Copyright (C) 2020 PLANET Technology Corp. All rights reserved.
The products and programs described in this User’s Manual are licensed products of PLANET
Technology, This User’s Manual contains proprietary information protected by copyright, and this
User’s Manual and all accompanying hardware, software, and documentation are copyrighted.
No part of this User’s Manual may be copied, photocopied, reproduced, translated, or reduced to any
electronic medium or machine-readable form by any means, electronic or mechanical including
photocopying, recording, or information storage and retrieval systems, for any purpose other than the
purchaser's personal use, and without the prior express written permission of PLANET Technology.
Disclaimer
PLANET Technology does not warrant that the hardware will work properly in all environments and
applications, and makes no warranty and representation, either implied or expressed, with respect to
the quality, performance, merchantability, or fitness for a particular purpose.
PLANET has made every effort to ensure that this User’s Manual is accurate; PLANET disclaims
liability for any inaccuracies or omissions that may have occurred. Information in this User’s Manual is
subject to change without notice and does not represent a commitment on the part of PLANET.
PLANET assumes no responsibility for any inaccuracies that may be contained in this User’s Manual.
PLANET makes no commitment to update or keep current the information in this User’s Manual, and
reserves the right to make improvements and/or changes to this User’s Manual at any time without
notice.
If you find information in this manual that is incorrect, misleading, or incomplete, we would appreciate
your comments and suggestions.
FCC Compliance Statement
This Equipment has been tested and found to comply with the limits for a Class A digital device,
pursuant to Part 15 of the FCC rules. These limits are designed to provide reasonable protection
against harmful interference in a residential installation. This equipment can radiate radio frequency
energy and, if not installed and used in accordance with the instructions, may cause harmful
interference to radio communications.
However, there is no guarantee that interference will not occur in a particular installation. If this
equipment does cause harmful interference to radio or television reception, which can be determined
by turning the equipment off and on, the user is encouraged to try to correct the interference by one or
more of the following measures:
– Reorient or relocate the receiving antenna.
– Increase the separation between the equipment and receiver.
– Connect the equipment into an outlet on a circuit different from that to which the receiver is
connected.
– Consult the dealer or an experienced radio/TV technician for help.
CE mark Warning
The is a class A device, In a domestic environment, this product may cause radio
interference, in which case the user may be required to take adequate measures.
WEEE
To avoid the potential effects on the environment and human health as a result of the
presence of hazardous substances in electrical and electronic equipment, end users of
electrical and electronic equipment should understand the meaning of the crossed-out
wheeled bin symbol. Do not dispose of WEEE as unsorted municipal waste and have to collect such
WEEE separately.
Trademarks
The PLANET logo is a trademark of PLANET Technology. This documentation may refer to numerous
hardware and software products by their trade names. In most, if not all cases, these designations are
claimed as trademarks or registered trademarks by their respective companies.
Revision
User’s Manual of PLANET Industrial 5-Port 10/100/1000T VPN Security Gateway
Model: IVR-100
Rev.: 1.0 (December, 2020)
Part No. EM-IVR-100_v1.0
VPN Gateway x 1
Quick Installation Guide x 1
Wall-mount Kit x 1
Dust Cap x 5
If any of the above items are missing, please contact your dealer immediately.
IVR-100
1.2 Overview
Powerful Industrial VPN Security Solution
The innovation of the Internet has created tremendous worldwide opportunities for e-business and
information sharing. It has become essential for businesses to focus more on network security issues.
The demand for information security has become the primary concern for the enterprises. To fulfill this
demand, PLANET has launched the IVR-100 Industrial VPN Security Gateway, an all-in-one appliance
that carries several main categories across your industrial network security deployments: Cyber
security, SPI firewall security protection, policy auditing (Content Filtering, VPN Tunnel an d V LA N ) , and
easy management (Setup Wizard, QoS and Dashboard). Furthermore, its Dual-WAN Failover and
Outbound Load Balancing features can improve the network efficiency while the web-based interface
provides friendly and consistent user experience. For the harsh environment, the IVR-100 can not onl y
operate stably under temperature range from -40 to 75 degrees C, but also is equipped with a compact
IP30 metal case that allows either DIN-rail or wall mounting for efficient use of cabinet space.
The IVR-100 built-in SPI (stateful packet inspection) firewall and anti DoS/DDoS attack functions
provide high efficiency and extensive protection for your network. Virtual server and DMZ functions can
let you set up servers in the Intranet and still provide services to the Internet users.
Ideal VPN Security Gateway Solution for SMBs
The IVR-100 provides complete data security and privacy for accessing and exchanging most sensitive
data, built-in IPSec VPN function with DES/3DES/AES encryption and
MD5/SHA-1/SHA-256/SHA-384/SHA-512 authentication, and GRE, SSL, PPTP and L2TP server
mechanism. The full VPN capability in the IVR-100 makes the connection solidly secure, more flexible,
and more capable.
The IVR-100 supports many popular security features including Content Filtering to block specific URL,
MAC/IP filtering, outbound load balancing and more. Furthermore, it provides higher performance with
all Gigabit Ethernet interfaces which offer faster speeds for your network applications. The Gigabit
user-defined interfaces flexibly fulfill the network requirements, and the dual-WAN interfaces enable the
IVR-100 to support outbound load balancing and WAN fail-over features.
Cybersecurity Network Solution to Minimize Security Risks
The cybersecurity feature included to protect the switch management in a mission-critical network
virtually needs no effort and cost to install. For efficient management, the IVR-100 is equipped with
HTTPS web and SNMP management interfaces. With the built-i n web-based management interface,
the IVR-100 offers an easy-to-use, platform independent management and configuration facility. As the
IVR-100 supports SNMP, it can be managed via any management software based on the standard
SNMP protocol.
Improving Network Efficiency
The IVR-100 has link redundancy, content filtering and many more functions to make the entire network
system perform better. It is applicable to the small-scale sector (from 10 to 50 people), using a compact
industrial design, with five Gigabit ports (WAN/LAN). The IVR-100’s economical price with complete
cable management features make it an inevitable choice for the next-generation office network load
balancer.
The IVR-100’s built-in content filtering feature can automatically resolve the IP address corresponding
to all. Users’ network can be easily managed by just typing the URL of the websites like Facebook,
YouTube and Yahoo.
The IVR-100 can connect dual WANs with up to two different ISPs. It creates a stable and qualified
VPN connection for many important applications such as VoIP, video conferencing and data
transmission.
To facilitate transportation and industrial-level applications, the IVR-100 provides an integrated power
solution with a wide range of voltages (9~48V DC) for worldwide operability. It also provides
dual-redundant, reversible polarity 9~48V DC power supply inputs for high availability applications.
Stable Operating Performance under Difficult Environments
Today, the VPN demand expands from commercial applications to many critical networks in the harsh
environment. The IVR-100 will be one of the ideal solutions that provide a high level of immunity
against electromagnetic interference and heavy electrical surges typical of environments found on plant
floors or in curb-side traffic control cabinets. The IVR-100 can operate stably under temperature range
from -40 to 75 degrees C which enables the users to conveniently apply the device in almost any
location of the network. The IVR-100 is also equ ip ped with a compact IP30 standard metal case that
allows either DIN-rail or wall mounting for efficient use of cabinet space.
PLANET IVR-100 can work as a VPN security gateway in an industria l application f or a company that
has a factory and many different divisions. With IPSec/GRE/PPTP/L2TP/SSL VPN solutions, the
IVR-100 provides secured data communication for branches, vendors, and mobile workers with a
flexible way to connect back to the headquarters.
The IVR-100 connects dual WANs with up to two different ISPs. It creates a stable and qualified VPN
connection for many important applications such as VoIP, video conferencing and data transmission.
5 10/100/1000BASE-T RJ45 ports
1 undefined Ethernet port (LAN/WAN)
Dual-WAN function
1 USB 3.0 port for system configuration backup and firmware upgrade
Reset button
Industrial Case and Installation
IP30 metal case
Solid DIN-rail, wal l-mount or side wall-mount design
Supports 6KV DC Ethern et ESD protec t io n
IVR-100
Fault alarm for power input failure
DC redundant power with reverse polarity protection
-40 to 75 degrees C operating temperature
Static IP/DHCP client for WAN
Protocols: TCP/IP, UDP, ARP, IPv4, IPv6
Port forwarding
QoS
DMZ
VLAN
IGMP Proxy
SNMP(v1/v2C/v3)
DHCP server/NTP client
MAC address clone
DDNS: PLANET DDNS, PLANET Easy DDNS, DynDNS and No-IP
Cybersecurity
Others
IVR-100
Setup wizard
Dashboard for real-time system overview
Supported access by HTTP or HTTPS
Auto reboot
Configuration backup and restoration via remote/USB port
Firmware upgrade via remote/USB port
Event message logging to remote syslog server
PLANET Smart Discovery utility/UNI-NMS supported
USB 3.0 port for system configuration backup
and restoration.
Lights up when the power is on.
has failed.
“Steady on” to indicate the port is
connected to other network device
successfully.
the port.
“Steady on” to indicate that the
port is successfully connecting to
the network at 1000Mbps.
“Off” to indicate that the port is
successfully connecting to the
network at 10Mbps or 100Mbps.
Power on the device and press the reset
Reset Button
Gigabit Port 1-3 It is a LAN port for connecting to a switch.
Gigabit Port 4
Gigabit Port 5
- 17 -
button for less than 5 seconds to reboot it or
over 5 seconds to restore it to factory default
settings.
Default is LAN port. It can be defined as LAN
port or WAN port.
It is a WAN port for connecting to a perimeter
gateway.
The upper panel of the Industrial Gateway consists of one terminal block connector within two DC
power inputs.
2.1.3 Wiring the Power Inputs
The 6-contact terminal block connector on the top panel of Industrial Gateway is used for two DC
redundant power inputs . Pl ease follow the steps below to insert the power wire.
1. Insert positive and negative DC power wires into contacts 1 and 2 for POWER 1, or 5 and 6 for
To avoid damage, please use the Industrial Gateway under its
specification.
2. Tighten the wire-clamp screws for preventing the wires from loosening.
1 2 3 4 5 6
Power 1 Fault Power 2
IVR-100
+ - + -
The wire gauge for the terminal block should be in the range from 12 to 24 AWG.
2.1.4 Wiring the Fault Alarm Contact
The fault alarm contacts are in the middle of the terminal block connector as the picture shows below.
Inserting the wires, the Industrial Gateway will detect the fault status of the power failure and then forms
an open circuit. The following illustration shows an application example for wiring the fault alarm
contacts.
This section describes how to install the Industrial Gateway. There are three methods to install the
Industrial Gateway -- DIN-rail mounting, wall mounting and side wall mounting. Basic knowledge of
networking is assumed.
Please read the following sections and perform the procedures in the order being presented.
(The device shown on this chapter is just a representation of the said device.)
2.2.1 DIN-rail Mounting
Step 1: Lightly slide the DIN-rail into the track.
Step 2: Check whether the DIN-rail is tightly on the track.
A. Connect one end of a standard network cable to the LAN port (port 1) of the device.
B. Connect the other end of the cable to the hub / switch.
The UTP Category 5, 5e or 6 network cabling with RJ45 tips is recommended.
Step 4: Connect your device to internet.
A. Connect one end of a standard network cable to the WAN port (port 5) of the device.
B. Connect the other end of the cable to the LAN port of ISP network device (such as a modem).
If there is only one line connected to the outer network in your network environment, it is
suggested that you use WAN port (port 5).
Step 5: Power on the device. When the device receives power, the Power LED should remain solid
Green.
2.2.2 Wall Mount Plate Mounting
To install the Industrial Gateway on the wall, please follow the instructions below.
Step 1: Remove the DIN-rail from the Industrial Gateway. Use the screwdriver to loosen the screws to
remove the DIN-rail.
Step 2: Place the wall-mount plate on the rear panel and use the screwdriver to screw the wall mount
Step 3: Use the hook holes at the corners of the wall mount plate to hang the Industrial Gateway on the
wall.
Step 4: To remove the wall mount plate, reverse the steps above.
Step 5: Proceed with Steps 3, 4 and 5 in Secti on 2.2.1 DIN-rail Mounting to connect the network
To install the Industrial Gateway on the wall, please follow the instructions below.
Step 1: Remove the DIN-rail from the Industrial Gateway. Use the screwdriver to loosen the screws to
remove the DIN-rail.
Step 2: Place the wall-mount plate on the side panel and use the screwdriver to screw the wall mount
plate tightly on the Industrial Gateway.
Step 3: Use the hook holes at the corners of the wall mount plate to hang the Industrial Gateway on the
wall.
Step 4: To remove the wall mount plate, reverse the steps above.
Step 5: Proceed with Steps 3, 4 and 5 in Section 2.2.1 DIN-rail Mounting to connect the network
Before getting into the device’s web UI, user has to check the network setting and configure PC’s IP
address.
3.1 Requirements
User is able to confirm the following items before configuration:
1. Please confirm the network is working properly; it is strongly suggested to test your network
connection by connecting your computer directly to ISP.
2. Suggested operating systems: Windows 7 / 8 / 10.
3. Recommended web browsers: IE / Firefox / Chrome.
3.2 Setting TCP/IP on your PC
The default IP address of the VPN Gateway is 192.168.1.1, and the DHCP Server is on. Please set the
IP address of the connected PC as DHCP client, and the PC will get IP address automatically from the
VPN Gateway.
Please refer to the following to set the IP address of the conn ect ed PC.
3.2.1 Wind ows 7/8
If you are using Windows 7/8, please refer to the following:
1. Click on the network icon from the right side of the taskbar and th en click on “Open Net work and