –
CE SAR- EN62311/EN50385
CE RF – EN301511, EN301908-1/-2,
CE EMC – EN301489-1/-7/-24, EN55022/EN55024
CE Safety – EN60950
NOTE: It is highly recommended that the device must be kept at least 20cm away from the human body.
This is a regulatory requirement and applies to all 3G capable devices meeting standard regulatory compliance such as the compliance standards listed above.
NetComm Wireless Intelligent M2M Router
116
www.netcommwireless.com
FC
CC Sta
atement
FC
CC compliiance
Fedeeral Communicationss Commission Notice (United States): Befoore a wireless devicee model is available for
f sale to the public, it must be tested andd certified to the FCCC that it does not excceed
the limit established by thhe government-adoppted requirement for safe
s exposure.
FC
CC regulattions
§ 155.19 (a)(3)
This device complies withh part 15 of the FCC Rules. Operation is subject
to the followinng two conditions: (1) This device may noot cause harmful interrference, and (2) thiss device must acceptt any
interrference received, inccluding interference that
t may cause undeesired operation.
§ 155.21
Changes or modificationss not expressly approoved by the party ressponsible for compliaance could void the user‘s
authority to operate the equipment..
********************************************************************************************************************************
§ 155.105 (b)
This equipment has beenn tested and found too comply with the limits for a Class B digittal device, pursuant to
t part 15 of the FCC Rules. These limits aare designed to provide reasonable proteection
against harmful interferennce in a residential innstallation. This equippment generates, usees and can radiate raadio frequency energgy and, if not installedd and used in accorddance with the instrucctions,
munications. Howeveer, there is no guaranntee that interferencee will not occur in a paarticular installation. IIf this equipment doees cause harmful
may cause harmful interfference to radio comm
interrference to radio or teelevision reception, which
w can be determined by turning the e quipment off and on, the user is encouragged to try to correct tthe interference by one or more of the
followwing measures:
—Reeorient or relocate thee receiving antenna.
—Inccrease the separation between the equippment and receiver.
—Coonnect the equipmennt into an outlet on a circuit
different from that to which the receeiver is connected.
—Coonsult the dealer or aan experienced radioo/TV technician for heelp.
RF Exposure Infformation (MP
PE)
This equipment compliess with radio frequency (RF) exposure limitts adopted by the Fedderal Communicationns Commission for ann uncontrolled enviroonment. This equipmeent should be installeed
and operated with minimum distance 20 cm between
the radiator & your body.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
117
IC Regulations:
RSS-Gen 7.1.3
This device complies with Industry Canada license-exempt RSS standard(s). Operation is subject to the following two conditions:
(1) this device may not cause interference, and
(2) this device must accept any interference, including interference that may cause undesired operation of the device.
Le présent appareil est conforme aux CNR d'Industrie Canada applicables aux appareils radio exempts de licence. L'exploitation est autorisée aux deux conditions suivantes:
(1) l'appareil ne doit pas produire de brouillage, et
(2) l'utilisateur de l'appareil doit accepter tout brouillage radioélectrique subi, même si le brouillage est susceptible d'en compromettre le fonctionnement."
****************************************************************************************************************************
ICES-003
CAN ICES-3(B)/ NMB-3(B)
****************************************************************************************************************************
RSS-Gen 7.1.2
This radio transmitter has been approved by Industry Canada to operate with the antenna types listed below with the maximum permissible gain and required antenna impedance for each
antenna type indicated. Antenna types not included in this list, having a gain greater than the maximum gain indicated for that type, are strictly prohibited for use with this device.
Antenna types: Dipole
Antenna gain: 850MHz: 0.2dBi; 1900MHz: 2.7dBi
****************************************************************************************************************************
IC RF Exposure Statement (MPE)
This equipment complies with IC RSS-102 RF exposure limits set forth for an uncontrolled environment. This
equipment should be installed and operated with minimum distance 20 cm between the radiator & your body.
NetComm Wireless Intelligent M2M Router
118
www.netcommwireless.com
Electrica
al safetty
Ac
ccessoriess
Onlyy use approved acceessories.
Do not
n connect with incoompatible products or accessories.
Co
onnection to a car
Seekk professional advicee when connecting a device interface to thhe vehicle electrical ssystem.
Distracti
ion
Op
perating m
machinery
Full attention
must be givven to operating the machinery
in order too reduce the risk of ann accident.
Prroduct handliing
You alone are responsiblle for how you use yoour device and any consequences of its uuse.
You must always switch ooff your device whereever the use of a mobbile phone is prohibitted. Do not use the device
without the clipp-on covers attachedd, and do not removee or change the covers
whilee using the device. UUse of your device is subject to safety meaasures designed to pprotect users and theeir environment.
Alwaays treat your device and its accessories with care and keep it in a clean and dustt-free place.
Do not
n expose your devicce or its accessories to open flames or lit tobacco products.
Do not
n expose your devicce or its accessories to liquid, moisture or high humidity.
Do not
n drop, throw or try to bend your device or its accessories.
Do not
n use harsh chemiccals, cleaning solventts, or aerosols to cleaan the device or its a ccessories.
Do not
n paint your device or its accessories.
Do not
n attempt to disasseemble your device orr its accessories, onlyy authorised personnnel must do so.
Do not
n use or install this pproduct in extremelyy hot or cold areas. Ennsure that the devicee is installed in an areea where the temperaature is within the suppported operating temperature range (-200°C to
65°CC)
Do not
n use your device inn an enclosed enviroonment or where heatt dissipation is poor. Prolonged use in succh space may cause excessive heat and raise ambient tempeerature, which will leaad to
automatic shutdown of yoour device or the discconnection of the moobile network connecction for your safety. To
T use your device normally again after suuch shutdown, cool it in a well-ventilated place
befoore turning it on.
Please check local regulaations for disposal off electronic products.
Do not
n operate the devicce where ventilation iss restricted
Instaallation and configuraation should be perfoormed by trained perssonnel only.
Do not
n use or install this pproduct near water too avoid fire or shock hazard. Avoid expossing the equipment too rain or damp areas.
Arrange power and Etherrnet cables in a manner such that they are not likely to be steppped on or have item
ms placed on them.
Ensuure that the voltage aand rated current of thhe power source mattch the requirementss of the device. Do noot connect the devicee to an inappropriate power source.
Sm
mall childrren
Do not
n leave your devicee and its accessories within the reach of small children or alloww them to play with it..
Theyy could hurt themselvves or others, or could accidentally damage the device.
Yourr device contains small parts with sharp edges
that may causee an injury or which ccould become detachhed and create a chooking hazard.
www.netcommwireless.com
NetComm Wireeless Intelligent M2M Router
119
Emergency situations
This device, like any wireless device, operates using radio signals, which cannot guarantee connection in all conditions. Therefore, you must never rely solely on any wireless device for
emergency communications.
Device heating
Your device may become warm during normal use.
Faulty and damaged products
Do not attempt to disassemble the device or its accessories.
Only qualified personnel must service or repair the device or its accessories.
If your device or its accessories have been submerged in water punctured or subjected to a severe fall, do not use until they have been checked at an authorised service centre.
Interference
Care must be taken when using the device in close proximity to personal medical devices, such as pacemakers and hearing aids.
Pacemakers
Pacemaker manufacturers recommend that a minimum separation of 15cm be maintained between a device and a pacemaker to avoid potential interference with the pacemaker.
Hearing aids
People with hearing aids or other cochlear implants may experience interfering noises when using wireless devices or when one is nearby.
The level of interference will depend on the type of hearing device and the distance from the interference source, increasing the separation between them may reduce the interference. You may
also consult your hearing aid manufacturer to discuss alternatives.
Medical devices
Please consult your doctor and the device manufacturer to determine if operation of your device may interfere with the operation of your medical device.
Hospitals
Switch off your wireless device when requested to do so in hospitals, clinics or health care facilities. These requests are designed to prevent possible interference with sensitive medical
equipment.
Interference in cars
Please note that because of possible interference to electronic equipment, some vehicle manufacturers forbid the use of devices in their vehicles unless an external antenna is included in the
installation.
Explosive environments
Petrol stations and explosive atmospheres
In locations with potentially explosive atmospheres, obey all posted signs to turn off wireless devices such as your device or other radio equipment.
Areas with potentially explosive atmospheres include fuelling areas, below decks on boats, fuel or chemical transfer or storage facilities, areas where the air contains chemicals or particles, such
as grain, dust, or metal powders.
Blasting caps and areas
Turn off your device or wireless device when in a blasting area or in areas posted turn off “two-way radios” or “electronic devices” to avoid interfering with blasting operations.
NetComm Wireless Intelligent M2M Router
120
www.netcommwireless.com

Source Exif Data:
File Type                       : PDF
File Type Extension             : pdf
MIME Type                       : application/pdf
PDF Version                     : 1.6
Linearized                      : Yes
Encryption                      : Standard V4.4 (128-bit)
User Access                     : Print, Extract, Print high-res
Author                          : 
Create Date                     : 2013:09:27 18:57:14+08:00
Modify Date                     : 2013:09:27 19:13:13+08:00
XMP Toolkit                     : Adobe XMP Core 4.2.1-c043 52.372728, 2009/01/18-15:08:04
Creator Tool                    : PScript5.dll Version 5.2.2
Metadata Date                   : 2013:09:27 19:13:13+08:00
Producer                        : Acrobat Distiller 9.0.0 (Windows)
Format                          : application/pdf
Creator                         : 
Title                           : 
Document ID                     : uuid:e50bc7e9-e059-4941-aabf-46f767a27d58
Instance ID                     : uuid:5c6bf126-5135-4841-8ef4-58c14db28649
Page Count                      : 120
EXIF Metadata provided by EXIF.tools
FCC ID Filing: XIA-NTC620002

Navigation menu