YF325 User Manual
File info: application/pdf · 95 pages · 3.07MB
YF325 User Manual
YF325 User Manual - yifanwireless.com
YF325IndustrialRouterUserManual Page 3 of 95 Address:8thFloor,No.2,ChengyiNorthStreet,Jimei,Xiamen,Fujian,China. Website:www.yifanwireless.com Tel: 86-592-6101492 Fax ...
YF325 User Manual - M2M 3G 4G LTE Routers
YF325 Industrial Router is an IoT wireless communication router. It is using public cellular network GPRS/CDMA/WCDMA/EVDO/LTE to provide ...
Full PDF Document
If the inline viewer fails, it will open the original document in compatibility mode automatically. You can also open the file directly.
Extracted Text
YF325 Industrial Router User Manual Document Version V1.0.0 Product Name: YF325 Security Classification Total: 96 pages YF325 Series Router User Manual The user manual is suitable for the following model: YF325Series 2G/3G/4G Cellular Router 1x WAN/LAN, 1 x LAN, 1 x RS232/RS485 Model No. YF325-L YF325-L-SIM2 Description 4G LTE Router, Single SIM 4G LTE Router, Dual SIM Yifan Industry Limited. Add8th Floor, No.2, Chengyi North Street, Jimei, XiaMen, China Zip Code: 361000 Tel+86 592-6101492 Fax: +86 592-5222813 http://www.yifanwireless.com Files Revised Record Date Version 2018-7-21 V1.0.0 Remark Initial Version Author Harven Product Picture YF325 Industrial Router User Manual Note: There may be differences between models of accessories and interfaces, actual products shall prevail. Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 3 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Contents Chapter 1 Brief Introduction of Product........................................................................................6 1.1 General................................................................................................................................6 1.2 Working Principle Diagram.............................................................................................. 7 1.3 Specification....................................................................................................................... 7 Chapter 2 Installation Introduction.............................................................................................. 10 2.1 Overview........................................................................................................................... 10 2.2 Encasement List..............................................................................................................10 2.3 Installation and Cable Connection............................................................................... 10 2.4 About Power.....................................................................................................................14 2.5LED Indicator.................................................................................................................... 14 2.6 Reset Button.................................................................................................................... 15 Chapter 3 Configuration and Management............................................................................... 16 3.1 Configuration Connection.............................................................................................. 16 3.2 Access the Configuration Page.....................................................................................16 3.2.1 PC IP Address SettingTwo Methods........................................................ 16 3.2.2 Login to Configuration Page.............................................................................. 18 3.3 Configuration and Management................................................................................... 19 3.3.1 Setting..............................................................................................................19 3.3.1.1 Basic Setting.......................................................................................... 19 3.3.1.2 Dynamic DNS.........................................................................................26 3.3.1.3 Clone MAC Address..............................................................................27 3.3.1.4 Advanced Router...................................................................................28 3.3.1.5 VLANs..................................................................................................... 29 3.3.1.6 Networking..............................................................................................30 3.3.2 Wireless...........................................................................................................33 3.3.2.1 Basic Settings........................................................................................ 33 3.3.2.2 Wireless Security...................................................................................36 3.3.3 Services...........................................................................................................39 3.3.3.1 Services.................................................................................................. 39 3.3.4 VPN.................................................................................................................. 43 3.3.4.1 PPTP....................................................................................................... 43 3.3.4.2 L2TP........................................................................................................ 44 3.3.4.3 OPENVPN.............................................................................................. 46 3.3.4.4 IPSEC......................................................................................................51 3.3.4.5 GRE......................................................................................................... 55 3.3.5 Security............................................................................................................56 3.3.5.1 Firewall.................................................................................................... 56 3.3.6 Access Restrictions....................................................................................... 60 3.3.6.1 WAN Access...........................................................................................60 3.3.6.2 URL Filter................................................................................................ 63 3.3.6.3 Packet Filter............................................................................................64 Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 4 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual 3.3.7 NAT.................................................................................................................. 65 3.3.7.1 Port Forwarding..................................................................................... 65 3.3.7.2 Port Range Forward..............................................................................66 3.3.7.3 DMZ......................................................................................................... 67 3.3.8 QoS Setting.................................................................................................... 68 3.3.8.1 Basic........................................................................................................ 68 3.3.8.2 Classify....................................................................................................69 3.3.9 Applications.................................................................................................... 69 3.3.9.1 Serial Application................................................................................... 69 3.3.10 Administration.................................................................................................71 3.3.10.1 Management........................................................................................ 71 3.3.10.2 Keep Alive.............................................................................................74 3.3.10.3 Commands........................................................................................... 75 3.3.10.4 Factory Defaults.................................................................................. 76 3.3.10.5 Firmware Upgrade.............................................................................. 76 3.3.10.6 Backup.................................................................................................. 77 3.3.11 Status...............................................................................................................78 3.3.11.1 Router....................................................................................................78 3.3.11.2 WAN.......................................................................................................81 3.3.11.3 LAN........................................................................................................ 84 3.3.11.4 Wireless................................................................................................ 87 3.3.11.5 Bandwidth............................................................................................. 89 3.3.11.6 System-Info.......................................................................................... 90 Appendix..........................................................................................................................................94 Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 5 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Chapter 1 Brief Introduction of Product 1.1 General YF325 Industrial Router is an IoT wireless communication router. It is using public cellular network GPRS/CDMA/WCDMA/EVDO/LTE to provide long distance, wireless and large data transmission function for users. The product uses the high-performance industrial-grade CPU and wireless module, with the embedded real-time operating system as the software support platform. It provides a RS232 (or RS485), 1 ethernet LAN, 1 ethernet WAN and a WIFI, can be connected to the serial device, ethernet devices and WIFI devices at the same time, achieve data pass-through function. The product has been widely used in the M2M industry of the IoT industrial chain, such as smart grid, intelligent transportation, smart home, finance, mobile POS terminals, supply chain automation, industrial automation, intelligent building, fire protection, public safety, environmental protection, meteorology, digital medical, telemetry, agriculture, forestry, water, coal, petrochemical and other related fields. Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 6 of 95 Fax: +86-592-5912735 1.2 Working Principle Diagram YF325 Industrial Router User Manual 1.3 Specification Cellular Specification Item Content YF325-L LTE WIFI Industrial Router Standard and Band LTE FDD: B1/B2/B3/B4/B5/B7/B8/B28 (2100/1900/1800/850/2600/900/800MHz) FDD: B1/B3/B5/B7/B8/B20 (Optional) LTE TDD: B40, B38/B39/B40/B41(Optional) HSPA+/HSUPA/HSDPA/WCDMA/UMTS 2100/1900/900/850MHz EDGE/GPRS/GSM 1900/1800/900/850MHz Bandwidth Transmit Power Sensitivity FDD-LTEDownstream rate 150Mbpsuplink rate 50Mbps TD-LTEDownstream rate 130Mbpsuplink rate 35Mbps TD-HSPA+Downstream rate 4.2Mbpsuplink rate 2.2Mbps DC-HSPA+Downstream rate 42Mpbsuplink rate 5.76 Mbps HSPA+Downstream rate 21Mpbsuplink rate 5.76 Mbps HSDPADownstream rate 7.2Mbps HSUPAuplink rate 5.76Mbps UMTS384Kbps <23dBm <-97dBm Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 7 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual WIFI Specification Item Standard and Band Bandwidth Security Transmit Power Sensitivity Content IEEE802.11b/g/n IEEE802.11b/g54Mbps (Maximum) IEEE802.11n 144Mbps (Maximum) Support WEP, WPA, WPA2 encrypt methodsoptional WPS function 15�2dBm <-72dBm@54Mbps Hardware System Item CPU FLASH DDR2 Industrial-grade CPU 16MB 128MB Content Interface Item WAN Interface LAN Interface Serial LED Indicators Antenna Interface SIM/UIM Slot Power Interface Reset Button Content one 10/100M RJ45 ethernet port, adaptive MDI/MDIX, built-in 15KV ESD one 10/100M RJ45 ethernet port, adaptive MDI/MDIX, built-in 15KV ESD one RS232/485 serial interface with built-in 15KV ESD Data bits:5, 6, 7, 8 bits Stop bits:1, 1.5 (optional), 2 bits Error detection: none, even parity, odd parity, SPACE (optional) and MARK (optional) Serial Port Rate: 2400~115200bits/s "PWR", "Online", "LAN", "WAN/LAN", "WIFI" Cellular: Standard SMA female antenna interface, characteristic impedance: 50 WIFI: Standard SMA male antenna interface, characteristic impedance: 50 Standard SIM card slot, support 1.8V/3V SIM/UIM card, built-in 15KV ESD Standard 3.5mm terminal block interface, with built-in phase-reversal and over-voltage protection Can reset router's configuration to default factory setting by this button Note: There may be differences between models of accessories and interfaces, actual products shall prevail. Power Item Content Input Voltage DC 12V/1.5A Accepted Voltage Range DC 536V Power Consumption Work Mode Standby 95135mA@12VDC Communicating 165220mA@12VDC Consumption Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 8 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Physical Properties Item Content Casing Metal casing, IP30 protection level, suitable for most industrial control applications. Dimensions 93x89x24mm (excluding antennas and mountings) Weight 250g Others Item Operating Temperature Storage Temperature Relative Humidity -35+75 -40+85 95% (non-condensing) Content Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 9 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Chapter 2 Installation Introduction 2.1 Overview Router must be installed correctly before they achieve the designed features, the device must be installed by the guidance of a qualified engineer who recognized by the Company. Warning Please do not install the device while powered on. 2.2 Encasement List To transport safety, you will need a reasonable packaging. After you unpack the device, please keep the packaging materials for future transport needs. It includes the following components: 1 Host Device (Packaging according to the order) 1 User's guide CD Wireless cellular antenna (SMA male head) 1 WIFI antenna (SMA female head) (Optional) 1 Power cable Product certification Warranty Card 2.3 Installation and Cable Connection Dimensionunitmm DIN Rail installing position Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 10 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual DIN Rail Style Router Dimension Wall Mount Style Router Dimension Note: This router device use DIN Rail to install, use M3 screw to secure the clip, the depth is 3-4mm. Antenna Installation: Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 11 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Wireless WAN antenna interface is a standard SMA female antenna interface (marked as `ANT'), put the cellular antenna on the interface, make sure it has been tightening to avoid affect the signal quality. Wireless LAN antenna interface is a standard SMA male antenna interface (marked as `WIFI'), put the WIFI antenna on the interface, make sure it has been tightening to avoid affect the signal quality. Note: The wireless cellular antenna cannot be mixed up with WIFI antenna, otherwise the device cannot work properly. SIM/UIM Card Installation Gently press the eject button (the round dot on the left side of the card slot) with a pen or pin, SIM/UIM slot will pop up. When installing SIM/UIM card, put the card into the card slot and make sure the metal chip surface is facing outside, then insert the card slot in to the device. (Following is an example for dual sim card version) Press the eject button and then insert the sim card. Ethernet Cable Connection: Connect one side of the ethernet cable to the LAN port on the router, the other side to the user device's ethernet port. The cable's definition is as following: RJ45-1 1 2 3 4 5 6 RJ45-2 1 2 3 4 5 6 Color White/Orange Orange White/Green Blue White/Blue Green Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 12 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual 7 7 White/Brown 8 8 Brown 3.5mm Terminal Block Interface Definition The 5-pin terminal block includes POWER and RS232(RS485) function. The definition is as following: No. Definition Description Extension 1 PWR Device power supply positive 2 GND Device power supply negative 3 GND RS232 GND 4 RXD RS232 receiving RS485 A 5 TXD RS232 sending RS485 B Serial port connection: (When needed) Connect the serial cable to the router with the terminal block interface, the DB9 side connect to the user's device. The cable's definition is as following: Termina Color Definition DB9F Description On router's end l block 1 Brown TXD 2 Sending Sending 2 Blue RXD 3 Receiving Receiving 3 Black GND 5 GND Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 13 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual 2.4 About Power The YF325 router is usually used in complex external environments. To fit the environment and improve the system stability, the router uses advanced power technology. User can use standard 12VDC/1.5A power adapter which come with the device, or use any DC 5-36V power to provide power supply directly for the device. When user use extra power supply, it must be stable (the ripple should less than 300mV, and the instantaneous voltage should not exceed 36V), and ensure the power is greater than 8W. We recommend using the standard 12VDC/1.5A power adapter which come with the device. 2.5LED Indicator Router has the following LED indicators: `PWR', `Online', `LAN', `WAN/LAN', `WIFI. Indicator Status Description PWR On Power supply is fine Off No power Online On Device is online Off Device is offline LAN Off No connection on LAN Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 14 of 95 Fax: +86-592-5912735 WAN/LAN WIFI On/Flashing Off On/Flashing Off On YF325 Industrial Router User Manual Detected LAN connection/Communicating WAN/LAN no connection WAN/LAN already connected/Communicating WIFI is not on WIFI is on 2.6 Reset Button Router has a rest button, marked as `Reset'. This button is used for restoring the device back to factory setting. Use a pen or pin and push the reset button for 15 seconds and release, the router will reset all the setting. After 10 seconds, the router will automatically reboot (the `System' LED indicator will go off for 10 seconds and back to normal status). Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 15 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Chapter 3 Configuration and Management 3.1 Configuration Connection The router should be connected to the PC with the supplied ethernet cable or WIFI connection before doing the configuration for the router. When using the wired connection method, insert the ethernet cable into any LAN port of the router, insert the other side of the cable into the ethernet port on your PC. When using the WIFI connection method, the default SSID is `SSID', no password. 3.2 Access the Configuration Page 3.2.1 PC IP Address SettingTwo Methods First method: Automatically obtain IP address Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 16 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Second method: static IP Set the PC IP address as 192.168.1.9 (or other IP address in the same 192.168.1 segment), subnet mask is 255.255.255.0, default gateway is 192.168.1.1. DNS can be set to any DNS server available in that area. Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 17 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual 3.2.2 Login to Configuration Page This chapter will introduce the main functions for all the setting pages. Users can use web browser on the connected PC to access the router's configuration portal. There are 11 main pages: Setup, Wireless, Services, VPN, Security, Access Restrictions, NAT, QoS Setting, Applications, Administration, Status. To access the web-based configuration tool, open IE or other browser and type in the default router IP address 192.168.1.1, then press enter. When access to the web configuration page first time, the following page will show up, ask user whether to change the default username and password or not. Click `Change Password' to proceed to the next step. You will see a page which similar as the following page after clicking the button. Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 18 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual User may need to type in username and password in order to access any items of the menu. Type in the correct username and password, then click Submit. the default username is admin, password is admin. You can change it under the Management section. 3.3 Configuration and Management 3.3.1 Setting Click `Setup', the first page is for basic settings. On this page, you can change some basic settings, click `Saved' button to save the setting but it won't take effect, click the `Apply Settings' button to let the changes take effect, or click `Cancel Changes' to undo the changes. 3.3.1.1 Basic Setting `WAN Connection Type' is the section to configure how to let the router connect to internet. You can get the detail information from your Internet Services Provider (IPS). WAN Connection Type Pick the connection type from the dropdown list. There are 7 connection types: disabled, static IP, dynamic IP, automatic configuration - DHCP, PPPoE, 3G/UMTS/4G/LTE, DHCP-4G. Type 1: Disable Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 19 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Disable WAN port connection Type 2: Static IP This connection type usually used for dedicated line such as business or enterprise fiber. The ISP will provide you with the detail parameters such as IP address, subnet mask, gateway and DNS. You will need to use these parameters to set up the router. WAN IP Address: the IP address which allocated by user or provided by the ISP Subnet Mask: the subnet mask which allocated by user or provided by the ISP Gateway: the gateway which allocated by user or provided by the ISP Static DNS (1-3): the DNS which allocated by user or provided by the ISP Type 3: Automatic Configuration - DHCP The default WAN connection type. Some cable provider and residential internet service use this connection type. The IP address of the WAN port obtained by DHCP Type 4: PPPoE China Telecom and China Netcom ADSL services usually use this type of connection, other ISP may also use this type. PPPoE connection needs ISP to provide you the username, password and the service name, this information need to put in the related setting fields of Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 20 of 95 Fax: +86-592-5912735 the router. YF325 Industrial Router User Manual User Name: the user name for login to the Internet Password: the password for login to the Internet Type 5: 3G/UMTS/4G/LTE User Name: the user name for login to the Internet Password: the password for login to the Internet Dial String: the number to call the service provider APN: access point name PIN: the PIN of the SIM card Connection Type Connection Type: including auto, force 3G, force 2G and so on, if using 4G module, it will have related 4G options, based on the user's requirement and different cellular module to select. Type 6: DHCP-4G WAN IP obtained by DHCP-4G Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 21 of 95 Fax: +86-592-5912735 Keep Online YF325 Industrial Router User Manual This function is used to detect whether the Internet connection is active. If this setting is on, the router will automatic check the internet connection. When it detects invalid connection, or the connection is disconnected, the system will automatically reconnect and rebuild a valid internet connection. If the network quality is poor or it is under a private network, we recommend using the `Router' mode. Keep Online Methods: None: do not set this function Ping: Send ping packet to detect the connection, when choose this method, users should also configure "Detection Interval", "Primary Detection Server IP" and "Backup Detection Server IP" items. Route: Detect connection with route method, when choose this method, users should also configure "Detection Interval", "Primary Detection Server IP" and "Backup Detection Server IP" items. PPP: Detect connection with PPP method, when choose this method, users should also configure "Detection Interval" item. Detection Interval: time interval between two detections, unit is second Primary Detection Server IP: the server used to response the Router's detection packet. This item is only valid for method "Ping" and "Route". Backup Detection Server IP: the server used to response the Router's detection packet. Force reconnect: this option schedules the PPPOE or 3G reconnection by killing the pppd daemon and restart it. Time: needed time to reconnect Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 22 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual STP STP (Spaning Tree Protocol) can be applied to loop network. Through certain algorithm achieves path redundancy, and loop network cuts to tree-based network without loop in the meantime, thus to avoid the hyperplasia and infinite circulation of a message in the loop network Optional Configuration Router Name: set Router name Host Name: ISP provides Domain Name: ISP provides MTU: auto (1500) and manual (1200-1492 in PPPOE/PPTP/L2TP mode, 576-16320 in other modes) Router Internal Network Settings Router IP Local IP Address: IP address of the Router Subnet Mask: the subnet mask of the Router Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 23 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Gateway: set internal gateway of the Router. If default, internal gateway is the address of the Router Local DNS: DNS server is auto assigned by network operator server. Users enable to use their own DNS server or other stable DNS servers, if not, keep it default Network Address Server Settings (DHCP) These settings for the Router's Dynamic Host Configuration Protocol (DHCP) server functionality configuration. The Router can serve as a network DHCP server. DHCP server automatically assigns an IP address for each computer in the network. If they choose to enable the Router's DHCP server option, users can set all the computers on the LAN to automatically obtain an IP address and DNS, and make sure no other DHCP server in the network. DHCP Type: DHCP Server and DHCP Forwarder Enter DHCP Server if set DHCP Type to DHCP Forwarder as blow: DHCP Server: keep the default Enable to enable the Router's DHCP server option. If users have already have a DHCP server on their network or users do not want a DHCP server, then Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 24 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual select Disable Start IP Address: enter a numerical value for the DHCP server to start with when issuing IP addresses. Do not start with 192.168.1.1 (the Router's own IP address). Maximum DHCP Users: enter the maximum number of PCs that users want the DHCP server to assign IP addresses to. The absolute maximum is 253 if 192.168.1.2 is users' starting IP address. Client Lease Time: the Client Lease Time is the amount of time a network user will be allowed connection to the Router with their current dynamic IP address. Enter the amount of time, in minutes, that the user will be "leased" this dynamic IP address. Static DNS (1-3): the Domain Name System (DNS) is how the Internet translates domain or website names into Internet addresses or URLs. Users' ISP will provide them with at least one DNS Server IP address. If users wish to utilize another, enter that IP address in one of these fields. Users can enter up to three DNS Server IP addresses here. The Router will utilize them for quicker access to functioning DNS servers. WINS: the Windows Internet Naming Service (WINS) manages each PC's interaction with the Internet. If users use a WINS server, enter that server's IP address here. Otherwise, leave it blank. DNSMasq: users' domain name in the field of local search, increase the expansion of the host option, to adopt DNSMasq can assign IP addresses and DNS for the subnet, if select DNSMasq, dhcpd service is used for the subnet IP address and DNS. Time Settings Select time zone of your location. To use local time, leave the checkmark in the box next to Use local time. NTP Client: Get the system time from NTP server Time Zone: Time zone options Summer Time (DST): set it depends on users' location Server IP/Name: IP address of NTP server, up to 32 characters. If blank, the system will find a server by default Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 25 of 95 Fax: +86-592-5912735 Adjust Time YF325 Industrial Router User Manual To adjust time by the system and refresh to get the time of the web, user can set to modify the time of the system. They can change to adjust time by manual to achieve adjust time by the system if the system fails to get NTP server 3.3.1.2 Dynamic DNS If user's network has a permanently assigned IP address, users can register a domain name and have that name linked with their IP address by public Domain Name Servers (DNS). However, if their Internet account uses a dynamically assigned IP address, users will not know in advance what their IP address will be, and the address can change frequently. In this case, users can use a commercial dynamic DNS service, which allows them to register their domain to their IP address, and will forward traffic directed at their domain to their frequently-changing IP address. DDNS Service: Router currently support DynDNS, freedns, Zoneedit, NO-IP, 3322, easyDNS, TZO, DynSIP and Custom based on the user. User Name: users register in DDNS server, up to 64 characteristic Password: password for the user name that users register in DDNS server, up to 32 characteristic Host Name: users register in DDNS server, no limited for input characteristic for now Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 26 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Type: depends on the server Wildcard: support wildcard or not, the default is OFF. ON means *.host.3322.org is equal to host.3322.org Do not use external ip check: enable or disable the function of 'do not use external ip check' Force Update Interval: unit is day, try forcing the update dynamic DNS to the server by setted days Status DDNS Status shows connection log information 3.3.1.3 Clone MAC Address Some ISP need the users to register their MAC address. The users can clone the Router MAC address to their MAC address registered in ISP if they do not want to re-register their MAC address Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 27 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Clone MAC address can clone three parts: Clone LAN MAC, Clone WAN MAC, Clone Wireless MAC. Noted that one MAC address is 48 characteristic, can not be set to the multicast address, the first byte must be even. And MAC address value of network bridge br0 is determined by the smaller value of wireless MAC address and LAN port MAC address. 3.3.1.4 Advanced Router Operating Mode: Gateway and Router If the Router is hosting users' Internet connection, select Gateway mode. If another Router exists on their network, select Router mode. Dynamic Routing Dynamic Routing enables the Router to automatically adjust to physical changes in the network's layout and exchange routing tables with other Routers. The Router determines the network packets' route based on the fewest number of hops between the source and destination. To enable the Dynamic Routing feature for the WAN side, select WAN. To enable this feature for the LAN and wireless side, select LAN&WLAN. To enable the feature for both the WAN and LAN, select Both. To disable the Dynamic Routing feature for all data transmissions, keep the default setting, Disable. NoteDynamic Routing is not available in Gateway mode Static Routing Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 28 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Select set number: 1-50 Route Name: defined routing name by users, up to 25 characters Metric: 0-9999 Destination LAN NET: the Destination IP Address is the address of the network or host to which users want to assign a static route Subnet Mask: the Subnet Mask determines which portion of an IP address is the network portion, and which portion is the host portion Gateway: IP address of the gateway device that allows for contact between the Router and the network or host. Interface: indicate users whether the Destination IP Address is on the LAN & WLAN (internal wired and wireless networks), the WAN (Internet), or Loopback (a dummy network in which one PC acts like a network, necessary for certain software programs) Show Routing Table 3.3.1.5 VLANs Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 29 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual VLANs allow user to divide different VLAN port as they need, the system support VLAN1 to VLAN15, total is 15 VLAN port. LAN port and WAN port cannot be set to the same VLAN. 3.3.1.6 Networking Bridging-Create Bridge: creates a new empty network bridge for later use. STP means Spanning Tree Protocol and with PRIO users are able to set the bridge priority order. The lowest number has the highest priority. Bridging - Assign to Bridge: allows users to assign any valid interface to a network bridge. Consider setting the Wireless Interface options to Bridged if they want to assign any Wireless Page 30 of 95 Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Fax: +86-592-5912735 YF325 Industrial Router User Manual Interface here. Any system specific bridge setting can be overridden here in this field. Current Bridging Table: shows current bridging table Create steps as below: Click 'Add' to create a new bridge, configuration is as below: Create bridge option: the first br0 means bridge name. STP means to on/off spanning tree protocol. Prio means priority level of STP, the smaller the number, the higher the level. MTU means maximum transfer unit, default is 1500, delete if it is not need. And then click 'Save' or 'Add'. Bride properties is as below: Enter relewant bridge IP address and subnet mask, click 'Add' to create a bridge. Note: Only create a bride can apply it. Assign to Bridge option: to assign different ports to created bridge. For example: assign port (wireless port) is ra0 in br1 bridge as below: Prio means priority level: work if multiple ports are within the same bridge. The smaller the number, the higher the level. Click 'Add' to take it effect. Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 31 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Note: corresponding interface of WAN ports interface should not be binding, this bridge function is basically used for LAN port, and should not be binding with WAN port If bind success, bridge binding list in the list of current bridging table is as below: To make br1 bridge has the same function with DHCP assigned address, users need to set multiple DHCP function, see the introduction of multi-channel DHCPD: Port Setup: Set the port property, the default is not set Choose not bridge to set the port's own properties, detailed properties are as below: Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 32 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual MTU: maximum transfer unit Multicast forwarding: enable or disable multicast forwarding Masquerade/NAT: enable or disable Masquerade/NAT IP Address: set ra0's IP address, and do not conflict with other ports or bridge Subnet Mask: set the port's subnet mask Multiple DHCPD: using multiple DHCP service. Click 'Add' in multiple DHCP server to appear relevant configuration. The first means the name of port or bridge (do not be configured as eth0), the second means whether to on DHCP. Start means start address, Max means maximum assigned DHCP clients, Leasetime means the client lease time, the unit is second, click 'Save' or 'Apply' to put it into effect after setting. Note: Only configure and click 'Save' can configure the next, can not configure multiple DHCP at the same time. 3.3.2 Wireless 3.3.2.1 Basic Settings Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 33 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Wireless Network"Eanble", radio on. "Disable", radio off. Wireless ModeAP, Client, Adhoc, Repeater, Repeater Bridge four options Wireless Network Mode MixedSupport 802.11b, 802.11g, 802.11n wireless devices. BG-MixedSupport 802.11b, 802.11g wireless devices. B-onlyOnly supports the 802.11b standard wireless devices. B-onlyOnly supports the 802.11b standard wireless devices. G-onlyOnly supports the 802.11g standard wireless devices. NG-MixedSupport 802.11g, 802.11n wireless devices. N-onlyOnly supports the 802.11g standard wireless devices. 8021.11n Transmission Mode In the wireless network mode to "N-only" choose to transfer its transmission mode. Greenfield: When you determine the surrounding environment, there is no other 802.11a/b/g devices use the same channel, use this mode to increase throughput. Other Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 34 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual 802.11a/b/g devices use the same channel in the environment, the information you send may generate an error, re-issued. MixedThis mode is contrary to the green mode, but will reduce the throughput. Wireless Network Name(SSID): The SSID is the network name shared among all devices in a wireless network. The SSID must be identical for all devices in the wireless network. It is case-sensitive and must not exceed 32 alphanumeric characters, which may be any keyboard character. Make sure this setting is the same for all devices in your wireless network. Wireless Channel A total of 1-13 channels to choose more than one wireless device environment, please try to avoid using the same channel with other devices. Channel Width20MHZ and 40MHZ Extension ChannelChannel for 40MHZ, you can choose upper or lower. Wireless SSID Broadcast EnableSSID broadcasting. DisableHidden SSID. Network Configuration Bridged Bridge to the Router, under normal circumstances, please select the bridge. Unbridged There is no bridge to the Router, IP addresses need to manually configure. Virtual Interfaces Click Add to add a virtual interface. Add successfully, click on the remove, you can remove the virtual interface Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 35 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual AP Isolation This setting isolates wireless clients so access to and from other wireless clients are stopped. NoteSave your changes, after changing the "Wireless Mode", "Wireless Network Mode", "wireless width", "broadband" option, please click on this button, and then configure the other options. 3.3.2.2 Wireless Security Wireless security options used to configure the security of your wireless network. This route is a total of seven kinds of wireless security mode. Disabled by default, not safe mode is enabled. Such as changes in Safe Mode, click Apply to take effect immediately. Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 36 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual WEPIs a basic encryption algorithm is less secure than WPA.Use of WEP is discouraged due to security weaknesses, and one of the WPA modes should be used whenever possible. Only use WEP if you have clients that can only support WEP (usually older, 802.11b-only clients). Authentication TypeOpen or shared key. Default Transmit KeySelect the key form Key 1 - Key 4 key. Encryption There are two levels of WEP encryption, 64-bit (40-bit) and 128-bit. To utilize WEP, select the desired encryption bit, and enter a passphrase or up to four WEP key in hexadecimal format. If you are using 64-bit (40-bit), then each key must consist of exactly 10 hexadecimal characters or 5 ASCII charceters. For 128-bit, each key must consist of exactly 26 hexadecimal characters. Valid hexadecimal characters are "0"-"9" and "A"-"F". ASCII/HEX: ASCII, the keys is 5 bit ASCII characters/13bit ASCII characters. HEX, the keys is 10bit/26 bit hex digits. PassphraseThe letters and numbers used to generate a key. Key1-Key4Manually fill out or generated according to input the pass phrase. Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 37 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual WPA Personal/WPA2 Personal/WPA2 Person Mixed: TKIP/AES/TKIP+AES dynamic encryption keys. TKIP + AES, self-applicable TKIP or AES. WPA Person Mixed, allow WPA Personal and WPA2 Personal client mix. WPA Shared KeyBetween 8 and 63 ASCII character or hexadecimal digits. Key Renewal Intervalin seconds1-99999 WPA Enterprise/WPA2 Enterprise/WPA2 Enterprise Mixed: WPA Enterprise uses an external RADIUS server to perform user authentication. WPA Algorithms: AES/TKIP/TPIP+AES. Radius Auth Sever AddressThe IP address of the RADIUS server. Radius Auth Server PortThe RADIUS Port (default is 1812) Radius Auth Shared SecretThe shared secret from the RADIUS server Key Renewal Interva(in seconds): 1-99999 Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 38 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual 3.3.3 Services 3.3.3.1 Services DHCP Server DHCP assigns IP addresses to users local devices. While the main configuration is on the setup page users can program some nifty special functions here. Use NVRAM for client lease DB: users can store data to the system NVRAM area is enabled Used domain: users can select here which domain the DHCP clients should get as their local domain. This can be the WAN domain set on the Setup screen or the LAN domain which can be set here. LAN Domain: users can define here their local LAN domain which is used as local domain for DNSmasq and DHCP service if chose above. Static Leases: if users want to assign certain hosts a specific address then they can Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 39 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual define them here. This is also the way to add hosts with a fixed address to the Router's local DNS service (DNSmasq). Additional DHCPd Options: some extra options users can set by entering them DNSMasq DNSmasq is a local DNS server. It will resolve all host names known to the Router from dhcp (dynamic and static) as well as forwarding and caching DNS entries from remote DNS servers. Local DNS enables DHCP clients on the LAN to resolve static and dynamic DHCP hostnames. Local DNS: enables DHCP clients on the LAN to resolve static and dynamic DHCP hostnames No DNS Rebind: when enabled, it can prevent an external attacker to access the Router's internal Web interface. It is a security measure Additional DNSMasq Options: some extra options users can set by entering them in Additional DNS Options. For example: Static allocation: dhcp-host=AB:CD:EF:11:22:33,192.168.0.10,myhost,myhost.domain,12h max lease number: dhcp-lease-max=2 DHCP server IP range: dhcp-range=192.168.0.110,192.168.0.111,12h Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 40 of 95 Fax: +86-592-5912735 SNMP YF325 Industrial Router User Manual Location: equipment location Contact: contact this equipment management Name: device name RO Community: SNMP RO community name, the default is public, Only to read. RW Community: SNMP RW community name, the default is private, Read-write permissions SSHD Enabling SSHd allows users to access the Linux OS of their Router with an SSH client SSH TCP Forwarding: enable or disable to support the TCP forwarding Password Login: allows login with the Router password (username is admin) Port: port number for SSHd (default is 22) Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 41 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Authorized Keys: here users paste their public keys to enable key-based login (more secure than a simple password) System log Enable Syslogd to capture system messages. By default they will be collected in the local file /var/log/messages. To send them to another system, enter the IP address of a remote syslog server. Syslog Out Mode: two log mode Net: the log information output to a syslog server Console: the log information output to console port Remote Server: if choose net mode, users should input a syslog server's IP Address and run a syslog server program on it. Telnet Telnet: enable a telnet server to connect to the Router with telnet. The username is admin and the password is the Router's password. Note: If users use the Router in an untrusted environment (for example as a public hotspot), it is strongly recommended to use SSHd and deactivate telnet. WAN Traffic Counter Ttraff Daemon: enable or disable wan traffic counter function Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 42 of 95 Fax: +86-592-5912735 3.3.4 VPN 3.3.4.1 PPTP PPTP Server YF325 Industrial Router User Manual Broadcast support: enable or disable broadcast support of PPTP server Force MPPE Encryption: enable of disable force MPPE encryption of PPTP data DNS1/DNS2/WINS1/WINS2: set DNS1/DNS2/WINS1/WINS2 Server IP: input IP address of the Router as PPTP server, differ from LAN address Client IP(s): IP address assigns to the client, the format is xxx.xxx.xxx.xxx-xxx CHAP Secrets: user name and password of the client using PPTP service Note: client IP must be different with IP assigned by Router DHCP. The format of CHAP Secrets is user * password *. PPTP Client Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 43 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Server IP or DNS Name: PPTP server's IP Address or DNS Name Remote Subnet: the network of the remote PPTP server Remote Subnet Mask: subnet mask of remote PPTP server MPPE Encryption: enable or disable Microsoft Point-to-Point Encryption MTU: maximum Transmission Unit MRU: maximum Receive Unit NAT: network Address Translation User Name: user name to login PPTP Server. Password: password to log into PPTP Server. 3.3.4.2 L2TP L2TP Server Force MPPE Encryption: enable or disable force MPPE encryption of L2TP data Server IP: input IP address of the Router as PPTP server, differ from LAN address Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 44 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Client IP(s): IP addressassigns to the client, the format is xxx.xxx.xxx.xxx-xxx.xxx.xxx.xxx CHAP Secrets: user name and password of the client using L2TP service Note: client IP must be different with IP assigned by Router DHCP. L2TP Client Gateway(L2TP Server): L2TP server's IP Address or DNS Name Remote Subnet: the network of remote PPTP server Remote Subnet Mask: subnet mask of remote PPTP server MPPE Encryption: enable or disable Microsoft Point-to-Point Encryption MTU: maximum transmission unit MRU: maximum receive unit NAT: network address translation User Name: user name to login L2TP Server Password: password to login L2TP Server Require CHAP: enable or disable support chap authentication protocol Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 45 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Refuse PAP: enable or disable refuse to support the pap authentication Require Authentication: enable or disable support authentication protocol 3.3.4.3 OPENVPN OPENVPN Server Start Type: WAN UP----start after on-line, System----start when boot up Config via: GUI----Page configuration, Config File----config File configuration Server mode: Router (TUN)-route mode, Bridge (TAP)----bridge mode Router (TUN): Network: network address allowed by OPENVPN server Netmask: netmask allowed by OPENVPN server Bridge (TAP): DHCP-Proxy mode: enable or disable DHCP-Proxy mode Pool start IP: pool start IP of the client allowed by OPENVPN server Pool end IP: pool end IP of the client allowed by OPENVPN server Page 46 of 95 Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Fax: +86-592-5912735 YF325 Industrial Router User Manual Gateway: the gateway of the client allowed by OPENVPN server Netmask: netmask of the client allowed by OPENVPN server Port: listen port of OPENVPN server Tunnel Protocol: UCP or TCP of OPENVPN tunnel protocol Encryption Cipher: Blowfish CBC AES-128 CBC AES-192 CBC AES-256 CBC AES-512 CBC Hash Algorithm: Hash algorithm provides a method of quick access to data, including SHA1SHA256SHA512MD5 Advanced Options Use LZO Compression: enable or disable use LZO compression for data transfer Redirect default Gateway: enable or disable redirect default gateway Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 47 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Allow Client to Client: enable or disable allow client to client Allow duplicate cn: enable or disable allow duplicate cn TUN MTU Setting: set the value of TUN MTU TCP MSS: MSS of TCP data TLS Cipher: TLS (Transport Layer Security) encryption standard supports AES-128 SHA and AES-256 SHA Client connect script: define some client script by user self CA Cert: CA certificate Public Server Cert: server certificate Private Server Key: the key seted by the server DH PEM: PEM of the server Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 48 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Additional Config: additional configurations of the server CCD-Dir DEFAULT file: other file approaches TLS Auth Key: authority key of Transport Layer Security Certificate Revoke List: configure some revoke certificates OPENVPN Client Server IP/Name: IP address or domain name of OPENVPN server Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 49 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Port: listen port of OPENVPN client Tunnel Device: TUN----Router mode, TAP----Bridge mode Tunnel Protocol: UDP and TCP protocol Encryption Cipher: Blowfish CBC AES-128 CBC AES-192 CBC AES-256 CBC AES-512 CBC Hash Algorithm: Hash algorithm provides a method of quick access to data, including SHA1, SHA256, SHA512, MD5 nsCertType verification: support ns certificate type Use LZO Compression: enable or disable use LZO compression for data transfer NAT: enable or disable NAT through function Bridge TAP to br0: enable or disable bridge TAP to br0 Local IP Address: set IP address of local OPENVPN client TUN MTU Setting: set MTU value of the tunnel Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 50 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual TCP MSS: mss of TCP data TLS Cipher: TLS (Transport Layer Security) encryption standard supports AES-128 SHA and AES-256 SHA TLS Auth Key: authority key of Transport Layer Security Additional Config: additional configurations of OPENVPN server Policy based Routing: input some defined routing policy CA Cert: CA certificate Public Client Cert: client certificate Private Client Key: client key 3.3.4.4 IPSEC Connect Status and Control Show IPSEC connection and status of current Router on IPSEC page. Name: the name of IPSEC connection Type: The type and function of current IPSEC connection Common name: local subnet, local address, opposite end address and opposite end subnet of current connection Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 51 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Status: connection status: closed, negotiating, establish Closed: this connection does not launch a connection request to opposite end Negotiating: this connection launch a request to opposite end, is under negotiating, the connection has not been established yet. Establish: the connection has been established, enabled to use this tunnel Action: the action of this connection, current is to delete, edit, reconnect and enable Delete: to delete the connection, also will delete IPSEC if IPSEC has set up Edit: to edit the configure information of this connection, reload this connection to make the configuration effect after edit Reconnect: this action will remove current tunnel, and re-launch tunnel establish request Enable: when the connection is enable, it will launch tunnel establish request when the system reboot or reconnect, otherwise the connection will not do it Add: to add a new IPSEC connection Add IPSEC connection or edit IPSEC connection Type: to choose IPSEC mode and relevant functions in this part, supports tunnel mode client, tunnel mode server and transfer mode currently Connection: this part contains basic address information of the tunnel Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 52 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Name: to indicate this connection name, must be unique Enabled: If enable, the connection will send tunnel connection request when it is reboot or re-connection, otherwise it is no need if disable Local WAN Interface: local address of the tunnel Remote Host Address: IP/domain name of end opposite; this option can not fill in if using tunnel mode server Local Subnet: IPSec local protects subnet and subnet mask, i.e. 192.168.1.0/24; this option can not fill in if using transfer mode Remote Subnet: IPSec opposite end protects subnet and subnet mask, i.e. 192.168.7.0/24; this option can not fill in if using transfer mode Local ID: tunnel local end identification, IP and domain name are available Remote ID: tunnel opposite end identification, IP and domain name are available Detection: this part contains configure information of connection detection Enable DPD Detection: enable or disable this function, tick means enable Time Interval: set time interval of connect detection (DPD) Timeout: set the timeout of connect detection Action: set the action of connect detection Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 53 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Advanced Settings: this part contains relevant setting of IKE, ESP, negotiation mode, etc. Enable Advanced Settings: enable to configure 1st and 2nd phase information, otherwise it will automic negotiation according to opposite end IKE Encryption: IKE phased encryption mode IKE Integrity: IKE phased integrity solution IKE Grouptype: DH exchange algorithm IKE Lifetime: set IKE lifetime, current unit is hour, the default is 0 ESP Encryption: ESP encryption type ESP Integrity: ESP integrity solution ESP Keylife: set ESP keylife, current unit is hour, the default is 0 IKE aggressive mode allowed: negotiation mode adopt aggressive mode if tick; it is main mode if non-tick Negotiate payload compression: Tick to enable PFS, non-tick to disable PFS Authentication: choose use share encryption option or certificate authentication option. Current is only to choose use share encryption option. Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 54 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual 3.3.4.5 GRE GRE (Generic Routing Encapsulation, Generic Routing Encapsulation) protocol is a network layer protocol (such as IP and IPX) data packets are encapsulated, so these encapsulated data packets to another network layer protocol (IP)transmission. GRE Tunnel (tunnel) technology, Layer Two Tunneling Protocol VPN (Virtual Private Network). GRE Tunnel: enable or disable GRE function NumberSwitch on/off GRE tunnel app StatusSwitch on/off someone GRE tunnel app NameGRE tunnel name ThroughThe GRE packet transmit interface Peer Wan IP AddrThe remote WAN address Peer SubnetThe remote gateway local subnet, eg: 192.168.1.0/24 Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 55 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Peer Tunnel IPThe remote tunnel ip address Local Tunnel IPThe local tunnel ip address Local NetmaskNetmask of local network KeepaliveEnable or disable GRE Keepalive function Retry timesGRE keepalive detect fail retries IntervalThe time interval of GRE keepalive packet sent Fail ActionThe action would be exec after keeping alive failed. Click on "View GRE tunnels" keys can view the information of GRE 3.3.5 Security 3.3.5.1 Firewall You can enable or disable the firewall, filter specific Internet data types,and prevent anonymous Internet requests,ultimately enhance network security. Firewall Protection Firewall enhance network security and use SPI to check the packets into the network.To use firewall protection, choose to enable otherwise disabled. Only enable the SPI firewall, you can use other firewall functions: filtering proxy, block WAN requests, etc. Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 56 of 95 Fax: +86-592-5912735 Additional Filters YF325 Industrial Router User Manual Filter Proxy: Wan proxy server may reduce the security of the gateway, Filtering Proxy will refuse any access to any wan proxy server. Click the check box to enable the function otherwise disabled. Filter Cookies: Cookies are the website of data the data stored on your computer. When you interact with the site, the cookies will be used. Click the check box to enable the function otherwise disabled. Filter Java Applets: If refuse to Java, you may not be able to open web pages using the Java programming. Click the check box to enable the function otherwise disabled. Filter ActiveX: If refuse to ActiveX, you may not be able to open web pages using the ActiveX programming. Click the check box to enable the function otherwise disabled. Prevent WAN Request Block Anonymous WAN Requests (ping): By selecting "Block Anonymous WAN Requests (ping)" box to enable this feature, you can prevent your network from the Ping or detection of other Internet users. so that make More difficult to break into your network. The default state of this feature is enabled, choose to disable allow anonymous Internet requests. Filter IDENT (Port 113): Enable this feature can prevent port 113 from being scanned Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 57 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual from outside. Click the check box to enable the function otherwise disabled. Block WAN SNMP access: This feature prevents the SNMP connection requests from the WAN. After Complete the changes, click the Save Settings button to save your changes. Click the Cancel Changes button to cancel unsaved changes. Impede WAN DoS/Bruteforce Limit ssh Access: This feature limits the access request from the WAN by ssh, and per minute up to accept two connection requests on the same IP. Any new access request will be automatically dropped. Limit Telnet Access: This feature limits the access request from the WAN by Telnet, and per minute up to accept two connection requests on the same IP. Any new access request will be automatically dropped. Limit PPTP Server Access: When build a PPTP Server in the Router, this feature limits the access request from the WAN by ssh, and per minute up to accept two connection requests on the same IP . Any new access request will be automatically dropped. Limit L2TP Server Access: When build a L2TP Server in the Router, this feature limits the access request from the WAN by ssh, and per minute up to accept two connection requests on the same IP. Any new access request will be automatically dropped. Log Management The Router can keep logs of all incoming or outgoing traffic for your Internet connection. Log: To keep activity logs, select Enable. To stop logging, select Disable. When select Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 58 of 95 Fax: +86-592-5912735 enable, the following page will appear. YF325 Industrial Router User Manual Log Level: Set this to the required log level. Set Log Level higher to log more actions. Options: When select Enable, the corresponding connection will be recorded in the journal, the disabled are not recorded. Incoming Log: To see a temporary log of the Router's most recent incoming traffic, click the Incoming Log button. Outgoing Log: To see a temporary log of the Router's most recent outgoing traffic, click the Outgoing Log button. Click the Save Settings button to save your changes. Click the Cancel Changes button to cancel unsaved changes. Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 59 of 95 Fax: +86-592-5912735 3.3.6 Access Restrictions YF325 Industrial Router User Manual 3.3.6.1 WAN Access Use access restrictions, you can block or allow specific types of Internet applications. You can set specific PC-based Internet access policies. This feature allows you to customize up to ten different Internet Access Policies for particular PCs, which are identified by their IP or MAC addresses. Two options in the default policy rules: "Filter" and "reject". If select "Deny", you will deny specific computers to access any Internet service at a particular time period. If you choose to "filter"It will block specific computers to access the specific sites at a specific time period. You can set up 10 Internet access policies filtering specific PCs access Internet services at a particular time period. Access Policy: You may define up to 10 access policies. Click Delete to delete a policy or Summary to see a summary of the policy. Status: Enable or disable a policy. Policy Name: You may assign a name to your policy. PCs: The part is used to edit client list, the strategy is only effective for the PC in the list. Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 60 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Days: Choose the day of the week you would like your policy to be applied. Times: Enter the time of the day you would like your policy to be applied. Website Blocking by URL Address: You can block access to certain websites by entering their URL. Website Blocking by Keyword: You can block access to certain website by the keywords contained in their webpage. Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 61 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual set up Internet access policy 1. Select the policy number (1-10) in the drop-down menu. 2. For this policy is enabled, click the radio button next to "Enable" 3. Enter a name in the Policy Name field. 4. Click the Edit List of PCs button. 5. On the List of PCs screen, specify PCs by IP address or MAC address. Enter the appropriate IP addresses into the IP fields. If you have a range of IP addresses to filter, complete the appropriate IP Range fields. Enter the appropriate MAC addresses into the MAC fields. 6. Click the Apply button to save your changes. Click the Cancel button to cancel your Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 62 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual unsaved changes. Click the Close button to return to the Filters screen. 7. If you want to block the listed PCs from Internet access during the designated days and time, then keep the default setting, Deny. If you want the listed PCs to have Internet filtered during the designated days and time, then click the radio button next to Filter. 8. Set the days when access will be filtered. Select Everyday or the appropriate days of the week. 9. Set the time when access will be filtered. Select 24 Hours, or check the box next to from and use the drop-down boxes to designate a specific time period. 10. Click the Add to Policy button to save your changes and active it. 11. To create or edit additional policies, repeat steps 1-9. 12. To delete an Internet Access Policy, select the policy number, and click the Delete button. Note: 1 The default factory value of policy rules is "filtered". If the user chooses the default policy rules for "refuse", and editing strategies to save or directly to save the settings. If the strategy edited is the first, it will be automatically saved into the second, if not the first, keep the original number. 2Turn off the power of the Router or reboot the Router can cause a temporary failure. After the failure of the Router, if can not automatically synchronized NTP time server, you need to recalibrate to ensure the correct implementation of the relevant period control function. 3.3.6.2 URL Filter If you want to prevent certain client access to specific network domain name, such as www.sina.com. We can achieved it through the function of URL filter. URL filtering function Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 63 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Discard packets conform to the following rules: only discard the matching URL address in the list. Accept only the data packets conform to the following rules: receive only with custom rules of network address, discarded all other URL address. 3.3.6.3 Packet Filter To block some packets getting Internet access or block some Internet packets getting local network access, you can configure filter items to block these packets. Packet Filter Packet filter function is realized based on IP address or port of packets. Enable Packet Filter: Enable or disable "packet filter" function Policy: The filter rule's policy, you can choose the following options Discard the Following--Discard packets conform to the following rules, Accept all other packets Only Accept the Following-- Accept only the data packets conform to the following rules, Discard all other packets Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 64 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Direction input: packet from WAN to LAN output: packet from LAN to WAN Protocol: packet protocol type Source Ports: packet's source port Destination Ports: packet's destination port Source IP: packet's source IP address Destination IP: packet's destination IP address 3.3.7 NAT 3.3.7.1 Port Forwarding Port Forwarding allows you to set up public services on your network, such as web servers, ftp servers, e-mail servers, or other specialized Internet applications. Specialized Internet applications are any applications that use Internet access to perform functions such as videoconferencing or online gaming. When users send this type of request to your network via the Internet, the Router will forward those requests to the appropriate PC. Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 65 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Application: Enter the name of the application in the field provided. Protocol: Chose the right protocol TCP, UDP or Both. Set this to what the application requires. Source Net: Forward only if sender matches this ip/net (example 192.168.1.0/24). Port from: Enter the number of the external port (the port number seen by users on the Internet). IP Address: Enter the IP Address of the PC running the application. Port to: Enter the number of the internal port (the port number used by the application). Enable: Click the Enable checkbox to enable port forwarding for the application. Check all values and click Save Settings to save your settings. Click the Cancel changes button to cancel your unsaved changes. 3.3.7.2 Port Range Forward Port Range Forwarding allows you to set up public services on your network, such as web servers, ftp servers, e-mail servers, or other specialized Internet applications. Specialized Internet applications are any applications that use Internet access to perform functions such as videoconferencing or online gaming. When users send this type of request to your network via the Internet, the Router will forward those requests to the appropriate PC. Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 66 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Application: Enter the name of the application in the field provided. Start:Enter the number of the first port of the range you want to seen by users on the Internet and forwarded to your PC. End: Enter the number of the last port of the range you want to seen by users on the Internet and forwarded to your PC. Protocol: Chose the right protocol TCP,UDP or Both. Set this to what the application requires. IP Address: Enter the IP Address of the PC running the application. Enable: Click the Enable checkbox to enable port forwarding for the application. Check all values and click Save Settings to save your settings. Click the Cancel changes button to cancel your unsaved changes. 3.3.7.3 DMZ The DMZ (De Militarized Zone) hosting feature allows one local user to be exposed to the Internet for use of a special-purpose service such as Internet gaming or videoconferencing. DMZ hosting forwards all the ports at the same time to one PC. The Port Forwarding feature is more secure because it only opens the ports you want to have opened, while DMZ hosting opens all the ports of one computer, exposing the computer so the Internet can see it. Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 67 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Any PC whose port is being forwarded must should have a new static IP address assigned to it because its IP address may change when using the DHCP function. DMZ Host IP Address: To expose one PC to the Internet, select Enable and enter the computer's IP address in the DMZ Host IP Address field. To disable the DMZ, keep the default settingDisable Check all values and click Save Settings to save your settings. Click the Cancel changes button to cancel your unsaved changes. 3.3.8 QoS Setting 3.3.8.1 Basic QoS allows control of the bandwidth allocation to different services, netmasks, MAC addresses and the four LAN ports. Uplink (kbps)In order to use bandwidth management (QOS) you must enter bandwidth Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 68 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual values for your uplink. These are generally 80% to 90% of your maximum bandwidth. Downlink (kbps) In order to use bandwidth management (QOS) you must enter bandwidth values for your downlink. These are generally 80% to 90% of your maximum bandwidth. 3.3.8.2 Classify Netmask Priority You may specify priority for all traffic from a given IP address or IP Range. Check all values and click Save Settings to save your settings. Click the Cancel changes button to cancel your unsaved changes. 3.3.9 Applications 3.3.9.1 Serial Application This is for the console port on Router. Normally, this port is used to debug the Router. This port can also be used as a serial port. The Router has embedded a serial to TCP program. The data sent to the serial port is encapsulated by TCP/IP protocol stack and then is sent to the destination server. This function can work as a DTU (Data Terminal Unit). Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 69 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Baudrate: Baud rate indicates the number of bytes per second transported by device, commonly used baud rate is115200, 57600, 38400, 19200. Databit: the data bits can be 4, 5, 6, 7, 8, constitute a character. The ASCII code is usually used. Starting from the most significant bit is transmitted,. Stopbit: it marks the end of a character data. It is a high level of 1, 1.5, 2. Parity: use a set of data to check the data error Flow control: including the hardware part and software part in two ways. Enable Serial TCP Function: Enable the serial to TCP function Protocol Type: The protocol type to transmit data. UDP(DTU) � Data transmit with UDP protocol, work as a IP MODEM device which has application protocol and hear beat mechanism. Pure UDP � Data transmit with standard UDP protocol. TCP(DTU) -- Data transmit with TCP protocol, work as a IP MODEM device which has application protocol and hear beat mechanism. Pure TCP -- Data transmit with standard TCP protocol, Router is the client. TCP Server -- Data transmit with standard TCP protocol, Router is the server. TCST -- Data transmit with TCP protocol, Using a custom data Server Address: The data service center's IP Address or domain name. Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 70 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Server Port: The data service center's listening port. Device ID: The Router's identity ID. Device Number: The Router's phone number. Heartbeat Interval: The time interval to send heart beat packet. This item is valid only when you choose UDP(DTU) or TCP(DTU) protocol type. TCP Server Listen Port: This item is valid when Protocol Type is "TCP Server" Custom Heartbeat Packet: This item is valid when Protocol Type is "TCST" Custom Registration Packets: This item is valid when Protocol Type is "TCST" 3.3.10 Administration 3.3.10.1 Management The Management screen allows you to change the Router's settings. On this page you will find most of the configurable items of the Router code. The new password must not exceed 32 characters in length and must not include any spaces. Enter the new password a second time to confirm it. NoteDefault username is admin.It is strongly recommended that you change the factory default password of the Router, which is admin. All users who try to access the Router's web-based utility or Setup Wizard will be prompted for the Router's password. Web Access This feature allows you to manage the Router using either HTTP protocol or the HTTPS protocol. If you choose to disable this feature, a manual reboot will be required. You can also activate or not the Router information web page. It's now possible to password Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 71 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual protect this page (same username and password than above). ProtocolThis feature allows you to manage the Router using either HTTP protocol or the HTTPS protocol Auto-Refresh Adjusts the Web GUI automatic refresh interval. 0 disables this feature completely Enable Info SiteEnable or disable the login system information page Info Site Password ProtectionEnable or disable the password protection feature of the system information page Remote Access This feature allows you to manage the Router from a remote location, via the Internet. To disable this feature, keep the default setting, Disable. To enable this feature, select Enable, and use the specified port (default is 8080) on your PC to remotely manage the Router. You must also change the Router's default password to one of your own, if you haven't already. To remotely manage the Router, enter http://xxx.xxx.xxx.xxx:8080 (the x's represent the Router's Internet IP address, and 8080 represents the specified port) in your web browser's address field. You will be asked for the Router's password. If you use https you need to specify the url as https://xxx.xxx.xxx.xxx:8080 (not all Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 72 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual firmwares does support this without rebuilding with SSL support). SSH Management You can also enable SSH to remotely access the Router by Secure Shell. Note that SSH daemon needs to be enable in Services page. Note If the Remote Router Access feature is enabled, anyone who knows the Router's Internet IP address and password will be able to alter the Router's settings. Telnet ManagementEnable or disable remote Telnet function Cron The cron subsystem schedules execution of Linux commands. You'll need to use the command line or startup scripts to actually use this. LanguageSet up the Router page shows the type of language, including simplified Chinese and English. Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 73 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Remote Upgrade: custom-developed remote management server for this station Router monitoring and management, configuration parameters, WIFI advertising updates. Remote Management Login Server: In the case of more than one servers,the remote management login server is a general server.Connect the Router to this login server, the login server will assign an available server IP and port for the Router to connect for remote management. Firmware Upgrade: custom-developed remote server for this station Router upgrading firmware. 3.3.10.2 Keep Alive Schedule Boot&Shutdown The user can set the startup or shutdown time: For example,the user want to set the start time at 8:07 and boot time at 9:07. Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 74 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Schedule Reboot You can schedule regular reboots for the Router: Regularly after xxx seconds. At a specific date time each week or everyday. Note For date based reboots Cron must be activated. See Management for Cron activation. 3.3.10.3 Commands CommandsYou are able to run command lines directly via the Webinterface. Run CommandYou can run command lines via the web interface. Fill the text area with Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 75 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual your command and click Run Commands to submit. Startup You can save some command lines to be executed at startup's Router. Fill the text area with commands (only one command by row) and click Save Startup. ShutdownYou can save some command lines to be executed at shutdown's Router. Fill the text area with commands (only one command by row) and click Save Shutdown. FirewallEach time the firewall is started, it can run some custom iptables instructions. Fill the text area with firewall's instructions (only one command by row) and click Save Firewall. Custom ScriptCustom script is stored in /tmp/custom.sh file. You can run it manually or use cron to call it. Fill the text area with script's instructions (only one command by row) and click Save Custom Script. 3.3.10.4 Factory Defaults Reset Router settings Click the Yes button to reset all configuration settings to their default values. Then click the Apply Settings button. Note Any settings you have saved will be lost when the default settings are restored. After restoring the Router is accessible under the default IP address 192.168.1.1 and the default password admin. 3.3.10.5 Firmware Upgrade Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 76 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Firmware Upgrade New firmware versions are posted at www..com and can be downloaded. If the Router is not experiencing difficulties, then there is no need to download a more recent firmware version, unless that version has a new feature that you want to use. Note When you upgrade the Router's firmware, you lose its configuration settings, so make sure you write down the Router settings before you upgrade its firmware. To upgrade the Router's firmware: 1. Download the firmware upgrade file from the website. 2. Click the Browse... button and chose the firmware upgrade file. 3. Click the Upgrade button and wait until the upgrade is finished. Note Upgrading firmware may take a few minutes. Do not turn off the power or press the reset button! After flashing, reset to If you want to reset the Router to the default settings for the firmware version you are upgrading to, click the Firmware Defaults option. 3.3.10.6 Backup Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 77 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Backup SettingsYou may backup your current configuration in case you need to reset the Router back to its factory default settings. Click the Backup button to backup your current configuration. Restore Settings Click the Browse... button to browse for a configuration file that is currently saved on your PC. Click the Restore button to overwrite all current configurations with the ones in the configuration file. Note Only restore configurations with files backed up using the same firmware and the same model of Router. 3.3.11 Status 3.3.11.1 Router Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 78 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Router Name: name of the Router Router Model: model of the Router, unavailable to modify Firmware Version: software version information MAC Address: MAC address of WAN, setting - Clone MAC Address to modify Host Name: host name of the Router, setting - basic setting to modify WAN Domain Name: domain name of WAN, setting - basic setting to modify LAN Domain Name: domain name of LAN, unavailable to modify Current Time: local time of the system Uptime: operating uptime as long as the system is powered on Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 79 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Total Available: the room for total available of RAM (that is physical memory minus some reserve and the kernel of binary code bytes) Free: free memory, the Router will reboot if the memory is less than 500kB Used: used memory, total available memory minus free memory Buffers: used memory for buffers, Cached: the memory used by high-speed cache memory Active: active use of buffer or cache memory page file size Inactive: not often used in a buffer or cache memory page file size IP Filter Maximum Ports: preset is 4096, available to re-management Active IP Connections: real time monitor active IP connections of the system, click to see the table as blow: Active IP Connections: total active IP connections Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 80 of 95 Fax: +86-592-5912735 Protocol: connection protocol Timeouts: connection timeouts, unit is second Source Address: source IP address Remote Address: remote IP address Service Name: connecting service port Status: displayed status 3.3.11.2 WAN YF325 Industrial Router User Manual Connection Type: disabled, static IP, automatic configuration-DHCP, PPPOE, PPTP, L2TP, 3G/UMTS Connection Uptime: connecting uptime; If disconnect, display Not available IP Address: IP address of Router WAN Subnet Mask: subnet mask of Router WAN Gateway: the gateway of Router WAN DNS1, DNS2, DNS3: DNS1/DNS2/DNS3 of Router WAN Remaining Lease Time: remaining lease time of IP address in DHCP way DHCP Release: release DHCP address DHCP Renew: renew IP address in DHCP way, default is 1 day Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 81 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Login Status: connection status of WAN Disconnection: disconnect Connection: connect Module Type: module type in 3G/UMTS way Signal Status: signal intensity of the module in 3G/UMTS way Network: network type of the module in 3G/UMTS way Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 82 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Total Flow: flow from power-off last time until now statistics, download and upload direction Monthly Flow: the flow of a month, unit is MB Last Month: the flow of last month Next Month: the flow of next month Backup: backup data administration Restore: restore data administration Delete: delete data administration Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 83 of 95 Fax: +86-592-5912735 3.3.11.3 LAN YF325 Industrial Router User Manual MAC Address: MAC Address of the LAN port ethernet IP Address: IP Address of the LAN port Subnet Mask: Subnet Mask of the LAN port Gateway: Gateway of the LAN port Local DNS: DNS of the LAN port Host Name: host name of LAN client IP Address: IP address of the client MAC Address: MAC address of the client Conn. Count: connection count caused by the client Ratio: the ratio of 4096 connection DNCP Server: enable or disable the Router work as a DHCP server Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 84 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual DHCP Daemon: the agreement allocated using DHCP including DNSMasq and uDHCPd Starting IP Address: the starting IP Address of the DHCP server 's Address pool Ending IP Address: the ending IP Address of the DHCP server's Address pool Client Lease Time: the lease time of DHCP client IP Address: IP address of the client MAC Address: MAC address of the client Expires: the expiry the client rents the IP address Delete: click to delete DHCP client Interface: the interface assigned by dial-up system User Name: user name of PPPOE client Local IP: IP address assigned by PPPOE client Delete: click to delete PPPOE client Interface: the interface assigned by dial-up system Local IP: tunnel IP address of local L2TP Remote IP: tunnel IP address of L2TP server Delete: click to disconnect L2TP Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 85 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Interface: the interface assigned by dial-up system User Name: user name of the client Local IP: tunnel IP address of L2TP client Remote IP: IP address of L2TP client Delete: click to delete L2TP client Interface: the interface assigned by dial-up system Local IP: tunnel IP address of local PPTP Remote IP: tunnel IP address of PPTP server Delete: click to disconnect PPTP Interface: the interface assigned by dial-up system User Name: user name of the client Local IP: tunnel IP address of PPTP client Remote IP: IP address of PPTP client Delete: click to delete PPTP client Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 86 of 95 Fax: +86-592-5912735 3.3.11.4 Wireless YF325 Industrial Router User Manual MAC Address: MAC address of wireless client Radio: display whether radio is on or not Mode: wireless mode Network: wireless network mode SSID: wireless network name Channel: wireless network channel TX Power: reflection power of wireless network Rate: reflection rate of wireless network Encryption-Interface wl0: enable or diasbal Encryption-Interface wl0 PPTP Status: show wireless pptp status Received (RX): received data packet Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 87 of 95 Fax: +86-592-5912735 Transmitted (TX): transmitted data packet YF325 Industrial Router User Manual MAC Address: MAC address of wireless client Interface: interface of wireless client Uptime: connecting uptime of wireless client TX Rate: transmit rate of wireless client RX Rate: receive rate of wireless client Signal: the signal of wireless client Noise: the noise of wireless client SNR: the signal to noise ratio of wireless client Signal Quality: signal quality of wireless client Neighbor's Wireless Network: display other networks nearby SSID: the name of wireless network nearby Mode: operating mode of wireless network nearby MAC Address: MAC address of the wireless nearby Channel: the channel of the wireless nearby Rssi: signal intensity of the wireless nearby Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 88 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Noise: the noise of the wireless nearby Beacon: signal beacon of the wireless nearby Open: the wireless nearby is open or not Dtim: delivery traffic indication message of the wireless nearby Rate: speed rate of the wireless nearby Join Site: click to join wireless network nearby 3.3.11.5 Bandwidth Bandwidth Monitoring-LAN Graph abscissa axis: time vertical axis: speed rate Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 89 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Bandwidth Monitoring-WAN Graph abscissa axis: time vertical axis: speed rate 3.3.11.6 System-Info Router Name: the name of the Router Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 90 of 95 Fax: +86-592-5912735 Router Model: the model of the Router LAN MAC: MAC address of LAN port WAN MAC: MAC address of WAN port Wireless MAC: MAC address of the wireless WAN IP: IP address of WAN port LAN IP: IP address of LAN port YF325 Industrial Router User Manual Radio: display whether radio is on or not Mode: wireless mode Network: wireless network mode SSID: wireless network name Channel: wireless network channel TX Power: reflection power of wireless network Rate: reflection rate of wireless network Received (RX): received data packet Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 91 of 95 Fax: +86-592-5912735 Transmitted (TX): transmitted data packet YF325 Industrial Router User Manual MAC Address: MAC address of wireless client Interface: interface of wireless client Uptime: connecting uptime of wireless client TX Rate: transmit rate of wireless client RX Rate: receive rate of wireless client Signal: the signal of wireless client Noise: the noise of wireless client SNR: the signal to noise ratio of wireless client Signal Quality: signal quality of wireless client DHCP Server: enabled or disabled ff-radauth: enabled or disabled USB Support: enabled or disabled Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 92 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Total Available: the room for total available of RAM (that is physical memory minus some reserve and the kernel of binary code bytes) Free: free memory, the Router will reboot if the memory is less than 500kB Used: used memory, total available memory minus free memory Buffers: used memory for buffers, total available memory minus allocated memory Cached: the memory used by high-speed cache memory Active: Active use of buffer or cache memory page file size Inactive: Not often used in a buffer or cache memory page file size Host Name: host name of LAN client IP Address: IP address of the client MAC Address: MAC address of the client Expires: the expiry the client rents the IP address Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 93 of 95 Fax: +86-592-5912735 YF325 Industrial Router User Manual Appendix The following steps describe how to setup Windows XP Hyper Terminal. 1. Press "Start" "Programs" "Accessories" "Communications" "Hyper Terminal" 2. Input connection name, choose "OK" 3. Choose the correct COM port which connects to modem, choose "OK" 4. Configure the serial port parameters as following, choose "OK" Bits per second: 115200 Data bits: 8 Parity: None Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 94 of 95 Fax: +86-592-5912735 Stop bits: 1 Flow control: None YF325 Industrial Router User Manual 5. Complete Hyper Terminal operation, It runs as following Note: If the user is using the win7 system, you can download a win7 super terminal on the internet. Universal serial interface or other similar software. Address: 8th Floor, No.2, Chengyi North Street, Jimei, Xiamen, Fujian, China. Website: www.yifanwireless.com Tel: +86-592-6101492 Page 95 of 95 Fax: +86-592-5912735