Lantronix SGX 5150 User Manual

TM

SGX 5150

IoT Device Gateway

User Guide

Part Number 900-776-R

Revision D January 2018

TM

Intellectual Property

© 2018 Lantronix, Inc. All rights reserved. No part of the contents of this publication may be
transmitted or reproduced in any form or by any means without the written permission of Lantronix.

Lantronix and MACH10 are a registered trademarks of Lantronix, Inc. in the United States and
other countries. DeviceInstaller is a trademark of Lantronix, Inc.

Patented: http://patents.lantronix.com

Wi-Fi is a registered trademark of the Wi-Fi Alliance Corporation. Windows and Internet Explorer
are registered trademarks of Microsoft Corporation. Mozilla and Firefox are registered trademarks
of the Mozilla Foundation. Chrome is a trademark of Google Inc. Safari is a registered trademark
of Apple Inc. All other trademarks and trade names are the property of their respective holders.

Warranty

For details on the Lantronix warranty policy, please go to our web site at

www.lantronix.com/support/warranty

Contacts

Lantronix, Inc.

7535 Irvine Center Drive
Suite 100
Irvine, CA 92618, USA
Toll Free: 800-526-8766
Phone: [phone]
Fax: [phone]

Technical Support Online: www.lantronix.com/support

Sales Offices

; additional patents pending.

.

For a current list of our domestic and international sales offices, go to the Lantronix web site at

www.lantronix.com/about/contact

Open Source Software

Some applications are Open Source software licensed under the Berkeley Software Distribution
(BSD) license, the GNU General Public License (GPL) as published by the Free Software
Foundation (FSF), and the Python Software Foundation (PSF) License Agreement for Python

2.7.6 (Python License). Lantronix grants you no right to receive source code to the Open Source
software. Your use of each Open Source component or software is subject to the terms of the
applicable license. The BSD license is available at http://opensource.org/licenses
General Public License is available at http://www.gnu.org/licenses/
available at https://www.python.org/download/releases/2.7/license/
Source component or software is subject to the terms of the applicable license.

wpa_supplicant: http://w1.fi/cgit/hostap/plain/wpa_supplicant/README

Openssl : http://openssl.org/source/license.html

Busybox: http://busybox.net/license.html

Dropbear: https://secure.ucc.asn.au/hg/dropbear/raw-file/tip/LICENSE

VSFTPD: https://security.appspot.com/vsftpd.html#about

Bootstrap: https://github.com/twbs/bootstrap/blob/master/LICENSE

.

. The GNU
. The Python License is

.Your use of each Open

SGX 5150 IoT Device Gateway User Guide 2

TM

Python: https://www.python.org/download/releases/2.7/license/

Linux kernel version 3.10.0.

OPEN SOURCE SOFTWARE IS DISTRIBUTED WITHOUT ANY WARRANTY, INCLUDING ANY
IMPLIED WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
SEE THE APPLICABLE LICENSE AGREEMENT FOR ADDITIONAL INFORMATION.

Disclaimer

All information contained herein is provided “AS IS.” Lantronix undertakes no obligation to
update the information in this publication. Lantronix does not make, and specifically disclaims,

all warranties of any kind (express, implied or otherwise) regarding title, non-infringement, fitness,
quality, accuracy, completeness, usefulness, suitability or performance of the information provided
herein. Lantronix shall have no liability whatsoever to any user for any damages, losses and
causes of action (whether in contract or in tort or otherwise) in connection with the user’s access or
usage of any of the information or content contained herein. The information and specifications

contained in this document are subject to change without notice.

Revision History

Date Rev. Comments

October 2016 A Initial document for firmware release 8.0.0.0.
November 2016 B Updated user guide to include software features available in all SGX

March 2017 C Updated user guide GRE section.
January 2018 D Updated to firmware version 8.1.0.1 and updated installation and

5150 device gateway models. The user will experience differing featuer
availability depending on the model type installed.

compliance information.

SGX 5150 IoT Device Gateway User Guide 3

TM

Table of Contents

Intellectual Property ________________________________________________________2
Warranty _________________________________________________________________2
Contacts _________________________________________________________________2
Open Source Software ______________________________________________________2
Disclaimer ________________________________________________________________3
Revision History ___________________________________________________________3
List of Figures ____________________________________________________________10
List of Tables _____________________________________________________________11

1: Using This Guide 15

Purpose and Audience _____________________________________________________15
Summary of Chapters ______________________________________________________15
Additional Documentation ___________________________________________________15

2: Introduction 17

Key Features _____________________________________________________________17
Applications ______________________________________________________________18
SGX 5150 User Cases _____________________________________________________19
Protocol Support __________________________________________________________19
Troubleshooting Capabilities _________________________________________________20
Configuration Methods _____________________________________________________20
Addresses and Port Numbers ________________________________________________20

Hardware Address _____________________________________________________20
IP Address ___________________________________________________________21
Port Numbers _________________________________________________________21

Product Information Label ___________________________________________________21

3: Installation of the SGX 5150 23

Package Contents _________________________________________________________23
User-Supplied Items _______________________________________________________23
Hardware Components _____________________________________________________24

Front Panel ___________________________________________________________24
Back Panel ___________________________________________________________24
USB Connection _______________________________________________________25
Power _______________________________________________________________26
Ethernet Ports _________________________________________________________26
Wi-Fi Protected Setup (WPS) _____________________________________________27
Reset Button __________________________________________________________28
To Start WPS _________________________________________________________28

SGX 5150 IoT Device Gateway User Guide 4

TM

Installing the SGX 5150 ____________________________________________________28
Optional SGX 5150 Bracket _________________________________________________30
Wireless Quick Connect ____________________________________________________31

4: Using DeviceInstaller 32

Installing DeviceInstaller ____________________________________________________32
Accessing the SGX 5150 Using DeviceInstaller __________________________________32

Next Step ____________________________________________________________34

5: Configuration Using Web Manager 35

Accessing Web Manager ___________________________________________________35
Status Page ______________________________________________________________36
Web Manager Components _________________________________________________38
Navigating Web Manager ___________________________________________________39

6: Network Settings 41

Access Point _____________________________________________________________41

To View or Configure Access Point Settings _________________________________42

Bridge __________________________________________________________________42

Bridge Status and Configuration ___________________________________________43
To View or Configure Bridge Settings ______________________________________44

Wired (eth0) Network ______________________________________________________44

Interface Status and Configuration _________________________________________45
To Configure Network Interface Settings ____________________________________46
Link Status and Configuration ____________________________________________47
To Configure Network Link Settings ________________________________________47
QoS Statistics and Configuration __________________________________________47
To View and Configure Wired Network QoS Settings __________________________48
Wired (eth0) Network Failover ____________________________________________49
To View and Configure Wired Network Failover Settings ________________________49

Wireless (wlan0) Network ___________________________________________________49

Wireless (wlan0) Network Interface ________________________________________49
To View or Configure Wireless Network Interface Settings ______________________51
Wireless (wlan0) Network Link ____________________________________________51
To View or Configure Network Link Settings _________________________________53
Wireless (wlan0) Network QoS ____________________________________________53
To View or Configure Wireless Network QoS Settings __________________________54
Wireless (wlan0) Network Failover _________________________________________54
To View or Configure Wireless Network Failover Settings _______________________55

Wired (usb0) Network ______________________________________________________55

Interface (usb0) Status and Configuration ___________________________________55
To Configure Network Interface Settings ____________________________________57

SGX 5150 IoT Device Gateway User Guide 5

TM

QoS Statistics and Configuration __________________________________________57
To View and Configure Wired Network (USB) QoS Settings _____________________58
Wired (usb0) Network Failover ____________________________________________58
To View and Configure Wired (USB0) Network Failover Settings _________________59

Protocol Stack ____________________________________________________________59

IP Settings ___________________________________________________________59
To Configure IP Protocol Stack Settings ____________________________________59
ICMP Settings _________________________________________________________60
To Configure ICMP Protocol Stack Settings __________________________________60
ARP Settings _________________________________________________________60
To Configure ARP Network Stack Settings __________________________________61

VPN ____________________________________________________________________61

Configuring VPN Settings ________________________________________________63

Wi-Fi Protected Setup ______________________________________________________63

To Initiate WPS ________________________________________________________63
To Show WPS Status ___________________________________________________64

WLAN Scan/QuickConnect __________________________________________________64

To View WLAN Link Scan and Status Information _____________________________65

WLAN Profiles ____________________________________________________________65

Configuring WLAN Profile Settings _________________________________________66

7: Filesystem 69

File Transfer and Modification ________________________________________________69

To View, Transfer, or Modify Filesystem Files ________________________________70

8: Diagnostics 71

DNS ____________________________________________________________________71

Accessing the DNS Settings ______________________________________________71

Hardware ________________________________________________________________72

To View Hardware Information ____________________________________________72

IP Sockets _______________________________________________________________72

To View the List of IP Sockets ____________________________________________72

Log ____________________________________________________________________73

To Configure the Diagnostic Log Output ____________________________________73

Memory _________________________________________________________________73

To View Memory Usage _________________________________________________73

Ping ____________________________________________________________________73

To Ping a Remote Host _________________________________________________74

Processes _______________________________________________________________74

To View Process Information _____________________________________________74
Routes __________________________________________________________________74
Threads _________________________________________________________________75

To View Thread Information ______________________________________________75

SGX 5150 IoT Device Gateway User Guide 6

TM

Traceroute _______________________________________________________________75

To Perform a Traceroute ________________________________________________75

9: Administration 76

Actions _________________________________________________________________77

To Configure Action Settings _____________________________________________78

Python ______________________________________________________________78
Applications ______________________________________________________________79

To Configure Application Settings _________________________________________80
CLI _____________________________________________________________________80

CLI Status and Configuration _____________________________________________80

To View and Configure Basic CLI Settings ___________________________________81
Clock ___________________________________________________________________81

To Specify a Clock-Setting Method ________________________________________82
Discovery _______________________________________________________________82

To Configure Discovery _________________________________________________82
Email ___________________________________________________________________83

To View, Configure and Send Email ________________________________________83
FTP ____________________________________________________________________84

To Configure FTP Settings _______________________________________________84
Gateway ________________________________________________________________84

Status _______________________________________________________________84

WAN ________________________________________________________________85

WAN MAC Address Filters _______________________________________________85

To Configure Gateway WAN Settings ______________________________________85

Port Forwarding _______________________________________________________86

To Configure Gateway Port Forwarding Settings ______________________________87

Static Routes _________________________________________________________87

To Configure Gateway Static Route Settings _________________________________87

DHCP Server _________________________________________________________88

To Configure Gateway DHCP Server Settings ________________________________88

Static Lease Listing ____________________________________________________89

Routing Protocols ______________________________________________________89

To Configure Gateway Routing Protocol Settings _____________________________90

Virtual IP _____________________________________________________________90

To Configure Gateway Virtual IP __________________________________________91
GRE ___________________________________________________________________91

To Configure GRE Settings ______________________________________________92
Host ____________________________________________________________________92

To Configure Host Settings ______________________________________________92
HTTP ___________________________________________________________________93

Interface Status, Configuration and Authentication ____________________________93

To View or Configure HTTP Authentication __________________________________94

SGX 5150 IoT Device Gateway User Guide 7

TM

To Configure HTTP Authentication _________________________________________95
Line ____________________________________________________________________95

Line Status and Configuration ____________________________________________95

To View and Configure Line Configuration and Command Mode _________________97
MACH10 ________________________________________________________________97

To Configure MACH10 Client _____________________________________________97

To Configure MACH10 Line 1 or Line 2 _____________________________________98

To Configure MACH10 USB 1 ____________________________________________99

To Configure MACH10 __________________________________________________99
Modbus ________________________________________________________________100

Serial Transmission Mode ______________________________________________100

Modbus Statistics _____________________________________________________100

Modbus Configuration _________________________________________________100

To View and Configure the Modbus Server _________________________________101
RSS ___________________________________________________________________101

To Configure RSS Settings _____________________________________________102
SMTP _________________________________________________________________102

To Configure SMTP Settings ____________________________________________102
SNMP Settings __________________________________________________________103

To Configure SNMP Settings ____________________________________________104
SSH ___________________________________________________________________104

SSH Server: Host Keys ________________________________________________104

SSH Server: Authorized Users ___________________________________________105

SSH Client: Known Hosts _______________________________________________105

SSH Client: Users _____________________________________________________106

To Configure SSH Settings _____________________________________________107
SSL ___________________________________________________________________108

Credentials __________________________________________________________108

To Create a New Credential _____________________________________________108

To Delete a Credential _________________________________________________108

To Configure an SSL Credential to Use an Uploaded Certificate _________________109

To Configure an SSL Credential to Use a Self-Signed Certificate ________________110

Trusted Authorities ____________________________________________________110

To Upload an Authority Certificate ________________________________________111

CSR (Certificate Signing Request) ________________________________________111
Syslog _________________________________________________________________112

To Configure Syslog Settings ____________________________________________112
System ________________________________________________________________113

To access System settings: _____________________________________________114
Terminal _______________________________________________________________114

To Configure the Terminal Network Connection ______________________________115

To Configure the Terminal Line or USB Connection __________________________115
Tunnel _________________________________________________________________116

SGX 5150 IoT Device Gateway User Guide 8

TM

Tunnel Statistics ______________________________________________________116

To View Tunnel Statistics _______________________________________________116

Serial Settings _______________________________________________________116

To Configure Tunnel Serial Settings _______________________________________117

Packing Mode ________________________________________________________117

To Configure Tunnel Packing Mode Settings ________________________________118

Accept Mode _________________________________________________________118

To Configure Tunnel Accept Mode Settings _________________________________120

Connect Mode _______________________________________________________120

To Configure Tunnel Connect Mode Settings _______________________________123

Connecting Multiple Hosts ______________________________________________123

Host List Promotion ___________________________________________________124

Disconnect Mode _____________________________________________________124

To Configure Tunnel Disconnect Mode Settings _____________________________124

Modem Emulation _____________________________________________________125

To Configure Tunnel Modem Emulation Settings _____________________________126
USB ___________________________________________________________________126

USB Statistics ________________________________________________________126

To View USB Statistics _________________________________________________126

USB Configuration ____________________________________________________126

To Configure USB Settings _____________________________________________127

USB Command Mode __________________________________________________127

To Configure USB Command Mode _______________________________________127
User Management ________________________________________________________128

To Configure User Management _________________________________________130
XML ___________________________________________________________________130

To Export Configuration ________________________________________________131

To Export Status ______________________________________________________131

To Import Configuration ________________________________________________132
Quick Setup _____________________________________________________________134

To Utilize Quick Setup _________________________________________________134

A: Lantronix Technical Support 136

B: Compliance 137

SGX 5150 Regulatory Domains _____________________________________________141
RoHS, REACH and WEEE Compliance Statement ______________________________142

SGX 5150 IoT Device Gateway User Guide 9

TM

List of Figures

Figure 2-1 Serial to Wi-Fi or Ethernet _________________________________________________19
Figure 2-2 Ethernet to Wi-Fi Bridge __________________________________________________19
Figure 2-3 Product Label __________________________________________________________22
Figure 3-1 Front Panel ____________________________________________________________24
Figure 3-3 Back Panel_____________________________________________________________24
Figure 3-5 RJ45 Serial Port_________________________________________________________25
Figure 3-13 Wi-Fi Protected Setup ___________________________________________________27
Figure 3-15 SGX 5150 Dimensions in Inches (in) and Millimeters (mm) ______________________29
Figure 3-16 Optional Bracket Installation ______________________________________________30
Figure 5-1 Status Page (Section 1 of 2) _______________________________________________36
Figure 5-2 Status Page (Section 2 of 2) _______________________________________________37
Figure 5-3 Components of the Web Manager Page ______________________________________38
Figure 5-4 Expandable Menu Bar Selections ___________________________________________38
Figure B-1 EU Declaration of Conformity _____________________________________________138

SGX 5150 IoT Device Gateway User Guide 10

TM

List of Tables

Table 3-2 SGX 5150 LEDs and Descriptions __________________________________________ 24
Table 3-4 Serial RJ45 Connector Pinout and LEDs _____________________________________ 25
Table 3-6 USB Type C Connector Pinout_____________________________________________ 25
Table 3-7 Power Input Interface ____________________________________________________ 26
Table 3-8 Ethernet RJ45 Connector Pinout ___________________________________________ 26
Table 3-9 Left Ethernet LED _______________________________________________________ 26
Table 3-10 Right Ethernet LED_____________________________________________________ 27
Table 3-11 WLAN Signal Strength Indicator at 2.4 GHz__________________________________ 27
Table 3-12 WLAN Signal Strength Indicator at 5 GHz ___________________________________ 27
Table 3-14 WPS Status Indicator ___________________________________________________ 28
Table 4-1 SGX 5150 Configuration in DeviceInstaller ___________________________________ 33
Table 5-5 Web Manager Pages ____________________________________________________ 39
Table 6-1 Access Point Settings ____________________________________________________ 41
Table 6-2 Bridge Settings _________________________________________________________ 43
Table 6-3 Wired (eth0) Network Interface_____________________________________________ 45
Table 6-4 Link (eth0) Configuration__________________________________________________ 47
Table 6-5 Wired (eth0) Network QoS Settings _________________________________________ 48
Table 6-6 Wired (eth0) Network Failover Settings ______________________________________ 49
Table 6-7 Wireless (wlan0) Interface Configuration _____________________________________ 50
Table 6-8 Wireless (wlan0) Link Configuration _________________________________________ 52
Table 6-9 Wireless (wlan0) Network QoS Settings______________________________________ 53
Table 6-10 Adding or Deleting Wireless (wlan0) Network QoS Settings _____________________ 54
Table 6-11 Wireless (wlan0) Network Failover _________________________________________ 54
Table 6-12 Wired (usb0) Network Interface ___________________________________________ 55
Table 6-13 Wired (usb0) Network QoS Settings________________________________________ 58
Table 6-14 Wired (usb0) Network Failover Settings _____________________________________ 58
Table 6-15 IP Protocol Stack Settings _______________________________________________ 59
Table 6-16 ICMP Protocol Stack Settings_____________________________________________ 60
Table 6-17 ARP Protocol Stack Settings _____________________________________________ 60
Table 6-18 VPN_________________________________________________________________ 61
Table 6-19 Wi-Fi Protected Setup___________________________________________________ 63
Table 6-20 WLAN Scan/Quick Connect Results________________________________________ 64
Table 6-21 WLAN Profiles_________________________________________________________ 65
Table 6-22 Individual WLAN Profile Settings __________________________________________ 66
Table 7-1 File Modification Settings _________________________________________________ 69

SGX 5150 IoT Device Gateway User Guide 11

TM

Table 7-2 File Transfer Settings ____________________________________________________ 69
Table 8-1 DNS Settings __________________________________________________________ 71
Table 8-2 Log Settings ___________________________________________________________ 73
Table 8-3 Ping Configuration ______________________________________________________ 73
Table 8-4 Traceroute Settings______________________________________________________ 75
Table 9-1 Action Settings _________________________________________________________ 77
Table 9-2 Script Settings__________________________________________________________ 79
Table 9-3 CLI Configuration Settings ________________________________________________ 80
Table 9-4 Clock Settings__________________________________________________________ 81
Table 9-5 Discovery Settings ______________________________________________________ 82
Table 9-6 Email Configuration______________________________________________________ 83
Table 9-7 FTP Settings___________________________________________________________ 84
Table 9-8 WAN Configuration ______________________________________________________ 85
Table 9-9 Adding a New MAC Address Filters _________________________________________ 85
Table 9-10 Port Forwarding Rules List _______________________________________________ 86
Table 9-11 Adding a New Port Forwarding Rule________________________________________ 86
Table 9-12 Static Route Setting Routes ______________________________________________ 87
Table 9-13 Adding a New Static Route_______________________________________________ 87
Table 9-14 DHCP Settings ________________________________________________________ 88
Table 9-15 Static Lease Listing_____________________________________________________ 89
Table 9-16 Add a Static Lease _____________________________________________________ 89
Table 9-17 Routing Protocol Settings ________________________________________________ 89
Table 9-18 Virtual IP Settings ______________________________________________________ 90
Table 9-19 Add a Virtual IP________________________________________________________ 91
Table 9-20 GRE Settings _________________________________________________________ 91
Table 9-21 Host Settings__________________________________________________________ 92
Table 9-22 HTTP Configuration ____________________________________________________ 93
Table 9-23 HTTP Authentication____________________________________________________ 94
Table 9-24 Line Configuration Settings_______________________________________________ 96
Table 9-25 Line Command Mode Setting _____________________________________________ 96
Table 9-26 MACH10 Client Configuration_____________________________________________ 98
Table 9-27 MACH10 Client Advanced Configuration ____________________________________ 98
Table 9-28 MACH10 Line _________________________________________________________ 99
Table 9-29 MACH10 Client USB____________________________________________________ 99
Table 9-30 Byte Header of Modbus Application Protocol ________________________________ 100
Table 9-31 Modbus Transmission Modes____________________________________________ 100
Table 9-32 Modbus Configuration__________________________________________________ 101
Table 9-33 RSS________________________________________________________________ 101

SGX 5150 IoT Device Gateway User Guide 12

TM

Table 9-34 SMTP Settings _______________________________________________________ 102
Table 9-35 SNMP Settings _______________________________________________________ 103
Table 9-36 SSH Server Host Keys _________________________________________________ 104
Table 9-37 SSH Server Authorized Users ___________________________________________ 105
Table 9-38 SSH Client Known Hosts _______________________________________________ 106
Table 9-39 SSH Client Users _____________________________________________________ 106
Table 9-40 Create New Keys _____________________________________________________ 107
Table 9-41 SSL Credential - Upload Certificate _______________________________________ 109
Table 9-42 SSL Credential - Create New Self-Signed Certificate__________________________ 109
Table 9-43 SSL Trusted Authority__________________________________________________ 110
Table 9-44 SSL CSR (Certificate Signing Request) ____________________________________ 111
Table 9-45 System Settings ______________________________________________________ 113
Table 9-46 Terminal on Network and Line Settings ____________________________________ 114
Table 9-47 Tunnel Serial Settings__________________________________________________ 116
Table 9-48 Tunnel Packing Mode Settings___________________________________________ 117
Table 9-49 Tunnel Accept Mode Settings____________________________________________ 119
Table 9-50 Tunnel Connect Mode Settings___________________________________________ 121
Table 9-51 Host Settings_________________________________________________________ 122
Table 9-52 Tunnel Disconnect Mode Settings ________________________________________ 124
Table 9-53 Tunnel Modem Emulation Settings________________________________________ 125
Table 9-54 USB Configuration ____________________________________________________ 126
Table 9-55 USB Command Mode__________________________________________________ 127
Table 9-56 Administrator Settings__________________________________________________ 128
Table 9-57 Current Users List_____________________________________________________ 128
Table 9-58 New User Settings ____________________________________________________ 128
Table 9-59 Current Roles List _____________________________________________________ 129
Table 9-60 New Role Settings ____________________________________________________ 129
Table 9-61 Configuration from Filesystem ___________________________________________ 133
Table 9-62 Line(s) from single line Settings on the Filesystem____________________________ 133
Table 9-63 Bridge 1 (br0) Configuration _____________________________________________ 134
Table 9-64 Wi-Fi Protected Setup__________________________________________________ 134
Table 9-65 Current Configuration __________________________________________________ 134
Table 9-66 Available Networks ____________________________________________________ 135
Table B-2 EU Declaration of Conformity _____________________________________________139
Table B-3 Country Transmitter IDs _________________________________________________140
Table B-4 SGX 5150 Module RF Output Power _______________________________________140
Table B-5 20 MHz Channels ______________________________________________________141
Table B-6 40 MHz Channels ______________________________________________________142

SGX 5150 IoT Device Gateway User Guide 13

TM

Table B-7 80 MHz Channels ______________________________________________________142

SGX 5150 IoT Device Gateway User Guide 14

TM

1: Using This Guide

TM

Purpose and Audience

This document provides information needed to configure, use, and update the Lantronix® SGX
SGX 5150 IoT Device Gateway User Guide5150 IoT device gateway. It is intended for system

integrators who are configuring this product.

Summary of Chapters

The remaining chapters in this guide include:

Chapter Description

2: Introduction Describes main features of the product and the protocols it supports.

3: Installation of the SGX 5150 Instructions for installing the SGX 5150.
4: Using DeviceInstaller Instructions for viewing the current configuration using the Lantronix

5: Configuration Using Web Manager Instructions for accessing Web Manager and using it to configure

6: Network Settings Instructions to view and configure access point, bridge, wired

7: Filesystem Instructions to view and configure the filesystem.
8: Diagnostics Instructions to view and configure DNS, hardware, IP socket, log,

9: Administration Instructions to view and configure CLI, clock, discovery, FTP, HTTP,

A: Lantronix Technical Support Instructions for contacting Lantronix Technical Support.
B: Compliance Provides SGX 5150 compliance information.

Includes technical specifications.

DeviceInstaller

settings for the SGX 5150 gateway.

network, wireless network, protocol stack Wi-Fi protected setup,
WLAN Scan, QuickConnect, and WLAN Profiles settings.

memory, ping, processes, routes, threads, and traceroute
information.

line, SSL, syslog, system, terminal, user management, xml, and
quick setup information.

™ application.

Additional Documentation

Visit the Lantronix Web site at www.lantronix.com/support/documentation for all the latest
Lantronix documentation including the following documents related to this product.

Document Description

SGX 5150 IoT Device Gateway
Command Reference

SGX 5150 IoT Device Gateway Quick
Start Guide

SGX 5150 IoT Device Gateway User Guide 15

Instructions for accessing command mode (the command line
interface) using a Telnet connection, SSH connection or through
the serial port. Detailed information about the commands, XML
configuration, and status are provided.

Instructions for getting the SGX 5150 unit up and running.

1: Using This Guide

TM

Document (continued) Description

DeviceInstaller Utility Online Help Instructions for using the Windows® operating system-based utility

to locate the SGX 5150 gateway and to view its current settings.

Com Port Redirector Quick Start
and Online Help

Secure Com Port Redirector User
Guide

Instructions for using the Windows operating system-based utility to
create virtual com ports.

Instructions for using the Windows operating system-based utility to
create secure virtual com ports.

SGX 5150 IoT Device Gateway User Guide 16

TM

2: Introduction

The SGX 5150 is a turnkey WLAN IoT device gateway that securely connects deployed devices to
the enterprise network through serial, USB or Ethernet interfaces. It simplifies enterprise Wi-Fi®
deployments and accelerates the availability of connected devices within enterprise, medical/
healthcare and industrial automation applications.

Note: This user guide describes all software features supported in the Lantronix SGX

5150 device gateway models available for purchase. Depending on the specific SGX 5150
device gateway model you have purchased, some descriptions may not apply.

Key Features

 Power Supply: Flexible power options and input voltage range (one barrel connector for 9-30

VDC power source, USB type C VBUS 5V, and optional PoE power input via Ethernet RJ45
interface

 Controller: 32-bit ARM9 microprocessor running at 400 megahertz (Mhz) with 32 Kilobyte

(KB) configurable cache

 Memory: 400 MHz ARM9, 64 MB SDRAM and 128 MB NAND flash

 Ethernet:

- One RJ45 10Base-T/100Base-TX Ethernet port

- Auto sensing

- Automatic MDI/MDI-X crossover

- Full duplex IEEE 802.3x flow control

- Half-duplex back pressure flow control

- Hardware Optional PoE Power Input (Class 2)
Supports inputs at both Spare Pins or Ethernet Center Taps

 Wireless:

- 5G Wi-Fi (IEEE 802.11ac)

• 1x1 ac (MCS0 - MCS9)

• 20, 40 and 80 MHz Channels with optional SGI

- IEEE 802.11 n

• 1x1 n (MCS0 - MCS7)

• 20 MHz and 40 MHz channel width with optional SGI

- Advanced 802.11 n/ac Features

• Tx/Rx Low Density Party Check (LDPC)

• Rx Space Time Block Coding (STBC)

- Compatible with IEEE 802.11 a/b/g and supports IEEE 802.11 d/h

- Bluetooth/WLAN Coexistence

- Dual band 2.4 GHz and 5 GHz

SGX 5150 IoT Device Gateway User Guide 17

TM

• 2.412 GHz - 2.484 GHz - Channels 1 - 14

• U-NII-1 (5.15 – 5.25 GHz) Channels 36, 40, 44, 48

• U-NII-2 (5.25 – 5.35 GHz) Channels 52, 56, 60, 64

• U-NII-2e (5.47 – 5.725 GHz) Channels 100 – 140

• U-NII-3 (5.725 – 5.825 GHz) Channels 149 - 165

 Serial Ports: Two 300 to 921 kbaud with options of RS-232 serial ports or multi-protocol

RS232/422/485 serial ports

 USB Ports: One USB 2.0 high speed interfaces via USB type C connector

 Configuration via CLI, XML and HTTP.

 Ethernet to wireless tunneling

 Built-in site survey tool

 Temperature Range: Operates over a temperature range of -40°C to +70°C (-40°F to 158°F).

The storage temperature range is -40°C to 85°C (-40°F to 185°F)

Applications

2: Introduction

 Home energy management systems

 Medical device and clinical information system (CIS) integration

 Asset and warehouse management

 Mobile driven human-machine interface (HMI) and instrumentation

 Industrial machines - weighing scales, automation controllers

SGX 5150 IoT Device Gateway User Guide 18

TM

SGX 5150 User Cases

2: Introduction

Figure 2-1 Serial to Wi-Fi or Ethernet

Protocol Support

The SGX 5150 contains a full-featured IP networking and wireless software stack:

 DHCP Client, DHCP Server, DHCPv6 Client

Figure 2-2 Ethernet to Wi-Fi Bridge

 uPnP (Discovery), LCAP (77FE), Telnet, SSH, SSLv3/TLSv1, (S)FTP, HTTP(S)

 IPv4/IPv6, TCP, UDP, ICMP, ARP, Auto-IP, DNS, SNMP v2/v3

 WPA/WPA2 Personal, WPA2 Enterprise (EAP-TLS, EAP-TTLS, EAP-PEAPv0/v1, EAP-

FAST)

SGX 5150 IoT Device Gateway User Guide 19

TM

Troubleshooting Capabilities

The SGX 5150 offers a comprehensive diagnostic tool set that lets you troubleshoot problems
quickly and easily. Diagnostic tools available in the CLI or Web Manager allow you to:

 View critical hardware, memory, buffer pool, IP socket information and routing table

 Perform ping and traceroute operations

 Conduct forward or reverse DNS lookup operations

 View all processes currently running on the SGX 5150 including CPU utilization

 View system log messages

Configuration Methods

After installation, the SGX 5150 requires configuration. For the unit to operate correctly on a
network, it must have a unique IP address on the network. There are four basic methods for
logging into the SGX 5150 and assigning IP addresses and other configurable settings:

 Web Manager: View and configure all settings easily through a web browser using the

Lantronix Web Manager. See Chapter 5: Configuration Using Web Manager.

2: Introduction

 DeviceInstaller: Configure the IP address and related settings and view current settings on

the SGX 5150 using a Graphical User Interface (GUI) on a PC attached to a network. You will
need the latest version of the Lantronix® DeviceInstaller™ utility.
See Chapter 4: Using DeviceInstaller.

 Command Mode: Two methods for accessing Command Mode (CLI) include making a Telnet

or SSH connection, or connecting a PC or other host running a terminal emulation program to
the unit’s serial port. See the SGX 5150 IoT Device Gateway Command Reference for
instructions and available commands.

 XML: The SGX 5150 supports XML-based configuration and setup records that make device

configuration transparent to users and administrators. XML is easily editable with a standard
text or XML editor. See the SGX 5150 IoT Device Gateway Command Reference for
instructions and commands.

Addresses and Port Numbers

Hardware Address

The hardware address is also referred to as the Ethernet address, physical address, or MAC
address. The first three bytes of the Ethernet address are fixed and identify the unit as a Lantronix
product. The fourth, fifth, and sixth bytes are unique numbers assigned to each unit.

Sample ways hardware address may be represented:

 00-80-A3-14-1B-18

 00:80:A3:14:1B:18

SGX 5150 IoT Device Gateway User Guide 20

2: Introduction

TM

IP Address

Every device connected to an IP network must have a unique IPv4 address. This address
references the specific unit.

Port Numbers

Every TCP connection and every UDP datagram is defined by a destination and source IP
address, and a destination and source port number. For example, a Telnet server commonly uses
TCP port number 23.

The following is a list of the default server port numbers running on the SGX 5150:

 TCP Port 22: SSH Server (Command Mode configuration)

 TCP Port 23: Telnet Server (Command Mode configuration)

 TCP Port 80: HTTP (Web Manager Configuration)

 TCP Port 21: FTP

 TCP Port 443: HTTPS

 UDP Port 30718: Lantronix Discovery Protocol

Product Information Label

The product information label on the SGX 5150 gateway contains the following information about
the specific unit:

 Model Name

 Product Part Number

 Barcode

 Product Revision

 Country of Manufacturing Origin

 Serial Number

SGX 5150 IoT Device Gateway User Guide 21

TM

Figure 2-3 Product Label

2: Introduction

SGX 5150 IoT Device Gateway User Guide 22

TM

3: Installation of the SGX 5150

This chapter describes how to install the SGX 5150 device gateway. It contains the following
sections:

 Package Contents

 User-Supplied Items

 Hardware Components

 Installing the SGX 5150

Warning: This is a Class B product based on the standard of the Voluntary

Control Council for Interference from Information Technology
Equipment (VCCI). If this is used near a radio or television receiver in a
domestic environment, it may cause radio interference. Install and use
the equipment according to the instruction manual.

Package Contents

The SGX 5150 package includes the following items:

 SGX 5150 IoT device gateway

 2 external antennas with RP-SMA connectors

 Type A to type C USB cable

Note: This cable is compliant to the specification mandated 56k Ω pull-up.

 SGX 5150 IoT Device Gateway Quick Start Guide

Note: External power supply IS NOT provided with the SGX 5150 gateway.

User-Supplied Items

To complete your installation, you need the following items:

 RS-232/422/485 serial device(s) requiring network connectivity

 A serial cable for each serial device

- A null modem cable to connect the serial port to another DTE device.

- A straight-through modem cable to connect the serial port to a DCE device

 An available connection to your Ethernet network and an Ethernet cable

 Power supply

 5V supply through Type A to Type C USB cable, OR

 Optional 12 VDC (10W, 2.1 mm barrel connector) wall cube power supply (Lantronix part

number 520-154-R or equivalent)

SGX 5150 IoT Device Gateway User Guide 23

TM

Hardware Components

Front Panel

Table 3-2 SGX 5150 LEDs and Descriptions

LED Description

Status  No IP obtained from eth0 network: L, L, S, S, S

 No IP obtained from wlan0 network: L, L, L, S, S, S
 No IP obtained from the usb0 network: L, L, L, L, L, S
 No eth0 link: L, L, S, S
 No wlan link: L, L, L, S, S
 No usb0 link: L, L, L, L, L, S, S

WLAN The wlan indicator light and color pattern indicates the wlan status according to

Table 3-11 and Table 3-12 and also reflects the WPS status according to
Table 3-14.

Signal See Table 3-11 and Table 3-12 for signal strength indication information.

3: Installation of the SGX 5150

Figure 3-1 Front Panel

Note: In Table 3-2 above, the L indicates a longer LED blink while the S indicates

shorter LED blink.

Back Panel

Figure 3-3 Back Panel

Serial Interface

One or two serial ports are available for the SGX 5150. Data rates can be configured for speeds
between 300 and 921 kbaud. Hardware protocol options include the following:

 Two RJ45 RS232 Serial Ports, or

 Two RJ45 Multi-protocol RS232/422/485 ports, or

 One RJ45 RS232 Serial Port

Note: Multi-protocol ports come with configurable terminations 120 ohm on TX+/- and

RX+/-.

SGX 5150 IoT Device Gateway User Guide 24

3: Installation of the SGX 5150

TM

Figure 3-5 RJ45 Serial Port

Table 3-6 USB Type C Connector Pinout

Upper Row Pin
Number

Lower Row Pin
Number

Signal Name

A1 B1 Ground
A2 B2 No Connection
A3 B3 No Connection
A4 B4 VBUS 5V
A5 CC1

B5 CC2
A6 B6 Data+
A7 B7 Data­A8 B8 No Connection
A9 B9 VBUS 5V
A10 B10 No Connection
A11 B11 No Connection
A12 B12 Ground

Table 3-4 Serial RJ45 Connector Pinout and LEDs

Pin Number Signal Name for RS-232 Signal Name for

RS-422/485 (4 wire)

1 RTS (output from SGX) TX+ (output from SGX) TX+/RX+
2 DTR (output from SGX) Not used/do not connect. Not used/do not connect
3 TXD (output from SGX) TX- (output from SGX) TX-/RX-
4 GND GND GND
5 GND GND GND
6 RXD (input to SGX) RX+ (input to SGX) Not used/do not connect
7 DCD (input to SGX) Not used/do not connect. Not used/do not connect
8 CTS (input to SGX) RX- (input to SGX) Not used/do not connect
Right LED Yellow for Transmit Data

activities (TXD)

Left LED Green for Receive Data

activities (RXD)

Yellow for Transmit Data
activities (TXD)

Green for Receive Data
activities (RXD)

Signal Name for
RS485 2-Wire

Yellow for Transmit Data
activities (TX)

Green for Receive Data
activities (RX)

Note: For the proper operation of the RS422/485

4-wire, the 2-wire modes, as well as the RS232
mode, a GND (Ground) wire must be connected
between the equipment.

USB Connection

One USB 2.0 HS/FS port with
USB type C connector is
available on the SGX 5150 and
can be configured in two ways:

SGX 5150 IoT Device Gateway User Guide 25

 As a USB device (default

setting) where the SGX 5150
can be powered by a VBUS
5V.

 As a USB configurable host

where the SGX 5150 can
provide VBUS 5V 0.5A if
powered by a Lantronix
provided wall adapter or PoE
(hardware optional).

TM

Power

Table 3-7 Power Input Interface

Power Input Description

Barrel Connector  Center contact fork type for better grip

 9-30 VDC Input with center = (+)
 Reverse polarity protection up to 30 VDC

USB Type C

Connector

Ethernet PoE

RJ45 Connector

Power

Consumptions

 USB VBUS 5V powering (default setting)
 SGX can provide VBUS 5V 0.5A out if configured as USB host, and powered by

Lantronix provided wall adaptor, or PoE power source class 2 (hardware optional)

 PoE power module is optional
 Must provide class 2 PoE power source
 Supports power inputs at both spare pins or Ethernet center taps with full bridge

diodes for polarity in-discrimination.

 1.9 W typical if configured as USB Device, or USB Host - but not providing VBUS 5V

power

 5.5 W maximum if configured as USB Host and providing out VBUS 5V power
 The internal hardware configuration allows more than one or all power sources

applied at the same time for power back up if one of them happens to fail (caution:
may not be error-free). Not designed for one power source to take precedence over

the other.

3: Installation of the SGX 5150

Ethernet Ports

The Ethernet port has two LEDs (see Table 3-2) that indicate the status of the connection as
described inTable 3-9 and Table 3-10 below.

Table 3-8 Ethernet RJ45 Connector Pinout

Pin Number Signal Name

1 ETX+
2 ETX-
3 ERX+
4 Spare pin for PoE power input_1
5 Spare pin for PoE power input_1
6 ERX-
7 Spare pin for PoE power input_2
8 Spare pin for PoE power input_2
Right LED See Table 3-9.
Left LED See Table 3-10.

Table 3-9 Left Ethernet LED

Color/Status Solid Light

Yellow 100 Mbps activity
OFF 10 Mbps activity

SGX 5150 IoT Device Gateway User Guide 26

3: Installation of the SGX 5150

TM

WPS
Button

WLAN & WPS
Status Indicator

Table 3-10 Right Ethernet LED

Color/Status Blinking Light

Green Link Up
OFF No Link

The Ethernet port can conect to an Ethernet (10 Mbps) or fast Ethernet (100 Mbps) network.

Table 3-11 WLAN Signal Strength Indicator at 2.4 GHz

Fault Conditions Blink Pattern

Greater than -60 dbM 3
Greater than -70 dbM and less than -60 dbM 2
Greater than -80 dbM and less than -70 dbM 1
Less than -80 dBm All OFF

Table 3-12 WLAN Signal Strength Indicator at 5 GHz

Fault Conditions Blink Pattern

Greater than -60 dbM 3
Greater than -65 dbM and less than -60 dbM 2
Greater than -70 dbM and less than -65 dbM 1
Less than -70 dBm All OFF

Wi-Fi Protected Setup (WPS)

Using WPS, you have the option of connecting to SGX 5150 devices with a router or access point
in a single operation instead of manually creating a profile with a network name (SSID), setting up
wireless security parameters and updating the choice list.

Figure 3-13 Wi-Fi Protected Setup

SGX 5150 IoT Device Gateway User Guide 27

3: Installation of the SGX 5150

TM

Table 3-14 WPS Status Indicator

The WLAN link LED is used to indicate WPS status. See below for blink patterns.

WPS Status Blink Pattern

WPS is enabled and on Short, continuous
WPS has a profile error Long, long, long, short, short, 2 seconds off, continuous
WPS has a timeout error Long, long, long, short, short, short, short, 2 seconds off, continuous

Notes:

 For Table 3-12 above, a “long” blink is 0.7 seconds of light followed by 0.3 seconds of

no light. A “short” blink is a light that is on for only 0.2 seconds and followed by 0.2
seconds of no light.

 The diagnostic blink patterns reflect the highest priority fault condition. Also, the

Diagnostic LED will give an initial, identifying blink pattern to indicate the type of
diagnostic information it will display. All power and other non-network related
diagnostic patterns begin with one long blink. All wired LAN related diagnostics
patterns begin with two long blinks. All WLAN-related diagnostics patterns begin with
three long blinks.

Reset Button

Press the Reset button as shown in Figure 3-1 for 6 seconds to reset the SGX 5150 configuration
parameters to factory defaults and reboot.

To Start WPS

Using the Device

1. Place the end of a paper clip or similar object into the WPS opening (see Figure 3-13) and
press and hold down for a minimum of 5 seconds.

2. Remove the paper clip to release the button. The unit will start Wi-Fi protected setup.

Installing the SGX 5150

Be sure to place or mount the SGX 5150 gateway securely on a flat horizontal or vertical surface.
The gateway comes with brackets for mounting it, for example, on a wall. If using AC power, do
not use outlets controlled by a wall switch.

Observe the following guidelines when connecting the serial devices:

 The SGX 5150 serial ports support RS-232 or multi-protocol RS232/422/485 serial ports.

 Use a null modem cable to connect the serial port to another DTE device. Use a straight-

though (modem) cable to connect the serial port to a DCE device.

 Connect your RJ-45 Ethernet cable to the RJ-45 port of the unit.

Perform the following steps to install your device:

1. Attach the two antennas to the SGX 5150 gateway.

2. Connect the equipment to the numbered device port (Serial 1/Serial 2) using appropriate
cables and adapters.

SGX 5150 IoT Device Gateway User Guide 28

3: Installation of the SGX 5150

TM

3. Mount or place the SGX 5150 gateway securely.

4. Supply power to the SGX 5150 and connect it to the user device by using the supplied type A
to type C USB cable. As soon as you plug the gateway into power, it powers up automatically,
the self-test begins, and LEDs would indicate the gateway’s status.

Note: The SGX 5150 supports a power range of 9 to 30 VDC and can be powered up via

the barrel-power adapter or USB port.

5. Via the computer connected on the same network, you can follow one of two paths to device
discovery and initial network configuration as outlined below.

Note: Antennas must be installed prior to powering on the unit. Do not remove or

connect the antennas while the unit power is on or proper wireless signals may not be
transmitted or received as intended.

Figure 3-15 SGX 5150 Dimensions in Inches (in) and Millimeters (mm)

SGX 5150 IoT Device Gateway User Guide 29

TM

Optional SGX 5150 Bracket

A bracket accessory for securing the SGX 5150 IoT device gateway can be purchased at the
Lantronix Online Store at https://store.lantronix.com/

7055. Purchased brackets will come with an installation guide.

Figure 3-16 Optional Bracket Installation

3: Installation of the SGX 5150

or by calling Lantronix Sales at 800-422-

SGX 5150 IoT Device Gateway User Guide 30

TM

Wireless Quick Connect

Continue with these steps for Wireless Quick Connect after installing the SGX 5150 IoT device
gateway.

1. From your Wi-Fi device, connect to SSID sgx5150_*, where * is your gateway 12-digit serial
number.

2. From your browser, connect to 192.168.0.1 using these login credentials:

 User ID = admin

 Password = PASS

Note: For security purposes, please change the admin password during initial setup.

3. Select Wireless Quick Connect, choose the appropriate network name for the gateway
connection, and follow the prompts for your wireless network required security parameters.

4. Click Apply to save and complete the wireless network setup.

3: Installation of the SGX 5150

SGX 5150 IoT Device Gateway User Guide 31

TM

4: Using DeviceInstaller

This chapter covers the steps for getting the SGX 5150 unit online and for viewing its current
configuration though the Lantronix DeviceInstaller application. DeviceInstaller is a free utility
program that discovers, configures, upgrades, and manages Lantronix devices. It can be
downloaded from the Lantronix website at www.lantronix.com/support/downloads

For instructions on using DeviceInstaller to configure the IP address and related settings or for
more advanced features, see the DeviceInstaller Online Help.

Note: Auto IP generates a random IP address in the range of 169.254.0.1 to

169.254.255.254, with a netmask of 255.255.0.0, if no BOOTP or DHCP server is found.

These addresses are not routable.

Installing DeviceInstaller

1. Download the latest version of Lantronix DeviceInstaller application from:

www.lantronix.com/support/downloads

2. Run the executable to start the installation process.

3. Respond to the installation wizard prompts. (If prompted to select an installation type, select
Typical.)

.

.

Accessing the SGX 5150 Using DeviceInstaller

Note: Make note of the MAC address on your SGX 5150 unit. It may be needed to

perform various functions in the DeviceInstaller application.

1. Click StartAll Programs  Lantronix DeviceInstaller 4.4  DeviceInstaller.

2. When DeviceInstaller starts, it will perform a network device search. To perform another
search, click Search.

3. Expand the SGX folder by clicking the + symbol next to the folder icon. A list of available
Lantronix SGX 5150 units appears.

4. Select a SGX 5150 unit by expanding its entry and clicking on its IP address to view its
configuration.

5. On the right page, click the Device Info tab. The current SGX 5150 configuration appears.
This is only a subset of the full configuration; the full configuration may be accessed via Web
Manager, CLI, or XML.

SGX 5150 IoT Device Gateway User Guide 32

4: Using DeviceInstaller

TM

Table 4-1 SGX 5150 Configuration in DeviceInstaller

Current Settings Description

Name

DHCP Device Name Non-configurable field. Displays the name associated with SGX 5150 unit’s

Group

Comments Configurable field. Information about the SGX 5150 unit. Double-click the field,

Device Family Non-configurable field. Displays the SGX 5150 units device family as “SGX.”
Short Name Shows “sgx5150” by default.
Long Name Shows “Lantronix SGX5150” by default.
Type Non-configurable field. Displays the device type as “SGX 5150.”
ID Non-configurable field. Displays the SGX 5150 unit’s ID embedded within th

Hardware Address Non-configurable field. Displays the SGX 5150 unit’s hardware (or MAC)

Firmware Version Non-configurable field. Displays the firmware currently installed on the SGX

Extended Firmware
Version

Online Status Non-configurable field. Displays the SGX 5150 unit’s status as Online, Offline,

IP Address Non-configurable field. Displays the SGX 5150 unit’s current IP address. To

IPV6 Link Local Address Non-configurable field. Displays the SGX 5150 unit’s current IPv6 address. To

IPV6 Global Address Non-configurable field. Displays the SGX 5150 unit’s global address.

IP Address was
Obtained

Subnet Mask Non-configurable field. Displays the SGX 5150 unit’s current subnet mask. To

Configurable field. A name that identifies the SGX 5150 unit. The name field is
blank by default. Double-click the field, type in the value, and press Enter to
complete. This name is not visible on other PCs or laptops using
DeviceInstaller.

current IP address, if the IP address was obtained dynamically.
To change the DHCP device name, see Chapter 5: Configuration Using Web

Manager or see the SGX 5150 IoT Device Gateway Command Reference

available at www.lantronix.com/support/documentation

.

Configurable field. A group name to categorize the SGX 5150 unit. Double­click the field, type in the value, and press Enter to complete. This group
name is not visible on other PCs or laptops using DeviceInstaller.

type in the value, and press Enter to complete. This description or comment is
not visible on other PCs or laptops using DeviceInstaller.

e

unit.

address.

5150 unit.
Non-configurable field. Displays the full version nomenclature of the firmware.

Unreachable (if the unit is on a different subnet), or Busy (the SGX 5150 unit is
currently performing a task.)

change the IP address, click the Assign IP button on the DeviceInstaller menu
bar.

change the IPv6 address, click the Assign IP button on the DeviceInstaller
menu bar.

Non-configurable field. Displays “Dynamically” if the SGX 5150 unit
automatically received an IP address (e.g., from DHCP). Displays “Statically” if
the IP address was configured manually. If the IP address was assigned
dynamically, the following fields appear:

 Obtain with DHCP with value of True or False
 Obtain with BOOTP with value of True or False

change the subnet mask, click the Assign IP button on the DeviceInstaller
menu bar.

SGX 5150 IoT Device Gateway User Guide 33

4: Using DeviceInstaller

TM

Current Settings Description

Gateway Non-configurable field. Displays the SGX 5150 unit’s current gateway. To

change the default gateway, click the Assign IP button on the DeviceInstaller
menu bar.

Interfaces Non-configurable field. Displays the status of the wired (eth0), wireless (wlan0),

and usb (usb0) interfaces. Click the plus icon to expand eth0, wlan0, or usb0
and see specific interfaces organized beneath each.

Number of Serial Ports Non-configurable field. Displays the number of serial ports on the SGX 5150

unit.

Supports Configurable
Pins

Supports Email Triggers Non-configurable field. Displays True.
Telnet Supported Non-configurable field. Indicates if Telnet sessions are permitted. Displays

Telnet Port Non-configurable field. Displays the SGX 5150 unit’s port for Telnet sessions.
Web Port Non-configurable field. Displays the SGX 5150 unit’s port for Web Manager

Firmware Upgradable Non-configurable field. Displays True, indicating the SGX 5150 firmware is

Non-configurable field. Displays False.

True.

configuration.

upgradable as newer versions become available.

Next Step

Now that the SGX 5150 unit has an IP address and other initial settings, you can configure it.

1. Double-click the unit in the list. Details about the unit display.

2. You have the following options:

 To configure the unit using a Web browser, click the Web Configuration tab. The Lantronix

Web Manager window displays in your browser. Continue with

Chapter 5: Configuration Using Web Manager.

 To configure the unit using a Telnet session, click the Telnet Configuration tab. The Setup

Mode window displays. See the SGX 5150 IoT Device Gateway Command Reference
(available at www.lantronix.com/support/documentation
SGX 5150 unit using Command Line Interface (CLI) and/or Extensible Markup Language
(XML).

) for directions on configuring the

SGX 5150 IoT Device Gateway User Guide 34

TM

5: Configuration Using Web Manager

This chapter describes how to configure the SGX 5150 unit using Web Manager, the Lantronix
browser-based configuration tool. The device’s configuration is stored in non-volatile memory and
is retained across device reset and during loss of power to the device. All changes take effect
immediately, unless otherwise noted. This chapter contains the following sections:

 Accessing Web Manager

 Status Page

 Web Manager Components

 Navigating Web Manager

Accessing Web Manager

Web Manager is normally accessed through a standard web browser but you can also access
Web Manager in two other ways. See Chapter 4: Using DeviceInstaller on page 32 for additional
information on accessing Web Manager through the DeviceInstaller Web Configuration tab. See
the SGX 5150 IoT Device Gateway Quick Start Guide for instructions on accessing Web Manager
through SoftAP. The quick start guide is available at www.lantronix.com/support/documentation

To access Web Manager through a web browser:

.

1. Open a standard web browser. Lantronix supports the latest versions of Internet Explorer®,
Firefox®, Safari®, or Chrome™ web browsers.

2. Enter the IP address or host name of the SGX 5150 unit in the address bar. The IP address
may have been assigned manually using DeviceInstaller (see

Chapter 4: Using DeviceInstaller on page 32) or automatically by DHCP.

3. Enter your username and password. The factory-default username is “admin” and “PASS” is
the default password. The Status web page (see Figure 5-1) displays current configuration
and status details for the device, network and line settings.

SGX 5150 IoT Device Gateway User Guide 35

TM

Status Page

This page appears upon logging into Web Manager and when you click the Status tab.

5: Configuration Using Web Manager

Figure 5-1 Status Page (Section 1 of 2)

SGX 5150 IoT Device Gateway User Guide 36

5: Configuration Using Web Manager

TM

Figure 5-2 Status Page (Section 2 of 2)

SGX 5150 IoT Device Gateway User Guide 37

TM

Web Manager Components

Header

Menu Bar

Status and/or
Configuration Area

These selections can
expand to reveal
additional subsections

Expanded

Figure 5-4 Expandable

Menu Bar Selections

The layout of a typical Web Manager page is below.

Figure 5-3 Components of the Web Manager Page

5: Configuration Using Web Manager

Web Manager pages have these sections:

 The Status, Network, Diagnostics and Administration tabs located in the header at the top

of the page provide direct access to each Web Manager page of the same name. All the
functionality is accessible through Web Manager and is divided between these tab/pages.

 Each Web Manager page accessed through

the header tabs reveal a page-specific menu
bar on the left side organizing available

sections for that page.

 The menu bar accessed via the Network

 Expand or collapse an expandable menu

 The main body area of the page contains either

view-only Status info or Configuration
options according to the tab, menu bar

selection or subsection selected.

 When a parameter is changed on a page, a Submit button will appear at the bottom of the

page. Click on this button to save the change.

 A Logout link is available at the upper right corner of every Setup and Admin page.

In Chrome or Safari, it is necessary to close out of the browser to completely logout.
If necessary, reopen the browser to log back in.

and Administration tabs contain
selections that can further expand to reveal
additional subsections. A right-pointing
blue arrow indicates a particular selection
can be expanded to reveal subsections.

bar section by clicking on it.

SGX 5150 IoT Device Gateway User Guide 38

TM

Navigating Web Manager

The table below provides a shortcut to the various software features available for viewing and
configuration through Web Manager.

Web Manager Page Description Page

Status Shows product information, network, line, and tunneling settings. 36
Access Point Allows you to configure an access point and shows the current operational

state of existing access points.

Action Allows you to view and configure the actions for a specific alarm or report. 77
Applications View and configure application running scripts. 79
Bridge Allows you to configure a bridge and shows the current operational state of

the bridge.

CLI Shows Command Line Interface (CLI) statistics and lets you change the

current CLI configuration settings.

Clock Allows you to view and configure the current date, time and time zone as it

displays in web manager.

Diagnostics Lets you perform various diagnostic procedures. 71
Discovery Allows you to view and modify the configuration and statistics for device

discovery.

DNS Displays the current status of the DNS subsystem. 71
Email Shows email statistics and lets you clear the email log, configure email

settings, and send an email.

Filesystem Shows file system statistics and lets you browse the file system to view a

file, create a file or directory, upload files using HTTP, copy a file, move a
file, or perform TFTP actions.

FTP Shows statistics and lets you change the current configuration for the File

Transfer Protocol (FTP) server.

Gateway Shows statistics and lets you change the current configuration for the

gateway.

GRE Allows you to view and configure GRE settings. 91
Hardware Shows hardware status and configuration options. 72
HTTP Shows Hyper Text Transfer Protocol (HTTP) statistics and lets you change

the current configuration and authentication settings.

IP Sockets Shows IP socket status and lets you change hardware configuration. 72
Line Shows statistics and lets you change the current configuration and

Command mode settings of a serial line.

Log Shows and allows changes with logs. 73
MACH10 Shows the configuration and status for the MACH10 client. 97
Memory Shows memory status and lets you change hardware configuration. 73
Modbus Shows the current connection status of the Modubs servers listening on

the TCP ports and configure Modbus TCP server.

Network Shows status and lets you configure the network interface. 41

Ping

Shows how to ping a network host with a DNS hostname or IP address. 73

5: Configuration Using Web Manager

Table 5-5 Web Manager Pages

36

42

80

81

82

83

69

84

84

93

95

100

SGX 5150 IoT Device Gateway User Guide 39

5: Configuration Using Web Manager

TM

Web Manager Page Description Page

Processes Shows the processes currently running on the system. 74
Protocol Stack Lets you perform lower level network stack-specific activities. 59
QuickConnect Lets you change configuration settings for the Quick Connect. 64
Quick Setup Shows the quick setup configuration options for the device. 134
Routes Shows the current system routing table. 74
RSS Shows RSS status and configuration optinos. 101
SMTP Shows SMTP status and configuration options. 102
SNMP Shows SNMP status and configuration options. 103
SSH Lets you change the configuration settings for SSH server host keys, SSH

server authorized users, SSH client known hosts, and SSH client users.

SSL Lets you upload an existing certificate or create a new self-signed

certificate.

Syslog Lets you specify the severity of events to log and the server and ports to

which the syslog should be sent.

System Lets you reboot device, restore factory defaults, upload new firmware, and

change the device long and short names.

Terminal Lets you change current settings for a terminal. 114
Tunnel Lets you change the current configuration settings for an incoming tunnel

connection.

Threads Shows thread ID numbers, names and CPU usage. 75
Traceroute Shows how to perform a traceroute to a network host. 75
USB Shows USB status, command mode, and configuration options. 126
User Management Shows the configuration of users. 128
VPN Lets you view and configure VPN settings. 61
WLAN Profiles Lets you view, edit, delete and create a WLAN profile on a device. 65
WLAN Scan Shows a scan of wireless devices within range of the device. 64
XML Lets you export XML configuration and status records, and import XML

configuration records.

104

108

112

113

116

130

SGX 5150 IoT Device Gateway User Guide 40

TM

6: Network Settings

Network settings for the SGX 5150 can be viewed and modified under the Network tab in the Web
Manager user interface. This chapter describes the following network settings:

 Access Point

 Bridge

 Wired (eth0) Network

 Wireless (wlan0) Network

 Wired (usb0) Network

 Protocol Stack

 VPN

 Wi-Fi Protected Setup

 WLAN Scan/QuickConnect

 WLAN Profiles

Access Point

Configure software-enabled access point interface (SoftAP) on this page. Access point status
information displays at the bottom half of the page.

Table 6-1 Access Point Settings

Access Point Field Description

State Select to enable or disable the access point. If enabled, the DHCP server

will assign IP addresses to the access point clients.

Multicast Forwarding Select to enable or disable forwarding of multicast packets.
Channel Selection Select the desired channel from the drop-down menu through which the

SoftAP will operate:

 Automatic: Allow the radio to select the channel for the SoftAP.
 Configured: Specify the channel on which the SoftAP should operate.

Note: The Configured setting will only control the channel on which the

SoftAP operates as long as the station (STA) interface is not connected to
an access point. Once the STA interface has established an association
with an access point, the SoftAP will move to the STA interface's channel
(determined by the access point.) The channel selected by the user will be
validated by the UI against a list of channels supported by the radio. To
prevent inconsistent channel/band combinations the UI will coordinate the
'SoftAP channel' and 'WLAN Band' settings.

Channel Enter the Channel number to be configured.

Note: This field appears when a Configured channel selection is selected.

IP Address Enter the IP address of the SoftAP interface.
Network Name (SSID) Specify the network name/SSID of the access point. The SSID update will

take effect after the SGX 5150 gateway is rebooted.

SGX 5150 IoT Device Gateway User Guide 41

6: Network Settings

TM

Access Point Field Description

Security Suite Select a security suite to be used with the access point.
Passphrase Enter a passphrase if WPA or WPA2 security suite is selected above.

Note: This field appears when WPA or WPA2 security suite is selected.

Show Password (check box) Check to make the passphrase entered to the left visible.

Note: This field appears when WPA or WPA2 security suite is selected.

DNS Redirect Enter the name to the IP address of the Access Point. DNS names are

case insensitive.

To View or Configure Access Point Settings

Using Web Manager

 To view access point statistics and configuration options, on the Network page, click Access

Point.

Using the CLI

 To enter the command level: enable > config > access point

Using XML

 Include in your file: <configgroup name=”access point”>

Bridge

The SGX 5150 bridges traffic between an Ethernet or USB RNDIS (usb0) and WLAN interface.
For example, br0 is a bridge between eth0 and wlan0. For USB RNDIS interface, USB 1 must be
configured as an Ethernet device.

When a bridge is enabled, the Wired (eth0) Network configuration is used for configuring direct
connections into the SGX 5150 gateway over the primary interface; the Wireless (wlan0) Network
configuration is ignored. Both the Ethernet and WLAN link configurations are used the same as
when the bridge is disabled.

Bridging MAC Address specifies the MAC address of bridgeable traffic between the Ethernet and
WLAN interfaces. When bridging is active, this MAC Address will be used as the MAC address of
the WLAN interface. Packets received on the Ethernet interface from this address will be bridged
to the WLAN interface (except traffic directed at the Primary Interface). If this field is not
configured, then the SGX 5150 gateway waits for the first packet to arrive on the Ethernet interface
and uses the source address as the bridging address.

Bridging IP Address specifies the IP address of the bridged client.

When bridging is active, this IP Address will be used to create a static route between the SGX
5150 gateway and the bridged client.

This route is required for connecting to the bridged client from devices connected via the access
point network and from this SGX 5150 gateway.

If Auto Detect IP Address is enabled, then the SGX 5150 gateway will attempt to learn the IP
Address by using the source or destination IP address of packets arriving on the Ethernet
interface.

SGX 5150 IoT Device Gateway User Guide 42

6: Network Settings

TM

Warning: Running processes may be impacted while the SGX 5150 gateway

monitors Ethernet traffic to determine the wired host IP address.

During initialization, the bridging subsystem enables and controls both eth0 and wlan0 networks.
These are important aspects to keep in mind:

 If the eth0 physical link is inactive, wlan0 is the primary interface.

 If the eth0 physical link is active, eth0 is the primary interface.

When the eth0 link is active, the wlan0 link is established. Additionally, the bridging MAC address
is acquired using preconfiguration or auto-detection, and bridging enters the Active state. If either
link goes down, bridging reverts to the Inactive state.

When in the Active state, all packets that arrive on the wlan0 interface are bridged out (through)
the eth0 interface. Similarly, all packets that arrive on the eth0 interface are bridged out (through)
the wlan0 interface. However, exceptions to this behavior include:

 Ethernet packets directed specifically to the Ethernet (eth0) MAC address are terminated

internally and are not bridged to WLAN.

 An ARP request for the primary interface IP address is terminated internally and is not bridged

to the WLAN.

Ethernet packets that do not originate from the bridging MAC Address are discarded.

Bridge Status and Configuration

View-only status information on the Bridge1 (br0) Status page displays whether bridging is
currently enabled, active, and the following (if any): Ethernet link, WLAN link, primary interface,
bridging MAC, Ethernet MAC, WLAN MAC, bridging IP address, and bridging IPv6 address.
Ethernet to WLAN and WLAN to Ethernet statistics are provided for unicast, nonunicast, discards
and octets.

See Table 6-2 for the bridge settings that can be modified on the Bridge1 (br0) Configuration page.

Table 6-2 Bridge Settings

Bridge Fields Description

State Select to enable or disable bridging. When a bridge is Enabled, the Ethernet

Network Interface Configuration is used for configuring direct connections into
the SGX 5150 gateway over the primary Interface. The WLAN Network
Interface Configuration is ignored. Both the Ethernet and WLAN Link
Configurations are used the same as when the bridge is disabled. In Bridge
Statistics:

 Enable State shows whether the bridge is currently enabled. If the state is

changed, it will not be reflected here until the next reboot.

 Active State shows the current state of the bridge. The bridge may be

Active or Inactive, depending on the state of the bridge and the physical
links.

Transparent Mode Select to enable or disable transparent mode.

 If Enabled, the SGX 5150 can no longer be accessed via telnet or web

manager from a PC and is invisible to the network.

 If Disabled, the SGX 5150 will be accessible to a PC on the network via

telnet or Web Manager.

SGX 5150 IoT Device Gateway User Guide 43

6: Network Settings

TM

Bridge Fields Description

Network Access for
Gateway

Ethernet Interface Select interface from drop-down menu:

Bridging MAC Address Enter the bridging MAC address which specifies the MAC address of

Bridging IP Address Enter the bridging IP address which specifies the IP address of the bridged

Auto Detect IPv4 Address Select to enable or disable auto detection of IPv4 addresses. If enabled, the

Bridging IPv6 Address Enter the bridging IPv6 address.

In Transparent Mode when Network Access for Gateway is enabled, the SGX
5150 gateway will share the MAC address and Ethernet IP address of the
bridged client. WLAN Network Interface Configuration must match the
bridged client Ethernet configuration. Local ports must be configured to
distinguish network traffic destined for the SGX 5150 gateway. Any port
configured on the SGX 5150 gateway must be different from those in use by
services on the bridged client.

 eth0 (default)
 usb0

bridgeable traffic between the Ethernet and WLAN interfaces. When bridging
is active, this MAC Address will be used as the MAC address of the WLAN
interface. Packets received on the Ethernet interface from this address will be
bridged to the WLAN interface (except traffic directed at the primary
interface). If this field is not configured, then the SGX 5150 gateway waits for
the first packet to arrive on the Ethernet interface and uses the source
address as the bridging address.

client. When bridging is active, this IP address will be used to create a static
route between this SGX 5150 gateway and the bridged client. This route is
required for connecting to the bridged client from devices connected via the
access point network and from this gateway.

SGX 5150 gateway will attempt to learn the IP addresses by using the source
or destination IP address of packets arriving on the Ethernet interface.

Warning: Running processes may be impacted while the SGX 5150

gateway monitors Ethernet traffic to determine the wired host IP
address.

To View or Configure Bridge Settings

Using Web Manager

 To view the Bridge status, on the Network page, click Bridge > Statistics.

 To configure Bridge settings, on the Network page, click Bridge > Configuration in the links.

Using the CLI

 To enter the command level: enable > config > bridge 1

Using XML

 Include in your file: <configgroup name=”bridge” instance=”br0”>

Wired (eth0) Network

Network interface settings apply to both the wired Ethernet (eth0) and wireless WLAN (wlan0)
interfaces, but are configured independently for each interface. The wired network pages are
described in this section.

SGX 5150 IoT Device Gateway User Guide 44

6: Network Settings

TM

Interface Status and Configuration

Table 6-3 displays the wired interface status and configuration information. The view-only status

information is available on the Wired (eth0) Network Interface Status page. This same information
is configurable on the Wired (eth0) Network Interface Configuration page.

Table 6-3 Wired (eth0) Network Interface

Field/Button Description

State Select to enable or disable the interface
Hostname Enter the hostname for the interface. It must begin with a letter or number,

continue with a sequence of letters, numbers, or hyphens, and end with a letter or
number.

This setting will take effect immediately, but will not register the hostname with a
DNS server until the next reboot.

Priority Priority ranges from 0-10. The IP stack will give the interface with the lowest

numerical value highest priority and the highest numerical values lowest priority
when sending data. This setting only applies when the SGX 5150 gateway is not in
bridging mode and both interfaces are connected to the same IP subnet.

MTU When DHCP is enabled, the MTU size is (usually) provided with the IP address.

When not provided by the DHCP server, or using a static configuration, this value
is used. The MTU size can be from 576 to 1500 bytes, the default being 1500
bytes.

IPv4 State Select to enable or disable.
DHCP Client Select to turn On or Off. At boot up, after the physical link is up, the SGX 5150 unit

will attempt to obtain IPv4 settings from a DHCP server and will periodically renew
these settings with the server.

Note: Overrides the BOOTP client, the configured IPv4 address/mask, gateway,

hostname, and domain. Changing this value requires you to reboot the SGX 5150
gateway. Within Web Manager, click Renew to renew the DHCP lease.

IP Address Enter the static IPv4 address to use for the interface. You may enter it alone or in

CIDR format.

Note: This setting will be used if Static IP is active (both DHCP and BOOTP are

Disabled). Changing this value requires you to reboot the SGX 5150 gateway.
When DHCP or BOOTP is enabled, the SGX 5150 unit tries to obtain an IPv4
address from a DHCP or BOOTP server. If it cannot, the SGX 5150 unit generates
and uses an Auto IP address in the range of 169.254.xxx.xxx, with a network mask
of 255.255.0.0.

Default Gateway Enter the IPv4 address of the router for this network.

Note: This setting will be used if Static IP is active (both DHCP and BOOTP are

Disabled).

Domain Enter the domain name suffix for the interface.

Note: This setting will be used when either static IP or auto IP is active, or if

DHCP/BOOTP is active and no domain suffix was acquired from the server.

DHCP Client ID Enter the ID if the DHCP server requires a DHCP client ID option. The DHCP

server’s lease table shows IP addresses and MAC addresses for devices. The
lease table shows the client ID, in hexadecimal notation, instead of the SGX 5150
unit MAC address.

SGX 5150 IoT Device Gateway User Guide 45

6: Network Settings

TM

Field/Button Description

Primary DNS Enter the IP address of the primary domain name server (DNS.)

Note: This setting will be used when either Static IP or Auto IP is active, or if

DHCP/BOOTP is active and no DNS server was acquired from the server.

Secondary DNS Enter the IP address of the secondary domain name server.

Note: This setting will be used when either Static IP or Auto IP is active, or if

DHCP/BOOTP is active and no DNS server was acquired from the server.

IPv6 State Select to enable or disable.
IPv6 DHCP Client Select to turn On or Off. At bootup, after the physical link is up, the SGX 5150 unit

will attempt to obtain IPv6 settings from a DHCPv6 server and will periodically
renew these settings with the server.

 On: enables the SGX 5150 server to obtain IPv6 setting from a DHCPv6 server

upon bootup.

 Off: enables the SGX 5150 server to obtain IPv4 settings from a DHCP server

upon bootup.

Note: Overrides the configured IP address/mask, gateway, hostname, and

domain. Changing this value requires you to reboot the SGX 5150 gateway. Within
Web Manager, click Renew to renew the DHCPV6 lease.

IPv6 Auto
Configuration

IPv6 IP Address Enter the static IPv6 address to use for the interface.

IPv6 Default Gateway Enter the default IPv6 default gateway.
IPv6 Domain Enter the domain name suffix for the interface.

IPv6 Primary DNS Enter the IP address of the primary domain name server.

IPv6 Secondary DNS Enter the IP address of the secondary domain name server.

Select to turn On or Off IPv6 auto configuration.

Note: This setting is used if Static IPv6 is active (DHCPv6 is Disabled). Changing

this value requires a reboot. When DHCPv6 is enabled, the SGX 5150 unit tries to
obtain an IPv6 address from a DHCPv6 server. If it cannot, then SGX 5150 unit
generates and uses a Link local IPv6 address.

Note: This setting will be used when either Static IP or Auto IP is active, or if

DHCP/BOOTP is active and no Domain Suffix was acquired from the server.

Note: This setting will be used when either Static IP or Auto IP is active, or if

DHCP/BOOTP is active and no DNS server was acquired from the server.

Note: This setting will be used when either Static IP or Auto IP is active, or if

DHCP/BOOTP is active and no DNS server was acquired from the server.

To Configure Network Interface Settings

Using Web Manager

 To view Ethernet (eth0) Interface statistics, on the Network page, select Wired Network >

Interface.

 To configure Ethernet (eth0) interface settings, on the Network page, select Wired Network >

Interface > Configuration.

Using the CLI

 To enter the command level: enable > config > if 1

SGX 5150 IoT Device Gateway User Guide 46

6: Network Settings

TM

Using XML

 Include in your file: <configgroup name= “interface" instance="eth0">

Link Status and Configuration

Table 6-4 displays the wired link status and configuration information. The view-only status

information is available on the Wired (eth0) Network Ethernet Link page. This same information is
configurable on the Wired (eth0) Network Ethernet Link Configuration page.

Table 6-4 Link (eth0) Configuration

Field/Button Description

Speed Select the Ethernet link speed. (Default is Auto.)

 Auto = Auto-negotiation of Link Speed
 10 Mbps = Force 10 Mbps
 100 Mbps = Force 100 Mbps

Duplex Select the Ethernet link duplex mode. (Default is Auto.)

 Auto = Auto-negotiation of Link Duplex
 Half = Force Half Duplex
 Full = Force Full Duplex

Notes:

 When speed is Auto, duplex must be Auto or Half.

 When speed is not Auto, duplex must be Half or Full.

 Fixed-speed Full duplex produces errors when connected to Auto, due to duplex

mismatch.

To Configure Network Link Settings

Using Web Manager

 To view Ethernet (eth0) link statistics, on the Network page, select Wired Network > Link.

 To configure Ethernet (eth0) link settings, on the Network page, select Wired Network > Link

> Configuration.

Using the CLI

 To enter the command level: enable > config > if 1 > link

Using XML

 Include in your file: <configgroup name= “interface" instance="eth0">

QoS Statistics and Configuration

QoS (Quality of Service) can be enabled and configured for both the Wireless (wlan0) Network
and wired Network (eth0). If enabled, the router will control the flow of outbound traffic according to
the user-defined filters. In other words, QoS improves performance by allowing the user to
prioritize applications. Filters can be defined to prioritize traffic based on the source or destination
network, source or destination port, or the source MAC address. Up to 32 user-defined filters can
be added. The following are predefined priority classes:

SGX 5150 IoT Device Gateway User Guide 47

6: Network Settings

TM

 Network Control and Internetwork Control are typically used for network control packets such

as ICMP and have the highest priorities.

 Move bandwidth allocation is a minimum 5% each to Network control.

 Voice: Bandwidth allocation is minimum 30%.

 Video: Bandwidth allocation is minimum 20%.

 Critical Applications: Bandwidth allocation is minimum 15%.

 Excellent Effort: Bandwidth allocation is minimum 10%.

 Best Effort: Bandwidth allocation is minimum 10%.

 Background: Bandwidth allocation is minimum 5% and has the lowest priority.

Table 6-5 Wired (eth0) Network QoS Settings shows the network QoS settings that can be

configured including adding new filters.

Table 6-5 Wired (eth0) Network QoS Settings

Wired (eth0) Network

Description

Settings

State Click to enable or disable state.
Import filters Click to enable or disable import filters to import configurations from other

interfaces.

Uplink Speed Enter the maximum uplink speed. Set 0 to set speed to default.
Delete Click the checkbox to the left of any existing QoS filter to be deleted and click the

Submit button.

Filter type Select the filter type from the drop-down window:

 Network
 Port

Network Enter the Network, if the Network filter type is selected.
Ports Enter the Port, if the Port filter type is selected.
Priority Select the priority of the filter from the drop-down menu.

To View and Configure Wired Network QoS Settings

Using Web Manager

 To view Ethernet (eth0) QoS statistics, click Network on the menu and select

Wired Network > QoS.

 To modify Ethernet (eth0) QoS information, click Network on the menu and select

Wired Network > QoS > Configuration.

Using the CLI

 To enter the eth0 QoS command level: enable > config > if 1 > qos

Using XML

 Include in your file: <configgroup name="ethernet" instance="eth0">

SGX 5150 IoT Device Gateway User Guide 48

6: Network Settings

TM

Wired (eth0) Network Failover

The SGX 5150 device gateway provides WAN network failover, in the form of a "dead remote host
reachability" mechanism (essentially a ping against a known host). If the remote host is
determined to be not reachable, the SGX 5150 gateway will failover to the Wi-Fi interface. If the
remote host is determined to be reachable, the gateway will failback to the Ethernet interface.

Table 6-6 Wired (eth0) Network Failover Settings

Wired Network
(Failover) Settings

State Click to enable or disable state.
Failover Interface Always select wlan0 in the SGX 5150 device gateway.
Hostname Enter the remote host to test reachability.
Method Select ICMP or TCP based ping.
Timeout Indicate the interval to wait for ping response from remote host.
Interval Indicate the interval in which to test reachability
Failover Threshold Indicate the allowed number of failed pings – after which the SGX 5150 gateway

Failback Threshold Indicate the number of successful pings – after which the SGX 5150 gateway will

Description

will failover to the wlan0 interface.

failback to the Ethernet interface.

To View and Configure Wired Network Failover Settings

Using Web Manager

 To view Ethernet Failover statistics, click Network on the menu and select Wired Network >

Failover.

 To modify Ethernet Failover settings, click Network on the menu and select Wired Network >

Failover > Configuration.

Using the CLI

 To enter the eth0 link command level: enable > config > if 1 > failover

Using XML

 Include in your file: <configgroup name="network failover" instance="eth0">

Wireless (wlan0) Network

The wireless network pages are used to configure and view the status of the wireless (wlan0)
interface and link on the SGX 5150 gateway. To see the effect of these items after a reboot, view
the Status page.

Wireless (wlan0) Network Interface

Table 6-7 displays the wireless interface status and configuration information. The view-only

status information is available on the Wireless (wlan0) Network Interface Status page. This same
information is configurable on the Wireless (wlan0) Network Interface Configuration page.

SGX 5150 IoT Device Gateway User Guide 49

6: Network Settings

TM

Table 6-7 Wireless (wlan0) Interface Configuration

Field/Button Description

State Select to enable or disable the interface
Hostname Enter the hostname for the interface. It must begin with a letter or number,

continue with a sequence of letters, numbers, or hyphens, and end with a letter or
number.

This setting will take effect immediately, but will not register the hostname with a
DNS server until the next reboot.

Priority Priority ranges from 0-10. The IP stack will give the interface with the lowest

numerical value highest priority and the highest numerical values lowest priority
when sending data. This setting only applies when the gateway is not in bridging
mode and both interfaces are connected to the same IP subnet.

MTU When DHCP is enabled, the MTU size is (usually) provided with the IP address.

When not provided by the DHCP server, or using a static configuration, this value
is used. The MTU size can be from 576 to 1500 bytes, the default being 1500
bytes.

IPv4 State Select to enable or disable.
DHCP Client Select to turn On or Off. At boot up, after the physical link is up, the SGX 5150 unit

will attempt to obtain IPv4 settings from a DHCP server and will periodically renew
these settings with the server.

Note: Overrides BOOTP, the configured IPv4 address/mask, gateway, hostname,

and domain. Changing this value requires you to reboot the SGX 5150 gateway.
Within Web Manager, click Renew to renew the DHCP lease.

IP Address Enter the static IPv4 address to use for the interface. You may enter it alone or in

CIDR format.

Note: This setting will be used if Static IP is active (both DHCP and BOOTP are

Disabled). Changing this value requires you to reboot the SGX 5150 gateway.
When DHCP or BOOTP is enabled, the SGX 5150 unit tries to obtain an IPv4
address from a DHCP or BOOTP server. If it cannot, the SGX 5150 unit generates
and uses an Auto IP address in the range of 169.254.xxx.xxx, with a network mask
of 255.255.0.0.

Default Gateway Enter the IPv4 address of the router for this network.

Note: This setting will be used if Static IP is active (both DHCP and BOOTP are

Disabled).

Domain Enter the domain name suffix for the interface.

Note: This setting will be used when either Static IP or Auto IP is active, or if

DHCP/BOOTP is active and no Domain Suffix was acquired from the server.

DHCP Client ID Enter the ID if the DHCP server requires a DHCP Client ID option. The DHCP

server’s lease table shows IP addresses and MAC addresses for devices. The
lease table shows the client ID, in hexadecimal notation, instead of the SGX 5150
device MAC address.

Primary DNS Enter the IP address of the primary domain name server

Note: This setting will be used when either Static IP or Auto IP is active, or if

DHCP/BOOTP is active and no DNS server was acquired from the server.

Secondary DNS Enter the IP address of the secondary domain name server.

Note: This setting will be used when either Static IP or Auto IP is active, or if

DHCP/BOOTP is active and no DNS server was acquired from the server.

IPv6 State Select to enable or disable.

SGX 5150 IoT Device Gateway User Guide 50

6: Network Settings

TM

Field/Button Description

IPv6 DHCP Client Select to turn On or Off. At bootup, after the physical link is up, the SGX 5150 unit

will attempt to obtain IPv6 settings from a DHCPv6 server and will periodically
renew these settings with the server.

 On: enables the SGX 5150 server to obtain IPv6 setting from a DHCPv6 server

upon bootup.

 Off: enables the SGX 5150 server to obtain IPv4 settings from a DHCP server

upon bootup.

Note: Overrides the configured IP address/mask, gateway, hostname, and

domain. Changing this value requires you to reboot the SGX 5150 gateway. Within
Web Manager, click Renew to renew the DHCPV6 lease.

IPv6 Auto
Configuration

IPv6 IP Address Enter the static IPv6 address to use for the interface.

IP v6 Default Gateway Enter the default IPv6 default gateway.
IPv6 Domain Enter the domain name suffix for the interface.

IPv6 Primary DNS Enter the IP address of the primary Domain Name Server.

IPv6 Secondary DNS Enter the IP address of the secondary Domain Name Server.

Select to turn On or Off IPv6 auto configuration.

Note: This setting is used if Static IPv6 is active (DHCPv6 is Disabled). Changing

this value requires a reboot. When DHCPv6 is enabled, the SGX 5150 unit tries to
obtain an IPv6 address from a DHCPv6 server. If it cannot, then SGX 5150 unit
generates and uses a Link local IPv6 address.

Note: This setting will be used when either Static IP or Auto IP is active, or if

DHCP/BOOTP is active and no Domain Suffix was acquired from the server.

Note: This setting will be used when either Static IP or Auto IP is active, or if

DHCP/BOOTP is active and no DNS server was acquired from the server.

Note: This setting will be used when either Static IP or Auto IP is active, or if

DHCP/BOOTP is active and no DNS server was acquired from the server.

To View or Configure Wireless Network Interface Settings

Using Web Manager

 To view the wireless (wlan0) network interface status, on the Network page, then select

Wireless Network > Interface.

 To configure wireless (wlan0) network interface settings, on the Network page, select

Wireless Network > Interface > Configuration.

Using the CLI

 To enter the command level: enable > config > if 2

Using XML

 Include in your file: <configgroup name= “interface" instance="wlan0">

Wireless (wlan0) Network Link

Configuration details are stored in one or more WLAN profiles. See WLAN Profiles (on page 65) to
view and configure WLAN profiles. You can select and prioritize up to four preconfigured WLAN
profiles for automatic connection to wireless networks. Dynamic profiles, created via quick

SGX 5150 IoT Device Gateway User Guide 51

6: Network Settings

TM

connect/WPS, have a higher priority over a static profile. Listed dynamic and static profiles can be
prioritized with 1 being highest priority through 4 being lowest priority.

Table 6-8 displays the wireless link status and configuration information. The view-only status

information is available on the Wireless (wlan0) Network WLAN Link Status page. This same
information is configurable on the Wireless (wlan0) Network WLAN Link Configuration page.

Table 6-8 Wireless (wlan0) Link Configuration

Field/Button Description

Choice 1 Profile
Choice 2 Profile
Choice 3 Profile
Choice 4 Profile

Enter up to four (4) WLAN Profiles (on page 65) for automatic connection to
wireless networks in order of priority, with Choice 1 Profile being highest priority
through Choice 4 Profile being lowest priority. If a profile in the choice list is
deleted, that profile is skipped in the connection attempt.

Antenna Diversity Enable antenna diversity or select a specific antenna for use.
Band Select the band from the drop-down menu. This will be the band on which the radio

will operate. This global band setting will control both WLAN0 and SoftAP
interfaces and override any frequency settings on the SoftAP interface.

Notes:

 To prevent inconsistent channel/band combinations, the user interface will

coordinate the ‘SoftAP Channel’ and ‘WLAN Band’ settings.

 Wi-Fi Direct requires that the 2.4 GHz band be available. The UI will prevent

the selection of ‘5GHz Only’ when Wi-Fi Direct GO Mode is enabled.

Scanning Latency Select the desired Scanning Latency:

 Standard performs a complete unbroken scan of a list of channels. Scanning

Channel List accepts list of channels.

 Enhanced Throughput breaks the scanning into small blocks of channels,

reducing the impact on network throughput and improving the availability of the
Access Point (AP0) interface (if enabled).

Warning: Selecting Enhanced Throughput may greatly increase the time

required to establish a connection on the wlan0 interface. The scanning
channel list is unavailable when Enhanced Throughput is selected.

The Scanning Channel List setting only accepts 20 MHz channels (5 GHz band.)
If the external access point to which the SGX 5150 STA interface is connecting
supports 'wide' channels (40 MHz or above), it is possible that the SGX 5150
gateway may appear to connect on a channel not in the Scanning Channel List.
For example, if the external AP is configured for channel 36 with 40 MHz support
enabled the SGX 5150 may indicate a connection on channel 38. It has also been
observed with the Netgear WNDAP350 AP (configured with 40 MHz channel
support) that the SGX 5150 may establish a connection with either of the bonded
20 MHz channels (whether or not it is included in the 'Scanning Channel List'.) For
example, if the Netgear WNDAP350 is configured to operate on channel 40 (with
40 MHz support enabled) the SGX 5150 may establish a connection on channel

36.

Scanning Channel
List

Debugging Level Set the verbosity level for printing WLAN Link messages to the TLOG (Default is

Enter the Scanning Channel List in the field. This field accepts comma separated
integers as list of channels. An empty list is considered as default and all radio
supported channels are considered.

Info).

SGX 5150 IoT Device Gateway User Guide 52

6: Network Settings

TM

Field/Button Description

WiFi Direct GO Mode Select to enable or disable. If enabled, WPS issues the credentials when the client

device indicates that it wishes to connect with our device. No password is required.
Go to Wi-Fi Protected Setup (on page 63) to setup WPS.

To View or Configure Network Link Settings

Using Web Manager

 To view wireless (wlan0) link statistics, on the Network page, select Wireless Network >

Link.

 To configure wireless (wlan0) link settings, on the Network page, select Wireless Network >

Link > Configuration.

Using the CLI

 To enter the command level: enable > config > if 2 > link

Using XML

 Include in your file: <configgroup name= “interface" instance="wlan0">

Wireless (wlan0) Network QoS

QoS (Quality of Service) can be enabled and configured for both Wired (eth0) Network and
Wireless (wlan0) Network. If enabled, the router will control the flow of outbound traffic according
to the user-defined filters. In other words, QoS improves performance by allowing the user to
prioritize applications. Filters can be defined to prioritize traffic based on the source or destination
network, source or destination port, or the source MAC address. Up to 32 user-defined filters can
be added. The following are predefined priority classes:

 Network Control and Internetwork Control are typically used for network control packets such

as ICMP and have the highest priorities.

 Bandwidth allocation is a minimum 5% each.

 Voice: Bandwidth allocation is minimum 30%.

 Video: Bandwidth allocation is minimum 20%.

 Critical Applications: Bandwidth allocation is minimum 15%.

 Excellent Effort: Bandwidth allocation is minimum 10%.

 Best Effort: Bandwidth allocation is minimum 10%.

 Background: Bandwidth allocation is minimum 5% and has the lowest priority.Table 6-7 shows

the network QoS settings that can be configured including adding new filters.

Table 6-9 Wireless (wlan0) Network QoS Settings

Wireless Network

Description

(QoS) Settings

State Click to enable or disable state.
Import filters Click to enable or disable import filters to import configurations from other

interfaces.

Uplink Speed Enter the maximum uplink speed. Set 0 to set speed to default.

SGX 5150 IoT Device Gateway User Guide 53

6: Network Settings

TM

Table 6-10 Adding or Deleting Wireless (wlan0) Network QoS Settings

Adding or Deleting
Wireless Network
(QoS) Settings

Delete Click the checkbox to the left of any existing QoS filter to be deleted and click the

Filter type Select the filter type from the drop-down window:

MAC Address Enter the MAC address, if the MAC Address filter type is selected.
Network Enter the Network, if the Network filter type is selected.
Ports Enter the Port, if the Port filter type is selected.
Priority Select the priority of the filter from the drop-down menu.

Description

Submit button.

 Mac Address
 Network
 Port

To View or Configure Wireless Network QoS Settings

Using Web Manager

 To view Wireless (wlan0) QoS statistics, click Network on the menu and select Wireless

Network > QoS.

 To modify Wireless (wlan0) QoS information, click Network on the menu and select Wireless

Network > QoS > Configuration.

Using the CLI

 To enter the wlan0 QoS command level: enable > config > if 2 > qos

Using XML

 Include in your file: <configgroup name="wlan" instance="wlan0">

Wireless (wlan0) Network Failover

The SGX 5150 device gateway provides wlan0 failover, in the form of a "dead remote host
reachability" mechanism (essentially a ping against a known host). If the remote host is
determined to be not reachable, the SGX 5150 gateway will failover to the Ethernet interface. If the
remote host is determined to be reachable, the gateway will failback to the Wi-Fi interface.

Table 6-11 Wireless (wlan0) Network Failover

Settings Description

State Click to enable or disable state.
Failover Interface Always select eth0 in the SGX 5150 device gateway.
Hostname Enter the remote host to test reachability.
Method Select ICMP or TCP based ping.
Timeout Indicate the interval to wait for ping response from remote host.
Interval Indicate the interval in which to test reachability
Failover Threshold Indicate the allowed number of failed pings - after which the SGX 5150 gateway will

failover to the wlan0 interface.

SGX 5150 IoT Device Gateway User Guide 54

6: Network Settings

TM

Settings Description

Failback Threshold Indicate the number of successful pings - after which the SGX 5150 gateway will

failback to the Ethernet interface.

To View or Configure Wireless Network Failover Settings

Using Web Manager

 To view wireless network Failover statistics, click Network on the menu and select Wireless

Network > Failover.

 To modify wireless network Failover settings, click Network on the menu and select Wireless

Network > Failover > Configuration.

Using the CLI

 To enter the wlan0 link command level: enable > config > if 2 > failover

Using XML

 Include in your file: <configgroup name="network failover" instance="wlan0">

Wired (usb0) Network

The wired (usb0) network pages are described in this section.

Interface (usb0) Status and Configuration

Table 6-12 displays the wired (usb0) interface status and configuration information. The view-only

status information is available on the Wired (usb0) Network Interface Status page. This same
information is configurable on the Wired (usb0) Network Interface Configuration page.

Field/Button Description

State Select to enable or disable the interface
Hostname Enter the hostname for the interface. It must begin with a letter or number,

Priority Priority ranges from 0-10. The IP stack will give the interface with the lowest

MTU When DHCP is enabled, the MTU size is (usually) provided with the IP address.

IPv4 State Select to enable or disable.

Table 6-12 Wired (usb0) Network Interface

continue with a sequence of letters, numbers, or hyphens, and end with a letter or
number.

This setting will take effect immediately, but will not register the hostname with a
DNS server until the next reboot.

numerical value highest priority and the highest numerical values lowest priority
when sending data. This setting only applies when the SGX 5150 gateway is not in
bridging mode and both interfaces are connected to the same IP subnet.

When not provided by the DHCP server, or using a static configuration, this value
is used. The MTU size can be from 576 to 1500 bytes, the default being 1500
bytes.

SGX 5150 IoT Device Gateway User Guide 55

6: Network Settings

TM

Field/Button Description

DHCP Client Select to turn On or Off. At boot up, after the physical link is up, the SGX 5150 unit

will attempt to obtain IPv4 settings from a DHCP server and will periodically renew
these settings with the server.

Note: Overrides the BOOTP client, the configured IPv4 address/mask, gateway,

hostname, and domain. Changing this value requires you to reboot the SGX 5150
gateway. Within Web Manager, click Renew to renew the DHCP lease.

IP Address Enter the static IPv4 address to use for the interface. You may enter it alone or in

CIDR format.

Note: This setting will be used if Static IP is active (both DHCP and BOOTP are

Disabled). Changing this value requires you to reboot the SGX 5150 gateway.
When DHCP or BOOTP is enabled, the SGX 5150 unit tries to obtain an IPv4
address from a DHCP or BOOTP server. If it cannot, the SGX 5150 unit generates
and uses an Auto IP address in the range of 169.254.xxx.xxx, with a network mask
of 255.255.0.0.

Default Gateway Enter the IPv4 address of the router for this network.

Note: This setting will be used if Static IP is active (both DHCP and BOOTP are

Disabled).

Domain Enter the domain name suffix for the interface.

Note: This setting will be used when either static IP or auto IP is active, or if

DHCP/BOOTP is active and no domain suffix was acquired from the server.

DHCP Client ID Enter the ID if the DHCP server requires a DHCP client ID option. The DHCP

server’s lease table shows IP addresses and MAC addresses for devices. The
lease table shows the client ID, in hexadecimal notation, instead of the SGX 5150
MAC address.

Primary DNS Enter the IP address of the primary domain name server (DNS.)

Note: This setting will be used when either Static IP or Auto IP is active, or if

DHCP/BOOTP is active and no DNS server was acquired from the server.

Secondary DNS Enter the IP address of the secondary domain name server.

Note: This setting will be used when either Static IP or Auto IP is active, or if

DHCP/BOOTP is active and no DNS server was acquired from the server.

IPv6 State Select to enable or disable.
IPv6 DHCP Client Select to turn On or Off. At bootup, after the physical link is up, the SGX 5150 unit

will attempt to obtain IPv6 settings from a DHCPv6 server and will periodically
renew these settings with the server.

 On: enables the SGX 5150 server to obtain IPv6 setting from a DHCPv6 server

upon bootup.

 Off: enables the SGX 5150 server to obtain IPv4 settings from a DHCP server

upon bootup.

Note: Overrides the configured IP address/mask, gateway, hostname, and

domain. Changing this value requires you to reboot the SGX 5150 gateway. Within
Web Manager, click Renew to renew the DHCPV6 lease.

IPv6 Auto
Configuration

IPv6 IP Address Enter the static IPv6 address to use for the interface.

Select to turn On or Off IPv6 auto configuration.

Note: This setting is used if Static IPv6 is active (DHCPv6 is Disabled). Changing

this value requires a reboot. When DHCPv6 is enabled, the SGX 5150 unit tries to
obtain an IPv6 address from a DHCPv6 server. If it cannot, then SGX 5150 unit
generates and uses a Link local IPv6 address.

SGX 5150 IoT Device Gateway User Guide 56

6: Network Settings

TM

Field/Button Description

IPv6 Default Gateway Enter the default IPv6 default gateway.
IPv6 Domain Enter the domain name suffix for the interface.

Note: This setting will be used when either Static IP or Auto IP is active, or if

DHCP/BOOTP is active and no Domain Suffix was acquired from the server.

IPv6 Primary DNS Enter the IP address of the primary domain name server.

Note: This setting will be used when either Static IP or Auto IP is active, or if

DHCP/BOOTP is active and no DNS server was acquired from the server.

IPv6 Secondary DNS Enter the IP address of the secondary domain name server.

Note: This setting will be used when either Static IP or Auto IP is active, or if

DHCP/BOOTP is active and no DNS server was acquired from the server.

To Configure Network Interface Settings

Using Web Manager

 To view Ethernet (usb0) Interface statistics, on the Network page, select Wired Network

(USB) > Interface.

 To configure Ethernet (usb0) interface settings, on the Network page, select Wired Network

(USB) > Interface > Configuration.

Using the CLI

 To enter the command level: enable > config > if 3 (config-if:usb0)

Using XML

 Include in your file: <configgroup name= “interface" instance="usb0">

QoS Statistics and Configuration

QoS (Quality of Service) can be enabled and configured for both the Wireless (wlan0) Network
and wired Wireless Network (usb0). If enabled, the router will control the flow of outbound traffic
according towthe user-defined filters. In other words, QoS improves performance by allowing the
user to prioritize applications. Filters can be defined to prioritize traffic based on the source or
destination network, source or destination port, or the source MAC address. Up to 32 user-defined
filters can be added. The following are predefined priority classes:

 Network Control and Internetwork Control are typically used for network control packets such

as ICMP and have the highest priorities.

 Move bandwidth allocation is a minimum 5% each to Network control.

 Voice: Bandwidth allocation is minimum 30%.

 Video: Bandwidth allocation is minimum 20%.

 Critical Applications: Bandwidth allocation is minimum 15%.

 Excellent Effort: Bandwidth allocation is minimum 10%.

 Best Effort: Bandwidth allocation is minimum 10%.

 Background: Bandwidth allocation is minimum 5% and has the lowest priority.

Table 6-13 Wired (usb0) Network QoS Settings shows the network QoS settings that can be

configured including adding new filters.

SGX 5150 IoT Device Gateway User Guide 57

TM

Table 6-13 Wired (usb0) Network QoS Settings

6: Network Settings

Wired (usb0) Network
Settings

State Click to enable or disable state.
Import filters Click to enable or disable import filters to import configurations from other

Uplink Speed Enter the maximum uplink speed. Set 0 to set speed to default.
Delete Click the checkbox to the left of any existing QoS filter to be deleted and click the

Filter type Select the filter type from the drop-down window:

Network Enter the Network, if the Network filter type is selected.
Ports Enter the Port, if the Port filter type is selected.
Priority Select the priority of the filter from the drop-down menu.

Description

interfaces.

Submit button.

 Network
 Port

To View and Configure Wired Network (USB) QoS Settings

Using Web Manager

 To view Ethernet (usb0) QoS statistics, click Network on the menu and select

Wired Network (USB) > QoS.

 To modify Ethernet (usb0) QoS information, click Network on the menu and select

Wired Network (USB) > QoS > Configuration.

Using the CLI

 To enter the usb0 QoS command level: enable > config > if 3 > qos

Using XML

 Include in your file: <configgroup name="ethernet" instance="usb0">

Wired (usb0) Network Failover

The SGX 5150 device gateway provides a USB network failover, in the form of a "dead remote
host reachability" mechanism (essentially a ping against a known host). If the remote host is
determined to be not reachable, the SGX 5150 gateway will failover to the Wi-Fi interface. If the
remote host is determined to be reachable, the gateway will failback to the USB interface.

Table 6-14 Wired (usb0) Network Failover Settings

Wired (usb0) Network
(Failover) Settings

State Click to enable or disable state.
Failover Interface Always select eth0 in the SGX 5150 device gateway.
Hostname Enter the remote host to test reachability.
Method Select ICMP or TCP based ping.
Timeout Indicate the interval to wait for ping response from remote host.

Description

SGX 5150 IoT Device Gateway User Guide 58

6: Network Settings

TM

Wired (usb0) Network
(Failover) Settings

Interval Indicate the interval in which to test reachability
Failover Threshold Indicate the allowed number of failed pings – after which the SGX 5150 gateway

Failback Threshold Indicate the number of successful pings – after which the SGX 5150 gateway will

Description

will failover to the wlan0 interface.

failback to the Ethernet interface.

To View and Configure Wired (USB0) Network Failover Settings

Using Web Manager

 To view USB Failover statistics, click Network on the menu and select Wired Network (USB)

> Failover.

 To modify USB Failover settings, click Network on the menu and select Wired Network

(USB) > Failover > Configuration.

Using the CLI

 To enter the usb0 link command level: enable > config > if 3 > failover

Using XML

 Include in your file: <configgroup name="network failover" instance="usb0">

Protocol Stack

There are various low level network stack specific items that are available for configuration. This
includes settings related to IP, ICMP, and ARP, which are described in the sections below.

IP Settings

This page contains lower level IP Network Stack specific configuration items.

Protocol Stack IP Settings Description

IP Time to Live Enter the number of hops to be transmitted before the packet is discarded.

Multicast Time to Live This value fills the Time To Live in any multicast IP header. Normally this

To Configure IP Protocol Stack Settings

Using Web Manager

Table 6-15 IP Protocol Stack Settings

This value typically fills the time to live in the IP header. SNMP refers to this
value as "ipDefaultTTL".

value will be one so the packet will be blocked at the first router. It is the
number of hops allowed before a multicast packet is discarded. Enter the
value to be greater than one to intentionally propagate multicast packets to
additional routers.

 To configure IP protocol settings, on the Network page, click Protocol Stack > IP.

SGX 5150 IoT Device Gateway User Guide 59

6: Network Settings

TM

Using the CLI

 To enter the command level: enable > config > ip

Using XML

 Include in your file: <configgroup name=”ip”>

ICMP Settings

This page contains lower level ICMP Network Stack specific configuration items.

Table 6-16 ICMP Protocol Stack Settings

Protocol Stack ICMIP
Settings

State The State selection is used to turn on/off processing of ICMP messages.

Description

This includes both incoming and outgoing messages. Choose Enabled or
Disabled.

To Configure ICMP Protocol Stack Settings

Using Web Manager

 To configure ICMP protocol settings, on the Network page, click Protocol Stack > ICMP.

Using the CLI

 To enter the command level: enable > config > icmp

Using XML

 Include in your file: <configgroup name=”icmp”>

ARP Settings

This page contains lower level Address Resolution Protocol (ARP) network stack specific
configuration items.The ARP cache can be manipulated manually by adding new entries and
deleting existing ones. Added entries are static and for test purposes only.

Table 6-17 ARP Protocol Stack Settings

Protocol Stack ARP
Settings

IP Address Enter the IP address to add the ARP cache.
MAC Address Enter the MAC address to add to the ARP cache.
Interface Select the type of interface if adding to the ARP cache.
Add (button) Click this button to add a new entry (after entering the IP address, MAC

Clear Click the Clear link above all listed addresses to remove all the addresses.
Remove Click the Remove link beside a specific address to remove it.

Description

address and Interface info for the new entry above.)

SGX 5150 IoT Device Gateway User Guide 60

TM

VPN

6: Network Settings

To Configure ARP Network Stack Settings

Using Web Manager

 To configure ARP protocol settings, on the Network page, click Protocol Stack > ARP.

Using the CLI

 To enter the command level: enable > config > arp

Using XML

 Include in your file: <configgroup name=”arp”>

Access VPN statistics and configuration options on this page.

Table 6-18 VPN

VPN Setting Description

Show details Click this link to view the VPN log.

Configuration

Name Enter the name of this VPN connection.
State Select to enable or disable the VPN connection.
Connection Type Select connection type in the drop-down menu:

 Host to Host - VPN tunnel for Local and Remote subnets are fixed.
 Host to Subnet - VPN tunnel for Remote subnet area is dynamic and

Local subnet is fixed.

IKEv2 Select the IKE version 2 settings to be used. The acceptable values are:

 Permit: (the default) signifying no IKEv2 should be transmitted, but will be

accepted if the other ends initiates to us with IKEv2.

 Never: signifying no IKEv2 negotiation should be transmitted or accepted.
 Propose: signifying that the device will permit IKEv2, and also use it as

the default to initiate.

 Insist: signifying that the device will only accept and receive IKEv2 and

IKEv1 negotiations will be rejected.

Authentication Mode Select the authentication mode of IPSec VPN. Pre-shared Key (PSK) is used

when there is a single key common to both ends of the VPN. RSA uses RSA
digital signatures. XAUTH provides an additional level of authentication by
allowing the IPSec gateway to request extended authentication from remote
users, thus forcing remote users to respond with their credentials before
being allowed access to the VPN.

Mode Configuration Select to enable or disable extended authentication operation and the

settings provided to the client during the configuration exchange.

Type Select Tunnel or Transport type from the drop-down menu. Tunnel Mode is

used for protecting traffic between different networks, when traffic must pass
through an intermediate, untrusted network. Transport Mode is used for end­to-end communications (for example, for communications between a client
and a server).

SGX 5150 IoT Device Gateway User Guide 61

6: Network Settings

TM

VPN Setting Description

Interface Select the interface to use to connect to VPN Gateway.

 any
 eth0
 usb0
 wlan0

Remote Network

Endpoint Enter the remote VPN Gateway’s IP Address.
Subnet Enter the subnet behind the VPN Gateway.
ID Enter the identifier expected to receive from the remote host during Phase 1

negotiation.

Router/Next Hop Enter the next-hop gateway IP address for the VPN Gateway.

Local Network

Subnet Enter the subnet the local devices have access to or can be accessed from

the VPN connection.

ID Enter the identifier sent to the remote host during Phase 1 negotiation.
Router/Next Hop Enter the next-hop gateway IP address for this connection to the public

network.

Key Management

Perfect Forward Secrecy
(PFS)

Pre-shared Key (PSK) Enter the Pre-Shared Key used in the IPSec setting between the Local and

ISAKMP Phase 1 (IKE)

Aggressive Mode Select to enable or disable Aggressive Mode. In Aggressive mode, IKE tries

NAT Traversal Select to enable or disable NAT Traversal. If there is an external NAT device

Encryption Select the encryption algorithm in key exchange from the drop-down menu.
Authentication Select the hash algorithm in key exchange from the drop-down menu.
DH Group Select the Diffie-Hellman (DH) groups (the Key Exchange group between the

IKE Lifetime Enter the number of hours for the IKE SA lifetime.

ISAKMP Phase 2 (ESP)

Encryption Select the encryption algorithm in data exchange from the drop-down menu.
Authentication Select the hash algorithm in data exchange from the drop-down menu.
DH Group Select the Diffie-Hellman (DH) groups (the Key Exchange group between the

SA Lifetime Enter the number of hours for the SA lifetime in Phase 2.

Unreachable Host Detection

Host Enter the unreachable detection host monitoring the connectivity with the

Select to enable or disable the Perfect Forward Secrecy. Enabling this
feature will require IKE to generate a new set of keys in Phase 2 rather than
using the same key generated in Phase 1.

VPN Gateway.

to combine as much information into fewer packets while maintaining
security. Aggressive mode is slightly faster but less secure.

between VPN tunnels, the user must enable NAT Traversal.

Remote and VPN Gateways) from the drop-down menu.

Remote and VPN Gateways) for Phase 2 from the drop-down menu.

host on the remote network.

SGX 5150 IoT Device Gateway User Guide 62

6: Network Settings

TM

VPN Setting Description

Ping Interval Enter the Ping Interval to monitor connectivity with a host on the remote

network.

Max Tries Enter the number of Max Tries for pinging the host before the VPN tunnel is

restarted.

Configuring VPN Settings

You may edit or view VPN settings.

Using Web Manager

 To view or configure VPN settings on the Network page, click VPN.

Using the CLI

 To enter the VPN level: enable > configure > vpn1

Using XML

 Include in your file: <configgroup name="vpn" instance="1">

Wi-Fi Protected Setup

Using Wi-Fi® protected setup (WPS), you have the option of connecting the SGX 5150 unit to a
router or access point in a single operation instead of manually creating a profile with a network
name (SSID), setting up wireless security parameters and updating the choice list. You may setup
WPS through pin or push button functionality through Web Manager or through CLI.

Note: Not all access points support Wi-Fi protected setup pin or Wi-Fi protected setup

push button.

WPS buttons Description

WPS (PIN) Click the WPS (PIN) button in Web Manager to setup WPS by pin and click

WPS (PBC) Click the WPS (PBC) button in Web Manager to setup WPS by push button,

Table 6-19 Wi-Fi Protected Setup

OK in the confirmation popup which appears. A randomly generated pin will
appear on the screen. Enter this pin at the access point and point your
browser to the correct IP address.

click OK in the confirmation popup which appears, and the credentials are
passed to the SGX 5150 unit automatically. Then point your browser to the
correct IP address.

Note: Make sure the WPS PBC is triggered on the Access Point to utilize

this option.

To Initiate WPS

Using Web Manager

 To initiate WPS, on the Network page, click Wi-Fi Protected Setup.

SGX 5150 IoT Device Gateway User Guide 63

TM

Using the CLI

 To enter the command level: enable > config > if 2 > link

Using XML

 Not applicable.

To Show WPS Status

Using the CLI

 To enter the command level: enable > config > if 2 > link

Using XML

 Not applicable.

WLAN Scan/QuickConnect

Going to this page initiates a scan of wireless networks within range of the SGX 5150 unit and
allows users to add a WLAN profile after testing it. This list refreshes automatically every 15
seconds. There is also an option to automatically update the scan results every 60 seconds, which
is disabled by default. The scan results contain the following prepopulated information about each
wireless device: service set identifier (SSID), basic service set identifier (BSSI), channel number
(CH), received signal strength indication (RSSI), and Security Suite. You may also run a filtered
scan of network names by the first few letters within the name.

6: Network Settings

Click on any network name for QuickConnect configuration.

Table 6-20 WLAN Scan/Quick Connect Results

WLAN Quick Connect
Settings

Network Name (search
field)

Scan “<network SSID>” Click Scan to search for all network names containing the first few letters

Refresh scan results
every 60 seconds
(check box)

SSID To display a network configuration profile, click the service set identifier (SSID)

BSSID The basic service set identifier (BSSID) is a unique 48-bit address that identifies

CH (Channel) The channel number and frequency (MHz) of a network.

Description

Enter the first few letters of a network name in the search field before pressing
the Scan button (next field description below).

entered in the Network Name search field. Performs a scan for devices within
range of the SGX 5150 unit. To limit the scan to devices that are configured with
the specified SSID, include the network SSID. To perform a scan for all devices,
omit the network SSID.

The command syntax requires the opening and closing quotation marks. If you
omit the SSID, include the quotation marks, for example, scan “”.

To automatically update the list every 60 seconds, select the checkbox.
To stop automatically updating the list, clear the checkbox.

of a specific network.

the access point that creates the wireless network.

SGX 5150 IoT Device Gateway User Guide 64

6: Network Settings

TM

WLAN Quick Connect
Settings (continued)

RSSI A real-time value that indicates the signal strength of the network. Green

Security Suite The security suite of a network. For example: WEP, WPA, WPA2, WPS.

Description

indicates the strongest, yellow indicates average, and red indicates the weakest
signal strength.

The received signal strength indication (RSSI) that is reported in scan results is
a single sample. To review the signal strength average over time, use the status
command. The average is based on the connected AP.

Although WPS is reported with the security flags, it does not indicate a security
setting. WPS indicates that an AP supports WPS.

To View WLAN Link Scan and Status Information

Using Web Manager

 To view the WLAN Link Scan and Status information, on the Network page, click WLAN

Scan/Quick Connect.

Using the CLI

 Not applicable.

Using XML

 Include in your file: <statusggroup name=”wlan scan”>

WLAN Profiles

A WLAN profile defines all of the settings needed to establish a wireless connection. This is true
when in infrastructure mode for an access point. A maximum of eight profiles can exist on the SGX
5150 unit at a time. All enabled profiles are active.

The SGX 5150 unit supports dynamic profiles and prioritization of the profiles. Dynamic Profiles
are created using WPS or Quick Connect. Profiles are assigned numbers based on priority. For
example, dynamic profiles list in reverse order of creation, followed by choice-list profiles, then any
remaining profiles.

Create a new profile by entering a name in the text box, then click the Submit button which will
appear. The new profile is initially saved with default parameter values.

Note: WLAN Profiles created by Quick Connect, Quick Setup, or WPS are called

dynamic profiles and have a higher priority than user created profiles.

The profiles on the WLAN Profiles page are listed in order of priority. The prioritization scheme is
dynamic profiles, user created profiles from WLAN choice list, and then other user created profiles.

WLAN Profile Settings Description

Enabled (check box) Check the checkbox to the right of the WLAN profile listed right to enable the

Table 6-21 WLAN Profiles

specific profile. Unchecking the enabled checkbox disables the WLAN
profile.

SGX 5150 IoT Device Gateway User Guide 65

6: Network Settings

TM

WLAN Profile Settings Description

Delete (check box) Check the checkbox to the right of the WLAN profile listed right and click the

Submit button which appears, to delete the specific profile.

Name
(link to WLAN profile)

Click an existing WLAN profile listed under the Name column to reveal the
configuration options as shown in Table 6-22 Individual WLAN Profile

Settings. Modify configuration options as desired.

Name
(“Add a new profile” field)

Enter the name of a new profile and click Submit to add it. The profile
appears in the WLAN Profiles list.

Configuring WLAN Profile Settings

You can edit, create, or delete a WLAN profile.

Using Web Manager

 To edit, create or delete a WLAN profile, on the Network page, click WLAN Profiles.

Using the CLI

 To enter the WLAN Profile level: enable > configure > wlan profiles

Using XML

 Include in your file:

<configgroup name="wlan profile" instance="profile_name">

Table 6-22 Individual WLAN Profile Settings

WLAN Profile Settings Description

Network Name (SSID) Enter or modify the network name.
State Click to enable or disable.
Suite Select a security suite configuration:

 None

Select None to not select a security suite.

 WEP

WEP security is available in Infrastructure mode. WEP is a simple and
efficient security mode, encrypting the data using the RC4 algorithm.
However, WEP has become more vulnerable due to advances in hacking
technology. State-of-the-art equipment can find WEP keys in 5 minutes.
For stronger security, use WPA, or the stronger WPA2, with AES (CCMP).

 WPA2/WPA Mixed Mode

SGX 5150 IoT Device Gateway User Guide 66

6: Network Settings

TM

WLAN Profile Settings Description

Authentication If WEP security suite is selected, select one of these authentication

options which appear.

 Shared: Encryption keys of both parties are compared as a form of

authentication. If mismatches occur, no connection establishes.

 Open: A connection establishes without first checking for matching

encryption keys. If keys do not match, however, data becomes garbled
and prevents connectivity on the IP level.

If WPA or WPA2/IEEE 802.11i security suite is selected, select one of
these authentication options which appear:

 PSK: In pre-shared keying, the same key must be configured both on the

SGX 5150 side and on the access point side.

 IEEE 802.1X: This authentication method communicates with a RADIUS

authentication server that is part of the network. The RADIUS server
matches the credentials sent by the SGX 5150 unit with an internal
database. If IEEE 802.1X is selected under authentication type, select the
protocol to use to authenticate the WLAN client.

PMF Select one of the following options regarding protected management frames

(PMF):

 Disable
 Optional
 Required

Note: This option is available when the WPA2/WPA mixed mode suite and

the IEEE 802.1x authentication settings are selected.

Key Type Select a Hex or Passphrase key type after indicating the security suite type.
Key Size If the WEP security suite is selected, then select 40 bits or 104 bits key size

in this field.

Passphrase If Passphrase key type is selected, enter an alphanumeric phrase up to 63

characters in length in this field which becomes available. Spaces and
special characters are allowed. Check Show Password to show the
passphrase entered.

TX Key Index If WEP security suite and Hex key type have been selected, then select the

TX key index from the drop-down menu, which becomes available.

 For interoperability with some products that generate four identical keys

from a passphrase, this index must be one.

 For Keys 1-4, enter one or more encryption keys in hexadecimal format.

Enter 10 hexadecimal digits (0-9, a-f) for WEP40 and 26 for WEP104. For
security reasons, the configured keys are not shown.

IEEE 802.1X If IEEE 802.1X authentication is selected, choose a particular type:

 LEAP: type a User Name and Password, then select an Encryption.
 EAP-TLS: Type a Username.
 EAP-TTLS
 PEAP: For PEAP Option, select a security protocol.
 FAST: If selected, select the Fast Option and Fast Provisioning options.

FAST Option Select the FAST option from the drop-down menu:

 MD5 (default)
 MSCHAPV2
 GTC

Note: This option is available when the WPA2/WPA mixed mode suite and

the IEEE 802.1x authentication settings are selected.

SGX 5150 IoT Device Gateway User Guide 67

6: Network Settings

TM

WLAN Profile Settings Description

FAST Provisioning Select the FAST provisioning option from the drop-down menu:

 Unauthenticated
 Authenticated (default)
 Both

Note: This option is available when the WPA2/WPA mixed mode suite, the

FAST IEEE 802.1x authentication, and the MSCHAPV2 FAST option are
selected.

EAP-TTLS Option Select a security protocol:

 EAP-MSCHAPV2
 MSCHAPV2
 MSCHAP
 CHAP
 PAP
 EAP-MD5

Note: This option is available when the WPA2/WPA mixed mode suite, the

IEEE 802.1x authentication, and EAP-TTLS settings are selected.

PEAP Option Select EAP-MSCHAPV2, EAP-MD5 or EAP-TLS.

Note: This option is available when the WPA2/WPA mixed mode suite, the

IEEE 802.1x authentication, and PEAP settings are selected.

Validate Certificate If EAP-TLS is selected, validate the certificate installed on the SGX 5150

gateway by selecting Enabled in the Validate Certificate field which appears.
Validates the certificate installed on the SGX 5150 gateway with the one
received from the RADIUS server.

Credentials After EAP-TLS is selected and the Validate Certificate is enabled, either:

 Select the credential, if listed in the drop-down menu, to validate.
 Type the name of the credential if the credential is not listed in the drop-

down menu.

Username Enter a username.
Password Enter a password if the LEAP, EAP-TTLS and PEAP option is chosen. Check

the Show Password check box to make the password viewable as you enter
it in the Password field.

Inner Credentials Provide inner credentials with enterprise authentication when PEAP/TLS is

selected. Inner credentials specify the client certificate required for the TLS
inner authentication.

Note: This option is available when the WPA2/WPA Mixed Mode suite, the

IEEE 802.1x authentication, PEAP and PEAP EAP-TLS settings are
selected.

Advanced Configuration
(Link)

TX Power Maximum Enter the TX Power Maximum in dBm.
Power Management Select to enable or disable.
Apply (button) Click this button after making configuration selections above, to apply but not

Test Connection (button) Click this button to test the connection according to the configuration

Submit (button) Click this button to submit and save your configuration choices.

Click the Advanced Configuration to reveal additional configuration
settings.

submit/save your choices.

selections made above, but not to submit/save your choices.

SGX 5150 IoT Device Gateway User Guide 68

TM

7: Filesystem

The Filesystem page provides statistics and current usage information for the flash filesystem.
From here you may format the entire filesystem.

 Directories can be created, deleted, moved, and renamed. A directory must be empty before it

can be deleted.

 Files can be created, deleted, moved, renamed, uploaded via HTTP, and transfered to and

from a TFTP server. Newly created files will be empty.

 Some filesystems may contain a 'lost+found' directory.

Table 7-1 File Modification Settings

File Modification
Commands

rm

touch

cp

mkdir

rmdir

format

Description

Removes the specified file from the file system.

Creates the specified file as an empty file.

Creates a copy of a file.

Creates a directory on the file system.

Removes a directory from the file system.

Format the file system and remove all data.

File Transfer and Modification

Files can be transferred to and from the SGX 5150 device via the TFTP protocol. This can be
useful for saving and restoring XML configuration files. Files can also be uploaded via HTTP.

Table 7-2 File Transfer Settings

File Transfer Settings Description

Create Type in a File or Directory name and click the Create button. The newly created

File or Directory will appear above.

Upload File Click to Choose File to location of the file to be uploaded via HTTP. Click Upload

to upload the chosen file.

Copy File Enter the Source and Destination name for file to be copied and click the Copy

button.

Move Enter the Source and Destination name for file to be moved and click the Move

button.

TFTP

Action Select the action that is to be performed via TFTP:

 Get = a “get” command will be executed to store a file locally.
 Put = a “put” command will be executed to send a file to a remote location.

Local File Enter the name of the local file on which the specified “get” or “put” action is to be

performed.

SGX 5150 IoT Device Gateway User Guide 69

7: Filesystem

TM

File Transfer Settings Description

Remote File Enter the name of the file at the remote location that is to be stored locally (“get’)

or externally (“put”).

Host Enter the IP address or name of the host involved in this operation.
Port Enter the number of the port involved in TFTP operations.
Transfer (button) Click the Transfer button after entering all TFTP settings.

To View, Transfer, or Modify Filesystem Files

Using Web Manager

 To view current filesystem browser statistics or to format the filesystem, click Filesystem in

the menu and select Statistics.

Note: Formatting the filesystem will cause existing files on the filesystem to be

deleted.

 To create a new file or directory, upload an existing file, copy or move a file, click Filesystem

in the menu and select Browse.

Using the CLI

 To enter the Filesystem command level: enable > filesystem

Using XML

 Not applicable.

SGX 5150 IoT Device Gateway User Guide 70

TM

8: Diagnostics

Diagnostic settings for the SGX 5150 unit can be viewed and modified under the Diagnostics tab in
the Web Manager user interface. This chapter describes the following diagnostic settings:

 DNS

 Hardware

 IP Sockets

 Log

 Memory

 Ping

 Processes

 Routes

 Threads

 Traceroute

DNS

The primary and secondary DNS addresses come from the active interface. DHCP or BOOTP can
override the static addresses from the network interface configurations.

To look up either the DNS host name or the IP address for an address, type the address or host
name in the field, then click Lookup.

This section describes the active run-time settings for the domain name system (DNS) protocol.
The primary and secondary DNS addresses come from the active interface. The static addresses
from the Network Interface configuration settings may be overridden by DHCP.

Table 8-1 DNS Settings

Field/Button Description

Lookup Perform one of the following and click the Lookup button:

 Enter an IP address, and perform a reverse Lookup to locate the host name for

that IP address

 Enter a host name, and perform a forward Lookup to locate the corresponding

IP address.

Accessing the DNS Settings

Using Web Manager

 To view the current DNS name or IP address, on the Diagnostics page, click DNS.

 To configure the DNS Settings, on the Diagnostics page, enter the name of a DNS host and

click Lookup.

Note: If DNS information is not supplied by DHCP, configure Ethernet (eth0) internet

settings according to instructions at Wired (eth0) Network (on page 44) and configure

SGX 5150 IoT Device Gateway User Guide 71

TM

Wireless (wlan0) Network interface settings according to instructions at Wireless (wlan0)

Network (on page 49).

Using CLI

 To enter CLI command level: enable > dns

Using XML

 Not applicable.

Hardware

View the CPU type, CPU speed, RAM size and flash size of the hardware on this Web Manager
page.

To View Hardware Information

Using Web Manager

 To view hardware information, on the Diagnostics page, click Hardware.

8: Diagnostics

Using the CLI

 To enter the command level: enable > device, show hardware information

Using XML

 Include in your file: <statusgroup name= ¨hardware¨>

IP Sockets

You can view the list of listening and connected IP sockets.

To View the List of IP Sockets

Using Web Manager

 To view IP Sockets, on the Diagnostics page, click IP Sockets.

Using the CLI

 To enter the command level: enable > show ip sockets

Using XML

 Include in your file: <statusgroup name=”ip sockets”>

SGX 5150 IoT Device Gateway User Guide 72

TM

Log

8: Diagnostics

Configure a line or disable the diagnostic log on this Web Manager page.

Table 8-2 Log Settings

Diagnostics Log Description

Output Select a diagnostic log output type:

 Disable - Turn off the logging feature.
 Line 1 - Directs logging to the selected serial line.
 USB 1 - Directs logging to the usb port.

To Configure the Diagnostic Log Output

Using Web Manager

 To configure the Diagnostic Log output, on the Diagnostics page, click Log.

Using the CLI

 To enter the command level: enable > config > diagnostics > log

Using XML

 Include in your file: <configgroup name=”diagnostics”>

Memory

The memory information includes the total, used, and available memory (in kilobytes).

To View Memory Usage

Using Web Manager

 To view memory information, on the Diagnostics page, click Memory.

Using the CLI

 To enter the command level: enable > device, show memory

Using XML

 Include in your file: <statusgroup name="memory">

Ping

You can use Ping to test connectivity to a remote host.

Table 8-3 Ping Configuration

IP Socket Description

Host Enter the IP address or host name for the SGX 5150 unit that you want to ping.

SGX 5150 IoT Device Gateway User Guide 73

TM

IP Socket Description

Count Enter the number of ping packets that the SGX 5150 unit attempts to send to the

Timeout Enter the time in seconds that the SGX 5150 unit waits for a response from the

To Ping a Remote Host

Using Web Manager

 To view memory information, on the Diagnostics page, click Ping.

Using the CLI

 To enter the command level: ping or ping6

Using XML

 Not applicable.

Processes

8: Diagnostics

Host. The default number of packets is 3.

Host before it times out. The default time is 5 seconds.

The SGX 5150 unit shows all the processes currently running on the system. It shows the process
ID (PID), parent process ID (PPID), user, CPU percentage, percentage of total CPU cycles, and
process command line information.

To View Process Information

Using Web Manager

 To view process information, on the Diagnostics page, click Processes.

Using the CLI

 To enter the command level: enable, show processes

Using XML

 Include in your file: <statusgroup name="processes">

Routes

Routing allows one system to find the network path to another system, from a gateway to a
destination.

Using Web Manager

 To view the current networking routes, on the Diagnostics page, click Routes.

Using CLI

 To enter the command level: enable, show routes

Using XML

 Not applicable.

SGX 5150 IoT Device Gateway User Guide 74

TM

Threads

The SGX 5150 unit threads information shows details of threads in the ltrx_evo task which can be
useful for technical experts in debugging.

To View Thread Information

Using Web Manager

 To view thread information, on the Diagnostics page, click Threads.

Using the CLI

 To enter the command level: enable > auto show processes or show processes

Using XML

 Not applicable.

Traceroute

You can use traceroute to trace a packet from the SGX 5150 unit to an Internet host. A traceroute
shows how many hops the packet requires to reach the host, and how long each hop takes. This
information can be helpful to diagnose delays for a web page that loads slowly.

8: Diagnostics

Table 8-4 Traceroute Settings

Traceroute Fields Description

Host

Protocol

E

nter the IP address or DNS host name of the destination device.

S

elect the protocol that you want to use for the traceroute.

 TCP
 ICMP
 UDP

To Perform a Traceroute

Using Web Manager

 To view traceroute information, on the Diagnostics page, click Traceroute.

Using the CLI

 To enter the command level: enable > trace route

Using XML

 Not applicable.

SGX 5150 IoT Device Gateway User Guide 75

TM

9: Administration

Administrative features for the SGX 5150 device gateway are organized beneath the
Administration tab in the Web Manager user interface. This chapter describes the following
administrative settings:

 Actions

 Applications

 CLI

 Clock

 Discovery

 Email

 FTP

 Gateway

 GRE

 Host

 HTTP

 Line

 MACH10

 Modbus

 RSS

 SMTP

 SNMP Settings

 SSH

 SSL

 Syslog

 System

 Terminal

 Tunnel

 USB

 User Management

 XML

 Quick Setup

SGX 5150 IoT Device Gateway User Guide 76

TM

Actions

Table 9-1 contains the configuration options for all the alarms and reports listed above.

Action Settings Description

Delay Use Delay to defer alarm processing. Alarm actions will not be executed if the cause

Email Use Email to send an email to configured Email recipients.

FTP Put Use FTP Put to put a file on configured FTP server.

HTTP Post Use HTTP Post post to configured HTTP server.

SNMP Trap Use SNMP Trap to send SNMP trap to configured trap destinations. SNMP Trap

9: Administration

Table 9-1 Action Settings

is corrected within this time.

 If an Alarm Email profile number is selected, that email will be sent when the

alarm is turned on. The contents of Alarm Message will be placed into the email
body when an alarm email is sent. If the alarm stays on longer than the Reminder
Interval, another alarm email is sent.

 If a Normal Email profile number is selected, that email will be sent when the

alarm is turned off. The contents of Normal Message will be placed into the email
body when a normal email is sent. If the alarm stays off longer than the Reminder
Interval, another normal email is sent.

Filename will be used to upload to remote FTP server. The IP Address or hostname
is the FTP server to connect. Port number is port on which FTP server is listening on.
Use Protocol to connect to FTP server. FTPS is a SSL encrypted communication
channel and SSL Trusted Authorities must be setup with FTP server SSL certificate.
Username is used to logon to FTP server. If FTP server does not require
authentication, use anonymous. Password is used to logon to FTP server. If FTP
server does not require authentication, a common practice is to use user’s email
address. If the alarm stays on or off longer than the Reminder Interval, another FTP
Put is performed. In Sequential Mode, connections will be attempted starting with
number 1 until a connection is successful. In Simultaneous Mode, all possible
connections will be made.

The URL appears behind the HTTP server IP address or hostname. E.g.

some_http_server/some_url

server to connect to. Port number is the port which HTTP server is listening on. Use
Protocol to connect to HTTP server. HTTPS is a SSL encrypted communication
channel and SSL Trusted Authorities must be setup with HTTP server SSL
certificate. Username used to logon to HTTP server if authentication is required.
Password used to logon to HTTP server if authentication is required. If the alarm
stays on or off longer than the Reminder Interval, another HTTP Post is performed.
In Sequential Mode, connections will be attempted starting with number 1 until a
connection is successful. In Simultaneous Mode, all possible connections will be
made.

State can be Enabled or Disabled. The contents of Alarm Message are included
when an alarm SNMP trap is sent. If the alarm stays on longer than the Reminder
Interval, another alarm SNMP Trap is sent. The contents of Normal Message are
included when a normal SNMP trap is sent. If the alarm stays off longer than the
Reminder Interval, another normal SNMP Trap is sent.

The IP Address or hostname is the HTTP

http://

SGX 5150 IoT Device Gateway User Guide 77

9: Administration

TM

To Configure Action Settings

Using Web Manager

 To view Action status, on the Administration page, click Action > Status on the menu.

 To modify Action information, on the Administration page, click Action > Configuration on

the menu and select a specific action from the drop-down menu. SMTP (on page 102) lists the
options.

Using the CLI

 To enter the eth0 link state change command level: enable > config > action > eth0

link state change

 To enter the wlan0 link state change command level: enable > config > action >

wlan0 link state change

 To enter device temperature change command level: enable > config > action >

device temperature change

 To enter on scheduled reboot command level: enable > config > action > on

scheduled reboot

Using XML

 Include in your file: <configgroup name = "action" instance = "eth0 link

state change">

 Include in your file: <configgroup name = "action" instance = "wlan0 link

state change">

 Include in your file: <configgroup name = "device temperature change"

 Include in your file:

<configgroup name = "action" instance = "on scheduled reboot">

Python

Python™ is a dynamic, object-oriented programming language that can be used for developing a
wide range of software applications. The Lantronix SGX 5150 includes the installation of Python
interpreter, making it easy to load and run custom Python scripts on your device.

The version of Python programming language installed on the Lantronix SGX 5150 comes with
"batteries included" by having the Python language's standard library. In addition, the developer
can take advantage of thousands of available third party packages to speed up development.

IDE

Python scripts can be written with any text editor. If using Windows for development, Notepad++ is
a powerful choice as this text editor includes traditional IDE features such as syntax highlighting
and automatic indentation (http://notepad-plus-plus.org/
customize through plugins. Some interesting plugins for the development of Python scripts for the
Lantronix SGX 5150 platform include the following:

). Notepad++ also includes the ability to

 PyNPP: https://github.com/mpcabd/PyNPP

This plugin allows the user to use keystrokes to launch the open Python script in the local
Python interpreter for debugging and testing.

SGX 5150 IoT Device Gateway User Guide 78

TM

 NppFTP: http://sourceforge.net/projects/nppftp/

This plugin provides a one-click upload of a file to an FTP server. Debugging and testing on
the SGX 5150 easier because SGX 5150 products have an FTP server through which to
upload files into the file system.

Applications

The SGX 5150 supports the ability to install and uninstall user-defined Python scripts and
packages and will include the following:

bin python

lib

Table 9-2 contains the setting options for configuring, installing, uninstalling and running external

applications via Python scripts.

9: Administration

libpython{version}.so

<ltrx python sdk>

"python precompiled scripts

libpython{version}

"python shared libraries

Caution: Use extreme caution when installing and running scripts.

Table 9-2 Script Settings

Script Settings Description

Reserved Start Port Enter the Reserved Start Port. The range is between 1024 and 65535.
Reserved Ports Enter a Reserved Port. The range is between 2 and 32.
Script (Number) Click the Run button to manually execute the script.

Note: The script is run with configuration saved to the Flash.

Enabled
(checkbox)

Run on startup
(checkbox)

Run on shutdown
(checkbox)

Script Enter the path of the script to run.
Parameter Enter the script parameters (if any).
Output Enter output log file (if desired) for the script to redirect output of script to file. If the

Check the Enabled checkbox within a particular script to enable it. Uncheck the
checkbox to disable the script.

Check the Run on startup checkbox within a particular script to have it run upon the
start up of the SGX 5150 unit. Uncheck the checkbox to disable automatically
running the unit upon startup.

Check the Run on shutdown checkbox within a particular script to have it run on
shutdown of the SGX 5150 unit. Uncheck the checkbox to disable automatically
running the script upon shutdown.

name of output log contains "

%t", it will translate it into time stamp (e.g.,

script1_%t.log => script1_2007-01-02_19-06-57.log)

Uninstall (button) Click the Uninstall button in a Python package to uninstall it.

Remove All
(button)

Filename (field) Enter the package file name pathway in the file system and click the Install button to

Click the Remove All button to uninstall all Python packages.

install it.

SGX 5150 IoT Device Gateway User Guide 79

TM

CLI

9: Administration

To Configure Application Settings

Using Web Manager

 To configure application scripts, on the Administration page, click Applications on the

menu.

Using the CLI

 To enter the application script change command level: enable > config >

applications

Using XML

 Include in your file: <configgroup name = "applications">

The command line interface (CLI) settings allow you to control how users connect to and interact
with the command line of the SGX 5150 unit. It is possible to configure access via the Telnet and
SSH protocols, in addition to general CLI options.

CLI Status and Configuration

View-only status information on the Command Line Interface Status page displays the current
Telnet and SSH server status, uptime, and current connections (if any.)

See Table 9-3 for the bridge settings that can be modified on the Command Line Interface
Configuration page.

Table 9-3 CLI Configuration Settings

Command Line
Interface Configuration
Settings

Enable Level Password Enter the password for access to the Command Mode Enable level. There is no

Quit Connect Line Enter the Quit Connect Line string to be used to terminate a Telnet and SSH

Inactivity Timeout Set a time period in which the CLI session should disconnect if no data is

Line Authentication Enable or Disable authentication for CLI access on the serial lines.
Telnet State Enable or Disable CLI access via Telnet
Telnet Port Enter an alternative Telnet Port to override the default used by the CLI server.

Telnet Max Sessions Specify the maximum number of concurrent Telnet sessions that will be allowed.
Telnet Authentication Enable or Disable authentication for Telnet logins.
SSH State Select to Enable or Disable CLI access via Telnet.

Description

password by default.

session and resume the CLI. Type <control> before the key to be pressed while
holding down the [Ctrl] key (example: <control>L)

received. Enter 0 to disable. Blank the display field to restore the default.

Blank the field to restore the default.

SGX 5150 IoT Device Gateway User Guide 80

9: Administration

TM

Clock

Command Line
Interface Configuration
Settings

SSH Port Specify the SSH Port and override the default, as needed. Blank the field to

SSH Max Sessions Specify the maximum number of concurrent SSH sessions that will be allowed.

Description

restore the default.

To View and Configure Basic CLI Settings

Using Web Manager

 To view CLI statistics, on the Administration page, click CLI > Statistics.

 To configure basic CLI settings, on the Administration page, click CLI > Configuration.

Using the CLI

 To enter CLI command level: enable > config > cli

Using XML

 Include in your file: <configgroup name="cli">

You can view current clock settings at the bottom of the screen, and also either manually update or
synchronize the clock with an SNTP server. If you select SNTP, you can choose automatic time
zone detection.

Table 9-4 Clock Settings

Bridge Fields Description

Method Select Manual or SNTP from the drop-down window.
Date If Manual method is selected, enter the date using the Year, Month and

Day drop down menus that become available.

Time If Manual method is selected, enter the time using the Hour, Minute (Min)

and Second (Sec) drop down menus that become available.

NTP Server If SNTP method is selected, the clock will keep time synchronized with the

NTP Server by default. Enter an alternative NTP server if you wish to use an
address other than the default.

Time Zone Select the desired Time Zone from the drop-down menu based on geographic

location. The time zones listed are in Universal Time Coordinated (UTC),
formerly known as Greenwich Mean Time (GMT). Syslog and other
applications may use UTC. The UTC Offset of the form HHMM (H = hour, M =
minute) is applied to the UTC time to get the local time. The SGX 5150
gateway will make seasonal time changes required for Daylight Savings
Time.

SGX 5150 IoT Device Gateway User Guide 81

TM

To Specify a Clock-Setting Method

Using Web Manager

 To view or configure basic Clock settings, on the Administration page, click Clock.

Using the CLI

 To enter Clock command level: enable > config > clock

Using XML

 Include in your file: <configgroup name="clock">

Discovery

Network discovery allows your computer to locate other computers and devices on the network.
This setting also allows other computers to see your computer.

The current statistics and configuration options for device discovery, including UPnP query port,
are available for the SGX 5150 unit.

9: Administration

Table 9-5 Discovery Settings

Discovery Settings Description

Query Port Server State Select to enable or disable the query port server from responding to

autodiscovery messages on port 0x77FE.

UPnP Server State Select to enable or disable the UPnP server from discovering devices in

Windows network places.

UPnP Server Port Update the UPnP server port. Leaving this field blank will restore the default

settings.

To Configure Discovery

Using Web Manager

 To configure Discovery, on the Administration page, click Discovery.

Using the CLI

 To enter Discovery command level: enable > config > discovery

Using XML

 Include in your file: <configgroup name="discovery">

SGX 5150 IoT Device Gateway User Guide 82

TM

Email

9: Administration

View and configure email alerts relating to events occurring within the system.

Table 9-6 Email Configuration

Email – Configuration

Description

Settings

From Click the Configure SMTP link to configure SMTP. See SMTP (on page 102).
To Enter the email address to which the email alerts will be sent. Multiple addresses

are separated by semicolon (;). Required field if email is to be sent.

CC Enter the email address to which the email alerts will be copied. Multiple addresses

are separated by semicolon (;).

Reply To Enter the email address to list in the Reply-To field of the email alert.
Subject Enter the subject for the email alert.

Note: Emails sent as a result of an alarm will display the name of the alarm in the

subject of the email, overriding the email subject configured in this field.

Message File Enter the path of the file to send with the email alert. This file appears within the

message body of the email, not as an attachment.

Priority Select the priority level for the email alert:

 Urgent
 High
 Normal
 Low
 Very Low

To View, Configure and Send Email

Note: The following section describes the steps to view and configure Email 1 settings;

these steps apply to other emails available for the SGX 5150 gateway.

Using Web Manager

 To view Email statistics, on the Administration page, click Email > Statistics.

 To configure basic Email settings and send an email, on the Administration page, click Email

> Configuration.

Using the CLI

 To enter Email command level: enable > email 1

Using XML

 Include in your file: <configgroup name=”email” instance=”1”>

SGX 5150 IoT Device Gateway User Guide 83

TM

FTP

9: Administration

The FTP protocol can be used to upload and download user files, and upgrade the SGX 5150
firmware. A configurable option is provided to enable or disable access via this protocol.

Table 9-7 FTP Settings

FTP Settings Description

State Select to enable or disable the FTP server:

 Enabled (default)
 Disabled

Port Enter the Port to be used by FTP server. Entering a Port overrides the default ftp

port. Blank the field to restore the default ftp port.

Data Port Enter the Data Port where the server initiates a data channel to the client. In

active mode, the client starts listening for incoming data connections from the
server on port M. It sends the FTP command PORT M to inform the server on
which port it is listening. The server then initiates a data channel to the client
from its Data Port.

Passive Mode Start
Port

Passive Mode Ports

Submit (button) Click the Submit button to enter the change of state. The Submit button appears

Define the port range by entering the Passive Mode Start Port and Passive
Mode Port. In passive mode, the client uses the control connection to send a

PASV command to the server and then receives a server IP address and server
port number from the server, which the client then uses to open a data
connection to the server IP address and server port number received. In
situations where the client is behind a firewall and unable to accept incoming
TCP connections, passive mode may be used.

when a new state is selected.

To Configure FTP Settings

Using Web Manager

 To configure FTP, on the Administration page, click FTP.

Using the CLI

 To enter the FTP command level: enable > config > ftp

Using XML

 Include in your file: <configgroup name="ftp server">

Gateway

The SGX 5150 IoT device gateway can be configured as a wireless router with DHCP server
functionality.

Status

This page displays the current configuration and statistics information for the gateway.

 To view gateway status: on the Administration page, click Gateway > Status.

SGX 5150 IoT Device Gateway User Guide 84

9: Administration

TM

WAN

Table 9-8 WAN Configuration

Gateway Settings Description

Operating Mode Select the type of operating mode:

 Disabled: prevents the SGX 5150 gateway to be used as a gateway;

use the gateway normally.

 Gateway: allows the gateway to be used as a router with NAT.
 Router: allows the SGX 5150 gateway to be used as a router without

NAT.

Firewall Select to enable or disable firewall:

 Enabled: enables the SGX 5150 gateway firewall.
 Disabled: disable the SGX 5150 gateway firewall.

MAC Address filter Select to enable or disable the MAC address filter.
Interface Specify the WAN interface; the wlan0 interface.
IP Address Assign a static IP address to the gateway.
IPv6 Address Assign a static IPv6 address to the gateway.
Primary DNS Enter the IP address of the primary Domain Name Server.

Note: This setting will be used when either Static IP or Auto IP is active, or

if DHCP/BOOTP is active and no DNS server was acquired from the
server.

Secondary DNS Enter the IP address of the secondary Domain Name Server.

Note: This setting will be used when either Static IP or Auto IP is active, or

if DHCP/BOOTP is active and no DNS server was acquired from the
server.

WAN MAC Address Filters

Accept or drop traffic from specified MAC addresses using the settings below.

Table 9-9 Adding a New MAC Address Filters

Adding or Deleting New MAC
Address Filter Settings

Delete Click the checkbox to the left of any existing mac address filter to be

MAC Address Enter a new mac address to add a new filter.
Action Select to Accept or Drop above indicated MAC Address field.

Description

deleted (if any) and click the Submit button.

To Configure Gateway WAN Settings

Using Web Manager

 To view gateway status information, on the Administration page, click Gateway > Status.

 To modify gateway WAN information, on the Administration page, click Gateway >

Configuration > WAN.

SGX 5150 IoT Device Gateway User Guide 85

TM

Using the CLI

 To enter the gateway command level: enable > config > gateway

Using XML

9: Administration

 Include in your file:

<configgroup name="ga

teway"> <configitem name="wan">

Port Forwarding

Port forwarding allows remote computers (for example, computers on the Internet) to connect to a
specific computer or service within a private local-area network (LAN). Port Forwarding rules
apply to inbound traffic and will not work if the SGX 5150 gateway is not reachable or traffic to
certain ports is blocked before it reaches the gateway.

If traffic is going through firewalls, all referenced ports on the gateway and LAN devices must be
accessible.

Table 9-10 Port Forwarding Rules List

Port Forwarding Rule Description

Enabled Enables the port forwarding rule.
Delete Deletes the port forwarding rule.
Name User friendly name for the rule. Click on the [Edit] icon to make changes.

Ingress IP Address: Port
Range

Protocol Protocols for the rule: TCP, UDP, or Both.
IP Address: Target Port Target for the port forwarding rule.

Port or Port range for the rule.

Table 9-11 Adding a New Port Forwarding Rule

Adding New Port
Forwarding Rule
Settings

Name Enter a User Friendly name for the rule (optional)

Ingress IP Address

(Optional)

Start Port Enter the starting port number.
End Port Enter the end port number (optional). If start port and end port are same it

Protocol Select the protocol for the rule. TCP, UDP, or Both.
IP Address Enter the target for the port forwarding rule.
Target Port Indicate the target port. This is the port which the packets are to be forwarded.

Description

Enter the destination address of the packets. This option can only be used with
single ports and not with port range.

assumes a single port. If start port and end port are not the same – it is a port
range.

This options can only be used with single ports and not with port range. If this
value is not specified. If this value is not specified, the packets are forwarded to
same port or pot range. Optional field.

SGX 5150 IoT Device Gateway User Guide 86

9: Administration

TM

To Configure Gateway Port Forwarding Settings

Using Web Manager

 To modify gateway port forwarding information, on the Administration page, click Gateway >

Configuration > Port Forwarding.

Using the CLI

 To enter the gateway command level: enable > config > gateway > port

forwarding rule <number>

Using XML

 Include in your file: <configgroup name="gateway"> <configitem name="port

forwarding" instance="<number>">

Static Routes

Allows the user to add routes to the SGX 5150 gateway routing table.

Table 9-12 Static Route Setting Routes

Static Route Settings Description

Enabled Enables the static route
Delete Deletes the static route
Name User friendly name for the route. Click on the [Edit] icon to make changes.
Route Network or Host for the route
Applied If the route was successfully applied. Routing table updates require a

reboot and route needs to be valid as per other device configurables.

Table 9-13 Adding a New Static Route

Adding New Static Route
Settings

Name User friendly name for the route
Network Network or Host for the route
Gateway Gateway for the route
Interface Interface for the route
Metric Priority for the route. Lower metric means higher priority

Description

To Configure Gateway Static Route Settings

Using Web Manager

 To modify gateway static route information, on the Administration page, click Gateway >

Configuration > Static Routes.

SGX 5150 IoT Device Gateway User Guide 87

9: Administration

TM

Using the CLI

 To enter the gateway command level: enable > config > gateway > static route

<number>

Using XML

 Include in your file:

<configgroup name ="gateway">

<configitem name="static

routes" instance="<number>"

DHCP Server

Allows the user to configure the SGX 5150 gateway as a DHCP server.

Table 9-14 DHCP Settings

DHCP Settings Description

Configuration
Lease time Duration for which lease is initially assigned. Clients must renew after this duration.

DHCP Settings
State Enable or Disable the DHCP server for the DHCP settings.

 Enabled: DHCP server is enabled
 Disabled: DHCP server is disabled.

Start IP Address Start IP Address of address pool.
End IP Address End IP Address of address pool.
Lease time Duration for which lease is initially assigned. Clients must renew after this duration.

DHCP Settings
State Enable or Disable the DHCP server for the DHCPv6 settings.

 Enabled: DHCP server is enabled
 Disabled: DHCP server is disabled.

Start IP Address Start IPv6 Address of address pool
End IP Address End IPv6 Address of address pool

DHCP v6 Settings
State Enable or Disable the DHCP server for the DHCPv6 settings.

 Enabled: DHCP server is enabled
 Disabled: DHCP server is disabled.

Start IPv6 Address Start IPv6 Address of address pool
End IPv6 Address End IPv6 Address of address pool

To Configure Gateway DHCP Server Settings

Using Web Manager

 To modify gateway DHCP server or static lease information, on the Administration page,

click Gateway > Configuration > DHCP Server.

Using the CLI

 To enter the gateway command level: enable > config > gateway > dhcp server

SGX 5150 IoT Device Gateway User Guide 88

TM

Using XML

9: Administration

 Include in your file:

<configgroup name = "dhcp server">

Static Lease Listing

The SGX 5150 gateway also provides the ability to pre-assign specific IP addresses to connected
devices using static leases. This would ensure that the connected device (identified by the MAC
address) always gets the same IP address even while using DHCP.

Table 9-15 Static Lease Listing

Static Lease List Settings Description

Delete Click checkbox beside existing static lease MAC Address/IP Address to

delete, if available and if desired.

MAC Address MAC Address of existing static leases are listed here.
IP Address Static IP Address of existing static leases are listed here.
IPv6 Address Static IPv6 Address of existing static leases are listed here.

Table 9-16 Add a Static Lease

Add a Static Lease
Settings

MAC Address Enter the MAC Address of the static lease to be added.
IP Address Enter static IP address of the static lease to be added.
IPv6 Address Enter static IPv6 address of the static lease to be added.
Add (button) Click the Add button when the new static lease fields have been entered.

Description

Routing Protocols

The SGX 5150 IoT device gateway allows the configuration of routing protocols. Routing protocols
specify how routers communicate with each other, disseminating information that enables the
selection of routes between any two nodes on a computer network. Routing algorithms determine
the specific choice of route. Each router has a prior knowledge of networks directly attached to it. A
routing protocol shares this information among immediate neighbors first, then through the
network. This way, routers gain knowledge of the topology of the network. The SGX 5150device
supports RIP and OSPF protocols.

Table 9-17 Routing Protocol Settings

Routing Settings Description

RIP
State Select to enable or disable the RIP state.
Version Select how the RIP is to be configured. It can accept Version 1, Version 2,

or Version 1 and 2.

Update Interval Indicate the number of seconds for the Update Interval. Send unsolicited

Response message every Update Interval seconds containing the complete
routing table to all neighboring RIP routers.

SGX 5150 IoT Device Gateway User Guide 89

9: Administration

TM

Routing Settings Description

Timeout Interval Indicate the number of seconds for the Timeout Interval. Upon expiration of

the Timeout Interval, the routes are no longer valid, however, they are
retained in the routing table for a short time so that neighbors can be notified
that the route has been dropped.

GC Interval Indicate the number of seconds for the GC Interval. Upon expiration of the

GC Interval, the routes are finally removed from the routing table.

OSPF
State Select to Enable or Disable the OSPF state.
Hello Interval Indicate the number of seconds for the Hello Interval. Hello packet will be

sent every Hello Interval seconds.

Dead Interval Indicate the number of seconds for the Dead Interval. Sets the time period

for which hello packets must not have been seen before neighbors declare
the router down.

To Configure Gateway Routing Protocol Settings

Using Web Manager

 To modify gateway protocol settings, on the Administration page, click Gateway >

Configuration > Routing Protocol.

Using the CLI

 To enter the gateway command level: enable > config > gateway > routing

protocols

Using XML

 Include in your file: <configgroup name = "routing protocols">

Virtual IP

The SGX 5150 IoT device gateway allows the configuration of Virtual IP addresses. Virtual IP is a
means to map an externally visible IP address to LAN-side IP addresses. SGX 5150 units will
support creating up to three virtual IP address mappings.

Table 9-18 Virtual IP Settings

Virtual IP Settings Description

Enabled (checkbox) Uncheck the Enabled checkbox adjacent to a virtual IP address (if any

listed) to disable it. Keep the checkbox checked to keep the virtual IP
address enabled. A virtual IP address is enabled by default.

Delete (checkbox) Check the Delete checkbox adjacent to a virtual IP address (if any listed) to

be deleted, clicking the Submit button.

Name Enter a name of the virtual IP address.
IP Address Enter the virtual IP address to which the LAN IP address is to be mapped.
LAN IP Address Enter the LAN IP address to which the virtual IP address is to be mapped.

SGX 5150 IoT Device Gateway User Guide 90

9: Administration

TM

Table 9-19 Add a Virtual IP

Virtual IP Settings Description

Name Enter a name of the virtual IP address.
IP Address Enter the virtual IP address to which the LAN IP address is to be mapped.
LAN IP Address Enter the LAN IP address to which the virtual IP address is to be mapped.

Add (button)

Click the Add button to add a new virtual IP.

Newly added static leases

will appear under Static Leases (see Table 9-15 Static Lease

Listing).

To Configure Gateway Virtual IP

Using Web Manager

 To modify gateway DHCP server information, on the Administration page, click Gateway >

Configuration > Virtual IP.

Using the CLI

 To enter the gateway command level: enable > config > gateway

GRE

Using XML

 Include in your file: <configgroup name = "virtual ip">

GRE tunneling is available on the SGX 5150, providing more capabilities than IP-in-IP tunneling.
For example, it supports transporting multicast traffic and IPv6 through a GRE tunnel.

Table 9-20 GRE Settings

GRE Settings Description

Name Enter the user-defined name of the GRE tunnel.
State Select to enable and disable GRE tunnel.
IP Address Assign a IP address/mask for the GRE tunnel.
MTU Enter the number of bytes indicating the largest physical packet size that the

network can transmit.

Local Network Select the local network to use the GRE tunnel. Select vpn 1 to use the VPN

network. Select any to use any available interface to remote host.

Remote Host Enter the remote IP address to use for the GRE tunnel.
Remote Network Enter the remote network to use for the GRE tunnel.

SGX 5150 IoT Device Gateway User Guide 91

TM

Host

9: Administration

To Configure GRE Settings

Using Web Manager

 To view or configure GRE settings for a specific tunnel, on the Administration page, click

GRE.

Using the CLI

 To enter GRE command level: enable > gre

Using XML

 Include in your file: <configgroup name=”gre”>

Table 9-21 Host Settings

Host Settings Description

Name

Protocol

SSH Username

Remote Address Enter an IP address for the host to which the SGX 5150 gateway will connect.
Remote Port Enter the port on the host to which the SGX 5150 gateway will connect.

Enter a name for the host. This name appears on the Login Connect Menu. To
leave a host out of the menu, leave this field blank.

Select the protocol to use to connect to the host. Choices are:

 Telnet
 SSH

Note: SSH keys must be loaded or created on the SSH page for the SSH

protocol to work.

Appears if you selected SSH as the protocol. Enter a username to select a
preconfigured Username/Password/Key (configured on the SSH: Client Users
page), or leave it blank to be prompted for a username and password at connect
time.

Note: This configuration option is only available when SSH is selected for

Protocol.

To Configure Host Settings

Note: The following section describes the steps to view and configure Host 1 settings;

these steps apply to other host instances of the SGX 5150 gateway.

Using Web Manager

 To configure a particular Host, on the Administration page, click Host > Configuration.

Using the CLI

 To enter the Host command level: enable > config > host 1

SGX 5150 IoT Device Gateway User Guide 92

TM

HTTP

9: Administration

Using XML

 Include in your file: <configgroup name=”host” instance=”1”>

Hypertext Transfer Protocol (HTTP) is a request-response standard protocol between clients and
servers. HTTP defines how messages are formatted and transmitted. It also defines the actions
Web servers and browsers take in response to different commands. HTTP Authentication enables
the requirement of user names and passwords for access to the SGX 5150 gateway.

Interface Status, Configuration and Authentication

View-only status information on the HTTP Statistics page displays various HTTP server statistics
including information on Rx bytes, Tx bytes, error message types, status unknown, work queue
full, socket error, memory error and logs.

See Table 9-22 for the HTTP settings that can be modified on the HTTP Configuration page. See

Table 9-23 for the HTTP settings that can be authenticated on the HTTP Authentication page.

Table 9-22 HTTP Configuration

HTTP Settings Description

State Select to enable or disable the HTTP server.
Port Enter the port for the HTTP server to use. The default is 80.
HTTPS State Select to enable or disable.
Secure Port Enter the port for the HTTPS server to use. The default is 443. The HTTP

server only listens on the HTTPS Port when an SSL certificate is configured.

Secure Protocols Select to enable or disable the following protocols:

 SSL3 = Secure Sockets Layer version 3
 TLS1.0 = Transport Layer Security version 1.0. TLS 1.0 is the successor of

SSL3 as defined by the IETF.

 TLS1.1 = Transport Layer Security version 1.1
 TLS1.2 = Transport Layer Security version

The protocols are enabled by default.

Note: A server certificate and associated private key need to be installed in the

SSL configuration section to use HTTPS.

Secure Credentials Specify the name of the set of RSA and/or DSA certificates and keys to be used

for the secure connection.

Max Timeout Enter the maximum time for the HTTP server to wait when receiving a request.

This prevents Denial-of-Service (DoS) attacks. The default is 10 seconds.

Max Bytes Enter the maximum number of bytes the HTTP server accepts when receiving a

request. The default is 40 KB (this prevents DoS attacks).

Note: You may need to increase this number in some cases where the

browser is sending data aggressively within TCP Windows size limit, when file
(including firmware upgrade) is uploaded from webpage.

Logging State Select to enable or disable HTTP server logging:

 Enabled (default)
 Disabled

SGX 5150 IoT Device Gateway User Guide 93

9: Administration

TM

HTTP Settings Description

Max Log Entries Set the maximum number of HTTP server log entries. Only the last Max Log

Entries are cached and viewable.

Log Format Set the log format string for the HTTP server. Follow these Log Format rules:

 %a - remote IP address (could be a proxy)
 %b - bytes sent excluding headers
 %B - bytes sent excluding headers (0 = '-')
 %h - remote host (same as '%a')
 %{h}i - header contents from request (h = header string)
 %m - request method
 %p - ephemeral local port value used for request
 %q - query string (prepend with '?' or empty '-')
 %t - timestamp HH:MM:SS (same as Apache '%(%H:%M:%S)t' or '%(%T)t')
 %u - remote user (could be bogus for 401 status)
 %U - URL path info
 %r - first line of request (same as '%m %U%q <version>')
 %s - return status

Authentication Timeout The timeout period applies if the selected authentication type is either Digest or

SSL/Digest. After this period of inactivity, the client must authenticate again.

To View or Configure HTTP Authentication

Using Web Manager

 To view HTTP statistics, on the Administration page, click HTTP > Statistics

 To configure HTTP, on the Administration page, click HTTP > Configuration.

Using the CLI

 To enter the HTTP command level: enable > config > http

Using XML

 Include in your file: <configgroup name="http server">

The HTTP Server can be configured with many different authentication directives. The
authentication is hierarchical in that any URI can be given an authentication directive in order to
override a parent URI authentication directive.

Table 9-23 HTTP Authentication

HTTP Authentication
Settings

URI Enter the URI. The URI must begin with / to refer to the filesystem.

Description

SGX 5150 IoT Device Gateway User Guide 94

9: Administration

TM

HTTP Authentication
Settings

Authentication Type Select an HTTP authentication type. The different types offer various levels of

Delete Click to delete the existing configuration.

Description

security, from the least to most secure:

 None: no authentication necessary
 Basic: encodes passwords using Base64
 Digest: encodes passwords using MD5

When changing the parameters of Digest authentication, it is often best to close
and reopen the browser to ensure that it does not attempt to use cached
authentication information.

There is no real reason to create an authentication directive using None unless
you want to override a parent directive that uses some other Authentication
Type.

Click Submit when URI and Authentication Type is entered to submit it.

To Configure HTTP Authentication

Using Web Manager

 To configure HTTP authentication, on the Administration page, click HTTP >

Authentication.

Using the CLI

Line

 To enter the HTTP command level: enable > config > http

Using XML

 Include in your file: <configgroup name="http authentication uri">

The SGX 5150 units offer 1 or 2 serial ports which use standard RS232/RS485 interfaces. The
lines can be configured to operate in the following modes:

 RS232

 RS485 Full Duplex (also compatible with RS-422)

 RS485 Half Duplex, with and without termination impedance

 All serial settings such as Baud Rate, Parity, Data Bits, etc, apply to this line.

The line settings allow configuration of the serial line.

Note: The following section describes the steps to view and configure Line 1 settings;

these steps apply to other line instances of the SGX 5150 gateway.

Line Status and Configuration

View-only status information on the Line 1 - Statistics page displays line statistics including
information on bytes, queued bytes, breaks, flow control, parity errors, framing errors, overrun
errors, no Rx buffer errors, CTS input, RTS output, DSR input, and DTR output.

SGX 5150 IoT Device Gateway User Guide 95

9: Administration

TM

See Table 9-24 for the line settings that can be modified on the Line 1 - Configuration page. See

Table 9-25 for the line settings that can be established on the Line 1 - Command Mode page.

Table 9-24 Line Configuration Settings

Line Settings Description

Name Enter a name or short description for the line, if desired. By default, there is no name

specified. A name that contains white space must be quoted.

Interface One interface type is available per line:

 RS232 (available for lines 1 and 2)
 USB-CDC-ACM (available for line 3)

State Select to enable or disable the operational state of the Line. The default is Enabled.
Protocol Set the operational protocol for the Line. The default is Tunnel. Choices are:

 None
 Modbus RTU
 Modbus ASCII
 Tunnel

Note: The Line currently only supports None so can be used in Command Mode, for

CLI. Tunnel, as in serial-networking tunneling protocol, will be supported in a future
software release.

Baud Rate Select the desired baud rate from the drop-down menu.
Parity Select parity from the drop-down menu: None, Even or Odd.
Data Bits Select data bits from the drop-down menu: 7 or 8.
Stop Bits Select 1 or 2 stop bits from the drop-down menu.
Flow Control Select None, Hardware or Software flow control from the drop-down menu.
Gap Timer Set the gap timer delay to set the number of milliseconds to pass from the last

character received before the driver forwards the received serial bytes. By default,
the delay is four character periods at the current baud rate (minimum 1 msec). Gap
timer range is 1 to 5000 milliseconds (default value is 4000 msec).

Threshold Set the number of threshold bytes which need to be received in order for the driver to

forward received characters. Default value is 56 bytes.

Table 9-25 Line Command Mode Setting

Line Command Mode
Settings

Mode Set the Command Mode state of the Line. When in Command Mode, a CLI session

Wait Time Enter the amount of time to wait during boot time for the Serial String. This timer

Description

operates exclusively on the Line. Choices are:

 Always
 Use Serial String
 Disabled

Note: In order to enable Command Mode on the Line, Tunneling on the Line must

be Disabled (both Connect and Accept modes). Also, custom baud rates are not
supported in Command Mode.

starts right after the Signon Message has been sent on the Serial Line and applies
only if mode is “Use Serial String”.

Note: This field becomes available when Use Serial String is selected for Mode.

SGX 5150 IoT Device Gateway User Guide 96

9: Administration

TM

Line Command Mode
Settings (continued)

Serial String Enter the Text or Binary string of bytes that must be read on the Serial Line during

Echo Serial String Select Enable or Disable for Echo Serial String. Applies only if mode is “Use Serial

Signon Message Enter the string of bytes to be sent to the Serial Line during boot time. It may

Description

boot time in order to enable Command Mode. It may contain a time element to
specify a required delay in milliseconds x, formed as {x}. Applies only if mode is
“Use Serial String”. It may contain a binary character(s) of the form [x]. For
example, use decimal [12] or hex [0xc].

Note: This field becomes available when Use Serial String is selected for Mode.

String”. Select enable to echo received characters backed out on the line while
looking for the serial string.

Note: This field becomes available when Use Serial String is selected for Mode.

contain a binary character(s) of the form [x]. For example, use decimal [12] or hex
[0xc]. Click the Submit button after entering the signon message.

Note: The Submit button will only appear if the Mode is not disabled.

To View and Configure Line Configuration and Command Mode

Note: The steps to view and configure Line 1 settings provided in this section are the

same for viewing and configuring Line 2.

Using Web Manager

 To view line 1 statistics, on the Administration page, click Line > Line 1 > Statistics.

 To configure line 1, on the Administration page, click Line > Line 1 > Configuration.

 To configure line 1 command mode on the Administration page, click Line > Line 1 >

Using the CLI

 To enter the Line command level: enable > line <number>

Using XML

 Include in your file: <configgroup name="line" instance=”1”>

MACH10

The SGX 5150 gateway comes integrated with MACH10® cloud platform to allow for the remote
management of devices. To set up the MACH10 client, you need to configure the following
settings:

 MACH10 Client - to connect to the MACH10 cloud platform.

 Line Settings (Line 1, Line 2, or USB 1) - to enable remote management and data access to

Command Mode.

your application or device attached on the serial line.

To Configure MACH10 Client

This page displays the configuration and status for MACH10 client.

SGX 5150 IoT Device Gateway User Guide 97

9: Administration

TM

Table 9-26 MACH10 Client Configuration

MACH10 Client Description

State Click to enable or disable the MACH10 client.

Status Update

Enter the Status Update Interval in minutes.

Interval

Content Check

Enter the Content Check Interval in hours.

Interval

Apply Firmware

Select to enable or disable the automatic setting.

Updates

Apply Configuration
Updates

Select when to Apply Configuration Updates from the drop-down menu:

 Never: signifying no configuration updates will be applied.
 If unchanged: signifying configuration updates will only be applied if no

changes have been made locally.

 Always: signifying configuration updates will always apply.

Reboot After Update Automatically reboot device after firmware or configuration update.

Note: Setting causes automatic reboot after a firmware update.

Table 9-27 MACH10 Client Advanced Configuration

MACH10 Client Description

Host Enter the host name or IP address
Port Enter the MACH10 port
Secure Port Click to enable or disable the MACH10 client secure port 443.
Validate Certificates Click to enable or disable the MACH10 client Validate Certificates.
Local Port Enter the local port for the SMTP protocol. When configured, a total of 16

consecutive ports will be reserved.

MQTT State Enable or Disable MQTT.
MQTT Host Hostname or IP address of MQTT server.
MQTT Port Update the port of MACH10 MQTT server. When configured, a total of 32

consecutive ports will be reserved.

MQTT Security Enable SSL for MQTT.
MQTT Local Port Enter the local port of MACH10 MQTT client. When configured, a total of 32

consecutive ports will be reserved.

Device ID Enter the MACH10 Device ID.
Device Key Enter the MACH10 Device Key.
Device Name Enter the MACH10 Device Name.
Device Description Enter the MACH10 Device Description.
Submit (button) Click the Submit button to enter the settings. The Submit button appears when

new settings are entered.

To Configure MACH10 Line 1 or Line 2

Note: The following section describes the steps to view and configure MACH10 Line 1

settings; these steps also apply to Line 2.

SGX 5150 IoT Device Gateway User Guide 98

9: Administration

TM

This page displays the configuration and status for MACH10 Line client.

Table 9-28 MACH10 Line

MACH10 Line Description

State Click to enable or disable the MACH10 line client.
Project Tag Enter the MACH10 Project Tag name.

Status Update
Interval

Content Check
Interval

Command Deliminiter Enter the Command Delimiter for attached serial devices.

Local Port Enter the local port for the MACH10 client. When configured, a total of 16

Submit (button) Click the Submit button to enter the settings. The Submit button appears when

Enter the Status Update Interval in minutes. The status update interval is the
frequency in which the gateway will contact the MACH10 server.

Enter the Content Check Interval in hours. The content check interval is the
frequency in which the gateway contacts the server for new content.

Note: Send delimiter before command and after response is received.

consecutive ports will be reserved.

new settings are entered.

To Configure MACH10 USB 1

This page displays the configuration and status for MACH10 Line client.

Table 9-29 MACH10 Client USB

MACH10 USB Description

State Click to enable or disable the MACH10 USB client.
Project Tag Enter the MACH10 Project Tag name.

Status Update
Interval

Content Check
Interval

Command Deliminiter Enter the Command Delimiter for attached serial devices.

Local Port Enter the local port for MACH10 client. When configured, a total of 16 consecutive

Enter the Status Update Interval in minutes. The status update interval is the
frequency in which the gateway will contact the MACH10 server.

Enter the Content Check Interval in hours. The content check interval is the
frequency in which the gateway contacts the server for new content.

Note: Send delimiter before command and after response is received.

ports will be reserved.

To Configure MACH10

Using Web Manager

 To configure MACH10 Client, on the Administration page, click MACH10 > Client..

 To configure MACH10 Line 1, on the Administration page, click MACH10 > Line 1.

 To configure MACH10 Line 2, on the Administration page, click MACH10 > Line 2.

 To configure MACH10 USB 1, on the Administration page, click MACH10 > USB 1.

Using the CLI

 To enter the command level: enable > config > mach10

SGX 5150 IoT Device Gateway User Guide 99

TM

Using XML

 Include in your file: <configgroup name="mach10">

Modbus

The SGX 5150 IoT device gateway operates as a master device that connects to slave devices.
The Modbus ASCII/RTU based serial slave devices can be connected via the Ethernet through an
existing Modbus TCP/IP network. Any device having access to a given Modbus implementation
will be able to perform full range of operations that the implementation supports. Modbus/TCP
uses a reserved TCP port of 502 and includes a single byte function code (1=255) preceded by a
6 byte header:

Transaction ID (2 bytes) Identification of request/response transaction - copied by slave
Protocol ID (2 bytes) 0 - Modbus protocol
Length (2 bytes) Number of following bytes includes the unit identifier
Address (1 byte) Identification of remove slave

9: Administration

Table 9-30 Byte Header of Modbus Application Protocol

Serial Transmission Mode

SGX 5150 IoT device gateways can be set up to communicate on standard Modbus networks
using either RTU or ASCII. Users select the desired mode and serial port communication
parameters (baud rate, parity mode, etc) when in the line configuration options.

Table 9-31 Modbus Transmission Modes

RTU ASCII

 Address: 8 bits (0 to 247 decimal, 0 is used for broadcast)
 Function: 8 bits (1 to 255, 0 is not valid)
 Data: N X 8 bits (N=0 to 252 bytes)
 CRC Check: 16 bits

 Address: 2 CHARS
 Function: 2 CHARS
 Data: N CHARS (N=0 to 252 CHARS)
 LRC Check: 2 CHARS

The Modbus web pages allow you to check Modbus status and make configuration changes.

Modbus Statistics

This read-only web page displays the current connection status of the Modbus servers listening on
the TCP ports. When a connection is active, the remote client information is displayed as well as
the number of PDUs that have been sent and received. Additionally, a Kill link will be present
which can be used to kill the connection.

Modbus Configuration

This web page shows the current negotiated Modbus settings and allows configuration changes.

SGX 5150 IoT Device Gateway User Guide 100