manualshive.com logo in svg

InHand VG814, User Manual

Share
Download
InHand VG814 User Manual Download Page 33

 

5.1.2 VLAN Port 

A virtual LAN (VLAN) comprises a group of logical devices and users. These devices 

and users are not limited by physical locations, but can be organized based on 

functions, departments, applications, and other factors. They communicate with 

each other as if they are on the same network segment, which contributes to the 

name of VLAN.

 

Method for adding a port of VLAN 2:

 

1. Click "Network >> VLAN >> Configure VLAN Parameters >> Add". Set the virtual IP 

address of the port of VLAN 2 and select the member port of VLAN 2 as required. 

Click Apply & Save.

 

Summary of Contents for VG814

Page 1: ...es not assume any disputes caused by the inconsistency of technical parameters The information in this document is subject to change without notice InHand reserves the right of final change and interp...

Page 2: ...esult in loss of data or device damage Notes contain detailed descriptions and helpful suggestions Technical support Support support inhandnetworks com Inquiry info inhandnetworks com T 1 703 348 2988...

Page 3: ...duction 4 2 3 1 VG814 railway version 4 3 Default Settings 7 4 Login and Network Access 9 4 1 Network Access via the Dialup Card 9 4 2 Network Access via Wi Fi 12 5 Network Management 14 5 1 Network 1...

Page 4: ...e Management 31 5 4 Services 33 5 4 1 DHCP Automatic IP Address Allocation 33 5 4 2 DNS 35 5 4 3 DDNS 36 5 4 4 SMS 37 5 4 5 GPS 38 5 4 6 QoS 41 5 4 7 Traffic Control 42 5 5 Firewall 43 5 5 1 ACL 43 5...

Page 5: ...Tunnel 59 5 8 3 IPsec Experts Configuration 60 5 8 4 New L2TPv2 Tunnel 60 5 8 5 New Port Mapping 61 6 APP Management 63 6 1 1 APP Status 63 6 1 2 APP Management 63 6 2 1 APP Docker function 65 7 Conne...

Page 6: ...guration Management 82 9 7 SNMP 83 9 7 1 SNMP 83 9 7 2 SnmpTrap Alarm 84 9 7 3 SnmpMibs 85 9 8 Alarm 86 9 9 System Logs 87 9 10 System Upgrade 89 9 11 System Reboot 89 10 Diagnostic Tools 91 1 Overvie...

Page 7: ...dical vehicles and logistics vehicles for fast mobile networks It is used with a cloud based remote vehicle management platform to provide ubiquitous accessible networks and uninterrupted operation su...

Page 8: ...correctly installed Blinking green The system operates properly Blinking red The system is faulty Blinking blue The system is being upgraded Cellular Steady off The dialup function is disabled Blinki...

Page 9: ...s strong signals signal strength 20 asu GNSS Steady off GNSS is disabled Blinking green Positioning is in progress Steady green Positioning is completed Wi Fi 2 4G Used as an AP Steady off The AP is d...

Page 10: ...AP Steady off The AP is disabled Blinking blue The AP operates properly Used as a STA Steady off The STA is disabled or no AP is associated Steady blue Connection fails due to a wrong password after...

Page 11: ...mmediately press and hold the Reset button After about 15s only the System indicator is steady red 2 When the System indicator turns off and becomes red again immediately release the Reset button 3 Wh...

Page 12: ...n 2 3 1 VG814 Road Bus version Antenna Panel Antenna and SIM GNSS Connector FAKRA C coded male Wi Fi Connector FAKRA I coded male Cellular Connector 4G version 2 FAKRA D coded male 5G version 4 FAKRA...

Page 13: ...Interface Panel Interface Info Gigabit Ethernet M12 X Coded female FMS M12 A Coded female Power M12 A Coded male ETX 20 Pin industrial segment AUX 18 Pin industrial segment...

Page 14: ...Channel GND CAN1_L RS485_A PIN 11 12 13 14 15 16 17 18 19 20 Signal GND DO3 PPS FWD GND RS232_TX1 R Channel Mic In CAN1_H RS485_B PIN 1 2 3 4 5 6 7 8 9 Signal DI1 DI2 DI3 DI4 DI5 DI6 DI7 DI8 GND PIN 1...

Page 15: ...2 3 2 VG814 railway version Antenna Panel Antenna and SIM GNSS Connector TNC Female Wi Fi Connector TNC Female Cellular Connector TNC Female SIM 2 Mini SIM 2FF...

Page 16: ...M12 X Coded female FMS M12 A Coded female Power M12 A Coded male ETX 20 Pin industrial segment AUX 18 Pin industrial segment PIN 1 2 3 4 5 6 7 8 9 10 Signal GND DO2 DO4 DO6 GND RS232_RX1 RS232_RX2 GND...

Page 17: ...5 6 7 8 9 Signal DI1 DI2 DI3 DI4 DI5 DI6 DI7 DI8 GND PIN 10 11 12 13 14 15 16 17 18 Signal GND GND GND GND DI9 DO1 DI10 DI11 GND 2 3 3 Power and FMS VG814 Road Bus version and Railway verion Power con...

Page 18: ...FMS Connector FMS PIN Signal 1 CAN_H 2 CAN_L 3 GND 4 NC...

Page 19: ...te positioning and inertial navigation service Enabled The GNSS indicator is steady green after positioning succeeds The inertial navigation function is enabled 3 On board diagnostics OBD Enabled The...

Page 20: ...nabled The IP address is 192 168 2 1 The subnet mask is 255 255 255 0 The DHCP server is enabled The IP address pool is 192 168 2 2 192 168 2 100 and IP addresses can be automatically allocated to dow...

Page 21: ...cates the power check interval in standby mode standby voltage 90 The standby threshold voltage is 9 V standby resume voltage 105 The threshold voltage for resuming normal operating in standby mode is...

Page 22: ...Baud rate 9600 Data bits 8 bits Parity bit none Stop bit 1 bit RS485 Baud rate 9600 Data bits 8 bits Parity bit none Stop bit 1 bit...

Page 23: ...as and connect the power supply and PC Insert the diversity dialup antenna when the dialup card has poor signals VG814 railway version appearance drawing of single cellular network module Note Before...

Page 24: ...ended Method 2 Configure a fixed IP address on the same network segment as the gateway address for the PC Step Select Use the following IP address enter any IP address in the range of 192 168 2 2 to 1...

Page 25: ......

Page 26: ...press Enter 4 Log in if a blocking prompt is displayed click Advanced Continue Default Username adm Password 123456 5 Click Network Cellular check Enable and click Apply Save If the network connectio...

Page 27: ......

Page 28: ...6 Ping a common website in China with a ping detection tool If there is data transmission the device has been successfully connected to the network...

Page 29: ...able the dual SIM function when two SIM cards are used 4 2 Network Access via Wi Fi 1 Complete the connection shown in the following figure Please connect the Wi Fi antenna before logging in to the de...

Page 30: ...IP address of the gateway Log in to the web page For details see 4 1 Network Access via the Dialup Card 3 Click Network Wi Fi and select Wi Fi 2 4G or Wi Fi 5G as a client Enter the name authenticati...

Page 31: ...4 Click Status The current network status is Connected and an IP address is obtained successfully indicating that the device has been successfully connected to the network via Wi Fi...

Page 32: ...to connect two different physical LANs over a bridge to enable storage and forwarding across LANs at the link layer Method for modifying the IP address of a bridge port and bridge members 1 Click Netw...

Page 33: ...on functions departments applications and other factors They communicate with each other as if they are on the same network segment which contributes to the name of VLAN Method for adding a port of VL...

Page 34: ...pes access and trunk An access port belongs to only one VLAN and is generally connected to a computer A trunk port can be used for multiple VLANs and can receive messages from or send messages to mult...

Page 35: ...ADSL Dialup PPPoE select the VG814 interface for connecting to the PPPoE server in the Dial Pool bar and click Add 2 Enter the user name password and pool ID of the PPPoE server in the PPPoE List bar...

Page 36: ...way connects to an AP for Internet access The status bar shows the current Wi Fi connection status of the gateway Method for providing network access services for wireless terminals when the gateway i...

Page 37: ...od for connecting to an AP for Internet access when VG814 is used as a client Select Client enter the Wi Fi SSID and key and click Apply Save 5 1 5 Loopback Port Method for adding multiple loopback po...

Page 38: ...ollect vehicle condition data obtain emission information and perform fault diagnosis in real time Vehicle condition data includes key parameters such as the fuel level mileage driving speed engine sp...

Page 39: ...automatically enabled to collect key vehicle condition data and fault code information Note The power supply and OBD cable of the gateway shall be installed when the vehicle is off The vehicle status...

Page 40: ...t containing detailed vehicle condition data and diagnostic information Click the Export OBD Report button to save the generated OBD data report to the local storage OBD Data Stream The real time vehi...

Page 41: ...of data packets The VPN can be realized by a server hardware or software or in other ways Compared with the traditional DDN private line or frame relay the VPN provides a more secure and convenient re...

Page 42: ...ing ensures the integrity and confidentiality of data and ensures the security of service transmission for users Scenario Data is transmitted between the subnet 192 168 1 0 24 of headquarters A and th...

Page 43: ...me Custom Name Custom Encapsulation ESP Encapsulation Same as that of gateway A Encryption algorithm AES128 Encryption algorithm Authentication method SHA1 Authentication method IPsec mode Tunnel mode...

Page 44: ...ation method Local subnet IP address of the subnet of gateway A Local subnet IP address of the subnet of gateway B Peer subnet IP address of the subnet of gateway B Peer subnet IP address of the subne...

Page 45: ...2 Access the IPsec status page The IPsec VPN is established successfully if the page is shown as below...

Page 46: ...lated datagrams can be transmitted on the IPv4 network Scenario GRE is enabled for VG814_A and VG814_B through the public network Method for enabling GRE for transmission channels of VG814_A and VG814...

Page 47: ...must be the same as that of VG814_A 5 3 3 L2TP The Layer 2 Tunneling Protocol L2TP is an industrial standard Internet tunneling protocol used to encrypt network data streams Method for settings when...

Page 48: ...to the interface connecting to the server Select L2TPV2 for Protocol and click Add 3 Set L2TPV2 tunnel parameters Enter the server s domain name or IP address for L2TP Server Pseudowire Class is the s...

Page 49: ...ion methods Authentication method Operation on the web page None No authentication is required User name password Enter the user name and password created on the OpenVPN server click VPN Certificate M...

Page 50: ...shared key user name and password created on the OpenVPN server click VPN Certificate Management and import the CA certificate public key and private key for authentication Method for settings when t...

Page 51: ...port the CA certificate public key and private key 3 Click Apply Save Return to the Status page and view the tunnel status 5 3 5 Certificate Management Certificates can be imported or exported on this...

Page 52: ...ble SCEP Simple Certificate Enrollment Protocol to apply for a certificate online Method for applying for a certificate for the gateway online 1 Click VPN Certificate Management Check Enable SCEP Simp...

Page 53: ...ic IP Address Allocation DHCP uses the client server communication mode The client submits a configuration application to the server and the server returns the IP address assigned to the client to rea...

Page 54: ...ient Click Services DHCP DHCP Client select the gateway interface and click Apply Save Method for enabling DHCP forwarding for the gateway DHCP forwarding is also referred to as a DHCP relay agent It...

Page 55: ...ck Services DNS DNS Server enter the address of the DNS server and click Apply Save Method for enabling DNS forwarding for the gateway As a DNS agent the gateway forwards DNS request and response mess...

Page 56: ...P address of the host to the server program on the server host through information transfer The server program provides the DDNS service and realizes dynamic domain name resolution In this way you can...

Page 57: ...sable is selected the DDNS service is not used 2 Select the gateway interface enter the name of the DDNS update method click Add and then click Apply Save to apply the DDNS update method to the gatewa...

Page 58: ...a SMS messages Click Services SMS and check Enable In the SMS Access Control bar set ID as required select permit for Action enter the phone number and click Apply Save When you activate the dialup po...

Page 59: ...GPS Position You can view the current positioning information Method for enabling GPS for the gateway Click Services Enable GPS check Enable and click Apply Save By default GPS is enabled for the gat...

Page 60: ...is used as a client Click Services GPS IP Forwarding check Enable select Client for Type enter the server address and port in the Destination IP Address bar click Add and then click Apply Save Method...

Page 61: ...hod for forwarding GPS data by VG814 through a serial port Click Services GPS Serial Forwarding check Enable and select a serial port type based on the data transmission port used Ensure that the baud...

Page 62: ...s It is a technology for solving problems such as network delays and blocking Method for setting the egress maximum bandwidth for the gateway through QoS control Click QoS Traffic Control Apply QoS se...

Page 63: ...he classifier name for Classifier set the guaranteed bandwidth maximum bandwidth and policy priority and click Add 3 Click QoS Traffic Control Apply QoS select the gateway interface enter the policy n...

Page 64: ...conditions and allow them to pass or discard them Common scenario By default all devices on the LAN bridge 1 can access the Internet except the device with the IP address of 192 168 2 100 Method for s...

Page 65: ...2 Return to the ACL page add the rule with the ID of 101 to the management rule of bridge 1 and click Add Click Apply Save...

Page 66: ...wall NAT and select DNAT for Action and Outside for Source Network Select IP PORT to IP PORT or INTERFACE PORT to IP PORT for Translation Type The public IP address obtained through dial up is not fix...

Page 67: ...can access the public network through the gateway only by using the IP address bound to the MAC address of the PC Method for binding the MAC address and IP address of a connected device 1 Click Firewa...

Page 68: ...Binding check Enable enter the MAC address and IP address of the connected device click Add and click Apply Save 5 6 Routing 5 6 1 Static Routing Set the destination network subnet mask and interface...

Page 69: ...Routing Information Protocol RIP is a simple internal dynamic routing protocol mainly used on small scale networks Method for enabling dynamic routing between VG814_A and VG814_B over RIP in the scena...

Page 70: ...2 Configure VG814_B...

Page 71: ...The Open Shortest Path First OSPF protocol is a link status based internal gateway protocol mainly used on large scale networks Method for enabling dynamic routing between VG814_A and VG814_B over OSP...

Page 72: ...eters for VG814_B 3 After the configuration is completed check whether PC 1 can communicate with PC 2 If yes the dynamic route is added successfully The OSPF route learned by VG814_B is shown in the f...

Page 73: ...amic Routing BGP check Enable and set AS number as required 2 In the Neighbor bar click Add enter the IP address 192 168 1 2 of VG814_B set AS number as required and click Apply Save 3 Enter a valid I...

Page 74: ...re the same as or corresponding to those of VG814_A 5 After the configuration is completed check whether PC 1 can communicate with PC 2 If yes the dynamic route is added successfully The BGP route lea...

Page 75: ...r adding an SLA entry for the gateway Click Link Backup SLA Add enter the detected IP address for Destination Address set other parameters as required click Add and then click Apply Save Timeout ms in...

Page 76: ...Click Link Backup Track Track set Index as required select sla interface or vrrp for Type set SLA VRRP ID based on the ID in the SLA list set Negative Delay s and Positive Delay s as required click A...

Page 77: ...network at the same time Gateway A acts as the host and gateway B acts as a backup for gateway A When gateway A fails gateway B temporarily replaces gateway A as the host 1 Networking requirement Host...

Page 78: ...ernet port connected to host A IP address of the port connected to host A Priority Work mode VG814_A bridge 1 10 5 16 80 110 Preemption VG814_B bridge 1 10 5 16 81 100 Preemption Method for settings w...

Page 79: ...ual IP address set the interface priority to 110 and click Add In the navigation tree click Link Backup VRRP Status and view the VRRP status 2 Configure VG814_B Click Link Backup VRRP set the interfac...

Page 80: ...is intended to enable VG814_A to continue to act as the master gateway after it recovers 5 7 4 Interface Backup Scenario VG814 accesses the Internet via Wi Fi and an interface backup is created to ena...

Page 81: ...Set the IP address to the host address that can be detected over ICMP on the public or private network for example the public IP address 118 122 120 22 Click Apply Save 3 Click Link Backup Track Track...

Page 82: ...io1 for Main Interface and cellular1 for Backup Interface and click Apply Save 5 Click Routing Static Routing Add and add two routes for network access through the dot11radio1 and cellular1 interfaces...

Page 83: ...switches to Wi Fi for Internet access 5 8 Wizards The Wizards module incorporates some common communication parameters simplifying the operations 5 8 1 New Cellular After a common network interface ca...

Page 84: ...ck Wizards New IPsec Tunnel set Map Interface to an interface bridge bridge interface cellular dialup interface dot11radio Wi Fi interface for which you want to establish a tunnel enter the peer IP ad...

Page 85: ...ble only for specific users To activate this function contact the technical support personnel 5 8 4 New L2TPv2 Tunnel Method for creating an L2TPv2 tunnel for the gateway Set the parameters of the L2T...

Page 86: ...utomatically maps the request to the internal machine on the corresponding LAN Scenario Users on the extranet cannot directly access a web server on the intranet In this case a port mapping can be cre...

Page 87: ...e gateway Click Wizards New Port Mapping Enter the gateway interface for Outside Interface gateway port for Service Port IP address of the internal host for Internal Address and port ID of the interna...

Page 88: ...quisite for using this feature is to install the python SDK 6 1 APP Status This page is to upgrade the SDK of Python to view the edge computing environment 6 1 2 APP Management This page opens app man...

Page 89: ...imported app check it in the app list and then click button Apply Save button For more guidance on app development please refer to the development documentation https www inhandnetworks com downlist...

Page 90: ...6 2 APP Docker function Enable the docker function of the gateway Click the Go to the docker management page default username admin password 12345678 Enter the docker management page...

Page 91: ......

Page 92: ...in real time according to the corresponding configuration of the gateway device to achieve the purpose of data interaction 6 3 1 MQTT protocol connection to cloud platform Step 1 click APP third part...

Page 93: ...tion is successful Note if the server needs authentication and encryption it needs to be enabled correspondingly Click app third party cloud platform mqtt enable select the address and port of the clo...

Page 94: ...loud platform Step 1 click app third party cloud platform tcp enable select the address and port of the cloud platform server click apply and save Step 2 click status If the connection status is conne...

Page 95: ...roxy messages When users need messages they use the mqtt client to subscribe to information Python App or Doker program use gateway info Subscribe to messages from the local mqtt agent Step 1 click ap...

Page 96: ...his document uses mqtt Take FX test tool as an example Step 3 click Connect If the icon turns green it means the connection is successful Then subscribe to the information according to the topic docum...

Page 97: ...the address and port of the cloud platform server click apply and save Step 2 use tools such as postman according to the interface document to call the interface to obtain data 1 Fill in the URL toke...

Page 98: ...6 6 Azure IoT Edge Click APP Azure IOT edge enable click apply and save Note this function item depends on docker The docker function should be opened before opening...

Page 99: ...ick APP User Data User Data Management then enter the name and corresponding value click add and finally click apply and save Step 2 click status If the data exists in the status bar it means that the...

Page 100: ...vice Manager check Device Manager Enable select the server address of the cloud platform enter the registered account and license plate number of the cloud platform and click Apply Save 2 Click Status...

Page 101: ...85_A PIN 11 12 13 14 15 16 17 18 19 20 Signal GND DO3 DO5 DO7 GND RS232_TX1 RS232_TX2 GND CAN_H RS485_B 8 1 DTU 1 Method for setting web pages when the gateway is used as a DTU Enable DTU 1 RS232 1 DT...

Page 102: ...3 Set the IP address and transmit protocol TCP or UDP of the server...

Page 103: ...4 Check that the gateway connected PC and the server exchange data through DTU...

Page 104: ...8 2 IO Ports The AUX port has 11 digital inputs ETX port has 7 digital inputs The digital parameters correspond to two states HIGH 1 and LOW 0...

Page 105: ...on Power input range DC 9V 36V DI at present this version takes the power supply voltage limit as the maximum voltage that is the input voltage range is DC 0V 36V It is determined as low L below 5V an...

Page 106: ...reach 450mA 4 When do pull up is used as output it can output high level signal The open circuit test voltage is 12V and the pull up resistance is 20K It has no load capacity VG814 vehicle version Po...

Page 107: ...e typical perfusion current can reach 450mA 4 When do pull up is used as output it can output high level signal The open circuit test voltage is the same as the power supply voltage The pull up resist...

Page 108: ...Dry node link mode need config DI1 pull up use CLI On is 1 Off is 0...

Page 109: ...9 System Management 9 1 System Click Administration System Status and view the current system and network status of the device Click Basic Setup and modify the system language and device name...

Page 110: ...d other devices set the system time accurately Manual time synchronization Click Administration System Time System Time Sync Time to ensure consistency between the gateway time and host time Alternati...

Page 111: ...Click Administration System Time SNTP Client or NTP Server and check Enable to synchronize the time between the gateway and the SNTP or NTP server After NTP is enabled the gateway can synchronize time...

Page 112: ...9 3 Management Services When the gateway requires the HTTP HTTPS TELNET and SSH functions click Administration Management Services enable the services and click Apply Save...

Page 113: ...It has full access rights for the gateway Common user A common user is created by the superuser It can view or modify gateway configurations Note You cannot delete the superuser adm or modify its user...

Page 114: ...sage of employees the accounting server must be configured AAA usually works in the client server structure which is highly scalable and is convenient for centralized management of user information as...

Page 115: ...d on UDP The Tacacs protocol is mainly used for AAA of end users and Point to Point Protocol PPP and virtual private dial up network VPDN access users Its typical application is to authenticate author...

Page 116: ...ering This results in low efficiency LDAP is equivalent to one table and requires only the user name and password with some other parameters which is quite simple It can meet the authentication requir...

Page 117: ...he authentication server Remote authentication is supported over Radius Tacacs and LDAP AAA authorization methods No authorization none No authorization is performed for users Local authorization loca...

Page 118: ...6 Configuration Management Method for importing configurations Click Administration Config Management Config Management Browse select a configuration file and click Import to import the configuration...

Page 119: ...tion steps the Device Manager platform enables you to manage and monitor InHand s hardware devices such as routers and gateways with convenience It can quickly integrate devices and manage them with j...

Page 120: ...atized the deployed Device Manager Cloud fill in the private deployment server IP or domain name Server Typy select Coustomer Secure Channel After checking it will be transmitted with SSL encryption R...

Page 121: ...Make sure the VG710 is connected to the Internet Step3 Login Device Manager cloud Check Gateways VG710 will auto login server For more usage reference manuals For more usage reference manual...

Page 122: ...s when normal working routines have been disrupted Support VPN networking in the way of subnet to subnet Step1 Register a user Global site hthttps ics inhandnetworks com Step2 Config Service Type InCo...

Page 123: ...Step3 Login InConnect service Check Gateways VG710 will auto login server Add VG710 SN to Server...

Page 124: ...business platform that provides enterprise level vehicle monitoring and management services for enterprise customers Smart Fleet can help you manage vehicles intelligently and efficiently break down v...

Page 125: ...vely solve the problems of data isolation collaboration bottlenecks and lack of management Step1 Register a user Global site https smartfleet cloud Step2 Config Service Type InVehicle Service Server A...

Page 126: ...Step3 Login InConnect service Check Gateways VG710 will auto login server...

Page 127: ...ling SNMP for VG814 Click Administration SNMP SNMP check Enable select v1c for v2c for SNMP Version and click Apply Save If v3c is selected the corresponding user and user group need to be configured...

Page 128: ...ors to the NMS anytime without the need of waiting for the polling of NMS The errors are reported to the NMS through traps Method for enabling SnmpTrap for the gateway Click Administration NMP SnmpTra...

Page 129: ...identified by a path starting from the root The management information base MIB is used to describe the hierarchical structure of the tree It is a set of standard variable definitions for the monitor...

Page 130: ...e recorded in alarm logs so that users can identify abnormalities and perform troubleshooting in time Alarm states Raise indicates that the alarm has been generated but not been confirmed Confirm indi...

Page 131: ...lly sends the alarm content to the destination email address via an email This function is not available for common users Set the sender mail address in Email Alarm and the receiver mail address in Ma...

Page 132: ...d on the System Log page The diagnose data file is encrypted because the gateway configuration information is downloaded together with the diagnose data You need to decrypt the file with the decryptio...

Page 133: ...file and click Upgrade Restart the system after the upgrade is completed Note During the software upgrade do not perform any operation on the web page otherwise the software upgrade may be interrupte...

Page 134: ......

Page 135: ...dump and Link Speed Test Ping It is used to detect the external network connection of the device Enter any common website in China for Host and click Ping If data transmission occurs the network is co...

Page 136: ...or bridge1 set Capture Number and click Start Capture Stop Capture Download Capture File Download wireshark from the browser to open the downloaded file and analyze the messages to understand the netw...

Page 137: ...Link Speed Test Upload and download files to test the link speed...

Page 138: ...11 Hardware installation The installation position is recommended to be installed in the air conditioning duct of the vehicle...

Reviews:

No comments

Brands by name

Popular brands

Load more brands