Page 1
Last revised date: November 16, 2016
Billion M500
4G/LTE Industrial/In-Vehicle Multi-Carrier Router
User Manual
Version release: 1.05.1.1
Page 2
1
Table of Contents
Chapter 1: Introduction .............................................................................................................................. 1
Introduction to your Router .................................................................................................................... 1
Features & Specifications ........................................................................................................................ 3
Hardware Specifications ......................................................................................................................... 6
Application Diagram ............................................................................................................................... 7
Chapter 2: Product Overview ...................................................................................................................... 8
Important Note for Using This Router...................................................................................................... 8
Device Description .................................................................................................................................. 9
The detail instruction in Reset Button ................................................................................................... 12
Chapter 3: Basic Installation ..................................................................................................................... 13
Installation Reference ........................................................................................................................... 14
Cabling ................................................................................................................................................. 17
Default Settings .................................................................................................................................... 18
Information from Your ISP .................................................................................................................... 19
Chapter 4: Device Configuration ............................................................................................................... 20
Login to your Device ............................................................................................................................. 20
Status ................................................................................................................................................... 22
Device Info ................................................................................................................................................... 23
System Log ................................................................................................................................................... 25
4G/LTE Status ............................................................................................................................................... 26
GPS Status .................................................................................................................................................... 27
Hardware Monitor ....................................................................................................................................... 28
Hotspot Status ............................................................................................................................................. 29
Statistics ....................................................................................................................................................... 30
DHCP Table ................................................................................................................................................... 34
IPSec Status .................................................................................................................................................. 35
PPTP Status .................................................................................................................................................. 36
L2TP Status ................................................................................................................................................... 37
GRE Status .................................................................................................................................................... 38
OpenVPN Status ........................................................................................................................................... 39
Disk Stauts .................................................................................................................................................... 40
ARP Table ..................................................................................................................................................... 41
Quick Start ........................................................................................................................................... 42
Configuration ....................................................................................................................................... 45
Interface Setup ............................................................................................................................................ 46
Internet .................................................................................................................................................... 47
LAN........................................................................................................................................................... 55
Wireless ................................................................................................................................................... 59
Wireless MAC Filter ................................................................................................................................. 69
Page 3
2
Dual WAN ..................................................................................................................................................... 70
General Setting ........................................................................................................................................ 70
Outbound Load Balance .......................................................................................................................... 74
Protocol Binding ....................................................................................................................................... 75
Hotspot ........................................................................................................................................................ 76
General Setting ........................................................................................................................................ 77
Bult-in User Account ................................................................................................................................ 79
Authorized of Client ................................................................................................................................. 80
Walled Garden ......................................................................................................................................... 81
Advertisement ......................................................................................................................................... 82
Session Log ............................................................................................................................................... 83
Customization .......................................................................................................................................... 84
Advanced Setup ........................................................................................................................................... 88
Firewall .................................................................................................................................................... 89
Routing ..................................................................................................................................................... 90
Dynamic Routing ...................................................................................................................................... 91
NAT ........................................................................................................................................................... 93
Static DNS ................................................................................................................................................ 98
Time Schedule ......................................................................................................................................... 99
Mail Alert ............................................................................................................................................... 100
VPN ............................................................................................................................................................ 101
IPSec ....................................................................................................................................................... 102
PPTP Server ............................................................................................................................................ 112
PPTP Client ............................................................................................................................................. 114
L2TP........................................................................................................................................................ 122
GRE Tunnel ............................................................................................................................................. 132
OpenVPN Server .................................................................................................................................... 137
OpenVPN Client ..................................................................................................................................... 139
Access Management .................................................................................................................................. 144
Device Management .............................................................................................................................. 145
SNMP ..................................................................................................................................................... 146
Remote System Log................................................................................................................................ 147
Universal Plug & Play ............................................................................................................................. 148
Dynamic DNS ......................................................................................................................................... 149
Access Control ........................................................................................................................................ 151
Packet Filter ........................................................................................................................................... 153
CWMP (TR-069) ..................................................................................................................................... 156
Parental Control ..................................................................................................................................... 158
SAMBA & FTP Server.............................................................................................................................. 159
Maintenance .............................................................................................................................................. 160
User Management ................................................................................................................................. 161
Certificate Management ........................................................................................................................ 165
Time Zone .............................................................................................................................................. 167
Firmware & Configuration ..................................................................................................................... 168
System Restart ....................................................................................................................................... 170
Auto Reboot ........................................................................................................................................... 171
Diagnostics Tool ..................................................................................................................................... 172
Ignition Sensing ...................................................................................................................................... 173
Chapter 5: Troubleshooting .................................................................................................................... 174
Problems with the Router ......................................................................................................................... 174
Page 4
3
Problem with LAN Interface ...................................................................................................................... 174
Recovery Procedures ................................................................................................................................. 174
Appendix: Product Support & Contact ..................................................................................................... 176
Page 5
1
Chapter 1: Introduction
Introduction to your Router
Embedded Dual 4G/LTE Industrial Router
M500, embedded Dual 4G/LTE Industrial LTE Router, is integrated with the 802.11n Wireless Access
Point and Dual WAN interfaces featuring reliable connectivity and network expandability. This
cutting-edge networking device provides multi-GNSS engine for GPS or GLONASS system for
remotely tracking and monitoring vehicles. The Industrial LTE Router is uniquely installed dual 4G/LTE
modules enabling an extensive range of mission-critical markets to enjoy a robust, always-on Internet
experience by plugging dual SIMs. Fallback and Failover between dual 4G/LTE connections supports
a seamless wireless connection and is perfectly suitable for industrial M2M applications, ranging from
fleet management, public safety, smart bus & transportation, automotive, agriculture, construction,
and retail services.
Flexible Deployment Options
The Industrial LTE Router provides users with flexible, scalable deployment options optimized to both
reduce costs and provide the longest possible lifespan for the investment. The Industrial LTE Router
integrates multi-WAN options, Dual SIM/Dual Radio, Gigabits EWAN, and WirelessClient for network
expandability - load balance and reliable connectivity - auto-failover/failback.
High Availability and Network Resilience
The Industrial LTE Router is a feature-rich industrial class router combined with robust network
processing and Multi-WAN connectivity, purposely built for network resilience and business continuity.
The platform supports dual-SIM and dual-LTE radios for carrier redundancy or load balancing between
carriers’ networks.
In the event of a connectivity failure of the primary WAN interface, traffic is automatically redirected to
the secondary WAN interface. The Industrial LTE Router will also fallback when the primary interface
connection is restored. This functionality operates regardless of whether the primary connection is
LTE or a wired connection such as fiber, cable or DSL.
Load balancing and traffic prioritization mechanisms can be enabled to enhance failover performance
and maximize bandwidth utilization for critical applicastions delivery.
Carrier-grade Wireless LAN
The Industrial LTE Router integrates an 802.11n access point supporting data rates of up to 300Mbps.
Security functionality includes: WEP 64/128 bit, WPA, WPA2 (PSK, TKIP and AES, 802.1X, SSID
broadcast disable, wireless MAC address filtering and MSSID with Client Isolation to enhance the
level of transmission security and access control over the Wireless LAN.
The router also supports the Wi-Fi Protected Setup (WPS) standard, allowing users to establish a
secure wireless network by simply pushing a button. If your network requires wider coverage, the
built-in Wireless Distribution System (WDS) repeater function allows you to expand your wireless
network without the need for any external wires or cables.
Page 6
2
Extraordinary Connectivity with Solid Data Protection
The Industrial LTE Router features a rugged, compact design with integrated dual 4G/LTE WAN ports,
4-port Gigabit Ethernet switch, 802.11n Wi-Fi Access Point with multiple SSID supports, and two USB
2.0 host interfaces for Storage/NAS. SPI firewall, and advanced VPN integration provide security
needed to enhance the operations of Public Safety, Energy Wellhead and Gas Industry, Industrial
M2M Segment, PoS/Kiosks/ATM, Fleet Management, and Smart Transportation/Bus.
Vehicle Tracking System
Industrial LTE Router is embedded with a GNSS receiver for GPS or GLONASS. To co-work with
On-Board Diagnostics(OBD) system, it eases the central control of geographically-dispersed fleets by
presenting individual vehicles' detailed information, including remaining fuel levels, rapid accelerations,
and locations.
Robust Design to Withstand in the Harshest Environments
The industrial-grade enclosure is designed to resist heat, dust, moisture and provides long-term
operation in the toughest of environments. The Industrial LTE Router supports an extended
temperatures range from -40 to 140º F ( -40 to 60º C) for extremely challenging conditions such as
industrial automation, mining plants, wellhead & gas drilling, manufacturing factories, and virtually
anywhere that requires a robust wireless connection.
Secure VPN Connections
The Industrial LTE Router supports comprehensive and robust IPSec/ PPTP/ L2TP/ GRE/ OpenVPN
VPN(Virtual Private Network) protocols for business users to establish private encrypted tunnels over
the public Internet to secure data transmission between headquarters and branch offices. It also
supports VPN dial in from smart phones for secure remote Internet connection via your home
broadband. With a built-in VPN accelerator, the router enhances IPSec VPN performance significantly.
IPv6 Supported
Internet Protocol version 6 (IPv6) is a version of the Internet Protocol that is designed to succeed IPv4.
IPv6 has a vastly larger address space than IPv4. The router is already supporting IPv6, you can use
it in IPv6 environment no need to change device. The dual-stack protocol implementation in an
operating system is a fundamental IPv4-to-IPv6 transition technology. It implements IPv4 and IPv6
protocol stacks either independently or in a hybrid form. The hybrid form is commonly implemented in
modern operating systems supporting IPv6.
Quick Start Wizard
Support a WEB GUI page to install this device quickly. With this wizard, simple steps will get you
connected to the Internet immediately.
Firmware Upgradeable
Device can be upgraded to the latest firmware through the WEB based GUI or CWMP(TR-069).
Page 7
3
Features & Specifications
• Dual 4G/LTE broadband connectivity (3G Fallback optional)*1
• Multi-WAN interfaces (Dual SIM/Dual Radio, EWAN, and Wireless Client) for network
expandability and reliable connectivity
• High performance antenna for increased coverage, signal reception and efficiency
• Embedded GNSS option for real-time asset tracking and location data-based applications
• Enterprise level routing functionality
• Gigabit Ethernet WAN (GbE WAN) for Cable/Fiber/xDSL high WAN throughput
•
Gigabit Ethernet LAN
• IPv6 ready (IPv4/IPv6 dual stack)
• Multiple wireless SSIDs with wireless guest access and client isolation
• IEEE
802.11 b/g/n compliant Wireless Access Point with Wi-Fi Protected Setup (WPS)
•
Wi-Fi Protected Access (WPA-PSK/ WPA2-PSK) and Wired Equivalent Privacy (WEP)
• Secured IPSec VPN with powerful DES/ AES
• Secured PPTP VPN with Pap/ Chap/ MPPE authentication
• Secured L2TP VPN with Pap/Chap authentication
• Secured GRE VPN tunnels
• Secured OpenVPN Server and Client
•
Firewall Security with DoS Preventing and Packet Filtering
•
Universal Plug and Play (UPnP) Compliance
• Ease of Use with Quick Installation Wizard
•
USB port for NAS (FTP/ SAMBA server)
• Global Navigation Satellite System (GNSS)
•
Small form factor with multiple mounting options, easily installed by a single person
•
Power ignition control option when mounted within vehicles
•
Hardened enclosure with Industrial-graded components
•
Designed to withstand hypothermia, heat and protect from shock, vibration, etc.
•
Ideal Solution for Business Continuity, Logistics/Transportation and Fleet, Public Safety/FirstNet
applications.
•
MIL-STD-810G compliant
•
E-Mark(E1) certification
Availability and Resilience
• Dual-4G/LTE Interfaces (Dual LTE Modules)
• Auto fail-over and failback
Page 8
4
• Load Balancing
Supported Frequency Bands
• Primary WAN LTE: FDD and TDD (Bands depend on module configuration)
*1
• Secondary WAN LTE: Optional FDD and TDD (Bands depend on module configuration)
*1
Global Navigation Satellite System (GNSS)
•
Embedded multi-GNSS engine for GPS or GLONASS system
*2
Network Protocols and Features
•
IPv4, IPv6 or IPv4/ IPv6 Dual Stack
*3
•
NAT, Static Routing and RIP-1/2
•
DHCPv4/v6
•
Universal Plug and Play (UPnP) Compliant
•
Dynamic Domain Name System (DDNS)
•
Virtual Server and DMZ
•
SNTP, DNS proxy
•
IGMP snooping and IGMP proxy
•
MLD snooping and MLD proxy
Firewall
•
Built-in NAT Firewall
•
Stateful Packet Inspection (SPI)
• DoS attack prevention including Land Attack, Ping of Death, etc
• Access control
• IP&MAC filter, URL Content Filter
• Password protection for system management
• VPN pass-through
Virtual Private Network (VPN)
• Secured IPSec VPN with powerful DES/ AES
• Secured PPTP VPN with Pap/ Chap/ MPPE authentication
• Secured L2TP VPN with Pap/Chap authentication
• Secured GRE VPN tunnels
• Secured OpenVPN Server and Client
Page 9
5
Wireless LAN
•
Compliant with IEEE 802.11 b/g/n standards
•
2.4 GHz - 2.484GHz radio band for wireless
•
Up to 300 Mbps wireless operation rate
•
64/128 bits WEP supported for encryption
•
WPS (Wi-Fi Protected Setup) for easy setup
•
Wireless security with WPA-PSK, WPA2-PSK support
•
WDS repeater function support
•
Multiple SSIDs
• Wireless MAC Filtering
•
Wireless client isolation
USB Application Server
•
Storage/NAS: SAMBA Server, FTP Server
Management
• Quick Installation wizard
•
Web-based GUI for remote and local management
•
Firmware upgrades and configuration data upload and download via web-based GUI
•
Supports DHCP server / client / relay
• Supports
SNMP v1, v2, v3, MIB-I and MIB-II
•
TR-069*3 supports remote management
1. The 4G LTE is dependent on your local service provider
2. The support for GNSS functions depends on the region.
3. Only upon request for Telco/ ISP projects.
4. Specifications on this datasheet are subject to change without prior notice.
Page 10
6
Hardware Specifications
Physical interface
• 4G/LTE module: 2 Embeded 4G/LTE modules
• Ethernet: 4-port 10 / 100 / 1000Mbps auto-crossover (MDI / MDI-X) Switch
•
EWAN: Ethernet port #4 can be configured as an EWAN port for connecting to
Cable/Fiber/xDSL modem for Broadband connectivity.
•
GNSS: Embeded GNSS
•
SIM card slot: 2 mini-SIM(2FF) card slots
• USB: 2 USB 2.0 Type A Host port for storage service
• Mini USB: 2 mini USB connectors for 4G/LTE module debug
•
4G/LTE antenna: 4 detachable antennas (2 antennas for each 4G/LTE module)
• GPS antenna: 1 detachable active GPS antenna
• WiFi antenna: 2 detachable wireless antennas
• Factory default reset button
• Wireless on/off and WPS push button
•
4-pin power connector
Page 11
7
Application Diagram
The Industrial LTE Router is specifically designed to provide outstanding network efficiency and
internet security for a wide range of applications and vertical M2M market segments.
Page 12
8
Chapter 2: Product Overview
Important Note for Using This Router
Do not use the router in high humidity or high temperature.
Do not open or repair the case yourself. If the device becomes
too hot, turn off the power immediately and have it repaired at
a qualified service center.
Avoid using this product and all accessories outdoors.
Warning
Page 13
9
Device Description
Index
Item
Description
1
WiFi antenna
Screw the supplied WiFi antennas onto the antenna connectors
2
WiFi/WPS LED
The single-colour LED behaves as follows:
Green
Wireless connection established
Green blinking
Data being transmitted / received
3
WiFi On/Off
& WPS button
By controlling the pressing time, users can achieve two different effects:
(1) WiFi On/Off: Press & hold the button for more than 6 seconds to On/Off the
wireless.
(2) WPS: Press &hold the button for less than 6 seconds to trigger WPS function.
4
Reset button
After the device is powered on, press it 6 seconds or above: to restore to factory
default settings (this is used when you cannot login to the router, e.g. forgot your
password)
5
Mini USB port
Direct connect to embedded 4G/LTE module for debuging or module firmware upgrade.
6
SIM card slot
Insert the mini SIM card(2FF) with the gold contact facing up.
Push the mini SIM card(2FF) inwards to eject it
Warning: Before inserting or removing the SIM card, you must disconnect the
router from the power adapter.
1
1
6 2 3 4 5
Page 14
10
Index
Item
Description
1
4G/LTE 1 antenna
Screw the supplied 4G/LTE antennas onto the antenna connectors for 4G/LTE module
1.
2
4G/LTE 2 antenna
Screw the supplied 4G/LTE antennas onto the antenna connectors for 4G/LTE module
2.
3
GPS antenna
Screw the supplied GPS antenna onto the antenna connectors.
4
Power connector
Connect the supplied Power cable to this connector.
5
USB port
The USB can support setup for storage/file sharing. Connect an external USB dongle /
hard drive for storage.
6
Gigabit Ethernet
(LAN 1 ~ LAN 4)
Connect a UTP Ethernet cable (Cat-5 or Cat-5e) to one of the four LAN ports when
connecting to a PC or an office/home network of 10Mbps/ 100Mbps/ 1000Mbps
1 2 3 1 2
4 5 6
Page 15
11
Index
Item
Description
1
Power LED
The Power dual-colour LED behaves as shown below.
Green
System is up and ready
Red
Boot failure
2
Internet LED
The Internet dual-colar LED behaves as shown below.
Green
IP connected and traffic is passing through the device.
Red
IP request failed or WAN connection not present.
3
USB LED
The single-colar LED behaves as shown below.
Green
Connecting to a USB dongle or a hard drive.
4
GPS LED
The single-colar LED behaves as shown below.
Green
GPS active
5
WAN LED
(Received Signal
Strength Indicator)
The 4G/LTE received signal dual-colar LED behaves as shown below.
Green
RSSI greater than -69 dBm. Excellent signal condition.
Green Flashing quickly
RSSI from -81 to -69 dBm. Good signal condition
Red Flashing quickly
RSSI from -99 to -81 dBm. Fair signal condition.
Red Flashing slowly
RSSI less than -99 dBm. Poor signal condition.
Red
No signal and the 4G/LTE module is in service
Off
No LTE module or LTE module fails
6
Ethernet LED
The dual-colour LED behaves as shown below.
Green
Transmission speed is at Gigabit speed (1000Mbps)
Orange
Transmission speed is at 10/100Mbps
Blinking
Data being transmitted/received
1 2 3 4 5 5 6
Page 16
12
The detail instruction in Reset Button
Recovery procedures for non-working devices (e.g. after a failed firmware upgrade flash):
Please follow the steps, the router’s emergency-reflash web interface will then be accessible via
http://192.168.1.1 where you can upload a firmware image to restore the router to a functional state.
Please note that the router will only respond with its web interface at this address (192.168.1.1), and
will not respond to ping request from your PC or other telnet operations.
Steps:
Before starting recovery process, please configure the IP address of the PC as 192.168.1.100 and
proceed with the following step-by-step guide.
1. Power the router off.
2. Press reset button and power on the router, once the Power flashes Red and Green, keeping press
reset button over 6 seconds.
3. Internet led flashes Green and Red, router entering recovery procedure and router's IP will reset to
Emergency IP address (Say 192.168.1.1).
4. Open browser and access http://192.168.1.1 to upload the firmware.
5. Internet led lit Red, and router starts to write firmware into flash. Please DO NOT power off the
router at this step.
6. Internet led lit Green when successfully upgrade firmware.
7. Power the router off and then on again.
Page 17
13
Chapter 3: Basic Installation
The router can be configured with your web browser. A web browser is included as a standard
application in the following operating systems: Windows, Linux, Mac OS, etc. The product provides an
easy and user-friendly interface for configuration.
PCs must have an Ethernet interface installed properly and be connected to the router either directly
or through an external repeater hub, and have TCP/IP installed and configured to obtain an IP address
through a DHCP server or a fixed IP address that must be in the same subnet as the router. The
default IP address of the router is 192.168.1.254 and the subnet mask is 255.255.255.0 (i.e. any
attached PC must be in the same subnet, and have an IP address in the range of 192.168.1.1 to
192.168.1.253). The best and easiest way is to configure the PC to get an IP address automatically
from the router using DHCP. If you encounter any problems accessing the router’s web interface it may
also be advisable to uninstall any kind of software firewall on your PCs, as they can cause problems
accessing the 192.168.1.254 IP address of the router. Users should make their own decisions on how
to best protect their network.
Please follow the steps below for your PC’s network environment installation. First of all, please check
your PC’s network components. The TCP/IP protocol stack and Ethernet network adapter must be
installed. If not, please refer to your Windows-related or other operating system manuals.
Any TCP/IP capable workstation can be used to communicate with or
through the M100. To configure other types of workstations, please
consult the manufacturer’s documentation.
Page 18
14
Installation Reference
Insert the SIM card
Please ensure that the Billion M500 is not connected to the power cable before proceeding.
Turn to the panel with SIM card slot.
Insert the SIM card with the gold contact facing up. Push the SIM card inwards to inject it. Use the SIM
1 first, use the SIM 2 for a secondary/back-up SIM.
Warning: Before inserting or removing the SIM card, you must disconnect the router from the
power adapter.
Power Installation
Case 1:
Page 19
15
Case 2:
Connect to a power source
The power connector includes one input pin to meet “Ignition Sensing”. The pin is ESD protected to do
“automatic ON and time-delay Off” if ACC input signal is connected to a vehicle’s ACC signal line.
Ignition Sensing: In this mode the router will turn off after the input has been held at low for the timeout
period. The router will then reboot when the input is returned to high. If the input is held low for less
than the timeout period before returning to high, no action is taken.
This diagram shows the connector pin definition.
Pin
Definition
Details
Wireless
Color
1
Ground
-
Black
2
Ground
-
Black
3
ACC
Standard ignition-on signal.
The voltage higher than 10.0V will be detected as ignition asserted.
White
4
VCC
10V ~ 56V DC
Red
Page 20
16
The wire colors shown are for the power/GPIO cable that comes with the Industrial LTE Router.
(optional)
Page 21
17
Cabling
One of the most common causes of problems is bad cabling. Make sure that all connected devices are
turned on. On the front panel of the product is a bank of LEDs. Verify that the LAN Link and LEDs are
lit. If they are not, verify that you are using the proper cables.
Page 22
18
Default Settings
Before configuring the router, you need to know the following default settings.
Web Interface: (Username and Password)
Username: admin
Password: admin
The default username and password are “admin” and “admin” respectively.
Device LAN IP Settings
IP Address: 192.168.1.254
Subnet Mask: 255.255.255.0
DHCP Server:
DHCP server is enabled.
Start IP Address: 192.168.1.100
IP pool counts: 20
Attention
If you ever forget the username/password to login to the router, you may
press the RESET button up to 6 seconds then release it to restore the factory
default settings.
Caution: After pressing the RESET button for more than 6 seconds then
release it, to be sure you power cycle the device again.
Page 23
19
Information from Your ISP
Before configuring this device, you have to check with your ISP (Internet Service Provider) what kind
of service is provided such as 4G/LTE, EWAN (Dynamic IP address, Static IP address, PPPoE Mode)
or Wireless Client (Dynamic IP address, Static IP address).
Page 24
20
Chapter 4: Device Configuration
Login to your Device
Open your web browser, enter the IP address of your router, which by default is 192.168.1.254, and
click “Go”, a user name and password window prompt appears.
The default username and password is “admin” and “admin” respectively for the Administrator.
Congratulations! You have successfully logged on to your Industrial LTE Router !
Page 25
21
Once you have logged on to your Industrial LTE Router via your web browser, you can begin to set it
up according to your requirements. On the configuration homepage, the left navigation pane links you
directly to the setup page, which includes:
Status(Device Info, System Log, 4G/LTE Status, GPS Status, Hardware Monitor, Hotspot Status,
Statistics, DHCP Table, IPSec Status, PPTP Status, L2TP Status, GRE Status, OpenVPN
Status, Disk Status, ARP Table)
Quick Start (Wizard Setup)
Configuration (Interface Setup, Dual WAN, Hotspot, Advanced Setup, VPN, Access Management,
Maintenance)
Please see the relevant sections of this manual for detailed instructions on how to configure your
gateway.
Page 26
22
Status
In this section, you can check the router working status, including Device Info, System Log, 4G/LTE
Status, GPS Status, Hardware Monitor, Hotspot Status, Statistics, DHCP Table, IPSec Status,
PPTP Status, L2TP Status, GRE Status, OpenVPN Status, Disk Status, ARP Table.
Page 27
23
Device Info
It contains basic information of the device.
Device Information
Model Name: Show model name of the router
Firmware Version: This is the Firmware version
MAC Address: This is the MAC Address
Date Time: The current date and time.
System Up Time: The duration since system is up.
Physical Port Status
Here the page shows the status of physical port of 4G/LTE, EWAN, WirelessClient, Ethernet and
Wireless.
WAN
Interface: The WAN interface, "4G/LTE-1", "4G/LTE-2", "EWAN (LAN4)" and "Wireless Client".
Protocol: The protocol in use.
Connection: The connection status of the link.
IP Address: The WAN interface IP address obtained.
Default Gateway: The default gateway address.
LAN
IP Address: LAN IP address.
Page 28
24
Subnet Mask/Prefix Length: Subnet mask for IPv4 or Prefix length for IPv6 on LAN..
DHCP Server: LAN port DHCP information.
Wireless
Mode: The wireless mode in use.
SSID: The SSID.
Channel: The current channel.
Security: The wireless security setting, authentication type.
Page 29
25
System Log
In system log, you can check the operations status and any glitches to the router.
Refresh: Press this button to refresh the statistics.
Backup: Back up the current system log file and save it to your computer.
Page 30
26
4G/LTE Status
This page contains 4G/LTE connection information.
Status: The current status of the 4G/LTE connection.
Signal Strength: The signal strength bar and dBm value indicates the current 4G/LTE signal strength.
The front panel 4G/LTE Signal Strength LED indicates the signal strength as well.
Signal Information: Shows important LTE signal parameters such as RSRP (Reference Signal
Receiving Power), RSRQ (Reference Signal Receiving Quality), SINR (Signal to Interference plus
Noise Ratio).
RSRP (Reference Signal Receiving Power): is the average power of all resource elements which
carry cell-specified reference signals over the entire bandwidth.
RSRQ (Reference Signal Receiving Quality): measures the signal strength and is calculated
based on both RSRP and RSSI.
SINR (Signal to Interference plus Noise Ratio): is also a measure of signal quality as well. It is
widely used by the operators as it provides a clear relationship between RF conditions and
throughput. Note: Some LTE modules do not provide this information.
Network Name: The name of the LTE network the router is connecting to.
Cell ID: The ID of base station that the device is connected to.
Card IMEI: The unique identification number that is used to identify the 4G/LTE module.
Card IMSI: The international mobile subscriber identity used to uniquely identify the user of a celluar
network – a number provisioned in the SIM card..
Network Mode: Show the using network mode.
Network Band: Show the using network band.
Refresh: Press this button to refresh the statistics.
Amount used: Show the volumn used, the amount can be refered to “only Download”, ”only Upload”
and “Download and Upload”, please move to Usage allowance to check.
Billing period: The lasting days since the biling begins each month(the beginning day counted).
Page 31
27
GPS Status
In GPS status, you can check the UTC time, position of the router.
Page 32
28
Hardware Monitor
In hardware monitor, you can check the voltage, current and temperature of system.
Page 33
29
Hotspot Status
The Hotspot status shows each hotspot client’s connection status/information.
MAC Address: The MAC of the currently active client or the client attepting to connect in.
IP Address: The IP assigned to the client.
Authenticated: Show the client is authorized or not.
User Name: The username of the logined client; in agreement mode, no username showed.
Duration Time: The uptime of the client.
Upload: The upload traffic percentage of the used to the maximum allowed.
Dowload: The download traffic percentage of the used to the maximum allowed.
Page 34
30
Statistics
4G/LTE
Interface: List all available network interfaces in the router. You are currently checking on the physical
status of 4G/LTE interface.
Transmit Frames of Current Connection: This field displays the total number of 4G/LTE frames
transmitted until the latest second for the current connection.
Transmit Bytes of Current Connection: This field shows the total bytes transmitted till the latest
second for the current connection for the current connection.
Transmit Total Frames: The field displays the total number of frames transmitted till the latest second
since system is up.
Transmit Total Bytes: This field displays the total number of bytes transmitted until the latest second
since system is up.
Receive Frames of Current Connection: This field displays the number of frames received until the
latest second for the current connection.
Receive Bytes of Current Connection: This field shows the total bytes received till the latest second
for the current connection.
Receive Total Frames: This field displays the total number of frames received until the latest second
since system is up.
Receive Total Bytes: This field displays the total frames received till the latest second since system is
up.
Page 35
31
EWAN
Interface: List all available network interfaces in the router. You are currently checking on the physical
status of the EWAN port.
Transmit Frames: This field displays the total number of frames transmitted until the latest second.
Transmit Multicast Frames: This field displays the total number of multicast frames transmitted till
the latest second.
Transmit Total Bytes: This field displays the total number of bytes transmitted until the latest second.
Transmit Collision: This is the number of collisions on this port.
Transmit Error Frames: This field displays the number of error packets on this port.
Receive Frames: This field displays the number of frames received until the latest second.
Receive Multicast Frames: This field displays the number of multicast frames received until the latest
second.
Receive Total Bytes: This field displays the number of bytes received until the latest second.
Receive CRC Errors: This field displays the number of error packets on this port.
Receive Under-size Frames: This field displays the number of under-size frames received until the
latest second.
Refresh: Press this button to refresh the statistics.
Page 36
32
Ethernet
Interface: List all available network interfaces in the router. You are currently checking on the physical
status of the Ethernet port.
Transmit Frames: This field displays the number of frames transmitted until the latest second.
Transmit Multicast Frames: This field displays the number of multicast frames transmitted until the
latest second.
Transmit Total Bytes: This field displays the number of bytes transmitted until the latest second.
Transmit Collision: This is the number of collisions on this port.
Transmit Error Frames: This field displays the number of error packets on this port.
Receive Frames: This field displays the number of frames received until the latest second.
Receive Multicast Frames: This field displays the number of multicast frames received until the latest
second.
Receive Total Bytes: This field displays the number of bytes received until the latest second.
Receive CRC Errors: This field displays the number of error packets on this port.
Receive Under-size Frames: This field displays the number of under-size frames received until the
latest second.
Refresh: Press this button to refresh the statistics.
Page 37
33
Wireless
Interface: List all available network interfaces in the router. You are currently checking on the physical
status of the Wireless.
Transmit Frames: This field displays the number of frames transmitted until the latest second.
Transmit Error Frames: This field displays the number of error frames transmitted until the latest
second.
Transmit Drop Frames: This field displays the number of drop frames transmitted until the latest
second.
Receive Frames: This field displays the number of frames received until the latest second.
Receive Error Frames: This field displays the number of error frames received until the latest second.
Receive Drop Frames: This field displays the number of drop frames received until the latest second.
Refresh: Press this button to refresh the statistics.
Page 38
34
DHCP Table
DHCP table displays the devices connected to the router with clear information.
Index: The index identifying the connected devices.
Host Name: Show the hostname of the PC.
IP Address: The IP allocated to the device.
MAC Address: The MAC of the connected device.
Expire Time: The total remaining interval since the IP assignment to the PC.
Page 39
35
IPSec Status
Index: The IPSec tunnel index number.
Action: Connect or Drop the connection.
Connection Name: User-defined IPSes VPN connection name.
Active: Show if the tunnel is active for connection.
Connection State: Show the IPSec phase 1 and phase 2 connecting status.
Statistics: Display the upstream/downstream traffic per session in KB. The value clears when session
disconnects.
Remote Gateway: The IP of the remote IPSec gateway.
Remote Network: The IP and netmask of remote access range.
Local Network: The IP and netmask of local access range.
Page 40
36
PPTP Status
PPTP Server
Index: The PPTP server tunnel index number.
Connection Name: Show user-defined PPTP VPN connection name.
Active: Show if the tunnel is active for connection.
Connection State: Show the connecting status.
Connection Type: Remote Access or LAN to LAN.
Assigned IP Address: Show the IP assigned to the client by PPTP Server.
Remote Network: Display the remote network and subnet mask in LAN to LAN PPTP connection.
Refresh: Click this button to refresh the connection status.
PPTP Client
Index: The PPTP client tunnel index number.
Connection Name: Show user-defined PPTP VPN connection name.
Active: Show if the tunnel is active for connection.
Connection State: Show the connecting status.
Connection Type: Remote Access or LAN to LAN.
Server IP Address: Show the IP of remote PPTP Server.
Remote Network: Display the remote network and subnet mask in LAN to LAN PPTP connection.
Refresh: Click this button to refresh the connection status.
Page 41
37
L2TP Status
Index: The L2TP tunnel index number.
Connection Name: Display the user-defined L2TP connection name.
Active: Show if the tunnel is active for connection.
Connection State: Show the connecting status.
Connection Mode: The L2TP mode is dialin or dialout.
Connection Type: Remote Access or LAN to LAN.
Tunnel Remote IP Address: Display the remote tunnel IP address.
Refresh: Click this button to refresh the connection status.
Page 42
38
GRE Status
Index: The GRE tunnel index number.
Connection Name: Display the user-defined GRE connection name.
Active: Show if the tunnel is active for connection.
Remote Gateway IP: The IP of the remote GRE gateway.
Remote Network: Display the remote network.
Refresh: Click this button to refresh the connection status.
Page 43
39
OpenVPN Status
OpenVPN Server
Index: The index to identify the OpenVPN connection/rule.
Connection Name: User-defined name to mark the connection/rule.
Active: Yes or no to demosntrate the rule is active or not.
Service Port: Show the service port/protocl.
Tunnel Network: The virtual tunnel subnet of the server.
Status: The status of the rule/
OpenVPN Client
Index: The index to identify the OpenVPN connection/rule.
Connection Name: User-defined name to mark the connection/rule.
Active: Yes or no to demosntrate the rule is active or not.
Remote Server: Show the remote server public IP: port/protocl.
Status: The status of the rule.
Detail Info: Show the assigned virtual IP and routing by the sever.
Refresh: Click this button to refresh the connection status.
Page 44
40
Disk Stauts
Partition: Display the USB storage partition.
Disk Space (KB): Display the total storage space of the NAS in Kbytes unit.
Free Space (KB): Display the available space in Kbytes unit.
Page 45
41
ARP Table
This section displays the router’s ARP (Address Resolution Protocol) Table, which shows the mapping
of IP addresses to Ethernet MAC addresses.
Index: The Index of the ARP rule item.
IP Address: Shows the IP Address of the device that the MAC address maps to.
MAC Address: Shows the MAC address that is corresponded to the IP address of the device it is
mapped to.
Page 46
42
Quick Start
This is a useful and easy utility to help you to setup the router quickly and to connect to your ISP
(Internet Service Provider) with only a few steps. It will guide you step by step to setup password, time
zone, and WAN settings of your device. The Quick Start Wizard is a helpful guide for the first-time
users to the device.
For detailed instructions on configuring WAN settings, see refer to the Interface Setup section.
Click Next to move on to Step 1.
Step 1 – Password
Set new password of the “admin” account to access for router management. The default is “admin”.
Once changed, please use this new password next time when accessing to the router. Click Next to
continue.
Step 2 – Time Zone
Choose your time zone. Click Next to continue.
Step 3 – Wireless
Set up your wireless connection if you want to connect to the Internet wirelessly on your PCs. Click
Next to continue.
Page 47
43
Step 4 – ISP Connection Type
Set up your Internet connection.
4.1 Select an appropriate WAN connection protocol then click Next to continue.
Input all relevant 3G/4G-LTE parameters from your ISP.
4.2 If selected EWAN
If selected PPPoE, please enter PPPoE account information provided by your ISP. Click Next to
continue. Or, others protocol assigned by your ISP.
If selected Dynamic IP Address, click Next to continue. Or, others protocol assigned by your ISP.
Page 48
44
Step 5 – Quick Start Completed
The Setup Wizard has completed. Click on Back to modify changes or mistakes. Click Next to save
the current settings.
Step 6 – Quick Start Completed
Page 49
45
Configuration
Click to access and configure the available features in the following: Interface Setup, Dual WAN,
Hotspot, Advanced Setup, VPN, Access Management, and Maintenance.
These functions are described in the following sections.
Page 50
46
Interface Setup
Here are the features under Interface Setup: Internet, LAN, Wireless and Wireless MAC Filter.
Page 51
47
Internet
4G/LTE
Status: Choose Activated to enable the 3G/4G-LTE connection.
Usage Allowance: to control 4G/LTE flow, click it to further configure about 4G/LTE flow control, refer
to the following Usage Allowance for more information.
IP Pass-Through Mode: When “enabled”, the device will gain a WAN IP via 4G/LTE dial-up and pass
on to the PC connected to device, thus your PC gets a public WAN IP working on the internet. Note:
under this circumstance, often only one PC is connected to the device.
Network Mode: There are some options of service standards: “Automatic”, “UMTS 3G only”, “GSM
2G Only”, “UMTS 3G Preferred”, “GSM 2G Preferred”, “GSM and UMTS Only”, “LTE Only”, “GSM,
UMTS, LTE”. If you are not sure which mode to use, you may select Automatic to auto detect the best
mode for you.
TEL No.: The dial string to make a GPRS / 3G/4G-LTE user internetworking call. It may provide by
your mobile service provider.
Dual APN: The Router can support up to two APNs. Select Single or Dual.
APN: An APN is similar to a URL on the WWW, it is what the unit makes a GPRS / UMTS call. The
service provider is able to attach anything to an APN to create a data connection, requirements for
APNs varies between different service providers. Most service providers have an internet portal which
they use to connect to a DHCP Server, thus giving you access to the internet i.e. some 3G operators
use the APN ‘internet’ for their portal. The default value is “internet”.
PDN Type: Select the supported IP version, IPv4, Both IPv4/IPv6 or IPv6 only.
Authentication Protocol: Check if the ISP wants authentication, select PAP or ChAP.
Page 52
48
Username/Password: Enter the username and password provided by your service provider. The
username and password are case sensitive.
PIN: PIN stands for Personal Identification Number. A PIN code is a numeric value used in certain
systems as a password to gain access, and authenticate. In mobile phones a PIN code locks the SIM
card until you enter the correct code. If you enter the PIN code incorrectly 3 times in a row, then the
SIM card will be blocked and you will require a PUK code from your network/service provider.
Connection: Default set to Always on to keep an always-on 3G/4G-LTE connection.
Keep Alive: Select Yes to keep the 3G/4G-LTE connection always on.
Keep Alive IP: Enter the IP address whic is used for “ping”, and router will ping the IP to find whether
the connection is on or not, if not, router will recover the connection.
Default Route: Select Yes to use this interface as default route interface.
NAT: Select this option to Disabled/Enable the NAT (Network Address Translation) function. Enable
NAT to grant multiples devices in LAN to access to the Internet through a single WAN IP.
MTU: Set the MTU(maximum transimission unit) value.
Usage Allowance
Mode: include Volume-based and Time-based control.
Volume-based include “only Download”, ”only Upload” and “Download and Upload” to limit the flow.
Time-based control the flow by providing specific hours per month.
The billing period begins on: the beginning day of billing each month.
Over usage allowance action: what to do when the flow is over usage allowance, the
availablemethods are “Disconnect”, “E-mail Alert”, ”E-mail Alert and Disconnect”.
Save the statistics to ROM: to save the statistics to ROM system.
Page 53
49
EWAN
Page 54
50
Status: Select whether to enable the service.
IPv4/IPv6
IP Version: Choose IPv4, IPv4/IPv6, IPv6 based on your environment. If you don’t know which one to
choose from, please choose IPv4/IPv6 instead.
ISP Connection Type:
ISP: Select the encapsulation type your ISP uses.
Dynamic IP: Select this option if your ISP provides you an IP address automatically.
Static IP: Select this option to set static IP information. You will need to enter in the Connection
type, IP address, subnet mask, and gateway address, provided to you by your ISP. Each IP
address entered in the fields must be in the appropriate IP form. IP address from by four IP
octets separated by a dot (xx.xx.xx.xx). The Router will not accept the IP address if it is not in
this format.
PPPoE: Select this option if your ISP requires you to use a PPPoE connection.
Bridge: Select this mode if you want to use this device as an OSI Layer 2 device like a switch.
802.1q Options
802.1q: When activated, please enter a VLAN ID.
VLAN ID: It is a parameter to specify the VLAN which the frame belongs. Enter the VLAN ID
identification, tagged: 0-4095.
PPPoE (If selected PPPoE as WAN Connection Type; otherwise, skip this part)
Username: Enter the user name provided by your ISP.
Password: Enter the password provided by your ISP.
Bridge Interface for PPPoE: When “Activated”, the device will gain WAN IP from your ISP with the
PPPoE account. While if you dial up with the account within your PC, the device will then work as a
bridge forwarding the PPPoE information to the PPPoE server and send the response to your PC, thus
Page 55
51
your PC gets a public WAN IP working in the internet. But if your PC is connected to the router working
as a DHCP client, in this mode, the device acts as a NAT router.
Connection Setting
Connection:
Always On: Click on Always On to establish a PPPoE session during start up and to
automatically re-establish the PPPoE session when disconnected by the ISP.
Connect Manually: Select Connect Manually when you don't want the connection up all the
time.
TCP MSS Option: Enter the maximum size of the data that TCP can send in a segment. Maximum
Segment Size (MSS).
IP Options
Default Route: Select Yes to use this interface as default route interface.
TCP MTU Option: Enter the maximum packet that can be transmitted. Default MTU is set to 1492.
IPv4 Options
Get IP Address: Choose Static or Dynamic
Static IP Address: If Static is selected in the above field, please enter the specific IP address you get
from ISP and the following IP subnet mask and gateway address.
IP Subnet Mask: The default is 0.0.0.0. User can change it to other such as 255.255.255.0.Type the
subnet mask assigned to you by your ISP (if given).
Gateway: Enter the specific gateway IP address you get from ISP.
NAT: Select Enable if you use this router to hold a group of PCs to get access to the internet.
Dynamic Route:
Page 56
52
RIP Version: (Routing Information protocol) Select this option to specify the RIP version,
including RIP-1, RIP-2.
RIP Direction: Select this option to specify the RIP direction.
- None is for disabling the RIP function.
- Both means the router will periodically send routing information and accept routing
information then incorporate into routing table.
- IN only means the router will only accept but will not send RIP packet.
- OUT only means the router will only send but will not accept RIP packet.
IGMP Proxy: IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish
membership in a Multicast group. Choose whether enable IGMP proxy.
IPv6 Options(only when choose IPv4/IPv6 or just IPv6 in IP version field above)
IPv6 Address: Type the WAN IPv6 address from your ISP.
Obtain IPv6 DNS: Choose if you want to obtain DNS automatically.
Primary/Secondary DNS: if you choose Disable in the Obtain IPv6 DNS field, please type the exactly
primary and secondary DNS.
MLD Proxy: MLD (Multicast Listener Discovery Protocol) is to IPv6 just as IGMP to IPv4. It is a
Multicast Management protocol for IPv6 multicast packets.
When router’s Internet configuration is finished successfully, you can go to status to get the connection
information.
Page 57
53
Wireless Client
When Wireless Client is selected, the router will act as an ordinary wireless client to connect to an AP
to connect to the Internet.
Status: Choose Activated to enable the Wireless Client connection.
ISP Connection Type:
ISP: Select the encapsulation type your ISP uses.
Dynamic IP: Select this option if your ISP provides you an IP address automatically.
Static IP: Select this option to set static IP information. You will need to enter in the Connection
type, IP address, subnet mask, and gateway address, DNS, provided to you by your ISP. Each
IP address entered in the fields must be in the appropriate IP form. IP address from by four IP
octets separated by a dot (xx.xx.xx.xx). The Router will not accept the IP address if it is not in
this format.
IP Common Options
Default Route: Select Yes to use this interface as default route interface.
IPv4 Options
NAT: Select Enable if you use this router to hold a group of PCs to get access to the internet.
Wireless Options
SSID: The target wireless AP. User can alliteratively input the SSID manually or also use the Scan
button to scan and select.
Channel: Choose the wireless working channel
Security Type: Set the wireless security mode, namely, OPEN, WEP 64-bit, WEP 128-bit, WPA-PSk
and WPA2-PSK.
Page 58
54
Use "Scan" button to scan the available SSIDs in the air, find your desired on, type the encypytion key.
Page 59
55
LAN
A Local Area Network (LAN) is a shared communication system to which many computers are
attached and is limited to the immediate area, usually the same building or floor of a building.
Page 60
56
IPv4 Parameters
IP Address: Enter the IP address of Router in dotted decimal notation, for example, 192.168.1.254
(factory default).
IP Subnet Mask: The default is 255.255.255.0. User can change it to other such as 255.255.255.128.
Alias IP Address: This is for local networks virtual IP interface. Specify an IP address on this virtual
interface.
Alias IP Subnet Mask: Specify a subnet mask on this virtual interface.
Snooping: Select Activated to enable IGMP/MLD Snooping function, Without IGMP/MLD snooping,
multicast traffic is treated in the same manner as broadcast traffic - that is, it is forwarded to all ports.
With IGMP/MLD snooping, multicast traffic of a group is only forwarded to ports that have members of
that group.
Dynamic Route: Select the RIP version from RIP1 or RIP2.
DHCPv4 Server
DHCP (Dynamic Host Configuration Protocol) allows individual clients to obtain TCP/IP configuration
at start-up from a server.
DHCPv4 Server: If set to Enabled, your M100 can assign IP addresses, default gateway and DNS
servers to the DHCP client.
If set to Disabled, the DHCP server will be disabled.
If set to Relay, the M100 acts as a surrogate DHCP server and relays DHCP requests and
responses between the remote server and the clients. Enter the IP address of the actual,
remote DHCP server in the Remote DHCP Server field in this case.
When DHCP is used, the following items need to be set.
Start IP: This field specifies the first of the contiguous addresses in the IP address pool.
IP Pool Count: This field specifies the count of the IP address pool.
Lease Time: The current lease time of client.
Physical Ports: To determine which port(s) is/are subject to the DHCP address assignment by
Page 61
57
DHCPv4 server.
DNS Relay Select Automatically obtained or Manually set (if selected. Please set the exactly
information).
Primary DNS Server: Enter the IP addresses of the DNS servers. The DNS servers are passed to the
DHCP clients along with the IP address and the subnet mask.
Secondary DNS Server: Enter the IP addresses of the DNS servers. The DNS servers are passed to
the DHCP clients along with the IP address and the subnet mask.
Fixed Host
In this field, users can map the specific IP (must in the DHCP IP pool) for some specific MAC, and this
information can be listed in the following table.
IP Address: Enter the specific IP. For example: 192.168.1.110.
MAC Address: Enter the responding MAC. For example: 00:0A:F7:45:6D:ED
When added, you can see the ones listed as showed below:
IPv6 parameters
The IPv6 address composes of two parts, thus, the prefix and the interface ID.
Interface Address / Prefix Length: Enter a static LAN IPv6 address. If you are not sure what to do
with this field, please leave it empty as if contains false information it could result in LAN devices not
being able to access other IPv6 device. Router will take the same WAN’s prefix to LAN side if the field
is empty.
DHCPv6 Server
There are two methods to dynamically configure IPv6 address on hosts, Stateless and Stateful.
Stateless auto-configuration requires no manual configuration of hosts, minimal (if any)
configuration of routers, and no additional servers. The stateless mechanism allows a host to generate
its own addresses using a combination of locally available information (MAC address) and information
(prefix) advertised by routers. Routers advertise prefixes that identify the subnet(s) associated with a
Page 62
58
link, while hosts generate an "interface identifier" that uniquely identifies an interface on a subnet. An
address is formed by combining the two. When using stateless configuration, you needn’t configure
anything on the client.
Stateful configuration, for example using DHCPv6 (which resembles its counterpart DHCP in IPv4.)
In the stateful auto configuration model, hosts obtain interface addresses and/or configuration
information and parameters from a DHCPv6 server. The Server maintains a database that keeps track
of which addresses have been assigned to which hosts.
DHCPv6 Server: Check whether to enable DHCPv6 server.
DHCPv6 Server Type: Select Stateless or Stateful. When DHCPv6 is enabled, this parameter is
available.
Stateless: If selected, the PCs in LAN are configured through RA mode, thus, the PCs in LAN
are configured through RA mode, to obtain the prefix message and generate an address using
a combination of locally available information (MAC address) and information (prefix)
advertised by routers, but they can obtain such information like DNS from DHCPv6 Server.
Stateful: If selected, the PCs in LAN will be configured like in IPv4 mode, thus obtain addresses
and DNS information from DHCPv6 server.
Start interface ID: enter the start interface ID. The IPv6 address composed of two parts, thus, the
prefix and the interface ID. Interface is like the Host ID compared to IPv4.
End interface ID: enter the end interface ID.
Leased Time (hour): the leased time, similar to leased time in DHCPv4, is a time limit assigned to
clients, when expires, the assigned ID will be recycled and reassigned.
Router Advertisement: Check to Enable or Disable the Issue Router Advertisement feature. This
feature is to send Router Advertisement messages periodically which would multicast the IPv6 Prefix
information (similar to v4 network number 192.168.1.0) to all LAN devices if the field is enabled. We
suggest enabling this field.
Page 63
59
Wireless
This section introduces the wireless LAN and some basic configurations. Wireless LANs can be as
complex as a number of computers with wireless LAN cards communicating through access points
which bridge network traffic to the wired LAN.
Page 64
60
Access Point Settings
Access Point: Default setting is set to Activated. If you want to close the wireless interface, select
Deactivated.
AP MAC Address: The MAC address of wireless AP.
Wireless Mode: The default setting is 802.11b+g+n (Mixed mode). If you do not know or have both
11g and 11b devices in your network, then keep the default in mixed mode. From the drop-down
manual, you can select 802.11g if you have only 11g card. If you have only 11b card, then select
802.11b and if you only have 802.11n then select 802.11n.
Channel: The range of radio frequencies used by IEEE 802.11b/g/n wireless devices is called a
channel. There are Regulation Domains and Channel ID in this field. The Channel ID will be different
based on Regulation Domains. Select a channel from the drop-down list box.
Beacon interval: The Beacon Interval value indicates the frequency interval of the beacon. Enter a
value between 20 and 1000. A beacon is a packet broadcast by the Router to synchronize the wireless
network.
RTS/CTS Threshold: The RTS (Request To Send) threshold (number of bytes) for enabling RTS/CTS
handshake. Data with its frame size larger than this value will perform the RTS/CTS handshake. Enter
a value between 1500 and 2347.
Fragmentation Threshold: The threshold (number of bytes) for the fragmentation boundary for
directed messages. It is the maximum data fragment size that can be sent. Enter a value between 256
and 2346, even number only.
DTIM Interval: This value, between 1 and 255, indicates the interval of the Delivery Traffic Indication
Message (DTIM).
TX Power: The transmission power of the antennas, ranging from 1-100, the higher the more powerful
of the transmission performance.
IGMP Snooping: Enable or disable the IGMP Snooping function for wireless. Without IGMP snooping,
multicast traffic is treated in the same manner as broadcast traffic - that is, it is forwarded to all ports.
With IGMP snooping, multicast traffic of a group is only forwarded to ports that have members of that
group.”
Page 65
61
11n Settings
Channel Bandwidth: Select either 20 MHz or 20/40 MHz for the channel bandwidth. The wider the
Channel bandwidth the better the performance will be.
Guard Interval: Select either 400nsec or 800nsec for the guard interval. The guard interval is here to
ensure that data transmission do not interfere with each other. It also prevents propagation delays,
echoing and reflections. The shorter the Guard Interval, the better the performance will be. We
recommend users to select Auto.
MCS: There are options 0~15 and AUTO to select for the Modulation and Coding Scheme. We
recommend users selecting AUTO.
SSID Settings
Available SSID: User can determine how many virtual SSIDs to be used. Default is 1, maximum is 4.
SSID Index: Select the number of SSIDs you want to config; up to 4 SSIDs are available in the list.
SSID: The SSID is the unique name of a wireless access point (AP) to be distinguished from another.
For security propose, change the default wlan-ap to a unique ID name to the AP which is already
built-in to the router’s wireless interface. Make sure your wireless clients have exactly the SSID as the
device, in order to get connected to your network.
Broadcast SSID: Select Yes to make the SSID visible so a station can obtain the SSID through
passive scanning. Select No to hide the SSID in so a station cannot obtain the SSID through passive
scanning.
Clients Isolation: This parameter is to control access between two wireless clients. If users enable
this function, then each of the wireless clients will not be able to communicate with the other.
SSID Activated: Select the time period during which the SSID is active. Default is always which
means the SSID will be active all the time without time control. See Time Schedule to set the timeslot
to flexibly control when the SSID functions.
WPS Settings
WPS (Wi-Fi Protected Setup) feature is a standard protocol created by Wi-Fi Alliance. This feature
greatly simplifies the steps needed to create a Wi-Fi network for a residential or an office setting. WPS
supports 2 types of configuration methods which are commonly known among consumers: PIN
Method & PBC Method.
Page 66
62
Use WPS: Enable this feature by choosing the ”YES” radiobutton.
WPS State: Display whether the WPS is configured or unconfigured.
WPS Mode: Select the mode which to start WPS, choose between PIN Code and PBC (Push Button).
Selecting Pin Code mode will require you to know the enrollee PIN code.
To future understand the two modes of configuration; please refer to the example of the Wi-Fi
Protected Setup.
Security Settings
Security Type: You can disable or enable wireless security for protecting wireless network. The
default type of wireless security is OPEN and to allow all wireless stations to communicate with the
access points without any data encryption.
To prevent unauthorized wireless stations from accessing data transmitted over the network, the
router offers secure data encryption, known as WEP and WPA.
There are five alternatives to select from: WEP 64-bit, WEP 128-bit, WPA-PSK, WPA2-PSK, and
Mixed WPA/WPA2-PSK. If you require high security for transmissions, please select WPA-PSK,
WPA2-PSK or WPA/WPA2-PSK.
WEP 64-bit, WEP 128-bit
WEP Authentication Method: WEP authentication method, there are two methods of authentication
used, Open System authentication (OPENWEB) and Share Key authentication (SHAREDWEB). We
suggest you select OPENWEB.
Key 1 to Key 4: Enter the key to encrypt wireless data. To allow encrypted data transmission, the
WEP Encryption Key values on all wireless stations must be the same as the router. There are four
keys for your selection. The input format is in HEX style, 5 and 13 HEX codes are required for
64-bitWEP and 128-bitWEP respectively.
If you chose WEP 64-bit, then enter any 5 ASCII characters or 10 hexadecimal characters ("0-9",
"A-F").
If you chose WEP 128-bit, then enter 13 ASCII characters or 26 hexadecimal characters ("0-9",
"A-F").
You must configure all four keys, but only one key can be activated at any one time. The default key is
key 1.
Note: When you enable WPS function, this WEP function will be invalid. And if you select one of
WEP-64Bits/ WEP-128Bits, the following prompt box will appear to notice you.
Page 67
63
WPA-PSK, WPA2-PSK, Mixed WPA2/WPA-PSK
WPA Algorithms: TKIP (Temporal Key Integrity Protocol) or AES (Advanced Encryption System)
utilizes a stronger encryption method and incorporates Message Integrity Code (MIC) to provide
protection against hackers.
Pre-Shared key: The key for network authentication. The input format should be 8-63 ASKII
characters or 64 hexadecimal characters
Key Renewal Interval: The time interval for changing the security key automatically between wireless
client and AP.
WDS Settings
WDS (Wireless distributed system) is a wireless access point mode that enables wireless link and
communication with other access point. It is easy to be installed, just define the peer’s MAC of the
connected AP.
WDS Mode: select Activated to enable WDS feature and Deactivated to disable this feature.
MAC Address: Enter the AP MAC addresses (in XX:XX:XX:XX:XX:XX format) of the peer connected
AP.
Page 68
64
Example: Wi-Fi Protected Setup (WPS) I:
PIN Method: Configure AP as Registrar
1. Jot down the client’s Pin (e.g. 04640776).
2. Enter the Enrollee (Client) PIN code and then press Start WPS.
3. Launch the wireless client’s WPS utility (e.g. Ralink Utility). Set the Config Mode as Enrollee, press
the WPS button on the top bar, select the AP (e.g. Billion_AP) from the WPS AP List column. Then
press the PIN button located on the middle left of the page to run the scan.
4. The client’s SSID and security setting will now be configured to match the SSID and security setting
of the registrar (router).
Page 69
65
Page 70
66
Example: Wi-Fi Protected Setup (WPS) II:
PIN Method: Configure AP as Enrollee
1. Jot down the WPS PIN (e.g. 07966170). Press Start WPS.
2. Launch the wireless client’s WPS utility (e.g. Ralink Utility). Set the Config Mode as Registrar. Enter
the PIN number in the PIN Code column then choose the correct AP (e.g. Billion_AP) from the WPS
AP List before pressing the PIN button to run the scan.
3. The router’s (AP’s) SSID and security setting will now be configured to match the SSID and security
setting of the registrar (client).
Page 71
67
4. Now to make sure that the setup is correctly done, cross check to see if the SSID and the security
setting of the registrar setting match with the parameters found on both Wireless Configuration and
Wireless Security Configuration page.
Page 72
68
Example: Wi-Fi Protected Setup (WPS) III:
PBC Method:
1. Press the PBC radio button, Then Start WPS.
2. Launch the wireless client’s WPS Utility (e.g. Ralink Utility). Set the Config Mode as Enrollee. Then
press the WPS button and choose the correct AP (e.g. Billion_AP) from the WPS AP List section
before pressing the PBC button to run the scan.
3. When the PBC button is pushed, a wireless communication will be established between your router
and the PC. The client’s SSID and security setting will now be configured to match the SSID and
security setting of the router.
Page 73
69
Wireless MAC Filter
The MAC filter screen allows you to configure the router to give exclusive access to up to 8 devices
(Allow Association) or exclude up to 8 devices from accessing the router (Deny Association). Every
Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at
the factory and consists of six pairs of hexadecimal characters, for example, 00:AA:BB:00:00:02.
You need to know the MAC address of the devices you wish to filter.
SSID Index: Select the targeted SSID you want the MAC filter rules to apply to.
Active: Select Activated to enable MAC address filtering.
Action: Define the filter action for the list of MAC addresses in the MAC address filter table.
Select Deny to block access to the AP, MAC addresses not listed will be allowed to access the router.
Select Allow to permit access to the router, MAC addresses not listed will be denied access to the
router.
MAC Address: Enter the MAC addresses (in XX:XX:XX:XX:XX:XX format) of the wireless station that
are allowed or denied access to the specified in these address fields.
Page 74
70
Dual WAN
Dual WAN is specially designed to offer users failover/fallback.
Auto failover/failback is to ensure an always-on internet connection. Users can set a WAN1 (main
WAN) and WAN 2 (backup WAN), and when WAN1 fails, it will switch to WAN2, and when WAN1
restores, it will switch to WAN1 again.
General Setting
Select "Failover & Failback" or "Failover & Proirity" to enable the failover/failback feature to keep WAN
always on or "Load Balance" to maximize WAN band width.
Page 75
71
Failover & Failback
WAN Port Service Detection Policy
WAN1: Select “4G/LTE-1”, “4G/LTE 2” , “EWAN” or “Wireless Client” for WAN1 (The main WAN).
WAN2: Select the “4G/LTE-2”, “EWAN” or “Wireless Client” for WAN2 as backup port if you select
“4G/LTE-1” as WAN1.
Keep Backup Interface Connected: Select if to keep backup WAN interface connected to the
internet. When select “By Signal Strength”, please set the next minimum RSRP/RSSI.
Minimum RSRP / RSSI: Set a minimum requirement for RSRP(Reference Signal Receiving Power)
and RSSI(Received Signal Strength Indicator) for initiating automatic WAN failback or failover
procedures.
Connectivity Decision & Probe Cycle: Set a number of times and time in seconds to determine
when to switch to the backup link (WAN2) when primary link (WAN1) fails and vise versa.
Example, Auto failover takes place after straight 3 consecutive failures in every 30 seconds meaning
all traffic will hand over to backup link (WAN2) after primary link fails to response in total of 90 seconds,
30 seconds for 3 consecutive failures.
Note: Failover and Failback follow the same Connectivity Decision & Probe Cycle rule to failover
from WAN1 to WAN2 or fallback from WAN2 to WAN1.
Failover/Fallback Rule Decisions:
Probe By Ping: Enable Ping to the gateway or an IP address.
Gateway: Internal system will wait for responses to the pings from the gateway of the WAN.
Host: Internal system will wait for responses to the pings from a fixed IP address.
Probe by Signal Strength: Enable to measure the LTE signal strength
Minimum RSRP / RSSI: Set a minimum requirement for RSRP and RSSI for initiating
automatic WAN failback or failover procedures.
Page 76
72
Failover & Priority
WAN Port Service Detection Policy
WAN1: Select “4G/LTE-1”, “4G/LTE 2”, “EWAN” or “Wireless Client” for WAN1 (The main WAN).
WAN2: Select the “4G/LTE-2”, “EWAN” or “Wireless Client” for WAN2 as backup port if you select
“4G/LTE-1” as WAN1.
Connectivity Decision: Set how many times of probing failure to switch to backup port.
Priority by: The condition is signal strength. Switch to the WAN port which has good signal strength.
Page 77
73
Load Balance
WAN Port Service Detection Policy
WAN1: Select “4G/LTE-1”, “4G/LTE-2”, “EWAN” or “Wireless Client” for WAN1.
WAN2: Select the “4G/LTE-2”, “EWAN” or “Wireless Client” if you select “4G/LTE-1” as WAN1.
Service Detection: Select if to keep detecte WAN interface connected. If enable the setting, the traffic
will be automatically through another WAN if the WAN interface is disconnected.
Connectivity Decision: Set how many times of probing failure to disable load balance.
Connectivity Decision & Probe Cycle: Set a number of times and time in seconds to determine
when to turn-off the Load Balancing service.
Example, Disable Load Balance after straight 3 consecutive failures in every 30 seconds meaning all
traffic will hand over to backup link (WAN2) after primary link fails to response in total of 90 seconds,
30 seconds for 3 consecutive failures.
Probe WAN1/WAN2: Enable Ping to the gateway or an IP address
Gateway: Internal system will wait for responses to the pings from the gateway of the WAN.
Host: Internal system will wait for responses to the pings from a fixed IP address.
Page 78
74
Outbound Load Balance
The connections are distributed over WAN1 and WAN2 so that it can utilize bandwidth of both WAN
ports. With Outbound load balance, traffic may be routed to a faster link when one of the WAN is
slower or congested so that user gains better throughput and less delay.
User can distribute outbound traffic based on Session Mechanism or IP Hash Mechanism.
Base on Session Mechanism:
Balance by Session (Round Robin): Balance session traffic based on a round robin method.
Balance by Session weight: Balance session traffic based on a weight ratio. Enter the desired ratio
in the fields provided.
Base on IP Hash Mechanism:
Balance by weight: Use an IP hash to balance traffic based on a ratio. Enter the desired ratio into the
fields provided.
Page 79
75
Protocol Binding
Protocol Binding lets you direct specific traffic to go out from a specific WAN port. Policies determine
how specific types of internet traffic are routed, for example, traffic from a particular IP(es) granted
access to only one WAN port rather than using both of the WAN ports as with load balancing.
Rule Index: The index marking the rule. Maximum entries can be 16.
Active: Select whether to enable the rule.
Bind Interface: To determine the WAN interface the to-be-set rule will apply to and what type of traffic
is to be bound to forward to the which WAN interface.
Source IP Address: Enter the source IP address featuring the traffic origin.
Subnet Mask: Enter the subnet of the designation network.
Port Number: Enter the port number which defines the application.
Destination IP Address: Enter the destination IP address featuring the traffic destination.
Subnet Mask: Enter the subnet of the designation network.
Port Number: Enter the port number which defines the application.
DSCP: The DSCP value. Value Range:0~64, 64 means Don't care
Protocol: Select the protocol traffic is using (TCP, UDP, ICMP).
Page 80
76
Hotspot
A hotspot is usually a public localtion(coffee shops, airports, etc) where people obtain internet access
typically using WiFi technology.
The Billion Industrial LTE Router HotSpot Gateway provides authentication for clients before access to
public networks. It also allows users to access some web pages without authentication using Walled
Garden feature. Rich features are explained in these sections: General Setting, Built-In User
Account, Walled Garden, Advertisment, Session Log and Customization.
Page 81
77
General Setting
This section is to setup setup HotSpot server on a router and authentication medthods, session
settings.
General Setting:
Hotsport: Activate or Deactivate Hotspot feature.
Interface: Determine which SSID is configured as a Hotspot. Industrial LTE Router has 4 virtual
SSIDs. Now it is fixed on SSID1 (WLAN1), it can be select in the future.
IP Address/IP Subnet Mask: The IP Subnet assigned to this Hotspot network. The IP can be
changed according to different user’s need.
Login Mode: Authentication or Agreement.
Authentication: when authentication is selected, client needs to provide authenticated
account, either via external RADIUS server or built-in user account database, to login to access
internet.
Agreement: when ageeemnt is selected, client doesn’t need an account to access internet.
Open your brower, the hotspot guide page directly appears.
Redirection on successful authentication to: Set the URL to be redirected to.
Authentication:
Authentication Method: Client login authentication methods via external RADIUS server or Industrial
LTE Router built-in user account database.
Primary/Secondary RADIUS Server: Specify the primary and secondayr RADIUS server address.
Shared Secret Key: The password for RADIUS server.
Session Settings:
Page 82
78
Session Timeout: period of time after which if client hasn't been authorized itself with hotspot system,
the client login attempt proves failed, another try needed.
Idle Timeout: period of inactivity for each client. When there is no traffic from this client (literally client
computer should be switched off), once the timeout is reached, the link disconnect automatically.
Upload/Download Bandwidth: The maximum usage bandwidth to each client.
Page 83
79
Bult-in User Account
This part is to configure the local valid user account database. Up to 16 accounts can be created.
Rule Index: 0-15, the valid user identifier index.
User Name/Password: Enter the username /password for each valid user.
Page 84
80
Authorized of Client
It is for priority(trusted) client for whom authentication is not needed to internet access. Also they can
enjoy unlimited Upload/Download Bandwidth. These privilegd clients can be added by MACs.
Authorized of Client: Activate or Deactivate the feature.
Rule Index: 0-15 trusted users can be added, each identified by a rule index.
Active: Activate the rule or not. If activated, the client is a trusted client.
MAC Address: Enter the authorized client MAC.
Page 85
81
Walled Garden
It allows users to access some web pages (listed in the Walled Garden List) without authentication.
Rule Index: 0-15 different domain names or IP addresses can be added.
Active: Select Yes to activate the rule. If activated, the domain name or IP will be open without
authentication to access.
Domain name or IP Address: Enter the domain name or IP address open to access for unauthorized
clients.
Page 86
82
Advertisement
This part is for propaganda purpose for some website after successfully logged in.
Advertisement: Activate or deactivate the Advertisement feature.
Mode: The mode the propaganda advertisement is shown in.
Rule Index: The rule index identifying the URL, 0-15 URLs can be created.
URL: The propaganda web URL.
Page 87
83
Session Log
Session Log periodically records session information and mails it to hotspot manager helped by Mail
Alert. How often to record the session log and to mail can be set here.
Session Log: Activate session log or not.
Log Session data every: Set how often to record the session log. By default, session log records
every 1 minutes.
Mail Session Log File every: Set how often to send the session log file.
Page 88
84
Customization
Customization allows users to customize their desired authenticate page strings, if not, default settings
are showed on the authentication page. Places where strings are to be shown are listed in the
following screenshots in red rectangle, please check where to change.
Page 89
85
Example: How to use Hotspot
Use a laptop, smartphont or PDA with wireless to use hotspot to access internet.
Hotspot server configuration on the router:
1. Login to the Industrial LTE Router and move to Configuration > Interface Setup > Wirelss to set the
WLAN1(hotspot is running on WLAN1). Change SSID to ”M500-Hotspot” for test.
Note: Before using hotspot, please connect to the SSID running hotspot first.
2. Hotspot interface, login setting and the session control setting.
Here the login mode is "Authentication", and Authentication Method is "RADIUS" for authtication.
If the Authentication Method is "Built-in User Account" for authtication, create a valid client account.
Page 90
86
Page 91
87
Wireless Client Connection:
1. Connect to the SSID(M500-Hotspot) on the laptop.
2. Launch the web brower, the hotspot welcome and authentication page pops up.
3. Input correct Username and Password then loging successfull.
Page 92
88
Advanced Setup
Advanced Step provides advanced features including Firewall, Routing, Dynamic Routing, NAT,
Static DNS, Time Schedule and Mail Alert for advanced users.
Page 93
89
Firewall
Your router includes a firewall for helping to prevent attacks from hackers. In addition to this, when
using NAT (Network Address Translation) the router acts as a “natural” Internet firewall, since all PCs
on your LAN use private IP addresses that cannot be directly accessed from the Internet.
Firewall: To automatically detect and block Denial of Service (DoS) attacks, such as Ping of Death,
SYN Flood, Port Scan and Land Attack.
Enabled: It activates your firewall function.
Disabled: It disables the firewall function.
SPI: If you enabled SPI, all traffics initiated from WAN would be blocked, including DMZ, Virtual Server,
and ACL WAN side.
Enabled: It activates your SPI function.
Disabled: It disables the SPI function.
Page 94
90
Routing
This is static route feature. You are equipped with the capability to control the routing of all the traffic
across your network. With each routing rule created, user can specifically assign the destination where
the traffic will be routed to.
Index: Item number
Destination IP Address: IP address of the destination network
Subnet Mask: The subnet mask of destination network.
Gateway IP Address: IP address of the gateway or existing interface that this route uses.
Metric: It represents the cost of transmission for routing purposes. The number need not be precise,
but it must be between 1 and 15.
Interface: Media/channel selected to append the route.
Edit: Edit the route; this icon is not shown for system default route.
Drop: Drop the route; this icon is not shown for system default route.
Add Route
Destination IP Address: This is the destination subnet IP address.
Destination Subnet Mask: The subnet mask of destination network.
Gateway IP Address/Interface: This is the gateway IP address or existing interface to which packets
are to be forwarded.
Metric: It represents the cost of transmission for routing purposes. The number need not be precise,
but it must be between 1 and 15.
Page 95
91
Dynamic Routing
OSPF
Open Shortest Path First (OSPF) is a most widely used interior gateway protocil (IGP) for Internet
Protocol (IP) networks. It uses a link state routing algorithm and falls into the group of interior routing
protocols, operating within a single autonomous system (AS).
OSPF allows collections of rotuers to be grouped together. Such a group is called an area (AS). Each
area runs a seprate copy of the basic link-state routing algorithm. This means that each area has its
own link-state database and cooresponding shortest path tree.
The structure of an area is invisible from other areas. This isolation of knowledge makes the protocol
more scalable if multiple areas are used.
The most widely used exterior gateway protocol is the Border Gatewat Protocol (BGP), which will be
our next topic, the pricipal routing protocol between autonomous systems on the itnernet.
OSPF: Enable to actiavte OSPF routing.
Rule Index: A totoal 10 OSPF rules are allowed, ranging from 0 to 9.
Interface: Set the interface which runs the OSPF process (involved in OSPF routing). It can be WAN
interfaces or established GRE tunnels.
Area ID: The OSPF area identifier. It is a decimal number in the rang of 0-4294967295. Here to set the
area ID which the inteface belongs to. The area with area-id=”0” is the backbone area.
If the router has networks in more than one area, then an area with area-id=”0” (the backbone) must
always be present. All other areas are connected to it. The backbone is responsible for distributing
routing information between non-backbone areas. The backbone must be contiguous, i.e. there must
be no disconnected segments. However, area border routers do not need to be physically connected
to the backbone - connection to it may be simulated using a virtual link.
Page 96
92
BGP
Border Gateway Protocol (BGP) is a standardized exterior gateway protocol (an uniquely TCP
basded inter-Autonomous System routing protocol) designed to allow setting up an inter-domain
dynamic routing system that automatically updates routing tables of devices running BGP in case of
network topology changes.
BGP: Enable to activate BGP routing.
AS Number: Designate the AS number of local router. The AS number is used to identify the IBGP or
EBGP your neighbor is running.The same AS number means the IBGP, and the different means
EBGP.
Rule Index: A totoal 10 BGP rules are allowed, ranging from 0 to 9.
Neighbor IP: Set your neighbor IP.
Neighbor AS Number: Set your neghbor AS number.
Allowas-in: Enable to allow inter-communication between devices in the same AS. If the local and
neighbor AS number are the same, thus, a inter-AS communication, please enable the allowas-in.
Otherwise, the router only support EBGP routing between different domains.
Page 97
93
NAT
The NAT (Network Address Translation) feature transforms a private IP into a public IP, allowing
multiple users to access the internet through a single IP account, sharing the single IP address. NAT
break the originally envisioned model of IP end-to-end connectivity across the internet so NAT can
cause problems where IPSec/ PPTP encryption is applied or some application layer protocols such as
SIP phones are located behind a NAT. And NAT makes it difficult for systems behind a NAT to accept
incoming communications.
In this session, there are “VPN Passthrough”, “SIP ALG”, “DMZ” and “Virtual Server” provided to solve
these nasty problems.
NAT Status: Enabled. It depends on ISP Connection Type in Internet settings.
VPN Passthrough: VPN pass-through is a feature of routers which allows VPN client on a private
network to establish outbound VPNs unhindered.
SIP ALG: Enable the SIP ALG when SIP phone needs ALG to pass through the NAT. Disable the SIP
ALG when SIP phone includes NAT-Traversal algorithm.
Interface: Select to set DMZ/Virtual Server for “4G/LTE 1”, “4G/LTE 2”, “EWAN” or "Wireless Client".
Click DMZ or Virtual Server to move on to set the DMZ or Virtual Server parameters,
which are represented in the following scenario.
Page 98
94
DMZ
Note: This feature disables automatically if WAN connection is in BRIDGE mode.
The DMZ Host is a local computer exposed to the Internet. When setting a particular internal IP
address as the DMZ Host, all incoming packets will be checked by the Firewall and NAT algorithms
then passed to the DMZ host, when a packet received does not use a port number used by any other
Virtual Server entries.
DMZ for: Indicate the related WAN interface which allows outside network to connect in and
communicate.
DMZ:
Enabled: It activates your DMZ function.
Disabled: It disables the DMZ function.
DMZ Host IP Address: Give a static IP address to the DMZ Host when Enabled radio button is
checked. Be aware that this IP will be exposed to the WAN/Internet.
Select the Save button to apply your changes.
Except Ports: Commonly, all incoming packets will be passed to the DMZ host after being checked by
the Firewall and NAT algorithms. But if a packet matching the rules set under “except ports”, it will be
passed on to virtual server or dropped when no matches found in virtual server.
Port: Set the port to be monitored.
Protocol: Choose the protocol to be monitored.
Description: The description given to the DMZ exception rule .
Click Add to add except rules.
Page 99
95
Virtual Server
Note: This feature disables automatically if WAN connection is in BRIDGE mode.
The device can be configured as a virtual server so that remote users accessing services such as Web
or FTP services via the public (WAN) IP address can be automatically redirected to local servers in the
LAN network. Depending on the requested service (TCP/UDP port number), the device redirects the
external service request to the appropriate server within the LAN network.
Virtual Server for: Indicate the related WAN interface which allows outside network to connect in and
communicate.
Protocol: Choose the application protocol.
Start / End Port Number: Enter a port or port range you want to forward.
(Example: Start / End: 21 or Start: 1000, End: 2000).
The starting greater than zero (0) and the ending port must be the same or larger than the starting port.
Local IP Address: Enter your local server IP address in this field.
Start / End Port Number (Local): Enter the start / end port number of the local application (service).
Page 100
96
Examples of well-known and registered port numbers are shown below. For further information, please
see IANA’s website at http://www.iana.org/assignments/port-numbers
Well-known and Registered Ports
Port Number
Protocol
Description
21
TCP
FTP Control
22
TCP & UDP
SSH Remote Login Protocol
23
TCP
Telnet
25
TCP
SMTP (Simple Mail Transfer Protocol)
53
TCP & UDP
DNS (Domain Name Server)
69
UDP
TFTP (Trivial File Transfer Protocol)
80
TCP
World Wide Web HTTP
110
TCP
POP3 (Post Office Protocol Version 3)
443
TCP & UDP
HTTPS
1503
TCP
T.120
1720
TCP
H.323
7070
UDP
RealAudio
Using port forwarding does have security implications, as outside users will be
able to connect to PCs on your network. For this reason you are advised to use
specific Virtual Server entries just for the ports your application requires,
instead of using DMZ. As doing so will result in all connections from the WAN
attempt to access to your public IP of the DMZ PC specified.
If you have disabled the NAT option in the Interface Setup - Internet section, the
Virtual Server function will hence be invalid.
If the DHCP server option is enabled, you have to be very careful in assigning
the IP addresses of the virtual servers in order to avoid conflicts. The easiest
way of configuring Virtual Servers is to manually assign static IP address to
each virtual server PC, with an address that does not fall into the range of IP
addresses that are to be issued by the DHCP server. You can configure the
virtual server IP address manually, but it must still be in the same subnet as the
router.
Attention
Loading...