Bausch Datacom DinBox ROUTER 3G User Manual Download Page 41

Page: 41 / 71

DinBox Router 3G User Manual

Page 41 of 71

Enable Advanced Settings:

enable to configure 1

and 2

phase information, otherwise

it will automic negotiation according to opposite end

IKE Encryption:

IKE phased encryption mode

IKE Integrity:

IKE phased integrity solution

IKE Grouptype:

DH exchange algorithm

IKE Lifetime:

set IKE lifetime, current unit is hour, the default is 0

ESP Encryption:

ESP encryption type

ESP Integrity:

ESP integrity solution

ESP Keylife:

set ESP keylife, current unit is hour, the default is 0

IKE aggressive mode allowed:

negotiation mode adopt aggressive mode if tick; it is

main

mode if non-tick

Negotiate payload compression:

Tick to enable PFS, non-tick to diable PFS

Authentication:

choose use share encryption option or certificate authentication option.

Current is only to choose use share encryption option.

3.3.3.5 GRE

GRE (Generic Routing Encapsulation, Generic Routing Encapsulation) protocol is a

network layer protocol (such as IP and IPX) data packets are encapsulated, so these

encapsulated data packets to another network layer protocol (IP)transmission. GRE

Tunnel (tunnel) technology, Layer Two Tunneling Protocol VPN (Virtual Private Network).

GRE Tunnel:

enable or disable GRE function

Summary of Contents for DinBox ROUTER 3G

Page 1: ...DinBox Router 3G DinBox Router 3G User Manual Documentation No Product Version Page Product Name Total 69 DinBox Router 3G User Manual ...

Page 2: ...DinBox Router 3G User Manual Page 2 of 2 ...

Page 3: ...rved by Bausch Datacom NV SA Without written permission all commercial use of the files from Bausch Datacom are forbidden such as copy distribute reproduce the files etc but non commercial purpose downloaded or printed by individual all files shall be not revised and the copyright and other proprietorship notice shall be reserved are welcome ...

Page 4: ...DinBox Router 3G User Manual Page 4 of 4 ...

Page 5: ...iguration Connection 17 3 2 Access the Configuration Web Page 17 3 3 Management and configuration 19 3 3 1 Setting 19 3 3 1 1 Basic Setting 19 3 3 1 2 Dynamic DNS 24 3 3 1 3 Clone MAC Address 25 3 3 1 4 Advanced Router 25 3 3 2 Services 27 3 3 2 1 Services 27 3 3 2 2 PPPoE Server 30 3 3 3 VPN 31 3 3 3 1 PPTP 31 3 3 3 2 L2TP 33 3 3 3 3 OPENVPN 34 3 3 3 4 IPSEC 39 3 3 3 5 GRE 41 3 3 4 Security 43 3 ...

Page 6: ... 3 8 1 Serial Applications 54 3 3 9 Administration 56 3 3 9 1 Management 56 3 3 9 2 Keep Alive 58 3 3 9 3 Commands 58 3 3 9 4 Factory Defaults 59 3 3 9 5 Firmware Upgrade 59 3 3 9 6 Backup 60 3 3 10 Status 61 3 3 10 1 Router 61 3 3 10 2 WAN 63 3 3 10 3 LAN 64 3 3 10 4 Bandwidth 67 3 3 10 5 Sys Info 68 Chapter 4 Appendix 70 ...

Page 7: ...rial automation telemetry finance POS water supply environment protection post weather and so on 1 2 Features and Benefits Design for Industrial Application High powered industrial cellular module High powered industrial 32bits CPU Supports low consumption mode including sleep mode scheduled online offline mode scheduled power on power off mode optional Housing iron providing IP30 protection Power...

Page 8: ...ENVPN IPSEC and GRE only for VPN version Supports VPN server PPTP L2TP OPENVPN IPSEC and GRE only for VPN version Supports local and remote firmware upgrade import and export configure file Supports NTP RTC embedded Supports multiple DDNS provider service Supports MAC Address clone PPPoE Server Supports multi online trigger ways including SMS ring and data Support link disconnection when timeout S...

Page 9: ...ensitivity GPRS 2G and 3G ROUTER UMTS WCDMA HSDPA HSUPA HS PA and 850 1900 2100MHz 850 900 1900 2100MHz optional GSM850 900 1800 1900MHz GPRS EDGE CLASS 12 HSUPA 5 76Mbps Uplo ad speed HSDPA 7 2Mbps Downl oad speed UMTS 384Kbps DL UL HSPA 21Mbps Download speed 24dBm 109dBm Embedded processing system Cellular Module Power RS232 serial Interface Indicator lights DATA User interface 10 100M Ethernet ...

Page 10: ...5 RS422 port 15KV ESD protection Data bits 5 6 7 8 Stop bits 1 1 5 optional 2 Parity none even odd space mark optional Baud rate 2400 115200 bps Indicator Power System Online Link ACT Alarm Signal Strength Antenna Standard SMA female interface 50 ohm lighting protection optional SIM UIM Standard 3V 1 8V user card interface 15KV ESD protection Power Standard 3 PIN power jack reverse voltage and ove...

Page 11: ...ower Range DC 5 35V Consumption 450mA 12V Physical Characteristics Item Content Housing Iron providing IP30 protection Dimensions 157x97x25 mm Weight 440g Environmental Limits Item Content Operating Temperature 35 75ºC 31 167 Storage Temperature 40 85ºC 40 185 Operating Humidity 95 Non condensing ...

Page 12: ...DinBox Router 3G User Manual Page 12 of 71 ...

Page 13: ... install the router when powered 2 2 Contents of the package Name Quantity Remark Router host 1 Cellular antenna s Male SMA 1 Network cable 1 Console cable 1 Power adapter 1 RS 485 cable 1 DC cable 12 V power cable 1 DIN rail 1 2 3 Installation and Cable Connection Installation of SIM UIM card Firstly power off the router and press the out button of the SIM UIM card outlet with a ...

Page 14: ...ork cable into the switch interface with sign Local Network and insert the other end into the Ethernet interface of user s device The signal connection of network direct cable is as follows RJ45 1 RJ45 2 1 1 2 2 3 3 4 4 5 5 6 6 7 7 8 8 Insert the RJ45 end of the console cable into the RJ45 outlet with sign console and insert the DB9F end of the console cable into the RS232 serial interface of user...

Page 15: ...State Introduction Power ON Router is powered on OFF Router is powered off System BLINK System works properly OFF System does not work Online ON Router has logged on network OFF Router hasn t logged on network Link ACT OFF The corresponding interface of switch is not connected ON BLINK The corresponding interface of switch is connected Communicating Alarm OFF Router has no alarm ON SIM UIM card do...

Page 16: ...Reset Button Introduction The router has a Reset button to restore it to its original factory default settings When user press the Reset button for up to 15s the router will restore to its original factory default settings and restart automatically ...

Page 17: ...he router s IP address 192 168 1 2 3 2 Access the Configuration Web Page The chapter is to present main functions of each page Users visit page tool via web browser after connect users PC to the router There are eleven main pages Setting Wireless Service VPN Security Access Restrictions NAT QoS Setting Applications Management and Status Users enable to browse slave pages by click one main page Use...

Page 18: ...DinBox Router 3G User Manual Page 18 of 71 After access to the information main page ...

Page 19: ...e Setup screen is the first screen users will see when accessing the router Most users will be able to configure the router and get it work properly using only the settings on this screen Some Internet Service Providers ISPs will require users to enter specific information such as User Name Password IP Address Default Gateway Address or DNS IP Address These information can be obtained from your IS...

Page 20: ...his function is used to detect whether the Internet connection is active if users set it and when the router detect the connection is inactive it will redial to users ISP immediately to make the connection active Detection Method None do not set this function Ping Send ping packet to detect the connection when choose this method users should also configure Detection Interval Primary Detection Serv...

Page 21: ...he Primary Detection Server IP and Backup Detection Server IP are usable and stable because they have to response the detection packet frequently Force reconnect this option schedules the pppoe or 3G reconnection by killing the pppd daemon and restart it Time needed time to reconnect STP STP Spaning Tree Protocol can be applied to loop network Through certain algorithm achieves path redundancy and...

Page 22: ...default Network Address Server Settings DHCP These settings for the router s Dynamic Host Configuration Protocol DHCP server functionality configuration The Router can serve as a network DHCP server DHCP server automatically assigns an IP address for each computer in the network If they choose to enable the router s DHCP server option users can set all the computers on the LAN to automatically obt...

Page 23: ...s If users wish to utilize another enter that IP address in one of these fields Users can enter up to three DNS Server IP addresses here The router will utilize them for quicker access to functioning DNS servers WINS the Windows Internet Naming Service WINS manages each PC s interaction with the Internet If users use a WINS server enter that server s IP address here Otherwise leave it blank DNSMas...

Page 24: ...ed at their domain to their frequently changing IP address DDNS Service The DinBox Router 3G currently supports DynDNS freedns Zoneedit NO IP 3322 easyDNS TZO DynSIP and Custom based on the user User Name users register in DDNS server up to 64 characteristic Password password for the user name that users register in DDNS server up to 32 characteristic Host Name users register in DDNS server no lim...

Page 25: ... MAC address is 48 characteristic cannot be set to the multicast address the first byte must be even 3 3 1 4 Advanced Router Operating Mode Gateway and Router If the DinBox router 3G is hosting users Internet connection select Gateway mode If another router exists on their network select Router mode Dynamic Routing Dynamic Routing enables the router to automatically adjust to physical changes in t...

Page 26: ...users up to 25 characters Metric 0 9999 Destination LAN NET the Destination IP Address is the address of the network or host to which users want to assign a static route Subnet Mask the Subnet Mask determines which portion of an IP address is the network portion and which portion is the host portion Gateway IP address of the gateway device that allows for contact between the router and the network...

Page 27: ...fic operating system Request IP IP address of the request DHCP Server DHCPd assigns IP addresses to users local devices While the main configuration is on the setup page users can program some nifty special functions here Use NVRAM for client lease DB users can store data to the system NVRAM area is enabled Used domain users can select here which domain the DHCP clients should get as their local d...

Page 28: ... and caching DNS entries from remote DNS servers Local DNS enables DHCP clients on the LAN to resolve static and dynamic DHCP hostnames Local DNS enables DHCP clients on the LAN to resolve static and dynamic DHCP hostnames No DNS Rebind when enabled it can prevent an external attacker to access the router s internal Web interface It is a security measure Additional DNSMasq Options some extra optio...

Page 29: ...ogin with theDinBox router 3G password username is admin Port port number for SSHd default is 22 Authorized Keys here users paste their public keys to enable key based login more secure than a simple password System log Enable Syslogd to capture system messages By default they will be collected in the local file var log messages To send them to another system enter the IP address of a remote syslo...

Page 30: ... traffic counter function 3 3 2 2 PPPoE Server PPPoE Server RP PPPoEServer Daemon enable or disable PPPoE server RP PPPoEServer Options PPPOE Server Inferface PPPoE server interface to the outside only to support the LAN port Client IP s IP range assigns to the PPPoE client in the format xxx xxx xxx xxx xxx Deflate Compression enable or disable Deflate Compression BSD Compression enable or disable...

Page 31: ... CHAP Secrets User set PPPOE client s user name Password set PPPOE client s user password IP Address set PPPOE client s user IP address Enable enable or disable this setting Radius Radius Server IP set the Remote Authentication Dial In User Server IP Radius Authentication Port set the Remote Authentication Dial in User Authentication Port Radius Accounting Port set the Remote Authentication Dial i...

Page 32: ...er as PPTP server differ from LAN address Client IP s IP address assigns to the client the format is xxx xxx xxx xxx xxx CHAP Secrets user name and password of the client using PPTP service Note client IP must be different with IP assigned by router DHCP The format of CHAP Secrets is user password PPTP Client Server IP or DNS Name PPTP server s IP Address or DNS Name Remote Subnet the network of t...

Page 33: ...PPTP Server 3 3 3 2 L2TP L2TP Server Force MPPE Encryption enable or disable force MPPE encryption of L2TP data Server IP input IP address of the router as PPTP server differ from LAN address Client IP s IP address assigns to the client the format is xxx xxx xxx xxx xxx xxx xxx xxx CHAP Secrets user name and password of the client using L2TP service Note client IP must be different with IP assigne...

Page 34: ...ress translation User Name user name to login L2TP Server Password password to login L2TP Server Require CHAP enable or disable support chap authentication protocol Refuse PAP enable or disable refuse to support the pap authentication Require Authentication enable or disable support authentication protocol 3 3 3 3 OPENVPN OPENVPN Server Start Type WAN UP start after on line System start when boot ...

Page 35: ...ol end IP pool end IP of the client allowed by OPENVPN server Gateway the gateway of the client allowed by OPENVPN server Netmask netmask of the client allowed by OPENVPN server Port listen port of OPENVPN server Tunnel Protocol UCP or TCP of OPENVPN tunnel protocol Encryption Cipher Blowfish CBC AES 128 CBC AES 192 CBC AES 256 CBC AES 512 CBC Hash Algorithm Hash algorithm provides a method of qui...

Page 36: ...isable allow duplicate cn TUN MTU Setting set the value of TUN MTU TCP MSS MSS of TCP data TLS Cipher TLS Transport Layer Security encryption standard supports AES 128 SHA and AES 256 SHA Client connect script define some client script by user self CA Cert CA certificate Public Server Cert server certificate Private Server Key the key seted by the server DH PEM PEM of the server Additional Config ...

Page 37: ...OPENVPN client Tunnel Device TUN Router mode TAP Bridge mode Tunnel Protocol UDP and TCP protocol Encryption Cipher Blowfish CBC AES 128 CBC AES 192 CBC AES 256 CBC AES 512 CBC Hash Algorithm Hash algorithm provides a method of quick access to data including SHA1 SHA256 SHA512 MD5 nsCertType verification support ns certificate type Use LZO Compression enable or disable use LZO compression for data...

Page 38: ... tunnel TCP MSS mss of TCP data TLS Cipher TLS Transport Layer Security encryption standard supports AES 128 SHA and AES 256 SHA TLS Auth Key authority key of Transport Layer Security Additional Config additional configurations of OPENVPN server Policy based Routing input some defined routing policy CA Cert CA certificate Public Client Cert client certificate Private Client Key client key ...

Page 39: ...n established enabled to use this tunnel Action the action of this connection current is to delete edit reconnect and enable Delete to delete the connection also will delete IPSEC if IPSEC has set up Edit to edit the configure information of this connection reload this connection to make the configuration effect after edit Reconnect this action will remove current tunnel and re launch tunnel estab...

Page 40: ...l in if using transfer mode Remote Subnet IPSec opposite end protects subnet and subnet mask i e 192 168 7 0 24 this option cannot fill in if using transfer mode Local ID tunnel local end identification IP and domain name are available Remote ID tunnel opposite end identification IP and domain name are available Detection this part contains configure information of connection detection Enable DPD ...

Page 41: ...fault is 0 IKE aggressive mode allowed negotiation mode adopt aggressive mode if tick it is main mode if non tick Negotiate payload compression Tick to enable PFS non tick to diable PFS Authentication choose use share encryption option or certificate authentication option Current is only to choose use share encryption option 3 3 3 5 GRE GRE Generic Routing Encapsulation Generic Routing Encapsulati...

Page 42: ...te gateway local subnet eg 192 168 1 0 24 Peer Tunnel IP The remote tunnel ip address Local Tunnel IP The local tunnel ip address Local Netmask Netmask of local network Keepalive Enable or disable GRE Keepalive function Retry times GRE keepalive detect fail retries Interval The time interval of GRE keepalive packet sent Fail Action The action would be exec after keeping alive failed Click on View ...

Page 43: ...se disabled Filter Cookies Cookies are the website of data the data stored on your computer When you interact with the site the cookies will be used Click the check box to enable the function otherwise disabled Filter Java Applets If refuse to Java you may not be able to open web pages using the Java programming Click the check box to enable the function otherwise disabled Filter ActiveX If refuse...

Page 44: ...s the access request from the WAN by Telnet and per minute up to accept two connection requests on the same IP Any new access request will be automatically dropped Limit PPTP Server Access When build a PPTP Server in the router this feature limits the access request from the WAN by ssh and per minute up to accept two connection requests on the same IP Any new access request will be automatically d...

Page 45: ...DinBox Router 3G User Manual Page 45 of 71 ...

Page 46: ...button to cancel unsaved changes 3 3 4 2 VPN Pass through Virtual Private Networking VPN is typically used for work related networking For VPN tunnels the DinBox router 3G supports OPENVPN Pass through PPTP Pass through and L2TP Pass through IPSec Pass through Internet Protocol Security IPSec is a suite of protocols used to implement secure exchange of packets at the IP layer To allow IPSec tunnel...

Page 47: ...can set specific PC based Internet access policies This feature allows you to customize up to ten different Internet Access Policies for particular PCs which are identified by their IP or MAC addresses Two options in the default policy rules Filter and reject If select Deny you will deny specific computers to access any Internet service at a particular time period If you choose to filter It will b...

Page 48: ...olicy to be applied Times Enter the time of the day you would like your policy to be applied Website Blocking by URL Address You can block access to certain websites by entering their URL Website Blocking by Keyword You can block access to certain website by the keywords contained in their webpage ...

Page 49: ... Range fields Enter the appropriate MAC addresses into the MAC fields 6 Click the Apply button to save your changes Click the Cancel button to cancel your unsaved changes Click the Close button to return to the Filters screen 7 If you want to block the listed PCs from Internet access during the designated days and time then keep the default setting Deny If you want the listed PCs to have Internet ...

Page 50: ...router can cause a temporary failure After the failure of the router if cannot automatically synchronized NTP time server you need to recalibrate to ensure the correct implementation of the relevant period control function 3 3 5 2 Packet Filter To block some packets getting Internet access or block some Internet packets getting local network access you can configure filter items to block these pac...

Page 51: ...k via the Internet the DinBox router 3G will forward those requests to the appropriate PC If you want to forward a whole range of ports see Port Range Forwarding Application Enter the name of the application in the field provided Protocol Chose the right protocol TCP UDP or Both Set this to what the application requires Source Net Forward only if sender matches this ip net example 192 168 1 0 24 P...

Page 52: ... to what the application requires IP Address Enter the IP Address of the PC running the application Enable Click the Enable checkbox to enable port forwarding for the application Check all values and click Save Settings to save your settings Click the Cancel changes button to cancel your unsaved changes 3 3 6 3 Port Triggering Port Triggering allows you to do port forwarding without setting a fixe...

Page 53: ...pens all the ports of one computer exposing the computer so the Internet can see it Any PC whose port is being forwarded must should have a new static IP address assigned to it because its IP address may change when using the DHCP function DMZ Host IP Address To expose one PC to the Internet select Enable and enter the computer s IP address in the DMZ Host IP Address field To disable the DMZ keep ...

Page 54: ...nter bandwidth values for your downlink These are generally 80 to 90 of your maximum bandwidth 3 3 7 2 Classify Netmask Priority You may specify priority for all traffic from a given IP address or IP Range Check all values and click Save Settings to save your settings Click the Cancel changes button to cancel your unsaved changes 3 3 8 Applications 3 3 8 1 Serial Applications There is a console po...

Page 55: ...l type Enable Serial TCP Function Enable the serial to TCP function Protocol Type The protocol type to transmit data UDP DTU Data transmit with UDP protocol work as a DTU which has application protocol and hear beat mechanism Pure UDP Data transmit with standard UDP protocol TCP DTU Data transmit with TCP protocol work as a DTU which has application protocol and hear beat mechanism Pure TCP Data t...

Page 56: ...new password a second time to confirm it Note Default username is admin It is strongly recommended that you change the factory default password of the DinBox router 3G which is admin All users who try to access the router s web based utility or Setup Wizard will be prompted for the router s password Web Access This feature allows you to manage the router using either HTTP protocol or the HTTPS pro...

Page 57: ...sents the specified port in your web browser s address field You will be asked for the router s password If you use https you need to specify the URL as https xxx xxx xxx xxx 8080 not all firmware s does support this without rebuilding with SSL support SSH Management You can also enable SSH to remotely access the router by Secure Shell Note that SSH daemon needs to be enabled in Services page Note...

Page 58: ...ximum ports and lower the TCP UDP timeouts This is necessary to maintain the stability of the router because peer to peer applications open many connections and don t close them properly Consider using these Maximum Ports 4096 TCP Timeout 3600 sec UDP Timeout 120 sec 3 3 9 2 Keep Alive Schedule Reboot You can schedule regular reboots for the DinBox router 3G Regularly after xxx seconds At a specif...

Page 59: ...run some custom iptables instructions Fill the text area with firewall s instructions only one command by row and click Save Firewall Custom Script Custom script is stored in tmp custom sh file You can run it manually or use cron to call it Fill the text area with script s instructions only one command by row and click Save Custom Script 3 3 9 4 Factory Defaults Reset router settings Click the Yes...

Page 60: ...ton and wait until the upgrade is finished Note Upgrading firmware may take a few minutes Do not turn off the power or press the reset button After flashing reset to If you want to reset the router to the default settings for the firmware version you are upgrading to click the Firmware Defaults option 3 3 9 6 Backup Backup Settings You may backup your current configuration in case you need to rese...

Page 61: ...WAN setting basic setting to modify LAN Domain Name domain name of LAN unavailable to modify Current Time local time of the system Uptime operating uptime as long as the system is powered on Total Available the room for total available of RAM that is physical memory minus some reserve and the kernel of binary code bytes Free free memory the DinBox router 3G will reboot if the memory is less than 5...

Page 62: ...management Active IP Connections real time monitor active IP connections of the system click to see the table as blow Active IP Connections total active IP connections Protocol connection protocol Timeouts connection timeouts unit is second Source Address source IP address Remote Address remote IP address Service Name connecting service port Status displayed status ...

Page 63: ... IP address of router WAN Subnet Mask subnet mask of router WAN Gateway the gateway of router WAN DNS1 DNS2 DNS3 DNS1 DNS2 DNS3 of router WAN Login Status connection status of WAN Disconnection disconnect Connection connect Module Type module type in 3G UMTS way Signal Status signal intensity of the module in 3G UMTS way Network network type of the module in 3G UMTS way ...

Page 64: ...me until now statistics download and upload direction Monthly Flow the flow of a month unit is MB Last Month the flow of last month Next Month the flow of next month Backup backup data administration Restore restore data administration Delete delete data administration 3 3 10 3 LAN ...

Page 65: ...ess of the client Conn Count connection count caused by the client Ratio the ratio of 4096 connection DNCP Server enable or disable the DinBox router 3G to work as a DHCP server DHCP Daemon the agreement allocated using DHCP including DNSMasq and uDHCPd Starting IP Address the starting IP Address of the DHCP server s Address pool Ending IP Address the ending IP Address of the DHCP server s Address...

Page 66: ...IP tunnel IP address of local L2TP Remote IP tunnel IP address of L2TP server Delete click to disconnect L2TP Interface the interface assigned by dial up system User Name user name of the client Local IP tunnel IP address of L2TP client Remote IP IP address of L2TP client Delete click to delete L2TP client Interface the interface assigned by dial up system Local IP tunnel IP address of local PPTP ...

Page 67: ...nual Page 67 of 71 Local IP tunnel IP address of PPTP client Remote IP IP address of PPTP client Delete click to delete PPTP client 3 3 10 4 Bandwidth Bandwidth Monitoring LAN Graph abscissa axis time vertical axis speed rate ...

Page 68: ...AN Graph abscissa axis time vertical axis speed rate 3 3 10 5 Sys Info Router Name the name of the router Router Model the model of the router LAN MAC MAC address of LAN port WAN MAC MAC address of WAN port WAN IP IP address of WAN port LAN IP IP address of LAN port ...

Page 69: ...l reboot if the memory is less than 500kB Used used memory total available memory minus free memory Buffers used memory for buffers total available memory minus allocated memory Cached the memory used by high speed cache memory Active Active use of buffer or cache memory page file size Inactive Not often used in a buffer or cache memory page file size Host Name host name of LAN client IP Address I...

Page 70: ...tup Windows XP Hyper Terminal 1 Press Start Programs Accessories Communications Hyper Terminal 2 Input connection name choose OK 3 Choose the correct COM port which connects to modem choose OK 4 Configure the serial port parameters as following choose OK Bits per second 115200 Data bits 8 Parity None ...

Page 71: ...DinBox Router 3G User Manual Page 71 of 71 Stop bits 1 Flow control None 5 Complete Hyper Terminal operation It runs as following ...

Search results

Summary of Contents for DinBox ROUTER 3G

Reviews:

Related manuals for DinBox ROUTER 3G

Brands by name

Popular brands

Bausch Datacom DinBox ROUTER 3G, User Manual

Search results

Summary of Contents for DinBox ROUTER 3G

Reviews:

Related manuals for DinBox ROUTER 3G

Brands by name

Popular brands