manualshive.com logo in svg

Hypercable HYC-OLTRG-101, Руководство пользователя, Страница: 113 / 120

Поделиться
Скачать
Hypercable HYC-OLTRG-101 Скачать руководство пользователя страница 113

113 

 

12.9 

  OpenVPN Configuration 

 
Generic setup 

For OpenVPN configuration, use the certificate to authenticate the VPN connection. 
Thus, you need to generate the required files for OpenVPN server or import the required file to 
OpenVPN client. 
 

 

12.9.1 OpenVPN Server Mode 

 
OpenVPN server certificate generation 

 

 

For  the  OpenVPN  server  mode,  the  OpenVPN  web  UI  provides  the  buttons  to  generate  the 
required files. The files include 

Root CA

, 

Cert

, 

Key

 and 

OpenVPN

 client files. The file will be 

generated when you click the corresponded 

Create

 button. 

Note: 

The 

Cert

, 

Key

 generation will takes around 10 minutes. 

 
To generate the OpenVPN client files, you need to type the password to create it. 
The  password  will  be  used  in  the  OpenVPN  client  when  the  client  use 

PKCS#12

  to 

authenticate the VPN connection. After the generation, the web UI shows the below picture. 
 

www.e-rake.us.com

[email protected]

Содержание HYC-OLTRG-101

Страница 1: ...nfiguration and trouble shooting information for the broadband wireless access outdoor radio Mars 2019 Version 1 1 4 SkyMesh HYC OLTRG 101 Outdoor 4G LTE Router with I O Ports RS485 RS232 DI DO www e...

Страница 2: ...ion applications It supports multi band connectivity including FDD TDD LTE WCDMA and GSM for a wide range of applications and vertical machine to machine M2M markets To enhance reliability HUYC OLTR G...

Страница 3: ...VLAN Static Routing and RIP 1 2 VPN OpenVPN IPSec 3DES AES128 AES196 AES256 MD5 SHA 1 SHA256 Wireless Connectivity Two SIM cards for failover roaming over back up Two SIM cards data usage control Seam...

Страница 4: ...System Alarm 26 5 4 1 Alarm Name Group 27 5 4 2 Alarm Edit User 28 5 5 System Ethernet Ports 29 5 6 System Modbus 30 5 7 System Client List 30 6 Configuration WAN 32 6 1 WAN Priority 32 6 2 WAN Ethern...

Страница 5: ...ervice URL Filter 92 10 11 Service VRRP 93 10 12 Service MQTT 94 10 13 Service UPnP 96 10 14 Service SMTP 96 10 15 Service NAT 97 10 16 Service IP Alias 97 10 17 Service GRE 98 11 Management 99 11 1 I...

Страница 6: ...VPN and IPSec are for reliable authentication of the network stations data encryption and verification of data integrity The device is administrated via web GUI Telnet SSH v2 and HTTP HTTPS Built for...

Страница 7: ...7 1 2 Hardware Interface Top Side View Bottom Side View Grounding Stud Grounding Stud www e rake us com info hypercable fr...

Страница 8: ...M12 connector Console port 5 pins Connect to RS 232 Console port LED Indicators SYS VPN SIM1 SIM2 H RSSI L RSSI RST Allows you to reboot the unit or restore to factory default setting Reboot Press the...

Страница 9: ...of RS 232 Cable Com1 Pin of Conn 1 Pin of Conn 2 Description 1 N A 2 2 RXD 1 3 TXD 4 N A 3 5 GND 6 N A 5 7 RTS 4 8 CTS 9 N A Console port Cable with Circular Standard CCB connector www e rake us com...

Страница 10: ...D 2 Blue White RS485 D 3 Orange Alarm 4 Orange White Alarm 5 Green DI2 6 Green White DI2_COM 7 Brown RS232_TXD 8 Brown White RS232_RXD 9 Black RS232_GND 10 Red DI1 11 Black White 12 Red White DI1_COM...

Страница 11: ...or OFF Power Down N A N A NO WAN Connection Not Working Not Working Heart Beat N A N A N A N A Reading Reading 2 2 Reset Button RST Reset button allows you to reboot the unit or restore to factory def...

Страница 12: ...8 N A N A 2 10 100 Mbps Ethernet LAN Pin Description Function 1 LAN TX 10 100 Mbps LAN TX Pin 2 LAN TX 10 100 Mbps LAN TX Pin 3 LAN RX 10 100 Mbps LAN RX Pin 4 N A N A 5 N A N A 6 LAN RX 10 100 Mbps L...

Страница 13: ...hip card or the tray might be damaged l Please turn off your router before insert or remove the SIM card 2 5 DIP Switch Switch 1 and 2 set the pull high low resistor Switch 3 enables or disables the t...

Страница 14: ...DC Please ensure all components are earthed to a common ground before connecting any wiring Note l Please make sure the power voltage and polarization are correct and match with the wire color Wire c...

Страница 15: ...0 Because the cellular router acts as DHCP server in your network the cellular router will automatically assign IP address for PC or NB in the network Control Panel Selecting Language You can choose t...

Страница 16: ...ibute SIM Card Show the SIM card which the router work with currently Current SIM or Backup SIM Modem Status Show the status of modem Operator Display the name of operator Modem Access Show the router...

Страница 17: ...the satellite information of location Status LAN Ethernet Item Description Attribute IPv4 Address Ethernet LAN is assigned IPv4 Address IPv4 Mask Ethernet LAN is assigned IPv4 Mask IPv6 Address Ethern...

Страница 18: ...can see Location on the right top banner of web interface when connecting your GPS function After clicking this banner a map will automatically display the current information of map according to loca...

Страница 19: ...e Server and Manual The default mode is Get from Time Server If the router has GPS function you can turn on GPS Time for sync time from GPS server For Time Zone Setup the Daylight Savings Time allows...

Страница 20: ...l Set up the information of time and date including year month date and hour minute and second l Set up your local time zone l Click Apply to submit your configuration changes www e rake us com info h...

Страница 21: ...f standard time l Set up the information of Start Date Time including Month Week Day Hour and Minute l Set up the information of End Date Time including Month Week Day Hour and Minute l Click Apply to...

Страница 22: ...ation The Month range is 1 12 1 Jan 2 Feb 3 Mar 4 Apr 5 May 6 Jun 7 Jul 8 Aug 9 Sep 10 Oct 11 Nov 12 Dec The Week range is 1 5 1 first week in month 2 second week in month 3 third week in month 4 four...

Страница 23: ...interface and the COM 3 is RS485 interface 1 The default is Disable You can click edit button to configure your settings 2 Set up the configuration and Virtual COM After configuring click Save to conf...

Страница 24: ...rom the information of Parity Stop Select from 1 bit or 2 bit Flow Control Select from none Xon Xoff or hardware Virtual COM Mode Select from Disable Server or Client Protocol Select from TCP or UDP H...

Страница 25: ...rom your cellular router System Logging Logging Item Description Mode Turn on off the logging configuration Select from Disable or Enable The default is Enable Remote Log The logging messages send to...

Страница 26: ...SNMP trap in Alarm output you need to set up SNMP trap configuration from Service SNMP 2 DI trigger High means High Trigger SW is On to trigger SW is OFF in Normal state 3 DI trigger Low means Low Tri...

Страница 27: ...I 1 2 IO high to trigger alarm l VPN disconnect All tunnels get disconnected then trigger alarm l WAN disconnect All WAN connections get disconnected then trigger alarm Alarm Output Select from SMS DO...

Страница 28: ...nformation including Name Phone and E mail l After filling in your information for each row chose your naming group and click to submit your settings l After submitting your setting the interface retu...

Страница 29: ...29 l You can click button to add the new user s information 5 5 System Ethernet Ports This section allows you to configure the Ethernet Ports www e rake us com info hypercable fr...

Страница 30: ...show all status when the router is on DHCP Client and Online For DHCP Client type the information shows IP address MAC address Hostname and the expiry time of IP Start End For Online type the informat...

Страница 31: ...31 System Client List Item Description List Type l DHCP Client List all clients information when it is via DHCP l Online List the information when it is online www e rake us com info hypercable fr...

Страница 32: ...t 6 2 1 WAN Ethernet Configuration This section provides three options including DHCP Client PPPoE Client and Static IPv4 The default is DHCP Client WAN Priority Item Description Priority l Auto WAN E...

Страница 33: ...figure WAN Ethernet Item Description WAN Ethernet There are three options to obtain the IP of WAN Ethernet l DHCP Client DHCP server assigned IP address netmask gateway and DNS l PPPoE Client Your ISP...

Страница 34: ...including IP Address IP Mask and Gateway Address WAN Ethernet Item Description IPv4 DNS Server 1 IPv4 DNS Server 2 IPv4 DNS Server 3 l Each setting DNS Server has three options including from ISP Use...

Страница 35: ...Ethernet Ping Health and the system would switch to LTE connection and switch back whenever Ethernet is able to access internet again WAN Ethernet Item Description Static IPv4 Configuration IP Address...

Страница 36: ...s WAN connection WAN Ethernet Ethernet Ping Health Item Description Ethernet Ping Health Select from Disable or Enable The default is Enable Interval The interval is from 1 to 60 seconds IPv4 Host 1 I...

Страница 37: ...and None to configure WAN IPv6 DNS Item Description DNS Server Configuration IPv6 DNS Server 1 IPv6 DNS Server 2 IPv6 DNS Server 3 l Each setting DNS Server has three options including From ISP User...

Страница 38: ...E Config GPS Config Dual SIM Usage Display and SMS 7 1 LTE LTE Config 7 1 1 LTE Configuration You can set up the LTE Configuration and LTE Ping Health For LTE Configuration you can select from Auto 4G...

Страница 39: ...nnect the possible band 4G Only Connect to 4G network only 3G Only Connect to 3G network only 2G Only Connect to 2G network only LTE LTE Config LTE Ping Health Item Description LTE Ping Health Select...

Страница 40: ...ic purpose For example you can use some software depending on your requirements and activate the GPS Configuration to display what information you need from your selecting software LTE GPS Config Item...

Страница 41: ...itch SIM slot when current SIM is in roaming state and another SIM slot is in READY state If you have selected either SIM1 or SIM2 for the Used SIM to connect the Roaming Switch and Connect Retry Numb...

Страница 42: ...ant to change SIM PIN code you can click Change button and type old SIM PIN code and new SIM PIN code Please aware not to exceed the retry number PIN remaining number and PUN remaining number www e ra...

Страница 43: ...43 Note The interface will be shown the tick symbol at the same time when each SIM Card has been connected www e rake us com info hypercable fr...

Страница 44: ...other SIM slot is in READY state Connect Retry Number Entry the time when SIM card starts to activate This option is only for Dual SIM mode SIM1 Configurations or SIM2 Configurations Status Display th...

Страница 45: ...al Time Usage l Real Time Usage Rate It displays real time Download Upload Total MB per seconds for current using SIM card and the view window size is 60 seconds l Real Time Usage It displays accumula...

Страница 46: ...46 2 Hourly Usage It displays Download Upload Total MB per hour in one day for current using SIM card and the view window size is 24 hours www e rake us com info hypercable fr...

Страница 47: ...per day in one month for current using SIM card and the view window size is 31 days 4 Weekly Usage It displays Download Upload Total MB per day in one week for current using SIM card and the view wind...

Страница 48: ...48 5 Monthly Usage It displays Download Upload Total MB per month in one year for current using SIM card and the view window size is 12 months www e rake us com info hypercable fr...

Страница 49: ...ction it allows you by sending key words SMS to trigger device setting action query status 2 For View SMS this section allows you to review the information of SMS that you have received including the...

Страница 50: ...IP Address 192 168 1 1 l IP Mask 255 255 255 0 Both of them are default you can change them according to your local IP Address and IP Mask DHCP Server Configuration l Turn on off DHCP Server Configur...

Страница 51: ...l This section provides two types including Delegate Prefix from WAN and Static l Static Address You need to input the static address when you select the static type Delegate Prefix from WAN l Select...

Страница 52: ...ess and IP mask for the router so this router can communicate with the third party by this IP address and IP mask on this VLAN Note The NET1 can t remove it and fixes in the first row Furthermore the...

Страница 53: ...et information will show the Subnet window from the LAN catalogue There are three ports for Tag Base Mode including LAN1 LAN2 and LAN3 And one Router port which is a gate allows those ports to access...

Страница 54: ...ode The VLAN mode is Off or Tag Base 802 1p VLAN Enable The assigned row of settings are enabled Subnet Sets the IP address IP mask and DHCP server VID The VLAN ID range is from 1 to 4094 Port The por...

Страница 55: ...Server Configuration LAN VLAN 3 port LANs Port Base Item Description Mode The VLAN mode is Off Tag Base 802 1p VLAN or Port Base Enable The assigned row of setting are enabled Port The port is shown t...

Страница 56: ...56 This Subnet setting is the same with LAN IPv4 setting and follows with Tag Base Mode of VLAN to enable the function www e rake us com info hypercable fr...

Страница 57: ...e Static Route and RIP 9 1 IP Routing Static Route This section allows you to configure the Static Route A static route is a pre determined path that network information must follow to reach a specifi...

Страница 58: ...ay from IPv4 and IPv6 at the same time The interface is shown in Apply fail to notice You should select either IPv4 or IPv6 as the address of destination gateway IP Routing Static Route Item Descripti...

Страница 59: ...ge its routing information automatically with other routers and allows it to dynamically adjust its routing tables and adapt to changes in the network IP Routing Static Route Item Description Mode The...

Страница 60: ...Off or On to open or close RIP function Redistribute local routes Select from Off or On to open or close redistribute local routes Redistribute connected routes Select from Off or On to open or close...

Страница 61: ...Routing RIP Interfaces Item Description Interfaces Mode Select from Off or On to use or not to use the RIP function in the interface Interface Select from eth1 WAN Ethernet or LAN Authentication Sele...

Страница 62: ...ce s own routing table l On Redistribute local routes from the device s own routing table Redistribute connected routes l Off Not redistribute connected routes to networks which are directly connected...

Страница 63: ...o use or not to use the OSPF function in the interface Interface Select from eth1 WAN Ethernet or LAN Authentication Select from none or md5 to approve authentication Note Please offer Key and Key ID...

Страница 64: ...configuration 1 General Configuration IP Routing OSPF Networks Item Description Networks Mode Select from Off or On to enable the network setting Prefix Set Prefix of the network Prefix Length Set Le...

Страница 65: ...cal routes from the device s own routing table Redistribute connected routes l Off Not redistribute connected routes to networks which are directly connected to the device l On Redistribute connected...

Страница 66: ...uting BGP Neighbor Item Description Neighbor Mode Select from Off or On to enable the neighbor setting IP Address Set IP address of the peer router AS Number Autonomous system number of the peer route...

Страница 67: ...SNMP IP Filter MAC Filter URL Filter VRRP MQTT UPnP SMTP NAT IP Alias and GRE 10 1Service Configuration OpenVPN 10 1 1 Edit OpenVPN Connection 1 This section allows you to configure the OpenVPN param...

Страница 68: ...you can set up the connection of OpenVPN 3 From Log tab the interface will be shown the status of connection to make you follow the suitation whenever is successful or fail connection www e rake us c...

Страница 69: ...vanced options to be compatible with other servers Status Display the status of OpenVPN TLS Mode Select from Disable or Enable for data security The default is Disable Cipher The OpenVPN format of dat...

Страница 70: ...d the cellular router will auto apply the properly routing rules NAT 1 1 NAT l Tick to enable NAT Traversal for OpenVPN This item must be enabled when the router under NAT environment l Select from Of...

Страница 71: ...nd netmask when this option is enabled NAT 1 1 NAT l Tick to enable NAT Traversal for OpenVPN This item must be enabled when router under NAT environment l Select from Off or On The default is Off l W...

Страница 72: ...ow button to click for displaying the information and to click for downloading the file l For third party OpenVPN configuration suggest from http www vpngate net en Service OpenVPN Custom VPN Mode Ite...

Страница 73: ...eting has two tags General setting and Connections 10 2 1 IPSec General setting For General setting you can set up IKE Encryption and Authentication The General setting for the local and remote side s...

Страница 74: ...48 bit 15 3072 bit 16 4096 bit 17 6144 bit or 18 8192 bit Encryption Protocol Select from ESP Encryption Select from AES128 default AES192 AES256 3DES or DES Hash Select from MD5 SHA1 default or SHA25...

Страница 75: ...75 www e rake us com info hypercable fr...

Страница 76: ...tton after the file genearted l You can import the files of local and remote CA from the server Service IPSec Connections Item Description Mode Select from Disable or Enable The default is Disable Nam...

Страница 77: ...Cellular router IPSec feature General setting The first part is the general setting it provides the IPSec basic setting and authentication configuration The psk Pre shared key is as an authentication...

Страница 78: ...l Host and Subnet fields by the network information of IPSec server And use the network information of IPSec client to fill up the remote setting Then specify the ID for the both sides In this case th...

Страница 79: ...the id of connections is corresponded with the certificate CN field for the both sides For the Cellular router IPSec certificate generation it generates the local and remote side certificates with loc...

Страница 80: ...the remote side The mapping is as below 1 Root CA Local side Import Remote CA Remote side 2 Remote Cert Local side Import Local Cert Remote side 3 Remote Key Local side Import Local Key Remote side Fo...

Страница 81: ...81 Local Side Remote Side www e rake us com info hypercable fr...

Страница 82: ...82 10 3 Service Configuration Port Forwarding This section allows you to set up Port Forwarding and click edit button to configure www e rake us com info hypercable fr...

Страница 83: ...e of Port Forwarding Protocol Select from UDP or TCP Client which depends on the application Source Port Begin Fill in the beginning of source port Source Port End Fill in the end of source port Desti...

Страница 84: ...vice provider freedns afraid org Host Name Register hostname e g tester mooo com Username Register username Password Register password Service provider dyndns org Host Name Register hostname e g teste...

Страница 85: ...on 10 6 Service SNMP 10 6 1 SNMP configuration This section allows you to set the SNMP configuration Service DMZ Item Description Mode Select from Disable or Enable The default is Disable Host IP Addr...

Страница 86: ...nd 3 Mode Select from Disable or Enable Name Name each community Access Select from Read Only or Read Write Service SNMP SNMP v3 User configuration Item Description Mode Select from Disable or Enable...

Страница 87: ...of system for your router With SNMP trap setting you can know the status of remote device Service SNMP SNMP trap configuration Item Description Mode Select from Disable or Enable The default is Disab...

Страница 88: ...to authenticate the CPE this router when connecting to the ACS Periodic Inform Select from Disable or Enable The default is Disable The CPE reports the status to the ACS when enabling a period of tim...

Страница 89: ...89 10 8 Service IP Filter This section allows you to configure IP Filter After clicking button you can edit your IP protocol source port and destination port www e rake us com info hypercable fr...

Страница 90: ...of source ports please use colon symbol to mark your ranged ports Service IP Filter Item Description Mode Select from Disable or Enable The default is Disable Protocol Select from All ICMP TCP or UDP...

Страница 91: ...n edit your MAC address Note Setting up MAC address please use colon symbol e g xx xx xx xx or hyphen symbol to mark e g xx xx xx xx Service MAC Filter Item Description Mode Select from Disable or Ena...

Страница 92: ...ter This section allows you to set up URL Filter After clicking button you can edit the type of filter and information Note Please not include https for the URL address in the Full Filter www e rake u...

Страница 93: ...elect from Disable or Enable The default is Disable Group ID Specify which VRRP group of this router belong to 1 255 The default is 1 Priority Enter the priority value from 1 to 254 The larger value h...

Страница 94: ...e MQTT Item Description Mode Select from Disable or Enable The default is Disable Port Fill in the port number of MQTT application Manage Users Create the users and show all users names Allow each use...

Страница 95: ...tton to delete it For the ACL control user can specify what topic should be limited In this case we set up the publisher pub1 to write the critical topic Additionally we also allow the subscribers sub...

Страница 96: ...plications that support UPnP and are used with UPnP enabled cellular router will not need application layer gateway support on the cellular router to work through NAT 10 14 Service SMTP This section p...

Страница 97: ...the source LAN private IP address for outgoing packets and allow to receive the destination LAN private IP address for incoming packets 10 16 Service IP Alias This section allows you to set IP Alias c...

Страница 98: ...em Description Mode Select from Off or On to enable the IP Alias Entries The setting can be edited or deleted the existed entries Add Edit IP Alias Entry l Mode select from Off or On to use or not use...

Страница 99: ...of router current software firmware version and system uptime Management Identification Item Description Host Name Show the host name of cellular router MAC Address Show the MAC address Software Vers...

Страница 100: ...re of router 1 Click Select the firmware to upgrade button to choose your current firmware version in your PC 2 Select Upgrade button to update 3 After upgrading successfully the router will reboot au...

Страница 101: ...the factory default configuration and restart the device immediately You can click the Load Factory and Restart button 11 6 Restart This section allows you to click Restart button and the router will...

Страница 102: ...ase both Ethernet and LTE can access Internet the router would route network packages through Ethernet The reason is Ethernet that is low price and stable However in case Ethernet is unplug or not abl...

Страница 103: ...ackages through LTE 3 WAN Priority ETH Only In this mode the router only routes network packages through Ethernet LTE LTE Ethernet Ethernet Internet Internet LTE Router LTE Router LTE LTE Ethernet Eth...

Страница 104: ...y needs one global IPv6 There is IPv6 firewall protection in the router by default Only the IPv6 packages come from LAN site device and got reply back The router automatically detects IPv6 environment...

Страница 105: ...nel Thus you need to create the account with username and password for MQTT client in the web UI The Manage Users section will show all created users Each user can use the delete button to delete it F...

Страница 106: ...er the simulation the user can use the terminal tool e g putty tera term to access the remote serial device Console l How to set up The router provides RS 232 COM1 COM2 and RS 458 COM3 You can choose...

Страница 107: ...rtual COM setting 1 For the serial setting you need to change the setting like baud rate to fit the connected device 2 For the Virtual COM you need to change the mode to Server and specify the Protoco...

Страница 108: ...pply OK 4 Then you can open the Virtual COM software on PC Note In this case we use the USR VCOM to be the Virtual COM software 5 And set up the virtual serial port by 192 168 1 1 The default is LAN I...

Страница 109: ...l settings of connected COM port need to be configured properly And the virtual should be opened and run as Client mode Also you need to specify the remote host and the port The web UI of router shows...

Страница 110: ...the Modbus RTU over TCP the Virtual COM server feature of router could handle it You need to configure the RS 485 COM3 like the remote management serial settings Virtual COM settings After above setup...

Страница 111: ...erial setting in the System COM ports web UI and set up this feature in the System Modbus web UI After above setup the Modbus software can use the Modbus TCP protocol to control the Modbus sensor devi...

Страница 112: ...rm no matter which interface is currently using 2 Alarm Output l In case of SMS is selected then only user s phone number is in selected group and on selected working day would receive alarm SMS l In...

Страница 113: ...VPN web UI provides the buttons to generate the required files The files include Root CA Cert Key and OpenVPN client files The file will be generated when you click the corresponded Create button Note...

Страница 114: ...N client can use the Root CA User Key and User Cert files from OpenVPN server to authenticate the VPN tunnel Or just only use the PKCS 12 P12 file from OpenVPN server to authenticate it Note The PKCS...

Страница 115: ...ther 1 OpenVPN server configuration For the OpenVPN server side the basic setting is as shown in below figure LAN 10 0 0 1 24 LTE Router OpenVPN client PC2 10 0 0 2 24 WAN 172 168 1 2 24 WAN 172 168 1...

Страница 116: ...ettings set up properly the web UI will show the Apply OK and the OpenVPN server status should be Running When OpenVPN Client mode is connected the status will show the information which client is con...

Страница 117: ...ed from Generic Setup OpenVPN server part The password also be set on the Generic Setup OpenVPN server part If you use the Certificate authentication option the OpenVPN client will require the Root CA...

Страница 118: ...e we fill up the Network be 192 168 10 0 and Netmask 255 255 255 0 The setting will make the router convert the OpenVPN server side LAN network from 192 168 1 0 24 to 192 168 10 0 24 when the VPN traf...

Страница 119: ...easy use the ovpn to set up the cellular router OpenVPN client The Custom mode provide the import button to allow user import the third party OpenVPN server ovpn configurations file For example use th...

Страница 120: ...ion for IP address and the time In this moment the PC1 can visit the http www vpngate net and the web UI should indicate the PC1 in the Japan 12 10 VRRP Topology Basic VRRP Topology Base on this topol...

Отзывы:

Нет отзывов