background image

Руководство пользователя 

1Configuring WAN-4G 

17 

www.qtech.ru 

1.2.9.1

 

Enabling PIN Code Protection

 

Command  

Description 

Qtech# configure terminal 

Enters the global configuration mode. 

Qtech(config)# interface cellular 0/0 

Enters the interface configuration mode. 

Qtech(config-if-Cellular  1)#  plmn  pin-protection  simple  0 
1234 

Enables  the  simple  PIN  code  protection  function.  The 
last  numeric  string  in  configuration  is  the  PIN  code 
corresponding to the SIM card. 

Qtech(config-if-Cellular 1)# plmn pin-protection bind-router 
0 1234 

Enables  the  PIN  code  protection  function  of  router 
binding mode. The last numeric string in configuration is 
the PIN code corresponding to the SIM card. 

Qtech(config-if-Cellular  1)#  plmn  pin-protection  strct-pin 
12345678 0 1234 

Enables  the  strictly  encrypted  PIN  code  protection 
function.  The  last  numeric  string  in  configuration  is  the 
PIN  code  corresponding  to  the  SIM  card.  The  first 
character string is a strictly encrypted hash string. 

 

1.  When  a  3G  card  and  the  corresponding  SIM  card  are  inserted  for  the  first  time,  the  initial 
password of the SIM card is known by the customer. The password is 1234 by default if it was not 
changed before. 

 

2.  The  router  administrator  enables  the  PIN  code  protection  function  through  CLI.  When  this 
command is enabled, enter the correct initial PIN code of the SIM card. If the PIN code is wrong. The 
SIM card will be locked. PUK unlocking is needed. Refer to scenario 1 of PUK unlocking.  

 

3.  When  the  router  is  bound  or  the  strict  encryption  mode  is  enabled,  the  PIN  code  has  been 
encrypted  and  is  not  the  original  PIN  code  1234  any  more,  and  1234  cannot  be  used  on  other 
devices (such as a mobile phone) to enable the PIN code protection function. Only the 

no plmn pin-

protection

 command can be used on this router to disable the PIN code protection function. 

 

4. In router binding or strict encryption mode, the new PIN code is encrypted for saving and invisible 
to the administrator. 

 

5. Each time when the SIM card connects to the network in dial-up connection mode, the router will 
use  the  new  PIN  code  to  unlock  the  SIM  card.  If  the  PIN  code  is  correct,  normal  dialing  can  be 
implemented and the SIM card can be used to access the network normally. 

 

6.  The  three  modes  use  the  same  command  to  cancel  the  PIN  code  protection: 

no  plmn  pin-

protection

.  This  command  can  be  executed  only  when  the  PIN  code  protection  command  is 

executed. 

 

7.  The  SIM  card  is  relocated  from  router  A  to  router  B,  router  B  has  been  configured  with  the  PIN 
code  protection  related  command,  and  a  new  PIN  code  is  available.  There  are 

two  cases

  for  SIM 

card replacement:

 

Case 1: If the PIN code of SIM card is consistent with the PIN code for the CLI command of router B, the 
related  process  is  the  same  as  the  initial  use  process.  The  code  can  be  replaced  directly  for  use.  The 
router  first  uses  the  initial  password  to  enable  PIN  code  protection.  After  the  function  is enabled,  a new 
PIN code is generated according to the binding or strict encryption algorithm. After that, the router will use 
the  new  PIN  code  to  unlock  the  SIM  card  each  time  the  3G  card  connects  to  the 3G  network  in  dial-up 
connection mode. If the PIN code is correct, normal dialing can be implemented and the 3G card can be 
used to access the network normally. 

Case 2: If the PIN code of the SIM card inconsistent with the PIN code for the CLI command  of router B, 
directly replacement may lead to locking of the SIM card. In this case, a designated administrator needs to 
unlock the SIM card by using the PUK code, and then reset the PIN code (for details, refer to the section 
about PUK unlocking). 

Case 2 above can be handled by using the following three methods: 

: Before replacing the SIM card, use another device (such as a mobile phone) to change the PIN code 

of SIM card to the initial PIN code configured on the router, and then insert the card into the  router 
for use; 

: Before replacing the SIM card, delete router configuration, insert the new card, and then configure the 

PIN protection function again; 

Summary of Contents for QSR-2830

Page 1: ...www qtech ru QSR 2830...

Page 2: ...iate with BFD 11 1 2 2 4 Configuring Switching of Different Access Points 12 1 2 3 Selecting 4G Network Access Mode 12 1 2 3 1 Configuration steps 12 1 2 3 2 Configuring to Directly Set Current Access...

Page 3: ...g through Dual 4G Links 22 1 3 3 1 Network requirements 22 1 3 3 2 Configuration steps 22 2 CONFIGURING DIALUP 24 2 1 PPPoE Dialup 24 2 1 1 PPPoE Overview 24 2 1 2 PPPoE Configuration Tasks 24 2 1 2 1...

Page 4: ...rk and core network The intermediate environment layer provides the function such as Qu s mapping address translation and completeness management The interface between the physical network layer and t...

Page 5: ...line Example Configure the APN and PCO functions on the interface cellular 0 0 Qtech configure terminal Enter configuration commands one per line End with CNTL Z Qtech config interface cellular 0 0 Q...

Page 6: ...iguration commands one per line End with CNTL Z Qtech config interface cellular 0 0 Qtech config if Cllular 0 0 plmn sent username abc password 0 123 apn 3gnet Qtech config if Cllular 0 0 show run int...

Page 7: ...ellular 1 backup valid check valid timer 30 max check times 3 Configures the time and count of checking the availability query timer 60 seconds and 3 times by default Association of a 4G interface wit...

Page 8: ...ck times 3 Configures the time and count of checking the availability query timer 60 seconds and 3 times by default Association of a 4G interface with Track can be configured on a Qtech 4G router to c...

Page 9: ...id check valid timer 30 max check times 3 plmn status bfd 1 2 1 5 Configuring a Single 4G Interface and RSSI Status Detection Command Description Qtech configure terminal Enters the global configurati...

Page 10: ...r 0 0 profile creat master apn 3gnet username abc password 0 333 track 10 1 2 2 2 Configuring a Single 4G Interface to Associate with Track Command Description Qtech configure terminal Enters the glob...

Page 11: ...gle 4G Interface to Associate with BFD Command Description Qtech configure terminal Enters the global configuration mode Qtech config interface cellular 0 0 Enters the interface configuration mode Qte...

Page 12: ...ent Access Mode Command Description Qtech configure terminal Enters the global configuration mode Qtech config interface cellular 0 0 Enters the interface configuration mode Qtech config if Cellular 1...

Page 13: ...1 2 5 1 Configuration steps Step Configuration Task Description 1 Dial Stimulation Interesting Traffic Rule of 4G Interface Association Optional 1 2 5 2 Configuring Association with Master Interface P...

Page 14: ...Task Description 1 Configuring Interesting Traffic Triggered Dialing Optional 1 2 7 2 Configuring Dial on demand Command Description Qtech configure terminal Enters the global configuration mode Qtech...

Page 15: ...pply detect interface vlan 10 bfd track track_id Configures protocol state association between the 4G link and primary link BFD or TRACK Qtech config if Cellular 1 apply traffic anti impact interface...

Page 16: ...use the CLI command to enter the current PIN code of the SIM card and a HASH string If the PIN code is correct the strict PIN code protection function is enabled and the HASH string will replace the c...

Page 17: ...invisible to the administrator 5 Each time when the SIM card connects to the network in dial up connection mode the router will use the new PIN code to unlock the SIM card If the PIN code is correct n...

Page 18: ...the user can try again later The PIN code may also be changed through a mobile phone 3 Command execution may fail if the operator s network is busy or due to other factors 4 Use this command with cau...

Page 19: ...ard will be damaged when the number of wrong PUK code attempts reaches 10 Before unlocking you are recommended to first ask the operator about the PUK code corresponding to the SIM card PUK unlocking...

Page 20: ...r 0 0 Qtech config if Cellular 0 0 apply detect interface VLAN 1 track 1 Qtech config if Cellular 0 0 apply dial on demand 3 Configure the static route Qtech config ip route 0 0 0 0 0 0 0 0 VLAN 1 tra...

Page 21: ...mp echo 1 1 1 1 out interface VLAN 1 next hop 1 1 1 1 Qtech config ip rns icmp echo timeout 3000 Qtech config ip rns icmp echo frequency 3000 Qtech config ip rns icmp echo ntime 3 Qtech config track 1...

Page 22: ...trigger dialing The active 4G link is used preferably when the active 4G link is recovered from the fault Note The RSR820 series mobile routers do not support the use method of this scenario Data cen...

Page 23: ...terface Cellular 0 0 Qtech config if Cellular 0 0 apply detect dial list 100 Qtech config if Cellular 0 0 apply dial on demand Qtech config interface Cellular 1 0 Qtech config if Cellular 0 0 apply de...

Page 24: ...n mode Command Function Qtech config if pppoe enable Enables PPPoE Since PPPoE is implemented via DDR Profiles it is required to bind the Ethernet interface to the specified dialer pool available for...

Page 25: ...arameters include Define the dialup activation rule Configure the dialup route To use PPPoE with other functions such as NAT it is required to configure other global parameters The global parameters m...

Page 26: ...e dialing from village to city may be more expensive than the reverse direction so it is possible to save cost by calling back from the city to village Unified call charge An organization may have qui...

Page 27: ...the callback client hostname address and telephone number Qtech config if dialer hold queue packets timeout seconds Optional Defines the hold queue on the interface Qtech config if dialer enable timeo...

Page 28: ...watch configuration tasks involve Configure the backup interface for the DDR dialup Configure the monitored route for the dialup Configure how long to trigger dialup after the monitored route disappe...

Reviews: