Datamax MA100-1010 User Manual Download Page 65

Page: 65 / 109

3.1.4.3.

OPENVPN

OPENVPN Server

Start Type:

WAN UP-‐-‐-‐-‐start after on-‐line, System-‐-‐-‐-‐start when boot up

Config via:

GUI-‐-‐-‐-‐Page configuration, Config File-‐-‐-‐-‐config File configuration

Server mode:

Router (TUN)-‐route mode, Bridge (TAP)-‐-‐-‐-‐bridge mode

Router (TUN):

Network:

network address allowed by OPENVPN server

Netmask:

netmask allowed by OPENVPN server

Bridge (TAP):

DHCP-‐Proxy mode:

enable or disable DHCP-‐Proxy mode

Pool start IP:

pool start IP of the client allowed by OPENVPN server

Pool end IP:

pool end IP of the client allowed by OPENVPN server

Gateway:

the gateway of the client allowed by OPENVPN server

Netmask:

netmask of the client allowed by OPENVPN server

Port:

listen port of OPENVPN server

Tunnel Protocol:

UCP or TCP of OPENVPN tunnel protocol

Summary of Contents for MA100-1010

Page 1: ...ax MA100 1010 HSPA 4 Port Ethernet Router with GPS RS232 Wi Fi User Manual CHOOSE WELL CHOOSE WISELY CHOOSE MAXON Not to scale www maxon com au This document is the sole and exclusive property of Maxon Australia Not to be distributed or divulged without prior written agreement ...

Page 2: ...Accessories List 15 2 5 SIM card Installation 15 2 6 Antenna Installation 15 2 7 Power 16 2 8 Indicator Lights Introduction 16 2 9 Reset Button 17 3 Configuration and Management 18 3 1 Management and configuration 21 3 1 1 Setting 21 3 1 2 Wireless 40 3 1 3 Services 53 3 1 4 VPN 61 3 1 5 Security 74 3 1 6 Access Restrictions 78 3 1 7 NAT 81 3 1 8 QoS Setting 84 3 1 9 Applications 86 3 1 10 Adminis...

Page 3: ... 3000 Facsimile 61 2 8707 3001 Email sales maxon com au Public holidays excluded WEBSITE www maxon com au Maxon has also added for the benefit of developers and integrators a forum on our website that can be accessed to discuss this product and or technical matters in relation to your applications All questions raised within this portal will be answered FORUM www maxon com au forum ADDRESS Maxon A...

Page 4: ... to a mobile phone This equipment generates uses and can radiate radio frequency energy and if not used in accordance with instructions can cause harmful radiation to radio communication The modem is approved for use with the antenna ANT 8530 Unauthorized antennas modifications or attachments could impair call quality damage the device or result in violation of RF exposure regulations However ther...

Page 5: ...ioned that changes or modifications not expressly approved by Maxon Australia could void the warrantee The product needs to be supplied by a limited power source or the power supply provided Otherwise safety will not be ensured ...

Page 6: ...eas could cause an explosion or fire resulting in bodily injury or death Areas with a potentially explosive atmosphere are often but not always clearly marked They include fuelling areas such as gas or petrol stations below deck on boats transfer or storage facilities for fuel or chemicals vehicles using liquefied petroleum gas such as propane or butane areas when the air contains chemicals or par...

Page 7: ...MA100 1010 Document Type PDF Current Version Number 1 1 Status of the Document Public Release Revision Date May 2014 Total Number of Pages 109 Revision History Level Date History 1 0 July 2013 Release Version 1 1 May 2014 Minor updates 1 2 Jan 2015 Removed reference to RS422 RS485 ...

Page 8: ...sting serial and Ethernet devices with minimal configuration The MA100 1010 has been widely used within M2M applications such as intelligent transportation smart grid industrial automation and telemetry Features and Benefits Designed for Industrial Application Industrial cellular module EM820W High powered industrial 32bit CPU Industrial GPS module Supports low power consumption mode including sle...

Page 9: ...ormance Supports multiple WAN access methods including static IP DHCP L2TP PPTP PPPOE 3G HSPA 4G Supports GPS function Supports double link backup between 3G and WAN PPPOE ADSL Supports VPN client PPTP L2TP OPENVPN IPSEC and GRE Supports VPN server PPTP L2TP OPENVPN IPSEC and GRE Supports local and remote firmware upgrade import and export config file Supports NTP RTC embedded Supports multiple DD...

Page 10: ... GPRS EDGE CLASS 12 HSUPA 5 76Mbps Upload speed HSDPA 7 2Mbps Download speed UMTS 384Kbps DL UL HSPA 21 Mbps Download speed 5 76Mbps Upload speed 24dBm 109 dBm GPS Specification Item Content GPS Module Industrial GPS module Receiver Type 50 channle GPS L1 1575 42MHz C A code SBAS WAAS EGNOS MSAS GAGAN Support GALILEO Max update rate 4 Hz Accuracy Position 2 5m CPE SBAS 2 0m CPE Embedded processing...

Page 11: ...dBm Cold starts 144dBm Timing accuracy RMS 30ns 99 60ns Granularity 21ns Time pulse Configurable 0 25 to 1000Hz WIFI Specification Item Content Standard IEEE802 11b g n Bandwidth IEEE802 11b g 54Mbps max IEEE802 11n 150Mbps max Security WEP WPA WPA2 etc WPS optional TX power 21 5dBm 11g 26dBm 11b RX sensitivity 72dBm 54Mpbs ...

Page 12: ...tion Data bits 5 6 7 8 Stop bits 1 1 5 optional 2 Parity none even odd space optional mark optional Baud rate 2400 115200 bps Indicator Power System Online GPS Local Network WAN WIFI Signal Strength Antenna Cellular Standard SMA female interface 50 ohm WIFI Standard SMA male interface 50 ohm GPS standard SMA female interfaces SIM UIM Standard 3V 1 8V user card interface 15KV ESD protection Power S...

Page 13: ...Consumption 650mA 12V Physical Characteristics Item Content Housing Iron providing IP30 protection Dimensions 206x135x28 mm Weight 790g Environmental Limits Item Content Operating Temperature 35 75ºC 31 167 Storage Temperature 40 85ºC 40 185 Operating Humidity 95 Non condensing ...

Page 14: ...ired Failure to do so may result in unauthorized access to your equipment 2 2 Package Contents Name Quantity Remark Router host 1 Cellular antenna Male SMA 1 WIFI antenna Female SMA 1 GPS antenna Male SMA 1 Network cable 1 Console cable 1 optional Power adapter 1 Manual CD 1 Certification card 1 Maintenance card 1 2 3 Installation and Cable Connection ...

Page 15: ...n insert the SIM card tray back into the SIM card outlet 2 6 Antenna Installation Attach the SMA male connector of the cellular antenna into the female SMA interface on the router labeled Antenna Attach the SMA male connector of the WIFI antenna into the female SMA interface on the router labeled WIFI The router supports an RS232 interface and a 10 100M Ethernet interface These two interfaces both...

Page 16: ...wer The input supply voltage range is 5 35VDC We recommend using the standard DC 12VDC 1 5A power adaptor available from Maxon 2 8 Indicator Lights Introduction The router provides following indicator lights Power System Online GPS Local Network WAN WIFI Signal Strength Pin RS232 signal Direction 1 DCD Output 2 RXD Output 3 TXD Input 4 DTR Input 5 GND 6 DSR output 7 RTS input 8 CTS output ...

Page 17: ... WAN interface is plugged in data is traversing the WAN interface WIFI OFF WIFI is not active ON WIFI is active Signal Strength One Light ON Signal strength is weak Two Lights ON Signal strength is medium Three Lights ON Signal strength is good 2 9 Reset Button The modems Reset button is used to restore the modem to its original factory default settings To restore the router to factory default set...

Page 18: ...eed a computer with a spare Ethernet LAN port The LAN card configuration should have the Internet Protocol TCP IP set to obtain an IP Address automatically and obtain DNS server address automatically To check these settings go to your LAN adaptor properties and check your Interment Protocol TCP IP settings it should look as follows ...

Page 19: ... get an IP address from the Datamax DHCP range automatically 3 In your web browser type 192 168 1 1 in the Address URL field The Default IP Address of the Ethernet port is 192 168 1 1 The router will prompt you to change the login credentials the default username and password are both admin After access to the information main page ...

Page 20: ... 20 ...

Page 21: ...e Password IP Address Default Gateway Address or DNS IP Address This information can be obtained from your ISP if required 3 1 1 1 Basic Setting WAN Connection Type There are seven configuration options for the WAN interface Disabled Static IP Automatic Configuration using one of DHCP PPPOE PPTP L2TP 3G UNMTS 4G LTE Disabled The WAN port is not used Static IP WAN IP Address IP address of the WAN i...

Page 22: ...HCP PPPOE User Name Your username typically supplied by your ISP Password Your password typically supplied by your ISP Service Name If required by your ISP otherwise leave blank PPP Compression MPPC If your ISP supports compression and you wish you use it it can be enabled here T Home VDSL VLAN 7 8 Tagging If your ISP supports VDSL you can enable it here MPPE Encryption if your connection requires...

Page 23: ... 23 Invalid PPP password characters list double quotation mark quotation mark question mark bracket at sign semi colon pipe sign I upper case I ...

Page 24: ... ISP will provide this User Name your username as supplied by your ISP Password your password as supplied by your ISP PPTP Encryption encrypt secure packets over the PPTP link your ISP will advise if this is required Disable Packet Reordering This option can increase link throughput however your ISP must support this function Additional PPTP Options any extra options that your ISP requires that ar...

Page 25: ...istrator Gateway L2TP Server The IP address of the L2TP server you wish to connect to Require CHAP Force CHAP based authentication Refuse PAP Prevent PAP based authentication Require Authentication L2TP server requires authentication 3G UMTS 4G LTE The WAN connection will be 2G 3G 4G on the Datamax User Name your username if any as supplied by your mobile service provider Password your password if...

Page 26: ...cular connection options Keep Online This function is used to monitor your WAN connectivity so that broken connections can be re established or alternate connections established Detection Method None do not monitor connectivity Ping Send ICMP Echo requests to the primary and backup detection server address Route Detect connection with route method when choose this method users should also configur...

Page 27: ...ection Strategy Connection Strategy Connect on Demand only connects to your mobile service provider when there is outgoing data being sent The connection is dropped when there is no WAN traffic for the Max Idle Time period While this saves power and possibly reduces mobile service provider charges your equipment including the Datamax modem will not be reachable via the WAN interface when the conne...

Page 28: ... 28 STP Spanning Tree Protocol allows for multiple redundant links while preventing routing loops packets do not ping pong from router to router ...

Page 29: ... you may need to reduce this please contact your network administrator and or ISP Router Internal Network Settings Router IP Local IP Address IP address of the routers LAN interface Subnet Mask the subnet mask of the routers LAN interface Gateway the default gateway address for LAN clients Local DNS Normally set to auto to use the nameservers your upstream provider supplies eg by DHCP however you ...

Page 30: ...P server as below DHCP Server enable or disable the DHCP server Start IP Address the first lowest IP address to issue when a DHCP request comes in make sure you exclude the Datamax IP address Maximum DHCP Users the maximum number of concurrent DHCP leases allowed Client Lease Time the time the IP address is leased for in minutes After this amount of time the client will need to acquire a new lease...

Page 31: ...s location Server IP Name IP address of NTP server up to 32 characters If blank the system will find a server by default Adjust Time Where you are not using NTP or the NTP server is currently unreachable you can set the routers real time clock here Click the get button to refresh the browser page with the current router time and Set to set the current router time 3 1 1 2 Dynamic DNS For users that...

Page 32: ... Host Name the FQDN of the DDNS server Type select the appropriate value list varies depending on the setting of DDNS Service Wildcard support wildcard or not the default is OFF ON means host 3322 org is equal to host 3322 org Do not use external ip check enable or disable the function of do not use external ip check Force Update Interval How often in days to force a DDNS update even if the IP add...

Page 33: ... to update your MAC address with your ISP Clone MAC address can clone three parts Clone LAN MAC Clone WAN MAC Clone Wireless MAC Note MAC addresses are 48 characters they cannot be set to a multicast address and the first byte must be even The MAC address value of network bridge br0 is determined by the lower order bits of wireless MAC address and LAN port MAC address 3 1 1 4 Advanced Router Opera...

Page 34: ...tc running on your network s you should enable this option To enable the Dynamic Routing feature for the WAN side select WAN To enable this feature for the LAN and wireless side select LAN WLAN To enable the feature for both the WAN and LAN select Both To disable the Dynamic Routing feature for all network interfaces keep the default setting Disable Note Dynamic Routing is not available in Gateway...

Page 35: ...s route lower numbers are preferred routes Destination LAN NET the new route destination address Subnet Mask the subnet mask for the new route Gateway IP address of the gateway device that forwards packets to the destination host or network Interface The interface that has the gateway attached LAN WLAN WAN or loopback Show Routing Table ...

Page 36: ...ll be shared for example rather than routed This allows you to create separate subnets on each LAN port or group of LAN ports Note that although there are 15 VLAN s available there are only 5 ports 4 x LAN 1 x WAN Note also that the WAN port should be on a separate VLAN or routing to the WAN may not work ...

Page 37: ... to Bridged if they want to assign any Wireless Interface here Any system specific bridge setting can be overridden here in this field Current Bridging Table shows current bridging table Create steps as below Click Add to create a new bridge configuration is as below Create bridge option the first br0 means bridge name STP means to on off spanning tree protocol Prio means priority level of STP the...

Page 38: ...s are within the same bridge The smaller the number the higher the level Click Add to take it effect Note corresponding interface of WAN ports interface should not be binding this bridge function is basically used for LAN port and should not be binding with WAN port If bind success bridge binding list in the list of current bridging table is as below To make br1 bridge has the same function with D...

Page 39: ...er unit Multicast forwarding enable or disable multicast forwarding Masquerade NAT enable or disable Masquerade NAT IP Address set ra0 s IP address and do not conflict with other ports or bridge Subnet Mask set the port s subnet mask Multiple DHCPD using multiple DHCP service Click Add in multiple DHCP server to appear relevant configuration The first means the ...

Page 40: ...ve or Apply to put it into effect after setting Note You can only create one DHCP instance at a time please press Save or Apply after each instance creation to be able to specify the next instance 3 1 2 Wireless 3 1 2 1 Basic Settings Wireless Network Enable or Disable the WiFi of the router Wireless Mode AP Client Adhoc Repeater Repeater Bridge Wireless Network Mode Mixed Support 802 11b 802 11g ...

Page 41: ...e network name shared among all devices in a wireless network The SSID must be identical for all devices in the wireless network It is case sensitive and must not exceed 32 alphanumeric characters which may be any keyboard character Make sure this setting is the same for all devices in your wireless network Wireless Channel A total of 1 13 channels to choose more than one wireless device environme...

Page 42: ...ve your changes after changing the Wireless Mode Wireless Network Mode wireless width broadband option please click on this button and then configure the other options 3 1 2 2 Wireless Security Wireless security options used to configure the security of your wireless network This route is a total of seven kinds of wireless security mode Disabled by default not safe mode is enabled Such as changes ...

Page 43: ...bit 40 bit and 128 bit To utilize WEP select the desired encryption bit and enter a passphrase or up to four WEP key in hexadecimal format If you are using 64 bit 40 bit then each key must consist of exactly 10 hexadecimal characters or 5 ASCII characters For 128 bit each key must consist of exactly 26 hexadecimal characters Valid hexadecimal characters are 0 9 and A F ASCII HEX ASCII the keys is ...

Page 44: ...hexadecimal digits Key Renewal Interval in seconds 1 99999 WPA Enterprise WPA2 Enterprise WPA2 Enterprise Mixed WPA Enterprise uses an external RADIUS server to perform user authentication WPA Algorithms AES TKIP TPIP AES Radius Auth Sever Address The IP address of the RADIUS server Radius Auth Server Port The RADIUS Port default is 1812 Radius Auth Shared Secret The shared secret from the RADIUS ...

Page 45: ...on for 802 11 WLANs wireless local area networks that support 802 1X port access control Here is PEAP EAP MS CHAPv2 1 Enter the User 2 Enter the Password TTLS TTLS uses the TLS channel to exchange attribute value pairs AVPs much like RADIUS In fact the AVP encoding format is very similar to RADIUS The general encoding of information allows a TTLS server to validate AVPs against any type of authent...

Page 46: ...led instructions Use Filter Disabled by default Select Enable to open the Wireless MAC Filter Filter Mode Prevent client listed from accessing the wireless network blacklist mode listed devices are prevented from accessing via WiFi all other devices are allowed access Permit only client listed to accessing the wireless network whitelist mode only listed devices can access the WiFi all other device...

Page 47: ...ault setting will ensure maximum compatibility with all devices You may also choose to enable all data rates by selecting ALL For compatibility with older Wireless B devices select 1 2Mbps MIMO Transmission Fixed Rate The default setting is Auto The range is from 13 5 to 270Mbps The rate of data transmission should be set depending on the speed of your wireless network You can select from a range ...

Page 48: ... clients and there can be a negative result and throughput will be affected Beacon Interval The default value is 100 Enter a value between 1 and 65 535 milliseconds The Beacon Interval value indicates the frequency interval of the beacon A beacon is a packet broadcast by the router to synchronize the wireless network 50 is recommended in poor reception DTIM Interval The default value is 1 This val...

Page 49: ...with external antennas to give them optimum performance On some router models left and right antennas may be reversed depending on you point of view Preamble Values are Long and Short default value is Long If your wireless device supports the short preamble and you are having trouble getting it to communicate with other 802 11b devices make sure that it is set to use the long preamble Wireless GUI...

Page 50: ...m transmission delay for Voice Video multimedia and mission critical applications and rely on best effort parameters for traditional IP data No Acknowledgement This refers to the acknowledge policy used at the MAC level Enabling no acknowledgement can result in more efficient throughput but higher error rates in a noisy Radio Frequency RF environment EDCA AP Parameters AP to Client This affects tr...

Page 51: ...specified here If the first random backoff wait time expires before the data frame is sent a retry counter is incremented and the random backoff value window is doubled Doubling will continue until the size of the random backoff value reaches the number defined in the Maximum Contention Window Valid values for the cwmin are 1 3 7 15 31 63 127 255 511 or 1024 The value for cwmin must be lower than ...

Page 52: ...reless Distribution System is a Wireless Access Point mode that enables wireless bridging in which WDS APs communicate only with each other only without allowing for wireless clients or stations to access them and or wireless repeating in which APs communicate both with each other and with wireless stations at the expense of half the throughput This firmware currently supports one types of WDS LAN...

Page 53: ... the Wireless MAC of the other router listed with a signal reading If the signal is 0dBm then there may be something wrong Check your antenna connections and configuration settings and try again 7 Once you have a good signal 70dBm to 30dBm 70dBm being lowest you can change the Internet Connection Type on the Basic Setup page of the second router to Disabled and set the Gateway to the LAN IP Addres...

Page 54: ... 54 98 Identification identifier DHCP option can be assigned to DHCP clients based on specific operating system Request IP IP address of the request ...

Page 55: ... domain users can select here which domain the DHCP clients should get as their local domain This can be the WAN domain set on the Setup screen or the LAN domain which can be set here LAN Domain users can define here their local LAN domain which is used as local domain for DNSmasq and DHCP service if chose above Static Leases if users want to assign certain hosts a specific address then they can d...

Page 56: ...he LAN to resolve static and dynamic DHCP hostnames No DNS Rebind when enabled it can prevent an external attacker to access the router s internal Web interface It is a security measure Additional DNSMasq Options some extra options users can set by entering them in Additional DNS Options For example static allocation dhcp host AB CD EF 11 22 33 192 168 0 10 myhost myhost domain 12h max lease numbe...

Page 57: ...word username is admin Port port number for SSHd default is 22 Authorized Keys here users paste their public keys to enable key based login more secure than a simple password System log Enable Syslogd to capture system messages By default they will be collected in the local file var log messages To send them to another system enter the IP address of a remote syslog server Syslog Out Mode two log m...

Page 58: ...d Note If users use the router in an untrusted environment for example as a public hotspot it is strongly recommended to use SSHd and deactivate telnet WAN Traffic Counter Ttraff Daemon enable or disable wan traffic counter function 3 1 3 2 PPPoE Server PPPoE Server RP PPPoEServer Daemon enable or disable PPPoE server RP PPPoEServer Options ...

Page 59: ...n MPPC Compression enable or disable MPPC Compression MPPE PPPoE Encryption enable or disable MPPE PPPoE Encryption Session Limit per MAC default is 10 LCP Echo Interval time interval to set the the LCP calibration phase response LCP Echo Failure release PPPoE over failure times the PPPoE client will need to reconnect Idle Time set idle time idle time at the appropriate time to release the PPPoE A...

Page 60: ...entication Dial In User Server IP Radius Authentication Port set the Remote Authentication Dial in User Authentication Port Radius Accounting Port set the Remote Authentication Dial in User Accounting Port Radius Shared Key transactions between the client and RADIUS accounting server are authenticated through the use of a shared secret which is never sent over the network ...

Page 61: ...DNS1 DNS2 WINS1 WINS2 set DNS1 DNS2 WINS1 WINS2 Server IP input IP address of the router as PPTP server differ from LAN address Client IP s IP address assigns to the client the format is xxx xxx xxx xxx xxx CHAP Secrets user name and password of the client using PPTP service Note client IP must be different with IP assigned by router DHCP The format of CHAP Secrets is user password ...

Page 62: ...emote PPTP server Remote Subnet Mask subnet mask of remote PPTP server MPPE Encryption enable or disable Microsoft Point to Point Encryption MTU maximum Transmission Unit MRU maximum Receive Unit NAT network Address Translation User Name user name to login PPTP Server Password password to log into PPTP Server ...

Page 63: ...dress of the router as PPTP server differ from LAN address Client IP s IP address assigns to the client the format is xxx xxx xxx xxx xxx xxx xxx xxx CHAP Secrets user name and password of the client using L2TP service Note client IP must be different with IP assigned by router DHCP The format of CHAP Secrets is user password ...

Page 64: ...crosoft Point to Point Encryption MTU maximum transmission unit MRU maximum receive unit NAT network address translation User Name user name to login L2TP Server Password password to login L2TP Server Require CHAP enable or disable support chap authentication protocol Refuse PAP enable or disable refuse to support the pap authentication Require Authentication enable or disable support authenticati...

Page 65: ...allowed by OPENVPN server Netmask netmask allowed by OPENVPN server Bridge TAP DHCP Proxy mode enable or disable DHCP Proxy mode Pool start IP pool start IP of the client allowed by OPENVPN server Pool end IP pool end IP of the client allowed by OPENVPN server Gateway the gateway of the client allowed by OPENVPN server Netmask netmask of the client allowed by OPENVPN server Port listen port of OPE...

Page 66: ...nsfer Redirect default Gateway enable or disable redirect default gateway Allow Client to Client enable or disable allow client to client Allow duplicate cn enable or disable allow duplicate cn TUN MTU Setting set the value of TUN MTU TCP MSS MSS of TCP data TLS Cipher TLS Transport Layer Security encryption standard supports AES 128 SHA and AES 256 SHA Client connect script define some client scr...

Page 67: ...erver DH PEM PEM of the server Additional Config additional configurations of the server CCD Dir DEFAULT file other file approaches TLS Auth Key authority key of Transport Layer Security Certificate Revoke List configure some revoke certificates ...

Page 68: ... UDP and TCP protocol Encryption Cipher Blowfish CBC AES 128 CBC AES 192 CBC AES 256 CBC AES 512 CBC Hash Algorithm Hash algorithm provides a method of quick access to data including SHA1 SHA256 SHA512 MD5 nsCertType verification support ns certificate type Use LZO Compression enable or disable use LZO compression for data transfer NAT enable or disable NAT through function ...

Page 69: ...of TCP data TLS Cipher TLS Transport Layer Security encryption standard supports AES 128 SHA and AES 256 SHA TLS Auth Key authority key of Transport Layer Security Additional Config additional configurations of OPENVPN server Policy based Routing input some defined routing policy CA Cert CA certificate Public Client Cert client certificate Private Client Key client key ...

Page 70: ...this tunnel Action the action of this connection current is to delete edit reconnect and enable Delete to delete the connection also will delete IPSEC if IPSEC has set up Edit to edit the configure information of this connection reload this connection to make the configuration effect after edit Reconnect this action will remove current tunnel and re launch tunnel establish request Enable when the ...

Page 71: ...fer mode Remote Subnet IPSec opposite end protects subnet and subnet mask i e 192 168 7 0 24 this option can not fill in if using transfer mode Local ID tunnel local end identification IP and domain name are available Remote ID tunnel opposite end identification IP and domain name are available Detection this part contains configure information of connection detection Enable DPD Detection enable o...

Page 72: ...me current unit is hour the default is 0 ESP Encryption ESP encryption type ESP Integrity ESP integrity solution ESP Keylife set ESP keylife current unit is hour the default is 0 IKE aggressive mode allowed negotiation mode adopt aggressive mode if tick it is main mode if non tick Negotiate payload compression Tick to enable PFS non tick to diable PFS Authentication choose use share encryption opt...

Page 73: ...rtual Private Network GRE Tunnel enable or disable GRE function Number Switch on off GRE tunnel app Status Switch on off someone GRE tunnel app Name GRE tunnel name Through The GRE packet transmit interface Peer Wan IP Addr The remote WAN address Peer Subnet The remote gateway local subnet eg 192 168 1 0 24 Peer Tunnel IP The remote tunnel ip address Local Tunnel IP The local tunnel ip address Loc...

Page 74: ...nce network security and use SPI to check the packets into the network To use firewall protection choose to enable otherwise disabled Only enable the SPI firewall you can use other firewall functions filtering proxy block WAN requests etc Additional Filters Filter Proxy Wan proxy server may reduce the security of the gateway Filtering Proxy will refuse any access to any wan proxy server Click the ...

Page 75: ...e to disable allow anonymous Internet requests Filter IDENT Port 113 Enable this feature can prevent port 113 from being scanned from outside Click the check box to enable the function otherwise disabled Block WAN SNMP access This feature prevents the SNMP connection requests from the WAN After Complete the changes click the Save Settings button to save your changes Click the Cancel Changes button...

Page 76: ...tomatically dropped Log Management The router can keep logs of all incoming or outgoing traffic for your Internet connection Log To keep activity logs select Enable To stop logging select Disable When select enable the following page will appear Log Level Set this to the required log level Set Log Level higher to log more actions Options When select Enable the corresponding connection will be reco...

Page 77: ... select Disable PPTP Pass through Point to Point Tunneling Protocol is the method used to enable VPN sessions to a Windows NT 4 0 or 2000 server To allow PPTP tunnels to pass through the router PPTP Pass through is enabled by default To disable PPTP Pass through select Disable L2TP Pass through Layer Two 2 Tunneling Protocol an extension to the PPP protocol that enables ISPs to operate Virtual Pri...

Page 78: ... time period If you choose to filter it will block specific computers to access the specific sites at a specific time period You can set up 10 Internet access policies filtering specific PCs access Internet services at a particular time period Access Policy You may define up to 10 access policies Click Delete to delete a policy or Summary to see a summary of the policy Status Enable or disable a p...

Page 79: ...Website Blocking by URL Address You can block access to certain websites by entering their URL Website Blocking by Keyword You can block access to certain website by the keywords contained in their webpage ...

Page 80: ...et the time when access will be filtered Select 24 Hours or check the box next to From and use the drop down boxes to designate a specific time period 10 Click the Add to Policy button to save your changes and active it 11 To create or edit additional policies repeat steps 1 9 12 To delete an Internet Access Policy select the policy number and click the Delete button Note 1 The default factory val...

Page 81: ...rom WAN to LAN output packet from LAN to WAN Protocol packet protocol type Source Ports packet s source port Destination Ports packet s destination port Source IP packet s source IP address Destination IP packet s destination IP address Note Source Port Destination Port Source IP Destination IP could not be all empty you have to input at least one of these four parameters 3 1 7 NAT 3 1 7 1 Port Fo...

Page 82: ...P Address Enter the IP Address of the PC running the application Port to Enter the number of the internal port the port number used by the application Enable Click the Enable checkbox to enable port forwarding for the application Check all values and click Save Settings to save your settings Click the Cancel changes button to cancel your unsaved changes 3 1 7 2 Port Range Forward Port Range Forwar...

Page 83: ...enable port forwarding for the application Check all values and click Save Settings to save your settings Click the Cancel changes button to cancel your unsaved changes 3 1 7 3 Port Triggering Port Triggering allows you to do port forwarding without setting a fixed PC By setting Port Triggering rules you can allow inbound traffic to arrive at a specific LAN host using ports different than those us...

Page 84: ...use of a special purpose service such as Internet gaming or videoconferencing DMZ hosting forwards all the ports at the same time to one PC The Port Forwarding feature is more secure because it only opens the ports you want to have opened while DMZ hosting opens all the ports of one computer exposing the computer so the Internet can see it Any PC whose port is being forwarded must should have a ne...

Page 85: ...ation to different services netmasks MAC addresses and the four LAN ports Uplink kbps In order to use bandwidth management QoS you must enter bandwidth values for your uplink These are generally 80 to 90 of your maximum bandwidth Downlink kbps In order to use bandwidth management QoS you must enter bandwidth values for your downlink These are generally 80 to 90 of your maximum bandwidth 3 1 8 2 Cl...

Page 86: ...o TCP program The data sent to the serial port is encapsulated by TCP IP protocol stack and then is sent to the destination server This function can work as a Maxon DTU Data Terminal Unit Please refer www maxon com au for more information about this product Baudrate The serial port s baudrate Databit The serial port s databit Parity The serial port s parity Stopbit The serial port s stopbit Flow C...

Page 87: ...ain name Server Port The data service center s listening port Device ID The router s identity ID Device Number The router s phone number Heartbeat Interval The time interval to send heart beat packet This item is valid only when you choose UDP DTU or TCP DTU protocol type TCP Server Listen Port This item is valid when Protocol Type is TCP Server Custom Heartbeat Packet This item is valid when Prot...

Page 88: ...rial port we should set the following serial port settings 3 1 10 Administration 3 1 10 1 Management The Management screen allows you to change the router s settings On this page you will find most of the configurable items of the router code The new password must not exceed 32 characters in length and must not include any spaces Enter the new password a second time to confirm it Note Default user...

Page 89: ...or disable the password protection feature of the system information page Remote Access This feature allows you to manage the router from a remote location via the Internet To disable this feature keep the default setting Disable To enable this feature select Enable and use the specified port default is 8080 on your PC to remotely manage the router You must also change the router s default passwor...

Page 90: ...on of Linux commands You ll need to use the command line or startup scripts to actually use this 802 1x A limited 802 1x server needed to fulfill WPA handshake requirements to allow Windows XP clients to work with WPA IP Filter Settings adjust these for P2P If you have any peer to peer P2P applications running on your network please increase the maximum ports and lower the TCP UDP timeouts This is...

Page 91: ...the web interface Fill the text area with your command and click Run Commands to submit Startup You can save some command lines to be executed at startup s router Fill the text area with commands only one command by row and click Save Startup Shutdown You can save some command lines to be executed at shutdown s router Fill the text area with commands only one command by row and click Save Shutdown...

Page 92: ...fault password admin 3 1 10 5 Firmware Upgrade Firmware Upgrade New firmware versions can be provided by Maxon If the Router is not experiencing difficulties then there is no need to download a more recent firmware version unless that version has a new feature that you want to use Note When you upgrade the Router s firmware you lose its configuration settings so make sure you write down the Router...

Page 93: ...ou need to reset the router back to its factory default settings Click the Backup button to back up your current configuration Restore Settings Click the Browse button to browse for a configuration file that is currently saved on your PC Click the Restore button to overwrite all current configurations with the ones in the configuration file Note Only restore configurations with files backed up usi...

Page 94: ... basic setting to modify WAN Domain Name domain name of WAN setting basic setting to modify LAN Domain Name domain name of LAN unavailable to modify Current Time local time of the system Uptime operating uptime as long as the system is powered on Total Available the room for total available of RAM that is physical memory minus some reserve and the kernel of binary code bytes Free free memory the r...

Page 95: ...ilter Maximum Ports preset is 4096 available to re management Active IP Connections real time monitor active IP connections of the system click to see the table as blow Active IP Connections total active IP connections Protocol connection protocol Timeouts connection timeouts unit is second Source Address source IP address Remote Address remote IP address Service Name connecting service port Statu...

Page 96: ...ess IP address of router WAN Subnet Mask subnet mask of router WAN Gateway the gateway of router WAN DNS1 DNS2 DNS3 DNS1 DNS2 DNS3 of router WAN Remaining Lease Time remaining lease time of IP address in DHCP way DHCP Release release DHCP address DHCP Renew renew IP address in DHCP way default is 1 day Login Status connection status of WAN Disconnection disconnect Connection connect ...

Page 97: ...e module in 3G UMTS way Total Flow flow from power off last time until now statistics download and upload direction Monthly Flow the flow of a month unit is MB Last Month the flow of last month Next Month the flow of next month Backup backup data administration Restore restore data administration Delete delete data administration ...

Page 98: ...e client MAC Address MAC address of the client Conn Count connection count caused by the client Ratio the ratio of 4096 connection DNCP Server enable or disable the router work as a DHCP server DHCP Daemon the agreement allocated using DHCP including DNSMasq and uDHCPd Starting IP Address the starting IP Address of the DHCP server s Address pool Ending IP Address the ending IP Address of the DHCP ...

Page 99: ...name of PPPoE client Local IP IP address assigned by PPPoE client Delete click to delete PPPoE client Interface the interface assigned by dial up system Local IP tunnel IP address of local L2TP Remote IP tunnel IP address of L2TP server Delete click to disconnect L2TP Interface the interface assigned by dial up system User Name user name of the client Local IP tunnel IP address of L2TP client Remo...

Page 100: ...nterface the interface assigned by dial up system User Name user name of the client Local IP tunnel IP address of PPTP client Remote IP IP address of PPTP client Delete click to delete PPTP client 3 1 11 4 Wireless MAC Address MAC address of wireless client Radio display whether radio is on or not Mode wireless mode Network wireless network mode SSID wireless network name ...

Page 101: ...ss MAC address of wireless client Interface interface of wireless client Uptime connecting uptime of wireless client TX Rate transmit rate of wireless client RX Rate receive rate of wireless client Signal the signal of wireless client Noise the noise of wireless client SNR the signal to noise ratio of wireless client Signal Quality signal quality of wireless client Neighbor s Wireless Network disp...

Page 102: ...se of the wireless nearby Beacon signal beacon of the wireless nearby Open the wireless nearby is open or not Dtim delivery traffic indication message of the wireless nearby Rate speed rate of the wireless nearby Join Site click to join wireless network nearby 3 1 11 5 Bandwidth Bandwidth Monitoring LAN Graph abscissa axis time vertical axis speed rate ...

Page 103: ... 103 Bandwidth Monitoring WAN Graph abscissa axis time vertical axis speed rate Bandwidth Monitoring Wireless W10 Graph abscissa axis time vertical axis speed rate ...

Page 104: ...of WAN port Wireless MAC MAC address of the wireless WAN IP IP address of WAN port LAN IP IP address of LAN port Radio display whether radio is on or not Mode wireless mode Network wireless network mode SSID wireless network name Channel wireless network channel TX Power reflection power of wireless network Rate reflection rate of wireless network ...

Page 105: ...ing uptime of wireless client TX Rate transmit rate of wireless client RX Rate receive rate of wireless client Signal the signal of wireless client Noise the noise of wireless client SNR the signal to noise ratio of wireless client Signal Quality signal quality of wireless client DHCP Server enabled or disabled ff radauth enabled or disabled USB Support enabled or disabled ...

Page 106: ...le memory minus free memory Buffers used memory for buffers total available memory minus allocated memory Cached the memory used by high speed cache memory Active Active use of buffer or cache memory page file size Inactive Not often used in a buffer or cache memory page file size Host Name host name of LAN client IP Address IP address of the client MAC Address MAC address of the client Expires th...

Page 107: ...he following steps describe how to setup Windows XP Hyper Terminal 1 Press Start Programs Accessories Communications Hyper Terminal 2 Input connection name choose OK 3 Choose the correct COM port which connects to modem choose OK ...

Page 108: ... 108 4 Configure the serial port parameters as following choose OK Bits per second 115200 Data bits 8 Parity None Stop bits 1 Flow control None 5 Complete Hyper Terminal operation It runs as following ...

Page 109: ... 109 ...

Search results

Summary of Contents for MA100-1010

Reviews:

Brands by name

Popular brands

Datamax MA100-1010, User Manual

Search results

Summary of Contents for MA100-1010

Reviews:

Brands by name

Popular brands