NetModule NB224x Скачать руководство пользователя

Страница: 41 / 99

User Manual NetBox Wireless Router

41/99

4-Jan-10
manual_netbox_e

3.1.6.2

IPsec

IPsec (IP security) is a suite of protocols for securing Internet Protocol (IP) communications by authenticating
and/or encrypting each IP packet in a data stream. IPsec also includes protocols for cryptographic key estab-
lishment.

IPsec can be used to create Virtual Private Networks (VPN) and this is the dominant use.

3.1.6.2.1

IPsec Administration

Parameter

Description

IPsec administrative status:

Enable or disable IPsec.

3.1.6.2.2

IPsec Configuration

Содержание NB224x

Страница 1: ...1 985 25 11 1998 2010 NetModule AG Niederwangen Switzerland All Rights Reserved Copying this document or parts of it is prohibited User Manual NetBox Wireless Routers Document version 1 1 1 Date publi...

Страница 2: ...less Router 2 99 4 Jan 10 manual_netbox_e Overview 1 Introduction 5 2 Installation 16 3 Configuration 17 4 Software Interfaces 89 5 Troubleshooting 95 6 Customer Service 96 A Appendix Connectors and C...

Страница 3: ...of the SIM Card s 16 2 2 2 Installation of the UMTS GSM Antenna 16 2 2 3 Installation of the GPS Antenna 16 2 2 4 Installation of the Local Area Network 16 2 2 5 Installation of the Power Supply 16 3...

Страница 4: ...ervice Interface 91 4 3 1 Command Set 92 4 3 2 Responses 93 4 3 3 Examples 94 5 Troubleshooting 95 5 1 Error Messages 95 5 2 System Log and Log Files 95 5 3 Network Protocol Analyzer 95 6 Customer Ser...

Страница 5: ...ivalent power supply which must have a limited and SELV circuit output The NetBox is designed for indoor use only Do not expose the communication module to extreme ambient conditions Protect the commu...

Страница 6: ...of this Wireless LAN product requires a general authorization Please check with http www comunicazioni it for more details NetModule declares that under our own responsability the products NetBox Wir...

Страница 7: ...requency Range MHz Power EIRP Restrictions 2400 0 2483 5 100 mW 20 dBm Only for indoor applications 5150 5250 100 mW 20 dBm Permitted to use nly for indoor applications closed industrial and warehouse...

Страница 8: ...rdware varieties NB1310 NB2210 NB2500 2G 3G 2G optional WLAN optional optional SIM card sockets 1 1 2 Ethernet ports 1 1 4 Serial ports 1 1 GPS receiver optional optional Digital inputs outputs 2 2 Ta...

Страница 9: ...GSM or UMTS network Ethernet Ethernet port For power injection see A 1 1 on page 97 Ethernet Status green on A solid light indicates a connected Ethernet link flashing A flashing light indicates Ether...

Страница 10: ...d and or does not start up blinking fastly Restart triggered by watchdog Front Signal Strength green on 1 LED on weak signal 2 LEDs on medium signal 3 LEDs on strong signal 4 LEDs on very strong signa...

Страница 11: ...5 seconds Top Power Voltage feed connector 9 28 VDC Top IN1 IN2 Digital inputs 2 optoisolated digital inputs Please consider the polarity Top OUT1 OUT2 Digital outputs 2 relay outputs Bottom ETH Ethe...

Страница 12: ...eak signal 2 LEDs on medium signal 3 LEDs on strong signal 4 LEDs on very strong signal off No or insufficient signal running Software update Front Mobile UMTS GSM green blinking slowly Mobile connect...

Страница 13: ...or Impedance 50 Ohm Connector SMA female Back COM RJ45 port Sub D 9 on earlier models RS232 default or RS485 configurable Back Ethernet Ports 4 port Ethernet switch The default IP address is set to 19...

Страница 14: ...Control Stateful Inspection Firewall Virtual Private Networking VPN section 3 1 6 VPN OpenVPN Client PPTP Server IPsec Peer Dial in Server Services section 3 1 7 Services COM Server Tunneling of the s...

Страница 15: ...s include Universal Mobile Telecommunications System UMTS High Speed Packet Access HSPA includ ing HSDPA and HSUPA General Packet Radio Service GPRS Enhanced Data rates for GSM Evolution EDGE Circuit...

Страница 16: ...IM socket 1 Make sure the SIM is suitable for data transmission 2 2 2 Installation of the UMTS GSM Antenna NetBox Wireless Routers will only operate reliably over the GSM network if there is a good si...

Страница 17: ...onfiguration steps usually include 1 defining the admin password 2 entering the PIN code for the SIM card 3 configuring the Access Point Name APN 4 start the mobile connection Step Description 1 Pleas...

Страница 18: ...User Manual NetBox Wireless Router 18 99 4 Jan 10 manual_netbox_e 3 1 1 Initial Access to the Web Manager and Password Definition...

Страница 19: ...ual NetBox Wireless Router 19 99 4 Jan 10 manual_netbox_e 3 1 2 Home This page gives you a system overview It helps you when initially setting up device but also functions as dashboard during normal o...

Страница 20: ...etBox LAN Usually the first address within that LAN is assigned to the router Provide that IP address and net mask in dot decimal notation or use the defaults Depending on the Ethernet mode chosen abo...

Страница 21: ...User Manual NetBox Wireless Router 21 99 4 Jan 10 manual_netbox_e 3 1 3 1 3 Links Settings For every Ethernet port the link negotiation can be set In most cases auto negotiation will work...

Страница 22: ...ethod waits for traffic coming from the LAN going to the WAN The permanent method keeps up the mobile interface In case of link loss the connection is reestablished Redial attempts Number of redialing...

Страница 23: ...hod Use Challenge Handshake Authentication Protocol CHAP or Password Au thentication Protocol PAP Call to ISDN Ckeck this if the connection is made to an ISDN modem IP Header Compression Enable or dis...

Страница 24: ...pecified in bytes that a computer or communications device can handle in a single unfragmented piece For optimum communications the num ber of bytes in the data segment and the headers must not add up...

Страница 25: ...Administration WLAN is enabled or disabled on this page 3 1 3 3 2 WLAN Configuration Currently the WLAN interface can be operated as wlan client only In this mode it is designed to provide an alterna...

Страница 26: ...since a SIM card thief could misuse an unprotected SIM Parameter Description PIN code The PIN code for the SIM card PIN protection Enable or disable PIN protection SMS center number Number of Short M...

Страница 27: ...e a SIM card thief could misuse an unprotected SIM Parameter Description PIN code The PIN code for the SIM card PIN protection Enable or disable PIN protection SMS center number Number of Short Messag...

Страница 28: ...each frame Parity This property specifies the parity used with every frame that is transmitted or re ceived Stop bits This property specifies the number of stop bits used to indicate the end of a fra...

Страница 29: ...9 4 Jan 10 manual_netbox_e 3 1 3 7 Digital I O NB2210 only The digital inputs and outputs can be monitored and controlled via the Web Manager or by software See section 4 2 Digital I O Server NB2210 f...

Страница 30: ...sses in dotted decimal or host network names Mask The network s IP address together with its address mask defines a range of IP addresses For IP subnets the address mask is referred to as the subnet m...

Страница 31: ...Router 31 99 4 Jan 10 manual_netbox_e 3 1 5 Firewall 3 1 5 1 Access Control 3 1 5 1 1 Access Control for Local Host The access from the WAN interface to NetBox itself and its local applications can be...

Страница 32: ...om WAN and OpenVPN The access from the WAN interface to a defined Exposed Host can be managed using this filter The same can be done on the second tab for the OpenVPN interface Parameter Description E...

Страница 33: ...from LAN Having the Ethernet ports split into multiple LANs this filter manages the access from any LAN port to any VPN Tunnel Use the option specify permitted networks to permit access to certain net...

Страница 34: ...ow an external user to reach a port on a private IP address inside the LAN from the outside Internet Parameter Description NAPT status Enable or disable NAPT NAPT needs to be enabled normally i e when...

Страница 35: ...ed normally i e when using Internet Access Internet Ser vice Providers will not route your private LAN Addresses Service name User defined Name for the NAPT entry External port External IP port mobile...

Страница 36: ...User Manual NetBox Wireless Router 36 99 4 Jan 10 manual_netbox_e 3 1 5 3 Expert Mode Upload text files with firewall rules...

Страница 37: ...rver and client certificates Prepare the OpenVPN certificate files Use the tools and documentation that come with the OpenVPN soft ware A Guide to basic RSA Key Management is found under http openvpn...

Страница 38: ...tive configuration Authentication method Use certificates or user name password First server address First OpenVPN server address First server port First OpenVPN server port default 1194 Second server...

Страница 39: ...The configuration upload takes a zip file which may in clude one or more OpenVPN client configurations Typically such a zip file includes files such as client conf The client configuration file referr...

Страница 40: ...onfiguration files To configure multiple server processes i e multiple conf files each referring to its certificates you should place all files belonging to a single tunnel process into a subfolder or...

Страница 41: ...cations by authenticating and or encrypting each IP packet in a data stream IPsec also includes protocols for cryptographic key estab lishment IPsec can be used to create Virtual Private Networks VPN...

Страница 42: ...User Manual NetBox Wireless Router 42 99 4 Jan 10 manual_netbox_e...

Страница 43: ...hentication and dynamic IP addresses aggressive mode is the only choice IKE encryption IKE encryption method IKE hash IKE hash method IKE Diffie Hellman Group IKE Diffie Hellman Group Perfect Forward...

Страница 44: ...ar because it is easy to configure and it was the first VPN protocol that was supported by Microsoft Dial up Networking Users that are allowed to connect to the PPTP server are defined under the secti...

Страница 45: ...meter Description Dial in administrative status The Dial in server can be enabled or disabled Consequently the device will allow incoming calls or not Dial in operational status Shows whether a connec...

Страница 46: ...escription COM server status The COM server modbus gateway can be enabled or disabled 3 1 7 1 2 COM Server Configuration Parameter Description Port The port that is used by this application Protocol o...

Страница 47: ...ing monitor application Parameter Description Host 1 Reference host 1 to which IP connectivity is checked by sending probes Host 2 Reference host 2 to which IP connectivity is checked by sending probe...

Страница 48: ...Server Administration Parameter Description DHCP server status The Dynamic Host Configuration Protocol DHCP server can be enabled or dis abled If it is enabled it will answer to DHCP requests of devic...

Страница 49: ...1 7 4 DNS Proxy Server The DNS Proxy enabled NetBox forwards DNS requests to the DNS server provided by the mobile operator Devices within the NetBox LAN may be configured to use NetBox as DNS server...

Страница 50: ...or disable the Dynamic DNS Client 3 1 7 5 2 Dynamic DNS Configuration Parameter Description Service type DynDNS Service according Dynamic Network Services Inc www dyndns com Please consult www dyndns...

Страница 51: ...disabled Disabling the e mail client means that no notification via e mail will be performed 3 1 7 8 E mail Client Configuration Parameter Description From e mail address Sender s e mail address Serv...

Страница 52: ...PPP connection down PPP connection failure PPP failure to connect Error reported PPP_ERR See manual and logs to identify the problem VPN connection established VPN connection up tun0 tap0 interface a...

Страница 53: ...l Output 1 off Output change OUT1 is Off changed from DIO_SOURCE Digital Output 2 on Output change OUT2 is On changed from DIO_SOURCE Digital Output 2 off Output change OUT2 is Off changed from DIO_SO...

Страница 54: ...SMS or e mail event notifications It is possible to create groups and fill them with users and other groups This mechanism let you send event notifications to multiple destinations users 3 1 7 9 3 Ev...

Страница 55: ...f such a data package is separated into two lines The first line contains GPS data in the GPGGA format the second line contains GPRMC data For more information on the GPS data stream see chapter 4 1 P...

Страница 56: ...ection state up down current IP address of the mobile ppp interface current IP address of the VPN interface if enabled connect This will initiate a Dial out connection over GSM and the VPN connection...

Страница 57: ...14 SNMP Agent Parameter Description SNMP agent status Enable or disable the SNMP agent Listening Port SNMP agent port Community An SNMP community is the group that devices and management sta tions run...

Страница 58: ...trap threshold The startup trap is implemented using the standard coldStart warmStart traps The system shutdown trap is sent when the system is rebooted via the reboot function of the web interface o...

Страница 59: ...high speed interactive communication between the subscribers and applications across a GSM Network A sample USSD service is the bill status service accessed by dialing 141 or similar numbers in betwee...

Страница 60: ...nage the user accounts on the device The user admin is a built in power user that has permission to access both the Web Manager and the Dial in server Any other user defined user only has permission f...

Страница 61: ...ificate based authentication client crt certificate_mode OpenVPN client certificate file client key certificate_mode OpenVPN private key file templateProfiles updating provider database 3 1 8 3 1 Auto...

Страница 62: ...dential_mode ca crt certificate_mode client crt certificate_mode client key certificate_mode templateProfiles if available New configuration files The following files are acceppted for upload cfg max...

Страница 63: ...ation will be lost This action can also be initiated by pressing and holding the Reset button for at least five seconds The factory reset will also set the IP address of the Ethernet interface to 192...

Страница 64: ...User Manual NetBox Wireless Router 64 99 4 Jan 10 manual_netbox_e 3 1 8 4 2 Network Debugging...

Страница 65: ...can be viewed a downloaded here Please provide these files when placing a support request 3 1 8 4 4 System Log Redirection Parameter Description IP address The host where the syslog messages will be f...

Страница 66: ...User Manual NetBox Wireless Router 66 99 4 Jan 10 manual_netbox_e 3 1 8 4 5 Restart...

Страница 67: ...User Manual NetBox Wireless Router 67 99 4 Jan 10 manual_netbox_e 3 1 8 4 6 Tech Support...

Страница 68: ...over packet switched variable latency data networks NetBox can synchronize its system time with a NTP server If enabled time synchronisation is done after the mobile interface is up but before starti...

Страница 69: ...of configuration and inac cessability of the device 3 1 8 5 1 Automatic Software Update Parameter Description Status Enable disable automatic software update Time of day Every day at this time NetBox...

Страница 70: ...tware to NetBox You will need an appropriate server Server IP address and path Provide a host name and a path to a server which hosts the new software For local updates TFTP this value is limited to 2...

Страница 71: ...TP server 192 168 1 2 as follows 6 Press Apply and confirm by pressing OK Wait until the update is complete See the progress bar Do not unplug the power connector during the update 7 Check the results...

Страница 72: ...1 CLI Overview The Command Line Interface mainly provides functions to read and write values of the NetBox configuration parameters In addition the CLI provides functions to query status information C...

Страница 73: ...the queried parameter Note cli get invalidKey returns no error message cli set cli set is used to assign values to configuration parameters Arguments include all configuration keys as described in cha...

Страница 74: ...Note The following commands are identical cli select automatic and cli select automatic sim1 Note The following commands have the same effect cli select automatic sim1 and cli set networkselection mo...

Страница 75: ...of the OpenVPN connection cli status overview networks ipsec_state show the state of the IPsec connection cli status overview networks pptp_state show the state of the PPTP server cli status overview...

Страница 76: ...sing the Web Manager to get all parameters listed NetModule has defined some types of parameters that are often used The table below shows the defined parameter types In addition other types of parame...

Страница 77: ...selection sim2 network_lai void numeric value LAI Select the network provider defined by the supplied Local Area Identity LAI dialout connectionMethod 0 0 2 0 manual only 1 dial on demand 2 permanent...

Страница 78: ...1 0 off 1 enable specific client IP ad dress dialout profiles 1 SCAddress void ipaddress Specific client address dialout profiles 1 SIM SIM2 SIM1 SIM2 SIM used for fallback profile dialout profiles 1...

Страница 79: ...d 1 65535 External por range end napt_mobile j intHost void ipaddress napt_mobile j intPort void 1 65535 Internal port napt_mobile j protocol TCP TCP UDP TCP or UDP napt_mobile j status 1 0 1 0 disabl...

Страница 80: ...ed_host_mobile policy 1 0 1 2 0 deny all 1 permit entries 0 permit all firewall_exposed_host_mobile host void hostname The exposed host firewall_exposed_host_mobile j target with j 0 19 void hostname...

Страница 81: ...essionStatus 1 0 1 0 disabled 1 enabled vpn configuration username void username For credential based authentication vpn configuration password void password For credential based authentication 3 2 7...

Страница 82: ...0 ipaddress Address range start network PPTP AddressRangeSize 5 2 254 Address range size 3 2 7 4 Dial in Server Parameter Default Value Range Description dialin status 0 0 1 0 Dial in disabled 1 Dial...

Страница 83: ...ial_srv opt xonxoff void 0 1 0 disabled 1 enabled serial_srv opt rtscts void 0 1 0 disabled 1 enabled serial_srv opt phys_proto RS232 RS232 RS485 3 2 8 2 DNS Proxy Server Parameter Default Value Range...

Страница 84: ...tus 1 0 1 0 disabled 1 enabled sms sending status 0 0 1 0 disabled 1 enabled sms sending gateway void phone num ber SMSC number sms sending sim2 gateway void phone num ber SMSC number 3 2 8 6 E Mail P...

Страница 85: ...d password Event Message events digitalInput1_On message void password Event Message events digitalInput2_On message void password Event Message events digitalInput1_Off message void password Event Me...

Страница 86: ...162 1 65535 snmp siglow 113 113 to 51 Signal strength trap thresh old dBm snmp sighigh 51 113 to 51 Signal strength trap reactiva tion threshold dBm 3 2 8 10 SSH Server Parameter Default Value Range...

Страница 87: ...7 99 4 Jan 10 manual_netbox_e keepalive port 50001 1 65535 Server port keepalive updateInterval 60 0 214748364 7 Update interval in seconds keepalive identifier void hostname Identifier string keepali...

Страница 88: ...tatus 1 0 1 0 disabled 1 enabled 3 2 9 3 Time Synchronisation Parameter Default Value Range Description network NTP status 1 0 1 0 disabled 1 enabled network NTP server swisstime ethz ch hostname NTP...

Страница 89: ...Sample Data GPGGA 154250 4749 8678 N 00871 8469 E 1 06 0 0 498 M 0 0 M 6A CR LF No Name Data Description 1 Sentence Identifier GPGGA Global Positioning System Fix Data 2 Time time UTC of position fix...

Страница 90: ...ude E W Longitude of fix 8 Speed speed Speed over ground in knots 9 Course course Track made good in degrees True 10 Date date UT date 11 Magnetic variation 0 0 E Not available Value 0 0 E 12 Mode mod...

Страница 91: ...00000010 Turn output 1 on turn output 2 off 00000011 Turn output 1 on turn output 2 on 4 2 3 Get status of digital inputs and output To get the states of the digital I O send the following pattern as...

Страница 92: ...cli php get parameters Takes the same parameters as the CLI GET cli php set parameters Takes the same parameters as the CLI GET cli php sw update path value Starts a local software update from a TFTP...

Страница 93: ...tware version with cli php status to verifiy whether it was successful or nor not 0 maximum length of path is 26 characters 0 syntax error Wrong syntax after in sw update parame ters GET cli php reboo...

Страница 94: ...user config zip Content Type applica tion x zip compressed Media A zip archive containing one or more of the following files can be uploaded To run OpenVPN in certificate based mode all certificate fi...

Страница 95: ...Solving SIM missing Insert a SIM card PIN code required Insert the PIN code on the SIM page Connection failed See the Debug Log under Check APN phone number username password 5 2 System Log and Log Fi...

Страница 96: ...hnical online support under http www netmodule com en support The Website also provides a download area where you can download the newest software and documenta tion For support requests please use th...

Страница 97: ...9 21VDC Table 1 Pin assignment Ethernet Interface NB1310 allows to be feeded through Ethernet Power can be carried over the spare pairs RJ45 pin 4 5 7 8 only It is simplified PoE not compliant with IE...

Страница 98: ...ot connect 2 RxD DTR Do not connect Do not connect 3 TxD TXD Data NB2210 NB224x Do not connect 4 DTR GND Do not connect GND 5 GND GND GND GND 6 DSR RXD Do not connect Do not connect 7 RTS DSR Do not c...

Страница 99: ...erface HSCSD High Speed Circuit Switched Data HSDPA High Speed Downlink Packet Access HSUPA High Speed Uplink Packet Access HTML Hypertext Markup Language HW Hardware IP Internet Protocol IPSec Intern...

Результаты поиска

Содержание NB224x

Отзывы:

Похожие инструкции для NB224x

Бренды по названию

Популярные бренды

NetModule NB224x, Руководство пользователя

Результаты поиска

Содержание NB224x

Отзывы:

Похожие инструкции для NB224x

Бренды по названию

Популярные бренды