Comms365 C365-5G-Mini User Manual Download Page 49

Page: 49 / 58

C365-5G-Mini User Manual CB-V1.1

www.comms365.com | 01234 865880 | [email protected]

3.6.8 Firewall

3.6.8.1 General Settings

3.6.8.2 Port Forwards

This page includes port forwards list and add new port forwards rule functionality.

•

Name:

Port forward name.

•

Protocol:

TCP+UDP, UDP and TCP are the options..

•

External zone:

The recommend option is WAN.

•

External port:

Match incoming traffic directed at the given destination port on this host.

•

Internal zone:

The recommend zone is LAN.

•

Internal IP address:

Redirect matched incoming traffic to the specific host.

•

Internal port:

Redirect matched incoming traffic to the given port on the internal host.

Summary of Contents for C365-5G-Mini

Page 1: ...C365 5G Mini User Manual CB V1 1 www comms365 com 01234 865880 sales comms365 com C365 5G Mini COMMS365 5G Router USER MANUAL ...

Page 2: ...Network Status 8 3 Software Configuration 9 3 1 Overview 9 3 2 How to log into the Router 9 10 11 3 3 Router status 12 3 3 1 Status overview 12 3 3 2 Network status 13 3 3 3 Firewall status 14 3 3 4 Routes 14 3 3 5 System log 14 3 3 6 Kernel log 15 3 3 7 Realtime graphs 15 3 4 System Configuration 16 3 4 1 Setup wizard 16 3 4 2 System 16 17 3 4 3 Password 18 3 4 4 NTP 18 3 4 5 Backup Restore 19 3 ...

Page 3: ...3 6 1 Operation Mode 38 3 6 1 1 Gets two LAN Ethernet Port for H685 38 3 6 2 Mobile configuration 39 3 6 3 Cell mobile data limitation 40 3 6 4 LAN settings 41 42 3 6 5 Wired WAN 43 3 6 6 Wi Fi Settings 44 3 6 6 1 Wi Fi General configuration 44 3 6 6 2 Wi Fi Advanced configuration 45 3 6 6 3 Wi Fi Interface configuration 45 46 3 6 6 4 Wi Fi AP Client 47 3 6 7 Interfaces Overview 48 3 6 8 Firewall ...

Page 4: ...4 C365 5G Mini User Manual CB V1 1 www comms365 com 01234 865880 sales comms365 com 3 6 11 DHCP and DNS 54 3 6 12 Diagnostics 55 3 6 13 Loopback Interface 55 3 6 14 Dynamic Routing 56 3 6 15 QoS 57 ...

Page 5: ...5880 sales comms365 com 2 Hardware Installation This chapter mainly describes the appearance model and function of the C365 5G MINI series and how to install and set the configurations 1 Dimensions 2 Accessories 3 Installation 2 1 Overall Dimension 2 2 The Ports ...

Page 6: ...n Antenna Connection Table Antenna Connector Marks Cell for main cell antenna Aux for auxiliary cell antenna Wi Fi WLAN for Wi Fi antenna GPS for GPS antenna 2 3 Installation The C365 5G MINI should be installed and configured properly before using The installation and configuration should be done under supervision or by a qualified engineer Attention Do not install or connect disconnect the cable...

Page 7: ... you will need to use a screwdriver to fix the cable to the connecting jacks of the terminal After achieving a successful connection you need to insert the terminal into the corresponding position in the bottom of the C365 5G MINI router Notes The connection sequence should be accurate Cable s insulating striping length is about 7mm For safety the length of the wire should be at least 7mm long Att...

Page 8: ... 2 GND and PIN 1 Vin Please refer to the above table for specifications of the terminal Normally the C365 5G MINI router inputs a power supply of 5 40V if your H685 support 50V the option is 5 50V In most cases the standard configuration is 12V 1A 2 8 LED and Check Network Status Please connect the antenna after you successfully connect the cable Insert the valid SIM UIM card and provide the power...

Page 9: ... is not ready 4s blink 1 time Signal bar is 1 3s blink 1 time Signal bar is 2 2s blink 1 time Signal bar is 3 1s blink 1 time Signal bar is 4 1s blink 2 times Signal bar is 5 3 Software Configuration 1 Overview 2 How to log into the Router 3 How to config the web 3 1 Overview The C365 5G MINI router has a built in WEB interface configuration management and debugging tools The parameters require co...

Page 10: ...80 sales comms365 com Option 1 Manual setting Set the PC IP as 192 168 1 xxx xxx 2 254 subnet mask 255 255 255 0 default gateway 192 168 1 1 primary DNS 192 168 1 1 Option 2 DHCP Choose Obtain an IP address automatically and Obtain DNS server address automatically ...

Page 11: ...2 168 1 1 in the DOS window This information means that the connection is active This information means that the connection has failed Please check that the network cable and the IP address setting Please refer to Chapter 4 9 Log into the Router Open the Web Browser and type http 192 168 1 1 into the address field and press Enter Type Username admin and Password admin in the Login page and then pr...

Page 12: ...s365 com If you type in the correct Username and Password you will get access into the Router s status overview page The password can be changed using the setup wizard See page 19 3 3 Router status 3 3 1 Status overview Click Status in the navigation bar and then click Overview ...

Page 13: ... CB V1 1 www comms365 com 01234 865880 sales comms365 com 3 3 2 Network status The network status page shows detailed information of the cell mobile interface WAN and LAN Cell mobile interface page WAN status page LAN status page ...

Page 14: ...rs The user can reset counters and restart firewall functionality here 3 3 4 Routes The routes page shows rules which are currently active on this router The ARP table is displayed as well 3 3 5 System log This page shows the system log from initial system boot up The system log is not saved when the router restarts It can be exported by clicking the Export syslog button ...

Page 15: ...65 com 3 3 6 Kernel log This page shows the Kernel log from the system boot up This log is not saved when the router restarts It can be exported by clicking the Export syslog button 3 3 7 Realtime graphs The real time graphs page shows real time system load interfaces traffic etc ...

Page 16: ...ton will save the configuration and jump to the next page All configurations will be applied after clicking the Finish button at the final step Step Wi Fi 3 4 2 System General Settings Local Time Displays system time and the user can Sync this time with the browser by clicking the Sync with browser button Hostname This is the router s name the default name is Cell Router Time zone Select a suitabl...

Page 17: ...ternal system log server This is the IP address of the external log server The user can setup a Linux machine with syslog running as a log server External system log server port The UDP port of the external log server Log output level Log level the default setting is debug which is the highest level Emergency is the lowest level Cron log level This is the log level for process Cron Language The de...

Page 18: ...d that you entered 3 4 4 NTP NTP is the network timing protocol Enable NTP client The default value is set to enabled The router acts as an NTP client Provide NTP server The default setting is marked as unchecked The router acts as an NTP server NTP server candidates This is the NTP server list multiple NTP servers are accepted The user can click the button to delete an entry or click the button t...

Page 19: ...ade Upload a compatible firmware to replace the running system firmware The default setting for Keep settings is checked This means that the current configuration will be kept after the system upgrade An unchecked box will restore the router back to settings We highly recommend that you check this box Keep settings otherwise there may be uncertain conflicting parameters after updating Click the Ch...

Page 20: ...s365 com 3 4 7 Reset Reset all the configurations back to factory settings After clicking the Reset button a window will appear click the cancel button to cancel click the OK button to continue 3 4 8 Reboot Click the Reboot button and the system will restart in several seconds ...

Page 21: ... sent and the response packet has not been received before the timeout then this ping has failed Max retries If the ping has failed the failed counter will display one If the failed counter is bigger or equal to the Max amount of retries then system will say that the ICMP check has failed an Action when failed will be triggered If the ping has succeeded the failed counter will be reset to 0 Interv...

Page 22: ...s for LAN s VRRP cluster IP address entry can be deleted by clicking the button or added by clicking the button Virtual ID Routers with the same IDs will be grouped into the same VRRP cluster The required number is between 1 and 255 Priority Routers with the highest priority in the same VRRP cluster will act as the master The required number is between 1 and 255 3 5 3 Failover link backup ...

Page 23: ... has failed the failed counter display one If the failed counter is bigger or equal to the Max number of retries then the system will say that this interface is unavailable If the ping has succeeded the failed counter will be reset to 0 Interval between ping The time between the first and second ping The unit is measured in seconds 3 5 4 DTU Notes 1 This feature is for C365 5G MINI models with the...

Page 24: ...nection Heartbeat interval The time between the two heartbeat packets Heartbeat content The contents of the heartbeat packet DTU Centre Configuration The DTU centre is the DTU server the user can enter the centre name and click the Add button to add a new centre here If the centre is not required the user can click the Delete button to delete it or set it to be disabled Notes The maximum number of...

Page 25: ... 0 0 0 0 Set Community The username for the SNMP The default setting is private This field is editable Set Host Lan The network range to set the router via SNMP default we set all as 0 0 0 0 0 User The SNMPv3 username Security Mode Three options None private and Authorized If it is set to None no password is required If it is set to Authorized only the Authentication method and password are requir...

Page 26: ...ly receives the GPS signal it will not process it It will just send the received GPS signal to your GPS processor device or server If the GPS processor device is connected to the C365 5G MINI Router via the Serial Port then please choose Serial If the GPS processor device is a remote server please choose Serial GPS to TCP UDP Settings Server IP Enter the correct destination server IP or domain nam...

Page 27: ... If the router receives this command the Router Cell will be online Set cell link down Command Enter the command for router cell link down operation the default setting is celldown If the router gets this command the Router Cell will be offline DIO_0 Set Command Enter the command for I O port 0 For the SMS feature please keep the parameter as default DIO_0 Reset Command Enter the command for I O p...

Page 28: ...the real time signal strength is lower than the Signal Quality Threshold the failed counter will display one If the real time signal strength is bigger than this threshold then reset the failed counter to 0 Failed Times Threshold If the failed counter is more than this threshold a signal alarm will be generated Success Times Threshold If a signal alarm is generated and the success counter is bigge...

Page 29: ...EC feature Exchange mode IKEv1 Main IKEv1 Aggressive and IKEv2 Main mode are supported Authentication method Client and Server The Client is the machine which starts the IPSEC connection Remote VPN endpoint Domain name or IP address of the remote endpoint It can be visited from the internet Pre shared Keys This is known as the PSK the length is 16 to 32 Local subnet The subnet of the local subnet ...

Page 30: ...e Phase 1 Proposal and the Phase 2 Proposal must match with the remote endpoint to establish the IPSEC connection 3 5 8 2 PPTP This page displays a list of configured PPTP instances and their states The user can click the Edit button to modify it or click the Delete button to delete an instance PPTP Client configuration ...

Page 31: ...echo requests is set at 5 seconds Use default gateway If unchecked no default route is configured Use DNS servers advertised by peer If unchecked the advertised DNS server addresses are ignored PPTP Server Configuration Local IP Indicate server s IP address Remote IP The remote IP address lease start Remote IP end The remote IP address lease end ARP Proxy If the remote IP has the same subnet as th...

Page 32: ... authentication username Password The server authentication password MTU The maximum transmission unit Keep Alive The Number of unanswered echo requests before considering it as inactive The interval between each echo requests is set at 5 seconds Check up Interval The number of seconds to pass before checking if the interface is not up since the last setup attempt and retrying the connection Set i...

Page 33: ... 255 0 Username The server authentication username Password The server authentication password 3 5 8 4 Open VPN This page is a list of configured Open VPN instances and their state You can click the Edit button to modify it or click the Delete to delete it You can click the Start or Stop button to start or stop a specific instance Note for the Open VPN configuration page you can hover the mouse ov...

Page 34: ...l feature TTL Time to live MTU The maximum transmission unit Peer IP address The remote WAN IP address Remote Network IP The remote LAN subnet address Remote Netmask The remote LAN subnet mask Local Tunnel IP Virtual IP address This cannot be in the same subnet as the LAN network Local Tunnel Mask Virtual IP mask Local Gateway ...

Page 35: ...in name that you can access the router by IP address source Defines the source that reads the systems IPv4 Address before sending it to the DDNS provider The recommended option is network Network Defines the network that reads the systems IPv4 Address DNS server OPTIONAL Use non default DNS Server to detect Registered IP The IP address and domain name are required Log to syslog Writes log messages...

Page 36: ... interval The minimum check interval is 1 minute 60seconds Error Retry Counter On Error the script will stop after a given number of retries The default setting of 0 will constantly retry Read the log file of DDNS Note If using the DDNS server no ip com please can you check the Use HTTP Secure box and enter 8 8 8 8 for the DNS Server Example as per below ...

Page 37: ...U and GPS sent to serial feature Please make sure the other two features are disabled before enabling the Connect Radio Module Otherwise an error will occur Connect Mode Serial only Modem to Serial Setting Serial baudrate Options of 9600 19200 38400 57600 115200bps Serial parity Options of none odd even Serial databits Options of 7 bits and 8 bits Serial stopbit Options of 1 bits and 2 bits Serial...

Page 38: ... ports NAT Enabled Network Address Translation Default setting is Enabling Ethernet wan port role Wired WAN port acts as a WAN The Ethernet wan port is used for LAN Default is Checked Wired WAN port acts as a LAN The Ethernet wan port is used as an LAN port to provide 2 LAN Ethernet ports If the WAN RJ45 Ethernet port is used for WAN please do not check this feature The default option is to select...

Page 39: ...t for the cell modem only supports 3G the default mode is pppd mode otherwise the default value is DHCP mode APN Fill in the related parameters Get this parameter from the SIM Card Provider or Carrier PIN number If necessary fill in the related parameters Most SIM cards have no PIN code and so keep this field blank Dialing number Fill in the related parameters Get this parameter from the SIMCard P...

Page 40: ...ys online The router will keep online whether there is data for transmission or not On Demand The router will dialup when there is data for transmission Idle time minutes Enter the time For example enter 5 the router will be offline after 5 minutes if there is no data for transmission Scheduled Router dialup or offline with schedule One group is supported 3 6 3 Cell mobile data limitation Enable d...

Page 41: ...nt Assign prefix parts using this hexadecimal subprefix ID for LAN Bring up on boot If checked the LAN interface will be set up when there is a system bootup If unchecked the LAN interface will be down Don t set it to unchecked if you don t have a specified reason for it Use built in IPv6 management The default is checked If IPv6 is not needed it can be set to be unchecked Override MAC address Ove...

Page 42: ...work address Limit Maximum number of leased addresses Leasetime Expiry time of leased addresses minimum is 2 minutes 2m 12H means 12 hours Dynamic DHCP Dynamically allocate DHCP addresses for clients If disabled only clients having static leases will be served Force Force DHCP on this network even if another server is detected IPv4 Netmask Override the netmask sent to clients Normally it is calcul...

Page 43: ... Advertisement Service NDP Proxy Three options disabled relay mode and hybrid Always announce default router Announce as a default router even if no public prefix is available 3 6 5 Wired WAN Protocol The default protocol is a DHCP client If it should be changed to another protocol such as PPPoE select protocol PPPoE then click the Switch protocol button After this click the Switch protocol button...

Page 44: ... browser is Google Chrome 3 6 6 Wi Fi Settings Wi Fi Restart Turn off Wi Fi firstly and then turn on AP Client Scan all frequencies to get the Wi Fi network information Add Add a new Wireless network Disable Set a wireless network to down Edit Modify detailed information of the wireless network Remove Delete a wireless network Associated Stations This is a list of the connected wireless stations 3...

Page 45: ...802 11n Channel Channel 1 11 supported Width 20MHz and 40MHz Transmit Power From 0dBm to 20dBm supported 3 6 6 2 Wi Fi Advanced Configuration Country Code Use ISO IEC 3166 alpha2 country codes Distance Optimization Distance to farthest network member in meters Fragmentation Threshold RTS CTS Threshold 3 6 6 3 Wi Fi Interface Configuration ESSID Extended Service Set Identifier It is the broadcast n...

Page 46: ...nt to attach to this wireless interface or fill out the create A field to define a new network Hide Extended Service Set Identifier Hide SSID means this Wi Fi cannot be scanned by others WMM Mode Encryption Key This is the password to join a wireless network If the encryption is set to No Encryption no password is needed ...

Page 47: ... to scan all the Wi Fi signals Step 2 If the Wi Fi that you want to join is on the list then click the Join Network button If it is not then click the Repeat Scan button until you find the Wi Fi that you want to join Step 3 Join Network Settings Replace the wireless configuration An additional wireless network will be created if it is unchecked Otherwise it will replace the old configuration WPA p...

Page 48: ...1 www comms365 com 01234 865880 sales comms365 com Step 5 Click the Save Apply button to start the AP client 3 6 7 Interfaces Overview The Interfaces overview shows all interfaces status including uptime MAC address RX TX and IP address ...

Page 49: ...e functionality Name Port forward name Protocol TCP UDP UDP and TCP are the options External zone The recommend option is WAN External port Match incoming traffic directed at the given destination port on this host Internal zone The recommend zone is LAN Internal IP address Redirect matched incoming traffic to the specific host Internal port Redirect matched incoming traffic to the given port on t...

Page 50: ... traffic between certain hosts or to open WAN ports on the router The traffic rules overview page provides the following functionalities Traffic rules list Open ports on router and create new forward rules Source NAT list and create source NAT rule Traffic rule configuration page This page allows you to change the advanced properties of the traffic rule entry such as matched source and destination...

Page 51: ...one that the traffic comes from Source MAC address Traffic rule check if the incoming packet s source MAC address is matched Source address Traffic rule check if the incoming packet s source IP address is the same Source port Traffic rule check if the incoming packet s TCP UDP port the same Destination zone The zone that the traffic will go to Destination address Traffic rule check if the incoming...

Page 52: ...Address Please enter the IP address of the computer of which you want to set as a DMZ host Protocol All protocols TCP UDP TCP UDP Note Once the DMZ host has settled the computer is completely exposed to the external network the firewall will not influence this host 3 6 8 5 Security SSH access from WAN Allow or deny users access of the C365 5G MINI router from THE remote side Ping from WAN to LAN A...

Page 53: ...otice The gateway and LAN IP of this router must belong to the same network segment If the destination IP address is the same as the host the Netmask must be 255 255 255 255 If the destination IP address is an IP network segment it must match the Netmask For example if the destination IP is 10 0 0 0 and the Netmask is 255 0 0 0 3 6 10 Switch Notes 1 Port 4 is A Wired WAN port port 0 port 1 port 2 ...

Page 54: ...omain Local domain suffix appended to DHCP names and hosts file entries Log queries Write received DNS requests to syslog DNS forwardings List of DNS servers to forward requests to Rebind protection Discard upstream RFC1918 responses Allow localhost Allow upstream responses in the 127 0 0 0 8 range e g for RBL services Domain whitelist List of domains to allow RFC1918 responses for Suppress loggin...

Page 55: ...ries Max DHCP leases Maximum allowed number of active DHCP leases Max edns0 packet size Maximum allowed size of EDNS 0 UDP packets Max concurrent queries Maximum allowed number of concurrent DNS queries 3 6 12 Diagnostics Ping This is a tool that is used to test the reachability of a host on an Internet Protocol IP network Traceroute This is a network diagnostic tool for displaying the route path ...

Page 56: ... port number is 2604 OSPF6 Open Shortest Path First for IPv6 Telnet port number is 2606 RIP Routing Information Protocol Telnet port number is 2602 RIPng This is an IPv6 reincarnation of the RIP protocol Telnet port number is 2603 BGP Border Gateway Protocol Telnet port number is 2605 Note How to configure these services For example the router s LAN IP is 192 168 10 1 If you want to configure the ...

Page 57: ...80 sales comms365 com Input the password of OSPF Then press key for help 3 6 15 QoS QoS Quality of Service can prioritize network traffic by address port or service Enable Enable QoS on this interface Classification group Specify class group used for this interface ...

Page 58: ...Target The four default options are priority express normal low Source host Packets matching this source host s single IP or in CIDR notation belong to the bucket defined in target Destination host Packets matching this destination host s single IP or in CIDR notation belong to the bucket defined in the target Protocol Packets matching this protocol belong to the bucket defined in the target Ports...

Search results

Summary of Contents for C365-5G-Mini

Reviews:

Comms365 C365-5G-Mini, User Manual, Page: 49 / 58

Search results

Summary of Contents for C365-5G-Mini

Reviews: