Cradlepoint AER Series User manual

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 1
User Manual /AER1600/AER1650 4/19/16
AER Series
Router
AER1600 / AER1650
User Manual

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 2
User Manual /AER1600/AER1650 4/19/16
TABLE OF CONTENTS
INTRODUCTION 4
WHAT’S IN THE BOX 4
KEY FEATURES 4
WAN 4
LAN 4
WIFI (ONLY ON AER1600) 5
MANAGEMENT 5
VPN AND ROUTING 5
SECURITY 5
CLOUD OPTIMIZED IP COMMUNICATIONS 6
SPECIFICATIONS 6
ACCESSORIES 7
BUSINESS-GRADE MODEM SPECIFICATIONS 7
HARDWARE 11
SUPPORT AND WARRANTY 12
QUICK START 13
BASIC SETUP 13
ACCESSING THE ADMINISTRATION PAGES 13
FIRST TIME SETUP WIZARD 14
USING ENTERPRISE CLOUD MANAGER 14
ADMINISTRATION PAGES 15
QUICK LINKS 15
DASHBOARD 15
CONNECTION MANAGER 16
WAN INTERFACE PROFILES & PRIORITY 16
STATUS 20
INTERNET 20
CLIENT LIST 25
TUNNELS 25
FIREWALL 26
ROUTING 27

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 3
User Manual /AER1600/AER1650 4/19/16
ETHERNET 27
GPS 27
LLDP 27
SYSTEM LOGS 28
NETWORKING 29
LOCAL NETWORKS 29
VLAN INTERFACES 40
TUNNELS 40
ROUTING 53
QOS 63
DNS SERVERS 66
WIFI AS WAN 68
WAN AFFINITY 70
CLIENT DATA USAGE 72
NHRP 72
SECURITY 74
IDENTITIES 74
ZONE FIREWALL 75
CONTENT FILTERING 80
THREAT MANAGEMENT 83
CERTIFICATE MANAGEMENT 85
SYSTEM 88
ADMINISTRATION 88
ENTERPRISE CLOUD MANAGER 93
DEVICE ALERTS 94
SERIAL REDIRECTOR 95
SNMP CONFIGURATION 96
SYSTEM CONTROL 98
DIAGNOSTICS 100
SETUP WIZARDS 101
APPENDIX 104
SAFETY, REGULATORY, AND WARRANTY GUIDE 104
ROUTER COMMUNICATION/DATA USAGE 107

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 4
User Manual /AER1600/AER1650 4/19/16
WHAT’S IN THE BOX
KEY FEATURES
WAN
• LP6: LTE Advanced LTE/HSPA+ (SIM-based Auto-Carrier Selection for all North American carriers and European
operators)
• LPE: 4G LTE/HSPA+/EVDO (multi-carrier, North America)
• LP3: 4G LTE/HSPA+ (Europe, EMEA, and Australia/New Zealand)
• Dual integrated modem option (LPE only)
• Dual SIM slot in each modem
• Most models include support for active GPS
• Five 10/100/1000 Ethernet ports (WAN/LAN switchable)
• WiFi as WAN (only on AER1600)
• Failover/Failback
• Load Balancing
• Advance Modem Failure Check
• WAN Port Speed Control
• WAN/LAN Anity
• IP Passthrough
• Standby
LAN
• Five 10/100/1000 Ethernet ports (WAN/LAN switchable)
• LLDP support
• VLAN 802.1Q
• DHCP Server, Client, Relay
• DNS and DNS Proxy
• DynDNS
• Split DNS
The Cradlepoint AER1600/AER1650 is available with different modem options:
• LPE models include an embedded modem and a slot to add an MC400 modem
• LP6 and LP3 models include a bundled MC400 modem and do not include an embedded modem
• AER1600/AER1650 only include a slot for an MC400 modem and do not include an embedded modem
Also included:
• MC400 3G/4G Modem with Antennas*
• External 3G/4G mobile broadband modem antennas‡ (2) (SMA) w/ multiplexing for GPS; nger tighten only
• 12V 3A AC/DC power adapter (WARNING: using a power adapter other than the one provided may damage the
device and will void the warranty)
• Ethernet cable
• Quick Start Guide
• Mounting hardware
• Modem door screw
• Warranty/Regulatory information
* - Included with LP6 and LP3 models, optional for AER1600/AER1650 and LPE models
‡- LP6 and LP3 models only

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 5
User Manual /AER1600/AER1650 4/19/16
• UPnP
• DMZ
• Multicast/Multicast Proxy
• QoS (DSCP and Priority Queuing)
• MAC Address Filtering
WIFI (ONLY ON AER1600)
• Dual-Band Dual-Concurrent (2×2 MIMO; internal antennas)
• 802.11 (a/b/g/n/ac)
• Up to 128 connected devices (64 per channel – 2.4 GHz and 5 GHz)
• WEP Auto, WPA/WPA2 Personal, WPA2 Enterprise (WiFi)
• Hotspot/Captive Portal
• SSID-based Priority
MANAGEMENT
• OOBM (Out-of-Band Management) via USB to Serial
• Cradlepoint Enterprise Cloud Manager (ECM)2
• Web UI, API, CLI
• GPS Location
• Data Usage Alerts (router and per client)
• Advanced Troubleshooting (support)5
• Device Alerts
• SNMP
• SMS control
VPN AND ROUTING
• IPsec Tunnel – up to 20 concurrent sessions
• OpenVPN (SSL VPN)1
• L2TP1
• GRE Tunnel
• OSPF/BGP/RIP1
• Route Filters (Access Control Lists, Prex Filters, Route Maps, Communities for BGP)
• Per-Interface Routing
• Static Routing
• Policy-based Routing
• NAT-less Routing
• Virtual Server/Port Forwarding
• VTI Tunnel Support
• NEMO/DMNR1
• IPv6
• VRRP1
• STP1
• NHRP1
SECURITY
• RADIUS and TACACS+ support*
• 802.1x authentication for Wireless and Wired Networks
• Zscaler Internet Security4
• Certicate support

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 6
User Manual /AER1600/AER1650 4/19/16
SPECIFICATIONS
• ALGs
• MAC Address Filtering
• CP Secure Threat Management3
• Advanced Security Mode (local user management only)
• Per-Client Web Filtering
• IP Filtering
• Content Filtering (basic)
• Website Filtering
* - Native support for authentication. Authorization and accounting support through hotspot/captive portal services.
CLOUD OPTIMIZED IP COMMUNICATIONS
• Automated WAN Failover/Failback support
• WAN Anity and QoS allow prioritization of VoIP services
• Advanced VPN connectivity options to HQ
• SIP ALG and NAT to allow VoIP and UC communications to traverse rewall
• MAC Address Filtering
• 802.1p/q for LAN QoS segmentation and treatment of VoIP on LAN
• Private Network support (wired and 4G WAN)
• Cloud-based management2
1 – Requires an ECM PRIME subscription or an Extended Enterprise License
2 – Enterprise Cloud Manager requires a subscription
3 – Requires a CP Secure Threat Management license
4 – Requires Zscaler Internet Security License
5 - Requires CradleCare Support
CradleCare Support available with technical support, software upgrades, and advanced hardware exchange – 1-, 3-, and
5-year options.
One-year limited hardware warranty available in the US and Canada; two-year limited hardware warranty for
integrated EU products when purchased from an authorized EU distributor – extend warranty to 2, 3, or 5 years.
SUPPORT AND WARRANTY
WAN:
• Integrated LP6 Category 6 LTE Advanced LTE modem (with DC-HSPA+ failover) or LPE 4G LTE modem (with HSPA+/
EVDO/3G and 2G failover) or LP3 4G LTE modem (with HSPA+ and 2G failover)
• Embedded 4G LTE (one modem included; dual-modem option) Multi-Carrier Software-Dened radio (LPE models)
• 5 10/100/1000 Ethernet ports (cable/DSL/T1/satellite/Metro Ethernet; WAN/LAN switchable)
• WiFi* (as WAN; Metro WiFi) 2x2 MIMO 2.4 GHz or 5 GHz (802.11 a/b/g/n/ac; internal antennas)
LAN:
• Dual-band dual-concurrent WiFi* (802.11 a/b/g/n/ac)
• 5 10/100/1000 Ethernet ports (WAN/LAN switchable)
TEMPERATURE:
• 0°C to 50°C (32°F to 122°F) operating

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 7
User Manual /AER1600/AER1650 4/19/16
• −20°C to 70°C (−4°F to 158°F) storage
HUMIDITY (non-condensing):
• 10% to 85% operating
• 5% to 90% storage
MEMORY: 256 MB DRAM; 16MB SPI Flash; 256 MB NAND Flash
SIZE:
• 8.3 x 6.6 x 1.7 in (210 x 167 x 44 mm)
• 1U height for rack mount
WEIGHT: 1 lb 4.4 oz (.58 kg)
CERTIFICATIONS: FCC, WiFi Alliance, CE, IC, carrier certications
WAN TO LAN: 940 Mbps
LAN TO WAN: 947 Mbps
WIFI POWER (FCC):
• 2402-2483.5 MHz (2.4 GHz band): 28.51 dBm conducted
• 5150-5250 MHz (5 GHz band 1): 26.66 dBm conducted
• 5725-5850 MHz (5 GHz band 3): 23.54 dBm conducted
WIFI POWER (Europe/Rest of World):
• 2.4 GHz band: 19.95 dBm EIRP
• 5150-5250 MHz: 22.98 dBm EIRP
*-only on AER1600
ACCESSORIES
• Second integrated 4G LTE modem
• MC400LP6 (North America or EU)
• MC400LPE-VZ (Verizon)
• MC400LPE-AT (AT&T)
• MC400LPE-SP (Sprint)
• MC400LPE-GN (generic – for use on T-Mobile in the U.S. and Rogers, Bell, & TELUS in Canada)
• MC400LP3-EU (Europe)
• 700 MHz – 2700 MHz Wide Band Directional Antenna (Yagi/Log- Periodic) Part #: 170588-000
• 12” Mag-Mount Antenna with SMA Male Connector Part #: 170605-000
• 4” Mini Mag-Mount Antenna with SMA Male Connector Part #: 170606-000
• 2.4/5 GHz Dual-band Dual-concurrent WiFi Antenna Part #: 170628-000 (WiFi models only)
• Universal 3G/4G/LTE Modem Antenna Part #: 170649-000
• GPS Screw-Mount Antenna Part #: 170651-000
• GPS Mag-Mount Antenna Part #: 170652-000
• Multi-Band Omni-Directional Antenna Part #: 170668-000
• Indoor/Outdoor Panel Patch Part #: 170669-000
Some AER1600/AER1650 models include an embedded 4G LTE modem. See page 2 for specic models.
AER1600/AER1650 LP6 models include an integrated LTE Advanced Category 6 4G LTE modem. The LP6 modems
support SIM-Based Auto-Carrier selection so there is only one model for all of North America or EU. Simply insert the
SIM and wait for the router to automatically detect the SIM and establish a connection.
BUSINESS-GRADE MODEM SPECIFICATIONS

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 8
User Manual /AER1600/AER1650 4/19/16
The LTE bands certied for each carrier are listed below.
AER1600LP6-NA-M, AER1650LP6-NA-M, AER1600LP6-EU-M, AER1650LP6-EU-M
• Technology: LTE Advanced, HSPA+
• Downlink Rates: LTE 300 Mbps, HSPA+ 42.2 Mbps
• Uplink Rates: LTE 50 Mbps, HSPA+ 5.76 Mbps
• Frequency Bands:
• LTE Bands 1-5, 7, 8, 12, 13, 17, 20, 25, 26, 29, 30, 41
• Verizon: 2, 4, 5, 13 (XLTE support w/carrier aggregation)
• AT&T: 2, 4, 5, 12/17, 29, 30
• Sprint: 25, 26, 41 (LTE Plus Support)
• T-Mobile: 2, 4, 12 (T-Mobile Wideband LTE Support)
• Generic: all
• Carrier Aggregation:
• 1+ 8
• 2+ 2/5/12 (17 w/MFBI)/13/29
• 3+ 7/20
• 4+ 4/5/12 (17 w/MFBI)/13/29
• 5+ 2/4/30
• 7+ 3/7/20
• 8+ 1
• 12 (17 w/MFBI) + 2/4/30
• 13+ 2/4
• 20+ 3/7
• 30+ 5/12 (17 w/MFBI)
• 41+ 41
• Fallback: WCDMA/DC-HSPA+ (42/5.76 Mbps): Bands 1, 2, 3, 4, 5, 8
• Power: LTE 23 dBm +/− 1, HSPA+ 23 dBm +/− 1
• Antennas: two SMA male (plug), nger tighten only (maximum torque spec is 7 kgfcm)
• GPS: active GPS support
• SMS: SMS support
• Industry Standards & Certs: CE, FCC, GCF-CC, IC, PTCRB, AT&T, Sprint (pending certication), Verizon
Some AER1600/AER1650 models include an embedded 4G LTE modem. See page 4 for specic models.
Please note that LPE models are exible and support bands for multiple cellular providers; however, only the
frequency bands in bold below are supported by the listed provider.
AER1600LPE-VZ – 4G LTE/HSPA+/EVDO for Verizon
• Technology: LTE, HSPA+, EVDO Rev A
• Downlink Rates: LTE 100 Mbps, HSPA+ 21.1 Mbps, EVDO 3.1 Mbps (theoretical)
• Uplink Rates: LTE 50 Mbps, HSPA+ 5.76 Mbps, EVDO 1.8 Mbps (theoretical)
• Frequency Bands:
• LTE Band 2 (1900 MHz), Band 4 – AWS (1700/2100 MHz), Band 5 (850 MHz), Band 13 (700 MHz), Band 17 (700
MHz), Band 25 (1900 MHz)
• HSPA+/UMTS (850/900/1900/2100 MHz, AWS)
• GSM/GPRS/EDGE (850/900/1800/1900 MHz)
• CDMA EVDO Rev A/1xRTT (800/1900 MHz)
• Power: LTE 23 dBm +/− 1, HSPA+ 23 dBm +/− 1, EVDO 24 dBm +0.5/−1 (typical conducted)
• Antennas: two SMA male (plug), 1 dBi (LTE), 2 dBi (Cellular/PCS) gain; nger tighten only (maximum torque spec is
7 kgf-cm)
• GPS: active GPS support

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 9
User Manual /AER1600/AER1650 4/19/16
• Industry Standards & Certs: FCC, Verizon
AER1650LPE-VZ – 4G LTE/HSPA+/EVDO for Verizon
• Technology: LTE, HSPA+, EVDO Rev A
• Downlink Rates: LTE 100 Mbps, HSPA+ 21.1 Mbps, EVDO 3.1 Mbps (theoretical)
• Uplink Rates: LTE 50 Mbps, HSPA+ 5.76 Mbps, EVDO 1.8 Mbps (theoretical)
• Frequency Bands:
• LTE Band 2 (1900 MHz), Band 4 – AWS (1700/2100 MHz), Band 5 (850 MHz), Band 13 (700 MHz), Band 17 (700
MHz), Band 25 (1900 MHz)
• HSPA+/UMTS (850/900/1900/2100 MHz, AWS)
• GSM/GPRS/EDGE (850/900/1800/1900 MHz)
• CDMA EVDO Rev A/1xRTT (800/1900 MHz)
• Power: LTE 23 dBm +/− 1, HSPA+ 23 dBm +/− 1, EVDO 24 dBm +0.5/−1 (typical conducted)
• Antennas: two SMA male (plug), 1 dBi (LTE), 2 dBi (Cellular/PCS) gain; nger tighten only (maximum torque spec is
7 kgf-cm)
• GPS: active GPS support
• Industry Standards & Certs: FCC, Verizon
AER1600LPE-AT – 4G LTE/HSPA+/EVDO for AT&T
• Technology: LTE, HSPA+, EVDO Rev A
• Downlink Rates: LTE 100 Mbps, HSPA+ 21.1 Mbps, EVDO 3.1 Mbps (theoretical)
• Uplink Rates: LTE 50 Mbps, HSPA+ 5.76 Mbps, EVDO 1.8 Mbps (theoretical)
• Frequency Bands:
• LTE Band 2 (1900 MHz), Band 4 – AWS (1700/2100 MHz), Band 5 (850 MHz), Band 13 (700 MHz), Band 17 (700
MHz), Band 25 (1900 MHz)
• HSPA+/UMTS (850/900/1900/2100 MHz, AWS)
• GSM/GPRS/EDGE (850/900/1800/1900 MHz)
• CDMA EVDO Rev A/1xRTT (800/1900 MHz)
• Power: LTE 23 dBm +/− 1, HSPA+ 23 dBm +/− 1, EVDO 24 dBm +0.5/−1 (typical conducted)
• Antennas: two SMA male (plug), 1 dBi (LTE), 2 dBi (Cellular/PCS) gain; nger tighten only (maximum torque spec is
7 kgf-cm)
• GPS: active GPS support
• Industry Standards & Certs: PTCRB, FCC, IC, AT&T
AER1650LPE-AT – 4G LTE/HSPA+/EVDO for AT&T
• Technology: LTE, HSPA+, EVDO Rev A
• Downlink Rates: LTE 100 Mbps, HSPA+ 21.1 Mbps, EVDO 3.1 Mbps (theoretical)
• Uplink Rates: LTE 50 Mbps, HSPA+ 5.76 Mbps, EVDO 1.8 Mbps (theoretical)
• Frequency Bands:
• LTE Band 2 (1900 MHz), Band 4 – AWS (1700/2100 MHz), Band 5 (850 MHz), Band 13 (700 MHz), Band 17 (700
MHz), Band 25 (1900 MHz)
• HSPA+/UMTS (850/900/1900/2100 MHz, AWS)
• GSM/GPRS/EDGE (850/900/1800/1900 MHz)
• CDMA EVDO Rev A/1xRTT (800/1900 MHz)
• Power: LTE 23 dBm +/− 1, HSPA+ 23 dBm +/− 1, EVDO 24 dBm +0.5/−1 (typical conducted)
• Antennas: two SMA male (plug), 1 dBi (LTE), 2 dBi (Cellular/PCS) gain; nger tighten only (maximum torque spec is
7 kgf-cm)

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 10
User Manual /AER1600/AER1650 4/19/16
• GPS: active GPS support
• Industry Standards & Certs: PTCRB, FCC, IC, AT&T
AER1600LPE-SP – 4G LTE/HSPA+/EVDO for Sprint
• Technology: LTE, HSPA+, EVDO Rev A
• Downlink Rates: LTE 100 Mbps, HSPA+ 21.1 Mbps, EVDO 3.1 Mbps (theoretical)
• Uplink Rates: LTE 50 Mbps, HSPA+ 5.76 Mbps, EVDO 1.8 Mbps (theoretical)
• Frequency Bands:
• LTE Band 2 (1900 MHz), Band 4 – AWS (1700/2100 MHz), Band 5 (850 MHz), Band 13 (700 MHz), Band 17 (700
MHz), Band 25 (1900 MHz)
• HSPA+/UMTS (850/900/1900/2100 MHz, AWS)
• GSM/GPRS/EDGE (850/900/1800/1900 MHz)
• CDMA EVDO Rev A/1xRTT (800/1900 MHz)
• Power: LTE 23 dBm +/− 1, HSPA+ 23 dBm +/− 1, EVDO 24 dBm +0.5/−1 (typical conducted)
• Antennas: two SMA male (plug), 1 dBi (LTE), 2 dBi (Cellular/PCS) gain; nger tighten only (maximum torque spec is
7 kgf-cm)
• GPS: active GPS support
• Industry Standards & Certs: FCC, Sprint
AER1650LPE-SP – 4G LTE/HSPA+/EVDO for Sprint
• Technology: LTE, HSPA+, EVDO Rev A
• Downlink Rates: LTE 100 Mbps, HSPA+ 21.1 Mbps, EVDO 3.1 Mbps (theoretical)
• Uplink Rates: LTE 50 Mbps, HSPA+ 5.76 Mbps, EVDO 1.8 Mbps (theoretical)
• Frequency Bands:
• LTE Band 2 (1900 MHz), Band 4 – AWS (1700/2100 MHz), Band 5 (850 MHz), Band 13 (700 MHz), Band 17 (700
MHz), Band 25 (1900 MHz)
• HSPA+/UMTS (850/900/1900/2100 MHz, AWS)
• GSM/GPRS/EDGE (850/900/1800/1900 MHz)
• CDMA EVDO Rev A/1xRTT (800/1900 MHz)
• Power: LTE 23 dBm +/− 1, HSPA+ 23 dBm +/− 1, EVDO 24 dBm +0.5/−1 (typical conducted)
• Antennas: two SMA male (plug), 1 dBi (LTE), 2 dBi (Cellular/PCS) gain; nger tighten only (maximum torque spec is
7 kgf-cm)
• GPS: active GPS support
• Industry Standards & Certs: FCC, Sprint
AER1600LP3-EU – 4G LTE/HSPA+ for Europe
• Technology: LTE, HSPA+
• Downlink Rates: LTE 100 Mbps, HSPA+ 21.1 Mbps (theoretical)
• Uplink Rates: LTE 50 Mbps, HSPA+ 5.76 Mbps (theoretical)
• Frequency Bands:
• LTE Band 1 (2100 MHz), Band 3 (1800 MHz), Band 7 (2600 MHz), Band 8 (900 MHz), Band 20 (800 MHz)
• HSPA+/UMTS (800/850/900/1900/2100 MHz)
• GSM/GPRS/EDGE Quad-Band (850/900/1800/1900 MHz)
• Power: LTE Band 1/3/8/20 – 23 dBm +/− 1; LTE Band 7 – 22 dBm +/− 1, HSPA+ 23 dBm +/− 1 (typical conducted)
• Antennas: two SMA male (plug), 1 dBi (LTE), 2 dBi (Cellular/PCS) gain; nger tighten only
• GPS: active GPS support
• Industry Standards & Certs: CE, GCF-CC

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 11
User Manual /AER1600/AER1650 4/19/16
• Modem Part Number: MC400LP3
AER1650LP3-EU – 4G LTE/HSPA+ for Europe
• Technology: LTE, HSPA+
• Downlink Rates: LTE 100 Mbps, HSPA+ 21.1 Mbps (theoretical)
• Uplink Rates: LTE 50 Mbps, HSPA+ 5.76 Mbps (theoretical)
• Frequency Bands:
• LTE Band 1 (2100 MHz), Band 3 (1800 MHz), Band 7 (2600 MHz), Band 8 (900 MHz), Band 20 (800 MHz)
• HSPA+/UMTS (800/850/900/1900/2100 MHz)
• GSM/GPRS/EDGE Quad-Band (850/900/1800/1900 MHz)
• Power: LTE Band 1/3/8/20 – 23 dBm +/− 1; LTE Band 7 – 22 dBm +/− 1, HSPA+ 23 dBm +/− 1 (typical conducted)
• Antennas: two SMA male (plug), 1 dBi (LTE), 2 dBi (Cellular/PCS) gain; nger tighten only
• GPS: active GPS support
• Industry Standards & Certs: CE, GCF-CC
• Modem Part Number: MC400LP3
AER1600LPE-GN – 4G LTE/HSPA+/EVDO (generic – for use on T-Mobile in the U.S. and Rogers, Bell, & TELUS in Canada)
• Technology: LTE, HSPA+, EVDO Rev A
• Downlink Rates: LTE 100 Mbps, HSPA+ 21.1 Mbps, EVDO 3.1 Mbps (theoretical)
• Uplink Rates: LTE 50 Mbps, HSPA+ 5.76 Mbps, EVDO 1.8 Mbps (theoretical)
• Frequency Bands:
• LTE Band 2 (1900 MHz), Band 4 (AWS), Band 5 (850 MHz), Band 13 (700 MHz), Band 17 (700 MHz), Band 25
(1900 MHz)
• HSPA+/UMTS (850/900/1900/2100 MHz, AWS)
• GSM/GPRS/EDGE (850/900/1800/1900 MHz)
• CDMA EVDO Rev A/1xRTT (800/1900 MHz)
• Power: LTE 23 dBm +/− 1, HSPA+ 23 dBm +/− 1, EVDO 24 dBm +0.5/−1 (typical conducted)
• Antennas: two SMA male (plug), 1 dBi (LTE), 2 dBi (Cellular/PCS) gain; nger tighten only (maximum torque spec is
7 kgf-cm)
• GPS: active GPS support
• Industry Standards & Certs: PTCRB, FCC, IC
AER1650LPE-GN – 4G LTE/HSPA+/EVDO (generic – for use on T-Mobile in the U.S. and Rogers, Bell, & TELUS in Canada)
• Technology: LTE, HSPA+, EVDO Rev A
• Downlink Rates: LTE 100 Mbps, HSPA+ 21.1 Mbps, EVDO 3.1 Mbps (theoretical)
• Uplink Rates: LTE 50 Mbps, HSPA+ 5.76 Mbps, EVDO 1.8 Mbps (theoretical)
• Frequency Bands:
• LTE Band 2 (1900 MHz), Band 4 (AWS), Band 5 (850 MHz), Band 13 (700 MHz), Band 17 (700 MHz), Band 25
(1900 MHz)
• HSPA+/UMTS (850/900/1900/2100 MHz, AWS)
• GSM/GPRS/EDGE (850/900/1800/1900 MHz)
• CDMA EVDO Rev A/1xRTT (800/1900 MHz)
• Power: LTE 23 dBm +/− 1, HSPA+ 23 dBm +/− 1, EVDO 24 dBm +0.5/−1 (typical conducted)
• Antennas: two SMA male (plug), 1 dBi (LTE), 2 dBi (Cellular/PCS) gain; nger tighten only (maximum torque spec is
7 kgf-cm)
• GPS: active GPS support
• Industry Standards & Certs: PTCRB, FCC, IC

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 12
User Manual /AER1600/AER1650 4/19/16
3G/4G Antenna Connectors
(SMA)
GPS Connector (SMA)
3G/4G Antenna Connectors
(SMA)
GPS Connector (SMA)
Specications subject to change without notice.
Removable MC400 Modem
Embedded LTE Modem
HARDWARE LEDs
USB 2.0
Port
Cable Guide 10/100/1000
Ethernet Port
(Congurable:
LAN or WAN
Default: WAN)
10/100/1000 Ethernet
Ports (Congurable: LAN
or WAN
Default: LAN
Reset Button Lock Slot
Power SwitchPower Port

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 13
User Manual /AER1600/AER1650 4/19/16
QUICK START
BASIC SETUP
1. Insert an activated SIM
The Cradlepoint AER1600/AER1650 requires a SIM with an activated wireless broadband data plan. Contact your carrier
for details about selecting a data plan and about the process for provisioning your SIM. Once you have an activated
SIM:
• For AER1600LPE/AER1650LPE only: Open embedded modem SIM cover on bottom of router and insert activated
SIM into the slot marked SIM 1 (use the other slot, SIM 2, for a secondary/backup SIM). Close embedded modem
SIM cover. NOTE: Router will not operate if embedded modem SIM cover is not fully closed.
• For all models with removable MC400 modem: Remove MC400 cover from side of router and insert activated
SIM(s) into removable MC400 modem (optional for AER1600LPE/AER1650LPE and AER1600/AER1650). Insert the
SIM card into the slot marked SIM 1 (use the other slot, SIM 2, for a secondary/backup SIM). Insert the card with
the notch-end rst and the gold contacts facing down. Reinsert the removable MC400 modem, replace cover, and
insert the included security screw if desired. NOTE: To remove modem, remove MC400 cover, attach included modem
antennas (finger-tighten only), and pull modem straight out.
2. Attach included modem antennas
Antennas are nger-tighten only. Attach to connectors marked MAIN and AUX.
3. Connect the power source
Attach the included adapter to the device and to a power source and loop cable through cable retention slot. Then turn
the power switch on (I).
4. Connect to a computer or other network equipment
Connect via Ethernet or WiFi for local management.
ACCESSING THE ADMINISTRATION PAGES
Once you are connected, open the Cradlepoint AER1600’s GUI-based administration
pages to make conguration changes to your router.
1. Open a browser window and type “cp/” or “192.168.0.1” in the address bar. Press
ENTER/RETURN.
2. When prompted for your password, type the eight character DEFAULT PASSWORD
found on the product label.
NOTE: The product label shown is an example only: your DEFAULT PASSWORD and SSID will be unique.
It’s possible – and more ecient – to do all your conguration changes through
Cradlepoint Enterprise Cloud Manager (ECM) without logging into the local
administration pages. Set up a group of routers and set the conguration for all of
them at once. See below for more information about ECM.

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 14
User Manual /AER1600/AER1650 4/19/16
FIRST TIME SETUP WIZARD
When you log in for the rst time, you will be automatically directed to the FIRST TIME SETUP WIZARD, which will
walk you through the steps to customize your Cradlepoint AER1600. You have the ability to congure any of the
following:
• Administrator Password
• Time Zone
• WiFi Network Name
• Security Mode
• Access Point Name (APN) for SIM-based modems
• Modem Authentication
• Failure Check
If you are currently using the router’s WiFi network, you will need to reconnect your devices to the network using the
newly established wireless network name and password.
NOTE: To return to the First Time Setup Wizard after your initial login, select SYSTEM from the navigation bar, expand
Setup Wizard,and select First Time Setup.
USING ENTERPRISE CLOUD MANAGER
Rapidly deploy and dynamically manage networks at geographically distributed stores and branch locations with
Enterprise Cloud Manager, Cradlepoint’s next generation management and application platform. Enterprise Cloud
Manager (ECM) integrates cloud management with your Cradlepoint devices to improve productivity, increase
reliability, reduce costs, and enhance the intelligence of your network and business operations.
Click here to sign up for a free 30-day ECM trial.
Depending on your ordering process, your devices may have already been bulk-loaded into ECM. If so, simply log in at
cradlepointecm.com using your ECM credentials and begin managing your devices seamlessly from the cloud.
If your device has not yet been loaded into your ECM account, you need to register. Log into the device administration
pages and select Enterprise Cloud Manager from the SYSTEM menu. Enter your ECM username and password, and
click on “Register”.
Once you have registered your device, go to cradlepointecm.com and log in using your ECM credentials.
For more information about how to use Cradlepoint Enterprise Cloud Manager, see the following:
• Getting Started
• ECM on the Knowledge Base

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 15
User Manual /AER1600/AER1650 4/19/16
ADMINISTRATION PAGES
Quick Links
Dashboard
Connection Manager
Status
Networking
Security
System
QUICK LINKS
DASHBOARD
The Dashboard is a centralized location for basic
information about the status of your router. The
areas include:
• Device Information
• Ethernet WAN*
• Modems*
• WWAN*
• Ethernet LAN*
• WiFi LAN*
*-To quickly edit settings for any of these areas,
click on the pencil icon ( ) in the top-right of the
desired dialog box.
You may return to the Dashboard at any time by
clicking on DASHBOARD from the left menu or by
clicking on the Cradlepoint logo at the top-left of
the screen.
Quick Links allows you to bookmark your most commonly-used settings. Simply click on the bookmark icon ( ) to add
an item to your Quick Links menu. To remove an item from your Quick Links menu, select the item and click on the
remove bookmark icon ( ).
Quick Links Menu Add Quick Link Delete Quick Link

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 16
User Manual /AER1600/AER1650 4/19/16
CONNECTION MANAGER
The router can establish an uplink via Ethernet, WiFi as WAN, or 3G/4G modems (removable or external USB). If the
primary WAN connection fails, the router will automatically attempt to bring up a new link on another device: this
feature is called failover. If Load Balance is enabled, multiple WAN devices may establish a link concurrently.
This is a list of the available interfaces used to access the Internet. You can enable, stop, or start devices from this
section. Drag the priority icon ( ) up or down to set the interface the router uses by default and the order that it
allows failover.
WAN INTERFACE PROFILES & PRIORITY
Availability Key
Enable Load Balance
On Demand
WAN Verify Data Usage
FailbackStandby
STANDBY
Standby is used to decrease failover time from one WAN interface to another. When Standby is enabled for a WAN
prole or interface, the relevant interfaces are kept in a connected-but-idle (minimal, non-routed trac) state. When
the current WAN connection is disrupted, the trac will failover to the next priority WAN. If that interface is on
Standby, the connection is already established and failover will take much less time.
Note that the current connected interface(s) is/are indicated by a green connection state. For interfaces on Standby,
the interface is indicated by a yellow connection state. If the interface is indicated in red, the interface is not currently
connected or in Standby.
Standby is used to enable faster failover times only. If you want to manage trac to a specic WAN interface, you
will need to use WAN Anity. If WAN Anity is enabled for a particular prole or interface, do not enable Standby for
that prole or interface as the failover results may vary and be unexpected.

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 17
User Manual /AER1600/AER1650 4/19/16
LOAD BALANCE
To enable Load Balancing, select the check box for each desired device. If this is enabled, the router will use multiple
WAN interfaces to increase the data transfer throughput by using any connected WAN interface consecutively.
Selecting Load Balance will automatically start the WAN interface and add it to the pool of WAN interfaces to use
for data transfer. Turning o Load Balance for an active WAN interface may require the user to restart any current
browsing session.
From WAN Management, select the Load Balance Algorithm from
the following dropdown options:
• Round-Robin: Evenly distribute each session to the available
WAN connections.
• Rate: Distribute load based on the current upload and
download rates. A WAN device’s upload and download
bandwidth values can be set in Internet > Connection
Manager.
• Spillover: This was the default algorithm in older (version
3) rmware. Load is always given to devices with the most
available bandwidth. The estimated bandwidth rate is based on a combination of the upload and download
conguration values and the observed capabilities of the device.
• Data Usage: This mode works in concert with the Data Usage feature (Internet > Data Usage).
The router will make a best eort to keep data usage between interfaces at a similar percentage of the assigned data
cap in the data usage rule for each interface, rather than distributing sessions based solely on bandwidth. For proper
functioning you need to create data usage rules for each WAN device you will be load balancing. Make certain to select
the “Use with Load Balancing” checkbox in the data usage rule editor.
ON DEMAND
Typically, modem connections are not always on.
When the On Demand mode is selected a connection
to the Internet is made as needed. When On
Demand is not selected a connection to the Internet
is always maintained.
WAN VERIFY
If this is enabled, the router will check that the highest priority active WAN interface can get to the Internet even if
the WAN connection is not actively being used. If the interface goes down, the router will switch to the next highest
priority interface available. If this is not selected, the router will still failover to the next highest priority interface but
only after the user has attempted to get out to the Internet and failed.
Idle Check Interval: The amount of time between each check. (Default: 30 seconds. Range: 10-3600 seconds.)
Monitor while connected: (Default: O) Select from the following dropdown options:
• Passive DNS (modem only): The router will take no action until data is detected that is destined for the WAN.

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 18
User Manual /AER1600/AER1650 4/19/16
FAILBACK
This is used to congure failback, which is the ability to go back to a higher priority WAN interface if it regains
connection to its network.
Select the Failback Mode from the following
options:
• Usage
• Time
• Disabled
Usage Threshold: Fail back based on the amount
of data passed over time. This is a good setting
for when you have a dual-mode EVDO/WiMAX
modem and you are going in and out of WiMAX
coverage. If the router has failed over to EVDO it
will wait until you have low data usage before bringing down the EVDO connection to check if a WiMAX connection can
be made.
• High (Rate: 80 KB/s. Time Period: 30 seconds.)
• Normal (Rate: 20 KB/s. Time Period: 90 seconds.)
• Low (Rate: 10 KB/s. Time Period: 240 seconds.)
• Custom (Rate range: 1-100 KB/s. Time Period range: 10-300 seconds.)
Time: Fail back only after a set period of time. (Default: 90 seconds. Range: 10-300 seconds.) This is a good setting if
you have a primary wired WAN connection and only use a modem for failover when your wired connection goes down.
This ensures that the higher priority interface has remained online for a set period of time before it becomes active
(in case the connection is dropping in and out, for example).
Disabled: Deactivate failback mode.
When this data is detected, the data will be
sent and the router will check for received
data for two seconds. If no data is received the
router behaves as described below under Active
DNS.
• Active DNS (modem only): A DNS request will be
sent to the DNS servers. If no data is received,
the DNS request will be retried four times at
ve-second intervals. (The rst two requests
will be directed at the Primary DNS server and
the second two requests will be directed at
the Secondary DNS server.) If still no data is
received, the device will be disconnected and
failover will occur.
• Active Ping: A ping request will be sent to the Ping Target. If no data is received, the ping request will be retried
four times at ve-second intervals. If still no data is received, the device will be disconnected and failover will
occur. When “Active Ping” is selected, the next line gives an estimate of data usage in this form: “Active Ping
could use as much as 9.3 MB of data per month.” This amount depends on the Idle Check Interval.
• O: Once the link is established the router takes no action to verify that it is still up.

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 19
User Manual /AER1600/AER1650 4/19/16
DATA USAGE
Data Usage displays upload and download trac for each LAN client. Check Monitor Monthly (or Weekly or Daily)
Usage to begin tracking this information. This data is not retained between router reboots.
For Monthly and Weekly you are able to specify the day to start each cycle (e.g. the 1st or Tuesday, respectively).
Usage Cap: Enter a Cap amount in Megabytes. 1024
Megabyte is equal to 1 Gigabyte.
Use with Load Balancing: When checked, the Load
Balancing feature is allowed to use the thresholds and
metrics of this rule when making balance decisions. This
causes Load Balancing to spread the data usage between
interfaces according to the assigned usage rather than
bandwidth. This is a best eort to keep all interfaces with
these rules at a similar percentage utilization of data (e.g.
10%, 50%, 90%) as the cycle progresses, rather than quickly
using 100% of a fast 1GB capped interface while using only
a fraction of a slow 10GB capped interface, thus leaving
the rest of the cycle with only the slow interface. The Data
Usage algorithm on the WAN Anity/Load Balancing page
must be selected or this checkbox has no eect.
Shutdown on Cap: When checked, the WAN device will
shutdown when the assigned usage is reached. A cycle
reset or a rule deletion will re-enable the device.
Alert on Cap: An email alert will be generated and sent when the assigned data cap is reached. NOTE: The SMTP mail
server must be congured in System > Device Alerts.
Custom Alerts: Check to enable custom alerts at specied percentage of
usage cap.
Custom Alert Percentages: Example: “50,80,90,110” (values can exceed
100%) (Triggers alerts when 50, 80, 90, 110% of usage cap is used)
NOTE: To enable data usage, check Data Usage Enabled from WAN
Management.
Immediate Mode: Fail back immediately whenever a higher priority interface is plugged in or when there is a priority
change. Immediate failback returns you to the use of your preferred Internet source more quickly which may have
advantages such as reducing the cost of a failover data plan, but it may cause more interruptions in your network than
Usage or Time modes.

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 20
User Manual /AER1600/AER1650 4/19/16
STATUS
Internet
Client List
Tunnels
Firewall
Routing
Ethernet
GPS
LLDP
System Logs
INTERNET
CONNECTIONS
Select your device to reveal
detailed information about the
following device properties:
• Summary
• Modem
• Cellular Network
• General Information
• IPv4 Information
• Statistics