background image

D X - 3 0 0 1 H 9 - V   I n d u s t r i a l  3 G / W A N   V P N  R o u t e r   U s e r   M a n u a l

 

3 - 3 6  

_3 

Description 

Default 

L2TP Mode 

Set up the working mode of the L2TP, options are “Disabled” and “Client” 

Disabled 

L2TP Server 

Set up the IP/Domain name of the L2TP server 

 

User Name

 

Set up the username to login the L2TP server

 

 

Password

 

Set up the password to login the L2TP server 

 

Obtain IP

 

Set up the method of obtain IP, options are “Auto” and “Manual” 

Auto – Obtain IP from PPTP server automatically 

Manual – assign IP address manual 

Auto 

IP Address

 

PPTP Client IP address 

 

Subnet Mask

 

PPTP Client subnet mask 

 

Gateway

 

PPTP Client gateway address 

 

DNS

 

PPTP Client DNS server address 

 

Authorization Mode

 

Options are “Auto”, “PAP” and “CHAP”.   

Auto 

MPPE

 

Enable or disable Microsoft Point-to-Point Encryption 

Disabled 

NAT

 

Enable or disable Network Address Translation 

Disabled 

MTU

 

Set up the Maximum Transmission Unit of the tunnel 

1460 

Connection Check Interval

 

Set up the connection check interval. Check the connectivity, if the connection 
is lost, it will redial automatically, 0 indicating not to check the connectivity.   

60 

Connection Check Times

 

Set up the connection check times, 0 indicating infinity. Once a disconnection 
is detected, the router will redial according to the set value in the Redial Times.   

Allow Local LAN Access 

Setup whether allow local LAN device access L2TP server 

Disabled 

L2TP Server Subnet

 

Setup L2TP server subnet 

 

Summary of Contents for DX-3001H9-V

Page 1: ...Inc 1511 Byucksan Digital Valley 6 cha Gasan dong Geumcheon gu Seoul Korea 153 704 TEL 82 2 515 5303 FAX 82 2 515 5302 Delta Electronics Int l S Pte Ltd 4 Kaki Bukit Ave 1 05 05 Singapore 417939 TEL 65 6747 5155 FAX 65 6744 9228 Delta Electronics India Pvt Ltd Plot No 43 Sector 35 HSIIDC Gurgaon PIN 122001 Haryana India TEL 91 124 4874900 FAX 91 124 4874945 Americas Delta Products Corporation USA ...

Page 2: ...he first version was published 2016 10 21 2nd 1 Chapter 3 Add new functions of Auto Detect Dial Failure to Restart Detect interval WAN Backup WAN Check Interval in section 3 2 1 2 Add new function of PIN Management in section 3 2 4 3 Add new function of Remote Web Manage Setting in section3 3 8 2020 5 14 ...

Page 3: ......

Page 4: ...1 8 1 2 Package Checklist 1 8 Chapter 2 User Interface 2 1 Web based GUI Configuration 2 2 2 1 1 System Connection 2 2 2 1 2 Default IP Address Account Password 2 2 2 1 3 Local Network Setups 2 2 2 1 4 Logging in 2 4 Chapter 3 Functions 3 1 Status 3 3 3 1 1 Network Status 3 3 3 1 2 Device 3 4 3 1 3 Log 3 6 3 2 Network 3 7 3 2 1 Connection Priority 3 7 3 2 2 Cellular Link1 3 10 3 2 3 Cellular Link2...

Page 5: ... 3 28 3 4 2 OPENVPN 3 31 3 4 3 PPTP 3 33 3 4 4 L2TP 3 35 3 4 5 GRE 3 37 3 4 6 Certificate 3 39 3 4 7 VPN Log 3 40 3 5 Interface 3 40 3 5 1 RS232 3 40 3 5 2 RS485 3 41 3 5 3 Profile Management 3 42 3 5 4 FTP SFTP Server 3 43 3 6 System 3 44 3 6 1 Name and Password 3 44 3 6 2 Time Zone Settings 3 45 3 6 3 Firmware Upgrade 3 46 3 6 4 Backup Restore 3 46 3 6 5 System Reboot 3 47 3 6 6 SD Card 3 47 3 6...

Page 6: ...Introduction Table of Contents 1 1 Product Overview 1 4 1 1 1 Network Design 1 5 1 1 2 Features 1 5 1 1 3 Front Panel Ports and LEDs 1 6 1 1 4 Top Panel 1 6 1 1 5 Bottom Panel 1 7 1 1 6 Dimension 1 8 1 2 Package Checklist 1 8 ...

Page 7: ...ser is encouraged to try to correct the interference by one or more of the following measures Reorient or relocate the receiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help CE Declaration of Conformity DX 3...

Page 8: ...uct In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures EN 55032 Class A Warning Class A ITE is a category of all other ITE which satisfies the class A ITE limits but not the class B ITE limits The following warning shall be included in the instructions for use Warning This equipment is compliant with Class A of EN 55...

Page 9: ...net Priorities of the connection to Internet over WAN and 2 cellular networks are configurable As there is only one 3G module in the device the two cellular networks cannot be active at the same time Router support standard VPN protocols include PPTP L2TP OPENVPN IPSec and GRE With interfaces like Ethernet ports RS232 and RS485 multiple peripheral devices can be connected to the device The product...

Page 10: ... automatic redial when connection is broken WAN port access mode static IP DHCP client Dual SIM card slots support auto switching between the cellular operators Provides dual serial ports RS232 and RS485 and 4 LAN port to meet the needs of different devices connected Support PPTP L2TP OPENVPN IPSec GRE VPN Support LED status display Provides reset function Support NTP client built in independent R...

Page 11: ...DX 3001H9 V Industrial 3G WAN VPN Router User Manual 1 6 1 1 3 Front Panel Ports and LEDs 1 1 4 Top Panel 1 ...

Page 12: ...ith the router powered on press the Reset button and release the button right away Reset to Factory Defaults With the router powered on press and hold the Reset button for 3 6 seconds and then release the button Reset can only be done when the device is running properly With the router powered on press and hold the Reset button until all the LEDs go out Except the Power LED Then release the button...

Page 13: ...kage contents The package should contain the following items DX 3001H9 V Industrial 3G VPN Router x 1 Quick Installation Guide x 1 SMA Antenna 300cm x 1 Notice Verify that nothing is missing from the DX 3001H9 V package by using the check list above If any item is found missing or damaged please contact your local sales representative for support 1 ...

Page 14: ...2 Chapter 2 User Interface Table of Contents 2 1 Web based GUI Configuration 2 2 2 1 1 System Connection 2 2 2 1 2 Default IP Address Account Password 2 2 2 1 3 Local Network Setups 2 2 2 1 4 Logging in 2 5 ...

Page 15: ...r is done you will need to set the network configruration for your computer Obtain an IP address automatically by using the router as a DHCP server 1 Open Network Connections by clicking the Start button and then clicking Control Panel 2 Under Network and Sharing Center click View network connections 3 Right click the connection that you want to change and then click Properties If you re prompted ...

Page 16: ...Chapter 2 User Interface 2 3 2_ ...

Page 17: ...e router s default IP address is 192 168 1 1 and the subnet mask is 255 255 255 0 the computer s IP address can be set between 192 168 1 2 to 192 168 1 254 However you ll need to make sure there are no IP conflicts Here we set the address to 192 168 1 10 and the default gateway to 192 168 1 1 For DNS the usable DNS address can be selected or the address can also be set to 192 168 1 1 ...

Page 18: ...u ll be prompted with the log in page Input the user name and the password Default is admin admin and then press Enter to log in to the setup page 3 After login you can see the main selection area on the left hand side and the upper area of the page The detailed settings can be seen on the right hand side of the page Notice For security please modify the initial password as soon as possible ...

Page 19: ...DX 3001H9 V Industrial 3G WAN VPN Router User Manual 2 6 2_ MEMO ...

Page 20: ...etting 3 16 3 2 6 LAN 3 17 3 3 Firewall 3 19 3 3 1 Basic 3 19 3 3 2 DMZ 3 20 3 3 3 Port Forward 3 20 3 3 4 Port Trigger 3 22 3 3 5 URL Filter 3 24 3 3 6 MAC Filter 3 25 3 3 7 IP Filter 3 25 3 3 8 Remote Web Manage Setting 3 26 3 4 VPN 3 28 3 4 1 IPSec 3 28 3 4 2 OPENVPN 3 31 3 4 3 PPTP 3 33 3 4 4 L2TP 3 35 3 4 5 GRE 3 37 3 4 6 Certificate 3 39 3 4 7 VPN Log 3 40 3 5 Interface 3 40 3 5 1 RS232 3 40...

Page 21: ...ser Manual 3 2 3 5 4 FTP SFTP Server 3 43 3 6 System 3 44 3 6 1 Name and Password 3 44 3 6 2 Time Zone Settings 3 45 3 6 3 Firmware Upgrade 3 46 3 6 4 Backup Restore 3 46 3 6 5 System Reboot 3 47 3 6 6 SD Card 3 47 3 6 7 Network Diagnosis 3 48 ...

Page 22: ...ection type WAN mode IP Address Network Mask Gateway Address primary DNS and Secondary DNS When router connects to internet by Cellular the connection includes the Operator Signal Strength Connection Status Online Duration Authorization Mode APN Telephone Number IP Address Network Mask Gateway Address primary DNS and Secondary DNS LAN includes the LAN IP Address and connection status of 4 LAN port...

Page 23: ...s page shows basic information on the Hardware Software version and Resource Usage Information Basic Item Description Device Type Model type of the router Device Name Name of the router the default is DX3001 _ the last four digits of Mac address S N Serial number of the router ...

Page 24: ...Upgrade Date Upgrade time of the software currently used on the router Resource Usage Item Description CPU Usage The CPU usage of current router Total Memory The total memory on the router Memory Used The memory currently used on the router Memory Usage The current ratio of the router usage SD Card Status The SD card status in the router SD Card Capacity The total storage of the SD card SD Card Us...

Page 25: ...WAN VPN Router User Manual 3 6 _3 3 1 3 Log This page shows logs of the router including the System log Warning lot and the Debug log You can use the buttons on the right hand side to refresh clear or download the displayed logs ...

Page 26: ...ing the connection priority Cellular network WAN and LAN Configurations 3 2 1 Connection Priority This page is used for setting up the connection priority Router provide 3 links to connect to Internet include cellular network 1 2 and WAN user can appoint the connect order in this page ...

Page 27: ...e target IP address allows to be pinged Does not support Domain Name input N A Target Address 2 Set the second IP of the server that program will do a ping testing Notice Make sure the target IP address allows to be pinged Does not support Domain Name input N A Dial Failure To Restart DX devices will be restarted if the network connection has been continuously failed for 10minures with the Primary...

Page 28: ...as WAN 4 Set Secondary Connection as Celluar1 5 Set Tertiary Connection as Celluar2 6 Set Ping or FTP SFTP for Auto Detect Input the target IP addresses Notice Make sure the target IP address allows to be pinged Does not support Domain Name input 7 Set WAN Backup as Enable 8 Set WAN Check Interval as 10 seconds Default setting is 10s 9 Click Save Illustration ...

Page 29: ...es Max Idle Time Connection Check Interval Connection Check Times and MTU Description Default Operator Select Auto or Others for the Operator from the dropdown list Auto the system will detect the operator from the inserted SIM card and set up accordingly Others users can set up the operator manually AUTO User Name This name is provided by the operator When Auto is selected the system will set the...

Page 30: ...it will not redial Always online Redial Interval Set up the time to redial when the system fails to connect This will only be executed when the option Always online or On demand connection is selected 30 Redial Times Set up the maximum redial time 0 indicating infinity This will only be executed when the option Always online or On demand connection is selected 5 Max Idle Time Set up the maximum id...

Page 31: ...cription Default Operator Select Auto or Others for the Operator from the dropdown list Auto the system will detect the operator from the inserted SIM card and set up accordingly Others users can set up the operator manually AUTO User Name This name is provided by the operator When Auto is selected the system will set the name up automatically and users cannot change the setting N A Password This ...

Page 32: ...en the system fails to connect This will only be executed when the option Always online or On demand connection is selected 30 Redial Times Set up the maximum redial time 0 indicating infinity This will only be executed when the option Always online or On demand connection is selected 5 Max Idle Time Set up the maximum idle time When the idle time exceeds the set value the router will disconnect a...

Page 33: ... cards detected in the slot Normal SIM Card is inserted correctly and functions normally PIN Locked SIM Card is in the slot Need the associated PIN code to function PUK Locked Exceed the maximum PIN code input tries Need the correct PUK Personal Unlocking Key to unlock and resume normal operation N A Remaining attempts The allowable entry attempts is normally 3 times When the remaining attempts is...

Page 34: ...SIM card will be locked Once SIM card is blocked you will need PUK code to unlock it or find operator s help Operation Instruction Example Insert and unlock a PIN locked SIM card 1 Insert a SIM card locked by PIN codes into the SIM1 slot of the DX Shell 2 Login to DX system 3 Follow the path Network PIN Management to access SIM1 PIN Management 4 Enter the correct PIN code 5 Click Save and a unlock...

Page 35: ...DX 3001H9 V Industrial 3G WAN VPN Router User Manual 3 16 _3 3 2 5 WAN Setting ...

Page 36: ...twork Mask Set up the WAN network mask It s configurable when the mode is set to Static 0 0 0 0 Gateway Address Set up the gateway address It s configurable when the mode is set to Static 0 0 0 0 MTU Maximum Transmission Unit is the largest packet that can be transmitted over packet based networks 1500 Retrieve DNS Address By The Retrieve DNS Address Method is the same as the WAN Connection Mode t...

Page 37: ... this functionality Enable Address Lease Time To set up the address lease time so that a client doesn t hold an IP address indefinitely It allows for a mechanism to gracefully reuse DHCP addresses Options here are 1 to 3 days One day First IP Address To increase the number of addresses available to clients you can change the Start Address 192 168 1 100 Last IP Address To increase the number of add...

Page 38: ...r setting up the basic firewall settings including the SPI firewall switch WAN Ping response LAN SSH function and WAN SSH Description Default Firewall The SPI Firewall keeps track of the state of network connections travelling across it protecting your Internet connection against Internet threats and Denial of Service DoS Enable WAN Ping It creates a filter that your router not to respond to Ping ...

Page 39: ...the Internet adding an additional layer of security Disable DMZ Host IP Address Set up the IP address for the DMZ host N A 3 3 3 Port Forward This page is used for setting up the port forward including configuring the Network Services Service Name Protocol Public Port Server Port and Server IP Address Click the Add A Portforward Rule to add port forwarding entries to the router After clicking the ...

Page 40: ...is 1 65534 A Public port should be less than or equal to the server port Single Port Server Port Set up the server port for port forwarding The port range is 1 65534 A server port should be greater than or equal to the public port When the public port is set to a Single Port the server port can only be set to a Single Port When the public port is set to a Port Range the server port can be set to a...

Page 41: ...7170 3 3 4 Port Trigger This page is used for setting up the port trigger including configuring the Service Name Service User Service Type Trigger Port Protocol Role Begin Port End Port and Status Port triggering is port forwarding with an on off switch for the ports that have been forwarded Have data flown out of a trigger port or not by enabling or disabling this functionality Set up the time fo...

Page 42: ...ort triggering rule Any Address Service Type Set up the protocol type for port triggering TCP Triggering Port Set up the triggering port The port range is 1 65534 N A Protocol Role Set up the protocol type for the inbound connection TCP UDP Begin port Set up the starting port for the inbound connection The port range is 1 65534 N A End Port Set up the ending port for the inbound connection The por...

Page 43: ...e Disable to activate deactivate this functionality Click the Add An URL Address to block the URL After clicking the Add An URL Address you will see the following page Description Default URL Address Manually input the URL address that you d like to block for example www baidu com LAN IP Address Set up the LAN IP address that you d like to block Options are Any Address Single Address and Address R...

Page 44: ... see the following page Description Default MAC Address Manually input the MAC address that you d like to block Device Name Set up the device name corresponding to the set MAC address Status Enable disable the MAC Filter functionality Enable 3 3 7 IP Filter This page is used for setting up the IP Filter including configuring the Source IP Source Port Destination IP Destination Port Protocol and St...

Page 45: ...here the datagram came from Any Address Destination IP Set up the destination IP Any Address Destination Port Set up the destination port where the datagram is going to Any Address Protocol Set up the protocol type for the IP Filter TCP UDP Status Enable disable the URL Filter functionality Enable 3 3 8 Remote Web Manage Setting Users can access DX webpage with a public IP address via WAN to confi...

Page 46: ...heir own needs while the ports mostly used by other protocols are not recommended in order to prevent conflicts 8080 Operation Instruction Example Access DX webpage with a public IP address via WAN 1 Login to DX system 2 Follow the path NETWORK Connection 3 Set Primary Connection as WAN 4 Obtain an IP address from the ISP e g 123 123 123 1 5 Follow the path FIREWALL Remote Web Manage 6 Set Remote ...

Page 47: ...the configuration of VPN in this function device support IPSec OPENVPN PPTL L2TP and GRE VPN This function also provides certificate management and VPN log download 3 4 1 IPSec This page is used for set up the parameters of the IPSec VPN Currently system support IPSec client mode only ...

Page 48: ...PSec opposite end protects subnet and subnet mask i e 192 168 7 0 24 Local ID Local end identification IP and domain name are available Peer ID Opposite end identification IP and domain name are available IKE Encryption IKE phase encryption mode Options are 3DES DES AES 128bit and AES 256bit 3DES IKE Integrity IKE phase integrity solution Options are MD5 SHA1 and SHA2 256 MD5 IKE DH Group DH excha...

Page 49: ...ode of the IKE negotiation Options are Main and Aggressive Main IP Compress Enable or disable IP Payload compression Enabled DPD Detection Enable or disable DPD detection Enabled Time Interval Set time interval of DPD detection current unit is second 60 Timeout Set timeout of DPD detection current unit is second 60 DPD Action Set the action when detect the connection is drop Hold Authentication Ch...

Page 50: ...Chapter 3 Functions 3 31 _3 3 4 2 OPENVPN This page is used for set up the parameters of the OPENVPN Currently system support OPENVPN client mode only ...

Page 51: ...HA256 SHA512 and MD5 SHA1 nsCertType verification Enable or disable to support ns certificate type Disable LZO Compression Enable or disable use LZO compression for data transfer Disabled NAT Enable or disable Network Address Translation Disabled Remote Subnet Set up remote subnet MTU Set up the Maximum Transmission Unit of the tunnel 1500 Remote Subnet Mask Set up the remote subnet mask Tunnel UD...

Page 52: ...oose use Pre Shared key username password or certificate authentication option Pre Shared key Connection Status Display the current connection status 3 4 3 PPTP This page is used for set up the parameters of the PPTP VPN Currently system support PPTP client mode only ...

Page 53: ...address DNS PPTP Client DNS server address Authorization Mode Options are Auto PAP and CHAP Auto MPPE Enable or disable Microsoft Point to Point Encryption Disabled NAT Enable or disable Network Address Translation Disabled MTU Set up the Maximum Transmission Unit of the tunnel 1420 Connection Check Interval Set up the connection check interval Check the connectivity if the connection is lost it w...

Page 54: ...Functions 3 35 _3 Description Default Connection Status Display the current connection status 3 4 4 L2TP This page is used for set up the parameters of the L2TP VPN Currently system support L2TP client mode only ...

Page 55: ...address DNS PPTP Client DNS server address Authorization Mode Options are Auto PAP and CHAP Auto MPPE Enable or disable Microsoft Point to Point Encryption Disabled NAT Enable or disable Network Address Translation Disabled MTU Set up the Maximum Transmission Unit of the tunnel 1460 Connection Check Interval Set up the connection check interval Check the connectivity if the connection is lost it w...

Page 56: ...he Certificate Disabled Input The PSK Input the Pre Shared Key Select The Certificate Select the Certificate user maintain it by Certificate function IPSec Peer ID Input the peer ID of the IPSec Connection Status Display the current connection status 3 4 5 GRE This page is used for set up the parameters of the GRE VPN User can create up to 10 GRE tunnels ...

Page 57: ...e gateway local subnet Tunnel Key Input the secret key of the tunnel number only range is from 0 to 4294967296 Connection Check Interval Set up the connection check interval Check the connectivity if the connection is lost it will redial automatically 0 indicating not to check the connectivity 0 Connection Check Times Set up the connection check times 0 indicating infinity Once a disconnection is ...

Page 58: ...se in IPSec or OPENVPN function Description Default Group Name Setup the name of cert group it cannot be repeated with other cert group CA Import CA certificate file Public Cert Import public certificate file Private Cert Import public certificate file Peer Public Cert Import peer end public certificate file ...

Page 59: ...te Show the expired date of the cert 3 4 7 VPN Log This page is used for download specified VPN log Select the VPN type and click Download to save the log to local 3 5 Interface 3 5 1 RS232 RS232 Recommended Standard 232 is a telecommunication standard for binary serial communications between devices You can set up the configurations for RS232 including Baud Rate Data Bits Stop Bits Parity Bits an...

Page 60: ...the serial port Options are 1 and 2 1 Parity Bits Set up the parity bits for the serial port Options are None Odd and Even None Flow Control Set up the flow control Options are None XON XOFF RTS and CTS None MODBUS Mode Set up the communication mode for the device MODBUS RTU MODBUS Timeout Set up the timeout timer from 50ms to 2000ms If the set value is out of range it will be automatically change...

Page 61: ...600 Data Bits Set up the data bits for the serial port 8 Stop Bits Set up the stop bits for the serial port Options are 1 and 2 1 Parity Bits Set up the parity bits for the serial port Options are None Odd and Even None Flow Control Set up the flow control Options are None XON XOFF RTS and CTS None MODBUS Mode Set up the communication mode for the device MODBUS RTU MODBUS Timeout Set up the timeou...

Page 62: ...r 3 Functions 3 43 _3 3 5 4 FTP SFTP Server After the system collects the data and generate to file it can be upload to specified server by FTP SFTP Users can config the related parameter of the FTP SFTP here ...

Page 63: ...the file save path in server Account Set up the FTP SFTP account Password Set up the FTP SFTP password 3 6 System You can set up the system configurations including the User and device Management Time Configurations Firmware Upgrade Backup Restore System Reboot SD Card and Network Diagnosis 3 6 1 Name and Password This page is used for reset router name and change the administrator password The pa...

Page 64: ...t Session timeout is an expired time limit for a logged in user which has been inactive for a period of time Setting range is from 10 to 1440 minutes 30 3 6 2 Time Zone Settings This page is used for set the NTP server to synchronizing router clocks over network Use the dropdown list to select the server or manual input server IP domain Description Default The current time of device Here shows the...

Page 65: ...device will reboot after the upgrade is done N A 3 6 4 Backup Restore This page is used for backing up and restoring the configurations Description Default Backup Click Backup to save the device configurations on your computer N A Restore Click Chose file to select the backup file and then click Restore to restore the configurations The device configuration will be restored to the previous version...

Page 66: ...3 6 5 System Reboot This page is used for manually rebooting the system Click Restart Device and the system will reboot 3 6 6 SD Card This page is used for manage SD card Description Default Storage Limit Set the storage usage limitation of the SD card The oldest data will be overwriting when the storage usage matches the configured value 90 Format SD Card Click on the button to perform formatting...

Page 67: ... methods are Ping Test and Route Trace Description Default Diagnosing Method Select the Diagnosing Method options are Ping Test and Route Trace Ping Test Host Name IP Address Input the Host Name or the IP Address N A Start Click Start to start the network diagnosing While running the network diagnosing the settings cannot be changed N A ...

Reviews: