Cradlepoint COR IBR350 User manual

CradlepointCOR IBR350Manual
Figure 1: COR IBR350
HighlyAvailable, Cloud-ManagedM2M Gateway
The Cradlepoint COR IBR350 Series is a compact, 4G LTE networking solution designed for mission critical connectivity for M2M deployments.
Ideal for kiosks and digital signs, this cloud-managed solution provides organizations the ability to scale deployments quickly and manage their
distributed networks easily in real-time.
Designed with form & function in mind for the cost-conscious consumer, COR IBR350 is perfect to get your applications online.
KeyFeatures
• Cloud-managed for zero-touch deployment and intelligent management
• Internal Verizon LTE modem
• Compact
• Integrated mounting holes
• One 10/100 Ethernet port
• Connectors for external cellular modem antennas (two)
1

Introduction
•Package Contents
•System Requirements
•Specifications
•Hardware
•LEDs
QuickStart
•Basic Setup
•Accessing the Administration Pages
•First Time Setup Wizard
•Using Enterprise Cloud Manager
AdministrationPages
The COR IBR350 administration pages include the following five tabs:
Figure 2: COR IBR350 Admin Page Tabs
See Navigating the Administration Pages for helpful information about how to use the device’s GUI-based management interface.
NOTE:Themanualcontentforthefollowingadministrationpagessectionsisgenericacrossmultipledevices. Therefore, somedetailsmaynotapply
totheCOR IBR350becausetheyarespecifictoanotherdevice. Forexample, CP SecureThreatManagementisonlyavailablefortheAER 2100.
Also, theconfigurationpageswithin EnterpriseCloudManager (ECM) areverysimilartothelocalrouteradministrationpages, butsomeitemsare
missingbecausetheyarenotrelevantintheECM environment. Forexample, theentire Status tabisabsentinECM becausestatusinformationis
presentedinotherways(Dashboard, Deviceslist, etc.).
GettingStarted
•Enterprise Cloud Manager Registration
•First Time Setup
•IP Passthrough Setup
Status
•Client List
•Dashboard
•GPS
•GRE Tunnels
•Internet Connections
2

•QoS
•Routing
•Statistics
•System Logs
•VPN Tunnels
NetworkSettings
•Content Filtering
•DHCP Server
•DNS
•Firewall
•Local Networks
•MAC Filtering
•MAC Logging
•QoS
•Routing
Internet
•Connection Manager
•Client Data Usage
•Data Usage
•GRE Tunnels
•Network Mobility (NEMO)
•VPN Tunnels
SystemSettings
•Administration
•Certificate Management
•Device Alerts
•Enterprise Cloud Manager
•Feature Licenses
•SNMP Configuration
•System Control
•System Software
Introduction
•Package Contents
•System Requirements
•Specifications
•Hardware
•LEDs
3

PackageContents
• Ruggedized router with integrated business-class 3G/4G modem; includes integrated mounting plate
• Two meter locking power and GPIO cable (direct wire)
• Quick Start Guide with warranty information
NOTE:Duetothediverseneedsofcustomers, theCOR IBR350packagedoesnotincludeapoweradapterorantennas. Seethe Accessories
sectionbelowforseveralpowerandantennaoptions.
SystemRequirements
• At least one Internet source: a CradlePoint integrated 3G/4G modem with an active data plan, or an Ethernet-based modem.
• Windows 2000/XP/7/8, Mac OS X, or Linux computer.
• Internet Explorer v6.0 or higher, Firefox v2.0 or higher, Safari v1.0 or higher, or Google Chrome.
Specifications
WAN
• Integrated 4G LTE modem
LAN
• One LAN 10/100 Ethernet port
PORTS
• Power
• One Ethernet LAN
• 2 cellular antenna connectors (SMA)
TEMPERATURE
• 0° C to 40° C operating
HUMIDITY (non-condensing)
• 5% to 95% operating
• 5% to 95% storage
4

POWER
• 12VDC 1A adapter
SIZE – 3.0 in x 3.7 in x 1.0 in (76.5 mm x 94.5 mm x 24.5 mm)
HOUSING – plastic
CERTIFICATIONS
• FCC
• Safety: UL/CUL
• Materials: WEEE, RoHS, RoHS-2, California Prop 65
What’sInTheBox
• M2M router with integrated business-class 4G LTE modem; includes integrated mounting holes
• 12VDC 1A power adapter (1.5 meter cord)
• Two modem antennas
• Quick Start Guide with warranty and regulatory information
FeatureDetails
•WAN Security – NAT, SPI, ALG, inbound filtering of IP addresses, port blocking, service filtering (FTP, SMTP, HTTP, RPL, SNMP, DNS, ICMP,
NNTP, POP3, SSH), protocol filtering, WAN ping (allow/ignore)
•IntelligentRouting – UPnP, DMZ, virtual server/port forwarding, routing rules, NAT-less routing, WAN-to-LAN IP passthrough, route man-
agement, content filtering, IP filtering, website filtering, per-client Web filtering, local DHCP server, DHCP client, DHCP relay, DNS, DNS
proxy; ALGs: PPTP, SIP, TFTP, FTP, IRC; MAC address filtering, Dynamic DNS, LAN/WAN affinity, VLAN 802.1Q, multicast proxy support,
IP setting overrides, IPv6 support
•Management – Enterprise Cloud Manager: cloud-enabled management and application platform (subscription-based); web-based GUI
(local management), optional RADIUS or TACACS+ username/password; remote WAN web-based management w/ access control (HTTP,
HTTPS); SNMP v1, v2c, & v3; CLI over SSH, SSH to serial, SSH to telnet; API; one-button firmware upgrade; modem configuration, update,
and management; modem data usage w/ alerts, per-client data usage; custom AT scripting to modems
•Performance&HealthMonitoring – Advanced QoS with traffic shaping, with DSCP/DiffServe QoS, Modem Health Management (MHM)
improves connectivity of modem, WAN port speed control, several levels of basic and advanced logging for troubleshooting
•VPN (IPsec) – Tunnel, NAT-T, and transport modes; connect to Cradlepoint, Cisco/Linksys, CheckPoint, Watchguard, Juniper, SonicWall,
Adtran and others; certificate support; Hash (MD5, SHA128, SHA256, SHA384, SHA512), Cipher (AES, 3DES, DES); support for 2 concurrent
connections, GRE tunneling
SupportandWarranty
• CradleCare Support available with technical support, software upgrades, and advanced hardware exchange – 1, 3, and 5 year options
• One-year limited hardware warranty available in the US and Canada – extend warranty to 2, 3, or 5 years
Accessories
• Universal 3G/4G multi-band cellular modem antenna – 2dBi/3dBi (Part # 170649-000)
• Directional Patch antennas for external (outside) mounting (Part # 170587-000)
5

• Directional Yagi (Log-Periodic) antennas for external (outside) mounting (Part # 170588-000)
• Omni-directional antennas for external (outside) mounting (Part # 170586-000)
• 12” Mag-mount antenna (Part # 170605-000)
• 4” Mini mag-mount antenna (Part # 170606-000)
See the Cradlepoint antenna accessories page for more information about antennas. Also see the AntennaOrderingandInstallationGuide,
available as a PDF in the Resources section of antenna and router product pages.
Business-GradeModemSpecifications
COR IBR350 models include an integrated 4G LTE modem – specific model names include a specific modem (e.g., the COR IBR350L-VZ includes
a Verizon LTE modem).
COR IBR350L-VZ –4G LTE forVerizon
•Technology: LTE
•DownlinkRates: LTE 100 Mbps (theoretical)
•UplinkRates: LTE 50 Mbps (theoretical)
•FrequencyBands:
–LTE Band 4 – AWS (1700/2100 MHz), Band 13 (700 MHz)
•Power: LTE 23 dBm +/− 1 (typical conducted)
•Antennas: two SMA male (plug), finger tighten only (maximum torque spec is 7 kgf-cm)
•IndustryStandards&Certs: FCC, Verizon
Hardware
Ports&LEDs
ANTENNA CONNECTORS – There are two antenna connectors for the integrated 3G/4G modem (SMA). The MAIN modem connector may have
better performance than the AUX connector, so attach the better (or single) modem antenna to the MAIN connector if that is relevant in your setup.
POWER SWITCH – The device must be powered off to insert/remove the SIM. I – on &pipe; O – off MICRO-B USB – This is a service port for
modem firmware updates ONLY. RESET – Press and hold for ten seconds to factory reset the device. ETHERNET LAN/PORT – An Ethernet cable
is required to connect to the device. By default the Ethernet port is set to LAN, and is not LAN/WAN configurable.
LEDs
–POWER
• Green = Powered ON.
6

Figure 3: COR IBR350 Lights & Ports
Figure 4: COR IBR350 SIM Door, USB & Antenna Connectors
7

• No Light = Not receiving power. Check the power switch and the power source connection.
• Flashing Amber = Attention. Open the administration pages (see Accessing the Administration Pages) and check the router status.
LAN - LAN
• Green = LAN is connected.
• Off = LAN is not connected.
–INTEGRATED MODEM
Indicates the status of integrated modems.
Both integrated and external USB modems have the following LED indicators:
• Green = Modem has established an active connection.
• Blinking Green = Modem is connecting.
• Amber = Modem is not active.
• Blinking Amber = Data connection error. No modem connection possible.
• Blinking Red = Modem is in the process of resetting.
–SIGNAL STRENGTH
Blue LED bars indicate the active modem’s signal strength.
• 4 Solid Bars = Strongest signal.
• 1 Blinking Bar = Weakest signal. (A blinking bar indicates half of a bar.)
ADDITIONAL LED INDICATIONS
• The USB and modem lights turn amber and blink twice to signal factory reset.
• Two of the modem LEDs blink red in unison for 10 seconds when there is an error during firmware upgrade.
QuickStart
•Basic Setup
•Accessing the Administration Pages
•First Time Setup Wizard
•Using Enterprise Cloud Manager
BasicSetup
8

1. InsertanactivatedSIM.
A wireless broadband data plan must be added to your Cradlepoint COR IBR350. Wireless broadband data plans are available from wireless
carriers such as Verizon, AT&T, Sprint, EE, and Vodafone. The SIM must be provisioned with the carrier. Contact your carrier for details about
selecting a data plan and about the process for provisioning your SIM.
Once you have an activated SIM, slide open the SIM cover and insert the card into the SIM slot. For models with two SIM slots, use the slot marked
SIM-1 for the primary SIM card.
Be sure to insert the card with the notch-end first and the gold contacts facing down – it will click into place.
Figure 5: SIM Card
Once you have inserted the card, slide the cover closed. Insert the security screw if desired.
2. Attachmodemantennas.
Attach the included modem antennas (finger tight only).
3. Connecttoapowersource.
The Cradlepoint COR IBR350 includes a 12VDC 1A power adapter. Plug this into the device and to a power outlet.
Figure 6: Power Adapter
4. Connecttoacomputerorothernetworkequipment.
Plug an Ethernet cable into the Ethernet LAN port and into a computer or other equipment.
AccessingtheAdministrationPages
Once you are connected, open the GUI-based administration pages to make configuration changes to your router.
9

Figure 7: Administrator Login
1. Open a browser window and type “cp/” or “192.168.0.1” in the address bar. Press ENTER/RETURN.
2. When prompted for your password, type the eight character DEFAULT PASSWORD found on the product label.
Figure 8: Product Label
It’s possible – and more efficient – to do all your configuration changes through Cradlepoint Enterprise Cloud Manager (ECM) without logging into
the local administration pages. Set up a group of routers and set the configuration for all of them at once. See below for more information about
ECM.
FirstTimeSetupWizard
When you log in for the first time, you will be automatically directed to the FIRST TIME SETUP WIZARD, which will walk you through the steps to
customize your Cradlepoint COR IBR350. You have the ability to configure any of the following:
10

• Administrator Password
• Time Zone
• Access Point Name (APN)
• Modem Authentication
• Failure Check
NOTE:ToreturntotheFirstTimeSetupWizardafteryourinitiallogin, selectGETTING STARTED onthetopnavigationbarandFIRST TIME SETUP
inthedropdownmenu.
UsingEnterpriseCloudManager
Rapidly deploy and dynamically manage networks at geographically distributed stores and branch locations with Enterprise Cloud Manager, Cradle-
point’s next generation management and application platform. Enterprise Cloud Manager (ECM) integrates cloud management with your Cradle-
point devices to improve productivity, increase reliability, reduce costs, and enhance the intelligence of your network and business operations.
Click here to sign up for a free 30-day ECM trial.
Depending on your ordering process, your devices may have already been bulk-loaded into ECM. If so, simply log in at cradlepointecm.com using
your ECM credentials and begin managing your devices seamlessly from the cloud.
If your device has not yet been loaded into your ECM account, you need to register. Log into the device administration pages and go to Getting
Started>EnterpriseCloudManagerRegistration. Enter your ECM username and password, and click on “Register”.
Once you have registered your device, go to cradlepointecm.com and log in using your ECM credentials.
For more information about how to use Cradlepoint Enterprise Cloud Manager, see the following:
•Getting Started
•ECM on the Knowledge Base
NavigatingtheAdministrationPages
To access the administration pages, open a web browser and type the hostname “cp/” or IP address “http://192.168.0.1” into the address bar. The
AdministratorLogin page appears.
NOTE:ThehostnameandIP addressareeditable; “cp”and“192.168.0.1”arethedefaults. Ifyouhavechangedthese, inputyourcustomized
hostnameorIP addressintothewebbrowsertoaccesstheadministrationpages.
Log in using your administrator password. Initially, this password can be found on the bottom of the router as the DefaultPassword (this password
is also the last eight digits of the unit’s MAC address). You may have changed the administrator password during initial setup using the First Time
Setup Wizard. If so, log in using your personalized administrator password.
If you have forgotten your personalized password, you can reset the device to the factory default configuration. When you reset the router, the
administrator password will revert back to the Default Password. Press and hold the RESET button on the router unit until the lights flash
(approximately 10-15 seconds). The reset button is recessed, so it requires a pointed object such as a paper clip. You can then log in using the
DefaultPassword.
11

Figure 9: Enterprise Cloud Manager Login Page
Figure 10: Enterprise Cloud Manager Registration Page
12

Figure 11: Administrator Login
QuickLinks
The Cradlepoint logo in the top left corner of all the administration pages is a link to the Dashboard (Status>Dashboard), which displays funda-
mental information about the router.
The bar across the top provides quick access to important information and controls:
•InternetConnections – This links to Status > InternetConnections where you can view in-depth information about your Internet sources.
• – Click on this dot to link to Internet > ConnectionManager where you can manage your WAN interfaces. This is green when there
is an active WAN connection and red when there is no active WAN connection.
• – Click on the green image of signal strength bars to open a “Modem Connection Quality” popup window that shows the strength
of your Internet signal:
•WiFiClients – Click to view a signal strength indicator for your network, “WiFi Connection Strength”:
• – The number listed in the orange block shows the number of attached clients. Click this to go to the Client List page (Status >
ClientList).
•ECM Managed – Click here to open the SystemSettings > EnterpriseCloudManager page. The dot beside it is green when the device
is managed by Enterprise Cloud Manager and red when it is not.
•Logout – Click to log out of the administration pages.
13

Figure 12: Router UI
Figure 13: Cradlepoint logo
Figure 14: Quick links
14

Figure 15: Modem connection quality
Figure 16: WiFi connection strength
ConfigurationPages
The following table shows the navigation layout of the administration pages. Click on the tabs along the top bar to reveal the following dropdown
menus.
Figure 17: Admin Page Tabs
NOTE:Thesecontentsvarybyproduct. Notallitemsareshownforallproducts.
Getting Started
Status
Network Settings
Internet
System Settings
Enterprise Cloud Manager Registration
First Time Setup
IP Passthrough Setup
Client List
Dashboard
GPS
15

GRE Tunnels
Internet Connections
QoS
Routing
Statistics
System Logs
VPN Tunnels
Content Filtering
DHCP Server
DNS
Firewall
Local Networks
MAC Filter / Logging
QoS
Routing
Connection Manager
Client Data Usage
Data Usage
GRE Tunnels
Network Mobility (NEMO)
VPN Tunnels
Administration
Certificate Management
Device Alerts
Enterprise Cloud Manager
Feature Licenses
SNMP Configuration
System Control
System Software
GettingStarted – Enable fundamental functionality through these setup wizards, including the FirstTimeSetupWizard.
Status – Displays various types of information about your router such as a list of clients that are attached to your networks (ClientList), the details
of each Internet source your router is using (InternetConnections), and a map of your router’s location (GPS). Very few changes can be made
from this tab; the primary purpose is to display information.
NetworkSettings – Provides configuration options for the networks, or LAN, created by your router. For example, create a traffic-shaping rule to
set bandwidth priorities (QoS).
16

Internet – Provides configuration options for the Internet sources, or WAN, used by the router. For example, you can set up a rule to track how
much data you are using per month on a modem (DataUsage) or set the failover order for your Internet sources (ConnectionManager).
SystemSettings – Provides broad administrative controls. For example, you can enable remote management of the router (Administration).
GettingStarted
•Enterprise Cloud Manager Registration
•First Time Setup
•IP Passthrough Setup
EnterpriseCloudManagerRegistration
Cradlepoint Enterprise Cloud Manager is Cradlepoint’s next generation management and application platform. Enterprise Cloud Manager (ECM)
integrates cloud management with your Cradlepoint devices to improve productivity, increase reliability, reduce costs, and enhance the intelligence
of your network and business operations.
Click here to learn more and sign up for a free 30-day ECM trial.
Depending on your ordering process, your devices may have already been bulk-loaded into ECM. If so, simply log in at cradlepointecm.com using
your ECM credentials and begin managing your devices seamlessly from the cloud.
If your device has not yet been loaded into your ECM account, you need to register. Log into the device administration pages and go to Getting
Started>EnterpriseCloudManagerRegistration. Enter your ECM username and password, and click on “Register”.
Figure 18: Enterprise Cloud Manager Router Registration Page
Once you have registered your device, go to [) and log in using your ECM credentials.
For more information about how to use Cradlepoint Enterprise Cloud Manager, see the following:
17

Figure 19: Enterprise Cloud Manager Login Page
18

•Getting Started
•ECM on the Knowledge Base
FirstTimeSetup
When you log in for the first time, you will be automatically directed to the FIRST TIME SETUP WIZARD, which will walk you through basic steps
to customize your router. To return to the First Time Setup Wizard after your initial login, go to GettingStarted>FirstTimeSetup in the dropdown
menu. You have the ability to configure any of the following:
• Administrator Password
• Time Zone
• Access Point Name (APN) for SIM-based modems
• Modem Authentication
• Failure Check
AdministratorPassword
Cradlepoint recommends that you change the router’s ADMINISTRATOR PASSWORD, which is used to log into the administration pages. The
administrator password is separate from the WiFi security password, although initially the DefaultPassword is used for both.
Figure 20: COR IBR350 Administrator Login Page
NOTE:IfyouplantouseyourrouterinaPCI DSS compliantenvironment, donotusethissetting. Usethe“AdvancedSecurityMode”settings
undertheRouterSecuritytabin SystemSettings>Administration instead.
TimeZone
You can select your TIME ZONE from a dropdown list. (This may be necessary to properly show time in your router log, but typically your router
will automatically determine your time zone through your browser.)
Click NEXT.
19

Figure 21: Set Time Zone
AccessPointName(APN)
Figure 22: Access Point Name
If you are using a SIM-based modem (LTE/GSM/HSPA) with your Cradlepoint router, you may need to configure the APN before it will properly
connect to your carrier. Wireless carriers offer several APNs, so check with your carrier to confirm the appropriate one to use. Some examples
include:
• AT&T: “broadband”
• T-Mobile: “epc.tmobile.com”
• Rogers LTE: “lteinternet.apn”
• Bell: “inet.bell.ca”
• TELUS: “isp.telus.com”
You can either leave this on the Default setting or select Manual and input a specific APN.
If your specific modem or SIM already has APNs programmed into it, you should leave this on the Default setting. After finishing this Wizard go to
Internet>ConnectionManager, select your modem, and edit the settings. The SIM PIN/APN tab has more available settings than are provided
here.
ModemAuthentication
Some modems require a username and password to be entered to authenticate with a carrier. Do not fill in these fields unless you are sure your
modem needs authentication.
•AuthenticationProtocol – Set this only if your service provider requires a specific protocol and the Auto option chooses the wrong one.
Select from:
–Auto
–Pap
20