BeiJer 600-0001 User manual

CloudVPNRouter
English
MAEN327,2020-08

Foreword
InstallationmanualforCloudVPNRouter
Foreword
The CloudVPN Routers are developed to satisify the demands of remote access
of systems. Built-in functions such as VPN connectivity, cloud based VNC and
much more.
The CloudVPN Router is easy to setup and use and provides a secure connection
to your machines.
Order no: MAEN327
Copyright © 2020-08 Beijer Electronics. All rights reserved.
The information in this document is subject to change withoutnoticeandisprovidedasavailableatthetime
of printing. Beijer, including all its group companies, reserves the right to change any information without
updating this publication. Beijer, including all its group companies, assumes no responsibility for any errors
that may appear in this document. Read the entire installation manual prior to installing and using this
equipment. Only qualified personnel may install, operate or repair this equipment. Beijer, including all its
group companies, are not responsible for modified, altered or renovated equipment. Because the equipment
hasawiderangeofapplications,usersmustacquiretheappropriateknowledgetousetheequipmentproperly
in their specific applications. Persons responsible for the application and the equipment must themselves
ensure that each application is in compliance with all relevant requirements, standards and legislation in
respect to configuration and safety. Only parts and accessories manufactured according to specifications set
by Beijer, including all itsgroup companies, may beused.
BEIJER, INCLUDING ALL ITS GROUP COMPANIES, SHALL NOT
BE LIABLE TO ANYONE FOR ANY DIRECT, INDIRECT, SPECIAL,
INCIDENTAL OR CONSEQUENTIAL DAMAGES RESULTING FROM
THE INSTALLATION, USE OR REPAIR OF THIS EQUIPMENT,
WHETHER ARISING IN TORT, CONTRACT, OR OTHERWISE.
BUYER'S SOLE REMEDY SHALL BE THE REPAIR, REPLACEMENT,
OR REFUND OF PURCHASE PRICE, AND THE CHOICE OF THE
APPLICABLE REMEDY SHALL BE AT THE SOLE DISCRETION OF
BEIJER, INCLUDING ALL ITS GROUP COMPANIES.
Beijer, MAEN327

Contents
Contents
1 Introduction ............................................................. 4
1.1 Technicalsupport ................................................ 4
2 Productoverview ........................................................ 5
2.1 Productfamily ................................................... 5
2.2 What’sinthebox? ................................................ 5
2.3 Hardwareoverview .............................................. 5
2.4 Label .............................................................. 6
2.5 Specifications ..................................................... 7
2.6 Dimensions ...................................................... 9
3 Installation ............................................................... 10
3.1 Installing and removing fromDINrail ......................... 10
3.2 InstallingaSIMcard ............................................. 11
3.3 Powersupply ..................................................... 11
3.4 Wiring ............................................................ 12
3.5 Digitalinput ..................................................... 12
3.6 Shield ............................................................. 12
4 Operation ................................................................ 13
4.1 Configure the CloudVPN Router .............................. 13
4.2 LEDstatusindicators ............................................ 13
5 Connectivity requirements (for localIT) .............................. 16
5.1 Overview ......................................................... 16
5.2 Servers and DNS requests ....................................... 16
5.3 MACorIPaddressfilter ......................................... 16
6 Compliance .............................................................. 17
6.1 Applicable European directives ................................. 17
6.2 Applicable safety standards ...................................... 17
6.3 FCCcompliance ................................................. 18
6.3.1 Additional information for variants with wireless capabilities ..19
6.4 Certifications ..................................................... 19
Beijer, MAEN327

Introduction
1Introduction
Thank you for purchasing the CloudVPN Router. The CloudVPN Router is the
standard and most supported hardware for Beijer Electronics’s acirro+ remote
access. The CloudVPN Router makes it convenient to remotely connect to your
equipment, while the built-in firewall keeps your equipment safe from outside
threats.
Configuration is as easy as inserting a USB flash drive, which contains your
configuration file, into the CloudVPN Router's USB port. The configuration file
can be generated from the [Tools] page on the acirro+ remote access.
Configuration is as easy as inserting a USB flash drive, which contains your
configuration file, into the CloudVPN Router's USB port. The configuration file
can be generated from the [Tools] page on the acirro+ remote access.
1.1 Technicalsupport
If for any reason you need technical assistance, please have a look at
our easy-to-read and exhaustive online support articles and guides
([email protected]). Our technical support is available from
8:00 to 17:00 Central European Time, Monday through Friday, and will answer
your questions as soon as possible.
If you have a comment, question, or suggestion about any of our products,
services,ormanuals,don’thesitatetoletusknow.
Beijer, MAEN327 4

Product overview
2Productoverview
Seamlessly integrated with the acirro+ remote access, the CloudVPN Router is the
fastest and safest way to connect your machine to the cloud.
2.1 Productfamily
The CloudVPN Router is available in several variations. No matter your situation,
you can always connect your machine to the cloud.
Articleno. Ethernet 3G(Global) LTE(Global) WiFi
600-0001 X
600-0002 X X
600-0003 X X
600-0004 X x x X
Note:
The3G,4G,andWi-Fimodelsrequireantennas,purchasedseparately. SIMcardsfor
the3G,4Gmodelscanbepurchasedthroughatelecomprovider.
2.2 What’sinthebox?
The following list describes the contents of the package:
•CloudVPN Router
•Female 4-pin plug-in connector with screw connection. (model: Weidmuller
BL 5.08/04/180 SN BK BX or equivalent)
2.3 Hardwareoverview
The CloudVPN Router is created with performance and a multitude of hardware
capabilities in mind.
Beijer, MAEN327 5

Product overview
Note:
4GSMAconnectors
CloudVPNRouter4Gvariantshave2SMAantennaconnectors. Theoneclosestto
thepowerconnectoristheMAIN.TheotherconnectoristheDIV.Alwaysconnectan
antennatotheMAIN.ConnectinganantennatotheDIVisoptional.
Note:
4G&Wi-FiSMAconnectors
The4G&Wi-Fivarianthas2SMAantennaconnectors. Theoneclosesttothepower
connectorisfor4G.TheotherconnectorisforWi-Fi.
2.4 Label
ThelabelcanbefoundontheleftsideoftheCloudVPNRouter.
Beijer, MAEN327 6

Product overview
2.5 Specifications
The specifications below are applicable for all CloudVPN routers. The LTE and
Wi-Fi variants each have additional specifications, listed separately.
Specification
Powersupplu(recommended) 12-24VDC+/-20%LPS2A
Powerconsumption 10Wmax,about2.5-5W*idle
Operatingtemperature -20°Cto+65°C
Relativehumidity 10to95%non-condensing
Operatingaltitude Uptomaximum2000m
Storagetemperature -20°Cto+65°C
Storagehumidity 10to95%non-condensing
Storagealtitude Uptomaximum3000m
Ethernetports Five1Gbps(4xLAN,1xWAN)
USB USB2.0
Processor MIPS800MHz
DigitalInput Yes
Degreeofprotection IP20
Mounting DINrail
Size 95x116x28mm(excl. DIN
railclip)
Weight 270-310gram
Certifications CE,cULusListing,FCC
Verification,REACH
Warranty 2years
LTE additional specifications:
Specification
Powersupply(recommended) 12-24VDC+/-20%LPS2A
Powerconsumption 10Wmax,about2.5-5W*idle
Beijer, MAEN327 7

Product overview
Specification
Operatingtemperature -20°Cto+65°C
Relativehumidity 10to95%non-condensing
Operatingaltitude Uptomaximum2000m
Storagetemperature -20°Cto+65°C
Storagehumidity 10to95%non-condensing
Storagealtitude Uptomaximum3000m
Ethernetports Five1Gbps(4xLAN,1xWAN)
USB USB2.0
Processor MIPS800MHz
DigitalInput Yes
Degreeofprotection IP20
Mounting DINrail
Size 95x116x28mm(excl. DINrailclip)
Weight 270-310gram
Certifications CE,cULusListing,FCCVerification,REACH
Warranty 2years
Specification
4G-Gprotocolsandfrequencies
(Global) FDD-LTE-B1,B2,B3,B4,B5,B7,B8,B12,
B13,B18,B19,B20,B25,B26,B28
TDD-LTE-B38,B39,B40,B41WCDMA-
B1,B2,B4,B5,B6,B8,B19
GSM/GPRS/EDGE-850,900,1800,1900MHz
Speed LTE-FDD-Max.100Mbps(DL)/Max.50Mbps
(UL)
LTE-TDD-Max.61Mbps(DL)/Max.18Mbps(UL)
DC-HSPA+-Max.42Mbps(DL)/Max.5.76Mbps
(UL)
TD-SCDMA-Max.4.2Mbps(DL)/Max.2.2Mbps
(UL)
WCDMA-Max.384Kbps(DL)/Max.384Kbps
(UL)
EDGE-Max.236.8Kbps(DL)/Max.236.8Kbps
(UL)
GPRS-Max.85.6Kbps(DL)/Max.85.6Kbps(UL)
CSD-14.4Kbps
SIMsize StandardSIMcard(size2FF)
FCCID(4G-Aonly) XMR201903EG25G
FCCID(4G-Aonly) XMR201605EC25A
LTE additional specifications:
Beijer, MAEN327 8

Product overview
Specification
WI-FIIEEE802.11version b/g/n
WI-FImodes Station(Client)ModeandAccessPoint
Speed 72Mbps
FCCID XPYLILYW1
2.6 Dimensions
The CloudVPN Router is designed to be easily installed on a standard DIN rail.
The small size of the CloudVPN Router allows you to make efficient use of space.
(Unit of measurement: millimeter.)
Beijer, MAEN327 9

Installation
3Installation
Note:
Installinanenclosure
Thesedevicesareopen-typeandaremeanttobeinstalledinanenclosurewhichisonly
accessiblewiththeuseofatoolandsuitablefortheenvironment.
When designing the layout of your system, always separate the devices that
generate high voltage and high electrical noise from the low-voltage, logic-type
devicessuchastheCloudVPNRouter.
Also consider the heat-generating devices and locate the electronic-type devices
in the cooler areas of your cabinet. Reducing the exposure to a high-temperature
environment will extend the operating life of the CloudVPN Router.
Consider also the routing of the wiring for the devices in the panel. Avoid placing
low-voltage signal wires and communications cables in the same tray with AC
power wiring and high-energy, rapidly-switched DC wiring.
The CloudVPN Router is designed to be cooled using natural convection. For
proper cooling, you must provide a clearance of at least 25 mm above and below
the device. Also, allow at least 25 mm of depth between the front of the device
and the inside of the enclosure.
Because Beijer Electronics’s CloudVPN Router is essentially a small computer, the
CloudVPN Router can be used for many different purposes. You can, for example,
access, program and control industrial machines around the globe. Do not use
theCloudVPNRouterunlessyou’vereceivedpropertrainingorhaveproper
knowledgeabouttheCloudVPNRouterandits capabilities. It is expected that
the user is knowledgeable about networking settings and is aware of the potential
consequences on i.e. security.
3.1 InstallingandremovingfromDIN
rail
The CloudVPN Router can be easily installed on a standard DIN rail. (1) Hang
the device on the rail and (2) push the unit down until you feel a click. To remove
the unit, (A) pull/rotate the device up and (B) lift off the rail.
Beijer, MAEN327 10

Installation
3.2 InstallingaSIMcard
The SIM card slot suits a standard SIM card (size 2FF).
To insert, push the SIM card into the slot until you feel a click. This is
approximately 1 mm inside the device. Release the card and the card will stay in
thedevice. TheendoftheSIMcardshould be aligned with the outside of the
enclosure.
To remove, push the SIM card firmly into the slot until you hear a click. Releasing
will cause the SIM card to partially eject, allowing you to easily take out the card.
3.3 Powersupply
The CloudVPN Router must be powered by an IEC/UL/EN/60950-1 certified
Limited Power Supply (LPS) or for the United States a Class 2 power supply. The
LPS power supply is not included in this package.
Powersupply 12-24VDC+/-20%LPS2A
Internalvoltageprotection 29Vmax
Inputprotection Protectedagainstpolarity
inversion
Isolation 1.5kV
Beijer, MAEN327 11

Installation
3.4 Wiring
Proper grounding and wiring of all electrical equipment are important to
help ensure the optimum operation of the CloudVPN Router and to provide
additional electrical noise protection for your application.
The CloudVPN Router comes with a female 4-pin plug-in connector with screw
connection (type: Weidmuller BL 5.08/04/180 SN BK BX). The optimal wire
diameter is 1.5mm² (16AWG - 12AWG).
Wiresizerange 18–12AWG
Wirestriplength 7mm
Terminalscrewtorque 0.4Nm
Maxwirelength 3m
Mingroundconductor 16AWG
3.5 Digitalinput
By default, the Digital Input is not configured and doesn't need to be wired. The
digital input provides a way to locally manage the CloudVPN Router’s VPN
connection (ON/OFF). The wiring is depicted in the image above..
Type Optocoupler
Voltagerange 0-29VDC
Voltagerange(OFFstate) 0-3VDC
VoltagerangeONstate) 7-29VDC
Currentvoltage(ONstate) 2-5mA(typically)
3.6 Shield
ConnecttheShieldpinoftheCloudVPN Router with the protective earth
conductor (PE), min. core diameter Cu 1.5 mm².
Beijer, MAEN327 12

Operation
4Operation
4.1 ConfiguretheCloudVPNRouter
To configure your CloudVPN Router, log in to your acirro+ remote access account
and navigate to the [Tools] page. Here you can generate an CloudVPN Router
configuration file by following a few simple steps. You can then download the
configuration file, which must be copied onto a USB flash drive. After supplying
power to the CloudVPN Router, insert this USB flash drive in the USB port. The
CloudVPN Router will register itself to Beijer Electronics’s acirro+ remote access
and set up a secure VPN connection. You can further configure the CloudVPN
Router via the acirro+ remote access (https://remoteaccess.acirroplus.c).
4.2 LEDstatusindicators
The CloudVPN Router has two LEDs for router status: one signal LED (3G,
4G, Wi-Fi signal) and one activity LED. The CloudVPN Router requires
approximately 2 minutes to boot up and set up a secure connection.
Signal LED
Beijer, MAEN327 13

Operation
Signal Colour Description
Blinkingblue Initializingcellular
module
Blinkingred1pulse Noreceptionorunable
toconnecttonetwork
(APNorSSIDmaybe
incorrect)
Blinkingred2pulses PINinvalidorPUK
required(aphoneis
requiredtounlockSIM
cardwithPUK)
Blinkingred4pulses SIMcardisinvalidor
missing
Constantred Connected,poor
reception
Constantpurple Connected,medium
reception
Constantblue Connected,good
reception
*Variantdependent: Ethernetonly(2.5W),othervariants(5W)
Activity LED
Signal Colour Description
Constantred Bootingup(maytake
1-2min)ornotyet
registered
Blinkingred1pulse Waitingforinternet
access
Blinkingred3pulses LAN/WANconflict
(conflictingsubnets)
Blinkingred4pulses Removedfromthe
platform(re-insert
USBflashdriveto
registeragain)
Blinkingred5pulses Previouslyregistered
totheacirro+remote
access(removefrom
theacirro+remote
accessandregister
again)
Blinkingblue1pulse Connectingtothe
acirro+remoteaccess
Beijer, MAEN327 14

Operation
Signal Colour Description
Blinkingblue2pulses SettingupaVPN
connection
Constantblue ActiveVPNconnection
totheacirro+remote
access
Warning:
Thisactioncannotbeundone! Allsettingswillberesettofactorydefault.
The CloudVPN Router can be reset to the factory default settings by pressing
and holding the reset button on top for 5 seconds. The ACT LED will blink
while the reset button is pressed. Upon release of the button, the ACT LED will
rapidly blink if the button was pressed long enough to trigger a reset. Wait forthe
CloudVPN Router to restart. You can then configure the CloudVPN Router
again.
Note:
Removepreviousregistration
IftheCloudVPNRouterwaspreviouslyregisteredontheacirro+remoteaccessyou’ll
havetoremoveitfromtheacirro+remoteaccessbeforeyoucanregisteritagain.
Beijer, MAEN327 15

Connectivity requirements (for local IT)
5 Connectivityrequirements(for
localIT)
The CloudVPN Router uses an outgoing port to establish a secure connection
to our acirro+ remote access. This means there is no need to open any incoming
ports in your firewall.
5.1 Overview
Below is an overview of the outgoing ports and protocols that the CloudVPN
Router utilizes.
Port Transport Application
443,8443(1) TCP HTTPS,MQTT(TLS),
OpenVPN
53(2) TCPandUDP DNS
(1)Port8443isonlyusedwhenstealthmodeisactiveforconnectivityviaacensored
internetconnection(i.e. whenlocatedinChina).(2)DNSrequestsareoftenhandledby
localDNSservers. Inthosecases,thelistedDNSportcanbeignored.
5.2 ServersandDNSrequests
Via these outgoing ports the CloudVPN Router connects to different Beijer
Electronics servers: REST API, MQTT, and OpenVPN servers. The IP addresses
of these servers, as well as the number of servers, may change over time and are thus
not pre-defined. What is pre-defined is the domain of these servers. This domain
will always end with ".ixon.net" (i.e. am01.ixon.net). The CloudVPN Router
attempts to resolve these addresses by doing DNS requests. If it can't perform
DNS requests, it can't connect to our servers.
5.3 MACorIPaddressfilter
The local IT department may choose to only grant specific devices internet access,
based on the MAC address or IP address of the device. The MAC address can be
obtained from the label on the side of the CloudVPN Router. The IP address can
be set to a static IP address. However, by default the IP address is set to be assigned
dynamically via DHCP.
Beijer, MAEN327 16

Compliance
6Compliance
6.1 ApplicableEuropeandirectives
The CloudVPN Router is in conformity with the provisions of the following
European Directives.
Directive Description
EMCDirective2014/30/EU Productsafety
RadioEquipmentDirective2014/53/EU Useoftheradiospectrum
RoHSDirective2015/863 Restrictionofhazardoussubstances
REACHDirective1907/2006 Regulationandregistrationofchemicals
WEEEDirective2012/19 Wasteofelectronicequipment
6.2 Applicablesafetystandards
The CloudVPN Router was tested and passed the following standards.
Standard Description
EN55032:2012/AC:2013 ElectromagneticCompatibility
ofMultimedia.
Equipment
EN301489-1V1.9.2(2011-09) EMCStandardforRadio
EquipmentandServices,Part1:
Commontechnicalrequirements
EN301489-3V1.4.1(2002-08) EMCStandardforRadio
EquipmentandServices,Part
3: Specificconditionsfor
Short-Rangedevices.
EN61000-6-1:2007 Electromagneticcompatibility
(EMC)-Part6-1: Generic
standards-Immunityfor
residential,commercialand
light-industrialenvironments
EN61000-6-
3:2007/A1:2011/AC:2012 Electromagneticcompatibility
(EMC)-Part6-3: Generic
standards-Emissionstandard
forresidential,commercialand
light-industrialenvironments
EN61000-6-2:2005/AC:2005 Electromagneticcompatibility
(EMC)-Part6-2: Generic
standards-Immunityfor
industrialenvironments
Beijer, MAEN327 17

Compliance
Standard Description
EN61000-6-4:2007+A1:2011 Electromagneticcompatibility
(EMC)-Part6-4: Generic
standards-Emissionstandard
forindustrialenvironments
EN61000-4-2:2009 Electrostaticdischarge
immunitytest
EN61000-4-3:2006+A1:2008+
A2:2010 Radiated,Radio-frequency,
ElectromagneticFieldImmunity
Test80-1000MHz
EN61000-4-4:2012 BurstImmunityTest
EN61000-4-5:2014+A1:2017 SurgeImmunityTest
EN61000-4-6:2014 ImmunitytoConducted
Disturbances,Inducedby
Radio-frequencyFields
IEC60950-1:2006+A1:2009+
A2:2013 InformationTechnology
EquipmentSafety,Part1: General
Requirements-Edition2
EN62368-1:2014/AC:2015 Audio/video,informationand
communicationtechnology
equipment-Part1: Safety
requirements
EN50581:2012 Restrictionoftheuseofcertain
hazardoussubstances(RoHS)
inelectricalandelectronic
equipment
UL60950-1 InformationTechnology
EquipmentSafety,Part1: General
Requirements-Edition2
CSAC22.2No. 60950-1-07+
Amendment1andAmendment2 InformationTechnology
EquipmentSafety,Part1: General
Requirements-Edition2
6.3 FCCcompliance
The base equipment (an unintentional radiator) has been tested and complies
with the limits for a Class B digital device, pursuant to part 15 of the FCC rules.
These limits are designed to provide reasonable protection against harmful
interference in a residential installation. This equipment generates, uses, and can
radiate radio frequency energy and, if not installed and used in accordance with
the manufacturer's instruction manual, may cause interference with radio and
television reception.
However, there is no guarantee that interference will not occur in a particular
installation. If this equipment does cause harmful interference to radio or TV
reception, which can be determined by turning the equipment off and on, the user
is encouraged to try to correct the interference by one or more of the following
measures:
•Reorient or relocate the receiving antenna.
Beijer, MAEN327 18

Compliance
•Increase the separation between the equipment and the receiver.
•Connect the equipment into an outlet on a circuit different from that to
which the receiver is connected.
•Consult the dealer or an experienced radio/TV technician for help.
Note:
Changesormodificationsofthisequipmentnotexpresslyapprovedbytheparty
responsibleforcompliancecouldvoidtheuser’sauthoritytooperatetheequipment.
The CloudVPN Router contains different FCC certified modules, depending
on the variant.
ArticleNumber. Enclosed module FCCIDs(LTE) FCCIDs(Wi-Fi)
600-0001 - - -
600-0002 4G(Global) XMR201903E-
G25G -
600-0003 Wi-Fi - XPYLILYW1
600-0004 4G(Global)and
Wi-Fi XMR201605E- C25A XPYLILYW1
6.3.1 Additionalinformationforvariants
withwirelesscapabilities
This device complies with Part 15 of the FCC Rules. Operation is subject to the
following two conditions:
•This device may not cause harmful interference.
•This device must accept any interference received, including interference that
may cause undesired operation.
The antenna(s) used with this transmitter must be installed with a separation
distance of at least 20cm from all persons and must not be co-located or operated
in conjunction with any other antennas or transmitters. Only those antenna(s)
tested with the wireless transmitters or similar antenna(s) with equal or lesser gain
may be used.
6.4 Certifications
The CloudVPN Router has been certified for:
•CE certification (for more information, see our Declaration of Conformity).
Beijer, MAEN327 19

Compliance
•FCC verification
•cULus listing (ID #E492721)
The CloudVPN Router 4G-A has additionally been certified for:
•AT&T certification
For USA and Canada, see our Declaration of Conformance.
All supporting documents can be found on our support website:sup-
[email protected]
Beijer, MAEN327 20