RACOM MG101 User Manual Download Page 40

Page: 40 / 107

User manual

40 / 107

GPRS/EDGE/UMTS routers MG101, MG102
3. Jul 2009

3.1.6.4

IPsec

IPsec (IP security) is a suite of protocols for securing Internet Protocol (IP) communications by authenticating
and/or encrypting each IP packet in a data stream. IPsec also includes protocols for cryptographic key es-
tablishment.

IPsec can be used to create Virtual Private Networks (VPN) and this is the dominant use.

3.1.6.4.1

IPsec Administration

Parameter

Description

IPsec administrative status:

Enable or disable IPsec.

Summary of Contents for MG101

Page 1: ...83 592 31 Nov M sto na Morav Czech Republic E mail racom racom eu http www racom eu Tel 420 565 659 511 Fax 420 565 659 512 User manual GPRS EDGE UMTS routers MG101 MG102 Document version 1 0 15 Date...

Page 2: ...2 107 n vod MG101 102...

Page 3: ...DGE UMTS routers MG101 MG102 3 Jul 2009 Overview 1 Introduction 7 2 Installation 16 3 Configuration 17 4 Software Interfaces 96 5 Troubleshooting 102 6 Customer Service 104 A Appendix Connectors and C...

Page 4: ...he Power Supply 16 3 1 Configuration via the MG101 102 Web Manager 17 3 1 1 Initial Access to the Web Manager 18 3 1 2 Home 19 3 1 3 Interfaces 20 3 1 4 Routing 30 3 1 5 Firewall 31 3 1 6 VPN 37 3 1 7...

Page 5: ...routers MG101 MG102 3 Jul 2009 A Appendix Connectors and Cables 105 A 1 Pin Assignments for the Communication Interfaces 105 A 1 1 Serial Plug COM Sub D 9pol 105 A 1 2 Ethernet Plug ETH RJ45 106 A 1...

Page 6: ...User manual 6 107 GPRS EDGE UMTS routers MG101 MG102 3 Jul 2009...

Page 7: ...valent power supply which must have a limited and SELV circuit output The MG101 102 is designed for indoor use only Do not expose the communication module to extreme am bient conditions Protect the co...

Page 8: ...clarations of Conformity can be found under the following ad dresses MG101 http www racom eu download declarations potencial cz 3_gprs mg101 d cz pdf MG102 http www racom eu download declarations pote...

Page 9: ...re options the hardware does not offer e g GPS or Digital I O The below table shows the hardware varieties MG101 1NN MG102 1NN MG102 1GN MG102 2NN MG102 2GN MG102 2NW MG102 2GW GSM GPRS EDGE UMTS HSDP...

Page 10: ...up Front Power green blinking fastly Restart triggered by watchdog on 1 LED on weak signal 2 LEDs on medium signal 3 LEDs on strong signal 4 LEDs on very strong signal off No or insufficient signal F...

Page 11: ...s button for at least 5 seconds Top Power Voltage feed connector 9 28 VDC Top IN1 IN2 Digital inputs 2 optoisolated digital inputs Please consider the polarity Top OUT1 OUT2 Digital outputs 2 relay ou...

Page 12: ...D on weak signal 2 LEDs on medium signal 3 LEDs on strong signal 4 LEDs on very strong signal off No or insufficient signal Front Signal Strength green running Software update blinking slowly Mobile c...

Page 13: ...02 2GW support passive GPS anten nas only Back UMTS GSM Antenna UMTS GSM antenna connector Impedance 50 Ohm Connector SMA female Back COM Sub D 9 or RJ45 port RS232 default or RS485 configurable Back...

Page 14: ...ection Routing section 3 1 4 Routing Static Routing NAPT Port Forwarding Security Firewall section 3 1 5 Firewall NAPT Port Forwarding Access Control Lists Stateful Inspection Firewall Virtual Private...

Page 15: ...MG101 102 can also be used to attach a single device 1 8 1 Mobile Internet Access MG101 102 can be used for mobile Internet access Supported services include Universal Mobile Telecommunications System...

Page 16: ...d insert it in SIM socket 1 Make sure the SIM is suitable for data transmission 2 2 2 Installation of the UMTS GSM Antenna MG101 102 Wireless Routers will only operate reliably over the GSM network if...

Page 17: ...er chapter 3 2 Using the MG101 102 Command Line Interface chapter 3 3 If you are new to MG101 102 we recommend configuring it using the MG101 102 Web Manager For batch configuration upload configurati...

Page 18: ...ault gateway DNS server How to do using Windows XP Start Connect To Show all connections Local Area Connection Right Click Properties Internet Protocol TCP IP Properties Obtain an IP address automatic...

Page 19: ...ual 19 107 GPRS EDGE UMTS routers MG101 MG102 3 Jul 2009 3 1 2 Home This page gives you a system overview It helps you when initially setting up device but also functions as dashboard during normal op...

Page 20: ...MG101 102 are configured 3 1 3 1 Ethernet Interface In this section the IP address and the subnet mask of the Ethernet interface can be set Parameter Description IP address Provide an IP address in do...

Page 21: ...terface In case of link loss the connection is reestablished Redial attempts Number of redialing attempts before switching to the next profile Dial on demand idle timeout Time in minutes after that an...

Page 22: ...mation from mobile operator can be void Access point name Access Point Name get this information from mobile operator or from our APN database Authentication method Use Challenge Handshake Authenticat...

Page 23: ...condition Specifies the condition for a profile switch to the other profile 3 1 3 2 3 Maximum Segment Size MSS The maximum segment size MSS is the largest amount of data specified in bytes that a com...

Page 24: ...correct PIN code is provided or if PIN protection is disabled It is not recommended to disable PIN protection since a SIM card thief could misuse an unprotected SIM Parameter Description PIN code The...

Page 25: ...GPRS EDGE UMTS routers MG101 MG102 3 Jul 2009 3 1 3 3 2 Network Selection Parameter Description Network selection Choose automatic or manual provider network selection For manual selection please spe...

Page 26: ...M cards if the correct PIN code is provided or if PIN protection is disabled It is not recommended to disable PIN protection since a SIM card thief could misuse an unprotected SIM Parameter Descriptio...

Page 27: ...GPRS EDGE UMTS routers MG101 MG102 3 Jul 2009 3 1 3 4 2 Network Selection Parameter Description Network selection Choose automatic or manual provider network selection For manual selection please spe...

Page 28: ...is transmitted or received Stop bits This property specifies the number of stop bits used to indicate the end of a frame Data bits This property specifies the number of data bits contained in each fra...

Page 29: ...3 1 3 6 Digital I O MG101 1NN only 3 1 3 6 1 Digital I O Management via Web Manager The digital inputs and outputs can be monitored and controlled via the Web Manager 3 1 3 6 2 Digital I O Management...

Page 30: ...sses in dotted decimal or host network names Mask The network s IP address together with its address mask defines a range of IP addresses For IP subnets the address mask is referred to as the subnet m...

Page 31: ...User manual 31 107 GPRS EDGE UMTS routers MG101 MG102 3 Jul 2009 3 1 5 Firewall 3 1 5 1 Access Control Lists 3 1 5 1 1 Local Host ACL...

Page 32: ...EDGE UMTS routers MG101 MG102 3 Jul 2009 3 1 5 1 2 Exposed Host ACL on Mobile Interface Parameter Description Exposed host Enter the IP Address of the device that is to expose Leave this field blank...

Page 33: ...EDGE UMTS routers MG101 MG102 3 Jul 2009 3 1 5 1 3 Exposed Host ACL on OpenVPN Interface Parameter Description Exposed host Enter the IP Address of the device that is to expose Leave this field blank...

Page 34: ...ow an external user to reach a port on a private IP address inside the LAN from the outside Internet Parameter Description NAPT status Enable or disable NAPT NAPT needs to be enabled normally i e when...

Page 35: ...d normally i e when using Internet Access Internet Service Providers will not route your private LAN Addresses Service name User defined Name for the NAPT entry External port External IP port mobile i...

Page 36: ...User manual 36 107 GPRS EDGE UMTS routers MG101 MG102 3 Jul 2009 3 1 5 3 Expert Mode Upload text files with firewall rules...

Page 37: ...and client certificates Prepare the OpenVPN certificate files Use the tools and documentation that come with the OpenVPN soft ware A Guide to basic RSA Key Management is found under http openvpn net e...

Page 38: ...penVPN server address optional Second server port Second OpenVPN server port optional VPN device type tun or tap Compression Enable or disable OpenVPN compression 3 1 6 1 3 OpenVPN Client Certificates...

Page 39: ...u run an OpenVPN server on MG101 102 The configuration upload takes a zip file which may include one or more OpenVPN server configurations Typically such a zip file includes files such as server conf...

Page 40: ...col IP communications by authenticating and or encrypting each IP packet in a data stream IPsec also includes protocols for cryptographic key es tablishment IPsec can be used to create Virtual Private...

Page 41: ...User manual 41 107 GPRS EDGE UMTS routers MG101 MG102 3 Jul 2009 3 1 6 4 2 IPsec Configuration...

Page 42: ...ntication and dynamic IP addresses aggressive mode is the only choice IKE encryption IKE encryption method IKE hash IKE hash method IKE Diffie Hellman Group IKE Diffie Hellman Group Perfect Forward Se...

Page 43: ...r because it is easy to configure and it was the first VPN protocol that was supported by Microsoft Dial up Networking Users that are allowed to connect to the PPTP server are defined under the sectio...

Page 44: ...ameter Description Dial in administrative status The Dial in server can be enabled or disabled Consequently the device will allow incoming calls or not Dial in operational status Shows whether a conne...

Page 45: ...escription COM server status The COM server modbus gateway can be enabled or disabled 3 1 7 1 2 COM Server Configuration Parameter Description Port The port that is used by this application Protocol o...

Page 46: ...CP Server Administration Parameter Description DHCP server status The Dynamic Host Configuration Protocol DHCP server can be enabled or disabled If it is enabled it will answer to DHCP requests of dev...

Page 47: ...3 DNS Proxy Server The DNS Proxy enabled MG101 102 forwards DNS requests to the DNS server provided by the mobile op erator Devices within the MG101 102 LAN may be configured to use MG101 102 as DNS s...

Page 48: ...r disable the Dynamic DNS Client 3 1 7 4 2 Dynamic DNS Configuration Parameter Description Service type DynDNS Service according Dynamic Network Services Inc www dyndns com Please consult www dyndns c...

Page 49: ...isabled Disabling the e mail client means that no notification via e mail will be performed 3 1 7 7 E mail Client Configuration Parameter Description From e mail address Sender s e mail address Server...

Page 50: ...PPP connection down PPP connection failure PPP failure to connect Error reported PPP_ERR See manual and logs to identify the problem VPN connection established VPN connection up tun0 tap0 interface ad...

Page 51: ...Output 1 off Output change OUT1 is Off changed from DIO_SOURCE Digital Output 2 on Output change OUT2 is On changed from DIO_SOURCE Digital Output 2 off Output change OUT2 is Off changed from DIO_SOU...

Page 52: ...2 3 Jul 2009 3 1 7 8 2 Subscribers Subscribers are recepients of SMS or e mail event notifications It is possible to create groups and fill them with users and other groups This mechanism let you send...

Page 53: ...User manual 53 107 GPRS EDGE UMTS routers MG101 MG102 3 Jul 2009 3 1 7 8 3 Event Processor Notifications can be generated or digital outputs can be set based on the occurrence of several events...

Page 54: ...Description status A SMS with the following information will be returned Signal strength Mobile connection state up down current IP address of the mobile ppp interface current IP address of the VPN i...

Page 55: ...9 dialondemand Set administrative status of the mobile connection to enabled dial on de mand 1 on Switch output 1 on 1 off Switch output 1 off 2 on Switch output 1 on output 2 off Switch output 2 off...

Page 56: ...ntainer Location Location of the device Trap target host The host where the traps will be sent to Trap target port The port where the traps will be sent to Signal strength trap threshold dBm A trap wi...

Page 57: ...gnal strength trap threshold The startup trap is implemented using the standard coldStart warmStart traps The system shutdown trap is sent when the system is rebooted via the reboot function of the we...

Page 58: ...he UPD Message Receiver is a service that listens on the configured port default 2157 for arriving UDP packets with a string in the payload If an UPD package is arriving the event Arriving UDP Message...

Page 59: ...tured Supplementary Services Data USSD is a GSM service that allows high speed interactive communication between the subscribers and applications across a GSM Network A sample USSD service is the bill...

Page 60: ...ser manual 60 107 GPRS EDGE UMTS routers MG101 MG102 3 Jul 2009 3 1 7 15 Web Server Parameter Description HTTP port Web server port for http connections HTTPS port Web server port for https connection...

Page 61: ...User manual 61 107 GPRS EDGE UMTS routers MG101 MG102 3 Jul 2009 3 1 8 System 3 1 8 1 Authentication...

Page 62: ...nts on the device The user admin is a built in power user that has permission to access both the Web Manager and the Dial in server Any other user defined user only has permission for dial in connecti...

Page 63: ...de OpenVPN root certificate file for certificate based authentication client crt certificate_mode OpenVPN client certificate file client key certificate_mode OpenVPN private key file templateProfiles...

Page 64: ...ration files Press Download will download a zip file name user config zip containing user config cfg ca crt credential_mode ca crt certificate_mode client crt certificate_mode client key certificate_m...

Page 65: ...2 3 1 8 3 3 Factory reset Press Reset to set the device to factory default Your current configuration will be lost This action can also be initiated by pressing and holding the Reset button for at lea...

Page 66: ...User manual 66 107 GPRS EDGE UMTS routers MG101 MG102 3 Jul 2009 3 1 8 4 Troubleshooting 3 1 8 4 1 Mobile Connection Debugging...

Page 67: ...User manual 67 107 GPRS EDGE UMTS routers MG101 MG102 3 Jul 2009 3 1 8 4 2 Network Debugging...

Page 68: ...User manual 68 107 GPRS EDGE UMTS routers MG101 MG102 3 Jul 2009 3 1 8 4 3 Log Files Log files can be viewed a downloaded here Please provide these files when placing a support request...

Page 69: ...outers MG101 MG102 3 Jul 2009 3 1 8 4 4 System Log Redirection Parameter Description IP address The host where the syslog messages will be forwarded to A tiny syslog server is included in TFTP32 which...

Page 70: ...User manual 70 107 GPRS EDGE UMTS routers MG101 MG102 3 Jul 2009 3 1 8 4 5 Restart...

Page 71: ...User manual 71 107 GPRS EDGE UMTS routers MG101 MG102 3 Jul 2009 3 1 8 4 6 Tech Support...

Page 72: ...User manual 72 107 GPRS EDGE UMTS routers MG101 MG102 3 Jul 2009 3 1 8 4 7 System Information Provide this information when placing a support request...

Page 73: ...networks MG101 102 can synchronize its system time with a NTP server If enabled time synchronisation is done after the mobile interface is up but before starting any VPN connec tions Later on time syn...

Page 74: ...nfiguration and inaccess ability of the device 3 1 8 6 1 Automatic Software Update Parameter Description Status Enable disable automatic software update Time of day Every day at this time MG101 102 wi...

Page 75: ...all on your PC that may hinder you doing the update We recommend disabling the firewall on your PC during the update Parameter Description Mode Update over mobile or Ethernet Interface Protocol Specif...

Page 76: ...he TFTP server as follows In the dialog Tftpd32 Settings choose the base directory e g C TFTP Create a new directory if there is none Unpack the new software to this directory into a subfolder such as...

Page 77: ...User manual 77 107 GPRS EDGE UMTS routers MG101 MG102 3 Jul 2009 3 1 9 Logout Log out from Web Manager...

Page 78: ...g using the Web Manager to get all parameters listed Racom has defined some types of parameters that are often used The table below shows the defined pa rameter types In addition other types of parame...

Page 79: ...tity LAI networkselection sim2 mode automatic automatic manual networkselection sim2 network_lai void numeric value LAI Select the network provider defined by the supplied Local Area Identity LAI dial...

Page 80: ...t query DNS server 1 query DNS server dialout profiles 1 ESCIP void 0 1 0 off 1 enable specific client IP ad dress dialout profiles 1 SCAddress void ipaddress Specific client address dialout profiles...

Page 81: ...obile j intPort void 1 65535 Internal port napt_mobile j protocol TCP TCP UDP TCP or UDP napt_mobile j status 1 0 1 0 disabled 1 enabled napt_mobile j isRedirect with j 0 49 0 0 1 0 redirect to other...

Page 82: ...it all firewall_exposed_host_mobile host void hostname The exposed host firewall_exposed_host_mobile j target void hostname Source host net firewall_exposed_host_mobile j mask with j 0 19 void netmask...

Page 83: ...guration compressionStatus 1 0 1 0 disabled 1 enabled vpn configuration username void username For credential based authentication vpn configuration password void password For credential based authent...

Page 84: ...rt 192 168 1 200 ipaddress Address range start network PPTP AddressRangeSize 5 2 254 Address range size 3 2 4 4 Dial in Server Parameter Default Value Range Description dialin status 0 0 1 0 Dial in d...

Page 85: ...ial_srv opt xonxoff void 0 1 0 disabled 1 enabled serial_srv opt rtscts void 0 1 0 disabled 1 enabled serial_srv opt phys_proto RS232 RS232 RS485 3 2 5 2 DNS Proxy Server Parameter Default Value Range...

Page 86: ...ault Value Range Description sms receiving status 1 0 1 0 disabled 1 enabled sms sending status 0 0 1 0 disabled 1 enabled sms sending gateway void phone num ber SMSC number sms sending sim2 gateway v...

Page 87: ...age events restartCrash message void password Event Message events restartWebManagement message void password Event Message events powerUp message void password Event Message events startUpComplete me...

Page 88: ...send message Switch switch digital I O evtProc l target with l 0 9 void u 0 9 g 0 9 o 0 2 Index of subscriber or group or input or output 3 2 5 9 SNMP Agent Parameter Default Value Range Description s...

Page 89: ...2 3 Jul 2009 3 2 5 12 Web Server Parameter Default Value Range Description webServer http port 80 1 65535 webServer https port 443 1 65535 3 2 5 13 UDP Message Receiver Parameter Default Value Range D...

Page 90: ...tatus 1 0 1 0 disabled 1 enabled 3 2 6 3 Time Synchronisation Parameter Default Value Range Description network NTP status 1 0 1 0 disabled 1 enabled network NTP server swisstime ethz ch hostname NTP...

Page 91: ...te values of the MG101 102 configu ration parameters In addition the CLI provides functions to query status information Command Return Description cli get string Read values of one or more specified c...

Page 92: ...validKey returns no error message cli set cli set is used to assign values to configuration parameters Arguments include all configuration keys as described in chapter 3 2 Usage set key1 value1 key2 v...

Page 93: ...Note The following commands are identical cli select automatic and cli select automatic sim1 Note The following commands have the same effect cli select automatic sim1 and cli set networkselection mod...

Page 94: ...of the OpenVPN connection cli status overview networks ipsec_state show the state of the IPsec connection cli status overview networks pptp_state show the state of the PPTP server cli status overview...

Page 95: ...User manual 95 107 GPRS EDGE UMTS routers MG101 MG102 3 Jul 2009 help Print the cli help message usage exit Not for end user use...

Page 96: ...6A CR LF No Name Data Description 1 Sentence Identifier GPGGA Global Positioning System Fix Data 2 Time time UTC of position fix 3 Latitude latitude N S Latitude of fix 4 Longitude longitude E W Longi...

Page 97: ...itude E W Longitude of fix 8 Speed speed Speed over ground in knots 9 Course course Track made good in degrees True 10 Date date UT date 11 Magnetic variation 0 0 E Not available Value 0 0 E 12 Mode m...

Page 98: ...n output 1 off 00000010 Turn output 1 on turn output 2 off 00000011 Turn output 1 on turn output 2 on 4 2 3 Get status of digital inputs and output To get the states of the digital I O send the follow...

Page 99: ...i php get parameters Takes the same parameters as the CLI GET cli php set parameters Takes the same parameters as the CLI GET cli php sw update path value Starts a local software update from a TFTP se...

Page 100: ...oftware version with cli php status to verifiy whether it was successful or nor not 0 maximum length of path is 26 characters 0 syntax error Wrong syntax after in sw update pa rameters GET cli php reb...

Page 101: ...ser config zip Content Type applica tion x zip compressed Media A zip archive containing one or more of the following files can be uploaded To run OpenVPN in certificate based mode all certificate fil...

Page 102: ...Common error messages are Error Message Problem Solving SIM missing Insert a SIM card PIN code required Insert the PIN code on the SIM page Connection failed See the Debug Log under Check APN phone n...

Page 103: ...User manual 103 107 GPRS EDGE UMTS routers MG101 MG102 3 Jul 2009 5 3 Network Protocol Analyzer Via the Linux Shell bash the protocol analyzer tcpdump is available...

Page 104: ...User manual 104 107 GPRS EDGE UMTS routers MG101 MG102 3 Jul 2009 6 Customer Service 6 1 Support Please send questions or comments about MG101 102 to support racom eu...

Page 105: ...pol Figure 1 Sub D 9pol plug female Interface COM RS 232 Plug type Sub D 9pol female Pin Signal 1 DCD 2 RxD 3 TxD 4 DTR 5 GND 6 DSR 7 RTS 8 CTS 9 RI Table 1 Pin assignment COM interface RS232 Interfac...

Page 106: ...face ETH Ethernet 10BaseT und 100BaseT Plug type RJ45 Socket Pin Signal 1 TX 2 TX 3 RX 6 RX Table 3 Pin assignment Ethernet Interface Note Unlisted pins are unused A 1 3 Power Plug Interface Power Plu...

Page 107: ...terface HSCSD High Speed Circuit Switched Data HSDPA High Speed Downlink Packet Access HSUPA High Speed Uplink Packet Access HTML Hypertext Markup Language HW Hardware IP Internet Protocol IPSec Inter...

Search results

Summary of Contents for MG101

Reviews:

Related manuals for MG101

Brands by name

Popular brands

RACOM MG101, User Manual

Search results

Summary of Contents for MG101

Reviews:

Related manuals for MG101

Brands by name

Popular brands