Cradlepoint IBR350 User Manual Download Page 14

©2016 Cradlepoint. All Rights Reserved.  

|

  +1.855.813.3385  

|

  cradlepoint.com

14

User Manual  

/

  IBR350

5/6/16

FAILBACK

This is used to configure failback, which is the ability to go back to a higher priority WAN interface if it regains 

connection to its network.

Select the 

Failback Mode

 from the following 

options:

• 

Usage

• 

Time

• 

Disabled

Usage Threshold

: Fail back based on the amount 

of data passed over time. This is a good setting 
for when you have a dual-mode EVDO/WiMAX 
modem and you are going in and out of WiMAX 
coverage. If the router has failed over to EVDO it 
will wait until you have low data usage before bringing down the EVDO connection to check if a WiMAX connection can 
be made.

• 

High (Rate: 80 KB/s. Time Period: 30 seconds.) 

• 

Normal (Rate: 20 KB/s. Time Period: 90 seconds.)

• 

Low (Rate: 10 KB/s. Time Period: 240 seconds.)

WAN VERIFY

If this is enabled, the router will check that the 
highest priority active WAN interface can get to the 
Internet even if the WAN connection is not actively 
being used. If the interface goes down, the router 
will switch to the next highest priority interface 
available. If this is not selected, the router will still 
failover to the next highest priority interface but 
only after the user has attempted to get out to the 
Internet and failed.

Idle Check Interval

: The amount of time between 

each check. (Default: 30 seconds. Range: 10-3600 
seconds.)

Monitor while connected

: (Default: Off) Select from the following dropdown options:

• 

Passive DNS

 (modem only): The router will take no action until data is detected that is destined for the WAN. 

When this data is detected, the data will be sent and the router will check for received data for two seconds. If no 
data is received the router behaves as described below under 

Active DNS

.

• 

Active DNS

 (modem only): A DNS request will be sent to the DNS servers. If no data is received, the DNS request 

will be retried four times at five-second intervals. (The first two requests will be directed at the Primary DNS 

server and the second two requests will be directed at the Secondary DNS server.) If still no data is received, the 
device will be disconnected and failover will occur.

• 

Active Ping

: A ping request will be sent to the Ping Target. If no data is received, the ping request will be retried 

four times at five-second intervals. If still no data is received, the device will be disconnected and failover will 

occur. When “Active Ping” is selected, the next line gives an estimate of data usage in this form: “Active Ping 
could use as much as 

9.3 MB

 of data per month.” This amount depends on the 

Idle Check Interval

.

• 

Off

: Once the link is established the router takes no action to verify that it is still up.

Summary of Contents for IBR350

Page 1: ...2016 Cradlepoint All Rights Reserved 1 855 813 3385 cradlepoint com 1 User Manual IBR350 5 6 16 User Manual COR Series Router IBR350...

Page 2: ...ICATIONS 5 ACCESSORIES 6 BUSINESS GRADE MODEM SPECIFICATIONS 6 SUPPORT AND WARRANTY 8 HARDWARE 8 LEDS 9 QUICK START 10 BASIC SETUP 10 ACCESSING THE ADMINISTRATION PAGES 10 FIRST TIME SETUP WIZARD 11 U...

Page 3: ...29 ROUTING 38 QOS 39 DNS SERVERS 42 CLIENT DATA USAGE 44 SECURITY 45 IDENTITIES 45 ZONE FIREWALL 45 CONTENT FILTERING 50 CERTIFICATE MANAGEMENT 52 SYSTEM 55 ADMINISTRATION 55 ENTERPRISE CLOUD MANAGER...

Page 4: ...FEATURES WAN LTE only HSPA or LTE HSPA EVDO Advanced Modem Failure Check Standby LAN VLAN 802 1Q DHCP Server Client Relay DNS and DNS Proxy DynDNS UPnP DMZ Multicast Multicast Proxy QoS DSCP and Prior...

Page 5: ...ress Native support for authentication Authorization and accounting support through hotspot captive portal services 1 Enterprise Cloud Manager requires a subscription SPECIFICATIONS WAN Integrated LTE...

Page 6: ...erizon Technology LTE HSPA EVDO Rev A Downlink Rates LTE 100 Mbps HSPA 21 1 Mbps EVDO 3 1 Mbps theoretical Uplink Rates LTE 50 Mbps HSPA 5 76 Mbps EVDO 1 8 Mbps theoretical Frequency Bands LTE Band 2...

Page 7: ...Canada Technology LTE HSPA EVDO Rev A Downlink Rates LTE 100 Mbps HSPA 21 1 Mbps EVDO 3 1 Mbps theoretical Uplink Rates LTE 50 Mbps HSPA 5 76 Mbps EVDO 1 8 Mbps theoretical Frequency Bands LTE Band 2...

Page 8: ...ear limited hardware warranty available in the US and Canada two year limited hardware warranty for integrated EU products when purchased from an authorized EU distributor extend warranty to 2 3 or 5...

Page 9: ...power source connection Flashing Amber Attention Open the administration pages and check the router status ETHERNET LAN Indicates information about a data source connected to the Ethernet LAN port Gre...

Page 10: ...e antenna straight and twist the base of the antenna to connect folding the joint if needed NOTE Ensure that the router antennas are not near metal or other RF reflective surfaces 3 Connect the power...

Page 11: ...t s next generation management and application platform Enterprise Cloud Manager ECM integrates cloud management with your Cradlepoint devices to improve productivity increase reliability reduce costs...

Page 12: ...net LAN To quickly edit settings for any of these areas click on the pencil icon in the top right of the desired dialog box You may return to the Dashboard at any time by clicking on DASHBOARD from th...

Page 13: ...rnet is always maintained Availability Key Enable On Demand WAN Verify Data Usage Failback Standby STANDBY Standby is used to decrease failover time from one WAN interface to another When Standby is e...

Page 14: ...get out to the Internet and failed Idle Check Interval The amount of time between each check Default 30 seconds Range 10 3600 seconds Monitor while connected Default Off Select from the following dro...

Page 15: ...hen checked the WAN device will shutdown when the assigned usage is reached A cycle reset or a rule deletion will re enable the device Alert on Cap An email alert will be generated and sent when the a...

Page 16: ...IBR350 5 6 16 STATUS Internet Client List Tunnels Firewall Routing Ethernet GPS LLDP System Logs INTERNET CONNECTIONS Select your device to reveal detailed information about the following device prope...

Page 17: ...2016 Cradlepoint All Rights Reserved 1 855 813 3385 cradlepoint com 17 User Manual IBR350 5 6 16...

Page 18: ...2016 Cradlepoint All Rights Reserved 1 855 813 3385 cradlepoint com 18 User Manual IBR350 5 6 16...

Page 19: ...A USAGE Displays the following client information Name IP Address MAC Address Data Uploaded Data Downloaded Last Traffic To reset information click Reset Statistics STATISTICS Statistics can be gather...

Page 20: ...l Rights Reserved 1 855 813 3385 cradlepoint com 20 User Manual IBR350 5 6 16 QOS Displays packets and bytes transmitted and received by your Quality of Service QoS queues To enable and configure QoS...

Page 21: ...s of Wired Clients TUNNELS CP SECURE VPN Displays status of your CP Secure VPN Tunnels To add and configure CP Secure VPN Tunnels go to NETWORKING Tunnels CP Secure VPN IPSEC VPN Displays status of yo...

Page 22: ...ut your Firewall Connection Tracking States To configure your firewall select SECURITY from the left navigation ROUTING Displays information about your System GRE and NEMO Routes To configure these ro...

Page 23: ...rmation about your Ethernet ports To configure Ethernet ports go to NETWORKING Local Networks Ethernet Ports GPS Displays GPS location and status To enable and configure GPS go to SYSTEM Administratio...

Page 24: ...device directly to the router with an Ethernet cable Link Speed Default setting is Auto The Auto setting is preferred in most cases Auto 10Mbps Half Duplex 10Mbps Full Duplex 100Mbps Half Duplex 100M...

Page 25: ...is the DNS name associated with the router s local area network IP address IPv4 Settings IP Address This is the address used by the router for local area network communication Changes to this paramete...

Page 26: ...example the IPv6 address of 0001 0000 0234 5678 0000 0000 9abc 0def can be expressed as 1 0 234 5678 9abc def Interfaces Select the network interfaces which will be attached to this network by either...

Page 27: ...ation Altnet If multicast traffic originates outside the upstream subnet add address es to the altnet to define legal multicast sources IPv6 Addressing Address Configuration Mode SLAAC stands for Stat...

Page 28: ...or blacklist simply by inputting each device s MAC address NOTE Use caution when using the MAC Filter to avoid accidentally blocking yourself from accessing the router MAC Logging Configuration Enable...

Page 29: ...to create a new VLAN interface To edit an interface select the check box next to the desired interface TUNNELS CP SECURE VPN Configured deployed and managed from the cloud CP Secure VPN delivers a vir...

Page 30: ...in com or just a fully qualified domain name www mydomain com If the remote side of the tunnel is configured to expect an identifier then both must match in order for the negotiation to succeed If NAT...

Page 31: ...port on the router that you are plugging the modem into e g USB Port 2 Manufacturer Select by the modem manufacturer e g Cradlepoint Inc Model Set your rule according to the specific model of modem Ty...

Page 32: ...ut the default settings will be sufficient for most users To set up a tunnel with a remote site you need to match your tunnel s IKE negotiation parameters with the remote site By selecting several enc...

Page 33: ...rity list by clicking and dragging algorithms up or down Any selected algorithm may be used for IKE exchange but the algorithms on the top of the list are more likely to be used more often Add Edit Tu...

Page 34: ...ction page Under Failover Tunnel select the other tunnel you have created 3 Open the editor for the failover tunnel Make sure Tunnel Enabled is not selected On the Dead Peer Detection page set the Fai...

Page 35: ...a name that uniquely identifies it Tunnel Key Enables an ID key for a GRE tunnel which can be used as an identifier for mGRE Multipoint GRE Local Network This is the local side of the Glue Network a n...

Page 36: ...this tunnel when the specified WAN Binding device s are NOT connected Tunnel Enabled Select to activate the tunnel Add Edit Tunnel Routes Adding routes allows you to configure what types of network tr...

Page 37: ...5177 The protocol allows session continuity for every node in a mobile network as the network moves NOTE NEMO requires a feature license not included with ECM Prime Go to SYSTEM Administration Featur...

Page 38: ...e address range IP Network Address or IPv6 Address The IP address of the target network or host The IPv6 address field includes CIDR notation to declare a range of addresses Netmask Prefix The Netmask...

Page 39: ...our particular Internet connection for best results NOTE Upload speed is the speed at which data can be transferred to your ISP Download speed is the speed at which data can be transferred to you from...

Page 40: ...traffic Higher priority traffic is handled before lower priority traffic which can lead to shorter response times Also when spare bandwidth is available it is offered to higher priority queues first M...

Page 41: ...s TCP UDP TCP UDP or ICMP Select Any if your rule does not control a specific type of message that uses a specific protocol Queue Name Select a queue to associate this rule with Click Next to continue...

Page 42: ...the device has these distinct functions DNS Settings By default your router is set to automatically acquire DNS servers through your Internet provider Automatic DNS Settings allows you to specify DNS...

Page 43: ...nternet Service Providers assign dynamic changing IP addresses When you use a Dynamic DNS service provider you can enter your host name to connect to your server no matter what your IP address is Enab...

Page 44: ...this field IP address The address of the device within your network EXAMPLE a personal laptop with IP address 192 168 0 164 could be assigned the name MyLaptop Since the assigned name is mapped to an...

Page 45: ...FQDN addresses in the same identity IP addresses are entered using CIDR notation e g 1 2 3 4 32 and 0123 4567 CDEF 128 FQDN addresses are entered with at least one dot separating a top level domain f...

Page 46: ...rewall if none of the filter policy rules match the traffic being filtered Log When checked every rule in the policy will log matching packets as if the rule s Log option had been selected Click Add t...

Page 47: ...otocol Not needed for passive mode IRC For Direct Client to Client DCC transfer when using Internet Relay Chat You may wish to forward TCP port 113 for incoming identd RFC 1413 requests DMZ Demilitari...

Page 48: ...itioning from short prefix to a longer prefix such as from 48 to 64 is not without problems as some of the LANs may lose IPv6 connectivity REMOTE ACCESS RESTRICTION Add any IPv4 addresses that need ac...

Page 49: ...erfaces selectable via a Zone For example GRE interfaces can be used to port forward traffic from the GRE endpoints to local client thereby limiting exposure to the local LAN while still gaining the b...

Page 50: ...ebsite access Click Add Edit to change this setting for a MAC address MAC WEB FILTER RULES CONTENT FILTERING WEBFILTER SETTINGS General Settings Enbable Webfilter Selecting Enable Webfilter will enabl...

Page 51: ...be created by adding another rule with higher priority For example if access to maps example com is desired but example com is blocked with a priority of 50 The addition of an allow rule for maps exa...

Page 52: ...the Remove button Select a third party Cloud Provider from the dropdown list Umbrella by OpenDNS Umbrella by OpenDNS Umbrella by OpenDNS is a cloud based web filtering and security solution that prote...

Page 53: ...lf signed certificates for more information Generate a certificate signing request CSR by selecting a certificate from the dropdown list Certificate Name field and downloading the CSR The CSR can then...

Page 54: ...om the dropdown list and download it to your computer or local device in PKCS 12 format When you export this file you must create a passphrase to protect it This key is required for future use of the...

Page 55: ...s a user to enable incoming WAN pings or change settings for the router from the Internet using the router s Internet address Allow WAN pings When enabled the functionality allows an external WAN clie...

Page 56: ...ing an NTP server and adjusting the NTP server port Select the NTP server from the dropdown list Any of the given NTP servers will be sufficient unless for example you need to synchronize your router...

Page 57: ...sword to log in SSH Server Port Default 22 Automatically Set System Identifier This will automatically set the system ID to the name of the first client that gets a DHCP lease This feature cannot be u...

Page 58: ...modem Most modems have SMS enabled by default but the carrier may charge a fee for each text message sent or received Contact your carrier to review these fees and or to enable an SMS plan Important...

Page 59: ...24 and will treat the BOM as ASCII text which will appear as garbled characters in the log If this occurs disable this option Log to attached USB stick Only enable this option if instructed by a Cradl...

Page 60: ...ettings Advanced Enabled Enable the ECM client to contact the server While this box is unchecked the ECM client will never attempt to contact the server Default Enabled Server Host Port The DNS hostna...

Page 61: ...eekly and monthly reports Frequency You also choose the Time you want the alert sent SMTP Mail Server Since your router does not have its own email server to receive alerts you must enable an SMTP ser...

Page 62: ...to the WAN interfaces of the router WAN port Use the WAN port field to configure which publicly accessible port you wish to make SNMP services available on Default 161 SNMP Version SNMPv1 SNMP version...

Page 63: ...fields This password must be at least eight characters long Enable SNMP traps Enabling traps will allow you to configure a destination server community and port for trap notifications Trap notificatio...

Page 64: ...estore Settings Click on Restore Settings to restore your previous settings from a file on a computer Firmware Management Load new firmware and restore your previous settings from a file on a computer...

Page 65: ...tive image On multi firmware modems the carrier firmware is selected automatically Carrier Displays the carrier supported by the modem firmware For carriers not otherwise available Generic will be dis...

Page 66: ...Cradlepoint server WAN Device The WAN Device that is selected will have the test run on it If no device is selected then the highest priority connected device will be used Custom Server Type the Hostn...

Page 67: ...IS APN WIZARD if you have already configured an APN Any specific modem settings will not be overwritten by this generic APN setup Leave this setting as default and after finishing this Wizard go to th...

Page 68: ...the router takes no action to verify that it is still up On Modems will be set to use the Passive DNS failure check type Ethernet connections will be set to use Active Ping Ping IP Address This IP ad...

Page 69: ...o operate this equipment This device complies with Part 15 of the FCC Rules Operation is subject to the following two conditions 1 This device may not cause harmful interference and 2 this device must...

Page 70: ...E POWERED OFF AT ALL TIMES since the device otherwise could transmit signals that might interfere with various onboard systems on such aircraft Furthermore under no circumstances should the device be...

Page 71: ...UNDER OR IN CONNECTION WITH THE DEVICE REGARDLESS OF THE NUMBER OF EVENTS OCCURRENCES OR CLAIMS GIVING RISE TO LIABILITY EXCEED THE PRICE PAID BY THE ORIGINAL PURCHASER OF THE DEVICE PRIVACY Cradlepo...

Reviews: