Alibaba Cloud SAG-100WM User manual

Alibaba Cloud
智能接入网关
Smart Access Gateway
Issue: 20200611

智能接入网关 Smart Access Gateway/ Legal disclaimer
Legal disclaimer
Alibaba Cloud reminds you to carefully read and fully understand the terms and conditions
of this legal disclaimer before you read or use this document. If you have read or used this
document, it shall be deemed as your total acceptance of this legal disclaimer.
1. You shall download and obtain this document from the Alibaba Cloud website or other
Alibaba Cloud-authorized channels, and use this document for your own legal business
activities only. The content of this document is considered confidential information of
Alibaba Cloud. You shall strictly abide by the confidentiality obligations. No part of this
document shall be disclosed or provided to any third party for use without the prior
written consent of Alibaba Cloud.
2. No part of this document shall be excerpted, translated, reproduced, transmitted, or
disseminated by any organization, company, or individual in any form or by any means
without the prior written consent of Alibaba Cloud.
3. The content of this document may be changed due to product version upgrades,
adjustments, or other reasons. Alibaba Cloud reserves the right to modify the content
of this document without notice and the updated versions of this document will be
occasionally released through Alibaba Cloud-authorized channels. You shall pay
attention to the version changes of this document as they occur and download and
obtain the most up-to-date version of this document from Alibaba Cloud-authorized
channels.
4. This document serves only as a reference guide for your use of Alibaba Cloud products
and services. Alibaba Cloud provides the document in the context that Alibaba Cloud
products and services are provided on an "as is", "with all faults" and "as available"
basis. Alibaba Cloud makes every effort to provide relevant operational guidance based
on existing technologies. However, Alibaba Cloud hereby makes a clear statement that it
in no way guarantees the accuracy, integrity, applicability, and reliability of the content
of this document, either explicitly or implicitly. Alibaba Cloud shall not bear any liability
for any errors or financial losses incurred by any organizations, companies, or individual
s arising from their download, use, or trust in this document. Alibaba Cloud shall not,
under any circumstances, bear responsibility for any indirect, consequential, exemplary
, incidental, special, or punitive damages, including lost profits arising from the use or
trust in this document, even if Alibaba Cloud has been notified of the possibility of such
a loss.
Issue: 20200611 I

智能接入网关 Smart Access Gateway/ Legal disclaimer
5. By law, all the contents in Alibaba Cloud documents, including but not limited to
pictures, architecture design, page layout, and text description, are intellectual property
of Alibaba Cloud and/or its affiliates. This intellectual property includes, but is not
limited to, trademark rights, patent rights, copyrights, and trade secrets. No part of
this document shall be used, modified, reproduced, publicly transmitted, changed,
disseminated, distributed, or published without the prior written consent of Alibaba
Cloud and/or its affiliates. The names owned by Alibaba Cloud shall not be used,
published, or reproduced for marketing, advertising, promotion, or other purposes
without the prior written consent of Alibaba Cloud. The names owned by Alibaba Cloud
include, but are not limited to, "Alibaba Cloud", "Aliyun", "HiChina", and other brands
of Alibaba Cloud and/or its affiliates, which appear separately or in combination, as
well as the auxiliary signs and patterns of the preceding brands, or anything similar
to the company names, trade names, trademarks, product or service names, domain
names, patterns, logos, marks, signs, or special descriptions that third parties identify as
Alibaba Cloud and/or its affiliates.
6. Please contact Alibaba Cloud directly if you discover any errors in this document.
II Issue: 20200611

智能接入网关 Smart Access Gateway/ Legal disclaimer
Issue: 20200611 III

智能接入网关 Smart Access Gateway/ Document conventions
Document conventions
Style Description Example
A danger notice indicates a
situation that will cause major
system changes, faults, physical
injuries, and other adverse results.
Danger:
Resetting will result in the loss of
user configuration data.
A warning notice indicates a
situation that may cause major
system changes, faults, physical
injuries, and other adverse results.
Warning:
Restarting will cause business
interruption. About 10 minutes
are required to restart an
instance.
A caution notice indicates warning
information, supplementary
instructions, and other content
that the user must understand.
Notice:
If the weight is set to 0, the server
no longer receives new requests.
A note indicates supplemental
instructions, best practices, tips,
and other content.
Note:
You can use Ctrl + A to select all
files.
> Closing angle brackets are used
to indicate a multi-level menu
cascade.
Click Settings > Network > Set
network type.
Bold Bold formatting is used for buttons
, menus, page names, and other UI
elements.
Click OK.
Courier font Courier font is used for commands. Run the cd /d C:/window
command to enter the Windows
system folder.
Italic Italic formatting is used for
parameters and variables.
bae log list --instanceid
Instance_ID
[] or [a|b] This format is used for an optional
value, where only one item can be
selected.
ipconfig [-all|-t]
Issue: 20200611 I

智能接入网关 Smart Access Gateway/ Document conventions
Style Description Example
{} or {a|b} This format is used for a required
value, where only one item can be
selected.
switch {active|stand}
II Issue: 20200611

智能接入网关 Smart Access Gateway/ Document conventions
Issue: 20200611 III

智能接入网关 Smart Access Gateway/ Contents
Contents
Legal disclaimer......................................................................... I
Document conventions................................................................I
1 Features of Smart Access Gateway devices............................... 1
2 SAG-100WM configurations..................................................... 5
2.1 SAG-100WM overview............................................................................................ 5
2.2 Web configurations for SAG-100WM devices....................................................... 10
3 SAG-1000 usage instructions................................................. 19
3.1 SAG-1000 overview.............................................................................................. 19
3.2 Install an SAG-1000 device..................................................................................22
3.3 Web configurations for SAG-1000 devices........................................................... 26
IV Issue: 20200611

智能接入网关 Smart Access Gateway/ 1 Features of Smart Access
Gateway devices
1 Features of Smart Access Gateway devices
Smart Access Gateway (SAG) provides two types of devices. Supported features of each
type are listed in the following table. "√", "×", and "√*" respectively represent "supported",
"not supported", and "supported only by SAG version 2.0".
Feature Function Description SAG-100WM SAG-1000
Static IP addresses
on ports
Configures static IP
addresses on ports.
√ √
WAN port PPPoE Accesses the Internet
through dial-
up connections
provided by SAG
devices.
√ √*
4G support Accesses the Internet
through 4G networks
.
√
Built-in
Long Term
Evolution (LTE
)
√*
Built-in LTE
LAN ports support
Dynamic Host
Configuration
Protocol (DHCP)
Newly established
private networks
automatically obtain
IP addresses.
√ √*
Wi-Fi support Local devices
connect to Alibaba
Cloud through Wi-Fi
connections.
√ ×
Static routing Existing private
networks connect
to Alibaba Cloud
through static
routing.
√ √
Basic
connectivity
OSPF Supports the Open
Shortest Path First (
OSPF) protocol.
√* √
Issue: 20200611 1

智能接入网关 Smart Access Gateway/ 1 Features of Smart Access
Gateway devices
Feature Function Description SAG-100WM SAG-1000
BGP Supports the Border
Gateway Protocol (
BGP).
√* √
Internet SNAT Allows private
networks to access
the Internet when
SAG devices are
deployed in inline
mode.
√ √*
Cross-region access
to Virtual Private
Cloud (VPC)
Private networks can
access VPC networks
from different
regions.
√ √
Access control lists (
ACLs)
Allows or denies
access to the Internet
or private networks
based on permission
rules.
√ √
Parameter Zero touch provisioni
ng (ZTP)
Supports ZTP in the
deployment of SAG.
√ √*
Inline mode New private
networks connect
to Alibaba Cloud
through SAG
devices. All traffic is
transmitted through
SAG devices.
√ √*Deployment
modes of
SAG devices
One-arm mode Private networks
connect to Alibaba
Cloud through SAG
devices, without
changing the
existing network
topology.
√ √
High
availability (
HA)
Standby network
connections
provided by leased
lines
SAG devices can be
connected to existing
leased lines, which
provide standby
network connections.
√ √
2 Issue: 20200611

智能接入网关 Smart Access Gateway/ 1 Features of Smart Access
Gateway devices
Feature Function Description SAG-100WM SAG-1000
Supports active and
standby networks
: WAN and 4G
networks
An SAG device uses
broadband or 4G
networks to access
the Internet.
√ Available
soon
Active and standby
devices
When an error occurs
to the active device
, network connection
s are switched to the
standby device to
ensure the continuity
of workloads.
√ √
VPN encryption Supports encrypted
VPN connections.
√ √
ACLs Supports access
control lists (ACLs).
√ √
Security
Offline device locking Locks devices that
are offline for a long
time to prevent theft.
√ √
Remote restart Restarts a device
remotely in the
console.
√ √
Remote software
updates
Remotely updates
the software version
in the console.
√ √
Remote logons Logs on to the web
console through
a secure internal
connection.
√ √
Traffic query Queries the usage of
data.
√ √
Operations
and
maintenance
Flow logs Records inbound and
outbound traffic of
SAG devices.
√ √
Monitoring Device monitoring Checks whether
both the active
and standby
IPsec connections
encounter an error.
√ √
Issue: 20200611 3

智能接入网关 Smart Access Gateway/ 1 Features of Smart Access
Gateway devices
Feature Function Description SAG-100WM SAG-1000
Link monitoring Notifications are sent
when an SAG device
is online.
√ √
4 Issue: 20200611

智能接入网关 Smart Access Gateway/ 2 SAG-100WM configurations
2 SAG-100WM configurations
2.1 SAG-100WM overview
The SAG-100WM device is designed to connect small branches and outlets to Alibaba
Cloud. As a plug-and-play device, SAG-100WM does not require Web configuration.
Specifications
Property SAG-100WM Specification
Operating environment Indoor environment (no fan provided)
Operating temperature 0℃–45℃
Storage temperature -40℃–70℃
Power supply 12 V DC
Power consumption 12 W
Two GE/FE RJ45 WAN portsNetwork interface
Three GE/FE RJ45 LAN ports
Wi-Fi IEEE 802.11 b/g/n, 2.4 G 300 Mbps, 20
terminals, 100 m2 coverage
LTE FDD: B1, B3, B5, and B8
LTE TDD: B38, B39, B40, and B41
WCDMA: B1, B5, and B8
TD SCDMA: B34 and B39
GSM: B3 and B8
4G LTE (Mainland China)
CDMA EVDO/1X: 800M
LTE FDD: B1, B3, B5, and B8
WCDMA: B1, B5, and B8
4G LTE (Outside Mainland China)
GSM: B3 and B8
USB USB 2.0, 500 mA
SAG components
The Smart Access Gateway (SAG) device is shipped with the following components:
• An SAG device
Issue: 20200611 5

智能接入网关 Smart Access Gateway/ 2 SAG-100WM configurations
• A power cable
Note:
If any component is missing or damaged, contact Alibaba Cloud after-sales personnel.
Two types of SAG-100WM devices are available.
Type 1 (dimensions: 180 mm × 110 mm × 30 mm)
• Front panel
• Rear panel
Type 2 (dimensions: 275 mm × 175 mm × 44.4 mm)
• Front panel
6 Issue: 20200611

智能接入网关 Smart Access Gateway/ 2 SAG-100WM configurations
• Side panel
• Rear panel
Front panel and rear panel
The front panel and the rear panel of a Type 1 SAG-100WM device are described as follows:
• Front panel: There are five LED indicators on the front panel.
LED indicator Description
LTE Indicates whether the device communication is normal.
- Flashing: Data is being transmitted.
- Off: No card is inserted.
WAN Indicates the Ethernet status of the device.
- On: The device is connected to the Ethernet.
- Flashing: Data is being transmitted.
- Off: The device is not connected to the Ethernet.
Wi-Fi Indicates the Wi-Fi connection status of the device.
- On: The WLAN is enabled.
- Flashing: Data is being transmitted.
- Off: The WLAN is disabled.
Issue: 20200611 7

智能接入网关 Smart Access Gateway/ 2 SAG-100WM configurations
LED indicator Description
RUN Indicates the status of the SAG device.
- On: The device is powered on.
- Flashing: Data is being transmitted.
- Off: The device is powered off.
CLOUD Indicates whether the device is connected to Alibaba Cloud.
- On: The device is connected to the CEN.
- Off: The device is not connected to the CEN.
• Rear panel: There is one RESET button, one SIM slot, one USB port, two WAN ports, three
LAN ports, and a power interface on the rear panel of the SAG device.
- RESET button
To restore the SAG device to its default settings, press and hold the RESET button for
five seconds when the device is powered on.
The default administration IP address of the SAG device is 192.168.0.1.
- SIM card slot
A SIM card is inserted into the slot. Only Mini-SIM cards, Micro-SIM cards, and Nano
-SIM cards are supported. If you use a Micro-SIM or Nano-SIM card, we recommend
8 Issue: 20200611

智能接入网关 Smart Access Gateway/ 2 SAG-100WM configurations
that you use a card frame rather than a card sleeve. Otherwise, it may be difficult to
pull out the card.
The SAG device is equipped with a SIM card frame that matches Mini-SIM, Micro-SIM,
and Nano-SIM cards. You can use the card frame if you want to change the SIM card.
Mini-SIM cards, Micro-SIM cards, and Nano-SIM cards are also called 2FF cards, 3FF
cards, and 4FF cards respectively.
- USB interface
Access to the Internet by using the 4G USB interface is not supported.
- WAN ports
The WAN ports are used to access the Internet. These ports support SNAT forwarding,
dynamic IP addresses, static IP addresses, and PPPoE.
- LAN ports
The LAN ports are used to connect local clients and can be connected to the switch by
configuring routes.
- DC power interface
The power interface is on the rightmost of the panel. The power supply must be 12 V
DC.
Note:
We recommend that you use the original power cable.
Networking mode
The SAG-100WM device connects local clients to Alibaba Cloud through inline mode, which
means that the network topology is unchanged.
Issue: 20200611 9

智能接入网关 Smart Access Gateway/ 2 SAG-100WM configurations
2.2 Web configurations for SAG-100WM devices
This topic describes the steps that you must follow to complete Web configurations for
SAG-100WM devices. Before you access Alibaba Cloud through Smart Access Gateway (SAG)
devices, you must complete Web configurations for the SAG devices.
Step 1: Configure the local client
Before performing the Web configuration for the SAG-100WM device, you must enable
DHCP on local clients so that the clients can connect to the device.
10 Issue: 20200611

智能接入网关 Smart Access Gateway/ 2 SAG-100WM configurations
• Windows client configuration
1. In the lower-right corner, right-click the network connection icon and then click Open
Network and Sharing Center.
2. In the left-side panel, click Change Adapter Settings.
3. Right-click the connected network, and then click Properties.
4. Double-click Internet Protocol Version 4 (TCP/IPv4).
5. Select Obtain an IP Address Automatically and Obtain DNS Server Address
Automatically.
6. Click OK.
• Mac client configuration
1. On the desktop, click the System Preferences icon, and then click Network in the
Internet and Network section.
2. Click the connected network and then click Advanced.
3. On the Ethernet configuration page, click the TCP/IP tab.
4. From the Configure IPv4 drop-down list, select Using DHCP.
Step 2: Set the password upon your first logon
After you power on the SAG device for the first time, you must go to the Web console to set
the logon password.
Before you log on to the Web console, make sure that:
• The SAG device is powered on.
• A LAN port of the SAG device is connected to the local client.
• The local client has DNS enabled to automatically obtain an IP address.
1. Open the browser on the connected local PC and enter 192.168.0.1 in the address bar.
192.168.0.1 is the default Web configuration address of the SAG device.
Note:
• If the LAN port uses a static IP address that you configured, log on by using that IP
address.
• If the LAN port uses a dynamic IP address (that is, you have configured CIDR blocks
in the console, the WAN port has DHCP enabled, and the CLOUD status indicator light
Issue: 20200611 11

智能接入网关 Smart Access Gateway/ 2 SAG-100WM configurations
turns on when the network cable is connected), log on by using the first IP address in
the first CIDR block configured in the console.
For example, if the first CIDR block you specified is 192.168.0.0/16, the Web
configuration address is 192.168.0.1.
• If neither the LAN port nor the console is configured, the default address is 192.168.0
.1.
2. Set the logon password.
3. Click OK, enter the new password, and log on to the Web console.
Keep your logon password securely. If you forget your password, press and hold the
RESET button on your device for two seconds and then log on to the Web console to reset
the password.
Notice:
• To clear all configurations of the SAG device, power the device on and press and hold
the RESET button for five seconds until the CLOUD indicator light starts to flicker.
• To restore the SAG device to its default configurations, power off the device, and
then press and hold the RESET button while powering the device back on. When the
CLOUD indicator light is on, which means the device is restoring, release the RESET
button.
After two to three minutes, the CLOUD indicator light goes off, which means the
default configurations are restored.
Step 3: Configure the WAN ports
The WAN ports of the Smart Access Gateway (SAG) device are used for configuring Internet
access and support dynamic IP addresses, static IP addresses, and PPPoE connections.
1. Log on to the Web configuration page of the SAG device.
2. Enter the logon password and click OK.
3. Click WAN Port Management. On the WAN Port Management page, configure the WAN
ports.
12 Issue: 20200611