background image

User’s Manual 

40 

Parameter 

Description 

Public Client Cert 

Enter the public client certification. 

Private Client Key 

Enter the private client key. 

 Advanced options 

Figure 3-29

 

Table 3-23 Description of advanced options 

Parameter 

Description 

TLS Cipher 

Select TLS encryption standard. None by default. 

Use LZO Compression 

Set whether to enable LZO compression during data 

transmission. 

NAT 

Network Address Translation. 

Set whether to enable NAT. 

Bridge TAP to br0 

Set whether to bridge TAP to br0. 

IP Address 

Enter IP address of the local OPENVN client. 

Subnet Mask 

Enter subnet mask of the local OPENVN client. 

TUN MTU Setting 

Set the MTU for the tunnel. 

Tunnel UDP Fragment 

Set UDP fragment for the tunnel. 

TCP MSS 

Set the maximum segment size of TCP data. 

nsCertType verification 

Set whether to support ns certification type. 

TLS Auth Key 

Set authentication key of TLS. 

Additional Config 

Set additional configuration of the OPENVPN server. 

Содержание DH-WM4700-O

Страница 1: ...User s Manual 4G Router User s Manual V1 0 0 V1 0 0 ZHEJIANG DAHUA VISION TECHNOLOGY CO LTD ZHEJIANG DAHUA VISION TECHNOLOGY CO LTD...

Страница 2: ...al information as the emphasis and supplement to the text Revision History Version Revision Content Release Time V1 0 1 Update images in 1 3 2 3 2 and 3 1 March 2020 V1 0 0 First release Janurary 2020...

Страница 3: ...of final explanation Upgrade the reader software or try other mainstream reader software if the manual in PDF format cannot be opened All trademarks registered trademarks and the company names in the...

Страница 4: ...device in the well ventilated environment Do not block the air vent of the device Use the device at rated input and output voltage Do not dissemble the device without professional instruction Transpo...

Страница 5: ...2 3 4 Indicator 5 2 3 5 Reset 6 3 Configuration and Management 7 Device Connection 7 3 1 Login 7 3 2 Setup 8 3 3 3 3 1 Basic Setup 8 3 3 2 Dynamic DNS 17 3 3 3 MAC Address Clone 19 3 3 4 Advanced Rout...

Страница 6: ...apping 55 QoS Setting 55 3 10 3 10 1 Basic 55 3 10 2 Classify 56 Serial Applications 58 3 11 Administration 60 3 12 3 12 1 Router Management 60 3 12 2 Keep Alive 64 3 12 3 Commands 64 3 12 4 Factory D...

Страница 7: ...eatures 1 2 Design for Industrial Application High performance industrial cellular module High performance industrial 32 bit CPU Adopt metal shell with IP30 protection Suitable for industrial control...

Страница 8: ...supports AP client Repeater Repeater Bridge and WDS optional mode WIFI supports WEP WPA WPA2 encryption supports RADIUS authentication and MAC address filter Multiple online trigger ways including SM...

Страница 9: ...1 Check if there is obvious damage to the appearance of the Router Make sure that the components are complete against the packing list See Table 2 1 for details Table 2 1 Product list Name Quantity Ro...

Страница 10: ...SMA male pin of the cellular antenna to the female SMA interface of the Step 1 Router with sign ANT M and ANT A Screw the SMA female pin of the WIFI antenna to the male SMA interface of the Router Ste...

Страница 11: ...power is above 8W Standard power supply 12V 1 5A DC is recommended 2 3 4 Indicator For details of the indicators of the Router see Table 2 2 Table 2 2 Indicator description Indicator Status Descriptio...

Страница 12: ...is disconnected WIFI On Wi Fi is enabled Off Wi Fi is not enabled Signal Strength One light on Weak signal strength less than 90 dbm Two lights on Medium signal strength 70 dbm to 90 dbm Three lights...

Страница 13: ...Before you configure the Router make sure that The Router is connected to the PC The network of the PC is set to automatic access mode Open the browser enter IP address of the Router the default IP i...

Страница 14: ...e Step 3 6 options are available Disabled WAN connection is disabled Static IP Suitable for commercial optical fiber and other special line access Automatic Configuration DHCP Wire connection obtain I...

Страница 15: ...c DNS by your own or ISP assigns Keep Online Detection Select online detection mode to detect whether the Internet connection is active The following detection mode are available None disable this fun...

Страница 16: ...Enter the access point name of your ISP Fixed WAN IP Set whether to enable fixed WAN IP If enabled enter the WAN IP address Allow these authentication Supports PAP and CHAP Connection type Supports t...

Страница 17: ...ly Backup Detection Server IP Fixed WAN IP Set whether to enable fixed WAN IP If enabled enter the WAN IP address Fixed WAN GW Address Set whether to enable fixed WAN gateway address If enabled enter...

Страница 18: ...ble fixed WAN gateway address Enable Dial Failure to Restart Whether to enable the restart of the Router when dial up fails Ppp Asyncmap Whether to enable PPP asyncmap Force reconnect Whether to enabl...

Страница 19: ...ode 576 16320 in other modes Value among 1200 1500 is recommended 1492 is recommended If the Router is required to select the best MTU for the Internet select Auto mode Force Net Card Mode Supports th...

Страница 20: ...Click Cancel Changes to cancel the configuration Step 6 WAN Port You can set WAN port only when the WAN connection type is disabled Log in to the web interface of the Router Step 1 In the left navigat...

Страница 21: ...nly need to set DHCP Server DHCP Server Enabled by default If there is already a DHCP server on network or you do not want a DHCP server select Disable If DHCP Type is set to DHCP Forwarder you only n...

Страница 22: ...e Windows Internet Naming Service WINS manages every PC that interacts with the Internet If you want to use a WINS server enter the IP address of the WINS server Otherwise leave it blank Use DNSMasq f...

Страница 23: ...ystem time by Auto or Manual and then click Set Step 3 If the NTP service is unavailable you can adjust time manually Click Save to save the configuration Step 4 Click Apply Settings to apply the conf...

Страница 24: ...ccording to different DDNS services and the actual interface shall prevail Wildcard Set whether to support wildcard or not The default is OFF ON means host 3322 org is equal to host 3322 org Do not us...

Страница 25: ...ddress is 48 bit and cannot be set as a multicast address that is the first byte should be even The MAC address of bridge br0 is determined by the smaller value of wireless MAC address and LAN MAC add...

Страница 26: ...determined path for transmission of network information to a specific host or network To set up a static route between the router and another network Log in to the web interface of the Router Step 1 I...

Страница 27: ...dress Click Show Routing Table you can view the routing details of the current router Click Save to save the configuration Step 4 Click Apply Settings to apply the configuration Step 5 Optional Click...

Страница 28: ...list configure ports and manage DHCPD servers 3 3 6 1 Bridging Create Bridge Log in to the web interface of the Router Step 1 In the left navigation menu select Setup Networking Step 2 In Create Bridg...

Страница 29: ...the web interface of the Router Step 1 In the left navigation menu select Setup Networking Step 2 In Assign to Bridge section click Add Step 3 Select bridge interface and set priority Step 4 Prio mean...

Страница 30: ...MTU Maximum transmission unit 1500 bytes by default Multicast forwarding Set whether to enable multicast forwarding Masquerade NAT Set whether to enable Masquerade NAT IP Address Set IP address of sel...

Страница 31: ...DHCP Figure 3 16 Click Save to save the configuration Step 5 You can add another DHCP after saving the current one You cannot configure multiple DHCP servers at the same time Click Apply Settings to...

Страница 32: ...de This parameter is valid only when the Wireless Network Mode is selected under N Only Greenfield When there are no other 802 11a b g devices use the same channel using this mode can increase through...

Страница 33: ...ers For details see Table 3 13 Step 4 AP Isolation Isolate all wireless client devices so that they can only access fixed network connected by AP Optional Click Remove to delete the virtual interface...

Страница 34: ...13 ASCII characters ASCII HEX ASCII the key is 5 bit ASCII characters or 13 bit ASCII characters HEX the key is 10 bit or 26 bit hexadecimal digits Passphrase Enter combination of letters and numbers...

Страница 35: ...onfigure DHCP as needed Log in to the web interface of the Router Step 1 In the left navigation menu click Services Step 2 In DHCP Server section click Add Step 3 Add service Figure 3 20 Set MAC addre...

Страница 36: ...max 2 DHCP server IP range dhcp range 192 168 0 110 192 168 0 111 12h Click Save to save the configuration Step 4 Click Apply Settings to apply the configuration Step 5 Optional Click Cancel Changes...

Страница 37: ...Cancel Changes to cancel the configuration Step 6 3 5 4 System Log You can enable system log to capture system messages By default the system log will be collected in the local file var log messages...

Страница 38: ...In Telnet section enable or disable Telnet Step 3 Click Save to save the configuration Step 4 Click Apply Settings to apply the configuration Step 5 Optional Click Cancel Changes to cancel the configu...

Страница 39: ...er as PPTP server which should be different from the LAN address Client IP s Enter IP addresses that are assigned to the clients The format is xxx xxx xxx xxx xxx CHAP Secrets User name and password o...

Страница 40: ...Mask Enter subnet mask of the remote PPTP server MPPE Encryption Set whether to enable MPPE encryption MTU Maximum Transmission Unit The range is 0 1500 MRU Maximum Receive Unit The range is 0 1500 NA...

Страница 41: ...scription of L2TP server parameters Parameter Description Force MPPE Encryption Set whether to mandatorily enable MPPE Microsoft Point to Point Encryption encription of L2TP data Server IP Enter IP ad...

Страница 42: ...ame Enter user name to log in to L2TP server Password Enter password to log in to L2TP server Tunnel Authentication Password Set tunnel authentication password as needed not recommended Gateway L2TP S...

Страница 43: ...re Authentication Set whether to support authentication Click Save to save the configuration Step 4 Click Apply Settings to apply the configuration Step 5 Optional Click Cancel Changes to cancel the c...

Страница 44: ...A certificattion of server and client Public Server Cert Enter public server certification Private Server Key Set private server key DH PEM Enter DH PEM Additional Config Enter additional configuratio...

Страница 45: ...of the OPENVPN server Tunnel Device TUN Router mode TAP Bridge mode Tunnel Protocol Supports UDP and TCP Encryption Cipher The following encription cipher modes are available Blowfish CBC AES 128 CBC...

Страница 46: ...ata transmission NAT Network Address Translation Set whether to enable NAT Bridge TAP to br0 Set whether to bridge TAP to br0 IP Address Enter IP address of the local OPENVN client Subnet Mask Enter s...

Страница 47: ...obal settings section select Enable NAT Traversal and Debug Level Step 3 Global settings Figure 3 30 Click Save to save the configuration Step 4 3 6 4 2 Connection Status and Control You can view IPSE...

Страница 48: ...er Table 3 24 Parameter description of advanced settings Parameter Description Phase 1 IKE Encryption The following IKE encryption modes are available AES 256 bit AES 192 bit AES 128 bit 3DES and DES...

Страница 49: ...ed and the channel can be used Action You can perform operations on the connection including Delete the connection If the IPSEC channel is established it will also be removed Edit the connection After...

Страница 50: ...e of the imported certificate and public CA certificate Generate a certificate 1 Select Generate A Cert in ADD Method Generate a certificate Figure 3 35 2 Select a Signed Method 3 Configure parameters...

Страница 51: ...in network layer protocols such as IP and IPX so that these encapsulated data packets can be transmitted in another network layer protocol such as IP GRE uses tunnel technology which is a Layer 3 tunn...

Страница 52: ...etry times of GRE keepalive Interval Set the sending interval of GRE keepalive packet Fail Action Select the keepalive failure action Optional Click View GRE Tunnels to view the tunnel details Step 4...

Страница 53: ...ages programmed with Java tools Select this check box to enable Java applet filtering or deselect to disable this function Filter ActiveX If you reject ActiveX you may not be able to open web pages pr...

Страница 54: ...ply Settings to apply the configuration Step 8 Optional Click Cancel Changes to cancel the configuration Step 9 3 7 2 Log Management The Router can keep logs of all incoming or outgoing traffic for yo...

Страница 55: ...Deny the specific PCs will be denied to access any Internet service during specific time periods Filter If you select Filter the specific PCs will be prevented from accessing the specific websites dur...

Страница 56: ...lter Step 2 Enable URL filter Step 3 URL filter Figure 3 41 Select a policy Step 4 Discard packets conform to the following rules Only discard the matching URL addresses in the list Accept only the da...

Страница 57: ...r MAC address in Add Filter Rule MAC box and then click Add Step 5 Click Save to save the configuration Step 6 Click Apply Settings to apply the configuration Step 7 Optional Click Cancel Changes to c...

Страница 58: ...n INPUT Packet from WAN to LAN OUTPUT Packet from LAN to WAN Pro Select a protocol type of the packet SPorts Set source port of the packet DPorts Set destination port of the packet Source IP Set sourc...

Страница 59: ...on of port forwarding parameters Parameter Description Application Enter the name of the application Protocol Select a protocol for the application TCP UDP or Both Source Net Enter the IP address of t...

Страница 60: ...tocol Select a protocol for the application TCP UDP or Both IP Address Enter the intranet IP address of the server accessed by Internet users Enable Set whether to enable the application Click Save to...

Страница 61: ...device Step 4 Select Enable check box to enable the virtual IP mapping Cancel selection to disable Step 5 the virtual IP mapping Click Save to save the configuration Step 6 Click Apply Settings to ap...

Страница 62: ...bandwidth for download It is generally 80 to 90 of your maximum bandwidth Set HTB uplink downlink bandwidth according to HTB priorities Step 4 HTB setting Figure 3 49 Click Save to save the configurat...

Страница 63: ...k and the unrestricted data flow rate is Exempt_Rate_Up and Exempt_Rate_Do The total upload bandwidth of other priorities is mini Max_Up Exempt_Rate_Up Uplink The total download bandwidth of other pri...

Страница 64: ...Step 5 Click Apply Settings to apply the configuration Step 6 Optional Click Cancel Changes to cancel the configuration Step 7 Serial Applications 3 11 The console port of the Router is usually used a...

Страница 65: ...onnection TCP server Standard TCP server connection TCST Custom TCP connection Modbus TCP Modbus protocol based on Ethernet TCP IP DCUDP UDP connection in CUDP mode DCTCP TCP connection in CTCP mode S...

Страница 66: ...3 The user name is admin by default The new password must not exceed 32 characters and must not contain any blank spaces We strongly recommend that you change the default password and update it regula...

Страница 67: ...her to enable password protection for system information webpage Web access Figure 3 54 Click Save to save the configuration Step 4 Click Apply Settings to apply the configuration Step 5 Optional Clic...

Страница 68: ...2 In Cron section enable Cron and add additional Cron jobs Step 3 Cron Figure 3 56 Click Save to save the configuration Step 4 Click Apply Settings to apply the configuration Step 5 Optional Click Can...

Страница 69: ...t Figure 3 57 Click Save to save the configuration Step 4 Click Apply Settings to apply the configuration Step 5 Optional Click Cancel Changes to cancel the configuration Step 6 3 12 1 8 Firmware Upgr...

Страница 70: ...hedule Reboot section enable Schedule Reboot Step 5 Enable schedule reboot Figure 3 60 Set interval or set to reboot at a specified time Step 6 Interval in seconds Reboot after the interval At a set T...

Страница 71: ...set command lines that are executed when the firewall is enabled In Commands text box enter command only one command line and then click Save Firewall Save Custom Script Custom script is stored in tm...

Страница 72: ...u select Administration Firmware Upgrade Step 2 Click Browse to select the upgrading file Step 3 Click Upgrade and wait until the upgrade is finished Step 4 Firmware upgrading may take a few minutes 3...

Страница 73: ...n view system information serial application status memory and network of the Router All information is read only Log in to the web interface of the Router Step 1 In the left navigation menu select St...

Страница 74: ...emory Total Available The total available memory of RAM that is physical memory minus the reserved bits and the kernel s binary code size Free The free memory of the system The Router will reboot if t...

Страница 75: ...Basic Setup For details refer to 3 3 1 Basic Setup Total Traffic Display the Internet traffic of the Router since the latest reboot Traffic by Month Display the Internet traffic of the Router by mont...

Страница 76: ...al 70 Traffic Figure 3 65 3 13 3 LAN You can view the LAN status active clients DHCP status and DHCP clients Log in to the web interface of the Router Step 1 In the left navigation menu select Status...

Страница 77: ...net mask of LAN Gateway Gateway of LAN Local DNS DNS of LAN Active Clients Host Name Host name of LAN client IP Address IP address of the client MAC Address MAC address of the client Conn Count Connec...

Страница 78: ...t Lease Time Lease time of the DHCP client DHCP Clients Host Name Host name of LAN client IP Address IP address of the DHCP client MAC Address MAC address of the DHCP client Client Lease Time Lease ti...

Страница 79: ...ess mode Network Wireless network mode SSID Wireless network name Channel Wireless network channel TX Power Transmission power of wireless network Rate Transmission rate of wireless network Encryption...

Страница 80: ...s client SNR Signal to noise ratio of wireless client Signal Quality Signal quality of wireless client Click Site Survey to view all wireless networks that are reachable by the Router in the neighborh...

Страница 81: ...e web interface of the Router Step 1 In the left navigation menu select Status Bandwidth Step 2 The abscissa axis of the graph indicates time The vertical axis of the graph indicates speed rate Switch...

Страница 82: ...User s Manual 76 Bandwidth Figure 3 69 3 13 7 System Information You can view system information including the Router wireless network wireless packet wireless clients DHCP clients services and memory...

Страница 83: ...mation parameters Parameter Description Router Router Name Name of the Router Router Model Model of the Router LAN MAC MAC address of LAN port WAN MAC MAC address of WAN port Wireless MAC MAC address...

Страница 84: ...f LAN client IP Address IP address of the DHCP client MAC Address MAC address of the DHCP client Client Lease Time Lease time of the DHCP client Services DHCP Server Display whether DHCP server is ena...

Страница 85: ...able the auto check for updates function to obtain timely information of firmware updates released by the manufacturer We suggest that you download and use the latest version of client software Nice t...

Страница 86: ...services SNMP Choose SNMP v3 and set up strong encryption passwords and authentication passwords SMTP Choose TLS to access mailbox server FTP Choose SFTP and set up strong passwords AP hotspot Choose...

Страница 87: ...sted to use VLAN network GAP and other technologies to partition the network so as to achieve the network isolation effect Establish the 802 1x access authentication system to reduce the risk of unaut...

Страница 88: ...User s Manual...

Отзывы: