Amit M2M IDG500-0T012 User manual

M2M Cellular Gateway
IDG500-0T012 (LTE cat. 4)
User Manual

M2M Cellular Gateway
Chapter 1 Introduction ...................................................................................................................................6
1.1 Introduction.....................................................................................................................................6
1.2 Contents List ...................................................................................................................................7
1.2.1 Package Contents...................................................................................................................7
1.3 Hardware Configuration ..................................................................................................................8
1.4 LED Indication ................................................................................................................................9
1.5 Installation & Maintenance Notice ................................................................................................. 10
1.5.1 SYSTEM REQUIREMENTS.............................................................................................. 10
1.5.2 WARNING ......................................................................................................................... 10
1.5.3 HOT SURFACE CAUTION.................................................................................................11
1.5.4 Product Information for CE RED Requirements ................................................................... 12
1.6 Hardware Installation..................................................................................................................... 14
1.6.1 Mount the Unit.................................................................................................................... 14
1.6.2 Insert the SIM Card............................................................................................................. 14
1.6.3 Install the External Antenna................................................................................................. 15
1.6.4 Connecting Power ............................................................................................................... 16
1.6.5 Connecting to the Network or a Host.................................................................................... 16
1.6.6 Setup by Configuring WEB UI ........................................................................................... 17
Chapter 2 Basic Network .............................................................................................................................18
2.1 WAN & Uplink.............................................................................................................................. 18
2.1.1 Physical Interface................................................................................................................ 19
2.1.2 Internet Setup...................................................................................................................... 24
2.2 LAN & VLAN .............................................................................................................................. 47
2.2.1 Ethernet LAN....................................................................................................................... 47
2.2.2 VLAN................................................................................................................................. 50
2.2.3 DHCP Server ...................................................................................................................... 61
2.3 WiFi.............................................................................................................................................. 69
2.3.1 WiFi Configuration ............................................................................................................. 70
2.3.2 Wireless Client List ............................................................................................................. 84
2.3.3 Advanced Configuration...................................................................................................... 86
2.3.4 Uplink Profile ..................................................................................................................... 88
2.4 IPv6 .............................................................................................................................................. 93
2

M2M Cellular Gateway
2.4.1 IPv6 Configuration.............................................................................................................. 93
2.5 Port Forwarding...........................................................................................................................102
2.5.1 Configuration.....................................................................................................................103
2.5.2 Virtual Server & Virtual Computer......................................................................................104
2.5.3 DMZ & Pass Through ........................................................................................................110
2.6 Routing........................................................................................................................................113
2.6.1 Static Routing ....................................................................................................................114
2.6.2 Dynamic Routing...............................................................................................................117
2.6.3 Routing Information...........................................................................................................122
2.7 DNS & DDNS.............................................................................................................................123
2.7.1 DNS & DDNS Configuration .............................................................................................123
Chapter 3 Object Definition .......................................................................................................................127
3.1 Scheduling ...................................................................................................................................127
3.1.1 Scheduling Configuration...................................................................................................127
3.2 User (not supported) .....................................................................................................................129
3.3 Grouping (not supported)..............................................................................................................130
3.4 External Server.............................................................................................................................131
3.5 Certificate ....................................................................................................................................134
3.5.1 Configuration (not supported).............................................................................................134
3.5.2 My Certificate....................................................................................................................135
3.5.3 Trusted Certificate..............................................................................................................142
Chapter 4 Field Communication (not supported).........................................................................................148
Chapter 5 Security .....................................................................................................................................149
5.1 VPN.............................................................................................................................................149
5.1.1 IPSec.................................................................................................................................150
5.1.2 OpenVPN..........................................................................................................................163
5.1.3 L2TP .................................................................................................................................171
5.1.4 PPTP .................................................................................................................................177
5.1.5 GRE ..................................................................................................................................181
5.2 Firewall........................................................................................................................................185
5.2.1 Packet Filter.......................................................................................................................185
5.2.2 URL Blocking....................................................................................................................190
3

M2M Cellular Gateway
5.2.3 MAC Control.....................................................................................................................194
5.2.4 Content Filter (not supported).............................................................................................197
5.2.5 Application Filter (not supported) .......................................................................................198
5.2.6 IPS.....................................................................................................................................199
5.2.7 Options..............................................................................................................................203
Chapter 6 Administration ...........................................................................................................................207
6.1 Configure & Manage ....................................................................................................................207
6.1.1 Command Script ................................................................................................................208
6.1.2 TR-069..............................................................................................................................212
6.1.3 SNMP................................................................................................................................217
6.1.4 Telnet & SSH.....................................................................................................................228
6.2 System Operation .........................................................................................................................232
6.2.1 Password & MMI...............................................................................................................232
6.2.2 System Information ............................................................................................................235
6.2.3 System Time ......................................................................................................................236
6.2.4 System Log........................................................................................................................238
6.2.5 Backup & Restore ..............................................................................................................242
6.2.6 Reboot & Reset.................................................................................................................243
6.3 FTP (not supported)......................................................................................................................244
6.4 Diagnostic....................................................................................................................................245
6.4.1 Diagnostic Tools.................................................................................................................245
6.4.2 Packet Analyzer .................................................................................................................246
Chapter 7 Service.......................................................................................................................................249
7.1 Cellular Toolkit.............................................................................................................................249
7.1.1 Data Usage.........................................................................................................................250
7.1.2 SMS ..................................................................................................................................253
7.1.3 SIM PIN............................................................................................................................256
7.1.4 USSD................................................................................................................................260
7.1.5 Network Scan.....................................................................................................................263
7.2 Event Handling.............................................................................................................................265
7.2.1 Configuration.....................................................................................................................266
7.2.2 Managing Events................................................................................................................269
4

M2M Cellular Gateway
7.2.3 Notifying Events ................................................................................................................271
Chapter 8 Status.........................................................................................................................................273
8.1 Dashboard (not supported)............................................................................................................273
8.2 Basic Network..............................................................................................................................274
8.2.1 WAN & Uplink Status........................................................................................................274
8.2.2 LAN & VLAN Status.........................................................................................................278
8.2.3 WiFi Status ........................................................................................................................279
8.2.4 DDNS Status......................................................................................................................282
8.3 Security........................................................................................................................................283
8.3.1 VPN Status ........................................................................................................................283
8.3.2 Firewall Status ...................................................................................................................287
8.4 Administration..............................................................................................................................291
8.4.1 Configure & Manage Status................................................................................................291
8.5 Statistics & Report........................................................................................................................293
8.5.1 Connection Session ............................................................................................................293
8.5.2 Network Traffic (not supported)..........................................................................................294
8.5.3 Device Administration........................................................................................................295
8.5.4 Cellular Usage....................................................................................................................296
Appendix A GPL WRITTEN OFFER.........................................................................................................297
5

M2M Cellular Gateway
Chapter 1 Introduction
1.1 Introduction
Congratulations on your purchase of this outstanding product: M2M Cellular Gateway. For M2M (Machine-to-
Machine) applications, AMIT M2M Cellular Gateway is absolutely the right choice. With built-in world-class
3G/4G module, you just need to insert SIM card from local mobile carrier to get to Internet. By VPN tunneling
technology, remote sites easily become a part of Intranet, and all data are transmitted in a secure (256-bit AES
encryption) link.
Main Features:
•Compact design: Built-in LTE and configurable Ethernet WAN/LAN can provide Ethernet machine easy
connection to internet/intranet by LTE or high reliable fail-over wired/LTE connection.
•Dual SIM: Embedded 3G/4G with configurable dual-SIM achieve location free multi-ISP fail-over
requirement.
•Versatile Cellular: Preferred service selection can simplify uplink setting; toolkit function of data usage
can control budget; configurable SMS command is useful and efficient for remote administration.
•Complete Network: Built-in NAT/Port Forward/Routing/IPv6 are compatible to existing IP network.
•Highly Security: Various VPN protocol & scenario can setup secure intranet; built-in Firewall prevents
malicious attacks; ACL & Authentication by MAC /User enhances secure access.
•Flexible Administration: Web UI is used for basic setting; programmable CLI and Command Script are
used for advanced configuration; system can be managed by NMS based on TR-069.
•Smart Event Handing: Mechanism to manage action for pre-defined events by administrator. Events
can be triggered or notified based on System/Interface status change, SMS, SNMP trap, or e-mail.
Before you install and use this product, please read this manual in detail for fully exploiting the functions of
this product.
6

M2M Cellular Gateway
1.2 Contents List
1.2.1 Package Contents
#Standard Package
Items
Description
Contents
Quantity
1 IDG500-0T012
M2M Cellular Gateway
1pcs
2 Cellular Antenna 2pcs
3 WiFi Antenna 1pcs
4
Power Adapter
(DC 5V/2A)
(*1)
1pcs
5 DIN-Rail Bracket 1 set (2pcs)
6 RJ45 Cable 1pcs
7 Rubber Feet 4pcs
8 CD
(Manual)
1pcs
1 The maximum power consumption of IDG500 series product is 7.0W. 7

M2M Cellular Gateway
1.3 Hardware Configuration
Left View
Right View
※Reset Button
The RESET button provides user with a quick and easy way to resort the default setting. Press the RESET button
continuously for 6 seconds, and then release it. The device will restore to factory default settings.
DC Power
Receptacle
LAN2
LAN1/
WAN
3G/4G
Antenna
WiFi Antenna
(2.4GHz)
3G/4G
Antenna
SIM-A
SIM-B
Reset Button
MicroSD
8

M2M Cellular Gateway
1.4 LED Indication
Indication
LED
Color
Description
Signal
LTE/3G
Blue
Purple
Red
When the LED color is shown in:
•Blue: Cellular module is in LTE Mode.
•Purple: Cellular module is in HSPA/3G Mode.
•Red: Cellular module is in GSM/2G Mode.
When the behavior of LED is:
•Fast Flash (per 0.5 second): Signal Strength is 0~30%
•Flash (Slow, per second): Signal Strength is 31~60%
•Steady On: Signal Strength is 61~100%
WiFi Blue
Off: WiFi Radio is disabled.
On: WiFi Radio is enabled.
Flash: Data Packet transferred via WiFi.
Status Blue
Flash (per second): The gateway works normally.
Flash (Fast): The gateway is in Recovery Mode or abnormal situation.
Note: If you encountered the abnormal situation, even power OFF / ON the device, there might be
something wrong during the device boot up session and it was damaged. You need to call for RMA
service to recover it.
LAN/WAN Green
Off: Host disconnected.
On: Ethernet connection established.
Flash: Data packet transferred via Ethernet.
9

M2M Cellular Gateway
1.5 Installation & Maintenance Notice
1.5.1 SYSTEM REQUIREMENTS
Network Requirements
•
A fast Ethernet RJ45 cable
•3G/4G cellular service subscription
•IEEE 802.11b/g/n/ac wireless client
• 10/100 Ethernet adapter on PC
Web-based Configuration Utility
Requirements
Computer with the following:
•Windows®, Macintosh, or Linux-based operating
system
•An installed Ethernet adapter
Browser Requirements:
•Internet Explorer 6.0 or higher
•Chrome 2.0 or higher
•Firefox 3.0 or higher
•Safari 3.0 or higher
1.5.2 WARNING
Only use the power adapter that comes with the
package. Using a different voltage rating power
adaptor is dangerous and may damage the product.
Do not open or repair the case yourself. If the
product is too hot, turn off the power immediately
and have it repaired at a qualified service center.
Place the product on a stable surface and avoid
using this product and all accessories outdoors.
Attention
10

M2M Cellular Gateway
1.5.3 HOT SURFACE CAUTION
CAUTION: The surface temperature for the metallic enclosure can be very high!
Especially after operating for a long time, installed at a closed cabinet
without air conditioning support, or in a high ambient temperature
space.
DO NOT touch the hot surface with your fingers while servicing!!
11

M2M Cellular Gateway
1.5.4 Product Information for CE RED Requirements
The following product information is required to be presented in product User Manual for latest CE RED
requirements. 2
(1) Frequency Band & Maximum Power
1.a Frequency Band for Cellular Connection (for ME3630 E1C version) 3
Band number
Operating Frequency
Max output power
LTE FDD BAND 1
Uplink: 1920-1980 MHz
Downlink: 2110-2170 MHz
23 ±2.7 dBm
LTE FDD BAND 3
Uplink: 1710-1785 MHz
Downlink: 1805-1880 MHz
LTE FDD BAND 7
Uplink: 2500-2570 MHz
Downlink: 2620-2690 MHz
LTE FDD BAND 8
Uplink: 880-915 MHz
Downlink: 925-960 MHz
LTE FDD BAND 20
Uplink: 832-862 MHz
Downlink: 791-821 MHz
WCDMA BAND 1
Uplink: 1920-1980 MHz
Downlink: 2110-2170 MHz 24 +1/-3 dBm
WCDMA BAND 8
Uplink: 880-915 MHz
Downlink: 925-960 MHz
E-GSM
Uplink: 880-915 MHz
Downlink: 925-960 MHz 33 ±2 dBm
DCS
Uplink: 1710-1785 MHz
Downlink: 1805-1880 MHz 30 ±2 dBm
1.b Frequency Band for Cellular Connection (for EC25-E version)
Band number
Operating Frequency
Max output power
LTE FDD BAND 1
Uplink: 1920-1980 MHz
Downlink: 2110-2170 MHz 23.1 dBm
LTE FDD BAND 3
Uplink: 1710-1785 MHz
Downlink: 1805-1880 MHz 23.0 dBm
LTE FDD BAND 7
Uplink: 2500-2570 MHz
Downlink: 2620-2690 MHz 22.8 dBm
LTE FDD BAND 8
Uplink: 880-915 MHz
Downlink: 925-960 MHz 23.2 dBm
LTE FDD BAND 20
Uplink: 832-862 MHz
23.5 dBm
2 The information presented in this section is ONLY valid for the EU/EFTA regional version. For those non-CE/EFTA versions, please
refer to the corresponding product specification.
3 There can be different cellular module intrgrated in the device for EU/EFTA regional version. Refer to the cellular module identifier
printed on the device label for the purchased device.
12

M2M Cellular Gateway
Downlink: 791-821 MHz
LTE FDD BAND 38
Uplink: 2570-2620 MHz
Downlink: 2570-2620 MHz 21.7 dBm
LTE FDD BAND 40
Uplink: 2300-2400 MHz
Downlink: 2300-2400 MHz 21.5 dBm
WCDMA BAND 1
Uplink: 1920-1980 MHz
Downlink: 2110-2170 MHz 23.3 dBm
WCDMA BAND 8
Uplink: 880-915 MHz
Downlink: 925-960 MHz
E-GSM
Uplink: 880-915 MHz
Downlink: 925-960 MHz 32.9 dBm
DCS
Uplink: 1710-1785 MHz
Downlink: 1805-1880 MHz 29.9 dBm
1.c Frequency Band for Cellular Connection (for UC20-G version)
Band number
Operating Frequency
Max output power
WCDMA BAND 1
Uplink: 1922.4-1977.6 MHz
Downlink: 2112.4-2167.6 MHz 22.47 dBm
WCDMA BAND 8
Uplink: 882.4-912.6 MHz
Downlink: 927.4-957.6 MHz 22.48 dBm
E-GSM
Uplink: 880.2-914.8 MHz
Downlink: 925.2-959.8 MHz 32.1 dBm
DCS
Uplink: 1710.2-1784.8 MHz
Downlink: 1805.2-1879.8 MHz 28.9 dBm
1.d Frequency Band for WiFi Connection
Band
Operating Frequency
Max. Output Power (EIRP)
2.4G
2.4 – 2.4835 GHz
100 mW
5G
Not supported
NA
(2) DoC Information
You can get the DoC information of this product from the following URL:
http://www.amit.com.tw/products-doc/
(3) RF Exposure Statements
The antenna of the product, under normal use condition, is at least 20 cm away from the body of user.
13

M2M Cellular Gateway
1.6 Hardware Installation
This chapter describes how to install and configure the hardware
1.6.1 Mount the Unit
The IDG500 series can be placed on a desktop, or mounted on the wall.
1.6.2 Insert the SIM Card
WARNING: BEFORE INSERTING OR CHANGING THE SIM CARD, PLEASE MAKE SURE
THAT POWER OF THE DEVICE IS SWITCHED OFF.
The SIM card slots are located at the right side of IDG500 series housing in order to protect the SIM card. You
need to unscrew and remove the outer SIM card cover before installing or removing the SIM card. Please
follow the instructions to insert or eject a SIM card. After SIM card is well placed, screw back the outer SIM
card cover.
Step 1:
Loosen the screws as
below and remove the
SIM cover.
Step 2:
Push the SIM card
into the slot A (SIM-
A) or slot B (SIM-B).
Step 3:
Push the inserted SIM card
again to eject it from the
SIM slot.
14

M2M Cellular Gateway
1.6.3 Install the External Antenna
As illustrated in Section 1.3, there are several SMA antenna Jacks for you to install the required antennas for
the RF signal transmission and receiving. You have to purchase required RF cables and antennas separately for
a specific project or installation site to get excellent RF performance.
Since there is limited spacing for allocating all SMA antenna Jacks around the enclosure, the separation among
SMA Jacks (or direct-attached antennas) could be not the optimized arrangement. It is very likely to get
degraded RF performance at specific circumstances. It depends heavily on the environment.
However, there are well-known rules of thumb for solving the antenna separation issue.
1: The horizontal distance between antennas should be greater than 1/4 of its wavelength, and there will be
best separation at 1/2 of its wavelength.
2. If multiple frequency antennas are near each other, then use spacing distance of the lower frequency
antenna, or even better try to satisfy the rule for both frequencies.
Wavelength Table for Major RF Category
RF Category Frequency Wavelength
1/2 Wave Length
(Best Separation)
1/4 Wave Length
(Good Separation)
WiFi 802.11
5.8GHz
5.2cm
2.6cm
1.3cm
WiFi 802.11
2.4GHz
12.5cm
6.2cm
3.1cm
Celllular LTE
2600MHz
11.5cm
5.8cm
2.9cm
Cellular LTE
2100MHz
14.3cm
7.1cm
3.7cm
Cellular LTE
900MHz
33.3cm
16.6cm
8.3cm
Cellular LTE
700MHz
42.8cm
21.4cm
10.7cm
GPS
1.57GHz
19.0cm
9.5cm
4.7cm
For example, if you have a 900MHz LTE antenna and a WiFi 2.4GHz antenna, you would want them to be
separated by at least 8.3cm to get good antenna separation.
So, it is recommended to use some external RF cables to extend and separate the adjacent antennas and get
better antenna separation and RF performance, if required.
15

M2M Cellular Gateway
1.6.4Connecting Power
There is a DC5V/2A power adapter4in the package for you to easily connect DC power to this gateway.
If you powered the gateway with other DC Power Source, please make sure the DC Power voltage is comply to
5V ~ 18V.
WARNNING: This commercial-grade power adapter is mainly for ease of powering up
the purchased device while initial configuration. It’s not for operating at wide
temperature range environment. PLEASE PREPARE OR PURCHASE OTHER INDUSTRIAL-
GRADE POWER SUPPLY FOR POWERING UP THE DEVICE.
1.6.5Connecting to the Network or a Host
The IDG500 series product provides one RJ45 port to connect 10/100Mbps Ethernet. It can auto detect the
transmission speed on the network and configure itself automatically. Connect one Ethernet cable to the RJ45
port (LAN) of the device and plug another end of the Ethernet cable into your computer’s network port. In this
way, you can use the RJ45 Ethernet cable to connect the device to the host PC’s Ethernet port for configuring
the device.
4 The maximum power consumption of IDG500 series product is 7.0W. 16

M2M Cellular Gateway
1.6.6Setup by Configuring WEB UI
You can browse web UI to configure the device.
Type in the IP Address (http://192.168.123.254)5
When you see the login page, enter the user name and password and then click ‘Login’ button.
The default setting for both username and password is ‘admin’ 6.
5 The default LAN IP address of this gateway is 192.168.123.254. If you change it, you need to login by using
the new IP address.
6 For security consideration, you are strongly recommended to change the login username and password from
default values. Refer to Section 6.1.2 for how to change the setting. 17

M2M Cellular Gateway
Chapter 2Basic Network
2.1 WAN & Uplink
The gateway provides multiple WAN interfaces to let all client hosts in Intranet of the gateway access the
Internet via ISP. But ISPs in the world apply various connection protocols to let gateways or user's devices dial
in ISPs and then link to the Internet via different kinds of transmit media.
So, the WAN Connection lets you specify the WAN Physical Interface, WAN Internet Setup and WAN Load
Balance for Intranet to access Internet. For each WAN interface, you must specify its physical interface first
and then its Internet setup to connect to ISP. Besides, since the gateway has multiple WAN interfaces, you can
assign physical interface to participate in the Load Balance function.
18

M2M Cellular Gateway
2.1.1 Physical Interface
M2M gateways are usually equipped with various WAN interfacess to support different WAN connection
scenario for requirement. You can configure the WAN interface one by one to get proper internet connection
setup. Refer to the product specification for the available WAN interfaces in the product you purchased.
The first step to configure one WAN interface is to specify which kind of connection media to be used for the
WAN connection, as shown in "Physical Interface" page.
In "Physical Interface" page, there are two configuration windows, "Physical Interface List" and "Interface
Configuration". "Physical Interface List" window shows all the available physical interfaces. After clicking on
the "Edit" button for the interface in "Physical Interface List" window the "Interface Configuration" window
will appear to let you configure a WAN interface.
Physical Interface:
•Ethernet WAN: The gateway has one or more RJ45 WAN ports that can be configured to be WAN
connections. You can directly connect to external DSL modem or setup behind a firewall device.
•3G/4G WAN: The gateway has one built-in 3G/4G cellular as WAN connection. For each cellular WAN,
there are 1 or 2 SIM cards to be inserted for special failover function.
Please
MUST POWER OFF
the gateway before you
insert or remove SIM card.
The SIM card can be damaged if you insert or
remove SIM card while the gateway is in operation.
19

M2M Cellular Gateway
•WiFi Uplink WAN: For the product with WiFi Uplink function, one WiFi module can be configured to be
WAN connections. For the WiFi module with Uplink function activated, you can further create some uplink
profiles for ease of connecting to an uplink network.
Operation Mode:
There are three option items “Always on”, “Failover”, and “Disable” for the operation mode setting.
Always on: Set this WAN interface to be active all the time. When two or more WAN are established at
"Always on" mode, outgoing data will through these WAN connections base on load balance policies.
Failover:
A failover interface is a backup connection to the
primary. That means only when its primary WAN
connection is broken, the backup connection will be
started up to substitute the primary connection.
As shown in the diagram, WAN-2 is backup WAN for
WAN-1. WAN-1 serves as the primary connection with
operation mode "Always on". WAN-2 won’t be
activated until WAN-1 disconnected. When WAN-1
connection is recovered back with a connection, it will
take over data traffic again. At that time, WAN-2
connection will be terminated.
Seamless Failover:
In addition, there is a "Seamless" option for Failover
operation mode. When seamless option is activated
by checking on the "Seamless" box in configuration
window, both the primary connection and the
failover connection are started up after system
rebooting. But only the primary connection executes
the data transfer, while the failover one just keeps
alive of connection line. As soon as the primary
connection is broken, the system will switch,
meaning failover, the routing path to the failover
connection to save the dial up time of failover
connection since it has been alive.
20