Advantech EKI-1334 Скачать руководство пользователя страница 52

Страница: 52 / 72

EKI-1334 User Manual

3.1.7

VPN

This page introduces the parameters in EKI-1334 Web.

IPSec Settings

To build an IPSec VPN Tunnel, you need to first set IPSec properties on this page,
then go to IPSec Tunnels to add your VPN:

IPSec Tunnels

IPSec Settings

Description:

Select to Enable or Disable NATT, normally we need to enable, unless you ensure
there is no NAT routers in the network.

Select to enable Compression Mode or Debug

Name

Description

Default

Enable NAT Transversal
(NATT)

Click to enable NATT

Enable

Keep alive time interval of
NATT

Set live time for NATT

60 sec

Enable Compression

Click to enable

Enable

Enable Debug

Click to enable

Disable

Force NATT

Click to enable

Disable

Содержание EKI-1334

Страница 1: ...User Manual EKI 1334 ...

Страница 2: ...allation Advantech assumes no liability under the terms of this warranty as a consequence of such events Because of Advantech s high quality control standards and rigorous testing most of our customers never need to use our repair service If an Advantech product is defec tive it will be repaired or replaced at no charge during the warranty period For out of warranty repairs you will be billed acco...

Страница 3: ...ch com cn where you can find the latest information about the product 2 Contact your distributor sales representative or Advantech s customer service center for technical support if you need additional assistance Please have the following information ready before you call Product name and serial number Description of your peripheral attachments Description of your software operating system version...

Страница 4: ...r any liquid into an opening This may cause fire or electrical shock 13 Never open the equipment For safety reasons the equipment should be opened only by qualified service personnel 14 If one of the following situations arises get the equipment checked by service personnel The power cord or plug is damaged Liquid has penetrated into the equipment The equipment has been exposed to moisture The equ...

Страница 5: ...amage To avoid electrical shock always disconnect the power from your PC chassis before you work on it Don t touch any components on the CPU card or other cards while the PC is on Disconnect power before making any configuration changes The sudden rush of power as you connect a jumper or install a card may damage sensitive elec tronic components ...

Страница 6: ...EKI 1334 User Manual vi ...

Страница 7: ...2 3 2 Antenna Installation 9 2 3 3 Power Supply 9 2 3 4 Connect 9 2 3 5 Build Connection between EKI 1334 and PC 10 2 3 6 Start to configure your EKI 1334 Optional 12 2 3 7 Connect EKI 1334 with Internet 14 2 4 Quick IPSec VPN Configuration 15 2 5 Reset to Factory Defaults 18 2 5 1 Hardware Approach 18 2 5 2 Web Approach 19 Chapter 3 Advanced Configuration 21 3 1 Configuration on Web 22 3 1 1 Prep...

Страница 8: ...EKI 1334 User Manual viii ...

Страница 9: ...Chapter 1 1 Overview Sections include Introduction Package Checklist Features Specifications Product Models ...

Страница 10: ...s with potential explosion hazard Any metal surface that may weaken the radio signal level RF safety distance For GPRS router the compliance boundary distance is r 0 26 m for GSM 900 MHz and r 0 13 m for DCS 1800 MHz For HSUPA router the compliance boundary distance is r 0 26 m for GSM 900 MHz and r 0 13 m for DCS 1800 MHz r 0 094 for WCDMA 900 MHz r 0 063 for WCDMA 2100 MHz Warning This is a clas...

Страница 11: ... from where you purchased the equipment or manufacturer of the equipment 1 2 Package Checklist We put each EKI 1334 cellular router in a box with standard accessories Additionally there re optional accessories can be ordered When you receive our package please check carefully and if there re items missing or appearing to be damaged please contact with your Advantech sales representative Items in p...

Страница 12: ... in Serial Serial Type RS232 Data bit 5 6 7 8 Stop bit 1 2 Check bit N O D Baud rate 3 200 bit s 115 200 bit s SIM Interface SIM Control 3 V 1 3 2 Functions PPP Support VPDN APN fast access to virtual private dial up network VPDN provided by mobile operator ensure high security data transmission Support CHAP PAP MS CHAP MS CHAP V2 authorization Support Connection Detection auto recovery auto link ...

Страница 13: ...pport Ping Trace Route and Telnet 1 3 3 Environmental Limits Operating Temperature 20 to 70 C 4 to 158 F Operating Humidity 5 to 95 RH Storage Temperature 40 to 85 C 40 to 167 F 1 3 4 Power Requirements Power Inputs 1 terminal block including power jack and serial Input Voltage 9 26 VDC 1 3 5 Physical Characteristics Housing Steel providing IP30 protection Dimensions mm Back Side View Front View 1...

Страница 14: ...EKI 1334 User Manual 6 ...

Страница 15: ...Chapter 2 2 Hardware Installation Sections include Typical Application Panel Layout Quick Connect to Internet Quick IPSec VPN Configuration Reset to Factory Defaults ...

Страница 16: ...hile to ensure the security and access EKI 1334 support VPN enabling remote access and secure data transmis sion through Internet 2 2 Panel Layout The Reset bottom SIM card slot and power supply are on above panel Description of LED Legend On Off Blink Power on Start to run firmware Begin dial to Internet Connect to internet Upgrading firmware Restore factory default ...

Страница 17: ...face of enhanced antenna to the interface of skin antenna and screw tightly Put the amplifier of enhanced antenna to where it can receive the signal well 2 3 3 Power Supply Connect EKI 1334 to power supply with the power supply cord in the package observe whether the Power LED on the panel of EKI 1334 goes on If not please contact Advantech for technical support You can start to configure EKI 1334...

Страница 18: ...e set the PC to auto matically obtain IP address via DHCP Based on Windows Operation System 1 Open Control Panel double click Network Connections icon and enter Net work Connections Screen 2 Double click Local Area Connection enter Local Area Connection Status screen 3 Click Properties enter Local Area Connection Properties screen ...

Страница 19: ...4 for example set IP 192 168 2 10 Net Mask 255 255 255 0 Default Gateway 192 168 2 1 Click OK EKI 1334 will allocate an IP address 192 168 2 x and a gateway 192 168 2 1 the default address of EKI 1334 After configure TCP IP protocols you can use ping command to check whether the link between PC and Router is built correctly Below is an example to execute Ping command under Windows XP Ping 192 168 ...

Страница 20: ...tional After you have finished the former steps you can configure the EKI 1334 1 Open IE browser input the default IP address of the Router http 192 168 2 1 you can see the login page as below Input username default adm and the password default 123456 then click login to enter the operation screen 2 Change the IP configuration Caution After updating the configuration please click apply to activate...

Страница 21: ...low Click Network LAN change the IP address to 192 168 1 254 3 Click Apply then you will see Now the IP address of EKI 1334 has been reset and in order to enter the configura tion page you need to set your PC in the same subnet as EKI 1334 for example 192 168 1 10 24 then input the updated IP address 192 168 1 254 in your IE Browser ...

Страница 22: ...nterface 2 Please check the APN Dialup Number Username and Password Dialup Number Username and Password are provided by local mobile operator The following examples show parameters provided by China Mobile Vodafone Please contact with local operator for details 1 China Mobile APN CMNET Phone Number 99 User Name web Password web 2 Vodafone APN internet Phone Number 99 User Name web Password web ...

Страница 23: ...C through Internet or you need to ensure security of the data transmission here s a quick configuration guide of IPSec for EKI 1334 Connect PC with Router to enter router configuration interface select VPN IPSec setting Enable NAT Traversal NATT select enable Keep alive time interval of NATT set the Keep alive time interval of NATT default is 60 seconds Enable Compression select enable Please chan...

Страница 24: ... Activated Negotiation Mode optional between Main Mode and Aggressive Mode Generally select Main Mode IPSec Protocols optional among ESP AH Generally select ESP IPSec Mode optional between Tunnel Mode and Transport Mode Generally select Tunnel Mode Tunnel Type optional among Host Host Host Subnet Subnet Host and Subnet Subnet Local Subnet IPSec local subnet protected E g 172 16 16 0 Local Net Mask...

Страница 25: ...ey set IPSec VPN negotiating key Phase 2 Parameters configuration parameters during Phase 2 of IPSec negoti ation IPSec Policy optional between 3DES MD5 96 and AES MD5 96 suggest selecting 3DES MD5 96 IPSec Lifetime the default is 3600 seconds Perfect Forward Encryption Optional among None GROUP1 GROUP2 and GROUP5 This parameter should match with the server generally select None Click Save to fini...

Страница 26: ...ardware Approach Legend On Off Blink 1 Press and hold RESET button while turning on EKI 1334 2 When you see ERROR LED turns on about 10 seconds after power on release the RESET button 3 After a few seconds the ERROR LED will turn off now press RESET button again ...

Страница 27: ... LED blink which means reset to factory defaults succeed Factory default settings IP 192 168 2 1 Net Mask 255 255 255 0 Serial parameter 19200 8 N 1 2 5 2 Web Approach 1 Login the web interface of EKI 1334 select System Config Management 2 Click Restore default configuration to Reset EKI 1334 ...

Страница 28: ...EKI 1334 User Manual 20 ...

Страница 29: ...Chapter 3 3 Advanced Configuration Sections include Configuration on Web CLI Configuration ...

Страница 30: ...pter will show you how to configure EKI 1334 via Web interface 3 1 1 Preparation 1 First connect your devices to EKI 1334 with a cable or a HUB switch then set the IP of PC and EKI 1334 in the same subnet for example Set PC IP to 192 168 2 50 net mask 255 255 255 0 gateway default IP of EKI 1334 192 168 2 1 ...

Страница 31: ...2 Open IE browser input the IP address of EKI 1334 http 192 168 2 1 default IP of EKI 1334 Then you ll see the Login Window pop up you need to login as Administrator Input the username and password default adm 123456 3 Click Login to enter configure interface ...

Страница 32: ...er Name Set name of EKI 1334 Router My Router Host Name Name the device PC linked with EKI 1334 Router My Router Name Description Default Router Time Display router time 2000 01 01 8 00 00 PC Time Display PC time or the time of device linked with router Time Zone Set time zone Custom Custom TZ string Set the string of time zone of Router CST 8 Auto Update Time Time Update Interval Disabled NTP Tim...

Страница 33: ...s Name Description Default Baud Rate Serial baud rate 19200 Data Bit Serial data bits 8 Parity Set parity bit of serial data None Stop Bit Set stop bit of serial data 1 Hardware Flow Control Enable Hardware Flow Control Disable Software Flow Control Enable Software Flow Control Disable ...

Страница 34: ...nable Remote Access Enable allow to manage EKI 1334 by WAN e g HTTP Disable forbid to manage EKI 1334 by WAN e g HTTP Enable Allowed Access from WAN Optional Set the range of allowed IP address for WAN HTTP HTTPS TELNET SSHD Control services server can be set at this time for example 192 168 2 1 30 or 192 168 2 1 192 168 2 10 Description Describe the parameters of management non influence to EKI 1...

Страница 35: ...m Upgrade Name Description Router Configuration Import Backup configuration file Restore default configu ration Click to reset EKI 1334 to enable RESET you need to reboot EKI 1334 Network Provider ISP Used to configure the APN username password and other param eters of major operators ...

Страница 36: ...choose the upgrade file Click update and then click sure to begin update the window will show as below Upgrade firmware succeed and click reboot to restart EKI 1334 8 Reboot If you need to reboot system please click System Reboot then click OK to restart system 9 Logout If you need to logout system click System Logout and then click OK ...

Страница 37: ...29 EKI 1334 User Manual Chapter 3 Advanced Configuration 3 1 3 Network Network settings include Dialup LAN DNS DDNS Static Route and etc 1 Dialup ...

Страница 38: ...1334 will redial after the interval 30 seconds Show Advanced Options Enable configure advanced options Disabled Initial Commands Used for advanced parameters Blank Dial Timeout Set dial timeout IR700 will reboot after timeout 120 seconds MTU Set max transmit unit 1500 MRU Set max receive unit 1500 TX Queue Length Set length of transmit queue 3 Enable IP header com pression Enable IP header compres...

Страница 39: ...dule schedule 1 Sunday Blank Monday Enable Tuesday Enable Wednesday Enable Thursday Enable Friday Enable Saturday Blank Time Range 1 Set Time Range 1 9 00 12 00 Time Range 2 Set Time Range 2 14 00 18 00 Time Range 3 Set Time Range 3 0 00 0 00 Description Describe configuration Blank Name Description Default Type Static IP Dynamic Address DHCP ADSL Dialup PPPoE Disabled Disabled ...

Страница 40: ... Disable the local device can t get access to internet via Router Enable MAC Address Set MAC Address IP Address Set WAN port IP 192 168 1 29 Net Mask Set WAN port Net Mask 255 255 255 0 Gateway Set WAN Gateway 192 168 1 1 MTU Set Max Transmission Unit optional between default and manual 1500 Multi IP Settings can set 8 additional IP address at the most IP address Set the additional IP address of L...

Страница 41: ...h Router can get access to internet Disable the local device can t get access to internet via Router Enable MAC Address Set MAC Address MTU Set Max Transmission Unit optional between default and manual 1500 ADSL Dialup PPPoE Settings Username Set username for dialing up Blank Password Set password for dialing up Blank Static IP Enable Static IP Disabled IP address Static IP Address Blank Peer IP S...

Страница 42: ...ection Max Reties 3 Name Description Default MAC Address The MAC address in LAN 00 10 A1 86 95 02 Provided by Advan tech for manufactures IP Address Set IP Address in LAN 192 168 2 1 If Changed you need to input the new address for entering the configuration web Net Mask Set Net Mask of LAN 255 255 255 0 MTU Set MTU length optional between Default and Manual 1500 Detection Host Set Detection Host ...

Страница 43: ...iguration 4 DNS 5 DDNS Dynamic DNS Name Description Default Primary DNS Set Primary DNS Blank Secondary DNS Set Secondary DNS Blank Name Description Default Current Address Show the current IP address Blank Service Type Select DDNS Provider Disabled ...

Страница 44: ...URL http www dyndns com Username Registered username for DDNS Password Registered password for DDNS Hostname Registered hostname for DDNS Name Description Default Destination Set IP address of destination Blank Net Mask Set subnet Mask of destination 255 255 255 0 Gateway Set the gateway of destination Blank Interface Optional LAN WAN port access to destination Blank Description Describe static ro...

Страница 45: ... 60 minutes DNS Set DNS Server 192 168 2 1 Windows Name Server WINS Set WINS Blank Static DHCP can set 20 des ignated IP address at the most MAC Address Set the MAC address of a designated IP address Blank IP address Set the static IP address 192 168 2 2 Host Set the hostname Blank Name Description Default Enable DNS Relay Click to enable DNS Relay Disabled Designate IP address DNS couples 20 at t...

Страница 46: ...up id of routers range 1 255 1 Priority Select priority for router range 1 254 10 bigger number stands for higher priority Advertisement Interval Set ad interval 60 sec Virtual IP Set Virtual IP Blank Authentication Type Optional None Password type None Virtual MAC Set Virtual MAC Blank Monitor Set Monitor None VRRP II ...

Страница 47: ...ect interval Set Max Reconnect interval 180 DTU ID Set ID of DTU Blank Source IP Set Source IP Blank Multi Server Set the IP address and Port of server to receive data Blank Name Description Default Enable Click to enable SMS control Disable Status Query Set Status Query SMS and you can see status of router by send SMS e g show status Reboot Let the router reboot SMS Access Control Default Policy ...

Страница 48: ...ymous WAN Request ping Click to enable filer ping request Disable Filter Multicast Click to enable filter multicast Enable Defend DoS Attack Click to enable Defend DoS Attack Enable Name Description Default Enable Click to enable filtering Blank Protocol Optional among TCP UDP ICMP All Source IP address Set Source IP address Blank Source Port Set Source Port Blank Destination IP Set destination IP...

Страница 49: ...ort Fill the port of service 8080 Internal Address Set the internal IP for mapping Blank Internal Port Set the Port mapping to internal 8080 Log Click to enable log about port mapping Disable Description Describe meanings of each mapping Blank Name Description Default Virtual IP for Router Set Virtual IP for Router Blank Source IP Range Set range of source IP address Blank Virtual IP Set virtual I...

Страница 50: ...un dling can access external network Caution This function cannot map the admin port of EKI 1334 e g 80 TCP to the device s port Name Description Default Enable DMZ Click to Enable DMZ Disable DMZ Host Set host IP of DMZ Blank Source Address Range Set IP address with restrict IP access Blank Name Description Default MAC Address Set Bundling Mac address Blank IP Address Set Bundling IP address 192 ...

Страница 51: ...Outbound Limit Max Bandwidth Set the limit speed of out bound bandwidth 100000kbit s Inbound Limit Max Bandwidth Set the limit speed of inbound bandwidth 100000kbit s Name Description Default Enable Click to enable Disable IP Address Set IP Address Blank Rate Set Rate 100 kbit s Priority Set the Priority Medum Description Describe this configuration Blank ...

Страница 52: ...ec Settings Description 1 Select to Enable or Disable NATT normally we need to enable unless you ensure there is no NAT routers in the network 2 Select to enable Compression Mode or Debug Name Description Default Enable NAT Transversal NATT Click to enable NATT Enable Keep alive time interval of NATT Set live time for NATT 60 sec Enable Compression Click to enable Enable Enable Debug Click to enab...

Страница 53: ...vanced Options Click to enable advanced options Disable Basic Parameters Tunnel Name To name the tunnel IPSec_tunnel_1 Destination Address Set the destination address of IPSec VPN Server Blank Startup Mode Auto Activate Trigged by Data Passive Manually Activated Enable Negotiation Mode Optional Main Mode or Aggressive Mode Main Mode ...

Страница 54: ... the ID according to ID type Blank Remote ID Type Optional FQDN USERFQDN or IP Address IP Address Remote ID Only for FQDN and USERFQDN Set the ID according to ID type Blank Authentication Type Optional Shared Key or Certifi cate Shared Key Key While choosing Shared Key Authentica tion Type Set IPSec VPN Negotiation Key Blank Phase 2 Parameters IPSec Policy Optional 3DES MD5 96 or AES MD5 96 3DES M...

Страница 55: ... Tunnel Name tun0 Local Virtual IP Set Local Virtual IP 0 0 0 0 Remote Address Set Remote Address 0 0 0 0 Remote Virtual IP Set Remote Virtual IP 0 0 0 0 Remote Subnet Address Set Remote Subnet Address 0 0 0 0 Remote Subnet Net Mask Set Remote Subnet Net Mask 255 255 255 0 Key Set Tunnel Key Blank NAT Click Enable NAT Function Disable Description Add Description Blank ...

Страница 56: ...e Set Authencation Type CHAP PAP CHAP Enable Challenge secrets Set to enable Challenge secrets Disable Local IP Address Set Local IP Address Blank Remote IP Address Set Remote IP Address Blank Remote Subnet Set Remote Subnet Blank Remote Subnet Net Mask Set Remote Subnet Net Mask 255 255 255 0 Link Detection Interval Set Link Detection Interval 60 Max Retries for Link Detection Set Max Retries for...

Страница 57: ...ation Type CHAP PAP MS CHAPv1 MS CHAPv2 Auto Local IP Address Set Local IP Address Blank Remote IP Address Set Remote IP Address Blank Remote Subnet Set Remote Subnet Blank Remote Subnet Net Mask Set Remote Subnet Net Mask 255 255 255 0 Link Detection Interval Set Link Detection Interval 60 Max Retries for Link Detection Set Max Retries for Link Detection 5 Enable NAT Click Enable NAT Blank Enable...

Страница 58: ...i key 4 X 509 Cert multi client CA mode for multi users to access CA needed Client root CA ca crt public key pub crt private key pri key Server root CA ca crt public key pub crt private key pri key 5 X 509 Cert CA mode for host to host tunnel CA needed Client root CA ca crt public key pub crt private key pri key Server root CA ca crt public key pub crt private key pri key 6 User X 509 mode usernam...

Страница 59: ...ryption Algorithms Set encryption algorithms must match with the server MTU Max Fragment Size Always use default Name Description Enable Client to Client Enable client access to other clients Client Management Tunnel Name Tunnel Name of the Client Username Common Name Username using Username password mode or Common Name in CA CA mode Local Static Route The client subnet Remote Static Route The ser...

Страница 60: ...te Protected Key Blank Certificate Protected Key Confirm Confirm Certificate Protected Key Blank Import Export CA Certificate Import or Export CA Certifi cate Blank Import Export Certificate CRL Import or Export Certificate CRL Blank Import Export Public Key Certificate Import or Export Public Key Certificate Blank Import Export Private Key Certificate Import or Export Private Certifi cate Blank ...

Страница 61: ...e Description Default Host Destination for PING Blank Ping Count Set PING Counts 4 times Packet Size Set PING Packet Size 32 Bytes Expert Options Advanced parameters Blank Name Description Default Host Destination for Trace Route Blank Max Hops Set Max Hops 20 Time Out Set Time Out 3 sec Protocol Optional ICMP UDP UDP Expert Options Advanced parameters Blank ...

Страница 62: ...oad 3 1 9 Status Status contains System Modem WLAN Network Connections Route Table Device List and Log 1 System Status This page shows the status of system including Name Model Type Current Version and etc 2 Modem Status This page shows the status of Modem including signal level ...

Страница 63: ...apter 3 Advanced Configuration 3 Network Connections This page shows the network connections via WAN or LAN 4 Route Table This page shows the route table of EKI 1334 5 Device List This page shows the devices linked with EKI 1334 ...

Страница 64: ...56 6 Log This page shows the log of system including download log file Under certain situation when there re problems that can t be diagnosed at the moment you ll be asked to provide the diagnose log to Advantech engineers ...

Страница 65: ...his chapter will show you how to configure via CLI 3 2 1 CLI Operation 1 Input telnet LAN IP to login CLI configuration For example 2 After connection is succeed input username and password of EKI 1334 The default username password is adm 123456 Caution Password will not be showed ...

Страница 66: ...EKI 1334 User Manual 58 3 Login to User Mode This screenshot is the config view of IR700 4 Enter privileged mode password is 123456 ...

Страница 67: ... 6 Enter configured mode then you could configure parameters you want to set up 3 2 2 CLI command Configure username and password Enable serial function Configure serial port parameters like baudrate parity stop bit and so on Enable advanced options of dialup Configure ICMP server Configure LAN IP ...

Страница 68: ...nction Configure DHCP IP pool 192 168 2 10 192 168 2 20 Enable HTTP function Configure HTTP service port Enable HTTP local access Enable HTTP remote access Check device ID After configuration please don t forget to commit and reboot router ...

Страница 69: ...Appendix A A FAQ ...

Страница 70: ...oes off press and hold the button again until the ERROR LED blinks 6 times the EKI 1334 is now restored to factory default settings You may con figure it now 4 After EKI 1334 is powered on it frequently auto restarts Why does this hap pen Please check Whether the module works normally Whether the EKI 1334 is inserted with a SIM card Whether the SIM card is enabled with data service whether the ser...

Страница 71: ...ubnet and the gateway address is EKI 1334 LAN address 11 EKI 1334 is powered on but can t configure through the web interface Whether the IP Address of your computer is the same subnet with EKI 1334 and the gateway address is EKI 1334 LAN address Check the firewall settings of the PC used to configure EKI 1334 whether this function is shielded by the firewall 12 The EKI 1334 dialup always fails I ...

Страница 72: ...cations are subject to change without notice No part of this publication may be reproduced in any form or by any means electronic photocopying recording or otherwise without prior written permis sion of the publisher All brand and product names are trademarks or registered trademarks of their respective companies Advantech Co Ltd 2015 ...

Результаты поиска

Содержание EKI-1334

Отзывы:

Похожие инструкции для EKI-1334

Бренды по названию

Популярные бренды

Advantech EKI-1334, Руководство пользователя

Результаты поиска

Содержание EKI-1334

Отзывы:

Похожие инструкции для EKI-1334

Бренды по названию

Популярные бренды