NetModule NB224x User Manual Download | Manualshive

Page: 33 / 99

background image

User Manual NetBox Wireless Router

33/99

4-Jan-10
manual_netbox_e

3.1.5.1.3

Access Control for VPN Tunnels and WAN from LAN

Having the Ethernet ports split into multiple LANs this filter manages the access from any LAN port to any
VPN Tunnel. Use the option “specify permitted networks” to permit access to certain networks. Those net-
works might be any peer networks of a VPN tunnel or the WAN interface to get direct Internet access.

«
...
31
32
33
34
35
...
»

Summary of Contents for NB224x

Page 1: ...1 985 25 11 1998 2010 NetModule AG Niederwangen Switzerland All Rights Reserved Copying this document or parts of it is prohibited User Manual NetBox Wireless Routers Document version 1 1 1 Date publi...

Page 2: ...less Router 2 99 4 Jan 10 manual_netbox_e Overview 1 Introduction 5 2 Installation 16 3 Configuration 17 4 Software Interfaces 89 5 Troubleshooting 95 6 Customer Service 96 A Appendix Connectors and C...

Page 3: ...of the SIM Card s 16 2 2 2 Installation of the UMTS GSM Antenna 16 2 2 3 Installation of the GPS Antenna 16 2 2 4 Installation of the Local Area Network 16 2 2 5 Installation of the Power Supply 16 3...

Page 4: ...ervice Interface 91 4 3 1 Command Set 92 4 3 2 Responses 93 4 3 3 Examples 94 5 Troubleshooting 95 5 1 Error Messages 95 5 2 System Log and Log Files 95 5 3 Network Protocol Analyzer 95 6 Customer Ser...

Page 5: ...ivalent power supply which must have a limited and SELV circuit output The NetBox is designed for indoor use only Do not expose the communication module to extreme ambient conditions Protect the commu...

Page 6: ...of this Wireless LAN product requires a general authorization Please check with http www comunicazioni it for more details NetModule declares that under our own responsability the products NetBox Wir...

Page 7: ...requency Range MHz Power EIRP Restrictions 2400 0 2483 5 100 mW 20 dBm Only for indoor applications 5150 5250 100 mW 20 dBm Permitted to use nly for indoor applications closed industrial and warehouse...

Page 8: ...rdware varieties NB1310 NB2210 NB2500 2G 3G 2G optional WLAN optional optional SIM card sockets 1 1 2 Ethernet ports 1 1 4 Serial ports 1 1 GPS receiver optional optional Digital inputs outputs 2 2 Ta...

Page 9: ...GSM or UMTS network Ethernet Ethernet port For power injection see A 1 1 on page 97 Ethernet Status green on A solid light indicates a connected Ethernet link flashing A flashing light indicates Ether...

Page 10: ...d and or does not start up blinking fastly Restart triggered by watchdog Front Signal Strength green on 1 LED on weak signal 2 LEDs on medium signal 3 LEDs on strong signal 4 LEDs on very strong signa...

Page 11: ...5 seconds Top Power Voltage feed connector 9 28 VDC Top IN1 IN2 Digital inputs 2 optoisolated digital inputs Please consider the polarity Top OUT1 OUT2 Digital outputs 2 relay outputs Bottom ETH Ethe...

Page 12: ...eak signal 2 LEDs on medium signal 3 LEDs on strong signal 4 LEDs on very strong signal off No or insufficient signal running Software update Front Mobile UMTS GSM green blinking slowly Mobile connect...

Page 13: ...or Impedance 50 Ohm Connector SMA female Back COM RJ45 port Sub D 9 on earlier models RS232 default or RS485 configurable Back Ethernet Ports 4 port Ethernet switch The default IP address is set to 19...

Page 14: ...Control Stateful Inspection Firewall Virtual Private Networking VPN section 3 1 6 VPN OpenVPN Client PPTP Server IPsec Peer Dial in Server Services section 3 1 7 Services COM Server Tunneling of the s...

Page 15: ...s include Universal Mobile Telecommunications System UMTS High Speed Packet Access HSPA includ ing HSDPA and HSUPA General Packet Radio Service GPRS Enhanced Data rates for GSM Evolution EDGE Circuit...

Page 16: ...IM socket 1 Make sure the SIM is suitable for data transmission 2 2 2 Installation of the UMTS GSM Antenna NetBox Wireless Routers will only operate reliably over the GSM network if there is a good si...

Page 17: ...onfiguration steps usually include 1 defining the admin password 2 entering the PIN code for the SIM card 3 configuring the Access Point Name APN 4 start the mobile connection Step Description 1 Pleas...

Page 18: ...User Manual NetBox Wireless Router 18 99 4 Jan 10 manual_netbox_e 3 1 1 Initial Access to the Web Manager and Password Definition...

Page 19: ...ual NetBox Wireless Router 19 99 4 Jan 10 manual_netbox_e 3 1 2 Home This page gives you a system overview It helps you when initially setting up device but also functions as dashboard during normal o...

Page 20: ...etBox LAN Usually the first address within that LAN is assigned to the router Provide that IP address and net mask in dot decimal notation or use the defaults Depending on the Ethernet mode chosen abo...

Page 21: ...User Manual NetBox Wireless Router 21 99 4 Jan 10 manual_netbox_e 3 1 3 1 3 Links Settings For every Ethernet port the link negotiation can be set In most cases auto negotiation will work...

Page 22: ...ethod waits for traffic coming from the LAN going to the WAN The permanent method keeps up the mobile interface In case of link loss the connection is reestablished Redial attempts Number of redialing...

Page 23: ...hod Use Challenge Handshake Authentication Protocol CHAP or Password Au thentication Protocol PAP Call to ISDN Ckeck this if the connection is made to an ISDN modem IP Header Compression Enable or dis...

Page 24: ...pecified in bytes that a computer or communications device can handle in a single unfragmented piece For optimum communications the num ber of bytes in the data segment and the headers must not add up...

Page 25: ...Administration WLAN is enabled or disabled on this page 3 1 3 3 2 WLAN Configuration Currently the WLAN interface can be operated as wlan client only In this mode it is designed to provide an alterna...

Page 26: ...since a SIM card thief could misuse an unprotected SIM Parameter Description PIN code The PIN code for the SIM card PIN protection Enable or disable PIN protection SMS center number Number of Short M...

Page 27: ...e a SIM card thief could misuse an unprotected SIM Parameter Description PIN code The PIN code for the SIM card PIN protection Enable or disable PIN protection SMS center number Number of Short Messag...

Page 28: ...each frame Parity This property specifies the parity used with every frame that is transmitted or re ceived Stop bits This property specifies the number of stop bits used to indicate the end of a fra...

Page 29: ...9 4 Jan 10 manual_netbox_e 3 1 3 7 Digital I O NB2210 only The digital inputs and outputs can be monitored and controlled via the Web Manager or by software See section 4 2 Digital I O Server NB2210 f...

Page 30: ...sses in dotted decimal or host network names Mask The network s IP address together with its address mask defines a range of IP addresses For IP subnets the address mask is referred to as the subnet m...

Page 31: ...Router 31 99 4 Jan 10 manual_netbox_e 3 1 5 Firewall 3 1 5 1 Access Control 3 1 5 1 1 Access Control for Local Host The access from the WAN interface to NetBox itself and its local applications can be...

Page 32: ...om WAN and OpenVPN The access from the WAN interface to a defined Exposed Host can be managed using this filter The same can be done on the second tab for the OpenVPN interface Parameter Description E...

Page 33: ...from LAN Having the Ethernet ports split into multiple LANs this filter manages the access from any LAN port to any VPN Tunnel Use the option specify permitted networks to permit access to certain net...

Page 34: ...ow an external user to reach a port on a private IP address inside the LAN from the outside Internet Parameter Description NAPT status Enable or disable NAPT NAPT needs to be enabled normally i e when...

Page 35: ...ed normally i e when using Internet Access Internet Ser vice Providers will not route your private LAN Addresses Service name User defined Name for the NAPT entry External port External IP port mobile...

Page 36: ...User Manual NetBox Wireless Router 36 99 4 Jan 10 manual_netbox_e 3 1 5 3 Expert Mode Upload text files with firewall rules...

Page 37: ...rver and client certificates Prepare the OpenVPN certificate files Use the tools and documentation that come with the OpenVPN soft ware A Guide to basic RSA Key Management is found under http openvpn...

Page 38: ...tive configuration Authentication method Use certificates or user name password First server address First OpenVPN server address First server port First OpenVPN server port default 1194 Second server...

Page 39: ...The configuration upload takes a zip file which may in clude one or more OpenVPN client configurations Typically such a zip file includes files such as client conf The client configuration file referr...

Page 40: ...onfiguration files To configure multiple server processes i e multiple conf files each referring to its certificates you should place all files belonging to a single tunnel process into a subfolder or...

Page 41: ...cations by authenticating and or encrypting each IP packet in a data stream IPsec also includes protocols for cryptographic key estab lishment IPsec can be used to create Virtual Private Networks VPN...

Page 42: ...User Manual NetBox Wireless Router 42 99 4 Jan 10 manual_netbox_e...

Page 43: ...hentication and dynamic IP addresses aggressive mode is the only choice IKE encryption IKE encryption method IKE hash IKE hash method IKE Diffie Hellman Group IKE Diffie Hellman Group Perfect Forward...

Page 44: ...ar because it is easy to configure and it was the first VPN protocol that was supported by Microsoft Dial up Networking Users that are allowed to connect to the PPTP server are defined under the secti...

Page 45: ...meter Description Dial in administrative status The Dial in server can be enabled or disabled Consequently the device will allow incoming calls or not Dial in operational status Shows whether a connec...

Page 46: ...escription COM server status The COM server modbus gateway can be enabled or disabled 3 1 7 1 2 COM Server Configuration Parameter Description Port The port that is used by this application Protocol o...

Page 47: ...ing monitor application Parameter Description Host 1 Reference host 1 to which IP connectivity is checked by sending probes Host 2 Reference host 2 to which IP connectivity is checked by sending probe...

Page 48: ...Server Administration Parameter Description DHCP server status The Dynamic Host Configuration Protocol DHCP server can be enabled or dis abled If it is enabled it will answer to DHCP requests of devic...

Page 49: ...1 7 4 DNS Proxy Server The DNS Proxy enabled NetBox forwards DNS requests to the DNS server provided by the mobile operator Devices within the NetBox LAN may be configured to use NetBox as DNS server...

Page 50: ...or disable the Dynamic DNS Client 3 1 7 5 2 Dynamic DNS Configuration Parameter Description Service type DynDNS Service according Dynamic Network Services Inc www dyndns com Please consult www dyndns...

Page 51: ...disabled Disabling the e mail client means that no notification via e mail will be performed 3 1 7 8 E mail Client Configuration Parameter Description From e mail address Sender s e mail address Serv...

Page 52: ...PPP connection down PPP connection failure PPP failure to connect Error reported PPP_ERR See manual and logs to identify the problem VPN connection established VPN connection up tun0 tap0 interface a...

Page 53: ...l Output 1 off Output change OUT1 is Off changed from DIO_SOURCE Digital Output 2 on Output change OUT2 is On changed from DIO_SOURCE Digital Output 2 off Output change OUT2 is Off changed from DIO_SO...

Page 54: ...SMS or e mail event notifications It is possible to create groups and fill them with users and other groups This mechanism let you send event notifications to multiple destinations users 3 1 7 9 3 Ev...

Page 55: ...f such a data package is separated into two lines The first line contains GPS data in the GPGGA format the second line contains GPRMC data For more information on the GPS data stream see chapter 4 1 P...

Page 56: ...ection state up down current IP address of the mobile ppp interface current IP address of the VPN interface if enabled connect This will initiate a Dial out connection over GSM and the VPN connection...

Page 57: ...14 SNMP Agent Parameter Description SNMP agent status Enable or disable the SNMP agent Listening Port SNMP agent port Community An SNMP community is the group that devices and management sta tions run...

Page 58: ...trap threshold The startup trap is implemented using the standard coldStart warmStart traps The system shutdown trap is sent when the system is rebooted via the reboot function of the web interface o...

Page 59: ...high speed interactive communication between the subscribers and applications across a GSM Network A sample USSD service is the bill status service accessed by dialing 141 or similar numbers in betwee...

Page 60: ...nage the user accounts on the device The user admin is a built in power user that has permission to access both the Web Manager and the Dial in server Any other user defined user only has permission f...

Page 61: ...ificate based authentication client crt certificate_mode OpenVPN client certificate file client key certificate_mode OpenVPN private key file templateProfiles updating provider database 3 1 8 3 1 Auto...

Page 62: ...dential_mode ca crt certificate_mode client crt certificate_mode client key certificate_mode templateProfiles if available New configuration files The following files are acceppted for upload cfg max...

Page 63: ...ation will be lost This action can also be initiated by pressing and holding the Reset button for at least five seconds The factory reset will also set the IP address of the Ethernet interface to 192...

Page 64: ...User Manual NetBox Wireless Router 64 99 4 Jan 10 manual_netbox_e 3 1 8 4 2 Network Debugging...

Page 65: ...can be viewed a downloaded here Please provide these files when placing a support request 3 1 8 4 4 System Log Redirection Parameter Description IP address The host where the syslog messages will be f...

Page 66: ...User Manual NetBox Wireless Router 66 99 4 Jan 10 manual_netbox_e 3 1 8 4 5 Restart...

Page 67: ...User Manual NetBox Wireless Router 67 99 4 Jan 10 manual_netbox_e 3 1 8 4 6 Tech Support...

Page 68: ...over packet switched variable latency data networks NetBox can synchronize its system time with a NTP server If enabled time synchronisation is done after the mobile interface is up but before starti...

Page 69: ...of configuration and inac cessability of the device 3 1 8 5 1 Automatic Software Update Parameter Description Status Enable disable automatic software update Time of day Every day at this time NetBox...

Page 70: ...tware to NetBox You will need an appropriate server Server IP address and path Provide a host name and a path to a server which hosts the new software For local updates TFTP this value is limited to 2...

Page 71: ...TP server 192 168 1 2 as follows 6 Press Apply and confirm by pressing OK Wait until the update is complete See the progress bar Do not unplug the power connector during the update 7 Check the results...

Page 72: ...1 CLI Overview The Command Line Interface mainly provides functions to read and write values of the NetBox configuration parameters In addition the CLI provides functions to query status information C...

Page 73: ...the queried parameter Note cli get invalidKey returns no error message cli set cli set is used to assign values to configuration parameters Arguments include all configuration keys as described in cha...

Page 74: ...Note The following commands are identical cli select automatic and cli select automatic sim1 Note The following commands have the same effect cli select automatic sim1 and cli set networkselection mo...

Page 75: ...of the OpenVPN connection cli status overview networks ipsec_state show the state of the IPsec connection cli status overview networks pptp_state show the state of the PPTP server cli status overview...

Page 76: ...sing the Web Manager to get all parameters listed NetModule has defined some types of parameters that are often used The table below shows the defined parameter types In addition other types of parame...

Page 77: ...selection sim2 network_lai void numeric value LAI Select the network provider defined by the supplied Local Area Identity LAI dialout connectionMethod 0 0 2 0 manual only 1 dial on demand 2 permanent...

Page 78: ...1 0 off 1 enable specific client IP ad dress dialout profiles 1 SCAddress void ipaddress Specific client address dialout profiles 1 SIM SIM2 SIM1 SIM2 SIM used for fallback profile dialout profiles 1...

Page 79: ...d 1 65535 External por range end napt_mobile j intHost void ipaddress napt_mobile j intPort void 1 65535 Internal port napt_mobile j protocol TCP TCP UDP TCP or UDP napt_mobile j status 1 0 1 0 disabl...

Page 80: ...ed_host_mobile policy 1 0 1 2 0 deny all 1 permit entries 0 permit all firewall_exposed_host_mobile host void hostname The exposed host firewall_exposed_host_mobile j target with j 0 19 void hostname...

Page 81: ...essionStatus 1 0 1 0 disabled 1 enabled vpn configuration username void username For credential based authentication vpn configuration password void password For credential based authentication 3 2 7...

Page 82: ...0 ipaddress Address range start network PPTP AddressRangeSize 5 2 254 Address range size 3 2 7 4 Dial in Server Parameter Default Value Range Description dialin status 0 0 1 0 Dial in disabled 1 Dial...

Page 83: ...ial_srv opt xonxoff void 0 1 0 disabled 1 enabled serial_srv opt rtscts void 0 1 0 disabled 1 enabled serial_srv opt phys_proto RS232 RS232 RS485 3 2 8 2 DNS Proxy Server Parameter Default Value Range...

Page 84: ...tus 1 0 1 0 disabled 1 enabled sms sending status 0 0 1 0 disabled 1 enabled sms sending gateway void phone num ber SMSC number sms sending sim2 gateway void phone num ber SMSC number 3 2 8 6 E Mail P...

Page 85: ...d password Event Message events digitalInput1_On message void password Event Message events digitalInput2_On message void password Event Message events digitalInput1_Off message void password Event Me...

Page 86: ...162 1 65535 snmp siglow 113 113 to 51 Signal strength trap thresh old dBm snmp sighigh 51 113 to 51 Signal strength trap reactiva tion threshold dBm 3 2 8 10 SSH Server Parameter Default Value Range...

Page 87: ...7 99 4 Jan 10 manual_netbox_e keepalive port 50001 1 65535 Server port keepalive updateInterval 60 0 214748364 7 Update interval in seconds keepalive identifier void hostname Identifier string keepali...

Page 88: ...tatus 1 0 1 0 disabled 1 enabled 3 2 9 3 Time Synchronisation Parameter Default Value Range Description network NTP status 1 0 1 0 disabled 1 enabled network NTP server swisstime ethz ch hostname NTP...

Page 89: ...Sample Data GPGGA 154250 4749 8678 N 00871 8469 E 1 06 0 0 498 M 0 0 M 6A CR LF No Name Data Description 1 Sentence Identifier GPGGA Global Positioning System Fix Data 2 Time time UTC of position fix...

Page 90: ...ude E W Longitude of fix 8 Speed speed Speed over ground in knots 9 Course course Track made good in degrees True 10 Date date UT date 11 Magnetic variation 0 0 E Not available Value 0 0 E 12 Mode mod...

Page 91: ...00000010 Turn output 1 on turn output 2 off 00000011 Turn output 1 on turn output 2 on 4 2 3 Get status of digital inputs and output To get the states of the digital I O send the following pattern as...

Page 92: ...cli php get parameters Takes the same parameters as the CLI GET cli php set parameters Takes the same parameters as the CLI GET cli php sw update path value Starts a local software update from a TFTP...

Page 93: ...tware version with cli php status to verifiy whether it was successful or nor not 0 maximum length of path is 26 characters 0 syntax error Wrong syntax after in sw update parame ters GET cli php reboo...

Page 94: ...user config zip Content Type applica tion x zip compressed Media A zip archive containing one or more of the following files can be uploaded To run OpenVPN in certificate based mode all certificate fi...

Page 95: ...Solving SIM missing Insert a SIM card PIN code required Insert the PIN code on the SIM page Connection failed See the Debug Log under Check APN phone number username password 5 2 System Log and Log Fi...

Page 96: ...hnical online support under http www netmodule com en support The Website also provides a download area where you can download the newest software and documenta tion For support requests please use th...

Page 97: ...9 21VDC Table 1 Pin assignment Ethernet Interface NB1310 allows to be feeded through Ethernet Power can be carried over the spare pairs RJ45 pin 4 5 7 8 only It is simplified PoE not compliant with IE...

Page 98: ...ot connect 2 RxD DTR Do not connect Do not connect 3 TxD TXD Data NB2210 NB224x Do not connect 4 DTR GND Do not connect GND 5 GND GND GND GND 6 DSR RXD Do not connect Do not connect 7 RTS DSR Do not c...

Page 99: ...erface HSCSD High Speed Circuit Switched Data HSDPA High Speed Downlink Packet Access HSUPA High Speed Uplink Packet Access HTML Hypertext Markup Language HW Hardware IP Internet Protocol IPSec Intern...

Reviews:

No comments

Related manuals for NB224x

Brand: EnGenius Pages: 2

Brand: ENKHO Pages: 48

Brand: Cerio Pages: 53

Brand: Ebyte Pages: 13

Brand: APM Pages: 2

Brand: Digi Pages: 9

Brand: FCCID Pages: 90

Brand: i-MO Pages: 18

Brand: EnGenius Pages: 58

Brand: AvaLAN Pages: 16

Brand: Deco Pages: 64

Brand: mobilerepeater Pages: 8

Brand: Planex Pages: 83

Brand: Hunter Pages: 5

Brand: X-Micro Pages: 57

Brand: Solwise Pages: 31

Brand: audeeo Pages: 16

Brand: Ebyte Pages: 26

Brands by name

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Popular brands

Load more brands