Advantech B+B SmartWorx LR77 v2 Instruction sheet

Configuration Manual
for v2 Routers

USED SYMBOLS
Used symbols
Danger – Information regarding user safety or potential damage to the router.
Attention – Problems that can arise in specific situations.
Information, notice – Useful tips or information of special interest.
Firmware version
Current version of firmware is 6.0.1 (September 7, 2016).
GPL licence
Source codes under GPL licence are available free of charge by sending an email to:
[e-mail]
Advantech B+B SmartWorx s.r.o., Sokolska 71, 562 04 Usti nad Orlici, Czech Republic
Manual Rev. 1 released in CZ, September 12, 2016
i

CONTENTS
Contents
1 Access to the Web Conf. 2
1.1 Secured access to web configuration ........................ 3
2 Status 4
2.1 General Status .................................... 4
2.1.1 Mobile Connection .............................. 4
2.1.2 Primary LAN, Secondary LAN, WiFi .................... 5
2.1.3 Peripheral Ports ............................... 5
2.1.4 System Information .............................. 5
2.2 Mobile WAN Status .................................. 6
2.3 WiFi .......................................... 9
2.4 WiFi Scan ....................................... 10
2.5 Network Status .................................... 12
2.6 DHCP Status ..................................... 14
2.7 IPsec Status ..................................... 15
2.8 DynDNS Status .................................... 16
2.9 System Log ...................................... 17
3 Configuration 19
3.1 LAN Configuration .................................. 19
3.2 VRRP Configuration ................................. 25
3.3 Mobile WAN Configuration .............................. 28
3.3.1 Connection to Mobile Network ....................... 28
3.3.2 DNS Address Configuration ......................... 30
3.3.3 Check Connection to Mobile Network Configuration ........... 30
3.3.4 Data Limit Configuration ........................... 31
3.3.5 Switch between SIM Cards Configuration ................. 31
3.3.6 Dial-In access configuration ......................... 34
3.3.7 PPPoE Bridge Mode Configuration ..................... 34
3.4 PPPoE Configuration ................................. 37
3.5 WiFi Configuration .................................. 38
3.6 WLAN Configuration ................................. 44
3.7 Backup Routes .................................... 46
3.8 Firewall Configuration ................................ 49
3.9 NAT Configuration .................................. 53
3.10 OpenVPN Tunnel Configuration ........................... 58
3.11 IPsec Tunnel Configuration ............................. 63
3.12 GRE Tunnels Configuration ............................. 70
3.12.1 Example of the GRE Tunnel Configuration ................. 71
ii

CONTENTS
3.13 L2TP Tunnel Configuration ............................. 73
3.13.1 Example of the L2TP Tunnel Configuration ................ 74
3.14 PPTP Tunnel Configuration ............................. 75
3.14.1 Example of the PPTP Tunnel Configuration ................ 76
3.15 DynDNS Configuration ................................ 77
3.16 NTP Configuration .................................. 78
3.17 SNMP Configuration ................................. 79
3.18 SMTP Configuration ................................. 85
3.19 SMS Configuration .................................. 87
3.19.1 Sending SMS ................................. 90
3.20 Expansion Port Configuration ............................ 96
3.21 USB Port Configuration ............................... 100
3.22 Scripts ......................................... 104
3.22.1 Startup Script ................................. 104
3.22.2 Up/Down Script ................................ 105
3.23 Automatic Update Configuration .......................... 106
4 Customization 109
4.1 User Modules ..................................... 109
5 Administration 111
5.1 Users ......................................... 111
5.2 Change Profile .................................... 112
5.3 Change Password .................................. 113
5.4 Set Real Time Clock ................................. 113
5.5 Set SMS Service Center Address .......................... 114
5.6 Unlock SIM Card ................................... 114
5.7 Send SMS ...................................... 115
5.8 Backup Configuration ................................ 115
5.9 Restore Configuration ................................ 115
5.10 Update Firmware ................................... 116
5.11 Reboot ......................................... 117
6 Configuration over Telnet 118
7 Glossary and Acronyms 120
8 Index 125
9 Recommended Literature 128
iii

LIST OF FIGURES
List of Figures
1 Example of the Web Configuration ......................... 2
2 Mobile WAN status .................................. 8
3 WiFi Status ...................................... 9
4 WiFi Scan ....................................... 11
5 Network Status .................................... 13
6 DHCP Status ..................................... 14
7 IPsec Status ..................................... 15
8 DynDNS Status .................................... 16
9 System Log ...................................... 17
10 Example program syslogd start with the parameter -R .............. 18
11 Example 1 – Network Topology for Dynamic DHCP Server ............ 21
12 Example 1 – LAN Configuration Page ....................... 22
13 Example 2 – Network Topology with both Static and Dynamic DHCP Servers . 23
14 Example 2 – LAN Configuration Page ....................... 23
15 Example 3 – Network Topology ........................... 24
16 Example 3 – LAN Configuration Page ....................... 24
17 Topology of VRRP configuration example ..................... 26
18 Example of VRRP configuration – main router ................... 26
19 Example of VRRP configuration – backup router ................. 27
20 Mobile WAN Configuration .............................. 35
21 Example 1 – Mobile WAN Configuration ...................... 36
22 Example 2 – Mobile WAN Configuration ...................... 36
23 PPPoE configuration ................................. 37
24 WiFi Configuration .................................. 43
25 WLAN Configuration ................................. 45
26 Backup Routes Configuration ............................ 46
27 Firewall Configuration ................................ 51
28 Topology for the Firewall Configuration Example ................. 52
29 Firewall Configuration Example ........................... 52
30 Example 1 – Topology of NAT Configuration .................... 54
31 Example 1 – NAT Configuration ........................... 55
32 Example 2 – Topology of NAT Configuration .................... 56
33 Example 2 – NAT Configuration ........................... 56
34 OpenVPN tunnel configuration ........................... 61
35 Topology of OpenVPN Configuration Example ................... 62
36 IPsec Tunnels Configuration ............................. 68
37 Topology of IPsec Configuration Example ..................... 69
38 GRE Tunnel Configuration .............................. 71
39 Topology of GRE Tunnel Configuration Example ................. 71
40 L2TP Tunnel Configuration ............................. 73
iv

LIST OF FIGURES
41 Topology of L2TP Tunnel Configuration Example ................. 74
42 PPTP Tunnel Configuration ............................. 75
43 Topology of PPTP Tunnel Configuration Example ................. 76
44 DynDNS Configuration Example .......................... 77
45 Example of NTP Configuration ........................... 78
46 OID Basic Structure ................................. 81
47 SNMP Configuration Example ............................ 83
48 MIB Browser Example ................................ 84
49 SMTP Client Configuration Example ........................ 85
50 Example 1 – SMS Configuration .......................... 92
51 Example 2 – SMS Configuration .......................... 93
52 Example 3 – SMS Configuration .......................... 94
53 Example 4 – SMS Configuration .......................... 95
54 Expansion Port Configuration ............................ 98
55 Example of Ethernet to serial communication ................... 99
56 Example of serial port extension .......................... 99
57 USB configuration .................................. 102
58 Example 1 – USB port configuration ........................ 102
59 Example 2 – USB port configuration ........................ 103
60 Example of a Startup Script ............................. 104
61 Example of Up/Down Script ............................. 105
62 Example of Automatic Update 1 ........................... 107
63 Example of Automatic Update 2 ........................... 108
64 User modules ..................................... 109
65 Added user module .................................. 109
66 Users ......................................... 112
67 Change Profile .................................... 112
68 Change Password .................................. 113
69 Set Real Time Clock ................................. 113
70 Set SMS Service Center Address .......................... 114
71 Unlock SIM Card ................................... 114
72 Send SMS ...................................... 115
73 Restore Configuration ................................ 115
74 Update Firmware ................................... 116
75 Reboot ......................................... 117
v

LIST OF TABLES
List of Tables
1 Mobile Connection .................................. 4
2 Peripheral Ports ................................... 5
3 System Information .................................. 5
4 Mobile Network Information ............................. 6
5 Description of Periods ................................ 7
6 Mobile Network Statistics .............................. 7
7 Traffic Statistics .................................... 8
8 Access Point State Information ........................... 9
9 State Information about Connected Clients .................... 9
10 Information about Neighbouring WiFi Networks .................. 10
11 Description of Interfaces in Network Status .................... 12
12 Description of Information in Network Status .................... 13
13 DHCP Status Description .............................. 14
14 Configuration of the Network Interface ....................... 20
15 Configuration of Dynamic DHCP Server ...................... 20
16 Configuration of Static DHCP Server ........................ 21
17 VRRP configuration ................................. 25
18 Check connection .................................. 25
19 Mobile WAN Connection Configuration ....................... 29
20 Check Connection to Mobile Network Configuration ................ 30
21 Data Limit Configuration ............................... 31
22 Switch between SIM cards configuration ...................... 32
23 Parameters for SIM card switching ......................... 33
24 Dial-In access configuration ............................. 34
25 PPPoE configuration ................................. 37
26 WiFi Configuration .................................. 42
27 WLAN Configuration ................................. 44
28 Configuration of DHCP Server ........................... 45
29 Backup Routes Configuration ............................ 47
30 Backup Routes .................................... 47
31 Filtering of Incoming Packets ............................ 49
32 Forwarding filtering .................................. 50
33 NAT Configuration .................................. 53
34 Configuration of send all incoming packets ..................... 53
35 Remote Access Configuration ............................ 54
36 OpenVPN Configuration ............................... 60
37 OpenVPN Configuration Example .......................... 62
38 IPsec Tunnel Configuration ............................. 65
39 Example IPsec configuration ............................ 69
40 GRE Tunnel Configuration .............................. 70
vi

LIST OF TABLES
41 GRE Tunnel Configuration Example ........................ 72
42 L2TP Tunnel Configuration ............................. 73
43 L2TP Tunnel Configuration Example ........................ 74
44 PPTP Tunnel Configuration ............................. 75
45 PPTP Tunnel Configuration Example ........................ 76
46 DynDNS Configuration ................................ 77
47 NTP Configuration .................................. 78
48 SNMP Agent Configuration ............................. 79
49 SNMPv3 Configuration ................................ 79
50 SNMP configuration – MBUS extension ...................... 80
51 SNMP Configuration – R-SeeNet .......................... 80
52 Object identifier for binary input and output .................... 81
53 Object identifier for CNT port ............................ 82
54 Object identifier for M-BUS port ........................... 82
55 SMTP client configuration .............................. 85
56 SMS Configuration .................................. 88
57 Control via SMS ................................... 88
58 Control SMS ..................................... 89
59 Send SMS on the serial Port 1 ........................... 89
60 Send SMS on the serial Port 2 ........................... 89
61 Send SMS on ethernet PORT1 configuration ................... 90
62 List of AT Commands ................................ 91
63 Expansion Port Configuration 1 ........................... 96
64 Expansion Port Configuration 2 ........................... 97
65 CD Signal Description ................................ 97
66 DTR Signal Description ............................... 97
67 USB Port Configuration 1 .............................. 100
68 USB Port Configuration 2 .............................. 101
69 CD Signal description ................................ 101
70 DTR Signal Description ............................... 101
71 Automatic Update Configuration .......................... 106
72 User modules ..................................... 110
73 Users Overview .................................... 111
74 Add User ....................................... 111
75 Telnet commands ................................... 119
1

1. ACCESS TO THE WEB CONF.
1. Access to the Web Configuration
Attention! The cellular router will not operate unless the cellular carrier has been cor-
rectly configured and the account activated and provisioned for data communications.
For UMTS and LTE carriers, a SIM card must be inserted into the router. Do not insert
the SIM card when the router is powered up.
You can monitor the status, configuration and administration of the router via the Web
interface. To access the router over the web interface, enter http://xxx.xxx.xxx.xxx into the
URL for the browser where xxx.xxx.xxx.xxx is the router IP address. The router’s default IP
address is 192.168.1.1. The default username is root and the default password is root.
When you successfully enter login information on the login page, web interface will be
displayed. The left side of the web interface displays the menu. You will find links for the
Status,Configuration,Customization and Administration of the router.
Name and Location displays the router’s name, location and SNMP configuration (see
3.17). These fields are user-defined for each router.
Figure 1: Example of the Web Configuration
2

1. ACCESS TO THE WEB CONF.
For enhanced security, you should change the default password. If the router’s default
password is set, the menu item Change password is highlighted in red.
If the green LED is blinking, you may restore the router to its factory default settings by
pressing RST on front panel. The configuration will be restored to the factory defaults and the
router will reboot. (The green LED will be on during the reboot.)
1.1 Secured access to web configuration
The Web interface can be accessed through a standard web browser via a secure HTTPS
connection.
Access the web interface by entering https://192.168.1.1 in the web browser. You may
receive a message that there is a problem with the website’s security certificate. If you do,
click on Continue to this website. If you want to prevent this message, you can follow the
procedure described below.
There is the self-signed HTTPS certificate in the router. If you want to use your own
certificate (e.g. in combination with the dynamic DNS service), you need to replace the
/etc/certs/https_cert and /etc/certs/https_key files in the router.
HTTPS certificate creation in the router was updated since FW 5.3.5 to be more secure.
Existing HTTPS certificates on already manufactured routers will not be automatically
upgraded with the firmware upgrade! You can upgrade HTTPS certificate by deleting
files /etc/certs/https* in the router (e.g. via SSH). The certificates will be re-created auto-
matically during the next router’s start.
If you decide to use the self-signed certificate in the router to prevent the security message
(domain disagreement) from pop up every time you log into the router, you can take the fol-
lowing steps. Note: You will have to use the domain name based on the MAC address of the
router and it is not guaranteed to work with every combination of an operating system and a
browser.
•Add the DNS record to your DNS system: Edit /etc/hosts (Linux/Unix OS) or
C:\WINDOWS\system32\drivers\etc\hosts (Windows OS) or configure your own DNS
server. Add a new record with the IP address of your router and the domain name
based of the MAC address of the router (MAC address of the first network interface seen
in Network Status in the Web interface of the router.) Use dash separators instead of
colons. Example: A router with the MAC address 00:11:22:33:44:55 will have a domain
name 00-11-22-33-44-55.
•Access the router via the new domain name address (E.g. https://00-11-22-33-44-55).
If you see the security message, add an exception so the next time the message will
not pop up (E.g. in Firefox Web browser). If there is no possibility to add an exception,
export the certificate to the file and import it to your browser or operating system.
3

2. STATUS
2. Status
2.1 General Status
You can access a summary of basic router information and its activities by opening the
General page. This page is the default dialog displayed when you login to the device. Infor-
mation is divided into several sections, based upon the type of router activity or the properties
area: Mobile Connection,Primary LAN,Peripherals Ports and System Information. If your
router is equipped with WIFI expansion port, there is also WIFI section.
2.1.1 Mobile Connection
Item Description
SIM Card Identification of the SIM card (Primary or Secondary)
Interface Defines the interface
Flags Displays network interface flags
IP Address IP address of the interface
MTU Maximum packet size that the equipment is able to transmit
Rx Data Total number of received bytes
Rx Packets Received packets
Rx Errors Erroneous received packets
Rx Dropped Dropped received packets
Rx Overruns Lost received packets because of overload
Tx Data Total number of sent bytes
Tx Packets Sent packets
Tx Errors Erroneous sent packets
Tx Dropped Dropped sent packets
Tx Overruns Lost sent packets because of overload
Uptime Indicates how long the connection to the cellular network has
been established
Table 1: Mobile Connection
4

2. STATUS
2.1.2 Primary LAN, Secondary LAN, WiFi
Items displayed in this part have the same meaning as items in the previous part. More-
over, the MAC Address item shows the MAC address of the corresponding router’s interface
(Primary LAN – eth0, Secondary LAN – eth1, WiFi – wlan0). Visible information depends on
configuration (see 3.1 or 3.5).
2.1.3 Peripheral Ports
Item Description
Expansion Port 1 Expansion port fitted to the position 1 (None indicates that this
position is equipped with no port)
Expansion Port 2 Expansion port fitted to the position 2 (None indicates that this
position is equipped with no port)
Binary Input State of binary input
Binary Output State of binary output
Table 2: Peripheral Ports
2.1.4 System Information
Item Description
Firmware Version Information about the firmware version
Serial Number Serial number of the router (in case of N/A is not available)
Profile Current profile – standard or alternative profiles (profiles are used
for example to switch between different modes of operation)
Supply Voltage Supply voltage of the router
Temperature Temperature in the router
Time Current date and time
Uptime Indicates how long the router is used
Table 3: System Information
5

2. STATUS
2.2 Mobile WAN Status
The XR5i v2 routers do not display the Mobile WAN status option.
The Mobile WAN menu item contains current information about connections to the mobile
network. The first part of this page (Mobile Network Information) displays basic information
about mobile network the router operates in. There is also information about the module,
which is mounted in the router.
Item Description
Registration State of the network registration
Operator Specifies the operator’s network the router operates in
Technology Transmission technology
PLMN Code of operator
Cell Cell the router is connected to
LAC Location Area Code – unique number assigned to each location area
Channel Channel the router communicates on
Signal Strength Signal strength of the selected cell
Signal Quality Signal quality of the selected cell:
•EC/IO for UMTS and CDMA (it’s the ratio of the signal received
from the pilot channel – EC – to the overall level of the spectral
density, ie the sum of the signals of other cells – IO)
•RSRQ for LTE technology (Defined as the ratio N×RSRP
RSSI )
•The value is not available for the EDGE technology
CSQ Cell Signal Quality, relative value is given by RSSI (dBm). 2–9 range
means Marginal, 10–14 range means OK, 15–16 range means Good,
20–30 range means excellent.
Neighbours Signal strength of neighboring hearing cells
Manufacturer Module manufacturer
Model Type of module
Revision Revision of module
IMEI IMEI (International Mobile Equipment Identity) number of module
ESN ESN (Electronic Serial Number) number of module (for CDMA routers)
MEID MEID number of module
ICCID Integrated Circuit Card Identifier is international and unique serial
number of the SIM card.
Table 4: Mobile Network Information
6

2. STATUS
If a neighboring cell is highlighted in red, there is a risk that the router may repeatedly
switch between the neighboring cell and the primary cell. This can affect the performance of
the router. To prevent this, re-orient the antenna or use a directional antenna.
The next section of this window displays historical information about the quality of the cel-
lular WAN connection during each logging period. The router has standard intervals, such as
the previous 24 hours and last week, and also includes information one user-defined interval.
Period Description
Today Today from 0:00 to 23:59
Yesterday Yesterday from 0:00 to 23:59
This week This week from Monday 0:00 to Sunday 23:59
Last week Last week from Monday 0:00 to Sunday 23:59
This period This accounting period
Last period Last accounting period
Table 5: Description of Periods
Item Description
Signal Min Minimal signal strength
Signal Avg Average signal strength
Signal Max Maximal signal strength
Cells Number of switch between cells
Availability Availability of the router via the mobile network (expressed as a percent-
age)
Table 6: Mobile Network Statistics
Tips for Mobile Network Statistics table:
•Availability is expressed as a percentage. It is the ratio of time connection to the mobile
network has been established to the time that router has been is turned on.
•Placing your cursor over the maximum or minimum signal strength will display the last
time the router reached that signal strength.
7

2. STATUS
The middle part of this page displays information about transferred data and the number
of connections for both SIM cards (for each period).
Item Description
RX data Total volume of received data
TX data Total volume of sent data
Connections Number of connection to mobile network establishment
Table 7: Traffic Statistics
The last part (Mobile Network Connection Log) displays information about the mobile net-
work connections and any problems that occurred while establishing them.
Figure 2: Mobile WAN status
8

2. STATUS
2.3 WiFi
This item is available only if the router is equipped with a WiFi module.
Selecting the WiFi item in the main menu of the web interface will display information about
the WiFi access point (AP) and associated stations.
Item Description
hostapd state dump Time the statistical data relates to
num_sta Number of connected stations
num_sta_non_erp Number of connected stations using 802.11b in 802.11g
BSS connection
num_sta_no_short_slot_time Number of stations not supporting the Short Slot Time
num_sta_no_short_preamble Number of stations not supporting the Short Preamble
Table 8: Access Point State Information
Detailed information is displayed for each connected client. Most of them have an internal
character. Here are two examples:
Item Description
STA MAC address of connected device (station)
AID Identifier of connected device (1 – 2007). If 0 is displayed, the station is
not currently connected.
Table 9: State Information about Connected Clients
Figure 3: WiFi Status
9

2. STATUS
2.4 WiFi Scan
This item is available only if the router is equipped with a WiFi module.
Selecting the WiFi Scan item scans for neighboring WiFi networks and displays the re-
sults. Scanning can only be performed if the access point (WiFi AP) is off.
Item Description
BSS MAC address of access point (AP)
TSF A Timing Synchronization Function (TSF) keeps the timers for
all stations in the same Basic Service Set (BSS) synchronized.
All stations shall maintain a local TSF timer.
freq Frequency band of WiFi network [kHz]
beacon interval Period of time synchronization
capability List of access point (AP) properties
signal Signal level of access point (AP)
last seen Last response time of access point (AP)
SSID Identifier of access point (AP)
Supported rates Supported rates of access point (AP)
DS Parameter set The channel on which access point (AP) broadcasts
ERP Extended Rate PHY – information element providing backward
compatibility
Extended supported
rates
Supported rates of access point (AP) that are beyond the scope
of eight rates mentioned in Supported rates item
RSN Robust Secure Network – The protocol for establishing a se-
cure communication through wireless network 802.11
Table 10: Information about Neighbouring WiFi Networks
10

2. STATUS
WiFi Scan output may look like this:
Figure 4: WiFi Scan
11

2. STATUS
2.5 Network Status
To view information about the interfaces and the routing table, open the Network item in
the Status menu. The upper part of the window displays detailed information about the active
interfaces only:
Interface Description
eth0, eth1 Network interfaces (Ethernet connection)
ppp0 Active PPP connection to the mobile network – wireless module is con-
nected via USB interface
wlan0 WiFi interface
tun0 OpenVPN tunnel interface
ipsec0 IPSec tunnel interface
gre1 GRE tunnel interface
usb0 USB interface
Table 11: Description of Interfaces in Network Status
Each of the interfaces displays the following information:
Item Description
HWaddr Hardware (unique) address of networks interface
inet IP address of interface
P-t-P IP address second ends connection
Bcast Broadcast address
Mask Mask of network
MTU Maximum packet size that the equipment is able to transmit
Metric Number of routers, over which packet must go trought
RX •packets – received packets
•errors – number of errors
•dropped – dropped packets
•overruns – incoming packets lost because of overload
•frame – wrong incoming packets because of incorrect packet size
Continued on next page
12

2. STATUS
Continued from previous page
Item Description
TX •packets – transmit packets
•errors – number of errors
•dropped – dropped packets
•overruns – outgoing packets lost because of overload
•carrier – wrong outgoing packets with errors resulting from the
physical layer
collisions Number of collisions on physical layer
txqueuelen Length of front network device
RX bytes Total number of received bytes
TX bytes Total number of transmitted bytes
Table 12: Description of Information in Network Status
You may view the status of the mobile network connection on the network status screen.
If the connection to the mobile network is active, it will appear in the system information as an
usb0 interface. The Route Table is displayed at the bottom.
For the XR5i v2 routers, interface ppp0 indicates the PPPoE connection.
Figure 5: Network Status
13