manualshive.com logo in svg

Ricon S9922M, Руководство пользователя

Поделиться
Скачать
Ricon S9922M Скачать руководство пользователя страница 35

S 9 9 2 2 M   S E R I E S   R O U T E R   L T E   S E R I E S   U S E R   M A N U E L  
 

35 

6.3

 

IPSEC CONFIGURATION

 

 

IPsec acts at the network layer, protecting and authenticating IP packets between 
participating IPsec devices. By following the steps below, S9922M series LTE routers can do 
IPsec. 
 

6.3.1

 

PHASE1 CONFIGURATION

 

 

✓

 

Policy Name;

 Enter the policy name you specified here. 

✓

 

Initiate Mode; 

main and aggr. Select your initiate mode. 

✓

 

Encrypt; 

des, 3des, aes256, aes192, aes128. Select your specific encryption mode. 

✓

 

Hash; 

md5, sha1, sha2_256. Select your specific encryption mode. 

✓

 

Authentication; 

psk, rsasig, xauth. Select your specific authentication. 

✓

 

Pre share Key; 

Enter the share key you specified. 

✓

 

Self identify; 

Enter your self identify here.  

✓

 

Match identify; 

Enter your match identify here. 

✓

 

IKE Lifetime; 

Enter the IKE lifetime you specified here. 

✓

 

Group Name; 

group768, group1024, group1536. Select the group name you specified. 

✓

 

DPD Service; 

Select enable or disable according to your request. 

✓

 

Click the 

Save

 icon to save phase1. 

 

Содержание S9922M

Страница 1: ...S 9 9 2 2 M S E R I E S R O U T E R L T E S E R I E S U S E R M A N U E L 1 RICON MOB LE S9922M Series LTE Router USER MANUAL...

Страница 2: ...Plaza Kat 8 40 Maslak stanbul T rkiye Website http www riconmobile com Phone 90 212 346 26 00 Ricon Mobile Inc HQ 460 Brant Street Unit 300 Burlington Ontario Canada 1 905 336 24 50 Ricon Mobile Inc F...

Страница 3: ...updates or functional upgrading we may renew the content of this file All statement information suggestions etc in this file do not compose any form of guarantee and we Ricon Mobile Inc reserves the...

Страница 4: ...AT ON 11 3 1 2 LOGGING IN TO THE WEB MANAGEMENT PAGE 11 3 NETWORK CONFIGURATION 13 3 1 LAN SETTING 13 3 2 W F SETTING 14 3 3 WAN SETTING 16 3 4 PARAMETER SETTING 18 3 5 NETWORK TYPE SETTING 20 3 6 DHC...

Страница 5: ...1 NAT CONFIGURATION 42 7 1 1 DNAT SETTING 44 7 1 2 SNAT SETTING 45 7 3 3 MASQ SETTING 46 7 3 4 DELETE NAT SETTINGS 47 7 2 ROUTING CONFIGURATION 48 7 3 QOS CONFIGURATION 49 8 SECURITY CONFIGURATION 50...

Страница 6: ...S E R I E S U S E R M A N U E L 6 9 6 2 BACKUP SETTINGS 69 9 6 3 FACTORY RESET SETTINGS 71 10 STATUS 72 10 1 BASIC SYSTEM INFORMATION 72 10 2 LAN INFORMATION 73 10 3 WLAN INFORMATION 74 10 4 MODEM IN...

Страница 7: ...he need for field service with easy and automatic product installation service The unique feature of the S9922M Series Router is that it is online and redundant over the network between WAN WLAN 3G LT...

Страница 8: ...support Free MIBs Local remote firmware update Local remote log check Supports DNS proxy and Dynamic DNS DDNS Supports timing operations Supports LED status indication VRRP hardware resiliency IPFix...

Страница 9: ...S 9 9 2 2 M S E R I E S R O U T E R L T E S E R I E S U S E R M A N U E L 9 2 PRODUCT STRUCTURE 2 1 APPEARANCE Figure 1 S9922M Router appearance 2...

Страница 10: ...E L 10 A C C E S S O R I E S Accessories name Number Note S9922M Router 1 pcs 3G LTE antenna 1 pcs According to GSM Technology 3G LTE Wi Fi antenna 1 pcs Optional RJ45 cable 1 pcs Mounting Kit 1 pair...

Страница 11: ...r adapter or one from an unknown manufacturer may cause the router to malfunction fail or could even cause a fire Such use voids all warranties whether expressed or implied on the product 3 1 2 LOGGIN...

Страница 12: ...The default user name is admin The default password is admin NOTE The device s default IP address is 192 168 1 1 and subnet mask is 255 255 255 0 It is recommended that you use the automatically obtai...

Страница 13: ...its which are connected to a S9922M Router make them reach to the desired network or internet regarding the network topology Follow the steps below to change the existing LAN IP block or add another I...

Страница 14: ...h up to 11 Mbps and Uses radio signal frequency 2 4GHz Channel There are 11 different channel selection options Bandwidth 20mhz or 40mhz can be selected according to the specifications of the devices...

Страница 15: ...S 9 9 2 2 M S E R I E S R O U T E R L T E S E R I E S U S E R M A N U E L 15 N E T W O R K W L A N Figure 4 Network Wlan...

Страница 16: ...Usually 3G LTE network bandwidth is Depending on the operators infrastructure between 1 300Mbps Single click Mod to access modem parameter settings section After that you can set APN profile of your...

Страница 17: ...dem parameter settings section After that you can set APN profile of your SIM card Set APN Username and Password If you have PIN of SIM card you can set PIN disable Set Network Type to Edge WCDMA TDD...

Страница 18: ...ive Basic Settings Rule Name Enter parameter name here Interval Enter the time you want to log Retry Times Enter retry times here Running Timeout Enter the period of inaccessibility to the user or int...

Страница 19: ...S 9 9 2 2 M S E R I E S R O U T E R L T E S E R I E S U S E R M A N U E L 19 N E T W O R K P A R A M E T E R S E L E C T A D D Figure 8 Network Parameter Select Add...

Страница 20: ...ough the LAN port and enter your default gateway here Eth1 Select the modem if you want the device to access the internet via the LAN WAN port DNS Type interface and custom Interface The DNS settings...

Страница 21: ...address DHCP is disable in default S9922M series So firstly you have to enable DHCP Server After that you can follow the steps below to configure the DHCP settings IP Pool br0 and custom Gateway defau...

Страница 22: ...S 9 9 2 2 M S E R I E S R O U T E R L T E S E R I E S U S E R M A N U E L 22 N E T W O R K D H C P S E R V E R Figure 10 Network DHCP Server...

Страница 23: ...ICATIONS CONFIGURATION 4 1 ICMP CHECK SERVICE The S9922M series LTE routers are can automatically take the actions which you want to the specific interface IP or domain can t accessible Follow steps b...

Страница 24: ...main Destination Address Enter the destination IP Destination Backup The secondary destination IP depending on your request Normal Interval Enter inaccessibility time before action is taken Retry Time...

Страница 25: ...S 9 9 2 2 M S E R I E S R O U T E R L T E S E R I E S U S E R M A N U E L 25 A P P L C A T O N S I C M P C H E C K A D D Figure 12 Applications ICMP Check Add...

Страница 26: ...domain names The S9922M series LTE routers are router is capable of Dynamic DNS To do this follow the steps Click the Applications tab and choose DDNS from the navigation menu DDNS Service Enable mus...

Страница 27: ...ted for SNMP to be active Port Enter SNMP service s port ex 161 Community The SNMP Community is like a user id or password that allows access to a router s or other device s statistics Trap IP Enter t...

Страница 28: ...of all your Ricon S9922M series LTE router models through a single interface M2M Service Enable must be selected for the entered M2M to be active Virtual Interface br0 and modem Select the device s WA...

Страница 29: ...selected for the entered Timing settings to be active Task Name Enter timing name here Task Type modem online reboot and custom Modem online modem online control Reboot restarts the device Custom The...

Страница 30: ...providing a gateway using one virtual IP address To perform VRRP over the S9922M series LTE routers follow the steps below VRRP Service Enable must be selected for the entered VRRP to be active Virtu...

Страница 31: ...stance point to point connection between remote dial users and a private network Follow the steps below to make Virtual Private Dialup Network over the router VPDN Service Enable must be selected for...

Страница 32: ...S 9 9 2 2 M S E R I E S R O U T E R L T E S E R I E S U S E R M A N U E L 32 V P N V P D N Figure 18 VPN VPDN...

Страница 33: ...ters IP Tunnel Service Enable must be selected for the entered Tunnel configuration to be active Tunnel Name Enter the name your specified here Tunnel Mode ipip gre and mgre Select according to the tu...

Страница 34: ...S 9 9 2 2 M S E R I E S R O U T E R L T E S E R I E S U S E R M A N U E L 34 V P N T U N N E L A D D Figure 19 VPN Tunnel Add...

Страница 35: ...t your initiate mode Encrypt des 3des aes256 aes192 aes128 Select your specific encryption mode Hash md5 sha1 sha2_256 Select your specific encryption mode Authentication psk rsasig xauth Select your...

Страница 36: ...S 9 9 2 2 M S E R I E S R O U T E R L T E S E R I E S U S E R M A N U E L 36 V P N I P S E C A D D P H A S E 1 Figure 20 VPN IPSec Add Phase1...

Страница 37: ...192 aes128 Select your specific encryption mode Hash md5 sha1 Select your specific encryption mode PFS open and close Choose according to your request Group Name group768 group1024 group1536 Select th...

Страница 38: ...S 9 9 2 2 M S E R I E S R O U T E R L T E S E R I E S U S E R M A N U E L 38 V P N I P S E C A D D P H A S E 2 Figure 21 VPN IPSec Add Phase2...

Страница 39: ...you specified here Match Phase1 Select the desired phase1 Match Phase2 Select the desired phase2 Destination IP or Domain md5 sha1 Select your specific encryption mode Encrypt Interface Select the wan...

Страница 40: ...d configurations and remote access facilities Follow the steps to make OPENVPN with S9922M series LTE routers OPENVPN Service Enable must be selected for the entered Tunnel configuration to be active...

Страница 41: ...S 9 9 2 2 M S E R I E S R O U T E R L T E S E R I E S U S E R M A N U E L 41 V P N O P E N V P N Figure 23 VPN OpenVPN...

Страница 42: ...y routers to translate a public IP address used on the Internet into a private IP address used on your local network This is done for multiple purposes to add security to the network by keeping the pr...

Страница 43: ...stination NAT mainly used to redirect incoming packets with an external address or port destination to an internal IP address or port inside the network SNAT Source NAT is the translation of the sourc...

Страница 44: ...and Static If selected interface there are interface line options in br0 modem and eth1 The desired WAN port must be selected in order for DNAT to go to the external network Br0 is bridge mode modem i...

Страница 45: ...hat we want to connect to the external network with SNAT must be entered here Mapping Address Type Interface and Static If selected interface there are interface line options in br0 modem and eth1 The...

Страница 46: ...t the outgoing traffic will appear to be from the IP MASQ itself In addition to the added functionality IP Masquerade provides the foundation to create a heavily secured networking environment Interfa...

Страница 47: ...E S U S E R M A N U E L 47 7 3 4 DELETE NAT SETTINGS Follow the steps below to delete the current NAT configuration Single click Delete icon corresponding to the NAT line you want to delete F O R W A...

Страница 48: ...st select the interface you want the gateway to access These include the modem and eth1 LAN WAN port If you select static IP as the source type you must enter the IP block you want to enter into the g...

Страница 49: ...ize the impact of busy bandwidth Follow the steps below to reset the device and single click the icon Status Select enable for the Qos configuration to be active Rule Name Enter the rule name here Con...

Страница 50: ...name or MAC addresses The S9922M series LTE routers router has 2 types of filtering lists These are Black list and White list Black List the IP domain or MAC addresses you entered can t be connected...

Страница 51: ...S 9 9 2 2 M S E R I E S R O U T E R L T E S E R I E S U S E R M A N U E L 51 S E C U R T Y I P F I L T E R A D D Figure 31 Security IP Filter Add...

Страница 52: ...sed Drop must be selected So filtered IPs can t access the router Mirror Rule If IP filtering is done with forward the router offers the Mirror Rule option This enable the entered filtering to be mutu...

Страница 53: ...S E R I E S U S E R M A N U E L 53 S E C U R T Y I P F I L T E R A D D Figure 32 Security IP Filter Add If you want to delete IP filtering you should come back to the IP filtering page and sing click...

Страница 54: ...S 9 9 2 2 M S E R I E S R O U T E R L T E S E R I E S U S E R M A N U E L 54 S E C U R T Y I P F I L T E R Figure 33 Security IP Filter Add...

Страница 55: ...omain you specify Follow the steps below S E C U R T Y D O M A N F I L T E R A D D Figure 34 Security Domain Filter Add Domain Keyword Domain name must be entered here Default Action Accept If White L...

Страница 56: ...M A I N F I L T E R A D D Figure 35 Security Domain Filter Add If you want to delete domain filtering you should come back to the domain filtering page and sing click Delete icon opposite to the desi...

Страница 57: ...2 2 M S E R I E S R O U T E R L T E S E R I E S U S E R M A N U E L 57 8 3 MAC FILTER SETT NGS Follow the steps for mac filtering S E C U R I T Y M A C F I L T E R A D D Figure 37 Security MAC Filter...

Страница 58: ...nect to the router Drop If Black List is used Drop must be selected So filtered MAC can t access the router Filter mode Input MAC that are unwanted to access the router must be entered into INPUT Forw...

Страница 59: ...I E S U S E R M A N U E L 59 If you want to delete MAC filtering you should come back to the MAC filtering page and sing click Delete icon opposite to the desired filtering S E C U R I T Y M A C F I...

Страница 60: ...LOG SETT NGS You can monitor the current activities of the router through the log When you set up a new system you follow up by log tracking Choose System Local Log You can View instant Message Logs...

Страница 61: ...S 9 9 2 2 M S E R I E S R O U T E R L T E S E R I E S U S E R M A N U E L 61 S Y S T E M L O C A L L O G Figure 40 System Local Log...

Страница 62: ...emote device The device you are monitoring must comply with this specification Can be monitored directly by a domain To remotely monitor follow these steps Choose System Remote Log Log Status must sel...

Страница 63: ...You can use one of the generally accepted NTP servers or if you own an NTP server you can back up its information Choose System Clock Status must selected Enable Select the Time synchronization Type...

Страница 64: ...to enter the correct time to monitor the router Choose System Clock Status must selected Enable Select the Time synchronization Type is manual Enter the current date for your region in Set Date Enter...

Страница 65: ...ty when logging in to your router If you wish you can define a guest user and restrict authorization with the help of port definition Choose System Account Select Account Level to define admin or gues...

Страница 66: ...th trace to make troubleshooting easier You can perform network tests from the router interface Follow the steps below to perform your network tests Choose System Network Test Enter the IP you want to...

Страница 67: ...R L T E S E R I E S U S E R M A N U E L 67 S Y S T E M N E T W O R K T E S T Figure 46 System Network Test NOTE If your test results log as follows be sure to your configuration 5 packets transmitted...

Страница 68: ...that has program code and data stored in it in order for the device to function Follow these steps to install upgrade the software that is current or appropriate for your configuration Choose System...

Страница 69: ...ns a router and platform configuration use the configuration export feature and export it to your local computer Choose System Files Select the field where you want to save the configuration file by c...

Страница 70: ...guration to the router use the configuration import feature and upload the file from your local computer to your router Choose System Files Select the configuration file you want to upload by clicking...

Страница 71: ...to its original factory default settings at the back of the device When user press the Reset button for up to 15s the router will restore to its original factory default settings and restart automati...

Страница 72: ...ies router can be viewed here 10 1BASIC SYSTEM INFORMATION Choose Status Basic System Information You can see Router s Serial Number You can see Router s Hardware Version You can see Router s Software...

Страница 73: ...73 10 2LAN INFORMATION From the LAN tab you can see whether the device s LAN Local Area Network port is active In addition if DHCP is enabled you will see the devices that receive IP from DHCP with th...

Страница 74: ...ATION If WLAN Wireless Local Area Network is enabled on the Router you can view its status here Here you can see how many devices are connected via WLAN In the example if the WLAN is shown off but tur...

Страница 75: ...e Select Status Modem to check if the router is receiving IP over the SIM card In this screen you can see Up Time Modem Status connected or disconnected Signal dBm IP Address and DNS If you have some...

Страница 76: ...I E S R O U T E R L T E S E R I E S U S E R M A N U E L 76 10 5ROUTING INFORMATION You can follow the steps to check the current routes in the device S T A T U S R O U T I N G T A B L E Figure 55 Sta...

Отзывы:

Нет отзывов

Бренды по названию

Популярные бренды

Загрузить еще бренды