background image

 

Routers -

 

General Description

 

 

  

 
 

 

 

IP ROUTERS INSTALLATION GUIDE    3G OTU      

667/CI/45025/000  Rev 4    Unrestricted 

 

 

10

 

 

 

Safety of 

Security

 

Although the 3G/4G router modem does not handle the STRATOS Outstation to Instation secu-

rity explicitly, it is nevertheless incumbent on the installers to secure the router. Having a se-

cure router may discourage accidental or intentional re-configuration that could end up 

providing third parties with access to custom

ers’ internet bandwidth.

 

 

The process for securing the 3G/4G router is as follows; 
 

1

 

Generate a random password. It is recommended that KeePass (

www.keepass.com

) is 

used for such a purpose. 

2

 

Configure the router such that the spare Ethernet port is not active. 

3

 

Confirm and configure the modem such that the WiFi device is in-operable. 

4

 

Update the modem with the password generated above. 

5

 

Export the router configuration 

6

 

Store the password for the router along with router configuration in the STRATOS Outsta-

tion site-log or the ST950 Site Log. 

7

 

Delete local copies of the configuration and password. 

 

2.3.2.

 

VPN Connection 

This type of connection relies on the router to become the VPN client. Product applications 

such as RMS over IP (Gemini Mk2),  OMU, Saphire JTM will use this methodology. 
  

 

Safety of 

Security

 

It should be noted that this method of connection is not considered as secure as the ‘Transpar-

ent’ connection method.

 

 
 

Содержание Stratos Outstation

Страница 1: ...667 CI 45025 000 3G OTU IP ROUTERS INSTALLATION GUIDE Jun 19 Issue 4 ...

Страница 2: ... 3 Connection Types 9 2 3 1 Transparent Connection 9 2 3 2 VPN Connection 10 3 Installation and Configuration Guidance 11 3 1 Installation of the Antenna Cable 11 3 1 1 Installation of Pole Mounted Antenna Kit 13 3 2 Configuration and Installation of the 3G 4G Router 14 3 2 1 RMS over IP Gemini Mk2 14 3 2 2 STRATOS Outstation Connection 14 3 2 3 UTC Connection via 3G 4G router 16 3 3 Installation ...

Страница 3: ...67 CI 45025 000 Rev 4 Unrestricted 3 List of Figures Figure 1 SIM Card Slot 14 Figure 3 3G 4G Router Settings WAN 15 Figure 4 3G 4G Router Settings ICMP 15 Figure 5 IPSec Configuration 16 Figure 6 Example IPSec Instance 18 Figure 7 Example IPSec Status 19 ...

Страница 4: ... of Tables IP ROUTERS INSTALLATION GUIDE 3G OTU 667 CI 45025 000 Rev 4 Unrestricted 4 List of Tables Table 1 External Document References 7 Table 2 Terms and Abbreviations 8 Table 3 IPSec Settings Table 17 ...

Страница 5: ... Handbook and any other Document or Handbook associated with the equipment includ ing but not restricted to the following i The equipment must be correctly connected to the specified incoming power supply ii Only trained competent persons should work on this equipment iii Any power tools must be regularly inspected and tested iv Any personnel working on site must wear the appropriate protective cl...

Страница 6: ...fety of Handling Take care not to kink the cable when installing The impact may manifest in poor re turn loss Due to the cable thickness the RF cable the minimum bend radius of 25cm must be ob served It is recommended that RF connectors exposed to the environment are protected using amalgamating Tape and electrical tape ...

Страница 7: ...y Tree 667 CI 32630 000 Gemini MK2 3G 4G Conversion GUIDE 667 CI 52251 000 Stratos Outstation 3G 4G Comms Installation QS Guide Table 1 External Document References 1 3 Key Terms and Abbreviations Key Terms and Abbreviations PSTN Public Switching Telephone Network GSM Global System for Mobile communication This Usually Refers to 2nd Generation 2G Networks GPRS Global Packet Radio Service Used on 2...

Страница 8: ...erminal RAM Random Access Memory PROM Programmable Read Only Memory CPU Central Processor Unit UTMC OTU Urban Traffic Management and Control Outstation Transmission Unit UTMC VMS Urban Traffic Management and Control Variable Message Sign NAT Network Address Translation sometimes referred to as Port Forwarding VPN Virtual Private Network LAN Local Area Network WAN Wide Area Network ADSL Asymmetrica...

Страница 9: ...work using a Mobile Phone connection 3G or 4G GSM Wireless connections of this type are not normally as reliable as using wired communi cations solutions and are not always suitable in some locations or for certain applications If in doubt please contact the Engineering department in Poole for clarification The PROROUTE H685 4G 667 1 99110 000 Router also allows IPSEC VPN tunnels to be con figured...

Страница 10: ...s www keepass com is used for such a purpose 2 Configure the router such that the spare Ethernet port is not active 3 Confirm and configure the modem such that the WiFi device is in operable 4 Update the modem with the password generated above 5 Export the router configuration 6 Store the password for the router along with router configuration in the STRATOS Outsta tion site log or the ST950 Site ...

Страница 11: ...r VMS sign mounted antenna This antenna is unlikely to perform as well as a pole mounted Omni due to the mounting height 2m in the case of a controller cabinet and its antenna technology patch antenna which has a lower gain typically 0dBi as opposed to 3dBi for an Omni To assist installers in deciding the type of antenna to select the sample signal strength that has been ascertained by working thr...

Страница 12: ...rmination Adapter SMA plug to ReSMA socket ReSMA plug to N type plug pigtail cable N Type Cable Termination Guide 667 CI 46193 ETC The reader is to refer to N Type Cable Termination Guide 667 CI 46193 ETC for details 1 Install the cable between the Roadside Cabinet and traffic signal pole 2 Terminate the antenna cable using a Male N Type connector See Terminating N Type Connectors Safety of Cable ...

Страница 13: ...cket using the supplied bolts 3 Bolt the pole spacer kit to the pole using U Bolt provided 4 Attach the Pole mounting bracket to the spacer kit and pull the an tenna cable out through the hole 5 Plug terminated antenna cable directly into the Antenna 6 The N Type connector needs to be protected using self amalgamating tape sealing against the bottom of the antenna hous ing and extending 1 2cm past...

Страница 14: ...7 CI 52251 000 which is supplied as part of the STRATOS OUTSTATION 3G 4G ROUTER KIT 667 1 32630 100 The STRATOS Outstation will be the VPN client Any communications interface only needs to act as a transparent pipe to and from the STRATOS Outstation The STRATOS Outstation needs to be supplied with the appropriate certificates in order to enable connection through to the STRATOS Instation The 4G ro...

Страница 15: ...rname and password Figure 2 3G 4G Router Settings WAN 4 Setup ICMP check settings This provides the 3G 4G router the ability to monitor the backhaul link and if down will reboots to ensure there are no router issues Any pingable IP address can be used but the STRATOS Instation would be a reasonable option Figure 3 3G 4G Router Settings ICMP ...

Страница 16: ... is already configured to allow traffic out to the internet It is also assumed that the router has been updated to the latest firmware v3 2 133 as of 12th October 2017 available here http www proroute co uk support firmware proroute h820wrt h685wrt firmware 1 The following instructions are used to ensure the 3G 4G router is configured for appropri ate VPN connection 2 Log on to the PROROUTE router...

Страница 17: ...lay 30 seconds must match VPNC DPD timeout 120 seconds must match VPNC NAT traversal Enable Local LAN bypass Tick this box if the local network range is contained within the remote range Local subnet Internal IP Address and subnet Mask including any static routes of the out station Remote subnet Internal IP Address and subnet Mask of cloud hosted environment Phase 1 Encryption algorithm This is th...

Страница 18: ...Installation and Configuration Guidance IP ROUTERS INSTALLATION GUIDE 3G OTU 667 CI 45025 000 Rev 4 Unrestricted 18 Figure 5 Example IPSec Instance ...

Страница 19: ... 19 6 Click Save Apply to save this new tunnel 7 Once the settings have saved you will return to the main list and a connection will be attempted 8 You can check the status of the tunnel by navigating to Status VPN IPSec and identify any issues by selecting IPSec Log above the status Figure 6 Example IPSec Status ...

Страница 20: ...tion of the MuLogic RSA 4222 Base Configuration 667 CR 99107 000 document is supplied as part of the CONFIGURED MULOGIC ROUTER RSA 4222 VR2 667 1 99107 000 3 6 2U Mounting Kits When installing an xDSL router and or a wireless router which isn t mounted to a STRATOS Outstation the use of a 19 INCH 2U Mounting Kit is recommended There are a few options available with the main ones listed below Part ...

Страница 21: ...its The interval between visits are dependent on local conditions The periodic inspection should include the following 1 Checking the detector securing screws are tight 4 3 First Line Maintenance First line maintenance will be achieved on a modular replacement basis 1 Check which type of router is fitted 2 Note the router configuration assuming correct install this may be available in the STRA TOS...

Страница 22: ...ent back in the original packaging if availa ble or in an approved Anti Static packaging along with a fully completed Fault Label to the following address Logistics Spares Returns Centre Siemens Mobility Traffic Solutions Coalfield Way Ashby Park Ashby de la Zouch LE65 1JD For UK users any queries should be directed to the Service Logistics Manager on 01530 258181 ...

Страница 23: ...ed UTMC OTU This router needs to be installed on its side to fit into the rack 3 Cable tie the provided PSU to the shelf alongside the Router and wire the DC connections directly onto the terminations of the router 4 Wire the supplied plug onto the mains lead and plug into the socket on the Modem Rack do NOT use the maintenance socket 5 Terminate the Antenna Cable in the controller where the suppl...

Страница 24: ...n should be configured to use a communications profile that is compatible with the physical network layer ADSL wireless 3G etc This should be checked with the in station operator A 2 Inhand 3G Router Commissioning Instation should use the 3G communications profile This type of 3G router would normally be set up using a Private APN this would be requested by the customer and the information supplie...

Страница 25: ...urrent state of the router and the signal strength At this point you would expect the router to have logged onto the network and be showing the signal strength You would also expect the PPP link to show an IP address for the WAN mobile side of the router if it connected to the service provider s network Usually a class A 10 xxx xxx xxx ad dress This will not appear until the APN and password are e...

Страница 26: ...he Status Modem Page this shows you the current state of the modem and the signal strength At this point you would expect the router to have logged onto the network and be showing the signal strength The modem should have Registered on the network You would also expect the PPP link to show an IP address for the WAN mobile side of the router if it connected to the service provider s network Usually...

Страница 27: ...rovided by the Poole Engineering Department no further action would be required The next section is for information only and would only require configuring if the information has been specified by the Engineering Department A 3 Optional Configuration Parameters This section is for information only and would only require configuring if the information has been specified by the Engineering Departmen...

Страница 28: ... device on the LAN side These settings can be changed in the Ser vices Port Mapping form these details will be provided if they are necessary The Inhand 3G router can also be configured to connect a VPN across public networks using IPSEC these details are entered on the Service IPSEC page and the Network IPSEC Tunnels page These settings would be provided by Poole Engineering if they were required...

Страница 29: ...m www siemens co uk traffic Subject to change without prior notice Order No 667 CI 45025 000 Siemens Plc 2016 More information Siemens Traffic www siemens co uk traffic Siemens Mobility http www mobility siemens com mobility For more information on ITS products scan the QR code ...

Отзывы: