
6904 3G/4G LTE Router Manual
Corrected index errors 8.5.2 which said ‘below’
Manual showing old user name ‘admin01’ & “password” - corrected
Wrong information password not subnetwork mask - corrected
Typo in table section 7 - corrected
Typo in table section 11 – was ‘on’ should be ‘off’ corrected
Missing from contents now put back.

6904 3G/4G LTE Router Manual
Contents
1.0 Introduction 1-1
2.0 Applications 2-1
3.0 Installation 3-1
4.0 Operating Modes 4-1
5.0 Powering Options 5-1
6.0 Status 6-1
6.1 Overview 6-1
6.2 System Information 6-2
6.3 Network Information 6-3
6.3.1.1 Mobile 6-3
6.3.1.2 WAN 6-4
6.3.1.3 LAN 6-5
6.3.1.4 Wireless 6-6
6.3.1.5 Associated Stations 6- 8
6.3.1.6 Open VPN Client 6-9
6.3.1.7 Open VPN Server 6-9
6.3.1.8 Client Information 6-10
6.3.1.9 VRRP 6-10
6.3.1.10 Topology 6-11
6.3.1.11 Access 6-11
6.3.1.11.1 Last Connection 6-12
6.4 Device Information 6-13
6.5 Services 6-14
6.6 Routes 6-14
6.6.1 ARP 6-14
6.6.2 Active IP-Routes 6-14
6.6.3 Active IPv6-Routes 6-15
6.7 Real-Time Graphs 6-16
6.7.1 Mobile Signal Strength 6-16
6.7.2 Real-Time Load 6-17
6.7.3 Traffic 6-18
6.7.4 Realtime Wireless 6-19
6.7.5 Realtime Connections 6-20
6.8 Mobile Traffic 6-21
6.9 Speed Test 6-21
6.10 Events Log 6-22
6.10.1 All Events 6-22
6.10.2 System Events 6-22
6.10.3 Network Events 6-23
6.10.4 Events Reporting 6-23
6.10.5 Reporting Configuration 6-24

6904 3G/4G LTE Router Manual
7.0 Network 7-1
7.1 Mobile 7-1
7.1.1 General 7-1
7.1.2 SIM Management 7-3
7.1.3 Network Operators 7-4
7.1.4 Mobile Data Limit 7-4
7.1.5 SIM Idle protection 7-5
7.1.5.1 Settings 7-5
7.1.5.2 Test 7-6
7.2 WAN 7-7
7.2.1 Operating Mode 7-7
7.2.2 Common configuration 7-7
7.2.2.1 General Set Up 7-8
7.2.2.2.5 Backup WAN configuration 7-10
7.2.2.3 How do I set up a backup Link? 7-13
7.3 LAN 7-14
7.3.1 Configuration 7-14
7.3.2 DHCP Server 7-15
7.4 VLAN 7-17
7.4.1 VLAN Networks 7-17
7.4.2 LAN Networks 7-18
7.5 Wireless 7-19
7.5.1.1 Device 7-19
7.5.1.2 Interface 7-20
7.4.1.3 Client 7-21
7.6 Firewall 7-22
7.6.1 General Settings 7-22
7.6.2 DMZ 7-23
7.6.3 Port Forwarding 7-23
7.6.4 Traffic Rules 7-25
7.6.4.1 Open Ports on the router 7-27
7.6.4.2 New Forward Rule 7-28
7.6.4.3 Source NAT 7-28
7.6.5 Custom Rules 7-30
7.6.6 DDOS Prevention 7-31
7.6.6.1 SYN Flooding Protection 7-31
7.6.6.2 Remote ICMP Requests 7-31
7.6.6.3 SSH Attack Prevention 7-32
7.6.6.4 HTTP Attack Prevention 7-32
7.6.6.5 HTTPS Attack Prevention 7-33
7.7 Static Routes 7-34

6904 3G/4G LTE Router Manual
8.0 Services 8-1
8.1 VRRP 8- 1
8.1.1 VRRP LAN Configuration settings 8-1
8.1.2 Check Internet connection 8-8.1.2
8.2 TR-069 8-2
8.2.1 TR-069 Parameters Configuration 8-2
8.3 Web Filtering 8-3
8.3.1 Site Blocking 8-3
8.3.2 Proxy based URL Content Blocker 8-3
8.4 NTP 8-4
8.5 VPN 8- 5
8.5.1 Open VPN 8-5
8.5.2 IP Sec 8-8
8.5.3 GRE Tunnel 8-10
8.5.4 PPTP 8-12
8.5.5 L2TP 8-13
8.6 Dynamic DNS 8-14
8.7 SNMP 8-16
8.7.1 SNMP Settings 8-16
8.7.2 Trap Settings 8-17
8.8 SMS Utilities 8-18
8.8.1 SMS Utilities 8-18
8.8.2 Calling Utilities 8-21
8.8.3 User Groups 8-21
8.8.4 SMS Management 8-22
8.8.1.1 Read SMS 8-22
8.8.1.2 Send SMS 8-22
8.8.1.3 Storage 8-22
8.8.5 Remote Configuration 8-23
8.8.5.1 Receive Configuration 8-23
8.8.5.2 Send Configuration 8-24
8.8.6 Statistics 8-26
8.9 SMS Gateway 8-27
8.9.1 Post / Get Configuration 8-27
8.9.1.1 SMS by HTTP POST / GET 8-27
8.9.1.2 Sytnax of HTTP / POST / GET String 8-28
8.9.1.3 Parameters of HTTP POST / GET string 8-28
8.9.1.4 Possible responses after command execution 8- 28
8.9.1.5 HTTP POST / GET String examples 8-28
8.9.2 Email to SMS 8-29
8.9.3 Scheduled Messages 8-30
8.9.4 Auto Reply Configuration 8-31
8.9.5 SMS Forward 8-31

6904 3G/4G LTE Router Manual
8.5.6 SMPP 8-34
8.10 CLI 8-35
8.11 HOT SPOT 8-35
8.11.1 General Settings 8-36
8.11.2 Internet Access Restriction Settings 8- 37
8.11.3 Logging 8-37
8.11.4 Landing Page 8-38
8.11.5 Radius server configuration 8-39
8.11.6 Statistics 8-40
8.12 Auto Reboot 8-40
8.12.1 Ping Reboot 8-40
8.12.2 Periodic Reboot 8- 41
8.13 QOS 8-42
9 System 9-1
9.1 Configuration Wizard 8-1
9.2 Profiles 8-3
9.3 Administration 8-3
9.3.1 General 8-3
9.3.2 Troubleshooting 8-4
9.3.3 Backup 8-5
9.3.4 Diagnostics 9-8
9.3.5 MAC Clone 9-8
9.3.6 Overview 9-9
9.3.7 Monitoring 9-10
9.4 User Scripts 9-10
9.5 Safe Mode 9-11
9.6 Firmware 9-11
9.6.1 Firmware 9-11
9.6.2 FOTA 9-12
9.7 Restore Point 9-13
9.7.1 Create Restore Pont 9-13
9.7.2 Restore Point Load 9-13
9.8 Reboot 9-13
10 System Recovery 10-1
10.1 Reset Button 10-1
10.2 Safemode 10-1
10.3 Bootloaders Web GUI 10-1
11 Glossary 11-1

6904 3G/4G LTE Router Manual
SAFETY INFORMATION
Legal notice
Copyright © 2014 Case Communications Ltd. All rights reserved. Reproduction, transfer,
distribution or storage of part or all of the contents in this document in any form without the
prior written permission of Case Communications is prohibited. The manufacturer reserves
the right to modify the product and manual for the purpose of technical improvement without
prior notice.
Other product and company names mentioned herein may be trademarks or trade
names of their respective owners.
Before using the device we strongly recommend reading this user manual first.
Do not rip open the device. Do not touch the device if the device block is broken
All wireless devices for data transferring may be susceptible to interference, which
could affect performance.
The device is not water-resistant. Keep it dry.
Device is powered by low voltage +9V DC power adaptor.

6904 3G/4G LTE Router Manual
1 Introduction
Thank you for purchasing a CASE6904 4G / LTE router!
The CASE6904 is part of the CASE range compact mobile routers with high speed wireless and
Ethernet connections.
This router is ideal for people who‘d like to share their internet on the go, as it is not restricted
by a cumbersome cable connection. Unrestricted, but not forgotten: the router still supports
internet distribution via a broadband cable, simply plug it in to the wan port, set the router to a
correct mode and you are ready to browse.

6904 3G/4G LTE Router Manual
2 Specifications
Ethernet
IEEE 802.3, IEEE 802.3u standards
3 x LAN 10/100Mbps Ethernet ports
1 x WAN 10/100Mbps Ethernet port
Supports Auto MDI/MDIX
Wi-Fi
IEEE 802.11b/g/n Wi-Fi standards
2x2 MIMO
AP and STA modes
64/128-bit WEP, WPA, WPA2, WPA&WPA2 encryption methods
2.401 – 2.495GHz Wi-Fi frequency range
20dBm max Wi-Fi TX power
SSID stealth mode and access control based on MAC address
Hardware
High performance 560 MHz CPU with 128 Mbytes of DDR2 memory
5.5/2.5mm DC power socket
Reset/restore to default button
2 x SMA for LTE , 2 x RP-SMA for Wi-Fi antenna connectors
4 x Ethernet LEDs, 1 x Power LED
1 x bi-Colour connection status LED, 5 x connection strength LEDs
Electrical, Mechanical & Environmental
100 – 240 VAC -> 9 VDC wall adapter
10% to 90% Non-condensing

6904 3G/4G LTE Router Manual

6904 3G/4G LTE Router Manual
3.0. Installation
After you unpack the box, follow the steps, documented below, in order to properly connect the
device. For better Wi-Fi performance, put the device in clearly visible spot, as obstacles such as
walls and door hinder the signal.
1. First assemble your router by attaching the necessary antennas and inserting the SIM
card.
2. To power up your router, please use the power adapter included in the box.
(IMPORTANT: Using a different power adapter can damage and void the warranty for
this product.).
3. If you have a wired broadband connection you will also have to connect it to the WAN
port of the router
3.1. Front and Back Panel of the Case 6904 Router
LTE auxiliary antenna connector
LTE main antenna connector
Signal strength indication LEDs
3.2. Hardware installation
1. Remove back panel and insert SIM card which was given by your ISP (Internet
Service Provider). Correct SIM card orientation is shown in the picture.
2. Attach LTE main and Wi-Fi antennas.
3. Connect the power adapter to the socket on the front panel of the device. Then plug
the other end of the power adapter into a wall outlet or power strip.
4. Connect to the device wirelessly using the SSID: Case6904 ) or use Ethernet cable and
plug it into any LAN Ethernet port.

6904 3G/4G LTE Router Manual
3.3. Logging in
After you’re complete with the setting up as described in the section above, you are ready to
start logging into your router and start configuring it. This example shows how to connect on
Windows 7. On windows Vista: click Start -> Control Panel -> Network and Sharing Centre ->
Manage network Connections -> (Go to step 4). On Windows XP: Click Start -> Settings ->
Network Connections -> (see step 4). You wont’s see “Internet protocol version 4(TCP/IPv4)”,
instead you’ll have to select “TCP/IP Settings” and click options -> (Go to step 6)
We first must set up our network card so that it could properly communicate with the router.
1. Press the start button
2. Type in “network connections”, wait for the
results to pop up.
3.Click “View Network Connections
4. The right click on your wireless device that you use to
connect to other access points (It is the one with the
name “Wireless Network Connections” and has signal
bars on its icon)

6904 3G/4G LTE Router Manual
7. If you choose to configure manually here’s what you do:
First select an IP address.
The routers factory settings allow you to enter an IP address in the form of 192.168.1.XXX ,
where XXX is a number in the range of 2-254 (192.168.1.2 , 192.168.1.254 , 192.168.1.155 and
so on… are valid; 192.168.1.0 , 192.168.1.1 , 192.168.1.255 , 192.168.1.699 and so on… are
not).
Next enter the subnet mask: this has to be “255.255.255.0”. Then we enter the default gateway:
this has to be “192.168.1.1”. Finally we enter primary and secondary DNS server IPs. One will
suffice, though it is good to have a secondary one as well as it will act as a backup if the first
should fail. The DNS can be your routers IP (192.168.1.1), but it can also be some external
DNS server (like the one Google provides: 8.8.8.8).
5. Select Internet Protocol Version 4
(TCP/IPv4) and then click Properties.
6. By default the router is going to have DHCP
enabled, which means that if you select “Obtain
an IP address automatically” and “Obtain DNS
server address automatically”, the router should
lease you an IP and you should be ready to
login.

6904 3G/4G LTE Router Manual
Right click on the Wireless network icon and select Connect / Disconnect. A list should
pop up with all available wireless networks. Select “Case6904” and click connect. Then
we launch our favourite browser and enter the routers IP into the address field:
Press enter. If there are no problems you should be greeted with a login screen such as this:
Enter the default username, which is “root” into the user name field and enter ‘case’ into the
Password field and then either click Login with your mouse or press the Enter key. You have
now successfully logged into the CASE6904!
From here on out you can configure most parts of your 6904 router.

6904 3G/4G LTE Router Manual
4. Operating Modes
The CASE6904 series router supports various operation modes. It can be connected to the
internet (WAN) via mobile, standard Ethernet cable or via a wireless network. When
connecting to the internet, you may also backup your main WAN connection with one or two
backup connections. Any interface can act like backup if configured so. At first router uses its
main WAN connection, if it is lost then router tries to connect via backup with higher priority
and if that fails too, router tries the second backup option.
In later sections it will be explained, in detail, how to configure your router to work in a
desired mode.

6904 3G/4G LTE Router Manual
5. Powering Options
The CASE6xx router can be powered from power socket or over Ethernet port. Depending on
your network architecture you can use LAN 1 port to power the device.
The CASE 6904 can be powered from power socket and over Ethernet simultaneously. Power
socket has higher priority meaning that the device will draw power from power socket as long
as it is available.
When the CASE 6904 is switching from one power source to the other it loses power for a
fraction of the second and may reboot. The device will function correctly after the reboot.
Though the device can be powered over Ethernet port it is not compliant with IEEE 802.3af2003 standard. Powering CASE6309 from IEEE 802.3af-2003 power supply will damage the
device as it is not rated for input PoE Standard voltages.
5.1 Powering the device from higher voltage
If you decide not to use our standard 9 VDC wall adapters and want to power the device from
higher voltage (15 – 30 VDC) please make sure that you choose power supply of high quality.
Some power supplies can produce voltage peaks significantly higher than the declared output
voltage, especially during connecting and disconnecting them.
While the device is designed to accept input voltage of up to 30 VDC peaks from high voltage
power supplies can harm the device. If you want to use high voltage power supplies it is
recommended to also use additional safety equipment to suppress voltage peaks from power
supply. One of the options is to use “Case Communications” over-voltage protection device
conforming ISO 7637-2

6904 3G/4G LTE Router Manual
6. Status
The status section contains various information, like current IP addresses of various network
interfaces; the state of the routers memory; firmware version; DHCP leases; associated wireless
stations; graphs indicating load, traffic, etc.; and much more.
6.1. Overview
Overview sections contains summary information on the router

6904 3G/4G LTE Router Manual
6.2. System Information
The System Information tab contains data that pertains to the routers operating system.
System explanation:
Name of the router (hostname of the routers system). Can
be changed in System -> Administration.
Indicates how router will be seen by other devices on the
network. Can be changed in System -> Administration.
Case Communications
CASE6xx
Shows the version of the firmware that is currently loaded
in the router. Newer versions might become available as
new features are added. Use this field to decide whether
you need a firmware upgrade or not.
The version of the Linux kernel that is currently running on
the router.
Shows the current system time. Might differ from your
computer, because the router synchronizes it's time with an
NTP server. Format
[year-month-day, hours:minutes:seconds].
0h 40m 46s (since
2014-11-03, 13:53:13)
Indicates how long it has been since the router booted up.
Reboots will reset this timer to 0.Format [day’s hours
minutes seconds (since year month-day, hours: minutes:
seconds)].
1 min: 11%; 5 mins:
18%; 15 mins: 17%
Indicates how busy the router is. Let's examine some
sample output: "1 min: 11%, 5 mins: 18%, 15 mins: 17%".
The first number mean past minute and second number
11% means that in the past minute there have been, on
average, 11% processes running or waiting for a resource.

6904 3G/4G LTE Router Manual
94532 kB / 126452 kB
(74%)
The amount of memory that is completely free.
Should this rapidly decrease or get close to 0, it
would indicate that the router is running out of
memory, which could cause crashes and
unexpected reboots.
10828 kB / 126452 kB
(8%)
The size of the area of memory that is dedicated to
storing frequently accessed data.
The size of the area in which data is temporarily
stored before moving it to another location.
6.3. Network Information
6.3.1.1. Mobile
Displays information about the modems connections

6904 3G/4G LTE Router Manual
Mobile data connection status
Modem's IMEI (International Mobile Equipment
Identity) number
IMSI (International Mobile Subscriber Identity)
is used to identify the user in a cellular network
Indicates the SIM card's state, e.g. PIN required,
Not inserted, etc.
Received Signal Strength Indicator (RSSI).
Signal's strength measured in dBm
ID of operator cell that device is currently
connected to
Indicates the Reference Signal Received Power
Indicates the Reference Signal Received Quality
Indicates the Signal to Interference Noise Ratio
Operator's name of the connected GSM network
Indicates the GSM network's access technology
How many bytes were received via mobile data
connection
How many bytes were sent via mobile data
connection
6.3.1.2. WAN
Displays information about the WAN Connection

6904 3G/4G LTE Router Manual
Specifies through what medium the router is connecting to
the internet. This can either be Wired, Mobile or Wi-Fi.
Specifies the type of connection. This can either be static
or DHCP.
The IP address that the routers uses to connect the internet.
MAC (Media Access Control) address used for
communication in a Ethernet WAN (Wide Area Network)
Specifies a mask used to define how large the WAN
network is
Indicates the default gateway, an address where traffic
destined for the internet is routed to.
How long the connection has been successfully
maintained.
*-These fields show up on other connection modes. **-Exclusive to other Modes with DHCP.
6.3.1.3. LAN
The option displays information on the routers LAN Connection

6904 3G/4G LTE Router Manual
Address that the router uses on the LAN network.
A mask used to define how large the LAN network is
MAC (Media Access Control) address used for
communication in a Ethernet LAN (Local Area
Network)
How long LAN has been successfully maintained.
DHCP Leases
If you have enabled a DHCP server this field will show how many devices have received an IP
address and what those IP addresses are.
Each lease declaration includes a single IP address
that has been leased to the client
Name assigned to the Local Area Network
The MAC (Media Access Control) address of the
network interface on which the lease will be used.
MAC is specified as a series of hexadecimal octets
separated by colons
Remaining lease time for addresses handed out to
clients
6.3.1.4. Wireless
Wireless can work in two modes, Access Point (AP) or Station (STA). AP is when the wireless
radio is used to create an Access Point that other devices can connect to. STA is when the radio
is used to connect to an Access Point via WAN.
6.3.1.4.1 Station
Displays information about wireless connection (Station mode).

6904 3G/4G LTE Router Manual
The channel that the AP, to which the routers is
connected to, uses. Your wireless radio is forced to
work in this channel in order to maintain the
connection.
The SSID that the AP, to which the routers is connected
to, uses.
Connection mode – Client indicates that the router is a
client to some local AP.
The AP, to which the router is connected to, dictates the
type of encryption.
The MAC address of the access points radio.
The quality between routers radio and some other
device that is
connecting to the router. Will show 0% if no devices
are trying to connect or are currently maintaining a
connection.
The physical maximum possible throughput that the
routers radio can handle. Keep in mind that this value
is cumulative - The bitrate will be shared between the
router and other possible devices that connect to the
local AP.
6.3.1.4.2 Access Point
Displays information about wireless connection (Access Point mode).

6904 3G/4G LTE Router Manual
The channel which is used to broadcast the SSID and to
establish new connections to devices.
Case
Communications_Rout
er_Test
The SSID that is being broadcast. Other devices will
see this and will be able to use to connect to your
wireless network.
Connection mode – Master indicates that you router is
an access point.
The type of encryption that the router will use to
authenticate, establish and maintain a connection.
MAC address of your wireless radio.
The quality between routers radio and some other
device that is connecting to the router. Will show 0% if
no devices are trying to connect or are currently
maintaining a connection.
The bitrate will be shared between all devices that
connect to the routers wireless network.
Additional note: MBit/s indicates the bits not bytes. To get the throughput in bytes divide the
bit value by 8, for e.g. 54MBits/s would be 6.75MB/s (Mega Bytes per second).
6.3.1.5. Associated Stations
Outputs a list of all devices and their MAC addresses that are maintain a connection with your
router right now.
This can either be the information of the Access Point that the router is connecting to in STA
mode or a list of all devices that are connecting to the router in AP mode:
Associated station's MAC (Media Access Control)
address
Received Signal Strength Indicator (RSSI).
Signal's strength measured in dBm
The rate at which packets are received from
associated station
The rate at which packets are sent to associated
station

6904 3G/4G LTE Router Manual
6.3.1.6. Open VPN Client
This menu options displays the Open VPN connection on the client’s side.
A type of OpenVPN instance that has been created
Remote virtual network's IP address
Remote virtual network's subnet mask
Remote virtual server's IP address
For how long the connection has been established

6904 3G/4G LTE Router Manual
6.3.1.8. Client Information
A type of Open VPN that has been created
Remote virtual network IP Address
Remote virtual network subnetwork mask
How long has connection been established
Clients virtual IP address and port number
Virtual address which has been given to client
How long since connection established
6.3.1.9. VRRP
VRRP (Virtual Router Redundancy Protocol) for the LAN
Virtual IP address(es) for LAN’s VRRP (Virtual Router
Redundancy Protocol ) cluster
Router with highest priority value on the same VRRP
(Virtual Router Redundancy Protocol) cluster will act as a
master, range [1 - 255]
Since when connection has been established
**-Exclusive to other Modes running in Slave mode.

6904 3G/4G LTE Router Manual
6.3.1.10. Topology
Network scanner allowing you to quickly retrieve information about network devices.
6.3.1.11. Access
Displays information about local and remote active connections status.
Type of connection protocol
0(0.00B);1(9.26 KB);
6(558.12 KB)
Count of active connections and amount of data
transmitted in KB
**-Exclusive to other Modes with Slave

6904 3G/4G LTE Router Manual
6.3.1.11.1. Last Connection
Displays information about local and remote last 3 connections status
Type of connection protocol
Date and time of connection
IP address from which the connection was made
Status of authentication attempt

6904 3G/4G LTE Router Manual
6.4. Device Information
This page displays factory information that was written into the device during the
manufacturing process.
Serial number of the device
Product code of the device
Batch number used during device’s
manufacturing process
Hardware revision of the device
Identification number of the internal
modem
Subscriber identification number of the
internal modems
MAC address of the Ethernet LAN Port
MAC address of the Ethernet WAN
Port
MAC Address of the Wi-Fi Interface
Router modems firmware version

6904 3G/4G LTE Router Manual
6.5. Services
This page displays the status of the routers available services.
6.6. Routes
The page displays ARP table active IP routes of the device.
6.6.1 ARP
Shows the routers active ARP table. An ARP table contains recently cached MAC addresses of
every immediate device that was communicating with the router.
6.6.2 Active IP-Routes
Shows the routers routing table. The routing table indicates where a TCP/IP packet, with a
specific IP address, should be directed to.

6904 3G/4G LTE Router Manual
Interface to be used to transmit TCP/IP packets
through
Indicates where a TCP/IP packet, with a specific IP
address, should be directed
Indicates through which gateway a TCP/IP packet
should be directed
Metric number indicating interface priority of usage
6.6.3 Active IPv6-Routes
Displays active IPv6 routes for data packet transmission
Indicates where a TCP/IP packet, with a specific
IP address, should be directed
Indicates through which gateway a TCP/IP packet
should be directed
Metric number indicating interface priority of
usage

6904 3G/4G LTE Router Manual
6.7. Real-Time Graphs
Real-time graphs show how various statistical data changes over time.
6.7.1 Mobile Signal Strength
Displays mobile signal strength variation in time (measured in dBm)
Type of mobile connection used
Current signal strength value
Average signal strength value
Peak signal strength value

6904 3G/4G LTE Router Manual
6.7.2 Real-Time Load
This tri-graph illustrates average CPU load values in real time. The graph consists out of three
Colour coded graphs, each one corresponding to the average CPU load over 1 (red), 5 (orange)
and 15 (yellow) most recent minutes.
Time interval for load averaging,
Colour of the diagram
Average CPU load value over time interval
(1/5/15 Minute)
Peak CPU load value of the time interval

6904 3G/4G LTE Router Manual
6.7.3 Traffic
This tri-graph illustrates average system load over the course of ~3 minutes; each new
measurement is taken every 3 seconds. The graph consists out of three Colour coded graphs,
each one corresponding to the average system load over 1 (red), 5 (orange) and 15 (yellow)
most recent minutes. Although not graphed, the page also displays peak loads over 1, 5 and 15
minutes.
Cumulative graph, which encompasses wired Ethernet LAN and
the wireless network.
Graphs the total traffic that passes through both LAN network
interfaces.
Graphs the amount of traffic which passed through the current
active WAN connection.
Graphs the amount of traffic which passed through the mobile
network connection.
Shows the amount of traffic that has been sent and received
through the wireless radio.

6904 3G/4G LTE Router Manual
6.7.4 Realtime Wireless
Displays the wireless radio signal, signal noise and theoretical maximum channel permeability.
Average and peak signal levels are displayed.

6904 3G/4G LTE Router Manual
6.7.5 Realtime Connections
Displays currently active network connections. With the information on network, protocol,
source and destination addresses, transfer speed.

6904 3G/4G LTE Router Manual
6.8. Mobile Traffic
Displays mobile connection data sent and received in KB of this day, week, month.
6.9. Speed Test
Speed test is a tool for measuring your internet connection upload and download speeds. You
can select servers for manual testing, or use auto test.

6904 3G/4G LTE Router Manual
6.10. Events Log
Event log displays such actions as: login, reboot, firmware flashing and reset.
6.10.1 All Events
Displays all router events, their type and time of occurrence.
6.10.2 System Events
Displays all system events, their type and time of occurrence. Events include authentication or
reboot requests, safemode, incoming and outgoing SMS and calls, configuration changes,
DHCP Events.

6904 3G/4G LTE Router Manual
6.10.3 Network Events
Displays information about recent network events like connection status change, lease status
change, network type or operator change.
6.10.4 Events Reporting
Allows to view, enable, disable or modify created rules for events reporting.
A
l
l
o
w
s
t
o
r
e
v

6904 3G/4G LTE Router Manual
6.10.4.1 Events Reporting Configuration
This menu allows a network manager to review rules created and to modify them,so after an
event occurs, messages or e-mails are sent to a specific address (such as Case Communications
SNMP based Caseview NMC) or phone numbers with information about the event.
Make a rule active/inactive
Select event type about which occurrence
information will be sent
After unexpected shut down
Specify event subtype to activate the rule
Action to perform when an event occurs
When action occurs, custom message will be
send
For whom you want to send a SMS
6.10.5 Reporting Configuration
Displays configured services for event reporting, allows to enable, disable, view and modify the
parameters.

6904 3G/4G LTE Router Manual
6.10.5.1 Events Log Report Configuration
Allows to change the configuration of periodic events reporting to email or ftp.
Make a rule active/inactive
Event type for which the rule is applied
Event subtype for which the rule is applied: Email/ftp
Action to perform when an event occurs
FTP (File transfer Protocol) host name, e.g.
ftp.exemple.com, 192.168.123.123. Allowed
characters (a-z-A-Z0-9!@#$%^&*+- /=?_`{|}~. )
User name for authentication on SMTP(Simple Mail
Transfer Protocol) or FTP (File Transfer Protocol)
server. Allowed characters (a-z-A-Z0-9!@#$%^&*+/=?_`{|}~. )
Password for authentication on SMTP(Simple Mail
Transfer Protocol) or FTP (File Transfer Protocol) server
. Allowed characters (a-z-A-Z09!@#$%^&*+-/=?_`{|}~.
)
Send report every select time interval
Day of the week to get events log report
Hour of the day to get events log report

6904 3G/4G LTE Router Manual
7.0. Network
7.1. Mobile
7.1.1 General
7.1.1.1 Mobile Configuration
Here you can configure mobile settings which are used when connecting to your local 3G/LTE
network.
PPP Mode uses a dialling number to establish a data
connection. NDIS Mode (default) does not use dialling and
PPP protocol to establish a data connection. NDIS is usually
faster than PPP Mode
NAT
/Passthrough /
Use Bridge
NAT mode enables network address translation on router.
Bridge mode bridges LTE data connection with LAN. In this
mode the router does not have internet connection as ISP
provides IP directly to end device (PC, tablet or smartphone).
Using Bridge mode will disable most of the router capabilities
and you can access your router's settings only by using static
IP address on your end device. Passthrough mode is similar
with bridge mode except that in passthrough mode router do
have internet connection.
Access Point Name (APN) is a configurable network
identifier used by a mobile device when connecting to a GSM
carrier.
“1234” or any
number that
falls between
0000 and 9999
A personal identification number is a secret numeric
password shared between a user and a system that can be used
to authenticate the user to the system.

6904 3G/4G LTE Router Manual
Dialling number is used to establish a mobile PPP (Point-toPoint-Protocol) connection.
Authentication method, which your carrier uses to
authenticate new connections.
Your username that you would use to connect to your carriers
network. This field becomes available when you select an
authentication method (i.e. authentication method is not
“none”).
These fields are always enabled on the alternate model.
Your password that you would use to connect to your carriers
network. This field becomes available when you select an
authentication method (i.e. authentication method is not
“none”).
These fields are always enabled on the alternate model.
2G only, 2G
preferred,
3G only, 3G
preferred, 4G
(LTE) only, 4G
(LTE)
preferred or
automatic.
Your network preference. If your local mobile network
supports 2G, 3G and 4G (LTE) you can specify to which
network you wish to connect. E.g.: if you choose 2G, the
router will connect to a 2G network, so long as it is available,
otherwise it will connect to a network that provides better
connectivity. If you select auto, then the router will connect
to the network that provides better connectivity.
If enabled this function prevents the device from establishing
mobile data connection while not in home network.
Warning: If an invalid PIN number was entered (i.e. the entered PIN does not match the one that was
used to protect the SIM card), your SIM card will get blocked. To avoid such mishaps it is highly
advised to use an unprotected SIM. If you happen to insert a protected SIM and the PIN number is
incorrect, your card won’t get blocked immediately, although after a couple of reboots OR
configuration saves.
7.1.1.2 Mobile Data on demand
7.1.1.3 Force LTE Network

6904 3G/4G LTE Router Manual
Force LTE Network function periodically disables
mobile data connection (for a few seconds) to allow
the router to switch to LTE network. Tjis could ne
because some operators do not support switching
from 3G to LTE networks while data is being
transferred.
Interval in seconds the device will use periodically
disable mobile data connections.
SIM card that will be used in the system as a primary
SIM card
Enable automatic
switching
Automatically switch between primary and secondary
SIM cards based on the various rules and criterions
defined below
Check interval in seconds
Perform a SIM card switch when a signal's strength
drops below a certain threshold
Perform a SIM card switch when mobile data limit for
your currrent SIM card is exceeded
Perform a SIM card switch when sms limit for your
currrent SIM card is exceeded
Perform a SIM card switch when roaming is detected
Perform a SIM card switch when data connection fails
Switch back to
primary SIM card
after timeout
Switch back to primary SIM card after timeout has
been reached

6904 3G/4G LTE Router Manual
7.1.3 Network Operators
This function lets you Scan, Select and enter manual Network Operator to which router should
connect. Function will provide great utility when router is in Roaming conditions. Operator is
selected only for the active SIM card. In order to specify operator for the other SIM card it must
first be selected as primary SIM in “SIM Management”.
Shows current SIM card’s in use
Operator's name of the connected GSM
network
Note: after clicking Scan button - You will lose the current mobile connection!
7.1.4 Mobile Data Limit
This function lets you limit the maximum amount of data transferred on the WAN Interface in
order to minimise unwanted traffic costs.
7.1.4.1 Data Connection Limit Configuration

6904 3G/4G LTE Router Manual
Enable data
connection limit
Disables mobile data when a limit for current
period is reached
Disable mobile data after limit value in MB is
reached
Period for which mobile data limiting should
apply
A starting time for mobile data limiting period
7.1.4.2 SMS Warning Configuration
7.1.5 SIM Idle protection
Some operators block user SIM cards after period of inactivity. This function enables router to
periodically switch to secondary SIM card and establish data connection with mobile network
in order to prevent sim card blocking.
7.1.5.1 Settings

6904 3G/4G LTE Router Manual
Enables SIM idle protection
Switches between monthly and weekly sim activation
periods
Specifies the day for SIM idle protection activation, 1-31 if
Period is Month, and Monday – Sunday if period is week.
Specifies the hour for SIM idle protection activation
Specifies the minute for SIM idle protection activation
Specifies IP address or domain name to send data packages
to
Specifies ping Package size in bytes
Specifies requests to be sent
7.1.5.2 Test
Tests the functioning of idle protection with your parameters entered at settings tab.
Displays status of the SIM card
Displays the IP of the Host
Displays status of ping attempt

6904 3G/4G LTE Router Manual
7.2. WAN
7.2.1 Operating Mode
Switches between Mobile, Wired and Wi-Fi interface for main WAN
Let’s user to select one or two interfaces for WAN backup
Displays Wan interface name, and changes interface priority, the
interface at the table top has the highest priority
Displays protocol used by WAN interface
Displays IP address acquired by specific interface
Sorts table rows and changes interface priority, the highest interface has
highest priority
7.2.2 Common configuration
Common configuration allows you to configure your TCP/IP settings for the wan network.
You can switch between the Static, DHCP or PPPoE protocol by selecting the protocol that you
want to use and then pressing Switch Protocol

6904 3G/4G LTE Router Manual
7.2.2.1. General Setup
7.2.2.1.1 Static
This is the configuration setup for when you select the static protocol.
Your routers address on the WAN network
A mask used to define how “large” the WAN
network is
Address where the router will send all the outgoing
traffic
Broadcast address (autogenerated if not set). It is
best to leave this blank unless you know what you
are doing.
Usually the gateway has some predefined DNS
servers. As such the router, when it needs to resolve
a hostname (“www.google.com”, “www.cnn.com”,
etc…) to an IP address, it will forward all the DNS
requests to the gateway. By entering custom DNS
servers the router will take care of host name
resolution. You can enter multiple DNS servers to
provide redundancy in case the one of the server
fails.

6904 3G/4G LTE Router Manual
7.2.2.2.2 DHCP
When you select the DHCP protocol you can use it as is, because most networks will not
require any additional advanced configuration. PPOE
7.2.2.1.3 PPPoE
This protocol is mainly used by DSL providers.
This is the configuration setup for when you select PPPoE protocol.
Your username and password that you
would use to connect to your carriers
network.
Specifies the name of access concentrator.
Leave empty to auto detect.
Specifies the name of the service. Leave
empty to auto detect.

6904 3G/4G LTE Router Manual
7.2.2.2 Advanced
These are the advanced settings for each of the protocols. If you are not sure how to alter these
attributes it is highly recommended to leave them to highly trained professionals.
7.2.2.2.1 Static
Override MAC address of the WAN interface. If
your ISP gives you a static IP address it might also
bind it to your computers MAC address (i.e. that IP
will only work with your computer). In this field
you can enter your computers MAC address and
fool the gateway in thinking that it is
communicating with your computer
Maximum transmission unit – specifies the
largest possible size of a data packet.

6904 3G/4G LTE Router Manual
If checked, router will not perform NAT
(masquerade) on this interface
If unchecked, no default route is configured
Use DNS servers
advertised by peers
If unchecked, the advertised DNS server
addresses are ignored
LCP echo failure
threshold
Presume peer to be dead after given amount of
LCP echo failures, use 0 to ignore failures
Send LCP echo requests at the given interval in
seconds, only effective in conjunction with
failure threshold
Close inactive connection after the given amount
of seconds, use 0 to persist connection
7.2.2.2.4 IP Aliases
IP aliases are a way of defining or reaching a subnet that works in the same space as the regular
network.
As you can see, the configuration is very similar to the static protocol; only in the example a
99th subnet is defined. Now if some device has an IP in the 99 subnet (192.168.99.xxx) and
the subnets gateway metric is “higher” and the device is trying to reach the internet it will
reroute it’s traffic not to the gateway that is defined in common configurations but through the
one that is specified in IP aliases.
You may optionally define a broadcast address and custom DNS server.

6904 3G/4G LTE Router Manual
7.2.2.2.5. Backup WAN configuration
Backup WAN is function that allows you to back up your primary connection in case it goes down.
There can be two backup connections selected at the same time, in that case, when primary
connection fails, router tries to use backup with higher priority and if that is unavailable or fails too,
then router tries the backup with lower priority.
The majority of the options consist of timing and other important parameters that help determine the
health of your primary connection. Regular health checks are constantly performed in the form of
ICMP packets (Pings) on your primary connection. When the connections state starts to change
(READY->NOT READY and vice versa) a necessary amount of failed or passed health checks has to
be reached before the state changes completely. This delay is instituted so as to mitigate “spikes” in
connection availability, but it also extends the time before the backup link can be brought up or down.
Disable/5/10/20/30/60
/120 Seconds
The interval at which health checks are
performed
Health monitor
ICMP host(s)
Disable/DNS
Server(s) /WAN
GW/Custom
Where to Ping for a health check. As there is
no definitive way to determine when the
connection to internet is down for good,
you’ll have to define a host whose
availability that of the internet as a whole.
Health monitor
ICMP timeout
How long to wait for an ICMP request to
come back. Set a higher value if your
connection has high latency or high jitter
(latency spikes).
How many checks should fail for your WAN
connection to be declared DOWN for good.
How many checks should pass for your WAN
connection to be declared UP.

6904 3G/4G LTE Router Manual
7.2.2.3. How do I set up a backup Link?
First we must select a main link and choose one or two backup links in WAN section. Then
push the “Edit” button and configure your WAN and Backup Wan settings to your liking. Click
Save and wait until the settings are applied. Now in the Status -> Network Information ->
WAN page there should be a status indication for the backup WAN. If everything is working
correctly you should see something like this:
The above picture shows the status for Backup WAN configured on a wired main link. You
can now simulate a downed link by simply unplugging your Ethernet WAN cable. When
you’ve done so you should see this:
And, if you plug the cable back in you should, again, see this:

6904 3G/4G LTE Router Manual
General Setup
7.3. LAN
This page is used to configure the LAN network, where all your devices and computers that
you connect to the router will reside.
7.3.1 Configuration
7.3.2.1 General Set Up
Address that the router uses on the LAN network
A mask used to define how large the LAN network is
IP broadcasts are used by BOOTP and DHCP clients to find
and send requests to their respective servers
7.3.1.1 Advanced Settings
Accept router
advertisements
If enabled allows accepting router advertisements
(Disabled by default)
MTU (Maximum Transmission Unit) specifies the
largest possible size of a data packet
With this field you can alter the metric of that
entry

6904 3G/4G LTE Router Manual
7.3.2 DHCP Server
The DHCP server is the router side service that can automatically configure the TCP/IP settings
of any device that requests such a service. If you connect a device that has been configured to
obtain IP address automatically the DHCP server will lease an address and the device will be
able to fully communicate with the router.
7.3.2.1 General Set up
The starting address of the range that the DHCP server can
use to give out to devices. E.g.: if your LAN IP is
192.168.2.1 and your subnet mask is 255.255.255.0 that
means that in your network a valid IP address has to be in the
range of [192.168.2.1 – 192.168.2.254](192.168.2.0 and
192.168.2.255 are special unavailable addresses). If the Start
value is set to 100 then the DHCP server will only be able to
lease out addresses starting from 192.168.2.100
How many addresses the DHCP server gets to lease out.
Continuing on the above example: if the start address is
192.168.2.100 then the end address will be 192.168.2.254
(100 + 150 – 1 = 254).
How long can a leased IP be considered valid. An IP address
after the specified amount of time will expire and the device
that leased it out will have to request for a new one. Select
Hour or Minute (minimum 2min).

6904 3G/4G LTE Router Manual
7.3.2.2 Advanced settings
You can also define some advanced options that specify how the DHCP server will operate on
your LAN.
Dynamically allocate client addresses, if set to 0 only
clients present in the ethers files are served
Forces DHCP serving even if another DHCP server is
detected on the same network segment.
You can override your LAN netmask here to make the
DHCP server think it’s serving a larger or a smaller
network than it actually is.
Additional options to be added for this DHCP server. For
example with '26,1470' or 'option:mtu, 1470' you can
assign an MTU per DHCP. Your client must accept MTU
by DHCP for this to work.

6904 3G/4G LTE Router Manual
7.4. VLAN
On this page you can configure your virtual LAN settings, either Port based or Tag based.
7.4.1 VLAN Networks
7.4.1.1 VLAN Functionality
Disabled / Port based /
Tag based
Lets user to choose the VLAN mode or disable
VLAN functionality.
7.4.1.2 VLAN Network List
If VLAN mode – Port based.
VLAN Identification number, allowed in range (1-4094)
Switches each LAN port between ON, OFF or tagged state.
Assign selected access point(s) to selected LAN.
Select to which LAN to assign selected LAN ports and
wireless access points.

6904 3G/4G LTE Router Manual
If VLAN mode – tagged based
If VLAN mode – tagged based
VLAN Identification number, allowed in range (1-4094)
Assign selected access point(s) to selected LAN.
Select to which LAN to wireless access point(s).
7.4.2 LAN Networks
In this page you can create extra LAN networks, and assign them with LAN Ports and wireless
access points. You can get extra information on how to configure any of your LAN’s settings in
section – 6.3 LAN.

6904 3G/4G LTE Router Manual
7.5. Wireless
On this page you can configure your wireless settings. Depending on whether your WAN mode
is set to Wi-Fi or not, the page will display either the options for configuring an Access Point
or options for configuring a connection to some local access point.
Access Points
Here you can see the Overview of the wireless configuration. It is divided into two main sections –
device and interface. One is dedicated to configuring hardware parameters other – software.
Here you can toggle the availability of the wireless radio and the physical channel frequency.
Important note: As seen in the picture you should always Save before toggling the radio on and
off.
ESSID – Your wireless networks identification string. This is the name of your Wi-Fi network.
When other Wi-Fi capable computers or devices scan the area for Wi-Fi networks they will see
your network with this name.
Hide ESSID – Will render your SSID hidden from other devices that try to scan the area.
7.5.1.1 Device
7.5.1.1.1 Advanced Settings

6904 3G/4G LTE Router Manual
Different modes provide different throughput and
security options.
Any ISO/IEC 3166
alpha2 country code
Selecting this will help the wireless radio
configure its internal parameters to meet your
countries wireless regulations.
Select Wi-Fi signal power
The smallest packet size that can be fragmented
and transmitted by multiple frames. In areas were
interference is a problem, setting a lower fragment
threshold might help reduce the probability of
unsuccessful packet transfers, thus increasing
speed.
Request to send threshold. It can help resolve
problems arising when several access points are in
the same area, contending.
7.5.1.2 Interface
7.5.1.2.1 Security
Encryption – There are many modes of encryption, a distinctive class is pointed out below.
First select an encryption method: TKIP, CCMP, TKIP&CCMP and auto. Note: Some
authentication methods won’t support TKIP (and TKIP&CCMP) encryption. After you’ve
selected your encryption method, you should enter your passphrase, which must be at least 8
characters long.

6904 3G/4G LTE Router Manual
7.5.1.2.2 MAC Filter
Filter – you can define a rule for what to do with the MAC list you’ve defined. You can either
allow only the listed MACs or allow ALL, but forbid only the listed ones.
7.5.1.2.3 Advanced settings
Separate clients – prevents Wi-Fi clients from communicating with each other on the sane
subnet.
7.4.1.3 Client
CASE904 can work as a Wi-Fi client (check 6.5 Chapter of this manual). Client mode is
nearly identical to AP, except for the fact that most for the options are dictated by the wireless
access point that the router is connecting to. Changing them can result in an interrupted
connection to an AP.
In addition to standard options you can also click the Scan button to rescan the surrounding
area and attempt to connect to a new wireless access point.

6904 3G/4G LTE Router Manual
7.6. Firewall
In this section we will look over the various firewall features that come with CASE6904.
7.6.1 General Settings
The routers firewall uses a standard Linux IPTables package, which uses routing chains and
policies to provide control over inbound and outbound traffic
A “Drop” action is performed on a
packet that is determined to be invalid
DEFAULT* action that is to be
performed for packets that pass through
the Input chain.
DEFAULT* action that is to be
performed for packets that pass through
the Output chain.
DEFAULT* action that is to be
performed for packets that pass through
the Forward chain.
*DEFAULT: When a packet goes through a firewall chain it is matched against all the rules for
that specific chain. If no rule matches said packet, an according Action (either Drop or Reject
or Accept) is performed.
Accept – Packet gets to continue down the next chain.
Drop – Packet is stopped and deleted.
Reject – Packet is stopped, deleted and, differently from Drop, an ICMP packet containing a
message of rejection is sent to the source of the dropped packet.

6904 3G/4G LTE Router Manual
7.6.2 DMZ
By enabling DMZ for a specific internal host (for e.g.: your computer), you will expose that
host and its services to the routers WAN network (i.e. - internet).
7.6.3 Port Forwarding
Here you can define your own port forwarding rules
You can use port forwarding to set up servers and services on local LAN machines. The above
picture shows how you can set up a rule that would allow a website that is being hosted on
192.168.1.109, to be reached from the outside by entering http://routersExternalIp:12345/.
Name of the rule. Used purely to make it
easier to manage rules.
Type of protocol of incoming packet.
From what port on the WAN network will
the traffic be forwarded.
IP address of some
computer on your LAN
The IP address of the internal machine that
hosts some service that we want to access
from the outside.
To what port on the internal machine
would the rule redirect the traffic.
When you selecting ‘edit’ allows you to fine tune the firewall.

6904 3G/4G LTE Router Manual
Name of the rule. Used purely to make it easier to
manage rules.
TCP/UDP/TCP+
UDP
/ICMP/Custom
You may specify multiple by selecting (custom)
and then entering protocols separated by space
3
Match incoming traffic from this zone only
Match incoming traffic from these MACs only
Match incoming traffic from this IP or range only
Match incoming traffic originating from the given
source port or port range on the client host only
Match incoming traffic directed at the given IP
address only
Match incoming traffic directed at the given
destination port or port range on this host only
Redirect matched incoming traffic to the specified
internal zone
Redirect matched incoming traffic to the specified
internal host
Redirect matched incoming traffic to the given port
on the internal host
NAT loopback enables your local network (i.e.
behind your router/modem) to connect to a forwardfacing IP address (such as 208.112.93.73) of a
machine that it also on your local network
Passes additional arguments to iptables. Use with
care!

6904 3G/4G LTE Router Manual
7.6.4 Traffic Rules
Traffic rule page contains a more generalised rule definition. With it you can block or open
ports, alter how traffic is forwarded between LAN and WAN and many more things.
Name of the rule. Used for easier rules management purpose only
Protocol type of incoming or outgoing packet
Match incoming traffic from this IP or range only
Redirect matched traffic to the given IP address and destination port
Action to be taken for the packet if it matches the rule
Self-explanatory. Uncheck to make the rule inactive. The rule will not be
deleted, but it also will not be loaded into the firewall.
When a packet arrives, it gets checked for a matching rule. If there are
several rules that match the rule, the first one is applied i.e. the order of
the rule list impacts how your firewall operates, therefore you are given
the ability to sort your list as you wish.

6904 3G/4G LTE Router Manual

6904 3G/4G LTE Router Manual
Used to make rule management easier
Restrict to
address
family
Match traffic from selected address family
only
Protocol of the packet that is being matched
against traffic rules
Match traffic with selected ICMP type only
Match incoming traffic from this zone
Match incoming traffic from this MAC
address only
Match incoming traffic from this IP or range
only
Match incoming traffic originating from the
given source port or port range on the client
host only
Device/Any
zone/LAN/VPN/WAN
Match forwarded traffic to the given
destination zone only
Match forwarded traffic to the given
destination IP address or IP range only
Match forwarded traffic to the given
destination port or port range only
Drop/Accept/Reject +
chain + additional rules
Action to be taken on the packet if it matches
the rule. You can also define additional
options like limiting packet volume, and
defining to which chain the rule belongs
7.6.4.1 Open Ports on the router
Used to make rule management easier
Protocol of the packet that is being
matched against traffic rules.
Match incoming traffic from selected
address family only

6904 3G/4G LTE Router Manual
Used to make rule management easier
Match incoming traffic from selected
address family only
Protocol of the packet that is being
matched against traffic rules.
Protocol of the packet that is being
matched against traffic rules.
Match incoming traffic from selected
address family only
Redirect matched traffic to the given IP
address and destination port
SNAT (Source Network Address
Translation) rewrite packet\'s source IP
address and port
Make a rule active/inactive

6904 3G/4G LTE Router Manual
You can configure firewall source NAT rule, by clicking the edit button
Used to make rule management easier
Protocol of the packet that is being matched against
rule 3 Source Zone
Match incoming traffic from this zone only
Match incoming traffic from these MACs only
Match incoming traffic from this IP or range only
Match incoming traffic originating from the
given source port or port range on the client host
only
Match forwarded traffic to the given destination
zone only
Match forwarded traffic to the given destination
IP address or IP range only

6904 3G/4G LTE Router Manual
Match forwarded traffic to the given destination
port or port range only
Rewrite matched traffic to the given IP address
Rewrite matched traffic to the given source port.
May be left empty to only rewrite the IP address'
Passes additional arguments to iptables. Use
with care!
7.6.5 Custom Rules
Here you have the ultimate freedom in defining your rules – you can enter them straight into
the iptables program. Just type them out into the text field ant it will get executed as a Linux
shell script. If you are unsure of how to use iptables, check the internet out for manuals,
examples and explanations.

6904 3G/4G LTE Router Manual
7.6.6 DDOS Prevention
7.6.6.1 SYN Flooding Protection
SYN Flood Protection allows you to protect from attack that exploits part of the normal TCP
three-way handshake to consume resources on the targeted server and render it unresponsive.
Essentially, with SYN flood DDoS, the offender sends TCP connection requests faster than
the targeted machine can process them, causing network saturation.
Enable SYN
flood protection
Makes router more resistant to SYN flood attacks.
Set rate limit (packets/second) for SYN packets
above which the traffic is considered a flood.
Set burst limit for SYN packets above which the
traffic is considered a flood if it exceeds the
allowed rate.
Enable the use of SYN cookies(particular choices
of initial TCP sequence numbers by TCP servers).
7.6.6.2 Remote ICMP Requests
Attackers are using ICMP echo request packets directed to IP broadcast addresses from remote
locations to generate denial-of-service attacks.

6904 3G/4G LTE Router Manual
Blocks remote ICMP echo-request type
Enable ICMP echo-request limit in selected
period
Select in what period limit ICMP echorequest
Maximum ICMP echo-request during the
period
Indicating the maximum burst before the
above limit kicks in.
7.6.6.3 SSH Attack Prevention
Prevent SSH( Allows a user to run commands on a machine's command prompt without them
being physically present near the machine. ) attacks by limiting connections in defined period
7.6.6.4 HTTP Attack Prevention
HTTP attack sends a complete, legitimate HTTP header, which includes a 'Content-Length'
field to specify the size of the message body to follow. However, the attacker then proceeds to
send the actual message body at an extremely slow rate (e.g. 1 byte/110 seconds). Due to the
entire message being correct and complete, the target server will attempt to obey the 'ContentLength' field in the header, and wait for the entire body of the message to be transmitted, hence
slowing it down.

6904 3G/4G LTE Router Manual
Limits HTTP connections per period
Select in what period limit HTTP
connections
Maximum HTTP connections during the
period
Indicating the maximum burst before the
above limit kicks in.
7.6.6.5 HTTPS Attack Prevention
Limits HTTPS connections per period
Select in what period limit HTTPS
connections
Maximum HTTPS connections
during the period
Indicating the maximum burst before
the above limit kicks in.

6904 3G/4G LTE Router Manual
7.7. Static Routes
Static routes provide a way of entering custom entries in the internal routing table of the Case
Communications 6904
The zone where the ‘Target’ resides
The source of the traffic
Mask that is applied to the Target to
determine to what actual IP addresses the
routing rule applies
To where the router should send all the
traffic that applies to the rule
Used as a sorting measure. If a packet about
to be routed fits two rules, the one with the
higher metric is applied.
Additional note on Target & Netmask: You can define a rule that applies to a single IP like this:
Target - some IP; Netmask - 255.255.255.255. Furthermore you can define a rule that applies to
a segment of IPs like this: Target – some IP that STARTS the segment; Netmask – Netmask
that defines how large the segment is. E.g.:
Only applies to 192.168.55.161
Applies to IPs in range 192.168.55.0-192.168.55.255
Applies 192.168.55.240 - 192.168.55.255
192.168.55.0 - 192.168.55.255
192.168.0.0 - 192.168.255.255

6904 3G/4G LTE Router Manual
8.0. Services
8.1. VRRP
8.1.1 VRRP LAN Configuration settings
Enable VRRP (Virtual Router Redundancy Protocol)
for LAN
Virtual IP address for LAN's VRRP (Virtual Router
Redundancy Protocol) cluster
Routers with same IDs will be grouped in the same
VRRP (Virtual Router Redundancy Protocol) cluster
Router with highest priority value on the same VRRP
(Virtual Router Redundancy Protocol) cluster will act
as a master
8.1.2 Check Internet connection
Enable WAN’s connection monitoring
A host to send ICMP (Internet Control
Message Protocol) packets to
Time interval in minutes between two pings
Response timeout value, interval [1 - 9999]
ICMP (Internet Control Message Protocol)
packet's size, interval [0 - 1000]
Failed Ping attempt’s count before
determining that connection is lost

6904 3G/4G LTE Router Manual
8.2 TR-069
TR-069 is a standard developed for automatic configuration and management of remote devices
by Auto Configuration Servers (ACS).
8.2.1. TR-069 Parameters Configuration
Enable Periodic
Transmission
Enable periodic transmissions of
data to server
Periodic data transmission to
server period
Password for authentication on
TR-069 server
http://192.168.1.110:8080
TR-069 server URL address

6904 3G/4G LTE Router Manual
8.3 Web Filtering
8.3.1 Site Blocking
Enable host name based websites blocking
Whitelist - allow every site on the list and block
everything else. Blacklist - block every site on the
list and allow everything else
8.3.2 Proxy based URL Content Blocker
Enable proxy server based URL content blocking.
Works with HTTP protocol only
Whitelist - allow every part of URL on the list and
block everything else. Blacklist - block every part of
URL on the list and allow everything else

6904 3G/4G LTE Router Manual
8.4 NTP
NTP configuration lets you setup and synchronize routers time.
Time zone of your country.
Enables the functionality
How often router updates
systems time
Count of time
synchronizations
Total amount of times that
router will do the
synchronization
If left blank - the count
will be infinite
Adjust the minor drift of the
clock so that it will be more
accurate
-------------------------
Note, if using Time Servers at least one server has to be present, otherwise NTP will not serve
its purposes.

6904 3G/4G LTE Router Manual
8.5 VPN
8.5.1 Open VPN
VPN (Virtual Private Network) is a method for secure data transfer through unsafe public
network. This section explains how to configure OpenVPN, which is implementation of VPN
supported by the Case 6904 router.
A picture below demonstrates default OpenVPN configurations list, which is empty, so you
have to define a new configuration to establish any sort of OpenVPN connection. To create it,
enter desired configuration name in “New configuration name” field, select device role from
“Role” drop down list. For example, to create an OpenVPN client with configuration name
Demo, select client role, name it “Demo” and press “Add New” button as shown in the
following picture.
To see at specific configuration settings press “edit” button located in newly created
configuration entry. A new page with detailed configuration appears, as shown in the picture
below (TLS client example).

6904 3G/4G LTE Router Manual
There can be multiple server / client instances

6904 3G/4G LTE Router Manual
Switches configuration on and off. This must be selected to make
configuration active.
Selects virtual VPN interface type. TUN is most often used in typical IPlevel VPN connections, however, TAP is required to some Ethernet
bridging configurations.
Defines a transport protocol used by connection. You can choose here
between TCP and UDP.
Defines TCP or UDP port number (make sure, that this port allowed by
firewall).
This setting enables LZO compression. With LZO compression, your
VPN connection will generate less network traffic; however, this means
higher router CPU loads. Use it carefully with high rate traffic or low
CPU resources.
Selects Packet encryption algorithm.
Sets authentication mode, used to secure data sessions. Two possibilities
you have here: “Static” means, that OpenVPN client and server will use
the same secret key, which must be uploaded to the router using “Static
pre-shared key” option. “Tls” authentication mode uses X.509 type
certificates. Depending on your selected OpenVPN mode (client or
server) you have to upload these certificates to the router:
For client: Certificate Authority (CA), Client certificate, Client key.
For server: Certificate Authority (CA), Server certificate, Server key and
Diffie-Hellman (DH) certificate used to key exchange through unsafe
data networks.
All mention certificates can be generated using OpenVPN or OpenSSL
utilities on any type host machine. Certificate generation and theory is
out of scope of this user manual.
IP address of OpenVPN server (applicable only for client configuration).
Sets time in seconds to try resolving server hostname periodically in case
of first resolve failure before generating service exception.
Defines two time intervals: one is used to periodically send ICMP
request to OpenVPN server, and another one defines a time window,
which is used to restart OpenVPN service, if no ICPM request is
received during the window time slice. Example Keep Alive “10 60”
Remote network
IP address
IP address of remote network, an actual LAN network behind another
VPN endpoint.
Remote network
IP netmask
Subnet mask of remote network, an actual LAN network behind another
VPN endpoint.
Certificate authority is an entity that issues digital certificates. A digital
certificate certifies the ownership of a public key by the named subject of
the certificate.
Client certificate is a type of digital certificate that is used by client
systems to make authenticated requests to a remote server. Client
certificates play a key role in many mutual authentication designs,
providing strong assurances of a requester's identity.
Authenticating the client to the server and establishing precisely who
they are
After setting any of these parameters press the “Save” button. Some of selected parameters will
be shown in the configuration list table. You should also be aware of the fact that router will
launch separate OpenVPN service for every configuration entry (if it is defined as active, of
course) so the router has ability to act as server and client at the same time.

6904 3G/4G LTE Router Manual
8.5.2 IP Sec
The IPsec protocol client enables the router to establish a secure connection to an IPsec peer via
the Internet. IPsec is supported in two modes - transport and tunnel. Transport mode creates
secure point to point channel between two hosts. Tunnel mode can be used to build a secure
connection between two remote LANs serving as a VPN solution.
IPsec system maintains two databases: Security Policy Database (SPD) which defines whether
to apply IPsec to a packet or not and specify which/how IPsec-SA is applied and Security
Association Database (SAD), which contain Key of each IPsec-SA.
The establishment of the Security Association (IPsec-SA) between two peers is needed for
IPsec communication. It can be done by using manual or automated configuration.
Note: router starts establishing tunnel when data from router to remote site over tunnel is sent.
For automatic tunnel establishment used tunnel Keep Alive feature.
Check box to enable IPSec.
Select “Main”, “Aggressive” or "Base" mode accordingly to your
IPSec server configuration.
Enable this function if client-to-client applications will be used.
Enable this to send an INITIAL-CONTACT message.
Set the device identifier for IPSec tunnel. E.g. You can use your
IP address
Set the device identifier for IPSec tunnel.
In case the 6904 has a Private IP, its identifier should be its own
LAN network address. In this way, the mobile users are better
supported
Specify the authentication secret [string]. Secret’s length depends
on selected algorithm, eg. 128 bit long secret is 16 characters in
length, 128 bits / 8 bits (one character) = 16.
Set remote IPSec server IP address.
If the 6904 does not receive DPD-ACK message from its IPSec
peer, 6904 shuts the connection down.
Select delay between peer acknowledgement requests

6904 3G/4G LTE Router Manual
Phase 1 and Phase 2 must be configured accordingly to the IPSec server configuration, thus
algorithms, authentication and lifetimes of each phase must be identical.
Remote Network Secure Group – Set the remote network (Secure Policy Database)
information. It must be LAN network of remote IPSec host.
Allows sending ICMP echo request (Ping utility) to the remote
tunnel network. This function may be used to automatically start
the IPSec tunnel. This function should be used every time.
Allows sending ICMP echo requests to the remote tunnel
network
Enter IP address to which ICMP echo requests will be sent.
Set sent ICMP request period in seconds.

6904 3G/4G LTE Router Manual
8.5.3 GRE Tunnel
GRE (Generic Routing Encapsulation RFC2784) is a solution for tunnelling RFC1812 private
address-space traffic over an intermediate TCP/IP network such as the Internet. GRE tunnelling
does not use encryption it simply encapsulates data and sends it over the WAN.
In the example network diagram two distant networks LAN1 and LAN2 are connected.
To create GRE tunnel the user must know the following parameters:
1. Source and destination IP addresses.
2. Tunnel local IP address
3. Distant network IP address and Subnet mask.

6904 3G/4G LTE Router Manual
Check the box to enable the GRE Tunnel function.
Remote end point
IP address
Specify remote WAN IP address
3
IP address of LAN network on the remote device.
Network of LAN network on the remote device. Range [032].
Local virtual IP address. Can not be in the same subnet as
LAN network.
Network of local virtual IP address. Range [0-32]
Specify the maximum transmission unit (MTU) of a
communications protocol of a layer in bytes.
Specify the fixed time-to-live (TTL) value on tunneled
packets [0-255]. The 0 is a special value meaning that
packets inherit the TTL value.
Check the box to enable the Path Maximum Transmission
Unit Discovery (PMTUD) status on this tunnel.
It gives the ability for one side to originate and receive
keepalive packets to and from a remote router even if the
remote router does not support GRE keepalives.
Keep Alive host IP address. Preferably IP address which
belongs to the LAN network on the remote device.
12
Time interval for Keep Alive. Range [0 - 255].

6904 3G/4G LTE Router Manual
8.5.4 PPTP
Point-to-Point Tunnelling Protocol (PPTP) is a protocol (set of communication rules) that
allows corporations to extend their own corporate network through private "tunnels" over the
public Internet. Effectively, a corporation uses a wide-area network as a single large local area
network. A company no longer needs to lease its own lines for wide-area communication but
can securely use the public networks. This kind of interconnection is known as a virtual private
network (VPN).
Check the box to enable the PPTP function.
IP Address of this device (6904)
IP address leases beginning
Username to connect to PPTP (this) server
Password to connect to PPTP server

6904 3G/4G LTE Router Manual
8.5.5 L2TP
Allows setting up a L2TP server or client and should it be needed - using it with IPsec
(L2TP/IPSec). Below is L2TP server configuration example.
Check the box to enable the L2TP function.
IP Address of this device (6904)
IP address leases beginning
Username to connect to L2TP (this) server
Password to connect to L2TP server

6904 3G/4G LTE Router Manual
8.6 Dynamic DNS
Dynamic DNS (DDNS) is a domain name service allowing to link dynamic IP addresses to
static hostname.
To start using this feature firstly you should register to DDNS service provider (example list is
given in description).
You are provided with add/delete buttons to manage and use different DDNS configurations at
the same time!
You can configure many different DDNS Hostnames in the main DDNS Configuration section.
To edit your selected configuration, select Edit

6904 3G/4G LTE Router Manual
Enables current DDNS configuration.
Timestamp of the last IP check or update.
1. dydns.org
2. 3322.0rg
3.no-ip.com
4.easydns.com
Your dynamic DNS service provider selected from
the list. In case your DDNS provider is not present
from the ones provided, please feel free to use
"custom" and add hostname of the update URL.
Domain name which will be linked with dynamic IP
address.
Name of the user account.
6
Password for the user account
This option allows you to select specific 6904
interface, and then send the IP address of that
interface to DDNS server. So if, for example, your
6904 has Private IP (i.e. 10.140.56.57) on its WAN
(3G/LTE interface), then you can send this exact IP
to DDNS server by selecting "Private", or by
selecting "Custom" and "WAN" interface. The
DDNS server will then resolve hostname queries to
this specific IP.
Time interval (in minutes) to check if the IP address
of the device have changed.
Time interval (in minutes) to force IP address renew.

6904 3G/4G LTE Router Manual
8.7 SNMP
SNMP settings window allows you to remotely monitor and send GSM event information to the
server.
8.7.1 SNMP Settings
Run SNMP (Simple Network Management
Protocol) service on system's start up
Open port in firewall so that SNMP (Simple
Network Management Protocol) service may be
reached from WAN
SNMP (Simple Network Management Protocol)
service's port
The SNMP (Simple Network Management
Protocol) Community is an ID that allows access
to a router's SNMP data
Set custom name to access SNMP

6904 3G/4G LTE Router Manual
Mobile network registration status
Operator currently in use
Operator number (MCC+MNC)
Data session connection state
Data session connection type
Enable SNMP (Simple Network Management
Protocol) trap functionality
Host to transfer SNMP (Simple Network
Management Protocol) traffic to
The SNMP (Simple Network Management
Protocol) Community is an ID that allows access
to a router's SNMP data

6904 3G/4G LTE Router Manual
8.8 SMS Utilities
The Case 6904 has an extensive number of SMS Utilities. These are subdivided into 6 sections:
SMS Utilities, Call Utilities, User Groups, SMS Management, Remote Configuration,
Statistics.
8.8.1 SMS Utilities
You can choose your SMS Keyword (text to be sent) and authorized phone number in the main
menu. You can edit each created rule by hitting Edit button. All configuration options are listed
below:

6904 3G/4G LTE Router Manual
This check box will enable
and disable SMS reboot
function.
If you select Get Status, it will send routers status
once it has rebooted and is operational again. For
Get Status description see item No. 4 of this table.
SMS text which will
reboot router.
SMS text can contain letters, numbers, spaces and
special symbols. Capital letters also matters.
Phone number of person
who can reboot router via
SMS message
You can add as many phone numbers as you need.
Dropdown list with additional rows will show up if
you click on “add” icon at the end of phone number
row.
Check this to receive
connection status via SMS
after a reboot.
This is both separate SMS Rule and an option under
SMS Reboot rule.
This check box will enable
and disable SMS status
function.
SMS status is disabled by default.
6
SMS text which will send
routers status.
SMS text can contain letters, numbers, spaces and
special symbols. The SMS is case sensitive
Phone number of person
who can receive router
status via SMS message
You can add as many phone numbers as you need.
Dropdown list with additional rows will show up if
you click on “add” icon at the end of phone number
row.
Data state Operator
Connection type Signal
Strength Connection State
IP
You can select which status elements to display.
This check box will enable
and disable this function
Allows Wi-Fi control via SMS
10
SMS text which will turn
Wi-Fi ON
SMS text can contain letters, numbers, spaces and
special symbols. Capital letters also matters.
SMS text which will turn
Wi-Fi OFF
SMS text can contain letters, numbers, spaces and
special symbols. Capital letters also matters.
Phone number of person
who can receive router
status via SMS message
You can add as many phone numbers as you need.
Dropdown list with additional rows will show up if
you click on “add” icon at the end of phone number
row.
Permanently saves Wi-Fi
state
With this setting enabled, router will keep Wi-Fi
state even after reboot.
If it is not selected, router will revert Wi-Fi state
after reboot.
This check box will enable
and disable mobile settings
function
Allows cellular control via SMS
Key word that will precede
actual configuration
parameters
SMS text can contain letters, numbers, spaces and
special symbols. Capital letters also matters.
Phone number of person
who can receive router
status via SMS message
You can add as many phone numbers as you need.
Dropdown list with additional rows will show up if
you click on “add” icon at the end of phone number
row.

6904 3G/4G LTE Router Manual
Mobile settings via SMS parameters
Sets APN. i.e: apn=internet.gprs
auto
3gpreferred
3gonly
2gpreferred
2gonly
You can add as many phone numbers as you need.
Dropdown list with additional rows will show up if
you click on “add” icon at the end of phone number
row.
Used only if PAP or CHAP authorization is
selected
Used only if PAP or CHAP authorization is
selected
All Mobile settings can be changed in one SMS. Between each <parameter=value> pair a space
symbol is necessary.
Example: cellular apn=internet.gprs dialnumber=*99***1# auth_mode=pap service=3gonly
username=user password=user
This check box will enable
and disable this function
Function disabled by default
Text to turn 3G connection
ON
SMS text can contain letters, numbers,
spaces and special symbols. The text is
case sensitive
Text to turn 3G connection
OFF
Permanently saves 3G
network state
With this setting enabled, router will keep
3G state even after reboot.
If it is not selected, router will revert 3G
state after reboot.
This check box will enable
and disable this function
Function disabled by default
SMS text to
change profile
Keyword that must precede
profile name
SMS text can contain letters, numbers,
spaces and special symbols. The text is
case sensitive
SMS text to get
list of profiles
Upon receiving this SMS
router will send list of
created profiles to the sender
number
Phone number of person who
can control this function
You can add as many phone numbers as
you need. Dropdown list with additional
rows will show up if you click on “add”
icon at the end of phone number row.
Important Notes:
3G settings must be configured correctly. If SIM card has PIN number you must enter it at
“Network” > “3G” settings. Otherwise SMS reboot function will not work.
The Senders phone number must contain the country code. You can check sender phone
number format by reading the details of old SMS text massages you receiving usually.

6904 3G/4G LTE Router Manual
8.8.2 Calling Utilities
Allows users to call the router in order to perform one of the actions: Reboot, Get Status, turn
Wi-Fi ON/OFF, turn Mobile data ON/OFF. Only thing that is needed is to call routers SIM card
number from allowed phone (user) and 6904 will perform all actions that are assigned for this
particular number. To configure new action on call rules you just need to click the Add button
in the ”New Call rule” section. After that, you get in to the “Modify Call Rule section”.
Action to be taken after receiving a call, you
can choose from following actions: Reboot,
Send status, Switch Wi-Fi, Switch mobile
data, switch output
Allows to limit action triggering from all
users, to user groups or single user numbers
Get Status via
SMS after reboot
Enables automatic message sending with
router status information after reboot
8.8.3 User Groups
Gives possibility to group phone numbers for SMS management purposes. You can then later
use these groups in all related SMS functionalities. This option helps if there are several Users
who should have same roles when managing router via SMS. You can create new user group by
entering group name and clicking on Add button in “Create New User Group” section. After
that you get to “Modify User Group” section.
The name you give to the number group
Number to add to users group, must match international
format. You can add many phone numbers fields by
clicking on the green + symbol

6904 3G/4G LTE Router Manual
8.8.4 SMS Management
8.8.1.1. Read SMS
In SMS Management page Read SMS you can read and delete received/stored SMS.
8.8.1.2. Send SMS
Recipients phone number. Should be preceded
with country code, i.e. “+44
Message text, special characters are allowed.
8.8.1.3. Storage
ith the storage option you can choose for router NOT to delete SMS from SIM card. If this
option is not used, router will automatically delete all incoming messages after they have been
read. Message status “read/unread” is examined every 60 seconds. All “read” messages are
deleted

6904 3G/4G LTE Router Manual
Enables received message storing SIM card
Specified how much space for SMS should
remain free on the SIM at all times
8.8.5. Remote Configuration
The Case Communications 6904 router can be configured via an SMS from another 6904. You
only have to select which configuration details are to be sent, generate the SMS Text, type in
the phone number and Serial number of the router that you wish to configure and Send the
SMS.
Total count of SMS is managed automatically. You should be aware of possible number of
SMS and use this feature carefully. It should not, generally, be used if you have high cost
per SMS. This is especially relevant if you will try to send whole OpenVPN configuration,
which might accumulate ~40 SMS.
8.8.5.1. Receive Configuration
This section controls how should configuration initiation party should identify itself. In this
scenario Case Communications 6904 itself is being configured.
Enables router to receive its
configuration
No authorization / By serial By
administration password
Method at Receiving and
Sending ends must match
From all numbers From group
From single number
Gives greater control and
security measures
Note, that for safety reasons Authorization method should be configured before
deployment of the router.

6904 3G/4G LTE Router Manual
8.8.5.2. Send Configuration
This section lets you configure remote Case 6904 devices. The authorisation settings must
confirm to those that are set on the receiving party.

6904 3G/4G LTE Router Manual
Generate new SMS settings or use current device
configuration
Include configuration for mobile network
Include configuration for WAN (Wide Area
Network)
Include configuration for LAN (Local Area
Network)
Interface type used for WAN (Wide Area Network)
connection
Network protocol used for network configuration
parameters management
IP address that router will use to connect to the
internet
That will be used to define how large the WAN
(Wide Area Network) network is
The address where traffic destined for the internet is
routed to.
A logical address at which all devices connected to
a multiple-access communications network are
enabled to receive datagrams
The SIM card that will be used
Use PPPD Mode
Use NDIS Mode
An underlying agent that will be used for mobile
data connection creation and management
“internet.mnc012.
mcc345.gprs”
(APN) is the name of a gateway between a GPRS,
3G or 4G mobile network and another computer
network, frequently the public Internet.
A phone number that will be used to establish a
mobile PPP (Point-to-Point Protocol) connection
Select an authentication method that will be used to
authenticate new connections on your GSM carrier's
network
User name used for authentication on your GSM
carrier's network
Password used for authentication on your GSM
carrier's network
2G only
2G preferred
3G only
3G preferred
4G (LTE) only
4G (LTE) preferred
Automatic
Select network's preference. If your local mobile
network supports GSM (2G), UMTS (3G) or LTE
(4G) you can specify to which network you prefer
to connect to
IP address that router will use on LAN (Local Area
Network) network
A subnet mask that will be used to define how large
the LAN (Local Area Network) network is
A logical address at which all devices connected to
a multiple-access communications network are
enabled to receive datagrams