Lantronix Maestro E205XT02 User Manual Download Page 147

Page: 147 / 213

Network

E220 Series Cellular Router User Guide

147

Parameters

Description

Zone Forwarding

Select the zones between which the Zone forwarding rule will be
applicable.

Input

Select to accept or reject the inbound traffic to all the configured
zones.

Output

Select to accept or reject the outbound traffic from all the configured
zones.

Forward

Select to accept or reject the forwarded traffic from all the configured
zones.

Masquerading

Check to allow IP Masquerading.

MSS clamping

Check to allow MSS clamping.

Table 10.9-1: General Configuration for Firewall Zone

Summary of Contents for Maestro E205XT02

Page 1: ...E220 Series Cellular Router User Guide Part Number PMD 00018 Revision A October 2019 ...

Page 2: ... Drive Suite 100 Irvine CA 92618 USA Toll Free 800 526 8766 Phone 949 453 3990 Fax 949 453 3995 Technical Support Online www lantronix com support Sales Offices For a current list of our domestic and international sales offices go to the Lantronix web site at www lantronix com about us contact Disclaimer All information contained herein is provided AS IS Lantronix undertakes no obligation to updat...

Page 3: ...neral Public License is available at http www gnu org licenses The Python License is available at http cmpt165 csil sfu ca Python Docs license html Your use of each Open Source component or software is subject to the terms of the applicable license OPEN SOURCE SOFTWARE IS DISTRIBUTED WITHOUT ANY WARRANTY INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE SEE THE ...

Page 4: ...lt Configuration 10 LED Behavior 11 Logon Procedure 14 Common Icons and Buttons 15 Quick Setup 16 Status 19 Status 19 IPv4 Firewall 31 IPv6 Firewall 33 Wireless 38 Load 40 Traffic 41 Connection 46 System 48 General Settings 48 Logging 50 Language and Style 52 Router Password 53 SSH Access 54 ...

Page 5: ...DHCP Only for E206 78 CELLULAR 82 WAN 86 LAN 91 WWAN 100 Overview 106 Configuration 108 Advanced Settings 120 Add 127 General Settings 136 Resolv and Host file 138 TFTP Settings 139 Advanced Settings 140 General Setting 146 Port Forwarding 151 Traffic Rules 152 Custom Rules 155 Services 156 PPTP 158 IPSec Internet Protocol Security 162 L2TP 173 ...

Page 6: ...ellular Router User Guide 6 GRE 176 OpenVPN 178 SMS Configuration 182 Ethernet SMS 184 LAN 192 WAN 192 Cellular 194 Wi Fi 195 GPS 196 Sending Data 196 Data Sending Format 197 Wiring Diagrams 211 List of Acronym 212 ...

Page 7: ...G 3 8 RED GCF E225LITE 02 E224 EMEA LTE cat 1 3 8 20 same as E228 s E224 38K 38 Asia Pacific 3 5 8 28 3G b 1 5 8 RCM NCC E224 358S 158 E225 EMEA most of Asia Pacific 3G a 1 8 2G 3 8 RED GCF E225 02 World 1 2 5 8 2 3 5 8 JPA JRF NBTC E225 E228 Mk II EMEA LTE cat 4 1 3 7 8 20 28 3G c 2G 1 8 3 8 IZat gen 8C gpsOne RED GCF Apr 18 E228MKII 02 Asia Pacific 1 3 5 7 8 28 3G c 1 5 8 RCM KCC NCC May 18 E228...

Page 8: ...PTCRB AT T Wireless E214G 00 E215 EMEA most of Asia Pacific 3G a 1 8 2G 3 8 RED GCF E215 02 E216 Israel Australia New Zealand NTT docomo Thailand 3G b 1 5 8 N A NBTC Postel E216 E218 NTT docomo LTE cat 4 1 19 21 JPA JRF E218 1JL KDDI 1 11 18 E218 1BI Please consult us regarding the models or features shown in grey which are subject to MOQ and other considerations Uplink Downlink maximum data rates...

Page 9: ... Apple Safari 4 to access the Lantronix Web Admin Console DHCP client enabled in the computer to obtain a valid IP Address from router A How to Enable DHCP in Windows Navigate to Start Control Panel Network and Sharing Centre Click the existing Connection Network Connection Status dialog box appears click Properties Double click Internet Protocol Version 4 TCP IPv4 Internet Protocol Version 4 TCP ...

Page 10: ...enabled with WPA WPA2 TKIP key Parameter Details SSID Maestro E200 WPA Key W1rele Table 3 2 1 Default Wi Fi Credentials WPA WPA TKIP Default Basic Configuration WAN Ethernet Connection Automatic DHCP client LAN Ethernet Active DHCP with starting IP Address 192 168 1 100 with pool of 100 clients WAN as priority source of Internet with Cellular backup Cellular default Access Point Name APN is intern...

Page 11: ...0 Series Figure 3 3 1 Front Panel The top panel of Lantronix E200 and E220 Series Routers features 6 LEDs on the front to indicate critical system information Name Colour and State Description Alert OFF No alert device is running smoothly Red ON Hardware fault high temperature or problem with module Cellular Module reboot Linux Kernel booting Power OFF Power off Green ON Power on Signal OFF No sig...

Page 12: ...Flashing Traffic on Wi Fi network Blue ON Wi Fi network is up and activated Table 3 3 1 LED States and Description Other LEDs For E210 Series The top panel of Lantronix E200 and E220 Series Routers features 7 LEDs on the front to indicate critical system information Name Colour and State Description Alert OFF No alert device is running smoothly Red ON Hardware fault high temperature or problem wit...

Page 13: ... a roaming cellular network Amber ON Registered on home cellular network Activity OFF Cellular data service is not connected Amber Flashing Data Transfer over Cellular Network Amber ON Cellular data service is connected WI FI OFF Wi Fi network is inactive Blue Flashing Traffic on Wi Fi network Blue ON Wi Fi network is up and activated Table 3 3 2 LED States and Description ...

Page 14: ... computer to access Lantronix Router with LAN IP Address 192 168 1 1 For more information refer How to Enable DHCP Screen 5 1 Login Page Parameters Description Username Enter the Username admin Password Enter the Password If you are logging on for the first time after the installation please use the default password admin Note We strongly recommend you to change your login password Login Button Lo...

Page 15: ...f they are not saved and applied Save Apply Saves the new modified configuration and loading the configuration into the Router Reset Discards the unsaved configuration This allows the user to provide the configuration details again on the GUI page Add Add a field Delete Delete a field Reveal Hide Password Click to reveal and verify the password Click it again to hide the password and secure it ...

Page 16: ...will guide the administrator through the steps required to configure the basic parameters needed for the router to come up and start running Note Alternately an administrator can go to Network Settings and import and load a predefined settings file Screen 7 1a E200 Router Information Screen 7 2b E200 Router Information ...

Page 17: ...ellular Router User Guide 17 Network Setup Quick Setup Quick Setup Network Setup Basic network parameters for LAN WAN Cellular and Wi Fi can be configured from the Network Setup page Screen 7 2 Quick Start Network Configuration ...

Page 18: ...e wireless cellular network operator will provide the APN to their end users Enter the APN provided by the cellular network operator PIN SIM card Personal Identification Number PIN is used to lock the card preventing people from making unauthorized phone call or accessing cellular data services Enter the PIN of the SIM card Username Enter the login name The default Username for Lantronix E200 Rout...

Page 19: ...us Overview Overview page provides a quick and bird eye overview of all the important parameters of your Lantronix router that requires special attention Status Status Overview Status Status Overview page outlines the setting details of basic sub modules that must be configured for the Router Status Overview uses tables to display information The Status page provides information about System Cellu...

Page 20: ...xxxxx It is composed of 4 characters SKU E225 6 characters UID 071102 WAN GNSS Wi Fi 2x LAN SIM 6 character Module Name HL8548 14 characters Serial Number xxxxxxxxxxxxxx Comprises of HW PCB version 01 to 99 Lot number 01 to 99 Production date YYMMDD Unit number 4 digits Firmware Version Base Firmware Version number POE Power Over Ethernet is available in E220 series where the Router can be powered...

Page 21: ... 14 digit MEID number An IMEI number International Mobile Equipment Identity is a 15 or 17 digit unique numbers to identify GSM or UMTS mobile devices It is used to prevent call initiation from a misplaced or stolen GSM or UTMS device even if someone swaps out the device s SIM card A MEID number Mobile Equipment Identifier is used to identify a cell phone that utilizes the CDMA technology for wire...

Page 22: ...and there is no data communication Signal Strength Displays the current signal strength The signal strength range is 0 to 32 0 113 dBm or less 1 111 dBm 2 to 30 109 to 53 dBm 31 51dBm or greater Note Signal strength for a good cellular data connection must be 12 or above SIM Status Displays the availability of SIM card in SIM card slot Error SIM card is not inserted Ready SIM card is inserted Netw...

Page 23: ...ils of the mobile for identifying the user of a cellular network ESN Only for CDMA EVDO Routers Displays the ESN number of cellular module It must be subscribed for a Verizon account EVDO Revision Only for CDMA EVDO Routers Displays the Firmware revision number of the cellular module Cellular Module Info Only for E206 Displays the critical parameters from the cellular module Table 8 1 B Cellular S...

Page 24: ...able RAM memory Total Memory is summation of used memory free memory buffered memory and cached memory Grey highlight and the percentage value display the amount of used memory Free Free RAM memory Grey highlight and the percentage value display the amount of used memory Table 8 1 C1 Memory Status Overview Model RAM size Flash size E205XT02 32MB 32MB E206XT 32MB 32MB E220LITE 64MB 32MB E220 128MB ...

Page 25: ...ary DNS Server Note In case of WAN Access Wi Fi must be configured in client mode and connected to an Access Point Cellular Displays status of Cellular network data connection with following details IP IP Address of the Cellular Interface Gateway IP Address of the Cellular Interface Gateway DNS Two DNS IP Address Primary DNS Server and Secondary DNS Server WWAN Displays status of Wi Fi WWAN connec...

Page 26: ...igure below the interfaces marked in Green are live and connected while the ones in red are currently offline For more information refer Network Load Balancing Screen 8 1E MWAN Interface Live Status Parameters Description Multiple WAN Interface Live Status Indicates the current status of the interferes WAN WWAN 3G Offline The interfaces that are not connected to network are marked in RED Online Th...

Page 27: ...erview Parameters Description Host Name Name of the device laptop mobile etc that is connected to the router and has been leased an IPv4 Address by the router s DHCP server IPv4 Address IPv4 Address assigned to the device connected to the router MAC Address MAC address of the device connected to the router Leasetime remaining The remaining time for which the device can use the DHCP server leased I...

Page 28: ... Parameters Description Host Name Name of the device laptop mobile etc that is connected to the router and has been leased an IPv6 Address by the router s DHCPv6 server IPv6 Address IPv6 Address assigned to the device connected to the router DUID DUID Device Unique Identifier of the device connected to the router Leasetime remaining The remaining time for which the device can use the DHCPv6 sever ...

Page 29: ... 32 characters that uniquely names a Wireless Local Area Network WLAN Mode Displays whether the WLAN interface is currently configured as an Access Point Master or as a Client of a higher order Wi Fi network Note For Wi Fi WAN operation this should be Client Channel Wireless Local Area Network channel Bitrate Data transfer rate BSSID Displays Basic Service Set Identification BSSID 24 bit MAC Addre...

Page 30: ...1I Associated Stations Status Overview Parameters Description Associated Stations MAC Address MAC Address of the computers and or devices that are connected to the router Network Mode and Name of the network to which the device is connected Signal Signal strength in dBm Noise Noise in dBm RX Rate Data transfer rate at which the data is received TX Rate Data transfer rate at which the data is trans...

Page 31: ...Status E220 Series Cellular Router User Guide 31 Firewall Status Firewall IPv4 Firewall Status Firewall IPv4 Firewall Screen 8 2 1 IPv4 Firewall Status ...

Page 32: ...er of Firewall Rule Pkts Displays the number of accepted packets Traffic Displays the amount of traffic captured by the filter Target Displays the target action for the traffic processed for a respective rule Prot Displays the name of all the protocols configured in the Firewall Rule In Input Interface Out Output Interface Source Displays the source IPv4 Address Destination Displays the destinatio...

Page 33: ...irewall Click to reload the existing Firewall configuration of every interface Rule Displays the serial number of Firewall Rule Pkts Displays the number of accepted packets Traffic Displays the amount of traffic captured by the filter Target Displays the target Prot Displays the name of all the protocols configured in the Firewall Rule In Input Interface Out Output Interface Source Displays the so...

Page 34: ...Status E220 Series Cellular Router User Guide 34 Parameters Description Destination Displays the destination IPv6 Address Options Displays the destination IPv4 Address Table 8 2 2 IPv6 Firewall Status ...

Page 35: ...ess MAC Address Displays MAC Address of the peripheral device Interface Displays the interface name connected to the peripheral device Active IPv4 Routes Displays the active IPv4 network route information Network Displays the network Type used by the active IPv4 routes Target Displays the destination IPv4 Address IPv4 Gateway Displays the IPv4 Address Gateway used for traffic routing Metric Displa...

Page 36: ... IPv6 network route information Network Displays the network Type used by the active IPv4 routes Target Displays the destination IPv6 Address IPv6 Gateway Displays the IPv6 Address Gateway used for traffic routing Metric Displays the metric assigned to Interface Table 8 3 1 Routes Status ...

Page 37: ...etwork abuse The E2xx series router can either store logs locally or send logs to external syslog servers for storage and archival purposes The E2xx series router can log many different network activities and traffic including Firewall logs Interface Activity logs Administrator logs User Authentication logs The E2xx series router supports a single syslog servers for remote logging and it can be co...

Page 38: ...Status Realtime Graphs Wireless Wireless indicates the traffic on Wi Fi irrespective of Wi Fi being used as an access point LAN or Client WAN Wireless Graphs displays real time graph combined for Signal and Noise data transferred in real time Colors differentiate Signal and Noise data rates It also displays the Physical data transfer rate In addition shows the average and peak Signal and Noise and...

Page 39: ...eries Cellular Router User Guide 39 Parameters Description Details X axis Time Interval 1 minute Y axis Data Rate Mbit s Legends Blue Signal Red Noise Green Physical Rate Table 8 5 1 Real Time Wireless Traffic Graph ...

Page 40: ...CPU load and peak CPU load on the router Screen 8 4 Real Time Load Graph Parameters Description Load Graph shows the periodic average CPU load on the Router Details X axis Time Interval 1 minute Y axis CPU Load Percentage Legends Red 1 Minute Load Orange 5 Minute Load Yellow 15 Minute Load Table 8 5 2 Real Time Load Graph ...

Page 41: ...In addition shows the average and peak data transfer for upload and download individually A LAN Graph shows past three minutes average LAN traffic and peak LAN traffic on the router Screen 8 5 Real Time LAN Traffic Graph Parameters Description Traffic Inbound Outbound Graph shows the periodic average LAN Traffic on the Router Details X axis Time Interval 1 minute Y axis LAN Traffic kB s Legends Bl...

Page 42: ...traffic on the router Screen 8 6 Real Time WAN Traffic Graph Parameters Description Traffic Inbound Outbound Graph shows the periodic average WAN and Cellular Traffic on the Router Details X axis Time Interval 1 minute Y axis WAN and Cellular Traffic kB s Legends Blue Inbound Traffic Green Outbound Traffic Table 8 5 4 Real Time WAN Traffic Graph ...

Page 43: ...ffic on the router Screen 8 7 Real Time Cellular Traffic Graph Parameters Description Traffic Inbound Outbound Graph shows the periodic average Cellular Traffic on the Router Details X axis Time Interval 1 minute Y axis Tunnel Traffic kB s Legends Blue Inbound Traffic Green Outbound Traffic Table 8 5 5 Real Time Cellular Traffic Graph ...

Page 44: ...affic on the router Screen 8 8 Real Time Tunnel Traffic Graph Parameters Description Traffic Inbound Outbound Graph shows the periodic average Tunnel Traffic on the Router Details X axis Time Interval 1 minute Y axis Tunnel Traffic kB s Legends Blue Inbound Traffic Green Outbound Traffic Table 8 5 6 Real Time Tunnel Traffic Graph ...

Page 45: ...raffic on the router Screen 8 9 Real Time Wi Fi Traffic Graph Parameters Description Traffic Inbound Outbound Graph shows the periodic average Wi Fi Traffic on the Router Details X axis Time Interval 1 minute Y axis Wi Fi Traffic kB s Legends Blue Inbound Traffic Green Outbound Traffic Table 8 5 7 Real Time Wi Fi Traffic Graph ...

Page 46: ...ters Description Protocol Graph shows the periodic average of data transfer using specific protocols on the Router using the active connections in real time Details X axis Time Interval 1 minute Y axis Number of Active Connections Legends Blue UDP Green TCP Red Other Protocols Network Network connection type IPv4 or IPv6 Protocol Name of the protocol used for routing data Source Source IP Address ...

Page 47: ...Status E220 Series Cellular Router User Guide 47 Parameters Description Transfer Displays the total data transferred using the specific network connection Table 8 5 8 Real Time Connection Traffic Graph ...

Page 48: ...edules of the Router System Administration Software Backup Flash Firmware Reboot Systems System System General Settings System System General Settings The current date and time of the router s internal clock can be set locally to match the date time of your computer s browser or the router can be configured to synchronize its internal clock with an NTP server so that logs show the precise time and...

Page 49: ...page Timezone Select time zone according to the geographical region in which Router is deployed Time Synchronization GPS Time sync For The E2xx series router models which support GPS functionality you can sync the time with GPS Note GPS Antenna will be needed for GPS time sync NTP time sync Enable if you want Router to get time from an NTP server Note If NTP Server is activated the Router will upd...

Page 50: ...s and stores them in files or prints them Logging to a central syslog server facility helps in the aggregation of associated logs and alerts and provides protected long term storage This is useful for incident handling routine troubleshooting and historical analysis Screen 9 2 Syslog Configurations Parameters Description System log buffer size Enter the size of the buffer in Kilobytes KB to save l...

Page 51: ...ndicate errors immediate action may may not be necessary Warning A warning messages is displayed for a potential issue indicating to take an action An error may occur if no action is taken against the warning issued Error Displays the logs indicating an error condition Note For help with log errors please contact Lantronix Technical Support Critical Indicates failure in secondary system and must b...

Page 52: ...guage and Style Screen 9 3 Language and Style Configurations Parameters Description Language Select preferred language as English Default value is auto Design Select Bootstrap design of the user interface Default design selected is bootstrap Table 9 1 3 Language and Style Configurations ...

Page 53: ...pped with the default username password credentials set as admin This administrator is always authenticated locally i e by Router itself We recommend that you change the password for this username immediately after deployment Screen 9 4 Router Credential Configurations Parameters Description Password Specify the new administrator password Click to reset the password and re type Confirmation Confir...

Page 54: ...et parameters for Dropbear Instance for SSH Access and you can paste public SSH Keys one per line for SSH public key authentication By default the remote SSH access over WAN is disabled You can enable the remote SH access from Web Interface or alternately can send an SMS from a registered admin number to enable it You are required to use the SSH keys displayed on the webpage for SSH access Screen ...

Page 55: ...entication Select to allow authentication using SSH password By default it is disabled Gateway ports Select to allow remote hosts to connect to local SSH forwarded ports Add Click Add button to add an Interface Delete Click Delete button to delete the Interface SSH Keys Public SSH keys can be provided one per line for authenticating with SSH public key Note Public SSH keys are provided by default ...

Page 56: ...installing your own or third party application packages please contact Lantronix Technical Support Lantronix has its own list of packages which would be downloaded from D2Sphere For details on D2Sphere please contact your regional Lantronix Sales office Actions System Software Actions A Installed Screen 9 6 Software Installation and Installed Package Details Parameters Description Update lists Cli...

Page 57: ...s and install it Click OK initialize installation Filter Enter the keyword of the required package and click Find Package to search it from package repository servers Find package Click Find package button to search the package Status Installed Package Package name Displays the name of installed package Version Displays the version of installed package Table 9 3 1 Software Installation and Install...

Page 58: ... Available for Installation Parameters Description Install Click Install against respective Package to install it Package name Displays the name of package Version Displays the version of package Description Displays the description of package Table 9 3 2 Software Packages Available for Installation ...

Page 59: ...ation This configuration page provides the path to the router as to where it should go and update the packages All Lantronix packages would be updated from D2Sphere com however you can add your own http servers where you wish to upload your packages Screen 9 8 Software Configuration OPKG ...

Page 60: ...nd all other user related information Once the backup is taken you need to upload the file for restoring the backup Note Restoring older configuration leads to the loss of current configuration Flash Operation System Backup Flash Firmware Flash Operation A Actions Screen 9 9 Backup Restore and Flash Operations Parameters Description Backup Restore Download Backup Click Generate archive button to d...

Page 61: ...ct to retain the current configuration even after the new firmware re flash Known Behavior Some of the configurations like GUI Webpage details may not get updated until a factory reboot Image Click Flash image button to upload a sysupgrade compatible image for replacing the running firmware When the binary image is loaded bin file there is a file integrity check which is done via the use of md5 al...

Page 62: ...r User Guide 62 B Configurations Screen 9 10 Backup File Configurations Parameters Description Open list Click to open the list of files and directories that should be preserved during an upgrade Table 9 4 2 Backup File Configurations ...

Page 63: ...ion will be lost if you opt for this option Screen 9 11 System Reboot System Schedule Reboot Router will be rebooted periodically as per the schedule set and will reload the configuration You can set a reboot schedule on the basis of o Time of the day o Weekly at a particular time o Monthly on a particular date and time Screen 9 12 Schedule Reboot ...

Page 64: ... DHCP and DNS Hostnames Whitelist Blacklist Static Routes Diagnostics Firewall Interfaces Network Interface Interface sub module provides the overview of the interface configuration that includes the network configuration and interface status It further allows configuring and updating the each interface for general setups like selecting the protocol advanced settings like gateway configurations DN...

Page 65: ...ular and WWAN Interfaces MAC Address MAC Address of the physical interfaces Note MAC Address is displayed for LAN WAN WWAN and OpenVPN Interfaces RX Amount of data received in bytes over an Interface RX is displayed for all the Interfaces for a particular session TX Amount of data transmitted in bytes over an Interface TX is displayed for all the Interfaces for a particular session IPv4 Displays I...

Page 66: ...ic address IPv4 address Enter the IPv4 Address This IP Address must be used to access the Router The default IP Address is 198 162 1 1 for LAN IPv4 Netmask Select the IPv4 Netmask IPv4 Gateway Enter the IPv4 Address for Gateway In case of LAN if you do not provide any Gateway IP Address by default it will take the same IP Address as that of the IPv4 LAN IP Address 192 168 1 1 For WAN enter the IP ...

Page 67: ...nter the Hostname to be sent to a DHCP server when requesting for IP Address PPPoE PAP CHAP username Enter the PAP CHAP username Click to reset the password The default password is admin PAP CHAP password Enter the PAP CHAP password Access Concentrator Enter the access concentrator name Service Name Enter the service name Note Access Concentrator name and Service Name gets auto populated from PPPo...

Page 68: ... by your network operator PIN Enter the SIM PIN if any Username Enter the Username for APN access if exists Password Enter the Password Username for APN access if exists Authentication Enter the type of authentication that your cellular operator provided for PPP negotiation from PAP CHAP No Authentication CELLULAR E206 Priority Select the service from the available options that are AT T GenericGSM...

Page 69: ...arameters Description Interface Overview Network Displays the all the configured Network Interfaces The pre configured interfaces for the router are LAN CELLDHCP Only for E206 CELLULAR Only for E206 WAN WWAN Note Default Interfaces LAN Cellular WAN WWAN cannot be deleted When Wi Fi is configured as Client Interface WWAN will become active ...

Page 70: ...lick to add and configure the virtual interfaces Note Adding a Virtual Interface may require complex configuration modifications in load balancer settings For more details please visit Lantronix Technical Support Global Network Options IPv6 ULA Prefix Displays the IPv6 ULA Prefix Network Watchdog Enable Click to enable Network Watchdog Watchdog keeps a check on the connectivity of all WAN interfac...

Page 71: ...he new interface Enter the name of the new VPN Interface The name must include only alpha numeric characters and special character underscore _ Protocol of the new interface Select the protocol of the new Interface from the available options Static address DHCP Client Unmanaged PPtP PPPoE UMTS GPRS Only for E205 CELLULAR Only for E206 Create a bridge over multiple interface Click to enable creatin...

Page 72: ...r User Guide 72 Parameters Description Select more than one interface if a parameter creating a bridge over multiple interfaces is enabled Back to Overview Click to return to Interface Overview page Table 10 1 2 Configure VPN Interface ...

Page 73: ...tup Screen 10 3 General Configurations for 3G Interface Parameters Description Status Enter the following Interface details Uptime RX TX IPv4 Protocol Select the protocol with respect to the router model number Note Be absolutely sure that to select protocol i E205 UMTS GPRS ii E206 UMTS GPRS or EVDO ...

Page 74: ...allback The router connects to 4G network whenever available and fails over to 3G 2G in absence of a 4G network APN Enter the APN provided by your network operator PIN Enter the SIM PIN if any Old Pin Displays the previously set SIM PIN if any PAP CHAP Username Enter the Username for the Data connection if any PAP CHAP Password Enter the Password for the Data connection if any Click to reveal and ...

Page 75: ...tion Enable IPv6 negotiation on PPP link Click to enable IPv6 negotiation on PPP link Modem init timeout Enter the maximum wait time in seconds for the modem to become ready The default modem initiation timeout 20 seconds Use default gateway Click to configure a default gateway route None of the gateway routes are configured by default Use gateway metric Enter the gateway metric The default metric...

Page 76: ...efore sending an echo request to check whether the link is alive or not The LCP echo interval by default is 20 seconds Inactivity timeout The Router will wait for the LCP echo request response for the LCP Echo interval defined after every attempt It declares LCP link as closed if it does not receive response after this defined period of attempts Use 0 seconds to persist the connection Table 10 1 4...

Page 77: ...ce Select unspecified or create to remove the interface or assign a new zone to the interface respectively Enter the name of the new zone in the text box and click Save Apply button By default there are two Firewall Zones LAN and WAN Note Every interface must be assigned to a Firewall Zone Failure to assign an interface to a Firewall Zone will render the interface inactive Table 10 1 5 Firewall Co...

Page 78: ...ation of CELLDHCP Interface Parameters Description Status Enter the following Interface details RX TX Protocol Select the protocol with respect to the router model number To update the CELLULAR protocol select the protocol and click Switch Protocol button The default protocol is CELLULAR Table 10 1 6 General Configuration of CELLDHCP Interface ...

Page 79: ... Interface Parameters Description Bring up on boot Allows the 3G interface to be live after every reboot Bring up on boot for 3G interface is checked by default Use builtin IPv6 management Allows to use the built in IPv6 management configuration Enable IPv6 negotiation on Click to enable IPv6 negotiation on PPP link ...

Page 80: ...ess Use DNS server advertised by peer for 3G interface is checked by default LCP echo failure threshold Presume peer to be dead after configured LCP echo failures Use 0 to ignore failures LCP echo interval This is time the router should wait before sending an echo request to check whether the link is alive or not The LCP echo interval by default is 20 seconds Inactivity timeout The Router will wai...

Page 81: ...rs Description Create Assign firewall zone Select the firewall zone to be assigned to the interface Select unspecified or create to remove the interface or assign a new zone to the interface respectively Enter the name of the new zone in the text box and click Save Apply button Table 10 1 8 Firewall Configuration of CELLDHCP Interface ...

Page 82: ...f CELLULAR Interface Parameters Description Status Enter the following Interface details RX TX Protocol Select the protocol with respect to the router model number To update the CELLULAR protocol select the protocol and click Switch Protocol button The default protocol is CELLULAR Table 10 1 9 General Configuration of CELLULAR Interface ...

Page 83: ... boot Allows the 3G interface to be live after every reboot Bring up on boot for 3G interface is checked by default Use builtin IPv6 management Allows to use the built in IPv6 management configuration Enable IPv6 negotiation on PPP link Click to enable IPv6 negotiation on PPP link Modem init timeout Enter the maximum wait time in seconds for the modem to become ...

Page 84: ...nterface is checked by default LCP echo failure threshold Presume peer to be dead after configured LCP echo failures Use 0 to ignore failures LCP echo interval This is time the router should wait before sending an echo request to check whether the link is alive or not The LCP echo interval by default is 20 seconds Inactivity timeout The Router will wait for the LCP echo request response for the LC...

Page 85: ...rs Description Create Assign firewall zone Select the firewall zone to be assigned to the interface Select unspecified or create to remove the interface or assign a new zone to the interface respectively Enter the name of the new zone in the text box and click Save Apply button Table 10 1 11 Firewall Configuration of CELLULAR Interface ...

Page 86: ...face Parameters Description Status Enter the following Interface details Uptime MAC Address RX TX IPv4 Protocol Select the protocol with respect to the router model number To update the WAN protocol select the protocol and click Switch Protocol button DHCP client is the default protocol Table 10 1 12 General Configurations for WAN Interface ...

Page 87: ...arameters Description Bring up on boot Allows the WAN interface to be live after every reboot Bring up on boot for WAN interface is checked by default Use builtin IPv6 management Allows to use the built in IPv6 management configuration Use broadcast flag Check to use the broadcast flag This flag is generally used by the ISP s ...

Page 88: ... the gateway metric It ensures a separate routing entry for the respective interface in the main routing table The default metric is 3 Client ID to send when requesting DHCP Enter the Client ID that shall be sent when requesting DHCP Vendor Class to send when requesting DHCP To allocate DHCP IP Addresses based on Vendor Class Override MAC address Click to override the default MAC Address for the W...

Page 89: ... Bridge Interfaces Click to enable creating a bridge over multiple interfaces Enable STP Check to enable the Spanning Tree Protocol over the bridge Interface Select the interface to be configured Select more than one interface if parameter creating a bridge over multiple interfaces is enabled Table 10 1 14 Physical Configurations for WAN interface ...

Page 90: ...rs Description Create Assign firewall zone Select the firewall zone to be assigned to the interface Select unspecified or create to remove the interface or assign a new zone to the interface respectively Enter the name of the new zone in the text box and click Save Apply button Table 10 1 15 Firewall Configurations for WAN Interface ...

Page 91: ...Network E220 Series Cellular Router User Guide 91 LAN Network Interface LAN A General Setup Screen 10 16 General Configurations of LAN Interface ...

Page 92: ...wing Interface details Uptime MAC Address RX TX IPv4 IPv6 Protocol Select the protocol with respect to the router model number To update the WAN protocol select the protocol and click Switch Protocol button Static Address is the default protocol Table 10 1 16 General Configurations of LAN Interface ...

Page 93: ...d by default Use builtin IPv6 management Allows to use the built in IPv6 management configuration Override MAC address Click to override the default MAC Address for the WAN Interface On factory reset it will be set to default MAC address Overrride MTU Click to override the default MTU value Maximum Transmission Unit The default MTU is 1500 Use gateway metric Enter the gateway metric The default me...

Page 94: ... Bridge Interfaces Click to enable creating a bridge over multiple interfaces Enable STP Check to enable the Spanning Tree Protocol over the bridge Interface Select the interface to be configured Select more than one interface if parameter creating a bridge over multiple interfaces is enabled Table 10 1 18 Physical Configurations of LAN Interface ...

Page 95: ...rs Description Create Assign firewall zone Select the firewall zone to be assigned to the interface Select unspecified or create to remove the interface or assign a new zone to the interface respectively Enter the name of the new zone in the text box and click Save Apply button Table 10 1 19 Firewall Configurations of LAN Interface ...

Page 96: ... that client DHCP servers typically grant IP addresses to clients for a limited interval called a lease DHCP clients are responsible for renewing their IP address before that interval has expired and must stop using the address once the interval has expired if they have not been able to renew it DHCP is used for IPv4 and IPv6 While both versions serve the same purpose the details of the protocol f...

Page 97: ...hen the starting IP Address of the leased IP Address range is 192 168 1 100 Limit Maximum number of leased addresses that can be configured Example if your LAN IP Address is 192 168 1 1 the parameter Start is configured as 100 and parameter Limit is configured as 150 then a total of 150 devices are configured Thus the leased IP Address range is 192 168 1 100 to 192 168 1 249 Leasetime Remaining ti...

Page 98: ...ded only to the clients having the static IP Address Force Check to override the current configured Server and use DHCP server IPv4 Netmask Enter the IPv4 netmask This netmask will override the netmask used by the clients In normal scenario netmask is calculated from the subnet DHCP Options Define additional DHCP options Example 6 192 168 2 1 192 168 2 2 which advertises different DNS servers to c...

Page 99: ...t the DHCPv6 Service mode disabled server mode relay mode hybrid mode NDP Proxy Select the NDP mode disabled server mode relay mode hybrid mode DHCPv6 Mode Select the DHCPv6 Service mode Stateless Stateful Stateless Stateful Stateful only Always announce default router If ticked Announce as default router even if no public prefix is available Announced DNS servers Add the DNS servers Announced DNS...

Page 100: ...nter the following Interface details Uptime MAC Address RX TX IPv4 Protocol Select the protocol with respect to the router model number To update the WAN protocol select the protocol and click Switch Protocol button DHCP client is the default protocol Note We recommend to select either DHCP or Static Address PPPoE or PPPoATM Table 10 1 23 General Configuration for WWAN Interface ...

Page 101: ...Parameters Description Bring up on boot Allows the WAN interface to be live after every reboot Bring up on boot for WAN interface is checked by default Use builtin IPv6 management Allows to use the built in IPv6 management configuration Use broadcast flag Check to use the broadcast flag This flag is generally used by the ISP s ...

Page 102: ...ic Enter the gateway metric The Load Balancer uses these Metric values to determine priority of a WAN The default metric is 4 Client ID to send when requesting DHCP Enter the Client ID that shall be sent when requesting DHCP Vendor Class to send when requesting DHCP To allocate DHCP IP Addresses based on Vendor Class Override MAC address Click to override the default MAC Address for the WAN Interf...

Page 103: ... Bridge Interfaces Click to enable creating a bridge over multiple interfaces Enable STP Check to enable the Spanning Tree Protocol over the bridge Interface Select the interface to be configured Select more than one interface if parameter creating a bridge over multiple interfaces is enabled Table 10 1 25 Physical Configuration for WWAN Interface ...

Page 104: ...ers Description Create Assign firewall zone Select the firewall zone to be assigned to the interface Select unspecified or create to remove the interface or assign a new zone to the interface respectively Enter the name of the new zone in the text box and click Save Apply button Table 10 1 26 Firewall Configuration for WWAN Interface ...

Page 105: ...ach link is assigned a relative weight and Router distributes traffic across links in proportion to the ratio of weights assigned to individual link This weight determines how much traffic will pass through a particular link relative to the other link Administrator can set weight and define how the traffic should be directed to providers to best utilize their bandwidth investments Weight can be se...

Page 106: ...Interface Parameters Description MWAN Interface Live Status Displays the interface status Online Offline If more than two Interfaces are online and have same metric value traffic will be balance amongst the Interfaces MWAN Interface Systemlog Displays the event logs for interface status Active Inactive Table 10 2 1 Live Status Overview of MWAN Interface ...

Page 107: ... the available interfaces Interface Live Status Online Offline Each Policy Information Policy Name and interfaces configured for the policy Known Networks Destination IP Address Policy applied hits on the network Active Rules Rule configuration details that is Source IP Address Destination IP Address Protocols allowed Source Port number Destination Port number applied to the respective Policy hits...

Page 108: ...from the interface Tracking reliability Displays the number of tracking IP Addresses The acknowledgement responses from these tracking IP Addresses are considered to determine the Interface as up down Ping count Displays the number of ping packets that will be sent Ping timeout Time to wait for a response to ping request sent before declaring the ping failure The wait time is in seconds Ping inter...

Page 109: ...splays if an error has occurred during the Interface configuration Error messages are displayed a warnings Sort Click to sort the interface The same interface order will be reflected in the Overview page Table 10 2 3 Configuration details of MWAN Interface Note Configuring a large number of Tracking IP Adresses a high Ping count or a low Ping interval time will result in faster switchover but will...

Page 110: ...box blank to assume the interface is always online Tracking reliability Enter the number of response that must be received from tracking IP Addresses to consider the Interface as up Ping count Enter the number of ping packets that will be sent The default ping count is 1 Ping timeout Enter the time to wait for a response to ping request sent before declaring the interface unreachable The wait time...

Page 111: ...termine the reliability of the network connection through the interface The default value for successful attempts is 3 Metric Enter the Interface Metric The route with least metric is considered as best route The default metric assigned to the interface is 1 For load balancing between two interfaces both the interface must have the same metric value on the Member Configuration page Table 10 2 4 Mo...

Page 112: ...he lowest metric has the highest priority and all data is always routed through it Note If two or more interfaces have same metric configured and that metric is lowest compared to other interfaces then the data load is balanced and data load is distributed among the two interfaces in the ratio of the respective weight Weight Displays the weight assigned to the interface Sort Click to sort the inte...

Page 113: ...s Description Interface Displays the name of the interface Metric Enter the Interface Metric The route with least metric is considered as best route For load balancing between two interfaces both the interface must have the same metric value Weight Enter the Interface Weight The default metric assigned to the interface is 2 ...

Page 114: ...face must have the same metric value The route with higher weight carries more traffic Also the connections will be distributed amongst the interfaces with the same weight and not the actual data traffic Currently Configured Interfaces List of currently configured Interfaces Table 10 2 6 Modify the Member details of MWAN Interface ...

Page 115: ...terface members to which the policy is applied Last resort When all the policy members are offline use one of the available options for matching the traffic to policy Errors Displays if an error has occurred during the Policy configuration Error messages are displayed a warnings Sort Click to sort the policies Add Add a new policy Table 10 2 7 Policy Configuration details of MWAN Interface ...

Page 116: ...n Members used Select the interface to apply the policy on traffic passing through the interface Last Resort When all the policy members are offline use one of the following options for matching the traffic to policy Currently Configured Members Interfaces configured in the policy Table 10 2 8 Modify Policy of MWAN Interface ...

Page 117: ...tination address Displays the Destination IP Address Destination port Displays the Destination Port number Protocol Displays the protocols on which the rule is applicable Policy assigned Policy to be applied to the rule Errors Displays if an error has occurred during the rule configuration Error messages are displayed a warnings Sort Click to sort the interface Add Enter the name of the new rule T...

Page 118: ...Screen 10 36 Edit Rule details of MWAN Interface Parameters Description Source address Enter the Source IP Address Source Port Enter the Source Port number Destination address Enter the Destination IP Address Destination port Enter the Destination Port number ...

Page 119: ...ich ones are offline Online and offline interface status is based on the PING responses to a particular server at a particular time interval You can speed up the failover by sending PING packets in a short interval and you can add reliability by adding multiple server candidates Load Balancing is where two or more sources of Internet are used at the same time and the load which is essentially the ...

Page 120: ...the need to configure individual webpages A Hotplug Script Screen 10 37 Advance Configuration for Hotplug Script Parameters Description Hotplug Script Hotplug scripts is a Linux kernel program that is used when the following two events occurs Interface comes up Interface goes down Hotplug is automatically loads the drivers and runs arbitrary scripts based on events Table 10 2 11 Advance Configurat...

Page 121: ... Description MWAN Config Details Consolidated data of all the configured MWAN interfaces is available on this page You may modify and update the each interface configuration from this page manually instead of configuring it from respective MWAN Interface Advanced configuration page Table 10 2 12 Advance Configuration for MWAN Interfaces ...

Page 122: ...scription Network Config Details Consolidated data of all the configured Network interfaces is available on this page You may modify and update the each interface configuration from this page manually instead of configuring it from respective Network Interface Advanced configuration page Table 10 2 13 Advance Configuration for MWAN Network ...

Page 123: ...is reachable if a ping response is received else there is a conflict in the network configuration on the default gateway Check IP Rules Click to verify the Interface Check Routing Table Click to verify the routes present in the routing table of E200 Router Hotplug ifup Click to turn up the Interface using the hotplug script Note If the interface is already up the hotplug script will restart the In...

Page 124: ...llular Router User Guide 124 E Troubleshooting Screen 10 41 Data for Troubleshooting Parameters Description Troubleshooting Data Displays the all the configuration details of the Router Table 10 2 15 Data for Troubleshooting ...

Page 125: ...iew Displays the following details SSID A Service Set Identifier SSID is a public identifier of 32 characters that uniquely names a Wi Fi connection Mode Displays the mode of WLAN interface like Access Point Mode or Client Mode Bitrate Data transfer rate BSSID Displays Basic Service Set Identification BSSID 24 bit MAC Address of Wireless Access Point Encryption Displays the data encryption method ...

Page 126: ...arameters Description Signals Signal strength in dBm Noise Noise in dBm RX Rate Data transfer rate at which the data is received TX Rate Data transfer rate at which the data is transmitted Table 10 3 1 Wireless Connection and Associated Stations Overview ...

Page 127: ...niquely names a Wi Fi connection Mode Displays the mode of WLAN interface like Access Point Mode or Client Mode BSSID Displays Basic Service Set Identification BSSID 24 bit MAC Address of Wireless Access Point Encryption Displays the data encryption method Signal Strength Displays the signal strength in percentage Wireless network is enabled Click the Enable button to start the wireless network Ch...

Page 128: ...Network E220 Series Cellular Router User Guide 128 Parameters Description The default selection is 20dBm or 100mW Table 10 3 2 General Wireless Connection Configurations for a New Device ...

Page 129: ...efault HT mode value is 20Mhz Country Code Choose the country code corresponding to the country where the router is operational This ensures that the channels available in that country are enabled By choosing 00 World the router will select the appropriate channel in your country Distance Optimization The operation of a Wi Fi network can be optimized if you know the distance of the farthest machin...

Page 130: ...lue of Fragmentation Threshold may result in more efficient communication RTS CTS Threshold You can choose RTS CTS threshold between 0 to 2347 bytes typical value being 500 This setting is for advanced users It prevents collision of wireless packets particularly in case of hidden nodes or in a noisy environment Note In case of access point setting it is recommended not to use RTS CTS threshold Tab...

Page 131: ...l Wireless Connection Configurations for a New Interface Parameters Description Mode Select the Wi Fi Interface mode Available Options Access Point Client Ad Hoc 802 11s Pseudo Ad Hoc ahdemo Monitor Access Point WDS Client WDS The default mode is Access Point ESSID Displays the device name assigned to the router ...

Page 132: ...02 11n spec requires devices to support 802 11e Quality of Service QoS enhancements for wireless LAN in order to use HT High Throughput link rates i e higher than 54 Mbps WMM s Traffic Identifier TID field is key to aggregation mechanisms including block acknowledgement block ACK that enable 802 11n s high throughput rates Since WMM support is required for products to be certified for 802 11n WMM ...

Page 133: ...ble Options No Encryption WPA PSK WPA2 PSK Mixed mode WPA2 PSK WPA PSK WEP Shared Key WEP Open System The default encryption mode is WPA PSK WPA2 PSK Mixed mode Cipher Select the cipher suitable to the Router Available Options Auto Force CCMP AES Force TKIP Force TKIP and CCMP AES The default cipher is auto mode Key Enter the key respective to cipher type Table 10 3 5 Wireless Security Configurati...

Page 134: ...k to add the allowed MAC Address Allow all except listed Click to add the allowed MAC Address By default the MAC Address Filter is disabled Table 10 3 6 MAC Filter Configurations for a New Interface Concept of Wi Fi in E Series E Series treats Wi Fi as an interface By default there is on pre created interface for Wi Fi in access point mode You can create multiple interfaces at the same time and as...

Page 135: ... address a default route and one or more DNS server addresses from a DHCP server The DHCP client then uses this information to configure its host Once the configuration process is complete the host is able to communicate on the network For more details about basic setup of DHCP server on the LAN side refer Network LAN DHCP Server DHCP and DNS sub sections allows you to configure the advanced optio...

Page 136: ...Network E220 Series Cellular Router User Guide 136 General Settings Network DHCP and DNS General Settings Screen 10 48 General Configuration of DHCP Server and DNS Forwarder ...

Page 137: ...to the router and has been leased an IP Address by DHCP server IPv4 Address IPv4 Address assigned to the device connected to the router MAC Address MAC address of the device connected to the router Leasetime remaining Remaining time until which the device can use the DHCP server leased IP Address Active DHCPv6 Leases Hostname Name of the device that is connected to the router and has been leased a...

Page 138: ...eck to use etc ethers for configuring the DHCP Server Leasefile Enter the directory path name where given DHCP leases will be stored Ignore resolve file Check to ignore the resolved file Resolve file Enter the local DNS file Ignore Hosts file Check to ignore the hosts file Additional Hosts file Enter the additional host files Click to add more host fies Table 10 4 2 Resolv and Host File Configurat...

Page 139: ... DNS Parameters Description Server Settings Enable TFTP server Check to enable TFTP server By default the TFTP server is in disabled TFTP server root Enter the Root directory for the files served using TFTP Network boot image Enter the Filename of the boot image which is advertised to the clients Table 10 4 3 TFTP Configuration for DHCP and DNS ...

Page 140: ...tings Filter private Check to deny the reverse lookups for local networks Filter useless Check to deny the requests that cannot be answered by public name servers By default the request are forwarded Localize queries Check to localize hostname depending on the requesting subnet if multiple IP Addresses are available Expand hosts Check to add local domain suffix to names served from hosts files ...

Page 141: ...ueries The default DNS server port is 53 DNS query port Enter the fixed source port number for outbound DNS queries The default DNS query port is any Max DHCP leases Enter the maximum number of allowed DHCP leases that are active By default unlimited DHCP leases are allowed Max EDNS0 packet size Enter the maximum allowed size of EDNS 0 UDP packets The default EDNS 0 UDP packet size is 1280 Max con...

Page 142: ...Router User Guide 142 Hostnames Network Hostnames Screen 10 52 Hostnames Configuration Parameters Description Host entries Hostname Enter the Hostname IP address Enter the IP Address of the host Table 10 5 1 Hostnames Configuration ...

Page 143: ...ed operator networks and Blacklisted Operator networks The Router will always give priority to a Whitelisted network and will never connect to a Blacklisted Network You need to upload txt files using the upload tabs as given below Each line of the txt file should contain a network name or Network ID ...

Page 144: ...etwork if the target is a network IPv4 Netmask Displays the IPv4 Netmask of the static route IPv4 Gateway Displays the IPv4 Gateway of the static route Metric Displays the metric of the static route MTU Displays the configured Maximum Transmission Unit MTU Static IPv6 Routes Interface Displays the name of the interface assigned the static IPv6 Address Target Displays the target host IPv6 Address o...

Page 145: ...s on way to the destination system from the source system maximum hops and Total time taken by the packet to return measured in milliseconds Nslookup IP Address or fully qualified domain name that needs to be resolved Name lookup is used to query the query the Domain Name Service for information about domain names and IP addresses It sends a domain name query packet to a configured domain name sys...

Page 146: ...nterfaces to the Firewall Zones and define the rules of communication between them General Setting Network Firewall General Settings Screen 10 55 General Configuration for Firewall Zone Parameters Description General Settings Enable SYN flood protection Check to enable SYN flood protection SYN flood protection will enable spamming detection and block whenever there is a spam attack Drop invalid pa...

Page 147: ... to accept or reject the inbound traffic to all the configured zones Output Select to accept or reject the outbound traffic from all the configured zones Forward Select to accept or reject the forwarded traffic from all the configured zones Masquerading Check to allow IP Masquerading MSS clamping Check to allow MSS clamping Table 10 9 1 General Configuration for Firewall Zone ...

Page 148: ...Network E220 Series Cellular Router User Guide 148 A Add a General Settings Screen 10 56 General Configuration for Firewall Zone LAN ...

Page 149: ...ects Masquerading NAT of outgoing traffic is controlled on a per zone basis Note that masquerading is defined in the outgoing interface INPUT rules for a zone describe what happens to traffic trying to reach the router itself through an interface in that zone OUTPUT rules for a zone describe what happens to traffic originating from the router itself going through an interface in that zone FORWARD ...

Page 150: ...IPv6 IPv4 and IPv6 Restrict Masquerading to given source subnets Enter the source subnet to which the masquerading must be restricted Restricts Masquerading to given destination subnets Enter the destination subnet to which the masquerading must be restricted Force connection tracking Check to enable tracking of inbound connection to the router Enable logging on this zone Check to enable logging o...

Page 151: ...the WAN port to an internal LAN IP Address and port Also E200 Router provides advance port forwarding configurations where in addition to WAN port WAN IP Address can be mapped with LAN IP Address and LAN port Screen 10 58 Port Forwarding Configuration for Firewall Zone Parameters Description Port Forwards Name Displays the name of the Port Forwarding Rule Match Displays the WAN TCP UDP ports for m...

Page 152: ...Network E220 Series Cellular Router User Guide 152 Traffic Rules Network Firewall Traffic Rules Screen 10 59 Traffic Rule Overview for Firewall Zone ...

Page 153: ...affic to the open port UDP Allows only UDP traffic to the open port TCP UDP Allows both TCP and UDP traffic to the open port External port Enter the Port Number that must be opened New forward rule Name Enter the name of the Forwarding Rule that will be used for forwarding traffic between two Firewall Zones Source zone Select the source firewall zone Destination zone Select the destination firewal...

Page 154: ...he source port Table 10 9 5 Traffic Rule Overview for Firewall Zone What can be achieved out of Traffic Rules Block redirect generic data types for example ICMP DHCP requests etc Block certain MAC addresses on the LAN side Block communication with one or more public IP addresses Block communication with all except one or more IP address Open specific ports on WAN side DMZ rules and zone creation ...

Page 155: ...E220 Series Cellular Router User Guide 155 Custom Rules Network Firewall Custom Rules Screen 10 60 Custom Rules Configuration for Firewall Zone You can configure customized rules for Firewall using shell script ...

Page 156: ...ces E220 is equipped with features like SMS configuration GPS and digital I O Services are the set of features complimenting the routing features These features are VPN Agents SMS DOTA Serial GPS Last Gasp Content Filtering Reporting Agent Events Dynamic DNS ...

Page 157: ...etween the two endpoints Similarly the intermediate hops are also not aware that they are carrying the network packets that are traversing the tunnel The tunnel may optionally compress and or encrypt the data providing enhanced performance and some measure of security The table compares the type of VPN supported by various Routers VPN E205 E206 E228 E225 E224 E225LITE PPTP Y Y Y Y Y Y L2TP Y Y Y Y...

Page 158: ...pping and managing of VPN tunnel and the data inside the tunnel by encrypting and maintaining the connection It stores the data within a PPP packet which are then further stored inside IP Packets to be used for their destination PPTP encrypts and compresses these packets using PPP based protocols such as PAP and CHAP PPTP uses GRE General Routing Encapsulation to send receive data Parameters Descr...

Page 159: ...Description Interface Select the interface to configure PPTP WAN WWAN 3G VPN Server Enter the DNS Name or Public IP Address of the VPN Server for PPTP connection PAP CHAP username Enter the Username for PAP CHAP encryption PAP CHAP password Enter the Password for PAP CHAP encryption Table 11 1 1 General Configurations for PPTP Interface ...

Page 160: ...Use DNS server advertised by peer Allows advertising the DNS server address Use DNS server advertised by peer for PPTP interface is checked by default LCP echo failure threshold Presume peer to be dead after configured LCP echo failures Use 0 to ignore failures LCP echo interval This is time the router should wait before sending an echo request to check whether the link is alive or not The LCP ech...

Page 161: ... for the LCP Echo interval defined after every attempt It declares LCP link as closed if it does not receive response after this defined period of attempts Use 0 seconds to persist the connection Table 11 1 2 Advanced Configurations for PPTP Note Enabling PPTP will also enable a 20mins PPTP watchdog which will reboot the router in absence of an active PPTP connection for a period of 20 mins ...

Page 162: ...ronix Router E220 uses IPSec standard i e IPSec protocol to protect traffic In IPSec the identity of communicating users is checked with the user authentication based on Digital Certificates public keys or Pre shared Keys IPSec is used for both Gateway to Gateway VPN connection and Client to Gateway VPN connection Click Add button on IPSec page Select the type of IPSec VPN connection and click Add...

Page 163: ...y IPSec VPN connection Enable Check to enable the connection Remote IPSec Gateway Enter the IP Address or domain name of the Remote IPSec Gateway server Remote Address Enter the IP Address of the remote network for use on the VPN connection Remote ID Enter the Domain Name of the remote network for use on the VPN connection Interface Select the interface to configure IPSec WAN WWAN 3G ...

Page 164: ...an active interface as defined in Load Balancer policies Local Address Enter the IP Address and subnet mask of local network for use on the VPN connection Local ID Enter the Domain Name of the local network for use on the VPN connection Key Mode Select the type of Key mode in use for VPN connection Preshared Key RSA Keys Preshared Key Enter the Preshared key The peer uses the key to authenticate e...

Page 165: ...Settings Parameters Description Key Exchange Select the mode of encryption key exchange between two communicating peers IKEV1 IKEV2 The default mode of Key Exchange is IKEV1 IKE Encryption Select the cipher type to use for the Internet Key Exchange IKE Any MD5 SHA1 ...

Page 166: ...sired Diffie Hellman group to use Any Group 1 768 Group 2 1024 Group 5 1536 Group 14 2048 Group 15 3072 Group 16 4096 Group 15 6144 Group 16 8192 Higher groups are more secure but also require longer to generate key The group Any is selected by default IPSec Encryption Select the type of IPSec encryption for VPN connection Any MD5 SHA1 SHA2 The cipher type Any is the default IPSec Encryption IPSec...

Page 167: ...roup Any is selected by default DPD Keep Alive Time Enter the time in seconds for interval between Dead Peer Detection keep alive messages DPD Timeout Enter the time in seconds of no response from peer before Dead Peer Detection times out IKE Re key Time Enter the time in seconds between changes of the encryption key To disable changing the key set it to 0 SA Life Time Enter the time in seconds fo...

Page 168: ...ame of the Remote IPSec Gateway server Remote ID Enter the Domain Name of the remote network for use on the VPN connection Interface Select the interface to configure IPSec WAN WWAN 3G Auto Selecting a particular interface will bind the IPSec tunnel to that particular interaface Selecting Auto means that the IPSec tunnel will be created over an active interface as defined in Load Balancer policies...

Page 169: ...er User Guide 169 Parameters Description Local ID Enter the Domain Name of the local network for use on the VPN connection Preshared Key Enter the Preshared key The peer uses the key to authenticate each other from Internet Key Exchange ...

Page 170: ...tings Parameters Description Key Exchange Select the mode of encryption key exchange between two communicating peers IKEV1 IKEV2 The default mode of Key Exchange is IKEV1 IKE Encryption Select the cipher type to use for the Internet Key Exchange IKE Any MD5 SHA1 SHA2 ...

Page 171: ...ed Diffie Hellman group to use Any Group 1 768 Group 2 1024 Group 5 1536 Group 14 2048 Group 15 3072 Group 16 4096 Group 15 6144 Group 16 8192 Higher groups are more secure but also require longer to generate key The group Any is selected by default IPSec Encryption Select the type of IPSec encryption for VPN connection Any MD5 SHA1 SHA2 The cipher type Any is the default IPSec Encryption IPSec Ha...

Page 172: ...roup Any is selected by default DPD Keep Alive Time Enter the time in seconds for interval between Dead Peer Detection keep alive messages DPD Timeout Enter the time in seconds of no response from peer before Dead Peer Detection times out IKE Re key Time Enter the time in seconds between changes of the encryption key To disable changing the key set it to 0 SA Life Time Enter the time in seconds fo...

Page 173: ...rk Interface L2TP Parameters Description Interface Overview Profile Name Displays the all the configured L2TP Interfaces The pre configured interfaces for the router are L2TP1 Status Displays the following Interface details RX TX Actions Select the action to be taken for the Interface Connect Connects the interface or reconnects the already connected interface Stop Stops the Interface Edit Click t...

Page 174: ...the L2TP tunnel to that particular interaface Selecting Auto means that the L2TP tunnel will be created over an active interface as defined in Load Balancer policies Address Will display the IP address of the interface using which L2TP tunnel has been created LNS Server Enter the DNS Name or Public IP Address of the VPN Server for L2TP connection username Enter the Username password Enter the Pass...

Page 175: ...s are configured by default If this is not checked the traffic will not be routed via L2TP tunnel unless specific static routes are configured Use gateway metric Enter the gateway metric The default metric is 0 MTU If you wish to define your MTU size you can Blank will mean auto MTU size Keepalive The router will send keep alive packets to the L2TP server at the configured interval ...

Page 176: ...3 Softwares Parameters Description Interface Overview Profile Name Displays the all the configured GRE Interfaces The pre configured interfaces for the router are GRE1 Status Displays the following Interface details RX TX Actions Select the action to be taken for the Interface Connect Connects the interface or reconnects the already connected interface Stop Stops the Interface Edit Click to edit t...

Page 177: ...e interface to configure PPTP WAN WWAN 3G Unlike other VPNs GRE cannot move from one interface to another It needs to be binded to a particular interface GRE Server Address Enter the IP Address or domain name of the Remote GRE server Local Tunnel Address Address to assign to the local GRE tunnel Remote Tunnel Address Address at the remote host Router A GRE tunnel TTL ...

Page 178: ... The server configuration has the ability to push certain network configuration options to the clients These include IP addresses routing commands and a few connection options E220 series supports Open VPN client Server and Pass Through A Open VPN Client You can access the Open VPN client in Services Open VPN Open VPN Client will attach itself to the configured Open VPN server over any available W...

Page 179: ...lse No Start Stop Click to start or stop the OpenVPN instance Port Displays the port number This port is for communication between the server listening and client Protocol Displays the protocol used for communication The available protocols are TCP and UDP The default protocol is UDP Add Configure a customize configuration for server or client Table 11 1 3 OpenVPN Service Configuration B Edit Scre...

Page 180: ...ent Check to enable the OpenVPN client mode and disable the OpenVPN server mode Note Only OpenVPN Client mode is supported in Router Firmware Version Lantronix E205 2 0 0 and Lantronix E206 2 0 0 client_to_client Check to facilitate communication between the Clients connected over the same VPN Table 11 1 4 OpenVPN Service Configuration Agents Services Agents Agents are customized applications load...

Page 181: ...e selected agent LAN IP in dotted form Enter the IP Address of remote field device LAN PORT Enter the Port number of remote field device WAN IP in dotted form Enter the IP Address of the M2M Gateway WAN PORT Enter the Port number of the M2M Gateway Enable WAN Backup IP Click to enable the backup Gateway Server Enter the IP Address of backup M2M Gateway Enter the Port number of backup M2M Gateway T...

Page 182: ... Configuration SMS diagnostic let you configure up to 4 admins to receive diagnostic information of the router after a command is send by SMS International number format is as follow countrycode phonenumber without a preceding special character plus E g 919876543210 Screen 11 6 SMS Service Configurations ...

Page 183: ...aracter plus preceding it If no number is configured than the router will accept SMS from any number List of Commands Command name Command AT REBOOT 1 Reboot reboot the modem AT CELLDIAG Cell diagnostics will give you IMEI CREG COP CSIG AT LANDIAG LAN diagnostics Will give LAN IP address AT WANDIAG Wired WAN diagnostics AT WANPING IPA Wired WAN ping will ping the wired WAN interface AT LANPING IPA...

Page 184: ... you need to open a TCP client connection on LAN IP and configured port Once the connection is created you need to issue the following commands To send an SMS AT SENDSMS Mobile Number with Country Code Message with CTRL D To read an incoming SMS AT READSMS ALL or SMS ID Enter To delete and SMS AT DELSMS ALL or SMS ID Enter The internal SMS buffer is 10 messages meaning 11th incoming SMS will be ov...

Page 185: ...Services E220 Series Cellular Router User Guide 185 Note To activate this feature you need to first select enable and save and apply the settings as shown below ...

Page 186: ...lick to check for available updates on D2Sphere Custom Server Settings If customer server is not configured DOTA service will configure D2Sphere server HTTP HTTPS Server Select the type of your custom server URL Enter the IP URL of custom DOTA server Filename Username Password Enter the name of the File to be accessed for updates and credentials of the server Timeout in Minutes Enter the time in m...

Page 187: ...r Guide 187 Parameters Description firmware file from the server The default number of retries is 3 Table 11 4 1 DOTA Service Configuration Note DOTA can also be triggered using SMS by sending an SMS AT DOTA 1 from a registered Mobile Number ...

Page 188: ...the hardware you can configure RS485 in half duplex or full duplex mode If RS485 is selected in half duplex mode you need to connect short B pin to Z pin A pin to Y pin For more details please refer section 13 1 Screen 12 5a Serial Configuration Parameters Description Serial Configuration Baud Rate Select a baud rate from the dropdown lis 230400 115200 57600 38400 19200 9600 ...

Page 189: ...e is even or odd They are used for detecting error Select the parity bit Odd Even None The default data rate is None Stop bit Select the number of stop bits 1 2 The default stop bit is 1 Mode Select the mode of serial communication Transparent Transparent mode of communication do not alter any data structure before or during the data communication Modbus RTU or Modbus TCP It converts the Modbus RT...

Page 190: ...t either via TCP or UDP using any of the available TCP interfaces If a dynamic IP SIM is inserted in the Router the router needs to be configured in client mode sending data to an external WAN or internal LAN server If a static IP SIM is inserted in the router the router needs to be configured in server mode listening either on an external WAN IP or an internal LAN IP Content Filtering Services Co...

Page 191: ...enied access to the network service Screen 12 6a Content Filtering Parameters Description Enable Enable content filtering service Filter File Click Browse button to browse and select the plain text file with domain names or URL s to be filtered For Example to block www xyzabc com and www cbazyx com the content of the test file should be xyzabc on the first line cbazyx on the second line ...

Page 192: ...device management server using TCP UDP HTTP HTTPS protocol Information to be obtained from the Router are grouped as below LAN WAN Cellular Wi Fi GPS Device Info LAN Services Reporting Agent LAN LAN reporting agent provides real time analysis by providing information of status uptime IP data usage device information Further it allows to select the reporting agent and to enable sending the data to ...

Page 193: ...User Guide 193 WAN reporting agent provides real time analysis by providing information of status uptime IP gateway DNS data usage device information Further it allows to select the reporting agent and to enable sending the data to server ...

Page 194: ...ent Cellular Cellular reporting agent provides real time analysis by providing information of status uptime IP data usage RSSI roaming status operator name network status IMSI device information Further it allows to select the reporting agent and to enable sending the data to server ...

Page 195: ...porting Agent Wi Fi Wi Fi reporting agent provides real time analysis by providing information of status uptime IP gateway DNS data usage Wi Fi client information device information Further it allows to select the reporting agent and to enable sending the data to server ...

Page 196: ... to server Sending Data Services Reporting Agent Enable data Send Captured data can be sent to any server using TCP UDP HTTP HTTPS When sending data over TCP a custom start of frame and end of frame sequence can be defined Back up server can be configured The router will start to send data to the back up server if it fails to send data to the main device management server 3 times It will then cont...

Page 197: ... Status N A Operator Name N A Network Status Not Registered IMSI ERROR Wifi Status Enabled Wifi IP IPv4 192 169 2 116 Wifi Uptime Seconds 383 Wifi Gateway 192 169 2 1 Wifi DNS 192 169 2 1 Wifi TX bytes 14135074 Wifi RX bytes 34397774 Wifi Client Info MAC IP TX RX 6C 19 8F 0B 7A 78 192 169 2 1 305 5209 Time GMT Latitude d egree mmsss Longitude degree mmsss Altitude in meters Model E225LITE Kernel V...

Page 198: ...Registered IMSI ERROR Wifi Status Enabled Wifi IP IPv4 192 169 2 116 Wifi Uptime Seconds 383 Wifi Gateway 192 169 2 1 Wifi DNS 192 169 2 1 Wifi TX bytes 14135074 Wifi RX bytes 34397774 WifiClientInfo MAC IP TX RX 6C 19 8F 0B 7A 78 192 169 2 1 305 5209 Time GMT Latitude degree mmsss Longitude degree mmsss Altitude in meters Model E225LITE Kernel Version 3 10 49 Local Time Tue Mar 14 06 11 25 GMT 20...

Page 199: ...s Screen 11 7 GPS Service Configurations Parameters Description GPS Parameters Time Time in hhmms sss Latitude Latitude in ddmm mmmm N S Indicator N North or S South Longitude Longitude in ddmm mmmm E W Indicator E East Position Fix Indicator Indicates 0 Fix not available or invalid 1 GPS SPS Mode fix valid 2 Differential GPS SPS Mode fix valid 3 to 5 Not supported 6 Dead Reckoning Mode fix valid ...

Page 200: ...tocol Select the TCP protocol only IP1 Enter the primary IP Address Port1 Enter the Port Number Backup Click to allow using of backup IP in case sending of the data fails using primary IP Address In case the backup IP Address fails primary IP Address will be used Three such trials will be executed IP2 Enter the backup IP Address Port2 Enter the backup Port Number Send Interval in Minute Time inter...

Page 201: ... 1 32 Example 21 Elevation Channel 1 Maximum 90 Example 50 degrees Azimuth Channel True Range 0 359 Example 358 degrees SNR C N0 Range 0 99 null when not tracking Example 38dBHz Satellite ID Channel 4 Range 1 32 Example 18 Elevation Channel 4 Maximum 90 Example 51 degrees Azimuth Channel 4 True Range 0 359 Example 319 degrees SNR C N0 Range 0 99 null when not tracking Example 31 dBHz Checksum 71 C...

Page 202: ...r invalid 1 GPS SPS Mode fix valid 2 Differential GPS SPS Mode fix valid 3 to 5 Not supported 6 Dead Reckoning Mode fix valid Example 1 Satellite Used Number of satellite used to receive GPS signals The range for the number of satellite used is 0 to 12 Example 05 HDOP Horizontal Dilution of Precision Example 1 0 MSL Altitude Altitude in meters Example 43 1 meters Units Example M meters Geoid Seper...

Page 203: ... speed Example 0 0 km hr Units Kilometers per hour Example K Mode Indicates A Autonomous D DGPS E DR N Output Data Not Valid R Course Position 2 3 4 S Simulator Example A Checksum 20 CR LF End of message termination Table 11 8 4 VTG Data Format 1 CSR does not support magnetic declination All course over ground data are geodetic WGS84 directions 2 Position was calculated based on one or more of the...

Page 204: ...ample 0 0 Course Over Ground True Measured in degrees Example 0 0 Date Date in ddmmyy Example 150915 Magnetic Variation 2 E East or W West Measured in degrees Example 0 3 East West Indicator 2 W West Example W Mode Indicates A Autonomous D DGPS E DR N Output Data Not Valid R Course Position 3 4 5 S Simulator Example A Checksum 1E CR LF End of message termination Table 11 8 5 RMC Data Format 1 A va...

Page 205: ... ground data are geodetic WGS84 directions relative to true North 3 Position was calculated based on one or more of the SVs having their states derived from almanac parameters as opposed to ephemerides 4 This feature is supported in the GSD4e product only 5 This feature is supported in the GSD4e product version 1 1 0 and later ...

Page 206: ...ble 2 2D 4 SVs used 3 3D 3 SVs used Example 3 Satellite Used 1 SV on Channel 1 Example 18 Satellite Used 1 SV on Channel 2 Example 20 Satellite Used SV on Channel 12 PDOP 2 Position Dilution of Precision Example 2 4 HDOP 2 Horizontal Dilution of Precision Example 1 0 VDOP 2 Vertical Dilution of Precision Example 2 2 Checksum 33 CR LF End of message termination Table 11 8 6 GSA Data Format 1 Satell...

Page 207: ...escription EVENT Enable Click to enable the events Event Select the event from the available options DIO_H High voltage state on DI DIO_L Low voltage state on DI DIO is by default are pulled up to high voltage level Action Select the action from options SMS to send the event details using the SMS Switch Digital Output Change the state of Digital Output Reboot To reboot the router Mobile Number Ent...

Page 208: ... from various locations on the Internet Powered by Dynamic Domain Name System DDNS you can now access your router server by the domain name not the dynamic IP address DDNS will tie a domain name e g mydomainname com to your dynamic IP Address You can add a new dynamic DNS by choosing a name and clicking on ADD button Screen 11 9 Dynamic DNS Configurations Parameters Description MYDDNS Enable Dynam...

Page 209: ...eceived from DynDNS service provider Source of IP address Select the IP Address source Network Interface and URL If Network is chosen select the type of Network from LAN WAN 3G WWAN OpenVPN and PPTP If Interface is chosen select one interface from the available interfaces If URL is chosen enter the URL to be used The source IP Address by default is URL URL URL to find the WAN side IP Address of th...

Page 210: ...le if time interval is set to 10 minutes after every 10 minutes DDNS force updates the IP address of your server Retry on fail every Enter the time in minutes seconds after which the Router must retry to update the obtained WN IP Address with the DNS name or the host name Retry unit Select the unit for the configure retrial time Table 11 10 1 Dynamic DNS Configurations ...

Page 211: ...Wiring Diagrams E220 Series Cellular Router User Guide 211 Wiring Diagrams RS485 Wiring diagram Half Duplex Left RS485 Full Duplex Right Power over Ethernet ...

Page 212: ...ynDNS DDNS Dynamic DNS DDNS is a method of automatically updating a name server in the Domain Name System DNS often in real time with the active DNS configuration of its configured hostnames addresses or other information EDGE Enhanced Data rates for GSM Evolution EDGE is a digital mobile phone technology that allows improved data transmission rates as a backward compatible extension of GSM GPRS G...

Page 213: ...it across a traffic routing device for the purpose of remapping one IP address space into another NTP Network Time Protocol is a networking protocol for clock synchronization between computer systems over packet switched variable latency data networks PPPoE Point to Point Protocol over Ethernet PPTP Point to Point Tunneling Protocol PSK Pre shared key QoS Quality of Service RF Radio Frequency Rx R...

Search results

Summary of Contents for Maestro E205XT02

Reviews:

Lantronix Maestro E205XT02, User Manual, Page: 147 / 213

Search results

Summary of Contents for Maestro E205XT02

Reviews: