Page 1
Series 2000
3G Modem / Router
User Manual
Document Number: 0013-001-000198
Version: 1.40 (15 October, 2010)
Page 2
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Documentation Control
Generation Date: October 15, 2010
Copyrightc 2010 Cybertec Pty Limited
All rights Reserved.
No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means,
electronic, mechanical, photocopying, recording, or otherwise, without the prior written permission of Cybertec Pty
Limited.
Cybertec Pty Limited has intellectual property rights covering subject matter in this document. Except as expressly
provided in any written license agreement from Cybertec Pty Limited, the furnishing of this document does not give you
any license to this intellectual property.
Legal Information
The contents of this document are provided “as is”. Except as required by applicable law, no warranties of any kind, either
express or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular
purpose, are made in relation to the accuracy and reliability or contents of this document. Cybertec Pty Ltd reserves the
right to revise this document or withdraw it at any time without prior notice.
Under no circumstances shall Cybertec Pty Ltd be responsible for any loss of data or income or any special, incidental,
and consequential or indirect damages howsoever caused.
More information about Cybertec can be found at the following Internet address: http://www.cybertec.com.au
Page 1 of 186
Page 3
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Contents
1 Introduction 5
1.1 Document Structure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
1.2 Conventions Used . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
1.3 Manual Updates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
1.4 Default Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
2 Safety 6
3 Care Recommendations 6
4 Indicators and Interfaces 7
4.1 Model 2100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
4.2 Model 2220 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
4.3 Indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
4.4 Ethernet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
4.5 Modem / DCE Serial Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
4.6 DTE Serial Ports (Model 2220 Only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
4.7 Digital Inputs & Digital Outputs (Model 2220 Only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
4.8 Factory Default Reset Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
5 Installation 13
5.1 Panel Mounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
5.2 DIN Rail Mounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
5.3 Installing the SIM Card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
5.4 Antenna . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
5.5 Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
5.6 Functional Earth . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
6 Accessing the Web Interface 16
6.1 Computer Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
6.2 Windows PC Network Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
6.3 Connecting to the Series 2000 Web Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
7 Web Page Layout 20
7.1 Page Layout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
7.2 Menu Structure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
7.3 Symbols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
8 Basic Configuration 25
8.1 Configure the Wireless interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
8.2 Configure the LAN interface and DHCP Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
8.3 Configure clients to use the Series 2000 3G Modem / Router . . . . . . . . . . . . . . . . . . . . . . . . 30
Page 2 of 186
Page 4
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
9 Status 31
9.1 Alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
9.2 Wireless . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
9.3 Local Area Network (LAN) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
9.4 Virtual Private Network (VPN) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
9.5 Serial Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
9.6 General Purpose Input / Output (GPIO) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
9.7 System Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
10 System 37
10.1 Administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
10.2 Backup & Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
10.3 System Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
10.4 Power . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
10.5 General Purpose Inputs and Outputs (GPIO) (Model 2220only) . . . . . . . . . . . . . . . . . . . . . . . 45
11 Wireless 49
11.1 Network Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
11.2 Packet Mode Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
11.3 Connection Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
11.4 Circuit Switched Data Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
11.5 SMS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
12 Network 79
12.1 LAN Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
12.2 Configuring the DHCP server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
12.3 Domain Name System (DNS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
12.4 Generic Routing Encapsulation (GRE) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
12.5 Network Diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
13 Routing 86
13.1 Default and Static Routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
13.2 Dynamic Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
13.3 Virtual Router Redundancy Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
13.4 Policy Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94
13.5 Quality of Service Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
14 Firewall 104
14.1 Firewall Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104
14.2 Access Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105
14.3 DoS Filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106
14.4 Custom Filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
14.5 Port Forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112
14.6 Custom NAT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
14.7 MAC Address Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120
Page 3 of 186
Page 5
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
15 Virtual Private Network (VPN) 125
15.1 Internet Protocol Security (IPsec) VPN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125
15.2 Secure Sockets Layer (SSL) VPN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 139
15.3 PPTP and L2TP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144
15.4 Multiple VPN Tunnels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 148
15.5 Certificate Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 148
16 Serial Server 153
16.1 Selecting a port function . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153
16.2 Common configuration options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 155
16.3 Raw TCP Client/Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157
16.4 Raw UDP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159
16.5 Modem Emulator . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 160
16.6 DNP3 IP-Serial Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 163
16.7 Modbus IP-Serial Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165
16.8 Telnet (RFC 2217) Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166
16.9 PPP Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 168
16.10PPP Dialout Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 169
16.11Phone Book . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171
17 Management 174
17.1 Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 174
17.2 SNMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 177
17.3 DNP3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 178
17.4 SMS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 180
17.5 Email . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 184
18 Troubleshooting 186
18.1 Series 2000 does not start. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 186
18.2 Cannot connect to web pages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 186
18.3 Network Status Fault . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 186
18.4 Connection Status Fault . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 186
Page 4 of 186
Page 6
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
1 Introduction
This manual provides installation and configuration information for the Cybertec Series 2000 3G Modem / Router. The
Cybertec Series 2000 3G Modem / Router are designed for Industrial applications, and are used for Telemetry and SCADA
communications. The communications interfaces include Ethernet and Serial, in addition some models include digital
inputs and digital outputs. The Series 2000 3G Modem / Router range are designed to operate over a wide range of input
voltage and an industrial temperature range.
All models are designed for use on 3G cellular networks and provide broadband performance, all models in the Series
2000 range support download data rates of up to 7.2Mbps and upload data rates of up to 2Mbps.
Topics covered in this manual include:
• Installation and Connecting to the Series 2000 3G Modem / Router .
• Basic configuration and 3G network connection.
• Operation and status monitoring.
• LAN network configuration.
• Firewall and routing set up.
• Virtual Private Network (VPN) configuration and use.
• Serial server configuration.
• Device management.
1.1 Document Structure
The manual has been designed to introduce the product quickly. The first sections describes the hardware and how to
set up and connect to the device. A standard network configuration is then described so that a standard connection can
established. The configuration sections follow the menu structure of the Series 2000 3G Modem / Router.
1.2 Conventions Used
This manual uses the following typographical conventions:
Italic: Used for ????
www.example.com.au: Used to display URLs (Web addresses).
Menu . Submenu: Used to illustrate menu navigation.
The manual uses the following icons:
Indicates a reference to further information. This may include other documents or information
available online.
Indicates a tip, suggestion, or general note relating to the occupying text.
Indicates the text of an SMS.
Indicates a warning or caution relating to the occupying text.
Page 5 of 186
Page 7
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
1.3 Manual Updates
Improvements and updates to this manual will be made available on the Cybertec website www.cybertec.com.au.
There you will also find, further product documentation including application notes, user guides, and other support information.
1.4 Default Configuration
Unless otherwise stated the manual assumes the configuration of the Series 2000 3G Modem / Router is in the factory
default state. If the modem has been previously configured it may be necessary to perform a configuration reset to return
the the configuration to the default state, prior to configuring the device. The procedure to perform a configuration reset
is described is Section 4.8.
2 Safety
Please observe the general safety precautions outlined in this manual during all phases of
operation and service of the Series 2000 3G Modem / Router. If you do not comply with these
precautions or with specific safety warnings contained elsewhere in this manual or on the
product itself, you will violate the standards of design, manufacture, and intended use of the
product. Cybertec does not assume any liability for failure to comply with these precautions.
Read this manual completely and make sure it is understood fully before commencing
installation. Check that the intended application does not exceed the safe operating
specifications for this unit. This unit should only be installed by qualified personnel. The power
supply wiring must be sufficiently fused, and if necessary it must be possible to manually
disconnect the unit from the power supply.
3 Care Recommendations
To maintain correct operation of unit and to fulfill the warranty obligations the following care recommendations should
be followed. This unit must not be operated with the covers removed. Do not attempt to disassemble the unit, no user
serviceable parts are contained within the unit. Do not drop, knock or shake the unit, rough handling may cause damage
to internal circuit boards. Do not use harsh chemicals, cleaning solvents or strong detergents to clean the unit. Do not
expose the unit to any kind of liquids (rain, beverages, etc), the unit is not waterproof. Keep the unit within the specified
humidity levels. Do not use or store the unit in dusty, dirty areas, connectors as well as other mechanical part may be
damaged.
Page 6 of 186
Page 8
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
4 Indicators and Interfaces
This section describes the indicators and interfaces for each of the models in the Series 2000 range. The Series 2000,
Model 2100 and Model 2220 differ in that the the Model 2220 has 2 additional serial ports, digital inputs and digital
outputs.
4.1 Model 2100
The Ethernet ports, serial port indicators are located on the front panel as show in figure 1. The rear panel contains the
connectors for power, and antenna, in addition to the SIM drawer and factory reset switch, as shown in figure 2.
Figure 1: Model 2100 front panel.
Figure 2: Model 2100 rear panel.
4.2 Model 2220
The Ethernet ports, serial ports and indicators are located on the front panel as show in figure 3. The rear panel contains
the connectors for power, digital inputs, digital outputs and antenna, in addition to the SIM drawer and factory reset
switch, as shown in figure 4.
Figure 3: Model 2220 front panel.
Page 7 of 186
Page 9
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 4: Model 2220 rear panel.
4.3 Indicators
The Series 2000 has 4 LED indicators on the front panel of the unit, refer to Figure 5 for the locations.
Figure 5: Front panel indicators
4.3.1 Power Indicator
The power indicator will light green when power is applied. If the indicator does not light when power is applied check
the power supply voltage and connections, refer to Section 5.5 for details.
4.3.2 Network Indicator
The network indicator reports the status of the connection to the network. When powered up the indicator will be off,
the indicator will then flash green whilst the unit searches for a network, once connected to the network the indicator will
light green. The possible states are shown in Table 1.
Indicator Description
Off Not ready
green flashing Searching for network
green (solid) Locked to network
Table 1: Network Indicator.
4.3.3 Status Indicator
The status indicator reports the health of the unit. In normal operation the indicator will be green, if a fault is detected
either at boot-up or during normal operation the indicator will light red. When the unit is first switched on or is reset the
Page 8 of 186
Page 10
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
indicator will first light red, then flash red in sequence with the Signal Strength Indicator (refer to section 4.3.4), this is
normal behaviour during boot-up and does not indicate a fault.
Indicator Boot-up behaviour Normal operation
Red No Fault Fault
Red Flashing No Fault Fault
Green N/A No Fault
Table 2: Status Indicator.
4.3.4 Signal Strength Indicator
The Signal Strength Indicator reports the level of the received RF signal as well as any network connection faults that
occur . The signal strength is indicated by the number of green flashes of the indicator within an indicator period. Each
indicator green flash will be followed by a short off time, an extended off time indicates the end of the indicator period.
So an indicator period starts with a green flash followed by up to 5 additional flashes, then an extended off time, the cycle
will then repeat. The maximum number of flashes in an indicator period is 6.
The indicator may be red during the extended off time following the green flashes, this indicates a network connection
fault. The indicator will flash red if a SIM card is not present and will be solid red if the RF circuitry is restarting, network
registration has failed or the RF signal level is too low for a connection.
When the unit is first switched on, or is reset the indicator will first light red, then flash red in sequence with the Status
Indicator (refer to section 4.3.3), this is normal behaviour during boot-up and does not indicate a fault.
Indicator Description
Green Flashing Indication of received signal strength
Green flashing then Red Network connection fault
Red flashing SIM card not present or faulty
Red RF circuitry initialising or network registration fault
Table 3: Signal Strength Indicator.
4.4 Ethernet
The Ethernet ports are on the front of the unit and are marked LAN 1 and LAN 2, each port has a LED indicating
the connection speed and a LED indicating activity as shown in Figure 6. Both ports are capable of auto-negotiation,
meaning cross-over cables are not required. The Ethernet ports are switched, allowing more than one Ethernet device to
be connected to the unit at one time.
Figure 6: Ethernet ports.
Page 9 of 186
Page 11
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
4.5 Modem / DCE Serial Port
The Series 2000 has one Data Communications Equipment (DCE) serial port. The Modem / DCE Serial port is an RS232
level serial port, accessed via the front panel DB9 female connector. Refer to Figure 7 and Table 4 for the connections to
this port.
Figure 7: Modem / DCE Serial port.
Pin Name Direction Description
1 DCD Out Data Carrier Detect
2 RxD Out Receive Data
3 TxD In Transmit Data
4 DTR In Data Terminal Ready
5 SG - Signal Ground
6 DSR Out Data Set Ready
7 RTS IN Request to Send
8 CTS Out Clear to Send
9 RI Out Ring Indicator
Table 4: Modem / DCE Serial port connections.
4.6 DTE Serial Ports (Model 2220 Only)
The Series 2000 Model 2220 has two Data Terminal Equipment serial ports. The two DTE serial ports are RS232 level
ports, accessed via the two DB9 Male connectors on the front panel of the unit. Refer to Figure 8 and Table 5 for the
connections to these ports.
Figure 8: DTE Serial ports.
Pin Name Direction Description
1 DCD In Data Carrier Detect
2 RxD In Receive Data
3 TxD Out Transmit Data
4 DTR Out Data Terminal Ready
5 SG - Signal Ground
6 DSR In Data Set Ready
7 RTS Out Request to Send
8 CTS In Clear to Send
9 RI In Ring Indicator
Table 5: DTE Serial port connections.
Page 10 of 186
Page 12
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
4.7 Digital Inputs & Digital Outputs (Model 2220 Only)
The digital inputs and digital outputs are close contact type, the connectors are on the rear of the unit. The digital input
connector is on the left hand side marked “IN”, the plug should be wired with reference to the circuit diagram shown in
Figure 9 and the connections shown in Table 6. The digital output connector is on the right hand side marked “OUT”, the
plug should be wired with reference to the circuit diagram shown in Figure figure 10 and the connections shown in Table
7.
The Common (C) connection terminals on the Digital Input connector and Digital Output
connector are at the same potential as the power supply ground.
Figure 9: Digital Input circuit and connector.
Pin Name Direction Description
1 C - Common
2 1 In Input #1
3 C - Common
4 2 In Input #2
Table 6: Digital Input connections.
Figure 10: Digital Output circuit connector.
Pin Name Direction Description
1 C - Common
2 1 Out Output #1
3 C - Common
4 2 Out Output #2
Table 7: Digital Output connections.
Page 11 of 186
Page 13
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
4.8 Factory Default Reset Switch
The factory default reset switch is used to restore the configuration of the Series 2000 to the factory defaults. The switch
is accessed through a small hole on the rear of the unit adjacent to the power connector, refer to Figure 11. To reset the
configuration first power down the unit then using a suitable tool depress the factory default reset switch, restore power
to the unit ensuring the switch remains depressed for approximately 5 seconds after power is applied. The status and
signal strength indicators will flash red then green to indicate the configuration has been reset. The modem will re-boot
as normal with the factory default settings.
Figure 11: Factory Default Switch access.
Using the Factory Default Reset Switch will erase all existing configuration settings and restore
the factory default settings. This includes the network connection profile settings APN, user
name and password.
Page 12 of 186
Page 14
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
5 Installation
The steps required to install theSeries 2000 3G Modem / Router are described. Although the images used show the Model
2100 the instructions apply to all models in the Series 2000 product range.
The Series 2000 3G Modem / Router should be mounted in a clean and dry location, protected
from water, excessive dust, corrosive fumes, extremes of temperature and direct sunlight. The
unit uses convection cooling, allow sufficient ventilation to ensure adequate cooling of the
modem.
5.1 Panel Mounting
The Series 2000 3G Modem / Router includes integrated mounting flanges and can be attached to a panel or tray by means
of screws, using the slots shown in figure 12.
Do not drill or file the mounting flanges as this may damage the unit and will void the warranty.
Figure 12: Mounting flange.
5.2 DIN Rail Mounting
The Series 2000 may be DIN rail mounted, using the DIN rail mounting kit supplied. The DIN rail clips should be screwed
to the mounting flanges as shown in figure 13. The DIN rail clips can then be used to attach the Series 2000 to a DIN rail.
Figure 13: DIN Rail mounting.
Page 13 of 186
Page 15
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
5.3 Installing the SIM Card
Before removing or inserting the SIM card, ensure that the power has been turned off and the
power connector has been removed from the unit.
Damage may result to the unit if excessive force is used to remove the SIM drawer.
• Do not use excessive force when pressing the SIM drawer eject button.
• Do not press or lever the SIM drawer, press only the SIM drawer eject button to remove the
SIM drawer and SIM Card.
The SIM card drawer is located on the rear of the unit.
• The SIM card drawer eject button is a small yellow button located next to the SIM drawer on the rear panel of the
Series 2000 . Refer to the image on the left of Figure 14 for the location of the SIM card eject button. To eject the
SIM card drawer press the SIM card drawer eject button using a suitable tool and remove the drawer.
Figure 14: SIM card eject button.
• Insert the SIM card into the SIM card drawer with the contacts facing up, as shown on the right of Figure 14.
• Slid the drawer back into the unit ensuring that it locks into place.
5.4 Antenna
The antenna connectors on the Series 2000 are of SMA type and found on the rear of the unit. The supplied antennae
are intended for direct mounting to the SMA connectors. Attach the antenna as shown in Figure 15. Ensure that the
connecting nut is done up tightly in order to make a good connection.
Figure 15: Antenna connected to SMA connector.
Page 14 of 186
Page 16
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
5.5 Power Supply
The Series 2000 requires a DC power source in the voltage range of +10VDC to +60VDC. The power connector accepts
a screw terminal plug which should be wired as shown in figure 16 and plugged into the power connector on the rear of
the unit.
Figure 16: Power plug wiring and Power connector.
The Series 2000 is designed to self protect from permanent damage if the voltage exceeds
60VDC or if reverse polarity is applied. In the case of either event the modem may need to be
returned for service.
The Series 2000 may be damaged if there is any potential difference between the chassis-ground,
RS232 signal ground, power (-) input, or antenna shield. Before connecting any wiring, ensure
all components are earthed to a common ground point. An external isolator will be required if a
positive earth power supply is used.
5.6 Functional Earth
This equipment is intended to be grounded to comply with emission and immunity requirements. Ensure that the functional earth lug is connected to earth ground during normal use. Figure 17 shows the location of the Functional earth
termination point.
Figure 17: Functional ground lug.
Page 15 of 186
Page 17
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
6 Accessing the Web Interface
This section descibes how to connect to the web interface of the Series 2000 3G Modem / Router. As all configuration of
the Series 2000 3G Modem / Router is performed via the web interface establishing a connection to the web interface is
the first step in configuring the device.
The web interface can be accessed from any interface which supports TCP/IP and provides support for both the HTTP
and HTTPS protocols. The description which follows describes accessing the web interface via the Ethernet interface.
It is also possible to access the wen interface via the wireless interface however to do this the firewall will need to be
configured to allow incoming connections.
For best results it is recommend that a modern web browser be used with JavaScript enabled. The web
interface makes use of JavaScript although it is possible to use a browser with JavaScript disabled not
all functionality will be supported.
Due to security issue and lack of support for web standards Internet Explorer 6 is not recommened.
Although the Series 2000 3G Modem / Router supports IE6 not all features are fully supported.
6.1 Computer Settings
In order to view the web pages a computer with a fixed IP address, on the same sub-net as the Series 2000 3G Modem /
Router, will need to be connected to one of the LAN ports.
• The default IP settings of the Series 2000 3G Modem / Router are:
◦ IP Address: 10.10.10.10
◦ Netmask: 255.255.255.0
• The recommended IP settings for the PC used to configure the Series 2000 3G Modem / Router are:
◦ IP Address: 10.10.10.20
◦ Netmask: 255.255.255.0
◦ Default Gateway: 10.10.10.10
◦ Primary DNS: 10.10.10.10
Although it is possible to connect the Series 2000 3G Modem / Router directly to a Local Area
Network (LAN) it is recommend that the network configuration as described in this section be
performed prior to doing so.
6.2 Windows PC Network Settings
The following describes how to configure the network settings of a Windows XP PC with the IP settings listed above, so
that it can access the Series 2000 3G Modem / Router.
This procedure will change the network settings of the Windows PC, if the PC is connected to a
network the connection should be removed before performing the changes. To restore the network
settings of the PC record the current settings at Step 6 in the following procedure, then when the Series
2000 3G Modem / Router has been configured following the procedure again and use the recorded
values at Step 6.
Page 16 of 186
Page 18
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
1. Open the Control Panel by selecting Start . Control Panel.
2. Double click the Network Connections icon.
3. Double click the Network icon.
4. The Local Area Connection Status dialog box will be displayed, as shown on the left of Figure 18, click the Prop-
erties button.
Figure 18: Local Area Connection Status and Properties dialog boxes.
5. The Local Area Connection Properties dialog box, as shown on the right of Figure 18, will be displayed. Click on
Internet Protocol (TCP/IP) to highlight it and then click the Properties button.
6. The Internet Protocol (TCP/IP) Properties dialog box, change the settings to match those shown in Figure 19, and
then click “OK”
Page 17 of 186
Page 19
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 19: Internet Protocol (TCP/IP) Properties dialog box showing the recommended IP settings.
Note: If a web browser was open prior to making the network changes, then it will need to closed and re-started before
attempting to connect to the Series 2000 3G Modem / Router.
6.3 Connecting to the Series 2000 Web Server
• Open a web browser on the PC and browse to 10.10.10.10 (the default Series 2000, IP address) .
• A login box similar to Figure 20 will pop up. If the box fails to display, re-check the cable connections to the unit
and the IP address settings of the PC.
• Enter the following login details:
◦ User Name: admin
◦ Password: admin
• The Status summary page will be displayed, it will be similar to Figure 21.
Note: As the unit has not yet been configured it is likely that some faults will be indicated.
Figure 20: Series 2000 Web login box
Page 18 of 186
Page 20
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 21: Series 2000 Status summary
Page 19 of 186
Page 21
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
7 Web Page Layout
This chapter describes the web page layout and menu structure. The pages are arranged in functional groups accessible
via the main menu. For each main menu a number of sub-menu pages provide access to specific information and setting.
When a main menu item is select the first sub-menu page is automatically displayed.
This section does not described how to connect to the web interface of the device. For information on connecting to the
web server of the device refer to Section 6
7.1 Page Layout
To illustrate the page layout the Status web page is shown in figure 22, this is first page to be displayed when a connection
to the web server is established. At the top of the page, under the Cybertec logo is the menu which consists of two rows
of tabs. The top row is the main menu, the sub-menu tab row is directly under the main menu. The main menu tabs are
used to select a group of related pages and the sub-menu is used to select a page within that group. When a main menu
tab is selected the sub-menu option tabs will change allowing individual pages within the group to be selected.
Below the menu is the page title. The title indicates the selected page. Below the title is the page body. This section will
contain information and/or configuration settings for the selected function.
Figure 22: Web Page structure
When a menu item is referenced in the manual it is in the form: Menu . Sub-Menu. For example:
Status . Alarms would refer to the Status / Alarms page shown in Figure 22.
7.2 Menu Structure
The section provides a brief description for each of the main menu tabs and for each sub-menu tab.
Page 20 of 186
Page 22
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
7.2.1 Status
The Status tab is used to report the current operating status of the Series 2000 3G Modem / Router .
Figure 23: Status menu
Alarms A summary of the alarm status.
Wireless Reports the status of the wireless connection.
LAN Information on the LAN settings
VPN Reports the status of any active VPNs
Serial Server Provides and overview of the Serial Server and serial ports.
GPIO (2220 only) Reports state of I/O and sets states of outputs.
System Log A log of the system messages.
7.2.2 System
The System tab provides system level information and configuration for the Series 2000 3G Modem / Router .
Figure 24: System menu
Administration Set hostname, configure the NTP connection, change passwords, set timed re-boot and reboot the mo-
dem.
Backup & Upgrade Backup and restore the configuration, upgrade the Series 2000 3G Modem / Router firmware.
System Information Reports model number, serial number, firmware versions, MAC address and wireless IMEI & IMSI.
Power Configure the power controller for automatic power shutdown and start-up.
GPIO (2220 only) Configure the digital I/O.
7.2.3 Wireless
The Wireless tab provides access to the wireless settings of the Series 2000 3G Modem / Router .
Figure 25: Wireless menu
Page 21 of 186
Page 23
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Network Operating mode, frequency band selection and SIM card PIN settings.
Packet Mode Profile management and selection, connection state selection.
Connection Management Connection establishment and maintenance options.
Circuit Switched Mode Circuit Switched Data (CSD) mode selection and configuration.
SMS SMS triggers and access control.
7.2.4 Network
The Network tab is used to access the Local Area Network (LAN), Dynamic Host Configuration Protocol (DHCP) and
DNS settings.
Figure 26: Network menu
LAN LAN and DHCP settings.
DNS Manual and Dynamic DNS settings.
GRE Generic Routing Protocol settings.
Diagnostics Verify network connectivity with Ping and Traceroute.
7.2.5 Routing
The Series 2000 3G Modem / Router supports static and dynamic routing as well as policy and Quality of Service (QoS)
based routing. Routing options are accessed via the Routing tab.
Figure 27: Routing menu
Default & Static Define the default route and static routes.
Dynamic Dynamic routing options.
VRRP Configure the Virtual Routing Redundancy Protocol.
Policy Define policy based routes.
QoS Quality of Service (QoS) options and define QoS routes.
Page 22 of 186
Page 24
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
7.2.6 Firewall
The Firewall tab allows configuration of the Series 2000 3G Modem / Router firewall settings which include the definition
of port forwards and packet filters.
Figure 28: Firewall menu
Setup Enable NAPT, stateful packet inspection and connection tracking options.
Access Control Define which modem services can be accessed from the wireless interface and VPN tunnels.
DoS Filters Define with Denial of Service filters are enabled.
Custom Filters Define and edit custom packet filters.
Port Forwards Define and edit port forwards.
Custom NAT Define and edit custom Network Address Translation rules.
MAC Filters LAN MAC Address filtering options.
7.2.7 VPN
The VPN tab provides access to the configuration for the SSL, IPsec, PPTP and L2TP VPNs.
Figure 29: VPN menu
IPsec VPN Enable and configure IPsec VPN tunnels.
SSL VPN Enable and configure SSL based VPN (OpenVPN).
PPTP & L2TP Enable and configure PPTP and L2TP VPN tunnels.
Certificate VPN certificate management.
7.2.8 Serial Server
The Serial Server tab is used to access the configuration options for the serial server and each of the available serial ports.
Figure 30: Serial Server menu
Port Setup Configure the serial server port function and configuration options for each of the available serial ports.
Phone Book Modem dial string phone book management.
Page 23 of 186
Page 25
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
7.2.9 Management
The Management tab provides access to the management settings of the Series 2000 3G Modem / Router .
Figure 31: Serial Server menu
Events Configure the actions taken when an event occurs.
SNMP Configure SNMP parameters.
DNP3 Configure the internal DNP3 outstation.
Email Email server configuration.
7.3 Symbols
The following symbols are used on the web pages:
Edit Icon. Click this icon to edit the indicated setting.
Delete Icon. Click this icon to delete a setting.
Reset Button. Click this button to reset the values on the page to the values prior to editing.
Update Button. Click this button to save changes.
Page 24 of 186
Page 26
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
8 Basic Configuration
The section explains the procedure to configure the Series 2000 3G Modem / Router for basic packet mode functionality.
For details on configuring the modem for Circuit Switched mode and for more advanced configuration refer to the Series
2000 3G Modem / Router User Manual.
8.1 Configure the Wireless interface
To access the configuration page for the Wireless interface, click on Wireless, the Wireless Network configuration page
will be displayed as shown in Figure 32.
Figure 32: Wireless Network configuration.
8.1.1 Network Configuration
The “Network Configuration” section contains the settings for the operational mode of the modem. The default settings
with Operating mode set to Packet mode (HSPA/GPRS) will be adequate for a standard Internet type connection.
8.1.2 Setting the SIM card PIN
The SIM card may have a PIN associated with it and my require the PIN to be entered before the modem can access the
SIM. To set the SIM PIN click “Setup”. A dialog box will be displayed, similar to that shown in figure 33, set the field
marked “Enter when requested” to “Yes” and enter the PIN in the “New PIN” and “Confirm PIN” entry boxes. Then click
the “Set” button to save the PIN.
Page 25 of 186
Page 27
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 33: SIM PIN control dialog.
8.1.3 Adding a Network Connection Profile
To access the wireless packet mode settings click on the “Packet mode” tab. The screen shown in Figure 34 will be
displayed. The page shows the connection configuration details and is divided into two sections. The first section shows
the current connection state and the selected profile and the second section lists the available profiles. A connection
profile groups together the settings required to connect to a provider’s network, theSeries 2000 3G Modem / Router
allows multiple profiles to be configured to allow quick changes to the network connection settings. For most applications
only one profile is required.
Figure 34: Wireless Interface Packet mode settings.
To configure a network profile click the “Add new profile” button, a page similar to Figure 35 will be displayed. The
network provider will provide some or all of the configuration items listed below, depending on the type of connection
provided. The values provided should be entered into the appropriate fields. A standard “Internet” type connection will
usually only require the APN.
• APN (Access Point Name)
• Dial string
• Authentication (None / PAP / CHAP)
• Username
• Password
In order to set a password click the check-box marked New. The password can now be entered in the
text field. The password is visible as it is being typed so that it can be checked for errors prior to being
set. Once set the password will no longer be visible.
Page 26 of 186
Page 28
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
The network service provider may not supply a username and password if network authentication is
not required. In this case set the Authentication to “None”, leave the username blank and do not set a
password.
Figure 35: Adding a new profile.
Once the data has been entered click the “Update” bottom to add the profile. The screen will now change to show the
newly added profile as this is the only profile entered it will be automatically selected as the current profile and the profile
entry will be shaded green to indicate that it is the selected profile.
8.1.4 Enable the Wireless Connection
To complete the configuration of the wireless connection, set the Connection state to “Always connect” and click the
“Update” button to save the changes. Once the changes have been set, the Series 2000 3G Modem / Router will attempt
to establish a connection to a wireless network. The connection time will vary and may take several minutes to complete.
Figure 36 shows the completed wireless configuration.
Figure 36: Completed wireless configuration.
Page 27 of 186
Page 29
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
8.1.5 Connection Status
To check the status of the connection select “Status” from the top level menu and then select “Wireless” from the second
level menu. The Wireless status page will be displayed. The status of the connection will change as the modem connects
to the network, first it will report “Checking” then “Connecting” and finally “Connected”. To see the value changing the
page will need to be refreshed. Once connected the Wireless status page will look similar to that shown in Figure 37.
Figure 37: Wireless Status showing a modem in the connected state.
During initialisation the status may be reported as “Error” while the connection is being established. If
the error persists check the profile settings have been entered correctly. Refer to Section 8.1.3.
With the Wireless network connection established the Status Alarms page should now indicate no faults as shown in
Figure 38.
Figure 38: Status Alarms page.
Page 28 of 186
Page 30
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
8.2 Configure the LAN interface and DHCP Server
To access the configuration page for the LAN interface and DHCP Server, select Interfaces from the top level menu the
LAN interface screen similar to that shown in Figure 39 will be shown.
Figure 39: LAN Interface configuration
8.2.1 Setting the IP Address
If it is desired to change the IP address of the LAN port, follow the steps below:
• Enter the new IP address and netmask in the Interface Configuration table.
• Click Update to set the changes. Once the changes have been set, the IP address of the Series 2000 3G Modem /
Router will change. Enter the new address in the browser on the PC. It will be necessary to login again, following
the procedure described in the previous section.
8.2.2 Enabling DHCP
The DHCP server allows clients on the local network to be automatically allocated IP addresses from the Series 2000 3G
Modem / Router. DHCP also provides the clients with network settings such as default route and location of DNS servers.
By default the DHCP server is disabled however it has been configured to serve IP addresses in the range 10.10.10.100
through 10.10.10.200, and the Default and Maximum lease times have been set to 1440 minutes. So if these values are
consistent with the network to which the Series 2000 3G Modem / Router is connected, then the DHCP server can be
enabled by setting the Enabled field to ’Yes’ and clicking the Update button.
If the standard settings are not applicable for the connected network, then refer to Figure 40 and follow the steps below,
to configure the DHCP server:
• Choose a group of available IP addresses on the local network. For example, if the IP address of the Series 2000
3G Modem / Router is 10.10.10.10 with a netmask of 255.255.255.0, a group chosen could be 10.10.10.100 to
10.10.10.200. This will provide 101 addresses for clients.
• Under the DHCP Server Configuration table,
◦ Set the Enabled option to Yes.
◦ Enter the first address of the group in the Start Address box.
◦ Enter the last address of the group in the End Address box.
Page 29 of 186
Page 31
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
◦ Enter a lease time for the Default Lease time.
◦ Enter a lease time for the Maximum Lease time.
• Click Update to set the changes.
Figure 40: DHCP configuration.
8.3 Configure clients to use the Series 2000 3G Modem / Router
The Series 2000 3G Modem / Router will act as a gateway for connections destined over the wireless interface. The
default configuration will provide Network Address Translation and firewalling to protect clients on the local network.
To configure clients to use the Series 2000 3G Modem / Router as the default gateway:
• If the clients have a DHCP address allocated by the Series 2000 3G Modem / Router, they will have learned the
necessary settings. No further configuration is needed.
• If clients have static IP addresses, set their default route and DNS server to the IP address of the Series 2000 3G
Modem / Router .
Page 30 of 186
Page 32
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
9 Status
The Status pages provides access to status reporting for various service of the Series 2000 3G Modem / Router . If the
device is not working correctly these pages will help diagnose the problem. Regular checking and refreshing of these
pages is recommended to ensure all services are operating correctly. To access the status pages click Status on the main
menu a page similar to the one shown in Figure 42 will be displayed.
Figure 41: Main status page.
9.1 Alarms
The Status Alarms page is the first page displayed default page once connected to the device, it can also be selected at any
time by clicking Status . Alarms. This page provides a summary of the state of the operating services. A service which
is operating correctly will be highlighted green, a service with any error will be highlighted red, services not enabled will
be shown with a gray background.
Page 31 of 186
Page 33
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 42: Alarms status page showing Wireless connection status fault.
The page is divided into sections representing the status of system level services, the Wireless and LAN interfaces and
other services. If a fault is indicated further information can be obtained from the corresponding status page. For example
in Figure 42 a fault is indicated for Connection Status in the Wireless section, further information on the fault can be
obtained by selecting the Status . Wireless page. Details are shown in the next section.
9.1.1 System
Power On Self Test Indicates the result of the self testing done during the boot sequence. An error would usually indicate
a hardware fault and the unit should be returned for service.
Temperature Indicates the current, minimum and maximum operating temperatures.
Uptime Indicates the current running time.
9.1.2 Wireless
Network Status Indicates the current wireless network connection status.
Connection Status Indicates the current wireless packet or circuit switched data (CSD) connection status.
Further information can be obtained from the Status . Wireless page.
9.1.3 Network
LAN Indicates the status of the Local Area Network (LAN).
Further information can be obtained from the Status . LAN page.
9.1.4 Services
DHCP Server Indicates the status of the Dynamic Host Configuration Protocol (DHCP) server. Further information can
be obtained from the Status . LAN page.
VPN Indicates the status of the any Virtual Private Networks. Further information can be obtained from the Status .
VPN page.
Serial Server Indicates the status of the Serial Server. Further information can be obtained from the Status . Serial Server
page.
Page 32 of 186
Page 34
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
9.2 Wireless
The Wireless status page (Status . Wireless) provides details of the current operating state of the wireless interface. The
page displayed will depend on the wireless operating mode, Figure 43 shows the page for packet mode, while Figure 44
for Circuit Switched Data (CSD) mode. For information on the different wireless operating modes refer to Section 11.
9.2.1 Network Status
The network status section is common for both modes of wireless operation.
Network Registration Indicates the network registration state.
RF Level (RSSI) Provides an indication of the RF Level or Received Signal Strength Indication (RSSI). The RSSI is a
number out of 30 which gives and indication of signal received level. The actual received level is also indicated as
a value in dBm.
Provider Indicates the network service provider name and service, the location ID and the cell ID.
Figure 43: Wireless status page for packet mode.
9.2.2 Connection Status (Packet Mode)
Status The packet connection status.
Current Session Time Time the current packet session has been active.
Total Session Time The total packet session time since boot.
IP Address The wireless IP address
Packets Received The total number of packets received.
Bytes Received The total number of bytes received.
Packets Transmitted The total number of packets transmitted.
Bytes Transmitted The total number of bytes transmitted.
Page 33 of 186
Page 35
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 44: Wireless status page for Circuit Switched Data (CSD) mode.
9.2.3 Connection Status (Packet Mode)
Line State The current status of the connection either offline or connected.
Last Dial Result The result of the last dial attempt.
Data Sessions The number of successful connections.
Current Session Time Time the current connection has been active.
Total Session Time The total time of all connections since boot.
Bytes Received The total number of bytes received.
Bytes Transmitted The total number of bytes transmitted.
9.2.4 Connection Status Fault
Continuing the fault example from Section 9.1, Figure 45 shows a Connection Status error for a packet mode connection.
The error is due a configuration error, indicating that the wireless packet mode settings need to be checked. For details on
the configuring the wireless interface refer to Section 11.
Figure 45: Wireless status page for packet mode displaying a connection error.
Page 34 of 186
Page 36
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
9.3 Local Area Network (LAN)
The Local Area Network (LAN) status page (Status. LAN) provides details of the current operating state of the LAN or
Ethernet interface. The page is divided into two sections, the first contains the interface statistics and the second has the
DHCP Lease information. The DHCP Lease information will only be displayed if the DHCP server is enabled.
Figure 46: LAN Status page.
9.3.1 LAN Statistics
Status The status of the interface.
IP Address The IP address if the interface
Netmask The netmask of the interface
Packets Received The total number of packets received.
Bytes Received The total number of bytes received.
Packets Transmitted The total number of packets transmitted.
Bytes Transmitted The total number of bytes transmitted.
9.3.2 DHCP Server Leases
IP Address The assigned IP address.
MAC Address The MAC address of the device which requested the lease.
Hostname The reported hostname of the device which requested the lease.
Expires The lease expiry time.
9.4 Virtual Private Network (VPN)
9.5 Serial Server
9.6 General Purpose Input / Output (GPIO)
9.7 System Log
The system log provides a list of messages from various services. The messages are time and date stamped.
Page 35 of 186
Page 37
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 47: System Log page.
Page 36 of 186
Page 38
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
10 System
The System section provides configuration options and access to features to allow the administration and maintenance of
the Cybertec Series 2000 3G Modem / Router . Options which can be configured include:
• Host-name for the device.
• Time and Date settings.
• Edit users and passwords
• RADIUS server.
• Shut-down and re-boot.
• Save and restore the device configuration.
• Update the device firmware.
• View device information, serial number, MAC address etc.
• Power controller.
• General Purpose Input and Output (GPIO), available on the Model 2220only.
The System pages are accessed by clicking System on the main menu.
10.1 Administration
The main Administration page is the default page and will be displayed when System is selected from the main menu.
It can also be selected by the menu combination System . Administration at any time. A page similar to that shown in
figure 48 will be displayed.
Figure 48: System Administration page.
Page 37 of 186
Page 39
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
10.1.1 Setting the system hostname
The hostname for the modem can be set in the Hostname field. The hostname is limited to 32 characters and can only
contain letters, numbers, hyphens and underscores. The hostname is displayed on this page, reported via SNMP and used
in system-generated SMS messages.
10.1.2 Setting the time and date
The time and date can either be set manually or configured to read the current time from a network time server using the
NTP protocol.
To enable NTP, set the checkbox in the Check time with NTP server & address field and enter the IP address or hostname
of an NTP server in the text field. To correctly adjust the time from the NTP server to the local timezone, the Timezone
must be set. Select the appropriate number of hours from the drop-down list.
To manually set the time click the Set Time button, a popup box will be displayed similar to that shown in Figure 49.
Adjust the time and date to the desired settings and click the Set button to save.
Figure 49: Manually setting the time and date.
10.1.3 Editing users and passwords
To change the passwords used for modem access or to enable RADIUS authentication, click the icon in the Edit users
and passwords field. A page similar to that shown in Figure x will be displayed.
Figure 50: Administration page to change user passwords and to configure RADIUS.
Page 38 of 186
Page 40
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
10.1.3.1 Changing basic user passwords
The Series 2000 3G Modem / Router provides two users, each with different access levels:
admin The admin user can view and change the configuration of the modem and view the status.
guest The guest user can view the configuration and status of the modem.
The passwords for these users are set using the Set access passwords table.
To change a user’s password, use the drop-down box in the User column to select the appropriate user. Then, enter the
Current password for the user, followed by the New password, repeated to avoid errors in the Confirm password field.
Click Update to confirm the changes.
10.1.3.2 Enabling RADIUS authentication
The Series 2000 3G Modem / Router can also authenticate users against a RADIUS server. The fields below need to
be correctly configured to enable this feature. The RADIUS server administrator will be able to provide the necessary
information.
Enabled Set this field to enable RADIUS authentication.
Server address Enter the IP address of the RADIUS server.
Server port Enter the IP port of the RADIUS server. This is normally 1812 or 1645.
Shared secret This is a password that is used to encrypt traffic sent to the RADIUS server. To set this field, click the
New checkbox and enter the secret in the text field.
Default group to assign users to If the RADIUS server fails to provide information regarding the access level of a newly
authenticated user, the default set in this field will be used.
RADIUS attribute Service-Type (6) is used to determine the access level of a user. A user with ServiceType set to Administrative-User (6) will be granted the admin access level. A user with Service-Type
set to NAS-Prompt (7) will be granted the guest access level.
10.1.4 Setting a timed reboot
In some applications, it may be desirable for the Series 2000 3G Modem / Router reboot at a timed interval to catch any
errors that may have occurred. To enable this feature, enter a time (in hours) in the Timed reboot field. Once the modem
has run for the number of hours entered, it will reboot and start the system again. To disable this feature, set the field to 0.
The use of the timed reboot feature is not recommended. The device continuously monitors the operating conditions and network status, if a fault is detected corrective action is taken in order to re-establish
network connections. Using the connection management features details in Section 11 will provide a
more reliable and stable solution.
10.1.5 Shutdown
A shutdown disconnects the device from the 3G network and terminates all internal processes prior to the power being
removed. A shutdown of the Series 2000 3G Modem / Router can be initalised by clicking the Shutdown button. This will
terminated all processors and close all connections, the power supplies will then be turned off. The complete shutdown
will take approximately 2 minutes. The power will remain off for approximately 1 minute, during this time the power
can safely be removed. After this time if the power is still connected the device will start up again and resume normal
operation.
Page 39 of 186
Page 41
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
10.1.6 Rebooting the modem
To reboot the Series 2000 3G Modem / Router , click the Reboot button and confirm the action in the dialog box that
appears. The reboot will take around 75 seconds.
The power supplies remain on during a reboot, this differs from a shutdown where the power supplies
are turned off.
10.1.7 Update & Reset
After completing configuration changes, click the Update button to save the changes, or click the Reset button to clear
any changes.
10.2 Backup & Upgrade
This section describes how to save the current modem configuration, restore a saved configuration and update the Series
2000 3G Modem / Router firmware.
To access the Backup & Upgrade options select System . Backup & Upgrade. The Backup & Upgrade page will be
displayed as shown in figure 51.
Figure 51: Backup and Upgrade page
10.2.1 Backing up the current configuration
The configuration of the Series 2000 can be saved as a file to a PC. This file can then be used to restore the configuration
of the unit at some later time or used to configure multiple units with the same configuration.
To save the current configuration click on the link in the section titled Backup current configuration. A pop-up box
similar to that shown in figure 52 will be displayed. Select Save to Disk and click OK. Select a suitable location to save
the file.
Page 40 of 186
Page 42
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 52: Saving the configuration
10.2.2 Restoring a saved configuration
To restore a configuration, click the Browse button in the section titled Restore a saved configuration. Select the
configuration file, which will then be shown in the text box, as shown highlighted in figure 53. Click the Upload button
to transfer the file to the Series 2000 .
Once the upload is complete, the Series 2000 must be rebooted immediately so the restored configuration can take affect. The details for performing a reboot can be found in Section 10.1.6
above.
Do not make any changes to configuration prior to rebooting.
Figure 53: Restore configuration
10.2.3 Upgrading the modem firmware
The Series 2000 firmware can be upgraded via the web interface.
To upgrade the Series 2000 firmware, click the Browse button in the section titled Upgrade Series 2000 firmware then
navigate to and select the upgrade file. Once selected, the filename will display as shown highlighted in Figure 54.
Page 41 of 186
Page 43
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 54: Select firmware upgrade file
To initiate the upload of the file to the Series 2000 click the Upload button. The file will now be uploaded to the Series
2000 . The upload may take from several seconds to several minutes depending on the speed of the link the upgrade file
is transferred over. When the upload is complete, information on the upgrade file will be displayed, as shown in Figure
55. At this point the you can chose to cancel the upgrade by clicking the Cancel Upgrade button.
Figure 55: Upload the upgrade file
To proceed with the upgrade click the Upgrade button. The page will change to that shown in figure 56. The firmware
upgrade will now proceed.
The upgrade will take several minutes to complete after which time the Series 2000 will reboot.
During this time the power to the Series 2000 must not be removed.
Page 42 of 186
Page 44
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 56: Upload the upgrade file
10.3 System Information
The Series 2000 System Information is accessed by selecting System . Information. An example of the System Information page is shown in figure 57. The first section of the page lists the model and serial number of the unit, plus the
firmware and boot loader version. The second part of the page lists the LAN MAC address the IMEI of the wireless
module and the wireless IMSI.
Figure 57: System Information page
10.4 Power
The power controller may be used to power the Series 2000 3G Modem / Router on and off at specified times. By using
the power controller the power consumption can be greatly reduced at times when a network connection is not required.
The power controller options are on System . Power page, which is shown in Figure 58.
Page 43 of 186
Page 45
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 58: The Power Control Schedule configuration page.
For the power controller to work correctly power must be maintained to the unit at all times. During
the power off times the power consumption will drop to approximately 10mA. This power is required
to maintain the timer circuitry which determines when the unit should again be powered on. If during
an power off time the power is removed from the unit the timer count is lost. When power is re-applied
the unit will boot as normal, the timer will be re-initalised and determine if it should remain powered
on or enter the power off state.
10.4.1 Configuring Power Control Schedule
The configuration options are:
Enabled Enable the power controller be checking the box.
Cycle time Selected the required cycle time from the drop-down list.
On time Select duration for which the power is on.
Cycle_start_time Select the time, offset from start of the cycle, at which the power is turn on.
Power off maximum offset If enable specifies an offset time which is applied if the unit re-powers prior to the scheduled
power on time.
The controller works on the basis of a cycle, the duration of the cycle can be set for a maximum of 24 hours to a minimum
of 30 minutes. Irrespective of the cycle duration the first cycle begins at midnight subsequent cycles begin straight after
the previous cycle. For example if the cycle time is set to 6 hours, the first cycle starts at 12:00am, the second at 06:00am,
the third at 12:00pm, the forth at 6pm and so on.
The period for which the unit is powered is set as the on time this time can be set to a maximum of 5 minutes less then the
cycle time. If this value is set to 0 in will default to the maximum on time of 5 minutes less than the cycle time. The time
at which the powered duration begins relative to the start of the cycle is specified as the cycle start time. For example if
the On time is set to 30 minutes and the Cycle start time is set to 1 hour the unit will be off for the first hour of the cycle,
it will then be powered on for 30 minutes and then remain off for the rest of the cycle.
Once the configuration has been completed click Update to save changes.
10.4.2 Power Control Schedule Example
Example 1
The unit is required to powered on at 2:00am and again at 2:00pm for a duration of one hour.
As there are two power on times per day the cycle time required is 12 hours. The On time is 1 hours and the Cycle start
time is 2 hours. The required settings are shown in Figure 59.
Page 44 of 186
Page 46
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 59: Power Control Schedule configuration example
Example 2
The unit is required to be power on from 5:45am to 6:15am each day. If the power to the unit fails and is return at 5:30am
or later it is to remain on until normal power off time.
In this example as the unit is only powered once per day the Cycle time required is 24 hours. The On time is the duration
from the power on time and the power off time which is 30 minutes. The Cycle start time is 5 hours and 45 minutes which
is the time from midnight to the power on time. The Power maximum offset is enable and the time set to 15 minutes. The
configuration is shown in Figure 60.
Figure 60: Power Control Schedule configuration example.
10.5 General Purpose Inputs and Outputs (GPIO) (Model 2220only)
The General Purpose Inputs and Outputs (GPIO) provide the Series 2000 3G Modem / Router with a way in which to
monitor and control external devices. The inputs may be used to trigger events such as ending an SMS or SNMP trap.
While the outputs can be changed as a result of an event such as the receipt of an SMS. The GPIO options are on System .
GPIO page, which is shown in Figure 61.
Page 45 of 186
Page 47
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 61: The GPIO configuration page.
10.5.1 GPIO Configuration
The GPIO Configuration of the page is used to configure the individual inputs and outputs. The options are:
Type This field describes the I/O type and is one of:
Input The I/O is an input.
Output The I/O is an output.
Index This is the index of the I/O and is referenced for each type. This index matches the hardware index for the I/O.
Label A text label for the I/O.
Enabled Check to enable to I/O
Default State The default state for an output. This is state the output will transition to when the unit powers up or
re-boots. This field is not applicable for inputs. The state can either be:
Open The output is in the open or off state.
Closed The output is in the closed or on state.
Once the configuration has been completed click Update to save changes.
The state of the outputs when the unit is powered off and when it commences the boot process will be
open. The default state will be applied during the boot sequence. This means that if an output is set to
a default state of Closed then it will initially be Open then transition to Closed during power up.
When the unit is powered off or in low power mode, refer to Section 10.4 on page 43 the outputs will
be in the Open state.
Page 46 of 186
Page 48
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
10.5.2 General Configuration
The general configuration is used to configure the way in which the unit will respond to SMS. The options are:
SMS contents on event Should an input or output cause an SMS event to be generated, the value set in this field deter-
mines what the contents of the message will be. The values are:
No I/O No information about the current states of the GPIO will be added to the message.
I/O that generated event Only the current states of the GPIO that caused the event will be included in the message.
All I/O The current states of all of the GPIO will be included in the message.
SMS includes Indicates the text which will be sent as standard for each message. The fields are:
Hostname The hostname will be included as the first item in the message.
Extra text If checked the text entered in the text box will be sent as part of the message.
10.5.3 GPIO Example
In this example the two inputs will be enabled and labeled as Door Alarm and Temp Alarm to represent alarm inputs. The
hostname will be enabled and the Extra text field set to Test site. This configuration is shown in Figure 62.
Figure 62: The GPIO configuration example.
To enable an SMS to be sent on this trigger SMS events need to be configured in the management configuration. For
details on Management refer to 17 on page 174. Figure 63 shows both Input 1 and Input 2 have been enabled to send an
SMS when the alarm contacts are closed.
Page 47 of 186
Page 49
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 63: The GPIO SMS event configuration example.
If the alarms inputs are now closed the following SMSes will be sent:
First the Input-1 the Door alarm is closed:
S2000-ff-ff-00: Test site: Door alarm=closed,
Temp alarm=open
And now the Input-1 the Temp alarm is closed:
S2000-ff-ff-00: Test site: Door alarm=open,
Temp alarm=closed
Page 48 of 186
Page 50
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
11 Wireless
This section describes the 3G Wireless interface options of the Series 2000 3G Modem / Router . The Series 2000 supports
two modes of operation: packet mode and Circuit Switched Data (CSD) mode.
The subsections of the configuration are:
Network - Configure the operation mode, select the frequency band of operation and set the SIM PIN.
Packet mode - Configure the packet mode.
Circuit switched mode - Configure the circuit switched data mode.
SMS - Configure the Short Message Service (SMS) functionality of the modem.
11.1 Network Configuration
The Wireless Network options are used to set the operating mode, select the frequency band of operation and set the SIM
PIN. To display the Network page select Wireless from the main menu and Network from the sub-menu. The page should
appear similar to that of figure 64.
Figure 64: Wireless Network configuration
11.1.1 Selecting the wireless operating mode
The Series 1000 support three modes of operation for the wireless interface. The desired mode is set in the Operating
mode field. The options are detailed below.
Packet mode In packet mode the Series 2000 acts as a TCP/IP modem and router. The modem connects to the 3G
provider’s network and is allocated an IP address. Data can be routed between the LAN ports and the Wireless port.
The Serial Server is used to transport serial data over the packet interface.
Page 49 of 186
Page 51
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Circuit switched mode Circuit Switched Data mode is similar to a traditional dial-up modem. It is mainly intended for
the transport of serial data. Connections are established by dialing into the modem using a PSTN modem or dialing
out a call via AT commands on the serial port.
Disabled The internal RF circuitry of the modem is shutdown. No data connections are possible and the modem will not
receive SMS.
Once the mode has been selected click the Update button the commit the change.
11.1.2 Setting the SIM card PIN
The SIM card will have a PIN associated with it. If PIN checking is enabled on the SIM then in order for the modem to
access the SIM, the PIN will need to be set in the modem. To set the SIM PIN click Setup in the Set SIM PIN code row.
A dialog box as shown in Figure 65 will be displayed.
Figure 65: SIM PIN control dialog
Set the field marked Enter when requested to Yes and enter the PIN in the New PIN and Confirm PIN entry boxes.
Click the Set button to save the PIN. As shown in Figure 66.
Figure 66: SIM PIN control dialog
The dialog box will now be as shown in Figure 67, indicating that the current PIN is Set. click the close button to close
the dialog box.
Figure 67: SIM PIN control dialog
Page 50 of 186
Page 52
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
11.1.3 Selecting the operating frequency bands
The Series 2000 is capable of operating on several frequency bands used by the UMTS (3G) and GSM protocols.
The default setting is for the Series 2000 to operate on all supported frequency bands. This means that when powered on
the Series 2000 will start to search for available networks, checking first for UMTS (3G) networks then falling back to
GSM should the modem be unable to register with the network provider.
In some cases, it may be desirable to limit the frequency bands that are searched by the modem. For example, if the
network provider only has an 850Mhz UMTS network then the time to register and connect will be reduced if this is the
only band searched.
To facilitate band selection, the modem provides the Frequency Band Selection table. The following modes can be set:
All bands The modem will search all supported frequency bands.
Figure 68: Frequency Band Selection - All bands.
UMTS only The modem will only search supported UMTS (3G) frequency bands.
Figure 69: Frequency Band Selection - UMTS only.
GSM only The modem will only search supported GSM frequency bands.
Figure 70: Frequency Band Selection - GSM only.
Page 51 of 186
Page 53
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Custom The user can set checkboxes in the UMTS and GSM rows to select the frequency bands that will be searched.
Figure 71: Frequency Band Selection - Custom
Once any changes have been made to the frequency bands click the Update button the commit the changes.
11.2 Packet Mode Configuration
Before the modem can establish a packet connection, the details of the connection must be set up in a connection profile.
This section details the process of adding, editing and deleting a connection. While most configurations will only need
one profile, the modem can support multiple profiles. The active profile is selected via the web interface.
To access the packet mode configuration, select Wireless from the main menu and Packet Mode from the sub-menu. The
screen shown in Figure 72will be displayed.
Figure 72: Wireless Interface Packet mode settings
11.2.1 Adding Connection Profiles
To add a new profile, click the Add new profile button. The add entry page will display as shown in Figure 73.
Figure 73: Adding a new profile
Page 52 of 186
Page 54
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
The network provider will specify the required settings for completing a connection profile. The settings required are
listed below:
APN (Access Point Name) This is the name of the network provider’s access point.
Dial String The dial string used to establish a connection. This should not need to be changed from *99#.
Authentication For connections requiring a username and password to connect, this field sets the authentication protocol
used:
None No authentication is performed.
PAP The Password Authentication Protocol is used.
CHAP The Challenge-Handshake Authentication Protocol is used.
Username For connections with PAP or CHAP selected for authentication, this is the username the modem will use to
authenticate.
Password For connections with PAP or CHAP selected for authentication, this is the password the modem will use to
authenticate. In order to set a password click the check box marked New then enter the password in the adjacent
text field. The password is visible as it is being typed so that it can be checked for errors prior to being set. Once
set the password will no longer be visible.
The provider may not supply a username and password if network authentication is not required. In this
case set the Authentication to None.
Once the profile has been entered click the Update button to add the profile. The screen will now change to show the
added profile as shown in Figure 74.
Figure 74: Profile added and selected
11.2.2 Enabling a wireless connection
To complete the configuration of the wireless connection, the connection needs to be enabled. This is done by setting the
Connection state. There are two connection options available:
Always connect The modem will always attempt to establish a packet connection. This option should suit most applica-
tions.
Connect on demand The modem will wait for data to be queued for sending on the wireless port before establishing a
packet connection. After a period of inactivity the connection will be closed.
Page 53 of 186
Page 55
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Click Update to set the change to the connection state. Once the state has been set, the modem will attempt to establish a
connection.
Figure 75 shows an example of a completed packet mode configuration.
Figure 75: Completed wireless configuration
11.2.3 Adding Further Profiles
Additional profiles may be added by following the same process as above. Figures 76 and 77 show the result of adding a
second profile. Notice that the profile with Index 1 is highlighted green as it is the currently selected profile.
Figure 76: Adding a second profile.
Figure 77: List of profiles now listing 2 profiles.
Page 54 of 186
Page 56
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
To change the selected profile select the required index number from the Current profile drop down box in the Connection
Configuration section and click Update. The page will update and the selected index will now be highlighted. Figure 78
is an example with the second profile added above selected.
Figure 78: Second profile selected.
11.2.4 Editing a profile
To edit an existing profile click on the icon located in the Edit for the profile to be edited. Complete the changes to the
profile then click Update to commit the changes. Figure 79illustrates editing of the second profile, in this example the
authentication is changed from None to PAP and a Username and Password are added. The updated profile list is shown
in Figure 80.
Figure 79: Editing the second profile.
Figure 80: Profile list after editing the second profile.
Page 55 of 186
Page 57
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
11.2.5 Deleting a profile
A profile can be deleted by clicking the icon located in the Delete column for the profile to be deleted. Click OK
to confirm the deletion. Figure 81 the process of deleting a profile. In this example the second profile has been deleted.
After click OK the updated profile list appears as shown in Figure 82
Figure 81: Deleting the second profile.
Figure 82: Profile list after deleting the second profile.
11.2.6 Checking the status of the connection
To check the status of the connection select Status from the main menu and Wireless from the sub-menu. The wireless
status page will be displayed which will look similar to that shown in Figure 83. The status of the connection will change
as the modem connects to the network. The status will change through Checking, Connecting and finally Connected as a
connection is established. To see the value changing the page will need to be refreshed.
Page 56 of 186
Page 58
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 83: Wireless Status page
The section tiled Network Status details the quality of the service available from the 3G network.
• The SIM Card field will only be shown if an error with the SIM card has been detected, and will be reported as
Absent or faulty or PIN needed as shown highlighted in Figures 84 and 85.
◦ If the SIM card fault is reported, possible causes include:
• The SIM card has not be inserted correctly. Refer to section 5.3 on page 14, for details on how to insert
the SIM card.
• The SIM card pin number has not been entered or is incorrect. Refer to section 11.1.2 on page 50, for
details on entering the SIM card PIN.
Figure 84: Wireless Status page showing a SIM Absent fault.
Page 57 of 186
Page 59
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 85: Wireless Status page showing a SIM PIN required fault.
• The Network Registration field indicates whether the Series 2000 modem is actively registered to the 3G network.
No connection is possible without registration.
◦ If the network registration field is No, possible causes include:
• Poor signal strength. Check the antenna is properly connected and experiment with different locations
for the Series 2000 to achieve a higher RF Level.
• Problem with the SIM card. Ensure the SIM card fitted to the Series 2000 is currently enabled with the
network provider.
• The SIM card is not correctly enabled with the network provider. Verify with the provider that the SIM
is currently active.
• The RF Level indicates the current strength of received signal from the network, with a maximum of 30. Any level
over 10 should provide acceptable connection speeds.
The section titled Connection Status shows the statistics for the current connection.
• If the Status item doesn’t show Connected, verify the following:
◦ Connection state is Always connect in the packet mode configuration.
◦ If the Status field always shows Connecting..., a problem with the APN, username or password is likely.
Check that the values these settings with the network provider. Refer to Section 11.2.1 for details on how to
enter these values into the Series 2000 .
• The remaining fields list the length of time connected, IP address allocated by the network and data counters. All
of this information will reset if a connection is restarted, except the Total Session Time field, which will accumulate
across all sessions.
11.3 Connection Management
The Series 2000 has numerous options for managing the packet mode network connection. The purpose of connection
management is to create and maintain reliable connections that can detect errors and recover as quickly as possible. The
connection management is divided in two areas:
Connection establishment Determines how the modem manages the establishment of a connection to the network.
Connection_management Determines how the modem manages the connection to the network once established.
Page 58 of 186
Page 60
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
To access the connection management options, select Wireless from the main menu and Connection Management from
the sub-menu. The connection management page as shown in figure 86 will be displayed.
Figure 86: Wireless connection management
11.3.1 Connection Establishment
The connection establishment options are used to set the parameters for initial connection to a provider’s wireless network.
The options are:
Timeout for network initialisation Specify the maximum time in seconds to allow for a network initialisation. The
minimum value accepted is 60 Seconds.
Timeout for connection establishment Specify the maximum time in seconds to allow for a connection to be estab-
lished. The minimum value accepted is 30 Seconds.
Remote poll required for successful connection Specify if a remote poll should be completed before considering the
connection successful. The purpose of this option is to allow the modem to determine that not only has a network
connection been established but also that end-to-end connectivity exists. The modem does this by polling a remote
server using IMP (Ping) or a TCP socket connection. Should the poll fail, the modem retries at the interval specified
in Timeout between remote poll attempts until the Timeout for connection establishment expires. If this option
is set to Yes then the Remote Poll Setup must be enabled and configured correctly.
Timeout between remote poll attempts Specify the time in seconds to wait between successive polls should a poll fail.
This option is only available when the Remote poll required for successful connection option is set to Yes.
Page 59 of 186
Page 61
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Failed establishment attempts before RF restart Specify the number of failed connection attempts before restarting
the RF circuitry. Set this value to 0 to disable RF circuitry reset.
Failed establishment attempts before modem reboot Specify the number of failed connection attempts before resetting
the Series 2000 . Set this value to 0 to disable the Series 2000 reset.
Failed establishment attempts before dropping to CSD Specify the number of failed connection attempts before switch-
ing to Circuit Switched Data (CSD) mode. Set this value to 0 to disable the fail-over to CSD feature.
Time to spend in CSD Specify a time in minutes to remain in CSD mode before reverting to packet mode and attempting
to establish a connection. This value value is only used if the Failed establishment attempts before dropping to
CSD option is set to a value greater than 0.
11.3.2 Connection Maintenance
The connection maintenance refers to the tests employed by the Series 2000 to determine that a valid network connection
is available. Should the connection maintenance test fail then the Series 2000 will attempt to re-establish the connection.
The following options control connection maintenance:
Remote polling mode Specify the connection maintenance operating mode. Four modes are supported:
Disabled Connection maintenance is disabled.
Poll at fixed interval Poll the servers specified in the Remote Poll Setup at the interval specified.
Poll if Rx idle for interval Only poll the servers specified in the Remote Poll Setup when no data has been re-
ceived from the wireless interface for the specified interval.
Reconnect if Rx idle for interval Monitor the receive data and reconnect if no data has not been received by the
wireless interface for the specified interval. This mode is a good choice for configurations that already employ
polling traffic, such as when using the SSL VPN or IPsec VPN with dead peer detection.
Interval between successful polls Specify the time interval in minutes between polls.
Timeout between failed polls Specify the time in seconds between failed polls.
Failed polls before returning to establishment Specify the number of failed polls to declare the link failed and to re-
start the establishment process.
11.3.3 Remote Poll Setup
The remote poll setup is used to specify the poll type to use and the address of the server to poll. A primary and backup
server may be specified. The backup server will be used if the primary server cannot be contacted. The options for each
poll are:
Poll type Specify the poll type. The options are:
Disabled The poll is disabled.
Ping (ICMP) Ping the specified address.
TCP Socket Establish a TCP socket to the specified address and port number. The connection will be terminated
as soon as successfully opened.
Poll address Specify the address of the primary server to poll. The format used depends on the poll type:
Ping (ICMP) Enter an IP address or hostname, eg 192.168.1.1 or www.google.com
TCP Socket Enter an IP address or hostname followed by a colon and the TCP port number, for example 192.168.1.1:80
Page 60 of 186
Page 62
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
11.3.4 Miscellaneous Options
Automatically obtain DNS If set to Yes the DNS server addresses received when a connection is established will be
used by the Series 2000 to direct DNS requests. If this value is set to No a DNS server should be entered manually.
Verbose output to system log If set to Yes verbose connection information will be included in the system log. As the
size of the system log is limited, this option should only be enabled if connection problems are experienced.
11.3.5 Connect on Demand
The connect on demand settings are only valid if the Connection state has been set to Connect on Demand (refer to
section 11.2.2). The options are:
Idle time to disconnect Specify the time in minutes after the last data is received or transmitted to terminate the connec-
tion.
Minimum time between reconnections Specify the minimum time in seconds to re-connect to the network after a dis-
connect from the network.
11.4 Circuit Switched Data Mode
The Series 2000 can be configured to operate in Circuit Switched Data (CSD) mode. This mode works in a similar manner
to a traditional dial-up modem. Connections are established by dialing into the modem or by dialing out to another modem
(PSTN or 3G/GSM). Unlike packet mode, where data is carried over in packets over IP networks, circuit switched mode
transports serial data through the telephone network. Typically CSD offers much lower data rates than packet mode (CSD
rates are around 9600bps, compared with up to 7.2Mbps in packet mode).
The Series 2000 mode can be configured for one of four different CSD operating modes:
Direct to single port This is the simplest mode and most like a traditional dialup modem. The Series 2000 will provide
an AT command interface at a single selected serial port. This port can then be attached to a device (eg. PLC) that
expects to see a basic dial-up modem. If the device wishes to dial out a call, it can do so using standard commands.
If an incoming call is received, the modem will indicate this to the device which can choose to answer it.
Multiplexed mode The multiplexed mode allows any one of the available Series 2000 serial ports or the PPP server to be
selected at the time of connection. This is achieved through having a virtual console to which the initial connection
is made. The caller can then issue a command to select a port. Once selected, all data will be directed to the selected
port.
PPP server The Series 2000 acts as a PPP remote access server. After dialing in, an IP connection is established between
the modem and the calling computer. Once this connection is open, all of the packet services of the modem,
including the web server and serial server, can be accessed.
PPP dialout The Series 2000 acts as a PPP client and will connect or dial a remote PPP server. After dialing, an IP
connection is established between the modem and the server. Once this connection is open, all of the packet
services of the modem, including the web server and serial server, can be accessed.
The configuration for CSD mode is accessed by selecting Wireless . Circuit Switched Mode, the main CSD configuration page is shown in figure 87.
Page 61 of 186
Page 63
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 87: Circuit switched configuration
The number of Ports listed is model dependent. The Model 2220 has 1 serial port so only while serial
port will be listed while Model 2220 has 3 serial ports so 3 will be listed.
11.4.1 Setting serial port parameters
Where the chosen CSD operating mode is Direct to single port or Multiplexed mode, it will be necessary to configure
the parameters of the serial ports to match the devices attached to the modems. This configuration is set in the lower table
on the CSD configuration page. To begin editing a port’s setup, click the icon in the row for that port. The port editing
page will display as shown in Figure 88.
Figure 88: Editing serial port configuration
For each port, the following parameters can be set:
Baudrate The port can be configured for any standard baud rate from 300 baud to 230400 baud.
Data bits The port can be configured for operation with 5 to 8 data bits.
Stop bits The port can be configured for operation with 1 or 2 stop bits.
Parity The port can be configured for none, odd or even parity.
Flow control The serial server port can be configured for the following modes:
Page 62 of 186
Page 64
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
None No flow control is enabled.
Hardware The port will use the RTS and CTS handshake lines to control the flow of data.
Software The port will use XON/XOFF software flow control. The XOFF character is hex 0x11. The XON
character is hex 0x13.
Both The port will use both hardware and software flow control.
Port function When the CSD operating mode is Multiplexed, each serial port can be selected to function as follows:
Modem The modem will generate an AT command interface at the serial port. A device attached to the port can
use standard AT commands to dial and receive calls.
Raw No AT command interface will be generated at the serial port. When the port is selected from the virtual
console, a transparent data pipe is created between the serial port and the wireless port.
Rings until answered For ports configured for Modem mode, this field determines the default number of rings the
modem will wait before automatically answering a call. This is equivalent to setting the ATS0 S-Register in a
conventional modem.
DCD mode For ports configured for Modem mode, this field determines the default state of the Data Carrier Detect
(DCD) handshaking line. The following modes are supported:
Always on Regardless of the online state of the port, the DCD line will be active (equivalent to AT&C0).
Follow carrier The DCD line will be active when the port is in the online state (equivalent to AT&C1).
DTR function For ports configured for Modem mode, this field determines the default response of the modem to changes
in the Data Terminal Ready (DTR) handshaking line. The following modes are supported:
Ignore The port will ignore changes to the state of DTR (equivalent to AT&D0).
Command mode If the DTR line transitions from the active to inactive state while the port is on online data mode,
the port will drop to AT command mode (equivalent to AT&D1).
Hangup If the DTR line transitions from the active to inactive state while the port is on online data mode, the port
will terminate the current call (equivalent to AT&D2).
Click Update to commit any changes.
11.4.2 Configuring for direct to single port mode
To select direct mode, in the upper table, set the Operating mode to Direct to single port and click Update to set the
change.
On models with more than one serial port, it may be desired to change the port that is selected for direct mode. To do
this, click the pencil icon in the upper table. The port selection page, as shown in Figure 89 will be displayed. Select the
desired port from the dropdown box and click Update to set the change.
Figure 89: Setting the direct mode port
Page 63 of 186
Page 65
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
11.4.3 Configuring for multiplexed mode
Multiplexed mode allows a remote user to dial in to the modem and select the port they wish to communicate with.
Whereas Direct to single port mode fixes the port to be selected, multiplexed mode allows the selection to be made
dynamically. This is suited to applications where multiple devices are attached to the modem’s serial ports.
Furthermore, the PPP server (refer to Section 11.4.4 on the next page) is also available as one of the multiplexer selections.
This allows applications that normally only use serial data to dial in to the modem and create an IP connection to access
modem’s web server should any configuration changes need to be made.
Once a call is established in multiplexed mode, the modem will issue the following prompt:
CT Mux >
This indicates the modem is waiting for a port selection. To select a port, issue the command:
PORT=n<CR>
where n is the port number and <CR> is a carriage return. The PPP server is selected using the command:
PORT=PPP<CR>
For applications where the prompt text may interfere with serial protocols, it can be disabled using the
Menu visibility option.
The multiplexer can support multiple port selections in a single call. Once a port has been selected, it can be deselected
by issuing a special command sequence called the disconnect sequence. When received, this will cause the multiplexer to
drop back to the menu prompt. An example disconnect sequence is
<2 seconds delay>???<2 seconds delay>
The delay and character used in the disconnect sequence are configurable.
To select multiplexed mode, in the upper table of the Circuit Switched Data page, set the Operating mode to Multiplexed
and click Update to set the change. The display will update to be similar to that shown in Figure 90, the summary data
will provide a summary of the multiplexed mode settings.
Figure 90: Setting the direct mode port
To configure multiplexed mode, click the icon in the upper table. The multiplexed mode configuration page, as shown
in Figure 91 will be displayed.
Page 64 of 186
Page 66
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 91: Configuring multiplexed mode
The following options can be configured for multiplexed mode:
Menu visibility Depending on the application, it may not be desirable to have the multiplexer present menu prompts to
the remote modem. This field controls the display of menus:
Verbose The modem will send prompts and status updates to the remote user.
Silent No prompts will be displayed.
Disconnect character This field determines the character used in the disconnect sequence discussed above. The default
is a question mark (?), which is entered as 3f hex. To disable the disconnect feature, clear all text in this field.
Disconnect guard time This field determines the idle time around the disconnect sequence discussed above. The value
entered is in seconds.
Default port In some applications, it may be desirable to have one of the multiplexer’s ports selected automatically if
no valid PORT= command has been received within a specified amount of time or specified number of bytes. This
dropdown box selects the default port.
Bytes until default port selected Where Default port is not set to No default, this field determines the number of bytes
before the default port is selected.
Seconds until default port selected Where Default port is not set to No default, this field determines the seconds that
can elapse before the default port is selected.
Click Update to save any changes.
11.4.4 Configuring for PPP server mode
To select PPP server mode, in the upper table of the Circuit Switched Data page, set the Operating mode to PPP server
and click Update to set the change. The display will change to that shown in Figure 92, notice the port list is no longer
displayed. As the connection to the modem is now over a packet based PPP connection the ports must be accessed via the
Serial Server. For details on the Serial Server refer to section 16 on page 153.
Page 65 of 186
Page 67
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 92: PPP server configuration
To configure PPP server mode, click the icon in the upper table. The PPP server configuration page, as shown in Figure
93 will be displayed.
Figure 93: PPP server configuration
The following options can be set for PPP mode:
Local IP address This is the IP address the modem will have in the PPP connection. The address entered should be in
IPv4 decimal dotted notation (eg. 10.100.100.1).
Remote IP address This is the IP address the modem will allocate to the connection PPP client. The address entered
should be in IPv4 decimal dotted notation (eg. 10.100.100.1) and must be different to the Local IP address.
Authentication required This fields sets the required level of authentication for remote users connecting to the modem.
Available options are:
None No authentication will be required.
PAP Authentication will be required using the PAP protocol.
CHAP Authentication will be required using the CHAP protocol.
Username Where Authentication is not set to None, this is the username a remote user will be required to authenticate
with.
Password Where Authentication is not set to None, this is the password a remote user will be required to authenticate
with. To set the password, click the New checkbox and enter the password in the adjacent field.
Click Update to save any changes.
11.4.5 PPP dialout
To select PPP dialout mode, in the upper table of the Circuit Switched Data page, set the Operating mode to PPP dialout
and click Update to set the change. The display will change to that shown in Figure 92, notice that as with to PPP server
the port list is no longer displayed. As the connection to the modem is now over a packet based PPP connection the ports
must be accessed via the Serial Server. For details on the Serial Server refer to section 16 on page 153.
Page 66 of 186
Page 68
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 94: PPP dialout configuration.
To configure PPP server mode, click the icon in the upper table. The PPP dialout configuration page, as shown in
Figure 95 will be displayed.
Figure 95: PPP dialout configuration.
The following options can be set for PPP Server dialout configuration:
Mode This fields sets the operating mode. Available options are:
Disable Disable dial out.
Manual The connection is controlled manually by clicking the Connect and Disconnect buttons which are added
to the Circuit Switch Data page when this mode is selected.
On demand The connection is made when data is sent to the interface.
Always connect The connection is permanently established.
Care should be taken when selected the operating mode as incorrect setting could result in
excessive data charges.
Phone number The number to call.
Dialing timeout The time in seconds to wait for a connection after dialing.
Page 67 of 186
Page 69
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Max. redial attempts before backoff Set the number of failed dialing attempts after which the time between dialing will
be increased. This backoff prevents continuously dialing at a fast rate possibly incurring large call costs.
Min. time to consider a connection successful The minimum connection time in minutes which is considered a suc-
cessful connection.
Time between redials The time in minutes to wait after a failed dial attempt before redialing.
Backoff time between redials The time in minutes to wait to redial after the backoff count has been reached.
Idle timeout before hangup The connection is considered idle when no data has been transmitted or received for this
time in minutes. Once the idle time is reached the connection will be terminated.
Enable debugging information If enabled debugging information is written to the log. This can assist in diagnosing
connection problems.
The following options can be set for PPP Configuration:
Local IP address This is the IP address the modem will have in the PPP connection. The address entered should be in
IPv4 decimal dotted notation (eg. 10.100.100.1).
Remote IP address This is the IP address the modem will allocate to the connection PPP client. The address entered
should be in IPv4 decimal dotted notation (eg. 10.100.100.1) and must be different to the Local IP address.
Authentication required This fields sets the required level of authentication for remote users connecting to the modem.
Available options are:
None No authentication will be required.
PAP Authentication will be required using the PAP protocol.
CHAP Authentication will be required using the CHAP protocol.
Username Where Authentication is not set to None, this is the username a remote user will be required to authenticate
with.
Password Where Authentication is not set to None, this is the password a remote user will be required to authenticate
with. To set the password, click the New checkbox and enter the password in the adjacent field.
Click Update to save any changes.
11.5 SMS
The Series 2000 provides SMS triggers which can be used to change the Wireless operating mode, reboot the modem and
request a status summary. Each SMS trigger can individually be enabled and disabled and the text trigger can be defined
for each trigger. Access control is provided to control which numbers have access to the SMS triggers.
To access the SMS Triggers select Wireless . SMS a page similar to that shown in Figure 96 will be displayed for the
Model 2100 or Figure for the Model 2220 . The difference being the page for the Model 2220 includes GPIO SMS
triggers.
Page 68 of 186
Page 70
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 96: SMS Triggers configuration page for the Model 2100.
Figure 97: SMS Triggers configuration page for the Model 2220.
11.5.1 Trigger configuration
The fields below, found in the SMS Triggers table, configure an individual trigger:
Action The SMS actions are separated into several sections, the number of sections varies with each model. The actions
are available:
Page 69 of 186
Page 71
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
System
Status query Query the current state. An SMS will be returned providing current status information.
Reboot Initiate a reboot.
Wireless
Packet mode Switch to packet mode.
CSD mode Switch to Circuit Switched Data (CSD) mode.
VPN
VPN control Start, stop and re-start VPNs. The VPN command has 2 parameters, action and tunnel and is of
the form “VPN <action> <tunnel>”. The parameters are:
Action:
start Start then specified tunnel.
stop Stop the specified tunnel.
restart Stop and then start the specified tunnel.
Tunnel:
All Apply the action to all configured tunnels.
SSL Apply the action to only the SSL VPN.
<label> Apply the action only to the tunnel with the specified label.
GPIO General Purpose Input and Outputs (GPIO), available on the Model 2220only.
Query state Report the current state of the Inputs and Outputs.
Set outputs Set the state of the outputs. The output is referenced by its index number, only referenced outputs
will change. The form of the command is: “GPIO set <index>=<o/c>” where:
o Sets the output <index> to Open.
c Sets the out <index> to Closed.
Enabled Set this checkbox to enable the trigger.
Match on This value determines how an incoming SMS will be searched to find a match for this trigger. The following
match modes can be used:
Exact The trigger will match if the content of the SMS is identical to the Trigger field.
Contains The trigger will match if the content of the SMS contains the Trigger field.
Starts with The trigger will match if the content of the SMS starts with the Trigger field.
Trigger This is the text that will be used, in conjunction with the Match on field, to determine whether an SMS is for
this trigger.
Click Update to save any changes.
11.5.2 Access control
When the modem receives an SMS, it also receives the phone number that sent the message. The SMS Access control
allows source phone numbers to be verified to ensure the sender is authorised to access the modem.
Each access control is specified by setting a phone number and an associated action. The action for each control can be:
Drop Messages from the phone number will be dropped and not processed by the modem.
Allow Messages from the phone number will be accepted and processed by the modem.
The default policy determines the action to be taken when no specific access control matches a phone number. The default
policy is Allow, however, this can be set to Drop for stricter control.
Page 70 of 186
Page 72
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
11.5.2.1 Setting the default policy to allow
This example describes setting the default policy to Allow then adding an entry to blacklist a particular number.
Figure 98: SMS Triggers reject entry
1. In the section titled SMS Access Control set the Action for the Default policy to Accept.
2. Click Update to set the changes.
3. Click the Add new SMS access control button.
4. In the entry form, (Figure 98) enter:
(a) A label for the new entry.
(b) Enter the phone number (this should be entered with the full country prefix eg. +61410000000).
(c) Set the Action to Drop.
5. Click the Update button to set the changes.
6. Repeat the steps above to add further numbers.
When complete the page will include the number to be dropped, as shown in figure 99.
Figure 99: SMS Triggers number to drop added
Page 71 of 186
Page 73
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
11.5.2.2 Deleting an Entry
To delete an entry click the the icon a dialog box similar to that shown in Figure x will be displayed. Click the OK
button to remove the entry.
Figure 100: Deleting the Drop entry.
Figure 101: The Drop entry has been deleted.
11.5.2.3 Setting the default policy to drop
This example describes setting the default policy to Drop then adding an entry to allow a specific number.
Page 72 of 186
Page 74
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 102: SMS access control default policy set to Drop.
1. In the section titled SMS Access Control set the Action for the Default policy to Drop.
2. Click Update to set the changes. The page will look similar to that shown in Figure 102
3. Click the Add new SMS access control button.
4. In the entry form (Figure 103) enter:
(a) A label for the new entry.
(b) Enter the phone number (this should be entered with the full country prefix eg. +61410000000).
(c) Set the Action to Allow.
5. Click the Update button to set the changes.
6. Repeat the steps above to add further numbers.
Figure 103: SMS Triggers accept entry
When complete the page will include the number to be accepted, as shown in figure 104.
Page 73 of 186
Page 75
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 104: SMS Triggers number to accept added
11.5.2.4 Editing an Entry
To edit an entry click the icon. Click the Update button once changes have been completed to save the changes.
11.5.3 SMS Examples
The examples listed below will all use the same configuration of the SMS triggers which is shown in Figure 105 on the
following page. A Model 2220/ has been used for so that examples of the GPIO can be demonstrated. All SMS are sent
from a standard mobile to the phone number of the SIM installed in the unit.
Page 74 of 186
Page 76
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 105: SMS Example configuration.
11.5.3.1 Status Query
The status query SMS is issued as follows:
Query status
The modem responds with:
Host:S2000-ff-ff-00, Uptime:14003399,
Temp:37.25, RSSI:20, Mode:Pkt,
State:Connected (10.192.168.23), LAN:Up
(10.10.10.10)
The meaning of the fields within the message are:
Host The host name of the responding unit.
Uptime The up time in seconds.
Temp The current temperature in Celsius.
RSSI The current Receive Signal Strength Indicator (RSSI) reading.
Mode The current operating mode, either packet (Pkt) or Circuit Switched Data (CSD)
State The state of the connection. If the connection mode is packet the wireless IP address is also displayed.
LAN The state and if active the IP address of the LAN.
Page 75 of 186
Page 77
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
11.5.3.2 Reboot
In this example the Series 2000 3G Modem / Router will be rebooted.
The reboot SMS is issued as follows:
Reboot
The Series 2000 3G Modem / Router will initiate a shutdown and reboot. This will take approximately 5 minutes during
which time the Series 2000 3G Modem / Router will be disconnected from the wireless network and not accessible.
11.5.3.3 Wireless Mode
In this example the Series 2000 3G Modem / Router will be switched from packet mode to circuit switched data mode
and back to packet mode. From the Status query example above the unit is currently in packet mode so the first SMS will
be to switch to CSD mode.
The Wireless mode SMS is issued as follows:
Mode CSD
Now to check the mode a Query status message is sent:
Query status
The modem responds with:
Host:S2000-ff-ff-00, Uptime:14005447,
Temp:37.25, RSSI:20, Mode:CSD,
State:Offline, LAN:Up (10.10.10.10)
To switch back to packet mode another Wireless SMS is sent:
Mode packet
Again to check the mode a Query status message is sent:
Query status
The modem responds with:
Host:S2000-ff-ff-00, Uptime:14005664,
Temp:37.25, RSSI:20, Mode:Pkt,
State:Connected (10.192.168.32), LAN:Up
(10.10.10.10)
Page 76 of 186
Page 78
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
11.5.3.4 VPN Control
The VPN control SMS is issued as follows:
VPN restart ALL
This SMS command will restart all enabled VPNs.
To restart only the VPN labeled test the following SMS command would be issued:
VPN restart test
11.5.3.5 GPIO (Model 2220only)
Two GPIO SMS commands are available the first reports the status of all inputs and outputs while the second provides
output control.
To report the GPIO status the following SMS command is issued:
GPIO status
The response will be similar to:
S2000-ff-ff-00:Input-1=disabled,
Input-2=disabled, Output-1=disabled,
Output-2=disabled
In this case all of the inputs and outputs are reported as disabled. If the inputs and outputs are now enabled and the SMS
GPIO status command is re-sent the following response is received:
S2000-ff-ff-00:Input-1=open, Input-2=open,
Output-1=open, Output-2=open
To change the state of the voluptuous to closed the following command is sent:
GPIO set 1=c 2=c
An status message can now be sent to check on the result:
GPIO status
Page 77 of 186
Page 79
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
The response will be similar to:
S2000-ff-ff-00:Input-1=open, Input-2=open,
Output-1=closed, Output-2=closed
The state of the two outputs has changed from “open” to “closed”.
Page 78 of 186
Page 80
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
12 Network
This section describes the configuration of the network and LAN settings. This includes setting the IP Address of the
Series 2000 3G Modem / Router , configuring the DHCP server and the DNS settings.
12.1 LAN Interface
The LAN Interface refers to the two switched Ethernet ports located on the front of the Series 2000 3G Modem / Router .
To access the LAN Interface settings select Network . LAN. Figure 106 is an example of the LAN settings page.
12.1.1 Changing the IP settings of the LAN Interface
The LAN IP address is the address used to access the modem via the LAN (Ethernet) interface. The default IP settings of
the Series 2000 3G Modem / Router are:
IP Address 10.10.10.10
Netmask 255.255.255.0
The network settings are contained in the Interface Configuration table (as shown in Figure 106). To change the IP
settings :
1. Ensure that the checkbox for Enabled is set.
2. Enter the new IP address for the LAN interface in the IP Address box.
3. Enter the new netmask in the Netmask box.
4. Click the Update button to commit the changes.
Figure 106: LAN Interface configuration
Page 79 of 186
Page 81
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Once the IP address has been changed the new IP address will need to entered into the web browser
to access the Series 2000 3G Modem / Router web interface. It will also be necessary to login again.
For details on accessing the web pages and logging into the Series 2000 3G Modem / Router refer to
Section 6 on page 16.
12.1.2 Disabling the LAN Interface
By default the LAN interface is enabled, however, for installations where the LAN ports are not required once initial
configuration is complete, the ports can be disabled.
If the LAN ports are disabled then access to the web configuration pages will only be available
via the wireless interface (if the the firewall settings allow access to the web server, for details on
the Firewall configuration refer to Section 14 on page 104).
To disable the LAN Interface :
1. Unset the Enabled checkbox.
2. A warning dialogue box will be displayed (similar to Figure 107), warning that once the change has been committed
the LAN interface will not be accessible.
3. Click OK.
4. Click the Update button at the bottom of the page to commit the changes.
Figure 107: LAN Interface disable warning
The LAN interface will now be disabled.
To re-enable the LAN ports without accessing the web interface, it will be necessary to perform a factory
reset of the Series 2000 3G Modem / Router modem as described in Section 4.8 on page 12. This will
clear all the configuration settings of the Series 2000 3G Modem / Router to the factory default settings
and the LAN ports will be enabled.
Page 80 of 186
Page 82
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
12.2 Configuring the DHCP server
The DHCP server allows clients on the local network to be automatically allocated IP addresses from the modem. The
Series 2000 3G Modem / Router will also provide the clients with network settings like their default route and DNS
servers.
The default configuration of the DHCP server will serve IP addresses in the range 10.10.10.100 through 10.10.10.200. If
the IP address of the modem hasn’t been changes this may be a suitable configuration.
Should the configuration need to be change, the relevant fields are explained below:
Enabled Set the checkbox to enable the DHCP server.
Start address The first IP address in the pool allocated by the DHCP server. This address must be on the same subnet as
the LAN IP address.
End address The last IP address in the pool allocated by the DHCP server. This address must be on the same subnet as
the LAN IP address and greater than the Start address.
Default lease time This field configures the default lease time given to clients. The value entered is in minutes.
Maximum lease time This field configures the maximum lease time given to clients. The value entered is in minutes.
Figure 108: DHCP configuration
Click Update to save any changes.
12.3 Domain Name System (DNS)
The Domain Name System (DNS) is used to resolve domain names to IP addresses.
The Series 2000 3G Modem / Router supports DNS proxy, manual DNS configuration and a dynamic DNS client.
These features can be accessed by selecting Network from the main menu and DNS from the sub-menu. The DNS
settings page is shown if figure 109.
Page 81 of 186
Page 83
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 109: Domain Name Service (DNS) configuration
12.3.1 DNS Proxy
The Series 2000 3G Modem / Router functions as a Domain Name Server (DNS) proxy. This means that the Series 2000
3G Modem / Router passes DNS requests from the LAN interface to an external DNS server, and returns the result to
client which initiated the request. This simplifies configuration of LAN clients, as they only need configure the modem
as their DNS server. If the DHCP server of the Series 2000 3G Modem / Router has been enabled then any device that is
connected to the LAN interface and has an IP address from the DHCP server will automatically be given the IP address
of the modem as their DNS server.
12.3.2 Manual DNS Configuration
In the majority of cases, the modem will automatically receive DNS server addresses when establishing a wireless connection. In the majority of cases there will be no need to changes this.
Should it be desired to override these values and manually enter server addresses, these can be entered in the Manual
DNS Configuration table. The fields are explained below:
Primary DNS Server This is the IP address of the first DNS server to be queried. The value entered should be in IPv4
decimal dotted notation.
Secondary DNS Server This is the IP address of the secondary DNS server to be queried. The value entered should be
in IPv4 decimal dotted notation.
DNS Domain This domain will be appended to requests without a domain name. It is useful for resolving client names
on the LAN.
Click Update to save any changes.
12.3.3 Dynamic DNS Client Configuration
Dynamic DNS is a system which allows the domain name data held in a name server to be updated in real time. The most
common use for this is in allowing an Internet domain name to be assigned to a device with a dynamic IP address.
If the wireless service the modem connects to allocates the modem a public, dynamic IP address, it may be possible to use
a dynamic DNS provider to update the address of the modem in the DNS system. Once this address is registered, other
hosts with Internet access can reach the modem at the domain name.
Page 82 of 186
Page 84
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Drop-down Option Provider
dyndns.com http://www.dyndns.com/
no-ip.com http://www.no-ip.com/
zoneedit.com http://zoneedit.com/
easydns.com http://www.easydns.com/
Table 8: Dynamic DNS providers
Note: Not all wireless providers allocate public IP addresses. Addresses in the range 10.0.0.0 - 10.255.255.255, 172.16.0.0
- 172.31.255.255 and 192.168.0.0 - 192.168.255.255 are not public addresses and will most likely not be suitable
for use with dynamic DNS.
Note: Some wireless providers do not allow inbound connections at all, so even though the dynamic DNS client will
connect and register the IP address provided to the Series 2000 3G Modem / Router unit, all attempts to connect to
that IP address will fail.
In order to use the dynamic DNS feature of the modem, it is first necessary to register at a dynamic DNS provider. The
modem supports the providers listed in table 8.
Once registration is complete, the fields of the Dynamic DNS Client Configuration table must be completed. The fields
are explained below. Figure 110 shows an example configuration.
Enabled Set this checkbox to enable dynamic DNS updating.
Service Select the appropriate service from the list.
Domain Enter the name of the domain allocated by the dynamic DNS provider.
Username Enter the username for the account with the dynamic DNS provider.
Password Enter the password for the account with the dynamic DNS provider.
Click Update to save any changes.
Figure 110: Dynamic DNS Client configuration
Page 83 of 186
Page 85
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
12.4 Generic Routing Encapsulation (GRE)
Generic Routing Encapsulation (GRE) is a tunneling protocol which can encapsulate a wide variety of network layer
protocol packet types inside IP tunnels. To access the GRE configuration page select Network . GRE a page similar to
that shown in Figure 111 will be displayed. This page lists all configured tunnels.
Figure 111: GRE Configuration.
To add a new GRE tunnel clock the Add new tunnel button and a page similar to that shown in Figure 112 will be
displayed.
Figure 112: Add a GRE tunnel.
The available options are:
Label The name or label associated with the tunnel.
Enabled Check to enable this particular tunnel.
Remote Address The IP address to which the tunnel is to connect.
Local Address The local address to which the tunnel terminates.
Tunnel Address The address of the tunnel interface.
Peer Address
TTL Time To Live value.
Page 84 of 186
Page 86
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
12.5 Network Diagnostics
Ping and Traceroute are two commonly used tools for analysing packet flows and diagnosing network issues. The Series
2000 3G Modem / Router can generate ping and traceoute requests via the web interface. To access the diagnostic tools,
select Network . Diagnostics. Figure 113 illustrates the available options. The top section is used to select the test type
and enter the host name or IP address. The results are presented in the box below.
Figure 113: Network diagnostics.
To initiate a test, select Ping or Traceroute as appropriate and enter a hostname or IP address in the Host field. Click
Start to begin the test. The web page will refresh every 3 seconds until the test completes. A test can be canceled or the
result box cleared by clicking the Cancel button. Figure 114 shows a completed ping test.
Figure 114: Network diagnostic test
Page 85 of 186
Page 87
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
13 Routing
The Series 2000 3G Modem / Router has multiple networking interfaces, including the wireless interface, the LAN
interface and the VPN tunnels. The routing configuration of the modem determines how packets arriving from the different
interfaces will be delivered to their destination. The routing options are accessed by clicking Routing on the main menu,
the screen will appear similar to that shown in Figure 115.
13.1 Default and Static Routes
The Default & Static Routes are the default routing page and can also be accessed by selecting Routing . Default & Static.
Figure 115 illustrates the Default & Static Routes page with no routes configured.
Figure 115: The Default and Static Routes configuration page
13.1.1 Default route
The default route is the network route used by the modem when no known route exists for an IP packet’s destination
address. All the packets for destinations not defined in the routing table of the modem are sent to the default route. This
route will lead to another router for further routing.
In the default configuration the default route is via the wireless interface (WLS). In the majority of situations there will
be no need to change this.
To change the default route select an option from the drop-down list. The possible interfaces include:
WLS Wireless interface.
SSL VPN The SSL VPN interface. This option is only valid if an SSL VPN has been configured. Refer to Section Virtual
Private Network (VPN) for details.
Page 86 of 186
Page 88
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
WLS CSD The wireless circuit switched data interface. This option is only valid if the Series 2000 3G Modem / Router
is operating in Circuit Switched Data (CSD) mode and the PPP server has been enabled.
Serial n The serial port, where n is the number of the port. This option is only valid if the serial port is configured to
operate in one of the PPP modes.
Custom Use the IP address entered in the adjacent field.
Once the required default route has been selected click the Update button to save the change.
13.1.2 Static routes
Static routes instruct the modem on how to direct certain traffic over a network in a fixed or static way. They can be
useful for creating exceptions to the default route or for working in complex LAN environments where the configuration
is known and consistent.
The diagram in Figure 116 shows a scenario where static routes can be used. In the example, in addition to the 10.10.10.0
subnet the modem is attached to, there is a further subnet (10.10.20.0) reachable via the router at 10.10.10.200. Without
a static route, the modem would not know how to handle packets for the 10.10.20.0 subnet and would send them to the
default route. With a static route, packets will be correctly forwarded to the router at 10.10.10.200.
Figure 116: Static routing example
13.1.3 Static route options
The static route options are shown when the Add new static route button is pressed or an existing route is edited. The
static route options will be displayed as shown in Figure 117.
Figure 117: Static route options
The following options can be set for each static route:
Enabled Set the enabled check box to have the route installed. A route can be temporarily disabled by un-checking this
box.
Target address This is the network or host the static route will target.
Page 87 of 186
Page 89
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Netmask This is the network mask to apply to the static route. The mask entered should be in IPv4 decimal dotted
notation. For a host-only route, the netmask is 255.255.255.255.
Gateway Determines the gateway that packets whose destination addresses matched the target address will be routed to.
The gateway can be one of the following:
WLS Wireless interface.
SSL VPN The SSL VPN interface. This option is only valid if an SSL VPN has been configured. Refer to Section
Virtual Private Network (VPN) for details.
WLS CSD The wireless circuit switched data interface. This option is only valid if the Series 2000 3G Modem /
Router is operating in Circuit Switched Data (CSD) mode and the PPP server has been enabled.
Serial n The serial port, where n is the number of the port. This option is only valid if the serial port is configured
to operate in one of the PPP modes.
Custom Use the IP address entered in the adjacent field.
Insert this entry at position Determines where this entry will be inserted in the list of static routes.
13.1.4 Adding a new static route
From the Default & Static Route page click the Add new static route button. This will select the Add new static route
page. An example of adding a new static route is shown in Figure 118. In this example, a new route is to be created that
routes all traffic for the 10.10.20.0 subnet via the router at address 10.10.10.200.
Figure 118: Adding a new static route
To save the new route click the Update button. The main Default & Static Route page will again be shown with the new
route listed, as shown in Figure 119.
Figure 119: The static route page with a single route
To add a second route, again click the Add new static route button. In the example shown in Figure 120, a route is
created which all route all packets destined for the host 192.168.2.100 via the SSL VPN.
Page 88 of 186
Page 90
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 120: Adding a new static route
To add the route click the Update button. The main page will again be shown with the new route added, as seen in Figure
121.
Figure 121: The static route table with two routes
For the route in this example to work a VPN will need to be configured and established. For details on
configuring Virtual Private Networks (VPN) refer to Section 15 on page 125
13.1.5 Editing a static route
A static route can be edited by clicking the icon in the Edit column of the route to be changed. Once clicked, the
details of the route will display in the same table as shown when adding a new route.
As an example, to edit the second route, click the icon in the second row of the table. A page similar to the Add
new route page will be displayed, but now showing the details of route 2. Changes to route to the host 192.168.2.200 are
shown in Figure 122.
Figure 122: Editing a static route
To save the changes click the Update button or to lose any changes click the Cancel button. The main page will again be
displayed as shown in Figure 123, with the changes for route 2 added to the table.
Page 89 of 186
Page 91
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 123: The main route table after editing route two
13.1.6 Deleting a static route
A static route can be deleted by clicking the icon in the Delete column of the route to be deleted. A warning box will
be displayed. Click OK to confirm the deletion or Cancel to prevent the route from being deleted.
For example, to delete route two from the table shown in Figure 123, click the icon in row two of the table. A warning
box will now be displayed, as shown if Figure 124. Click OK to confirm.
Figure 124: Deleting a static route
The route table will be displayed with the route removed, as shown in Figure 125.
Figure 125: Static route table with route 2 removed
Page 90 of 186
Page 92
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
13.2 Dynamic Routing
13.2.1 Description
The Series 2000 3G Modem / Router modem supports the Routing Information Protocol (RIP) for exchanging routing
information with neighbouring routers. RIP is a dynamic routing protocol used in local and wide area networks and is
supported in many routers. To access the dynamic routing page, select Routing . Dynamic a page similar to that shown
in Figure 126 will be displayed.
Figure 126: Dynamic routing
13.2.2 Enabling RIP
The RIP function is enabled in the RIP Configuration table. The description below explains the fields:
Enabled When set, the dynamic routing function will be enabled.
RIP Version This field determines the protocol version of RIP to be used. Select the version to match that used by
neighbouring routers.
Passive When set, the modem will receive RIP packets on the LAN interface but not actively broadcast them.
Enabled interfaces Select the interfaces for which RIP will be enabled.
Click Update to set any changes.
13.3 Virtual Router Redundancy Protocol
13.3.1 Description
The Virtual Router Redundancy Protocol (VRRP) is designed to increase the availability of the default gateway servicing
hosts on a subnet. VRRP is a standardised protocol defined in RFC 3768. Vendors such as Cisco include implementations
in their router products.
VRRP achieves redundancy by creating a “virtual gateway”. At any time, only of the the VRRP-enabled routers functions
as the virtual gateway. The virtual gateway address is configured into hosts on the local network as their default gateway.
VRRP routers take part in elections to decide who will become the master router. The master router then assumes the IP
address of the virtual gateway and becomes the path for network traffic.
Figure 127 shows a two modem setup using VRRP. Router A and Router B communicate via multicast messages to
determine who will be the master router. As Router A has higher priority it will become the master in preference to
Router B. Should Router B detect that Router A is no longer functioning, it will assume the role of the master router.
Once Router A returns, it becomes the master again.
The time for Router B to detect that Router A has failed is determined by the advertising interval. The advertising interval
determines how frequently the master router notifies other routers of its state. If Router B is not notified of the status of
Router A for more than 3 times the advertising interval, Router B will assume the failure of Router A and become the
master. The advertising interval can be set to a low value (as short as 1 second), however, the lower the value, the greater
the volume of broadcast traffic on the local network.
Page 91 of 186
Page 93
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 127: VRRP network scenario
To access the VRRP configuration, select Routing . VRRP a page similar to that shown in Figure128 will be displayed.
Figure 128: VRRP configuration
13.3.2 Enabling VRRP
The following fields need to be configured to enable VRRP:
Enabled When set, the VRRP function will be enabled.
Virtual router ID The virtual router ID (VRID) is common to all physical routers that are part of the same virtual router
group. Set this field to match the ID used by the virtual group.
Virtual router IP address This is the IP address of the virtual gateway. It is common to all physical routers in the same
virtual router group.
Priority This field determines how highly this router will rank in elections for a new master. A router with a higher
priority will be chosen in preference to a router with lower priority. The valid range of priorities is 1 to 254.
Advertising interval This field determines the frequency with which the router will multicast its status to other router
while it is the master. The value entered is in seconds.
Only advertise while Wireless available When set, the VRRP function will be disabled until the wireless interface is
connected and available. This prevents the modem from potentially becoming the master router when no onward
connection is available through the wireless interface.
Click Update to set any changes.
Page 92 of 186
Page 94
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Once enabled, VRRP will change the MAC address of the LAN interface. This may make the internal
web server temporarily unavailable until the change in address has propagated.
13.3.3 VRRP Configuration Example
This example will describe the VRRP configuration for the two modems described in the network diagram of Figure 127
on the previous page. As the two devices are in the virtual router group the majority of the settings are the same. The
exception is the priority which must be higher for Router A as it is to be the master. The settings for each device is listed
below and shown in Figure 129 for Router A and Figure 130 for router B.
Enabled Checked to enable.
Virtual router ID Set to 1 (the default).
Virtual router IP address Set to the IP address 10.10.10.254
Priority Router A set to 200 and Router B set to 100 (the default).
Advertising interval Set to 1 second (the default).
Only advertise while Wireless available Check for both devices.
Figure 129: VRRP configuration for Router A
Figure 130: VRRP configuration for Router B.
Page 93 of 186
Page 95
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
13.4 Policy Routing
13.4.1 Description
Policy routing is an advanced routing feature that allows packets to be routed based on which of the modem’s network
interfaces they arrive on, the protocol type or the source or destination address. Conceptually a policy route is similar to a
static route, but, as a policy route can match on more attributes than a packet’s destination address, they allow for greater
flexibility.
To access the policy route configuration, select Routing . Policy a page similar to that shown in Figure 131will be displayed.
Figure 131: Policy route options
13.4.2 Policy route options
The policy route options are shown when the Add new policy route button is pressed or an existing route is edited. The
policy route options will be displayed as shown in Figure 132.
Figure 132: Policy route options
The following options can be set for each policy route:
Enabled Set the enabled check box to have the route installed. A route can be temporarily disabled by un-checking this
box.
Apply to Policy routes can be applied at two separate points in the modem:
• Forwarded packets. The route will be applied to packets that are received from one network interface and then
routed out another network interface.
Page 94 of 186
Page 96
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
• Locally generated packets. The route will be applied to packets generated by one of the modem’s internal services.
Incoming interface If selected, packets will be matched based on the network interface they have been received on. Note
that this can’t be applied to Locally generated packets as they have been generated by the modem itself.
Protocol If selected, packets will be matched based on their protocol type. Note that if you wish to match on source or
destination ports, the protocol must be set to TCP or UDP.
Source address If selected, either a single address (for example, 172.16.1.132) or a subnet range (for example, 172.16.0.0/24)
can be entered. Only packets matching this source address will have the filter applied to them.
Source port or range If selected, packets will be matched based on their TCP or UDP source port. Either an individual
port (for example, 443) or a range of ports (80-143) can be entered.
Destination address Similar to the Source address, but instead matching on the destination address.
Destination port or range Similar to the Source port or range, but instead matching on the destination port.
Gateway Determines the gateway that packets who meet all of the matching criteria for the route will be routed to. The
gateway can be one of the following:
WLS Wireless interface.
SSL VPN The SSL VPN interface. This option is only valid if an SSL VPN has been configured. Refer to Section
Virtual Private Network (VPN) for details.
WLS CSD The wireless circuit switched data interface. This option is only valid if the Series 2000 3G Modem /
Router is operating in Circuit Switched Data (CSD) mode and the PPP server has been enabled.
Serial n The serial port, where n is the number of the port. This option is only valid if the serial port is configured
to operate in one of the PPP modes.
Custom Use the IP address entered in the adjacent field.
Insert this entry at position Determines where this entry will be inserted in the list of policy routes.
13.4.3 Adding a new policy route
From the main Policy Route page click the Add new policy route button. This will select the Add new policy route page.
An example of adding a new policy route is shown in Figure 133. In this example, a new route is to be created that routes
all outgoing mail traffic (SMTP, TCP port 25) received from the LAN interface via the gateway at address 10.10.10.1.
Figure 133: Adding a new policy route
It can be seen in the example that in the centre column, Incoming interface, Protocol and Destination port or range are
checked. This indicates these are the matching criteria that will be applied to packets. All criteria that are unchecked will
be ignored.
Page 95 of 186
Page 97
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
To save the new route click the Update button. The main Policy Route page will again be shown with the new route listed,
as shown in Figure 134.
Figure 134: The policy route page with a single route
To add a second route, again click the Add new policy route button. In the example shown in Figure 135, a policy route
is created which will route all packets received from the LAN interface, from IP address 10.10.10.50 via the SSL VPN.
Again notice that in the centre column, Incoming interface and Source address are checked. This indicates these are the
matching criteria that will be applied to packets. All criteria that are unchecked will be ignored.
Figure 135: Adding a second policy route
To add the route click the Update button. The main page will again be shown with the new route added, as seen in Figure
136.
Figure 136: The policy route table with two routes
13.4.4 Editing a policy route
A policy route can be edited by clicking the icon in the Edit column of the route to be changed. Once clicked, the
details of the route will display in the same table as shown when adding a new route.
As an example, to edit the second route, click the icon in the second row of the table. Changes that add destination
address matching to the criteria are shown in Figure 137.
Page 96 of 186
Page 98
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 137: Editing a policy route
To save the changes click the Update button or to lose any changes click the Cancel button. The main page will again be
displayed as shown in Figure 138, with the changes for route 2 added to the table.
Figure 138: The main route table after editing route two
13.4.5 Deleting a policy route
A policy route can be deleted by clicking the icon in the Delete column of the route to be deleted. A warning box will
be displayed. Click OK to confirm the deletion or Cancel to prevent the route from being deleted.
For example, to delete route two from the table shown in Figure 138, click the icon in row two of the table. A warning
box will now be displayed, as shown if Figure 139. Click OK to confirm.
Figure 139: Deleting a policy route
The route table will be displayed with the route removed, as shown in Figure 140.
Page 97 of 186
Page 99
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Figure 140: Policy route table with route two removed
13.5 Quality of Service Routing
13.5.1 Description
For bandwidth intensive applications, such as live video or Voice-over-IP (VOIP), it may be desirable to have certain
types of traffic prioritised for transmission out the Wireless interface in preference to other traffic. For example, live video
packets are more time critical than outgoing email and should be prioritised as such.
The modem’s QoS implementation works by dividing the outgoing queue of the Wireless interface into three queue levels:
• High (minimum 60% of bandwidth)
• Standard (minimum 30% of bandwidth)
• Low (minimum 10% of bandwidth)
Where a queue is not using all of its available bandwidth, queues below will expand their bandwidth to ensure full link
utilisation. For example, if there is currently no high priority traffic queued, standard traffic will be able to use up to 90%
of the available bandwidth.
Configuring the QoS function is performed in two steps:
• Setting the basic options (enabling QoS and setting the available bandwidth)
• Configuring multiple rules to classify packets into the three different priority queues.
To access the QoS configuration, select Routing . QoS a page similar to that shown in Figure 141 will be displayed.
Figure 141: Quality of Service
13.5.2 Basic QoS options
To enable the QoS feature, the following fields must be set:
QoS enabled When set, QoS is activated for the Wireless interface.
Max uplink rate Set this to the maximum bit rate attainable for the Wireless interface. It is important that this value be
correct, as it will be used to determine the bandwidth allocations for each priority level.
Click Update to save any changes.
Page 98 of 186
Page 100
Cybertec Pty Limited
Copyrightc 2010
Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
13.5.3 Basic QoS Configuration
As an example of how to complete the basic QoS configuration, assume the maximum uplink bandwidth is 350kbits/sec.
QoS would then be set with the following values:
QoS enabled check to enable QoS
Max uplink rate Set to 350.
Figure 142 illustrates the settings for this example.
Figure 142: Quality of Service configuration with the uplink rate set.
13.5.4 QoS route options
The QoS route options are shown when the Add new QoS route button is pressed or an existing route is edited. The QoS
route options will be displayed as shown in Figure 143.
Figure 143: QoS route options
The following options can be set for each QoS route:
Enabled Set the enabled check box to have the route installed. A route can be temporarily disabled by un-checking this
box.
Protocol If selected, packets will be matched based on their protocol type. Note that if you wish to match on source or
destination ports, the protocol must be set to TCP or UDP.
Page 99 of 186
Loading...