Nivis Versa Router 1100 Titan User Manual Download Page 89

Page: 89 / 111

Nivis Versa Router 1100 Titan - User Guide

v1.2

Page 89 of 111

5.7.2.3

Set-up Edge Router VPN certificates

Point a web browser to the Edge Router website (http://<router_ip>/), enter credentials

Go to “Cloud Based NOC” page

Press the “Choose File” button corresponding to ‘NOC Open VPN’ label

Browse for the archive with the Edge Router certificate set

Press the corresponding “Apply” button

Summary of Contents for Versa Router 1100 Titan

Page 1: ...Nivis Versa Router 1100 Titan User Guide v1 2 Page 1 of 111 Nivis Versa Router 1100 Titan User Guide Version 1 2...

Page 2: ...Configure the PC static IP address to access the Edge Router 17 3 7 Optional Ensure the Edge Router is accessible from PC over ETH 19 3 8 Versa Router 1100 Titan US hardware description 20 3 8 1 Gene...

Page 3: ...ed Join Key 81 5 6 Change the Network ID 82 5 7 Set up Edge Router Cloud Based NOC communication 83 5 7 1 Add Edge Router in the Cloud Based NOC Whitelist 83 5 7 2 Set up Edge Router and NMS communica...

Page 4: ...attery backup ability to detect and report tamper and power outage outdoor enclosure and 3G cell connectivity VR1000 Short name for Versa Router 1000 Quark VR1100 Short name for Versa Router 1100 Tita...

Page 5: ...ditional features on top of Quark s NOTE For a more detailed description of the Versa Router 1100 Titan hardware platform please consult section Versa Router 1100 Titan US hardware description 2 2 Pla...

Page 6: ...MUST have publicly available IPv4 Backhaul Manager IPv6 over IPv4 tunnel VPN FWD Event based FWD Event based 6LoWPAN RPL 4e 4g Web Server Windows VPN IPv6 over IPv4 tunnel Network Events Data Commands...

Page 7: ...Network Composed of Smart Objects Network and Application Monitoring Tool NAMT IP enabled backbone infrastructure SO SO SO SO SO SO SO SO NOTE The NAMT uses a large amount of bandwidth for its operati...

Page 8: ...eighbor related statistics 3 Routing RPL related information such as the topology of the network Network and communication related statistics and parameters are displayed in the NAMT Acts as the link...

Page 9: ...pplication layer payloads for at least 1 year for up to 4000 Smart Objects with a reporting interval of 6 hours Historical data can be retrieved from HTTP COAP Proxy using XML over HTTP requests SD ca...

Page 10: ...sa Router VR1100 Titan US The Versa Router VR1100 Titan US package includes the components listed below Component Quantity Picture Versa Router 1100 Titan Pictured here with antenna mounted The Titan...

Page 11: ...Versa Router VR1100 Titan US OEM The Versa Router VR1100 Titan US OEM package includes the components listed below Component Quantity Picture Versa Router 1100 Titan board 1 RF Amplifier with associa...

Page 12: ...tective bubble wrap 2 Open Titan case The Titan is delivered with a Antenna bubble wrapped and placed inside Titan enclosure b Battery positive connector disconnected from battery and insulated c Both...

Page 13: ...el below the connectors 7 Optional while in the lab but mandatory at deployment unwrap the RF antenna and mount it on top of the enclosure 8 Optional if necessary connect the ETH connector to Titan Th...

Page 14: ...from the mains and the battery gets charged from the mains 12 Titan is fully powered on now NOTE Titan is delivered without a mains power plug power connector as the method to connect to the mains dep...

Page 15: ...Use Titan admin UI section Edit Versa Router 1100 Titan SIM Settings Titan ONLY 5 Titan is delivered preconfigured with a set of APN user pass for US cell carriers If the APN user pass for carrier spe...

Page 16: ...3 Power on Titan 4 Set Titan in transparent mode connecting it to the instance mentioned above 5 Power off Titan 6 Remove Titan ETH connection 7 Make sure a properly configured and activated SIM card...

Page 17: ...Guide v1 2 Page 17 of 111 3 6 Configure the PC static IP address to access the Edge Router Step by step instructions for Windows 7 1 Open Control Panel Network and Sharing Center and click on Local Ar...

Page 18: ...rnet Protocol Version 4 TCP IPv4 and then click on Properties 4 Enter IPv4 192 168 0 201 Subnet Mask 255 255 255 0 Default Gateway 192 168 0 1 NOTE Any other available IPv4 EXCEPT 192 168 0 101 192 16...

Page 19: ...de v1 2 Page 19 of 111 3 7 Optional Ensure the Edge Router is accessible from PC over ETH Use ping to verify Edge Router connectivity from the PC 1 Click Start Run and type cmd 2 Type ping 192 168 0 1...

Page 20: ...as the Versa Router 1000 Quark The Titan packs more memory and flash space and runs at a higher frequency compared to Quark The Versa Router 1100 Titan requires only a 3G SIM card and a power cord con...

Page 21: ...sa Router 1100 Titan US The standard version includes the OEM version enclosed in an IP65 enclosure adding battery back up and power supply RF antenna 3G antenna plus accessories circuit breakers powe...

Page 22: ...1100 Titan US OEM version includes the Titan board with VN400 radio on it the RF amplifier and the RF cable to connect the VN400 radio to the amplifier The VR1100 Titan OEM fully connected Power Sourc...

Page 23: ...On the Titan enclosure is the antenna connector 1 The antenna is shown connected in the picture below Titan is delivered with cell antenna 2 already mounted There user should not operate the cell ante...

Page 24: ...3 green lights solid on when there is a NAMT or a browser connected to the Versa Router 1100 Titan The CELL LED 4 blue lights solid on when the cell link is established To the left is the RJ 45 conne...

Page 25: ...d with PIN disabled in order to activate the cell backhaul link It also requires coverage from the SIM card provider for the same purpose On titan board amplifier or power supply there are several oth...

Page 26: ...ll reset the following setting to their factory default value IPv4 settings All Application settings OpenVPN DTLS certificates configurations Communication profiles including Vendor Network ID A Reset...

Page 27: ...sending the queries as XML on top of HTML The proxy on the Edge Router will serve the resource from the cache or query the SO if necessary at the same time it will translate from COAP to HTTP If confi...

Page 28: ...Not Modified 68 204 No Content 69 200 OK 128 400 Bad Request 129 401 Unauthorized 130 400 Bad Request 131 403 Forbidden 132 404 Not Found 133 405 Method Not Allowed 134 406 Not Acceptable 140 412 Prec...

Page 29: ...ponse string Can t AddReqRspResource 502 Bad Gateway Decoding error Response string Can t convert Coap response to Http response Exi to Xml failed 409 Conflict A no cache HTTP request was made for an...

Page 30: ...rocessing Xml Observation List elements Response string Request is bad formed Xml Observation List invalid finish Storage data retrieval request 400 Bad Request The request query has invalid or confli...

Page 31: ...LEMENT Value PCDATA ATTLIST Value Name CDATA IMPLIED ATTLIST Value Type CDATA IMPLIED ResourceList CoAPResource Value Name IPv6Addr Type BinHex Value Value Name CoRELinkFormat Type String Value CoAPRe...

Page 32: ...LIED ATTLIST Value Type CDATA IMPLIED DeviceList Device Value Name MAC Type BinHex Value Value Name IPv6Addr Type BinHex Value Value Name DeviceType Type Number Value Value Name Status Type Number Val...

Page 33: ...or APP was received from device LastRegistraton UTC time in seconds since 1970 time when last DAO message was received from device DeviceType 0 Any 1 TypeNMS 2 reserved 3 TypeER 4 reserved 5 reserved...

Page 34: ...Topology Device Value Name MAC Type BinHex Value Value Name IPv6Addr Type BinHex Value Parents Parent Value Name MAC Type BinHex Value Value Name IPv6Addr Type BinHex Value Value Name ExpirationTime...

Page 35: ...h the exception of the cache control options Pragma no cache Cache Control no cache which may be used to indicate cache bypass to the proxy itself and otherwise has no CoAP equivalent The HTTP payload...

Page 36: ...search can be MAC HHHHHHHHHHHH or IPv6Addr HHHHHHHHHHHHHHHHHHHHHH HTTP response List of resources which are are put under observation by HttpCoapProxy at that moment This is actually the HttpCoapProx...

Page 37: ...rce doesn t exist Resource is not observable Subscribed Unsubscribed The PubPeriod field value is a number that describes the publication period set by the user for that observed resource If 0 it mean...

Page 38: ...If that resource does not exist in the HttpCoapProxy Observation Cache the normal flow will be followed Send Coap request wait for Coap response translate to Http and send back to Http client NOTE ht...

Page 39: ...ion request for UNSUBSCRIPTION passed forward message will be retrieved to the client This is a sign that the request was processed and the HttpCoapProxy will unsubscribe from observing specified reso...

Page 40: ...ame DeviceIPv6Addr Type BinHex Value Value Name UriPath Type String Value Value Name Action Type String Value Resource ObservationListSet NOTE Action is a string which defines the type of action that...

Page 41: ...st query is specified the XML report will contain only first N records from X or X if N X which represent the oldest records from the initial report If newest query is specified the XML report will co...

Page 42: ...mestamp Application v value e Record Device Device uriHost device_ip Record uriPath path uriPath e t timestamp Application v value e Record Record uriPath path uriPath e t timestamp Application v valu...

Page 43: ...Nivis Versa Router 1100 Titan User Guide v1 2 Page 43 of 111 EXAMPLE of a record in response XML Record uriPath app sw uriPath e t 1358831522 Sw v 1 e Record...

Page 44: ...rsa Router 1100 Titan must be powered on and either connected to the local LAN or connected to 3G cell The IPv4 of the Edge Router must be accessible from the PC where the browser is running The admin...

Page 45: ...6 and dynamically allocated IPv4 IPv6 by DHCP for the Edge Router set the static IPv4 IPv6 network mask gateway and DNS and change the HTTP COAP Proxy port WARNING This page is for advanced users only...

Page 46: ...respective join keys Devices are specified by their MAC addresses There are two ways to specify the whitelist by specifying each MAC individually or by using a MAC range WARNING The Transceiver MAC mu...

Page 47: ...dard setup average network size up to 100 devices average join Large setup large network size up to 500 devices This also enables users to load a custom profile file The Versa Router 1100 Titan has tw...

Page 48: ...ection The default setup identifiers need to be changed only if you have several collocated networks Quarks or Titans In this case each collocated Edge Router must have its own unique set of identifie...

Page 49: ...d and a new entry will be added to the table Remove The rows with the checkbox checked will be removed Apply The changes will be saved on the router Cancel The pending changes will be removed and the...

Page 50: ...Keys will be used only if the Cipher Suite is one of the following PSK_NULL_SHA256 PSK_AES128_CCM_SHA256 PSK_AES128_CCM8_SHA256 The Cipher Suite ECDHE_ECDSA_AES128_CCM8_SHA256 uses a Certificate not...

Page 51: ...a caching and storage Support for nodes firmware upgrade Support for NAMT for network monitoring management configuration topology view etc When operating connected to Nivis NMS the functionalities ab...

Page 52: ...1100 Titan User Guide v1 2 Page 52 of 111 When transparent mode is ON the user cannot do the following actions Modify whitelists in Whitelists page Modify DTLS lists in DTLS List page Load certificate...

Page 53: ...use on Network Sniffer The settings will configure the Network Sniffer to be able to monitor the network controlled by current Titan WARNING The settings will match only the network joined to this Tit...

Page 54: ...the end of the process the board will restart rendering the Edge Router and the Edge Router Website unavailable for up to several minutes WARNING The Titan and Quark software files are NOT interoperab...

Page 55: ...e main Edge Router software Click on Transceiver Upgrade in the Administration section User actions available on this page Upload and activate a Titan or Quark Transceiver firmware file Browse to the...

Page 56: ...Administration section and then choose the desired shutdown type User actions available on this page Soft Reset restart the Titan applications without rebooting the board Power Off shut down Titan gr...

Page 57: ...Router Website password User actions available on this page Change the Website user password Click on Change Password in the Session section Type the old password and new password re type the new pass...

Page 58: ...IPv4 of the Edge Router must be accessible from the PC where the browser is running The administration website for the Edge Router can be accessed by pointing a web browser to the Edge Router IP NOTE...

Page 59: ...ks By default the Log Files link is selected NOTE Depending on the web browser you are using to log into the Edge Router Administration the graphical representation of the page and some buttons relate...

Page 60: ...ded by Nivis 1 Click Edge Router Firmware The following screen shows the version currently installed 2 Click Browse to locate and select new firmware file then click Load the version must be different...

Page 61: ...ES Contact Nivis support if the upgrade operation does not succeed For faster rejoin power cycle all Smart Object devices after performing an Edge Router firmware upgrade Wait about 5 minutes before a...

Page 62: ...ware file then click Load the version must be different from the previous one 3 Wait until the firmware is activated This process will take few minutes Do not power cycle the board or interrupt the up...

Page 63: ...en click Load the version must be different from the previous one 3 Wait until the website is activated This process will take few minutes Do not power cycle the board or interrupt the upgrade process...

Page 64: ...ownload the Edge Router logs snapshot when requested for troubleshooting purposes Set up Edge Router FTP logs upload 1 Log in into admin website or click on Log Files if already logged in 2 Click Down...

Page 65: ...ver must meet the following conditions 1 Be in the same network with the Edge Router It must be available in the network all the time otherwise the Edge Router may not function correctly 2 Be UNIX com...

Page 66: ...ay cause difficult to trace malfunctions 1 Click on Advanced Settings The following form will open to the right of the operation list 2 In the form select a Section in the drop down list The Variable...

Page 67: ...iew set mesh network Prefix Restart the Router to activate the changes WARNING This page is for advanced users only do not use it unless you know precisely how to configure the network Any invalid val...

Page 68: ...for Mesh network Prefix or Prefix Length 7 When you are done click Set to save the settings 8 Preform a Hard Restart too activate the settings modified above Clicking the Soft Restart button will rest...

Page 69: ...CC MNC Separate page sections are provided for regular cell providers and virtual providers MNVO Assign a symbolic name to the set of configuration recommended using the same name as provider name Opt...

Page 70: ...rom the cell provider 12 Optionally enter a ping target which is accessible via ping from within the cellular data network Titan will verify the cell connection health by periodically sending pings to...

Page 71: ...he SIM card must be active with PIN disabled associated with an active data plan see details at section Configure the SIM card above 2 Have the Ethernet connected and the PC properly configured to be...

Page 72: ...s not restarted after inserting the ETH Make sure to reboot the board after inserting the ETH NOTES This section is specific to Titans only Quarks do not have SIM cards It is mandatory to perform SIM...

Page 73: ...age 73 of 111 3 9 1 3 11 Checking the Edge Router System status WARNING This page is for advanced users only do not use it unless instructed by a Nivis representative User actions available on this pa...

Page 74: ...an SNMP Agent listening on port 161 UDP The HTTP COAP proxy listens on port 9999 TCP for HTTP queries The Edge Router utilizes the NTP protocol on port 123 UDP to synchronize time with Internet time s...

Page 75: ...dge Router Transceiver firmware using Edge Router web interface Follow the steps in section Upgrading the Edge Router Transceiver 4 3 Upgrading the Edge Router Transceiver firmware using Edge Router a...

Page 76: ...ble PANA DTLS and other parameters The section also describes the steps to be taken to connect to the Cloud Based NOC NMS NOTES The end user is NOT allowed to convert system configured for US to a sys...

Page 77: ...e missing from the list add the MAC Then choose the cipher suite enter the DTLS key if necessary click Add then click Apply NOTES If you are configuring more than a single device please update the set...

Page 78: ...tes require a pre shared Key and which cipher suites require a Certificate 5 4 2 Change the DTLS Key Certificate Click on DTLS List in the Configuration section on the Quark website to access the DTLS...

Page 79: ...mart Object MAC or select a range including the Smart Object MAC or if this is a device missing from the list add the MAC Then choose the cipher suite a suite using a pre shared Key enter the DTLS key...

Page 80: ...cate Click on DTLS List in the Configuration section on the Edge Router website to access the DTLS configuration page The PANA certificates are loaded using the same page as for DTLS Select the file t...

Page 81: ...bled Click on Whitelist in the Configuration section on the Edge Router website Select the Smart Object MAC or select a range including the Smart Object MAC or if this is a device missing from the lis...

Page 82: ...tup Identifiers in the Configuration section on the Edge Router website Modify the Vendor Network ID then click Apply NOTE Please be aware the Edge Router will reboot and the network will unjoin The S...

Page 83: ...tion is to use VPN for Edge Router NMS connectivity Non VPN communication is only acceptable for laboratory tests 5 7 1 Add Edge Router in the Cloud Based NOC Whitelist Before trying to connect an Edg...

Page 84: ...f 111 4 Point a web browser to the Cloud Based NOC website enter credentials 5 Go to on Networks page 6 Press Register Network button 7 Provide a network Name 8 Use the Edge Router FAR ID identified a...

Page 85: ...to a different cloud Based NOC with a different root CA the Edge Router will need to load a new certificate generated using the new root CA NOTE The certificate sets for Edge Router and NMS must be d...

Page 86: ...e NMS admin website http nms_ip admin enter credentials 11 Go to Upload Certificates page 12 Press Choose File button 13 Select the archive holding the NMS certificate set 14 Press Upload button NOTE...

Page 87: ...les to use OpenVPN 1 Point a web browser to the NMS admin website http nms_ip admin enter credentials 2 Go to Edit configuration page 3 Choose NMS_Dispatcher from Section drop down 4 Choose SECURITY i...

Page 88: ...n User Guide v1 2 Page 88 of 111 6 Choose IPGateway from Section drop down 7 Choose SECURITY in Variable drop down 8 Make sure the Value edit reads openvpn no quotes not other char 9 Go to Restart pag...

Page 89: ...certificates 1 Point a web browser to the Edge Router website http router_ip enter credentials 2 Go to Cloud Based NOC page 3 Press the Choose File button corresponding to NOC Open VPN label 4 Browse...

Page 90: ...er to the Edge Router website http router_ip enter credentials 2 Go to Cloud Based NOC page 3 Click to Enable the transparent mode 4 Fill in the NMS Public IPv4 5 Fill in the NMS port default 40000 6...

Page 91: ...ch time the Quark is switched between standalone and transparent mode because setting the transparent mode automatically enable VPN communication and this step disables it 5 7 3 1 Configure NMS module...

Page 92: ...0 Titan User Guide v1 2 Page 92 of 111 6 Choose IPGateway from Section drop down 7 Choose SECURITY in Variable drop down 8 Set the field Value to none no quotes not other char 9 Go to Restart page 10...

Page 93: ...ntials 2 Go to Cloud Based NOC page 3 Click to Enable the transparent mode 4 Fill in the NMS Public IPv4 5 Fill in the NMS port default 40000 6 Press Apply button NOTE Enabling transparent mode on Edg...

Page 94: ...g the transparent mode the Edge Router software restarts rendering the web interface inaccessible for few tens of seconds Wait until the web interface is accessible 1 Point a web browser to the Edge R...

Page 95: ...ased on real deployments but for lab tests it can be non VPN Setting up the NMS VR1000 communication was covered above The sections below describe possible combinations to set up the remaining segment...

Page 96: ...crt key nms_remote_user key comp lzo ns cert type server verb 3 3 Start as administrator the OpenVPN by executing the exe file C Program Files OpenVPN bin openvpn gui exe 4 After it was started right...

Page 97: ...n client_VPN_IPv4 server_VPN_IPv4 ii netsh interface ipv6 add address remote_user_tunn client_VPN_IPv6 128 iii netsh interface ipv6 add route 0 remote_user_tunn b On NMS create route to remote user ma...

Page 98: ...ser_tunn iii netsh interface ipv6 delete remote_user_tunn b On NMS remove route to Windows PC i sudo ip route del client_VPN_IPv6 128 via client_VPN_IPv4 Example using the variables chosen above a On...

Page 99: ...IPv6 FD00 0A20 0483 1 FD00 is a MUST 2 0A20 0483 is 10 32 4 131 converted to hex 3 Connect to NMS a On Windows PC on administrator console create 6in4 tunnel i netsh interface ipv6 add v6v4tunnel rem...

Page 100: ...Pv6 128 ii netsh interface ipv6 delete route 0 remote_user_tunn iii netsh interface ipv6 delete remote_user_tunn b On NMS remove route to Windows PC i sudo ip route del client_IPv6 128 via client_IPv4...

Page 101: ...OpenVPN on Linux 1 Go to https openvpn net select VPN Solution option and choose Community Downloads tab option 2 Download the release tar gz that suits user computer For example openvpn for 32 bit Li...

Page 102: ...infinite nobind ca nms_ca crt cert nms_remote_user crt key nms_remote_user key comp lzo ns cert type server verb 3 3 Start as administrator the OpenVPN a sudo openvpn path_to_config_file 4 Test the V...

Page 103: ...i sudo ip addr add client_VPN_IPv6 128 dev remote_user_tunn iii sudo ip route add 0 dev remote_user_tunn iv sudo ip link set dev remote_user_tunn up b On NMS create route to remote user machine i sudo...

Page 104: ...sudo ip route del 0 dev remote_user_tunn iii sudo ip tunnel del remote_user_tunn b On NMS remove route to Windows PC i sudo ip route del client_VPN_IPv6 128 via client_VPN_IPv4 Example using the varia...

Page 105: ...ent_IPv4 converted to hex as postfix For example i Computed IPv6 FD00 0A20 0411 1 FD00 is a MUST 2 0A20 0483 is 10 32 4 17 converted to hex 3 Connect to NMS a On client Linux PC create 6in4 tunnel i s...

Page 106: ...tunnel i sudo ip addr del client_VPN_IPv6 128 dev remote_user_tunn ii sudo ip route del 0 dev remote_user_tunn iii sudo ip tunnel del remote_user_tunn b On NMS remove route to Windows PC i sudo ip ro...

Page 107: ...e_user_tunn iii netsh interface ipv6 delete remote_user_tunn b On VR1000 remove route to Windows PC i sudo ip route del client_VPN_IPv6 128 via client_VPN_IPv4 Example using the variables chosen above...

Page 108: ...last byte of Edge Router IPv6 Network unstable after connecting NAMT in Development Kit mode Too aggressive interrogation rate Reduce the number of devices or increase the interrogation interval Sett...

Page 109: ...ks IETF RFC 6775 Final Neighbor Discovery Optimization for IPv6 over Low Power Wireless Personal Area Networks 6LoWPANs IETF RFC 6550 Final RPL IPv6 Routing Protocol for Low Power and Lossy Networks I...

Page 110: ...PPROVED BY THE PARTY RESPONSIBLE FOR COMPLIANCE SUCH MODIFICATIONS COULD VOID THE USER S AUTHORITY TO OPERATE THE EQUIPMENT This equipment complies with the FCC RF radiation exposure limits set forth...

Page 111: ...nt d une communication satisfaisante This equipment complies with the ICES RF radiation exposure limits set forth for an uncontrolled environment This equipment should be installed and operated with a...

Search results

Summary of Contents for Versa Router 1100 Titan

Reviews:

Related manuals for Versa Router 1100 Titan

Brands by name

Popular brands

Nivis Versa Router 1100 Titan, User Manual

Search results

Summary of Contents for Versa Router 1100 Titan

Reviews:

Related manuals for Versa Router 1100 Titan

Brands by name

Popular brands